Re: [Qemu-devel] Re: Spice project is now open

2009-12-14 Thread Gerd Hoffmann
On 12/12/09 23:35, Dor Laor wrote: 2. VDI (Virtual Desktop Interface) http://www.spice-space.org/vdi.html It's an abstraction layer for graphics/keyboard/mouse/sound /usb/serial. We need it anyway regardless of spice. What is our user like to switch from vnc to SDL on runtime? It's good for

Re: [Qemu-devel] Re: Spice project is now open

2009-12-14 Thread Anthony Liguori
Gerd Hoffmann wrote: On 12/12/09 23:35, Dor Laor wrote: 2. VDI (Virtual Desktop Interface) http://www.spice-space.org/vdi.html It's an abstraction layer for graphics/keyboard/mouse/sound /usb/serial. We need it anyway regardless of spice. What is our user like to switch from vnc to SDL on

Re: [Qemu-devel] Re: Spice project is now open

2009-12-14 Thread Avi Kivity
On 12/14/2009 04:42 PM, Anthony Liguori wrote: I think it's a bit trickier though because ideally you would want to use the vnc protocol to negotiate which vm you're connecting to. Right, of course. If the client can no longer choose the target using its port number, it has to select it in

Re: [Qemu-devel] Re: Spice project is now open

2009-12-14 Thread Daniel P. Berrange
On Mon, Dec 14, 2009 at 08:42:12AM -0600, Anthony Liguori wrote: Avi Kivity wrote: On 12/13/2009 01:46 AM, Anthony Liguori wrote: Dan Berrange and I have been talking about being able to move VNC server into a central process such that all of the VMs can have a single VNC port that can be

Re: [Qemu-devel] Re: Spice project is now open

2009-12-14 Thread Daniel P. Berrange
On Mon, Dec 14, 2009 at 04:53:07PM +0200, Avi Kivity wrote: On 12/14/2009 04:42 PM, Anthony Liguori wrote: I think it's a bit trickier though because ideally you would want to use the vnc protocol to negotiate which vm you're connecting to. Right, of course. If the client can no longer

Re: [Qemu-devel] Re: Spice project is now open

2009-12-14 Thread Avi Kivity
On 12/14/2009 05:17 PM, Daniel P. Berrange wrote: Yes - need to pass the encryption state. Hopefully the crypto stacks support this. There's no mechanism for this in the SASL libraries. With GNUTLS there is the ability to preserve negotiated session state from one TLS conenection and

Re: [Qemu-devel] Re: Spice project is now open

2009-12-14 Thread Anthony Liguori
Avi Kivity wrote: On 12/14/2009 05:17 PM, Daniel P. Berrange wrote: Yes - need to pass the encryption state. Hopefully the crypto stacks support this. There's no mechanism for this in the SASL libraries. With GNUTLS there is the ability to preserve negotiated session state from one

Re: [Qemu-devel] Re: Spice project is now open

2009-12-14 Thread Anthony Liguori
Avi Kivity wrote: You can still implement this with SCM_RIGHTS. Authenticate, select guest, drop tls, pass fd to qemu, authenticate, hack hack hack, drop tls, pass fd back to proxy, goto 10. Here's how I'd envision this working. Start qemu with: qemu -vnc proxy:/path/to/unix/domain/socket

Re: [Qemu-devel] Re: Spice project is now open

2009-12-14 Thread Mark McLoughlin
On Mon, 2009-12-14 at 15:10 +, Daniel P. Berrange wrote: The model I had in mind was for the proxy to define a VNC extension that allows the client to query what 'desktops' are available and request switching between them at any time. The list of desktop would of course be authorized per

Re: [Qemu-devel] Re: Spice project is now open

2009-12-13 Thread Izik Eidus
On Sat, 12 Dec 2009 18:18:01 -0600 Anthony Liguori anth...@codemonkey.ws wrote: Andrea Arcangeli wrote: On Sat, Dec 12, 2009 at 05:52:49PM -0600, Anthony Liguori wrote: This is the bit that confuses me. VNC is not a driver. When I say it cannot crash the guest, I mean that if the

