Re: [PATCH v4 26/28] pc-bios/s390-ccw: Handle secure boot with multiple boot devices

2025-07-22 Thread Daniel P . Berrangé
On Fri, Jul 11, 2025 at 05:11:02PM -0400, Zhuoying Cai wrote: > The current approach to enabling secure boot relies on providing > -secure-boot and -boot-certificates options, which apply to all boot > devices. This reference of -secure-boot and -boot-certificates presumably is a left over from an

Re: [PATCH v4 11/28] crypto/x509-utils: Add helper functions for DIAG 508 subcode 1

2025-07-22 Thread Daniel P . Berrangé
On Fri, Jul 11, 2025 at 05:10:47PM -0400, Zhuoying Cai wrote: > Introduce helper functions to support signature verification required by > DIAG 508 subcode 1: > > qcrypto_pkcs7_convert_sig_pem() – converts a signature from DER to PEM format > qcrypto_x509_verify_sig() – verifies the provided data

Re: [PATCH v4 03/28] hw/s390x/ipl: Create certificate store

2025-07-22 Thread Daniel P . Berrangé
On Fri, Jul 11, 2025 at 05:10:39PM -0400, Zhuoying Cai wrote: > Create a certificate store for boot certificates used for secure IPL. > > Load certificates from the boot-certificate parameter of s390-ccw-virtio > machine type option into the cert store. > > Currently, only X.509 certificates in P

Re: [PATCH v4 09/28] s390x/diag: Implement DIAG 320 subcode 2

2025-07-22 Thread Daniel P . Berrangé
On Fri, Jul 11, 2025 at 05:10:45PM -0400, Zhuoying Cai wrote: > DIAG 320 subcode 2 provides verification-certificates (VCs) that are in the > certificate store. Only X509 certificates in DER format and SHA-256 hash > type are recognized. > > The subcode value is denoted by setting the second-left-

Re: [PATCH v4 08/28] crypto/x509-utils: Add helper functions for DIAG 320 subcode 2

2025-07-22 Thread Daniel P . Berrangé
On Fri, Jul 11, 2025 at 05:10:44PM -0400, Zhuoying Cai wrote: > Introduce new helper functions to extract certificate metadata needed for > DIAG 320 subcode 2: > > qcrypto_x509_get_cert_version() - retrieves version of a certificate > qcrypto_x509_check_cert_times() - validates the certificate's v

Re: [PATCH v4 02/28] crypto/x509-utils: Add helper functions for certificate store

2025-07-22 Thread Daniel P . Berrangé
On Fri, Jul 11, 2025 at 05:10:38PM -0400, Zhuoying Cai wrote: > Introduce new helper functions for x509 certificate, which will be used > by the certificate store: > > qcrypto_x509_convert_cert_der() - converts a certificate from PEM to DER > format > qcrypto_x509_get_keyid_len() - returns the le

Re: [PATCH v4 01/28] Add boot-certificates to s390-ccw-virtio machine type option

2025-07-22 Thread Daniel P . Berrangé
On Fri, Jul 11, 2025 at 05:10:37PM -0400, Zhuoying Cai wrote: > Add boot-certificates as a parameter of s390-ccw-virtio machine type option. > > The `boot-certificates=/path/dir:/path/file` parameter is implemented > to provide path to either a directory or a single certificate. > > Multiple path

Re: [PATCH] i386/kvm: Disable hypercall patching quirk by default

2025-07-22 Thread Daniel P . Berrangé
On Tue, Jul 22, 2025 at 06:27:45PM +0800, Xiaoyao Li wrote: > On 7/22/2025 5:21 PM, Mathias Krause wrote: > > On 22.07.25 05:45, Xiaoyao Li wrote: > > > On 6/20/2025 3:42 AM, Mathias Krause wrote: > > > > KVM has a weird behaviour when a guest executes VMCALL on an AMD system > > > > or VMMCALL on

Re: [PATCH] xen/passthrough: add missing error-report include

2025-07-21 Thread Daniel P . Berrangé
On Fri, Jul 18, 2025 at 03:20:35PM +0200, Markus Armbruster wrote: > Daniel P. Berrangé writes: > > > On Fri, Jul 18, 2025 at 07:59:50AM +0200, Markus Armbruster wrote: > >> Markus Armbruster writes: > >> > >> > Adam Williamson writes: > >>

Re: [PULL 1/1] trace: log.py: human-readable timestamp

2025-07-21 Thread Daniel P . Berrangé
On Mon, Jul 21, 2025 at 02:10:51PM -0400, Stefan Hajnoczi wrote: > From: Vladimir Sementsov-Ogievskiy > > So tired to parse all these timestamps, when need to compare them > with other logs. > > Use iso8601 format as in warn_report() (info_report(), error_report()) > already used. > > Also, sta

