[libvirt] [PATCH] apparmor: support more QEMU architectures

2019-04-01 Thread intrigeri+libvirt
From: intrigeri Add hppa, nios2, or1k, riscv32 and riscv64 to the profile. Fixes: https://bugs.debian.org/914940 Signed-off-by: intrigeri Reviewed-by: Andrea Bolognani --- src/security/apparmor/libvirt-qemu | 5 + 1 file changed, 5 insertions(+) diff --git a/src/security/apparmor

[libvirt] [PATCH v2] apparmor: support more QEMU architectures

2019-04-01 Thread intrigeri+libvirt
v2 following up to Andrea Bolognani's review (thanks!) - Adds missing Signed-off-by tag - Improves commit message - Adds Reviewed-by Andrea Bolognani -- libvir-list mailing list libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list

[libvirt] [PATCH] apparmor: support QEMU hppa, nios2, or1k, riscv32 and riscv64

2019-03-30 Thread intrigeri+libvirt
From: intrigeri Fixes: https://bugs.debian.org/914940 --- src/security/apparmor/libvirt-qemu | 5 + 1 file changed, 5 insertions(+) diff --git a/src/security/apparmor/libvirt-qemu b/src/security/apparmor/libvirt-qemu index 474aaefdf8..165558fe83 100644 --- a/src/security/apparmor/libvirt

[libvirt] [PATCH] AppArmor: allow virt-aa-helper read access to Nova's qcow backing files.

2018-06-09 Thread intrigeri+libvirt
/apparmor/usr.lib.libvirt.virt-aa-helper index 6869685c05..e32402a904 100644 --- a/examples/apparmor/usr.lib.libvirt.virt-aa-helper +++ b/examples/apparmor/usr.lib.libvirt.virt-aa-helper @@ -50,6 +50,7 @@ profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper { @{HOME}/** r, /var/lib/libvirt

[libvirt] [PATCH] AppArmor: Allow libvirtd to kill unconfined processes

2018-01-13 Thread intrigeri+libvirt
From: intrigeri <intrigeri+libv...@boum.org> On startup libvirtd runs a number of QEMU processes unconfined such as: /usr/bin/qemu-system-x86_64 -S -no-user-config -nodefaults -nographic -machine none,accel=kvm:tcg -qmp unix:/var/lib/libvirt/qemu/capabilities.monitor.sock,server,

[libvirt] [PATCH 2/2] AppArmor: add mount rules needed with additional mediation features brought by Linux 4.14

2017-11-19 Thread intrigeri+libvirt
gt; /, + mount options=(rw, nosuid) -> /{var/,}run/libvirt/qemu/*.dev/, + + mount options=(rw, move) /dev/ -> /{var/,}run/libvirt/qemu/*.dev/, + mount options=(rw, move) /dev/hugepages/ -> /{var/,}run/libvirt/qemu/*.hugepages/, + mount options=(rw, move) /dev/mqueue/ ->

[libvirt] [PATCH 1/2] AppArmor: add rules needed with additional mediation features brought by Linux 4.14.

2017-11-19 Thread intrigeri+libvirt
From: intrigeri <intrigeri+libv...@boum.org> --- examples/apparmor/libvirt-qemu | 4 examples/apparmor/usr.sbin.libvirtd | 4 2 files changed, 8 insertions(+) diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu index 064501f08e..73bdbae872

[libvirt] [PATCH v4] AppArmor: add rules needed with additional mediation features brought by Linux 4.14.

2017-11-19 Thread intrigeri+libvirt
Changes since v3: - don't add in 1/2 blanket catch-all mount rule that 2/2 was replacing anyway -- libvir-list mailing list libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list

[libvirt] [PATCH 1/2] AppArmor: add rules needed with additional mediation features brought by Linux 4.14.

2017-11-05 Thread intrigeri+libvirt
From: intrigeri <intrigeri+libv...@boum.org> --- examples/apparmor/libvirt-qemu | 4 examples/apparmor/usr.sbin.libvirtd | 6 ++ 2 files changed, 10 insertions(+) diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu index 97dd2d45a9..9d487bf92f

[libvirt] [PATCH v3] AppArmor: add rules needed with additional mediation features brought by Linux 4.14.