Re: [Qemu-devel] Re: Spice project is now open

2009-12-13 Thread Avi Kivity
On 12/12/2009 07:28 PM, Anthony Liguori wrote: I think the question I was raising was not whether Spice could handle X, but that given the things you can do with X, is all of Spice really needed. IOW, would we get 99% of the way there with Xv accelerated overlays and Xrender based compositing

Re: [Qemu-devel] Re: Spice project is now open

2009-12-13 Thread Avi Kivity
On 12/13/2009 01:46 AM, Anthony Liguori wrote: Dan Berrange and I have been talking about being able to move VNC server into a central process such that all of the VMs can have a single VNC port that can be connected to. This greatly simplifies the firewalling logic that an administrator

Re: [Qemu-devel] Re: Spice project is now open

2009-12-13 Thread Gildas Le Nadan
Dan Berrange and I have been talking about being able to move VNC server into a central process such that all of the VMs can have a single VNC port that can be connected to. This greatly simplifies the firewalling logic that an administrator has to deal with. That's a problem I've already had to

[Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Paolo Bonzini
On 12/12/2009 04:34 AM, Anthony Liguori wrote: Firefox uses that extensively, for example to render tiled backgrounds (though probably GTK user interface elements can do so less successfully). Yes, but this is just a single application. The point is that these things are not as widely

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Andrea Arcangeli
Hi everyone, On Fri, Dec 11, 2009 at 09:44:02PM -0600, Anthony Liguori wrote: A typical scenario is someone develops a closed source plugin, but does not distribute it with the original piece of software thinking that they aren't creating a derived work because there's no combination.

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Anthony Liguori
Andrea Arcangeli wrote: About the discussion of improving VNC, this code has to change and move so fast (you can see already requests from Alexander to split the features to allow remote usb from remote qlx, it's expectable code to change for the better to support more obscure features than 99%

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Anthony Liguori
Paolo Bonzini wrote: On 12/12/2009 04:34 AM, Anthony Liguori wrote: Firefox uses that extensively, for example to render tiled backgrounds (though probably GTK user interface elements can do so less successfully). Yes, but this is just a single application. The point is that these things are

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Andrea Arcangeli
On Sat, Dec 12, 2009 at 09:03:26AM -0600, Anthony Liguori wrote: Spice has been closed source for a long time. For those that have been involved with Spice development, I'm sure you understand very well why it's so wonderful, but for the rest of us, Spice didn't exist until yesterday so

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Avi Kivity
On 12/12/2009 05:11 PM, Anthony Liguori wrote: I have no idea how SPICE performs now, but there's definitely nothing in a modern X Windows desktop that it cannot deal with. The only negative point it might have compared to Windows is IMO the rendering of text. I think the question I was

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Anthony Liguori
Avi Kivity wrote: On 12/12/2009 05:11 PM, Anthony Liguori wrote: I have no idea how SPICE performs now, but there's definitely nothing in a modern X Windows desktop that it cannot deal with. The only negative point it might have compared to Windows is IMO the rendering of text. I think

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Anthony Liguori
Andrea Arcangeli wrote: On Sat, Dec 12, 2009 at 09:03:26AM -0600, Anthony Liguori wrote: Spice has been closed source for a long time. For those that have been involved with Spice development, I'm sure you understand very well why it's so wonderful, but for the rest of us, Spice didn't

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Izik Eidus
On Sat, 12 Dec 2009 11:40:21 -0600 Anthony Liguori anth...@codemonkey.ws wrote: FWIW, I don't see any reason why Spice couldn't be made to be separate from guest emulation. I think it would just require the right interfacing in qemu. I think that's purely an implementation detail. The QXL

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Anthony Liguori
Izik Eidus wrote: On Sat, 12 Dec 2009 11:40:21 -0600 Anthony Liguori anth...@codemonkey.ws wrote: FWIW, I don't see any reason why Spice couldn't be made to be separate from guest emulation. I think it would just require the right interfacing in qemu. I think that's purely an