[PATCH] log: make '-msg timestamp=on' apply to all qemu_log usage

2025-07-21 Thread Daniel P . Berrangé
19:39 qemu-system-x86_64 $ strip qemu-system-x86_64 $ ls -alh qemu-system-x86_64 -rwxr-xr-x. 1 berrange berrange 30M Jul 21 19:39 qemu-system-x86_64 and after: $ ls -alh qemu-system-x86_64 -rwxr-xr-x. 1 berrange berrange 85M Jul 21 19:41 qemu-system-x86_64 $ strip qemu-system-x86_64

Re: [PATCH 0/4] migration: workaround GNUTLS live migration crashes

2025-07-21 Thread Daniel P . Berrangé
On Mon, Jul 21, 2025 at 12:14:51PM -0300, Fabiano Rosas wrote: > Daniel P. Berrangé writes: > > > On Mon, Jul 21, 2025 at 11:56:09AM -0300, Fabiano Rosas wrote: > >> Daniel P. Berrangé writes: > >> > >> > TL:DR: GNUTLS is liable to crash QEMU when liv

Re: [PATCH 0/4] migration: workaround GNUTLS live migration crashes

2025-07-21 Thread Daniel P . Berrangé
On Mon, Jul 21, 2025 at 11:56:09AM -0300, Fabiano Rosas wrote: > Daniel P. Berrangé writes: > > > TL:DR: GNUTLS is liable to crash QEMU when live migration is run > > with TLS enabled and a return path channel is present, if approx > > 64 GB of data is transferred. This

Re: [PATCH v6 23/24] migration: Add error-parameterized function variants in VMSD struct

2025-07-21 Thread Daniel P . Berrangé
On Mon, Jul 21, 2025 at 07:24:23PM +0530, Arun Menon wrote: > Hi, > Thank you for the review. > > On Mon, Jul 21, 2025 at 02:32:48PM +0100, Daniel P. Berrangé wrote: > > On Mon, Jul 21, 2025 at 04:59:28PM +0530, Arun Menon wrote: > > > - We need to have good error re

[PATCH] migration: show error message when postcopy fails

2025-07-21 Thread Daniel P . Berrangé
The 'info migrate' command only shows the error message when the migration state is 'failed'. When postcopy is used, however, the 'postcopy-paused' state is used instead of 'failed', so we must show the error message there too. Signed-off-by: Daniel P

Re: [PATCH v6 23/24] migration: Add error-parameterized function variants in VMSD struct

2025-07-21 Thread Daniel P . Berrangé
On Mon, Jul 21, 2025 at 04:59:28PM +0530, Arun Menon wrote: > - We need to have good error reporting in the callbacks in > VMStateDescription struct. Specifically pre_save, post_save, > pre_load and post_load callbacks. > - It is not possible to change these functions everywhere in one > patc

Re: [PATCH v6 23/24] migration: Add error-parameterized function variants in VMSD struct

2025-07-21 Thread Daniel P . Berrangé
On Mon, Jul 21, 2025 at 10:14:30PM +0900, Akihiko Odaki wrote: > On 2025/07/21 20:29, Arun Menon wrote: > > - We need to have good error reporting in the callbacks in > >VMStateDescription struct. Specifically pre_save, post_save, > >pre_load and post_load callbacks. > > - It is not possibl

Re: [PATCH v6 07/24] migration: Update qemu_file_get_return_path() docs and remove dead checks

2025-07-21 Thread Daniel P . Berrangé
4 > migration/migration.c | 12 ++-- > migration/qemu-file.c | 1 - > migration/savevm.c| 4 > 4 files changed, 2 insertions(+), 19 deletions(-) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com -o-https://www.flick

[PULL v2 4/4] crypto: load all certificates in X509 CA file

2025-07-21 Thread Daniel P . Berrangé
: Daniel P. Berrangé Signed-off-by: Henry Kleynhans [DB: drop MAX_CERTS constant & whitespace tweaks] Signed-off-by: Daniel P. Berrangé --- crypto/tlscredsx509.c | 23 +++ 1 file changed, 11 insertions(+), 12 deletions(-) diff --git a/crypto/tlscredsx509.c b/cr

[PULL v2 3/4] crypto/x509-utils: Check for error from gnutls_x509_crt_init()

2025-07-21 Thread Daniel P . Berrangé
ed-by: Daniel P. Berrangé Signed-off-by: Daniel P. Berrangé --- crypto/x509-utils.c | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/crypto/x509-utils.c b/crypto/x509-utils.c index 8bad00a51b..39bb6d4d8c 100644 --- a/crypto/x509-utils.c +++ b/crypto/x509-utils.c @@ -46,

