Re: [libvirt] [PATCH 13/18] tpm: Parse the capabilities supported by swtpm and swtpm_setup

2019-07-10 Thread Stefan Berger
On 7/9/19 4:24 PM, Marc-André Lureau wrote: On Tue, Jul 9, 2019 at 9:24 PM Stefan Berger wrote: Run 'swtpm socket --print-capabilities' and 'swtpm_setup --print-capabilities' to get the JSON object of the features the programs are supporting and parse them into a bitmap. Signed-off-by: Stefan

Re: [libvirt] [PATCH 14/18] tpm: Use fd to pass password to swtpm_setup and swtpm

2019-07-10 Thread Stefan Berger
On 7/9/19 4:25 PM, Marc-André Lureau wrote: On Tue, Jul 9, 2019 at 9:24 PM Stefan Berger wrote: Allow vTPM state encryption when swtpm_setup and swtpm support passing a passphrase using a file descriptor. This patch enables the encryption of the vTPM state only. It does not encrypt the state

Re: [libvirt] Problem configuring selective dropping of root

2019-07-10 Thread Stephan von Krawczynski
On Wed, 10 Jul 2019 09:56:35 +0200 Pavel Hrdina wrote: > On Wed, Jul 10, 2019 at 12:01:18AM +0200, Stephan von Krawczynski wrote: > > On Tue, 9 Jul 2019 14:26:08 +0200 > > Pavel Hrdina wrote: > > > > > [...] > > > > > > In addition if you would like to have only one VM as root:root you > >

Re: [libvirt] Problem configuring selective dropping of root

2019-07-10 Thread Pavel Hrdina
On Wed, Jul 10, 2019 at 12:01:18AM +0200, Stephan von Krawczynski wrote: > On Tue, 9 Jul 2019 14:26:08 +0200 > Pavel Hrdina wrote: > > > [...] > > > > In addition if you would like to have only one VM as root:root you > > should keep the default config as nobody:kvm and use the root:root for >

Re: [libvirt] [jenkins-ci PATCH] guests: Always install the freshest point release

2019-07-10 Thread Andrea Bolognani
On Tue, 2019-07-09 at 18:48 +0200, Erik Skultety wrote: > On Tue, Jul 09, 2019 at 06:15:39PM +0200, Andrea Bolognani wrote: > > diff --git a/guests/host_vars/libvirt-debian-10/install.yml > > b/guests/host_vars/libvirt-debian-10/install.yml > > index 0a30571..d6452b6 100644 > > ---

Re: [libvirt] [PATCH v2 9/9] xenapi: Ignore no-op flag during virDomainUndefine

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:38 -0500, Eric Blake wrote: > Copy what esx does in ignoring the SNAPSHOTS_METADATA flag as a no-op, > and in line with the recent doc tweak in commit c049f022. > > Signed-off-by: Eric Blake > --- ACK signature.asc Description: PGP signature -- libvir-list

Re: [libvirt] [PATCH v2 8/9] vmware: Ignore no-op flag during virDomainUndefine

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:37 -0500, Eric Blake wrote: > Copy what esx does in ignoring the SNAPSHOTS_METADATA flag as a no-op, > and in line with the recent doc tweak in commit c049f022. > > Signed-off-by: Eric Blake > --- ACK signature.asc Description: PGP signature -- libvir-list

Re: [libvirt] [PATCH v2 7/9] openvz: Ignore no-op flag during virDomainUndefine

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:36 -0500, Eric Blake wrote: > Copy what esx does in ignoring the SNAPSHOTS_METADATA flag as a no-op, > and in line with the recent doc tweak in commit c049f022. > > Signed-off-by: Eric Blake > --- ACK signature.asc Description: PGP signature -- libvir-list

Re: [libvirt] [PATCH v2 6/9] lxc: Ignore no-op flag during virDomainUndefine

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:35 -0500, Eric Blake wrote: > Copy what esx does in ignoring the SNAPSHOTS_METADATA flag as a no-op, > and in line with the recent doc tweak in commit c049f022. > > Signed-off-by: Eric Blake > --- ACK signature.asc Description: PGP signature -- libvir-list

Re: [libvirt] [PATCH v2 5/9] libxl: Ignore no-op flag during virDomainUndefine

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:34 -0500, Eric Blake wrote: > Copy what esx does in ignoring the SNAPSHOTS_METADATA flag as a no-op, > and in line with the recent doc tweak in commit c049f022. > > Signed-off-by: Eric Blake > --- ACK signature.asc Description: PGP signature -- libvir-list

Re: [libvirt] [PATCH v2 4/9] bhyve: Ignore no-op flag during virDomainUndefine

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:33 -0500, Eric Blake wrote: > Copy what esx does in ignoring the SNAPSHOTS_METADATA flag as a no-op, > and in line with the recent doc tweak in commit c049f022. > > Signed-off-by: Eric Blake > --- ACK signature.asc Description: PGP signature -- libvir-list

Re: [libvirt] [PATCH v2 3/9] maint: Enhance check-driverimpls.pl to check for API pairing

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:32 -0500, Eric Blake wrote: > As shown in recent patches, several drivers provided only an older > counterpart of an API, making it harder to uniformly use the newer > preferred API form. We can prevent future instances of this by > enhancing 'make syntax-check' to

Re: [libvirt] [PATCH v2 1/9] vbox: Add various vir*Flags API

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:30 -0500, Eric Blake wrote: > Even though we don't accept any flags, it is unfriendly to callers > that use the modern API to have to fall back to the flag-free API. > > Signed-off-by: Eric Blake > --- > src/vbox/vbox_common.c | 24 ++-- > 1

Re: [libvirt] [PATCH v2 2/9] xenapi: Add various vir*Flags API

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:31 -0500, Eric Blake wrote: > Even though we don't accept any flags, it is unfriendly to callers > that use the modern API to have to fall back to the flag-free API. > > Signed-off-by: Eric Blake > --- > src/xenapi/xenapi_driver.c | 22 +++--- > 1

Re: [libvirt] [PATCH v2 2/9] xenapi: Add various vir*Flags API

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:31 -0500, Eric Blake wrote: > Even though we don't accept any flags, it is unfriendly to callers > that use the modern API to have to fall back to the flag-free API. > > Signed-off-by: Eric Blake > --- > src/xenapi/xenapi_driver.c | 22 +++--- > 1

Re: [libvirt] [PATCH v2 1/9] vbox: Add various vir*Flags API

2019-07-10 Thread Peter Krempa
On Tue, Jul 09, 2019 at 12:46:30 -0500, Eric Blake wrote: > Even though we don't accept any flags, it is unfriendly to callers > that use the modern API to have to fall back to the flag-free API. > > Signed-off-by: Eric Blake > --- > src/vbox/vbox_common.c | 24 ++-- > 1

<    1   2