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Izik Eidus
On Sat, 12 Dec 2009 13:26:30 -0600 Anthony Liguori anth...@codemonkey.ws wrote: Izik Eidus wrote: On Sat, 12 Dec 2009 11:40:21 -0600 Anthony Liguori anth...@codemonkey.ws wrote: FWIW, I don't see any reason why Spice couldn't be made to be separate from guest emulation. I think

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Dor Laor
On 12/12/2009 07:40 PM, Anthony Liguori wrote: If Spice can crash a guest, that indicates to me that Spice is maintaining guest visible state. That is difficult architecturally because if we want to do something like introduce a secure sandbox for running guest visible emulation, libspice would

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Dor Laor
On 12/12/2009 09:48 PM, Izik Eidus wrote: On Sat, 12 Dec 2009 13:26:30 -0600 Anthony Liguorianth...@codemonkey.ws wrote: Izik Eidus wrote: On Sat, 12 Dec 2009 11:40:21 -0600 Anthony Liguorianth...@codemonkey.ws wrote: FWIW, I don't see any reason why Spice couldn't be made to be separate

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Andrea Arcangeli
On Sat, Dec 12, 2009 at 11:40:21AM -0600, Anthony Liguori wrote: If Spice can crash a guest, that indicates to me that Spice is That's not what I meant, anything in qemu address space can crash a guest not just spice, even qcow2 could crash a guest, you just need to

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Anthony Liguori
Dor Laor wrote: On 12/12/2009 07:40 PM, Anthony Liguori wrote: If Spice can crash a guest, that indicates to me that Spice is maintaining guest visible state. That is difficult architecturally because if we want to do something like introduce a secure sandbox for running guest visible

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Anthony Liguori
Andrea Arcangeli wrote: On Sat, Dec 12, 2009 at 11:40:21AM -0600, Anthony Liguori wrote: If Spice can crash a guest, that indicates to me that Spice is That's not what I meant, anything in qemu address space can crash a guest not just spice, even qcow2 could crash a guest, you just

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Andrea Arcangeli
On Sat, Dec 12, 2009 at 05:52:49PM -0600, Anthony Liguori wrote: This is the bit that confuses me. VNC is not a driver. When I say it cannot crash the guest, I mean that if the VNC server makes a mistake, there may be a SEGV in qemu or it may just result in a VNC client seeing corruption.

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Anthony Liguori
Andrea Arcangeli wrote: On Sat, Dec 12, 2009 at 05:52:49PM -0600, Anthony Liguori wrote: This is the bit that confuses me. VNC is not a driver. When I say it cannot crash the guest, I mean that if the VNC server makes a mistake, there may be a SEGV in qemu or it may just result in a VNC

Re: [Qemu-devel] Re: Spice project is now open

2009-12-12 Thread Daniel P. Berrange
On Sat, Dec 12, 2009 at 05:46:08PM -0600, Anthony Liguori wrote: Dor Laor wrote: On 12/12/2009 07:40 PM, Anthony Liguori wrote: If Spice can crash a guest, that indicates to me that Spice is maintaining guest visible state. That is difficult architecturally because if we want to do something

[Qemu-devel] Re: Spice project is now open

2009-12-11 Thread Paolo Bonzini
On 12/11/2009 10:54 PM, Anthony Liguori wrote: The point is, there isn't a draw a rectangle primitive in X. There also isn't a draw some text using this font in X.[1] Not necessarily, the X server can support the render extension which allows compositing operations on an X pixmap. Firefox

[Qemu-devel] Re: Spice project is now open

2009-12-11 Thread Paolo Bonzini
On 12/11/2009 10:58 PM, Anthony Liguori wrote: The concerns have been 1) they will be abused with the introduction of proprietary plugins How so? 2) we would have tremendous difficulty maintaining a stable plugin abi Then don't promise it. GCC doesn't for example. (And it solves problem

Re: [Qemu-devel] Re: Spice project is now open

2009-12-11 Thread Anthony Liguori
Paolo Bonzini wrote: On 12/11/2009 10:54 PM, Anthony Liguori wrote: The point is, there isn't a draw a rectangle primitive in X. There also isn't a draw some text using this font in X.[1] Not necessarily, the X server can support the render extension which allows compositing operations on