[PULL v2 2/4] ui: add trace events for all client messages

2025-07-21 Thread Daniel P . Berrangé
This lets us see the full flow of RFB messages received from the client. Reviewed-by: Philippe Mathieu-Daudé Reviewed-by: Marc-André Lureau Signed-off-by: Daniel P. Berrangé --- ui/trace-events | 14 + ui/vnc.c| 52 + 2 files

[PULL v2 1/4] ui: fix setting client_endian field defaults

2025-07-21 Thread Daniel P . Berrangé
ed to any problems, but the classical 'vncviewer' app will show the problem easily. Fixes: 7ed96710e82c385c6cfc3d064eec7dde20f0f3fd Reported-by: Thomas Huth Reviewed-by: Philippe Mathieu-Daudé Reviewed-by: Marc-André Lureau Signed-off-by: Daniel P. Berrangé --- ui/vnc.c | 1 + 1 file changed,

[PULL v2 0/4] Misc crypto & UI patches

2025-07-21 Thread Daniel P . Berrangé
* Add more trace events for VNC messages * Fix checking of certificate loading * Eliminate cert limit on loading CA certificates ---- Daniel P. Berrangé (2): ui: fix setting client_endian field defaults ui: add trace events for

[PATCH 0/4] migration: workaround GNUTLS live migration crashes

2025-07-18 Thread Daniel P . Berrangé
patches can soon do: https://lists.libvirt.org/archives/list/de...@lists.libvirt.org/thread/LX5KMIUFZSP5DPUXKJDFYBZI5TIE3E5N/ Daniel P. Berrangé (4): crypto: implement workaround for GNUTLS thread safety problems io: add support for activating TLS thread safety workaround migration: a

[PATCH 1/4] crypto: implement workaround for GNUTLS thread safety problems

2025-07-18 Thread Daniel P . Berrangé
rates, the inbound direction is low volume. Signed-off-by: Daniel P. Berrangé --- crypto/tlssession.c | 89 +-- include/crypto/tlssession.h | 14 ++ meson.build | 9 meson_options.txt | 2 + scripts/meson-buildoptio

[PATCH 2/4] io: add support for activating TLS thread safety workaround

2025-07-18 Thread Daniel P . Berrangé
Add a QIO_CHANNEL_FEATURE_CONCURRENT_IO feature flag. If this is set on a QIOChannelTLS session object, the TLS session will be marked as requiring thread safety, which will activate the workaround for GNUTLS bug 1717 if needed. Signed-off-by: Daniel P. Berrangé --- include/io/channel.h | 1

[PATCH 4/4] crypto: add tracing & warning about GNUTLS countermeasures

2025-07-18 Thread Daniel P . Berrangé
We want some visibility on stderr when the GNUTLS thread safety countermeasures are activated, to encourage people to get the real fix deployed (once it exists). Some trace points will also help if we see any further wierd crash scenario we've not anticipated. Reviewed-by: Daniel P. Ber

[PATCH 3/4] migration: activate TLS thread safety workaround

2025-07-18 Thread Daniel P . Berrangé
workarounds for GNUTLS bug 1717 Closes: https://gitlab.com/qemu-project/qemu/-/issues/1937 Signed-off-by: Daniel P. Berrangé --- migration/tls.c | 9 + 1 file changed, 9 insertions(+) diff --git a/migration/tls.c b/migration/tls.c index 5cbf952383..284a6194b2 100644 --- a/migration/tls.c

Re: [PATCH] net/passt: Fix build failure due to missing GIO dependency

2025-07-18 Thread Daniel P . Berrangé
cy on GIO for the passt > option. > The existing dependency on linux is kept because passt is only available > on this OS. > > Reported-by: Thomas Huth > Signed-off-by: Laurent Vivier > --- > meson.build | 1 + > 1 file changed, 1 insertion(+) Reviewed-

Re: [PATCH v2] tests/functional: add --debug CLI arg

2025-07-18 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 01:34:13PM +0300, Manos Pitsidianakis wrote: > Add argument parsing to functional tests to improve developer experience > when running individual tests. All logs are printed to stdout > interspersed with TAP output. > > Example usage, assuming current build directory with q

Re: [PATCH] xen/passthrough: add missing error-report include

2025-07-18 Thread Daniel P . Berrangé
On Fri, Jul 18, 2025 at 07:59:50AM +0200, Markus Armbruster wrote: > Markus Armbruster writes: > > > Adam Williamson writes: > > > >> In cfcacba an `error_report` was added to this file, but the > >> corresponding include of `qemu/error-report.h` was missed. This > >> only becomes apparent when

Re: [PATCH v5 20/23] migration: push Error **errp into qemu_load_device_state()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:43AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > It is ensured that qemu_load_device_state() must report an error > in errp, in cas

