Re: [libvirt] adding smartcard support to libvirt

2011-01-06 Thread Alon Levy
On Wed, Jan 05, 2011 at 12:25:58PM -0700, Eric Blake wrote: On 01/04/2011 02:17 AM, Alon Levy wrote: [focusing on the spicevmc chardev aspect] domain... devices smartcard mode='passthrough' name='xyz' serial type='spicevmc'/ /smartcard /devices /domain

Re: [libvirt] adding smartcard support to libvirt

2011-01-06 Thread Alon Levy
On Wed, Jan 05, 2011 at 02:55:55PM -0700, Eric Blake wrote: On 01/05/2011 02:09 PM, Alon Levy wrote: So, I'm thinking that this XML representation matches the spicevmc chardev: devices channel type='spicevmc'/ source port='5903' tlsPort='5904' autoport='no' listen='127.0.0.1'/

Re: [libvirt] adding smartcard support to libvirt

2011-01-06 Thread Eric Blake
On 01/06/2011 04:33 AM, Alon Levy wrote: Hmm, right now, the only use of spice in XML is under graphics type='spice', and it is the graphics element that contains port, tlsPort, autoport, and listen arguments. So we may need to revisit that, and have some way to use a single location for

Re: [libvirt] adding smartcard support to libvirt

2011-01-06 Thread Daniel P. Berrange
On Thu, Jan 06, 2011 at 08:05:55AM -0700, Eric Blake wrote: On 01/06/2011 04:33 AM, Alon Levy wrote: Hmm, right now, the only use of spice in XML is under graphics type='spice', and it is the graphics element that contains port, tlsPort, autoport, and listen arguments. So we may need to

Re: [libvirt] adding smartcard support to libvirt

2011-01-05 Thread Eric Blake
On 01/04/2011 02:17 AM, Alon Levy wrote: [focusing on the spicevmc chardev aspect] domain... devices smartcard mode='passthrough' name='xyz' serial type='spicevmc'/ /smartcard /devices /domain maps to qemu -chardev spicevmc,id=smartcard,name=xyz -usb -device usb-ccid

Re: [libvirt] adding smartcard support to libvirt

2011-01-05 Thread Eric Blake
On 01/05/2011 02:09 PM, Alon Levy wrote: So, I'm thinking that this XML representation matches the spicevmc chardev: devices channel type='spicevmc'/ source port='5903' tlsPort='5904' autoport='no' listen='127.0.0.1'/ I got you until now - but what's with the port/tlsPort - all of

Re: [libvirt] adding smartcard support to libvirt

2011-01-05 Thread Eric Blake
On 01/03/2011 11:50 AM, Eric Blake wrote: domain... devices smartcard mode='host-certificates' certificate id='1' path='cert1'/ certificate id='2' path='cert2'/ certificate id='3' path='cert3'/ /smartcard /devices /domain Slight tweak - filenames can be

Re: [libvirt] adding smartcard support to libvirt

2011-01-05 Thread Eric Blake
On 01/05/2011 04:59 PM, Eric Blake wrote: On 01/03/2011 11:50 AM, Eric Blake wrote: domain... devices smartcard mode='host-certificates' certificate id='1' path='cert1'/ certificate id='2' path='cert2'/ certificate id='3' path='cert3'/ /smartcard /devices

Re: [libvirt] adding smartcard support to libvirt

2011-01-04 Thread Alon Levy
On Mon, Jan 03, 2011 at 11:50:18AM -0700, Eric Blake wrote: [adding the public list for feedback on new XML. Background: Alon is working on adding some new command line arguments to qemu to make it possible to share smartcard access between a host and its virtual guests; while this is not

Re: [libvirt] adding smartcard support to libvirt

2011-01-03 Thread Eric Blake
[adding the public list for feedback on new XML. Background: Alon is working on adding some new command line arguments to qemu to make it possible to share smartcard access between a host and its virtual guests; while this is not upstream yet, libvirt should be prepared to handle the new command