SEV start VM help

2024-10-24 Thread 435285706--- via Devel
Hi, I'm new to libvirt. I recently tried to start a sev vm with secret injection, and the documentation on this is very good, could you provide me with the steps to start a VM with libvirt's SEV, or documentation on this, thank you very much!

Entering freeze for libvirt-10.9.0

2024-10-24 Thread Jiri Denemark
I have just tagged v10.9.0-rc1 in the repository and pushed signed tarballs to https://download.libvirt.org/ Please give the release candidate some testing and in case you find a serious issue which should have a fix in the upcoming release, feel free to reply to this thread to make sure the issue

[PATCH 4/4] NEWS: Add the news for CVE-2024-4418

2024-10-24 Thread Han Han
Signed-off-by: Han Han --- NEWS.rst | 12 1 file changed, 12 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index cdac735c6e..c3d80ad29d 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -309,6 +309,18 @@ v10.5.0 (2024-07-01) v10.4.0 (2024-06-03) +* **Security** + +

[PATCH 3/4] NEWS: Add the news for CVE-2024-2494

2024-10-24 Thread Han Han
Signed-off-by: Han Han --- NEWS.rst | 12 1 file changed, 12 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 2c1e232707..cdac735c6e 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -462,6 +462,18 @@ v10.3.0 (2024-05-02) v10.2.0 (2024-04-02) +* **Security** + +

[PATCH 1/4] NEWS: qemu: Add support for hyperv enlightenments features

2024-10-24 Thread Han Han
Signed-off-by: Han Han --- NEWS.rst | 11 +++ 1 file changed, 11 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 56adf8df8b..07ccb30887 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -169,6 +169,17 @@ v10.7.0 (2024-09-02) domain XML for descendants of the generic PC machine type (``i4

[PATCH 2/4] NEWS: cpu_map: Add the EPYC-Genoa cpu mode

2024-10-24 Thread Han Han
Signed-off-by: Han Han --- NEWS.rst | 4 1 file changed, 4 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 07ccb30887..2c1e232707 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -852,6 +852,10 @@ v9.8.0 (2023-10-02) ... + * cpu_map: Add the EPYC-Genoa cpu model + +Thi

[PATCH 0/4] Add news for recent features and CVEs

2024-10-24 Thread Han Han
Han Han (4): NEWS: qemu: Add support for hyperv enlightenments features NEWS: cpu_map: Add the EPYC-Genoa cpu mode NEWS: Add the news for CVE-2024-2494 NEWS: Add the news for CVE-2024-4418 NEWS.rst | 39 +++ 1 file changed, 39 insertions(+) -- 2.47.0

[PATCH v2] network: add rule to nftables backend that zeroes checksum of DHCP responses

2024-10-24 Thread Laine Stump
Many long years ago (April 2010), soon after "vhost" in-kernel packet processing was added to the virtio-net driver, people running RHEL5 virtual machines with a virtio-net interface connected via a libvirt virtual network noticed that when vhost packet processing was enabled, their VMs could no lo

Re: [PATCH v1] tests: add capabilities for QEMU 9.1.0 on s390x

2024-10-24 Thread Jiri Denemark
On Wed, Oct 23, 2024 at 11:48:14 +0200, Boris Fiuczynski wrote: > On 10/18/24 13:37, Shalini Chellathurai Saroja wrote: > > Let us introduce the xml and reply files for QEMU 9.1.0 on s390x. > > > > Signed-off-by: Shalini Chellathurai Saroja > > Reviewed-by:Boris Fiuczynski > > > > The replies and

Re: [PATCH (RFC and a half?)] network: add rule to nftables backend that zeroes checksum of DHCP responses

2024-10-24 Thread Laine Stump
On 10/24/24 2:12 PM, Laine Stump wrote: On 10/24/24 12:36 PM, Daniel P. Berrangé wrote: [...] AFAIR, it isn't actually a bug with virtio-net usage as this last bit suggests. Rather it is a result of feature negotiation with QEMU on the host, whereby the guest & QEMU mutually agree to turn off

Re: [PATCH (RFC and a half?)] network: add rule to nftables backend that zeroes checksum of DHCP responses