Re: [PATCH v5 23/23] backends/tpm: Propagate vTPM error on migration failure

2025-07-17 Thread Daniel P . Berrangé
om/browse/RHEL-82826 > > Reviewed-by: Stefan Berger > Signed-off-by: Arun Menon > --- > backends/tpm/tpm_emulator.c | 39 ++++--- > 1 file changed, 20 insertions(+), 19 deletions(-) Reviewed-by: Daniel P. Berrangé With regards, D

Re: [PATCH v5 22/23] migration: Add error-parameterized function variants in VMSD struct

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:45AM +0530, Arun Menon wrote: > - We need to have good error reporting in the callbacks in > VMStateDescription struct. Specifically pre_save, post_save, > pre_load and post_load callbacks. > - It is not possible to change these functions everywhere in one > patc

Re: [PATCH v5 19/23] migration: push Error **errp into qemu_loadvm_state()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:42AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > It is ensured that qemu_loadvm_state() must report an error > in errp, in case of

Re: [PATCH v5 21/23] migration: Capture error in postcopy_ram_listen_thread()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:44AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > postcopy_ram_listen_thread() calls qemu_loadvm_state_main() > to load the vm, and

Re: [PATCH v5 18/23] migration: push Error **errp into qemu_loadvm_state_main()

2025-07-17 Thread Daniel P . Berrangé
rtions(+), 13 deletions(-) Reviewed-by: Daniel P. Berrangé > > diff --git a/migration/colo.c b/migration/colo.c > index > e0f713c837f5da25d67afbd02ceb6c54024ca3af..ddc628cab4194b3cb82388c5e878286c820004b2 > 100644 > --- a/migration/colo.c > +++ b/migration/colo.c > @@ -68

Re: [PATCH v5 17/23] migration: push Error **errp into loadvm_postcopy_handle_switchover_start()

2025-07-17 Thread Daniel P . Berrangé
gt; an error in errp, in case of failure. > > Signed-off-by: Arun Menon > --- > migration/savevm.c | 10 +++--- > 1 file changed, 3 insertions(+), 7 deletions(-) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com -o-https://www.

Re: [PATCH v5 11/23] migration: push Error **errp into loadvm_postcopy_handle_listen()

2025-07-17 Thread Daniel P . Berrangé
or > in errp, in case of failure. > > Signed-off-by: Arun Menon > --- > migration/savevm.c | 18 +++--- > 1 file changed, 7 insertions(+), 11 deletions(-) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com -o-https://w

Re: [PATCH v5 07/23] migration: push Error **errp into loadvm_process_command()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 05:54:41PM +0100, Daniel P. Berrangé wrote: > On Thu, Jul 17, 2025 at 06:07:30AM +0530, Arun Menon wrote: > > This is an incremental step in converting vmstate loading > > code to report error via Error objects instead of directly > > printing it to co

Re: [PATCH v5 15/23] migration: push Error **errp into loadvm_handle_recv_bitmap()

2025-07-17 Thread Daniel P . Berrangé
gt; in errp, in case of failure. > > Signed-off-by: Arun Menon > --- > migration/savevm.c | 22 ++ > 1 file changed, 10 insertions(+), 12 deletions(-) Reviewed-by: Daniel P. Berrangé > > diff --git a/migration/s

Re: [PATCH v5 14/23] migration: make loadvm_postcopy_handle_resume() void

2025-07-17 Thread Daniel P . Berrangé
> { > if (mis->state != MIGRATION_STATUS_POSTCOPY_RECOVER) { > error_report("%s: illegal resume received", __func__); Pre-existing mistake, but can you change this to 'warn_report' given that we're not treating it as an error. Aside from that R

Re: [PATCH v5 12/23] migration: push Error **errp into loadvm_postcopy_handle_run()

2025-07-17 Thread Daniel P . Berrangé
or > in errp, in case of failure. > > Signed-off-by: Arun Menon > --- > migration/savevm.c | 12 > 1 file changed, 4 insertions(+), 8 deletions(-) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com -o-https://www.flickr.co

Re: [PATCH v5 10/23] migration: push Error **errp into loadvm_postcopy_handle_advise()

2025-07-17 Thread Daniel P . Berrangé
or > in errp, in case of failure. > > Signed-off-by: Arun Menon > --- > migration/savevm.c | 39 +-- > 1 file changed, 17 insertions(+), 22 deletions(-) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com

Re: [PATCH v5 09/23] migration: push Error **errp into ram_postcopy_incoming_init()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 12:34:21PM +0900, Akihiko Odaki wrote: > On 2025/07/17 9:37, Arun Menon wrote: > > This is an incremental step in converting vmstate loading > > code to report error via Error objects instead of directly > > printing it to console/monitor. > > It is ensured that ram_postcopy