2017-11-05 Thread intrigeri+libvirt
Changes since v2: - made signal rules broader, as suggested by Jamie Strandboge <ja...@canonical.com> and indeed my tests confirm v2 was too strict; - allowed libvirtd "ptrace (read)" on libvirt-* guests, as suggested by Jamie Strandboge <ja...@canonical.com>

[libvirt] [PATCH 2/2] AppArmor: use fine-grained mount rules instead of a blanket catch-all one

2017-11-05 Thread intrigeri+libvirt
options=(rw,rslave) -> /, + mount options=(rw, nosuid) -> /{var/,}run/libvirt/qemu/*.dev/, + + mount options=(rw, move) /dev/ -> /{var/,}run/libvirt/qemu/*.dev/, + mount options=(rw, move) /dev/hugepages/ -> /{var/,}run/libvirt/qemu/*.hugepages/, + mount option

[libvirt] [PATCH] AppArmor: add rules needed with additional mediation features brought by Linux 4.14.

2017-10-26 Thread intrigeri+libvirt
From: intrigeri <intrigeri+libv...@boum.org> --- examples/apparmor/libvirt-qemu | 2 ++ examples/apparmor/usr.sbin.libvirtd | 6 ++ 2 files changed, 8 insertions(+) diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu index b341e31f42..5994a35042

[libvirt] [PATCH v2] AppArmor: add rules needed with additional mediation features brought by Linux 4.14.

2017-10-26 Thread intrigeri+libvirt
[PATCH v2] AppArmor: add rules needed with additional mediation features Changes since v1: - remove unneeded "network unix" rules added by v1: they were only needed due to a bug in apparmor_parser, that was fixed in AppArmor 2.11.1 since then; - move the "network netlink raw" rule to

Re: [libvirt] libvirt can not get right stats of a rbd pool

2012-10-31 Thread libvirt
=64G, it is impossible 489G. 'rados df -p cloud ' can give right stat. referring its implement maybe be right. 2012-11-01 libvirt 发件人:Wido den Hollander 发送时间:2012-10-29 22:40 主题:Re: [libvirt] libvirt can not get right stats of a rbd pool 收件人:Daniel P. Berrangeberra...@redhat.com 抄送:yuelibv

Re: [libvirt] how to delete storage-pool entirely

2012-10-25 Thread libvirt
cache (not to restart libvirtd).? virsh pool-undefine 2.throught calling libvirt API , how to find the pool with a special path,no need to define it again? Not quite sure I understood the question, but 'virsh pool-list' and 'virsh pool-refresh' might be helpful. -- Eric Blake ebl

Re: [libvirt] how to enable ceph-rbd in libvirt.

2012-10-13 Thread libvirt
the difference between qemu.git and qemu-kvm.git? any one is ok for kvm? thanks. At 2012-10-13 17:31:25,Josh Durgin josh.dur...@inktank.com wrote: It sounds like the qemu binary that libvirt is using isn't one compiled with rbd support. You can check by running: qemu-kvm -drive format=? rbd

Re: [libvirt] how to configure keymap keyboard layout with virt-manager

2009-05-14 Thread libvirt
to configure the keyboard on libvirt (kvm) (0.6.1-0ubuntu5). I'm using a belgian keyboard, so, my question is : - Which keyboard layout should I place in the xml file (or through the vm display adapter configuration). - Which keyboard layout should I use in the vm ? PS: When I use

[libvirt] how to configure keymap keyboard layout with virt-manager

2009-05-09 Thread libvirt
Hi, I'm fighting to configure the keyboard on libvirt (kvm) (0.6.1-0ubuntu5). I'm using a belgian keyboard, so, my question is : - Which keyboard layout should I place in the xml file (or through the vm display adapter configuration). - Which keyboard layout should I use in the vm ? PS