[PATCH v4 2/3] selinux: Remove 'make' dependency

2021-04-30 Thread Vit Mojzis
Compile the policy using a script executed by meson. Generate 2 versions of the binary policy to allow installation to systems with any selinux type (targeted, mls and minimum). Signed-off-by: Vit Mojzis --- Changes: - Hide errors regarding duplicate definition of interfaces libvirt.spec.in

[PATCH v4 3/3] [DO NOT MERGE] Install selinux-policy-devel in test environment

2021-04-30 Thread Vit Mojzis
Temporary commit for testing purposes. The change needs to be done in https://gitlab.com/libvirt/libvirt-ci/-/blob/master/guests/lcitool/lcitool/ansible/vars/projects/libvirt.yml Signed-off-by: Vit Mojzis --- ci/containers/centos-8.Dockerfile | 1 +

[PATCH v4 1/3] Add SELinux policy for virt

2021-04-30 Thread Vit Mojzis
From: Nikola Knazekova SELinux policy was created for: Hypervisor drivers: - virtqemud (QEMU/KVM) - virtlxcd (LXC) - virtvboxd (VirtualBox) Secondary drivers: - virtstoraged (host storage mgmt) - virtnetworkd (virtual network mgmt) - virtinterface (network interface mgmt) - virtnodedevd

Re: [PATCH v2] Add SELinux policy for virt

2021-04-30 Thread Vit Mojzis
On 4/26/21 7:31 PM, Daniel P. Berrangé wrote: On Wed, Apr 07, 2021 at 06:14:58AM -0700, Vit Mojzis wrote: Sorry for the long delay. This is our first request to ship a policy for multiple selinux stores (targeted, mls and minimum). Changes: * Replace all selinux-policy-%{policytype}

[libvirt PATCH] virnetdevbridge: Ignore EEXIST when adding an entry to fdb

2021-04-30 Thread Jiri Denemark
When updating entries in a bridge forwarding database (i.e., when macTableManager='libvirt' is configured for the bridge), we may end up in a situation when the entry we want to add is already present. Let's just ignore the error in such a case. This fixes an error to resume a domain when fdb

Re: [PATCH 3/3] qemu: Build command line for object input-linux

2021-04-30 Thread Peter Krempa
On Fri, Apr 30, 2021 at 14:16:17 +0200, Kristina Hanicova wrote: > Resolves: https://gitlab.com/libvirt/libvirt/-/issues/142 > > Signed-off-by: Kristina Hanicova > --- > src/qemu/qemu_command.c | 26 +- > .../input-linux.x86_64-latest.args| 34

Re: [PATCH 2/3] conf: Parse/format XML input type 'linux'

2021-04-30 Thread Jonathon Jongsma
On Fri, 2021-04-30 at 14:16 +0200, Kristina Hanicova wrote: > Signed-off-by: Kristina Hanicova > --- >  docs/formatdomain.rst    | 30 +++- >  docs/schemas/domaincommon.rng    | 20 >  src/conf/domain_audit.c  |  1 + >  src/conf/domain_conf.c 

Re: [PATCH 2/3] conf: Parse/format XML input type 'linux'

2021-04-30 Thread Daniel P . Berrangé
On Fri, Apr 30, 2021 at 02:16:16PM +0200, Kristina Hanicova wrote: > Signed-off-by: Kristina Hanicova > --- > docs/formatdomain.rst| 30 +++- > docs/schemas/domaincommon.rng| 20 > src/conf/domain_audit.c | 1 + >

[PATCH 3/3] qemu: Build command line for object input-linux

2021-04-30 Thread Kristina Hanicova
Resolves: https://gitlab.com/libvirt/libvirt/-/issues/142 Signed-off-by: Kristina Hanicova --- src/qemu/qemu_command.c | 26 +- .../input-linux.x86_64-latest.args| 34 +++ 2 files changed, 59 insertions(+), 1 deletion(-) create mode

[PATCH 0/3] Introduce

2021-04-30 Thread Kristina Hanicova
Kristina Hanicova (3): qemu_capabilities: Add QEMU_CAPS_INPUT_LINUX conf: Parse/format XML input type 'linux' qemu: Build command line for object input-linux docs/formatdomain.rst | 30 + docs/schemas/domaincommon.rng | 20 ++

[PATCH 2/3] conf: Parse/format XML input type 'linux'

2021-04-30 Thread Kristina Hanicova
Signed-off-by: Kristina Hanicova --- docs/formatdomain.rst| 30 +++- docs/schemas/domaincommon.rng| 20 src/conf/domain_audit.c | 1 + src/conf/domain_conf.c | 61 src/conf/domain_conf.h

[PATCH 1/3] qemu_capabilities: Add QEMU_CAPS_INPUT_LINUX

2021-04-30 Thread Kristina Hanicova
Signed-off-by: Kristina Hanicova --- src/qemu/qemu_capabilities.c | 2 ++ src/qemu/qemu_capabilities.h | 1 + tests/qemucapabilitiesdata/caps_2.10.0.aarch64.xml | 1 + tests/qemucapabilitiesdata/caps_2.10.0.ppc64.xml | 1 +

Re: [PATCH] qemucapabilitiesdata: Update x86_64 capabilities for qemu-6.0 release

2021-04-30 Thread Peter Krempa
On Fri, Apr 30, 2021 at 01:55:29 -0700, Andrea Bolognani wrote: > On Fri, Apr 30, 2021 at 09:33:24AM +0200, Peter Krempa wrote: > > Update to the final state now that qemu 6.0 was released. > > > > Notable changes are the addition of 'EPYC-Rome-v2' cpu type and removal > > of 'query-netdev' which

Re: [PATCH] qemucapabilitiesdata: Update x86_64 capabilities for qemu-6.0 release

2021-04-30 Thread Andrea Bolognani
On Fri, Apr 30, 2021 at 09:33:24AM +0200, Peter Krempa wrote: > Update to the final state now that qemu 6.0 was released. > > Notable changes are the addition of 'EPYC-Rome-v2' cpu type and removal > of 'query-netdev' which we didn't use. > > The rest is the usual churn caused by random

Re: [PATCH] virtio-blk: drop deprecated scsi=on|off property

2021-04-30 Thread Peter Krempa
On Fri, Apr 30, 2021 at 09:42:05 +0200, Markus Armbruster wrote: > Eduardo Habkost writes: > > > On Thu, Apr 29, 2021 at 04:52:21PM +0100, Stefan Hajnoczi wrote: > >> The scsi=on|off property was deprecated in QEMU 5.0 and can be removed > >> completely at this point. > >> > >> Drop the

Re: [PATCH] virtio-blk: drop deprecated scsi=on|off property

2021-04-30 Thread Markus Armbruster
Eduardo Habkost writes: > On Thu, Apr 29, 2021 at 04:52:21PM +0100, Stefan Hajnoczi wrote: >> The scsi=on|off property was deprecated in QEMU 5.0 and can be removed >> completely at this point. >> >> Drop the scsi=on|off option. It was only available on Legacy virtio-blk >> devices. Linux v5.6