Re: [PATCH v5 08/23] migration: push Error **errp into loadvm_handle_cmd_packaged()

2025-07-17 Thread Daniel P . Berrangé
or > in errp, in case of failure. > > Signed-off-by: Arun Menon > --- > migration/savevm.c | 18 -- > 1 file changed, 8 insertions(+), 10 deletions(-) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com -o-https://w

Re: [PATCH v5 06/23] migration: push Error **errp into qemu_loadvm_section_part_end()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:29AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > It is ensured that qemu_loadvm_section_part_end() must report an error > in errp,

Re: [PATCH v5 04/23] migration: push Error **errp into vmstate_load()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:27AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > It is ensured that vmstate_load() must report an error > in errp, in case of failu

Re: [PATCH v5 07/23] migration: push Error **errp into loadvm_process_command()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:30AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > It is ensured that loadvm_process_command() must report an error > in errp, in cas

Re: [PATCH v5 02/23] migration: push Error **errp into vmstate_load_state()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:25AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > It is ensured that vmstate_load_state() must report an error > in errp, in case of

Re: [PATCH v5 05/23] migration: push Error **errp into qemu_loadvm_section_start_full()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:28AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > It is ensured that qemu_loadvm_section_start_full() must report an error > in errp

Re: [PATCH v5 03/23] migration: push Error **errp into qemu_loadvm_state_header()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:26AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > It is ensured that qemu_loadvm_state_header() must report an error > in errp, in c

Re: [PATCH v5 01/23] migration: push Error **errp into vmstate_subsection_load()

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 06:07:24AM +0530, Arun Menon wrote: > This is an incremental step in converting vmstate loading > code to report error via Error objects instead of directly > printing it to console/monitor. > It is ensured that vmstate_subsection_load() must report an error > in errp, in ca

Re: [PATCH 2/2] watchdog: generic name for i6300esb

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 05:17:42PM +0200, Cornelia Huck wrote: > On Tue, Jul 15 2025, Daniel P. Berrangé wrote: > > > On Tue, Jul 15, 2025 at 09:16:24AM -0700, Andrea Bolognani wrote: > >> On Tue, Jul 15, 2025 at 05:02:54PM +0100, Daniel P. Berrangé wrote: > >> &

Re: [PULL 17/77] meson: Add optional dependency on IGVM library

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 03:30:06PM +0200, Stefano Garzarella wrote: > On Wed, 16 Jul 2025 at 13:31, Daniel P. Berrangé wrote: > > > > On Mon, Jul 14, 2025 at 01:03:06PM +0200, Paolo Bonzini wrote: > > > From: Roy Hopkins > > > > > > The IGVM library allo

Re: [PATCH 1/2] migration: Fix postcopy latency distribution formatting computation

2025-07-17 Thread Daniel P . Berrangé
On Tue, Jul 15, 2025 at 09:45:51AM -0300, Fabiano Rosas wrote: > Coverity has caught a bug in the formatting of time intervals for > postcopy latency distribution display in 'info migrate'. > > While bounds checking the labels array, sizeof is incorrectly being > used. ARRAY_SIZE is the correct fo

Re: [PATCH] qapi: Add more cross-references

2025-07-17 Thread Daniel P . Berrangé
> qapi/dump.json | 2 +- > qapi/machine.json | 2 +- > qapi/migration.json | 4 ++-- > qapi/misc-i386.json | 2 +- > qapi/run-state.json | 2 +- > qapi/sockets.json | 2 +- > 6 files changed, 7 insertions(+), 7 deletions(-) Reviewed-by: Daniel P. Berrangé With rega

Re: [PATCH v2 4/4] qga: Add cross-references

2025-07-17 Thread Daniel P . Berrangé
ga/qapi-schema.json | 80 ++-- > 1 file changed, 40 insertions(+), 40 deletions(-) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com -o-https://www.flickr.com/photos/dberrange :| |: https://libvirt.org -o-

Re: [PATCH] docs/devel: fix over-quoting of QEMU_TEST_KEEP_SCRATCH

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 11:41:05AM +0100, Alex Bennée wrote: > Signed-off-by: Alex Bennée > --- > docs/devel/testing/functional.rst | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com

qemu-devel@nongnu.org

2025-07-17 Thread Daniel P . Berrangé
89 ("i386/tdx: handle TDG.VP.VMCALL") > Reported-by: Peter Maydell > Signed-off-by: Xiaoyao Li > --- > target/i386/kvm/tdx.c | 2 -- > 1 file changed, 2 deletions(-) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com -o-https