2024-10-24 Thread Laine Stump
On 10/24/24 12:36 PM, Daniel P. Berrangé wrote: [...] AFAIR, it isn't actually a bug with virtio-net usage as this last bit suggests. Rather it is a result of feature negotiation with QEMU on the host, whereby the guest & QEMU mutually agree to turn off checksums because they are redundant when

Re: [PATCH (RFC and a half?)] network: add rule to nftables backend that zeroes checksum of DHCP responses

2024-10-24 Thread Daniel P . Berrangé
On Thu, Oct 24, 2024 at 05:36:10PM +0100, Daniel P. Berrangé wrote: > On Mon, Oct 21, 2024 at 12:14:38AM -0400, Laine Stump wrote: > > After some discussion with Phil Sutter and Eric Garver (nftables > > people), they suggested that, while nftables doesn't have an action > > that will *compute* the

Re: [PATCH (RFC and a half?)] network: add rule to nftables backend that zeroes checksum of DHCP responses

2024-10-24 Thread Daniel P . Berrangé
On Thu, Oct 24, 2024 at 06:42:55PM +0100, Daniel P. Berrangé wrote: > On Thu, Oct 24, 2024 at 05:36:10PM +0100, Daniel P. Berrangé wrote: > > On Mon, Oct 21, 2024 at 12:14:38AM -0400, Laine Stump wrote: > > > After some discussion with Phil Sutter and Eric Garver (nftables > > > people), they sugge

Re: [PATCH (RFC and a half?)] network: add rule to nftables backend that zeroes checksum of DHCP responses

2024-10-24 Thread Daniel P . Berrangé
On Mon, Oct 21, 2024 at 12:14:38AM -0400, Laine Stump wrote: > Many long years ago (April 2010), soon after "vhost" in-kernel packet > processing was added to the virtio-net driver, people running RHEL5 > virtual machines with a virtio-net interface connected via a libvirt > virtual network noticed

[PATCH 3/3] qemu: add RISC-V 'aia' command line

2024-10-24 Thread Daniel Henrique Barboza
The 'aia' feature is added as a machine type option for the 'virt' RISC-V machine, e.g. "-machine virt,aia=". Signed-off-by: Daniel Henrique Barboza --- src/qemu/qemu_command.c | 5 +++ ...cv64-virt-features-aia.riscv64-latest.args | 31 +++ ...scv64-virt-f

[PATCH 2/3] conf,qemu: implement RISC-V 'aia' virt domain feature

2024-10-24 Thread Daniel Henrique Barboza
This feature is implemented as a string that can range from "none", "aplic" and "aplic-imsic". If the feature isn't present in the domain XML the hypervisor default will be used. For QEMU, at least up to 9.2, the default is "none". Signed-off-by: Daniel Henrique Barboza --- docs/formatdomain.rs

[PATCH 1/3] qemu: add capability for RISC-V AIA feature

2024-10-24 Thread Daniel Henrique Barboza
AIA (Advanced Interrupt Architecture) support was introduced in QEMU 7.0 for the 'virt' machine type. It allows the guest to choose from a more modern interrupt model than the default (CLINT - Core Logical Interrupt Controller). Signed-off-by: Daniel Henrique Barboza --- src/qemu/qemu_capabiliti

Re: [PATCH v2 18/20] meson: build contrib/plugins with meson

2024-10-24 Thread Pierrick Bouvier
On 10/23/24 01:57, Alex Bennée wrote: Pierrick Bouvier writes: On 10/22/24 03:56, Alex Bennée wrote: From: Pierrick Bouvier Tried to unify this meson.build with tests/tcg/plugins/meson.build but the resulting modules are not output in the right directory. Originally proposed by Anton Kochkov

Re: [PATCH v2 18/20] meson: build contrib/plugins with meson

2024-10-24 Thread Pierrick Bouvier
On 10/22/24 03:56, Alex Bennée wrote: From: Pierrick Bouvier Tried to unify this meson.build with tests/tcg/plugins/meson.build but the resulting modules are not output in the right directory. Originally proposed by Anton Kochkov, thank you! Solves: https://gitlab.com/qemu-project/qemu/-/issu