Re: [PATCH] tests/functional: add --debug CLI arg

2025-07-17 Thread Daniel P . Berrangé
On Thu, Jul 17, 2025 at 12:27:08PM +0300, Manos Pitsidianakis wrote: > On Thu, Jul 17, 2025 at 12:22 PM Daniel P. Berrangé > wrote: > > > > On Wed, Jul 16, 2025 at 09:08:00AM +0300, Manos Pitsidianakis wrote: > > > Add argument parsing to functional tests to i

Re: [PATCH] tests/functional: add --debug CLI arg

2025-07-17 Thread Daniel P . Berrangé
On Wed, Jul 16, 2025 at 09:08:00AM +0300, Manos Pitsidianakis wrote: > Add argument parsing to functional tests to improve developer experience > when running individual tests. All logs are printed to stdout > interspersed with TAP output. > > ./pyvenv/bin/python3 ../tests/functional/test_aarch6

Re: [PATCH 4/4] qga: Add cross-references

2025-07-17 Thread Daniel P . Berrangé
ga/qapi-schema.json | 50 ++-- > 1 file changed, 25 insertions(+), 25 deletions(-) Reviewed-by: Daniel P. Berrangé > @@ -585,7 +585,7 @@ > # - pm-utils (via pm-hibernate) > # - manual write into sysfs > # > -# IMPORTANT: guest-susp

Re: [PATCH 3/4] qga: Rephrase return docs to avoid type name

2025-07-17 Thread Daniel P . Berrangé
type. > > We did this for qapi/ in commit f7296f8de5c (qapi: rephrase return > docs to avoid type name). > > Signed-off-by: Markus Armbruster > --- > qga/qapi-schema.json | 3 +-- > 1 file changed, 1 insertion(+), 2 deletions(-) Reviewed-by: Daniel P. Berrangé W

Re: [PATCH 2/4] qga: Remove trivial "Returns:" sections

2025-07-17 Thread Daniel P . Berrangé
gt; > The auto-generated returns all are in the exact same spot. > > We did this for qapi/ in commit 0462da9d6b1 (qapi: remove trivial > "Returns:" sections). > > Signed-off-by: Markus Armbruster > --- > qga/qapi-schema.json | 25 - > 1

Re: [PATCH 1/4] qga: Fix guest-network-get-route return value documentation

2025-07-17 Thread Daniel P . Berrangé
ommit 8e326d36dd16 (qga/linux: Add new api 'guest-network-get-route') > Signed-off-by: Markus Armbruster > --- > qga/qapi-schema.json | 1 + > 1 file changed, 1 insertion(+) Reviewed-by: Daniel P. Berrangé With regards, Daniel -- |: https://berrange.com -o-

Re: [PULL v2 01/13] ui/vnc: Do not copy z_stream

2025-07-16 Thread Daniel P . Berrangé
On Wed, Jul 16, 2025 at 06:07:31PM +0300, Michael Tokarev wrote: > On 15.07.2025 09:32, marcandre.lur...@redhat.com wrote: > > From: Akihiko Odaki > > > > vnc_worker_thread_loop() copies z_stream stored in its local VncState to > > the persistent VncState, and the copied one is freed with deflate

Re: [PULL 17/77] meson: Add optional dependency on IGVM library

2025-07-16 Thread Daniel P . Berrangé
On Mon, Jul 14, 2025 at 01:03:06PM +0200, Paolo Bonzini wrote: > From: Roy Hopkins > > The IGVM library allows Independent Guest Virtual Machine files to be > parsed and processed. IGVM files are used to configure guest memory > layout, initial processor state and other configuration pertaining t

Re: [RFC PATCH 1/2] system/os-win32: Remove unused Error** argument in qemu_socket_unselect

2025-07-16 Thread Daniel P . Berrangé
On Wed, Jul 16, 2025 at 12:41:31PM +0200, Markus Armbruster wrote: > Daniel P. Berrangé writes: > > > On Tue, Jul 15, 2025 at 10:35:16AM +0200, Philippe Mathieu-Daudé wrote: > >> @errp is always NULL. Remove it, as unused. > >> > >> Signed-off-by: Philipp

[PULL 1/4] ui: fix setting client_endian field defaults

2025-07-16 Thread Daniel P . Berrangé
ed to any problems, but the classical 'vncviewer' app will show the problem easily. Fixes: 7ed96710e82c385c6cfc3d064eec7dde20f0f3fd Reported-by: Thomas Huth Reviewed-by: Philippe Mathieu-Daudé Reviewed-by: Marc-André Lureau Signed-off-by: Daniel P. Berrangé --- ui/vnc.c | 1 + 1 file changed,

[PULL 0/4] Misc crypto & UI patches

2025-07-16 Thread Daniel P . Berrangé
* Add more trace events for VNC messages * Fix checking of certificate loading * Eliminate cert limit on loading CA certificates ---- Daniel P. Berrangé (2): ui: fix setting client_endian field defaults ui: add trace events for

[PULL 4/4] crypto: load all certificates in X509 CA file

2025-07-16 Thread Daniel P . Berrangé
: Daniel P. Berrangé Signed-off-by: Henry Kleynhans [DB: drop MAX_CERTS constant & whitespace tweaks] Signed-off-by: Daniel P. Berrangé --- crypto/tlscredsx509.c | 23 +++ 1 file changed, 11 insertions(+), 12 deletions(-) diff --git a/crypto/tlscredsx509.c b/cr

[PULL 3/4] crypto/x509-utils: Check for error from gnutls_x509_crt_init()

2025-07-16 Thread Daniel P . Berrangé
ed-by: Daniel P. Berrangé Signed-off-by: Daniel P. Berrangé --- crypto/x509-utils.c | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/crypto/x509-utils.c b/crypto/x509-utils.c index 8bad00a51b..39bb6d4d8c 100644 --- a/crypto/x509-utils.c +++ b/crypto/x509-utils.c @@ -46,

[PULL 2/4] ui: add trace events for all client messages

2025-07-16 Thread Daniel P . Berrangé
This lets us see the full flow of RFB messages received from the client. Reviewed-by: Philippe Mathieu-Daudé Reviewed-by: Marc-André Lureau Signed-off-by: Daniel P. Berrangé --- ui/trace-events | 14 + ui/vnc.c| 52 + 2 files

Re: [PATCH] i386: Build SEV only for 64-bit target

2025-07-16 Thread Daniel P . Berrangé
On Wed, Jul 16, 2025 at 11:36:48AM +0200, Cédric Le Goater wrote: > On 7/16/25 11:28, Daniel P. Berrangé wrote: > > On Wed, Jul 16, 2025 at 09:15:54AM +0200, Cédric Le Goater wrote: > > > Recent changes broke build on 32-bit host. Since there is no 32-bit > > > supp

Re: [PATCH] i386: Build SEV only for 64-bit target

2025-07-16 Thread Daniel P . Berrangé
ertion(+), 1 deletion(-) Reviewed-by: Daniel P. Berrangé Matches what we just did for TDX too. > > diff --git a/hw/i386/Kconfig b/hw/i386/Kconfig > index > 14d23e27b580b2d5ea3aa4c07ba066f21a62e348..5139d2308777114e76a789c4f850fa20f3fa754f > 100644 > --- a/hw/i386/Kconfig > +++

Re: [PATCH v5 28/69] qapi: Move definitions related to accelerators in their own file

2025-07-16 Thread Daniel P . Berrangé
On Wed, Jul 16, 2025 at 10:23:26AM +0200, Markus Armbruster wrote: > Philippe Mathieu-Daudé writes: > > > Hi Markus, > > I missed this one, sorry! > > > On 3/7/25 12:54, Philippe Mathieu-Daudé wrote: > >> Extract TCG and KVM definitions from machine.json to accelerator.json. > >> Signed-off-by:

Re: [PATCH] meson: Add most 3rd-party includes as system includes

2025-07-16 Thread Daniel P . Berrangé
On Wed, Jul 16, 2025 at 08:13:09AM +, Bernhard Beschow wrote: > > > Am 15. Juli 2025 13:45:08 UTC schrieb "Daniel P. Berrangé" > : > >On Fri, Jul 11, 2025 at 12:00:24PM +0100, Daniel P. Berrangé wrote: > >> On Fri, Jul 11, 2025 at 11:45:08AM +0100, Peter

Re: [PATCH 2/2] watchdog: generic name for i6300esb

2025-07-15 Thread Daniel P . Berrangé
On Tue, Jul 15, 2025 at 09:16:24AM -0700, Andrea Bolognani wrote: > On Tue, Jul 15, 2025 at 05:02:54PM +0100, Daniel P. Berrangé wrote: > > On Tue, Jul 15, 2025 at 05:44:25PM +0200, Cornelia Huck wrote: > > > Hmm. So > > > - request a new PCI id (probably in the P

Re: [PATCH 7/7] crypto: allow client/server cert chains

2025-07-15 Thread Daniel P . Berrangé
On Tue, Jul 15, 2025 at 11:46:31AM +0200, Philippe Mathieu-Daudé wrote: > On 15/7/25 11:29, Daniel P. Berrangé wrote: > > From: matoro > > Should we use here? I generally don't like to change the git metadata that a user submits with unless it is clearly broken, which I don

Re: [PATCH 2/2] watchdog: generic name for i6300esb

2025-07-15 Thread Daniel P . Berrangé
On Tue, Jul 15, 2025 at 05:44:25PM +0200, Cornelia Huck wrote: > On Tue, Jul 15 2025, Andrea Bolognani wrote: > > > On Tue, Jun 10, 2025 at 06:12:12PM +0100, Daniel P. Berrangé wrote: > >> On Tue, Jun 10, 2025 at 04:32:59PM +0200, Cornelia Huck wrote: > >> > The

[PATCH 08/14] functional: ensure log handlers are closed

2025-07-15 Thread Daniel P . Berrangé
This avoids a resource leak warning from python when the log handler is garbage collected. Signed-off-by: Daniel P. Berrangé --- tests/functional/qemu_test/testcase.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tests/functional/qemu_test/testcase.py b/tests/functional/qemu_test

Re: [PATCH 09/14] functional: ensure sockets and files are closed

2025-07-15 Thread Daniel P . Berrangé
On Tue, Jul 15, 2025 at 05:03:07PM +0200, Thomas Huth wrote: > On 15/07/2025 16.30, Daniel P. Berrangé wrote: > > The multiprocess and virtio_gpu tests open sockets but then forget > > to close them, which triggers resource leak warnings > > > > The virtio_gpu test als

[PATCH 03/14] python: drop 'is_closing' back compat helper

2025-07-15 Thread Daniel P . Berrangé
Our minimum python is now 3.9, so back compat with python 3.6 is no longer required. Signed-off-by: Daniel P. Berrangé --- python/qemu/qmp/protocol.py | 3 +-- python/qemu/qmp/util.py | 16 2 files changed, 1 insertion(+), 18 deletions(-) diff --git a/python/qemu/qmp

[PATCH 06/14] python: drop 'create_task' back compat helper

2025-07-15 Thread Daniel P . Berrangé
Our minimum python is now 3.9, so back compat with python 3.6 is no longer required. Signed-off-by: Daniel P. Berrangé --- python/qemu/qmp/protocol.py | 7 +++ python/qemu/qmp/qmp_tui.py | 8 python/qemu/qmp/util.py | 33 + python/tests

[PATCH 02/14] python: avoid deprecation warning with get_event_loop

2025-07-15 Thread Daniel P . Berrangé
We need to call get_event_loop but have no way of knowing ahead of time whether the current thread has an event loop of not. We can handle a missing event loop, but we need to hide the warning python will emit to avoid tripping up iotests expected output. Signed-off-by: Daniel P. Berrangé

[PATCH 04/14] python: drop 'wait_closed' back compat helper

2025-07-15 Thread Daniel P . Berrangé
Our minimum python is now 3.9, so back compat with python 3.6 is no longer required. Signed-off-by: Daniel P. Berrangé --- python/qemu/qmp/protocol.py | 3 +-- python/qemu/qmp/util.py | 29 - 2 files changed, 1 insertion(+), 31 deletions(-) diff --git a/python

[PATCH 11/14] python: ensure QEMUQtestProtocol closes its socket

2025-07-15 Thread Daniel P . Berrangé
While QEMUQtestMachine closes the socket that was passed to QEMUQtestProtocol, the python resource leak manager still believes that the copy QEMUQtestProtocol holds is open. We must explicitly call close to avoid this leak warnnig. Signed-off-by: Daniel P. Berrangé --- python/qemu/machine

[PATCH 14/14] iotests/check: always enable all python warnings

2025-07-15 Thread Daniel P . Berrangé
. Signed-off-by: Daniel P. Berrangé --- tests/qemu-iotests/check | 4 1 file changed, 4 insertions(+) diff --git a/tests/qemu-iotests/check b/tests/qemu-iotests/check index 545f9ec7bd..d9b7c1d598 100755 --- a/tests/qemu-iotests/check +++ b/tests/qemu-iotests/check @@ -21,6 +21,7 @@ import sys

[PATCH 12/14] iotests/147: ensure temporary sockets are closed before exiting

2025-07-15 Thread Daniel P . Berrangé
This avoids the python resource leak detector from issuing warnings in the iotests. Signed-off-by: Daniel P. Berrangé --- tests/qemu-iotests/147 | 1 + 1 file changed, 1 insertion(+) diff --git a/tests/qemu-iotests/147 b/tests/qemu-iotests/147 index 6d6f077a14..3e14bd389a 100755 --- a/tests

[PATCH 07/14] iotests: drop compat for old version context manager

2025-07-15 Thread Daniel P . Berrangé
Our minimum python is now 3.9, so back compat with prior python versions is no longer required. Signed-off-by: Daniel P. Berrangé --- tests/qemu-iotests/testenv.py| 7 ++- tests/qemu-iotests/testrunner.py | 9 ++--- 2 files changed, 4 insertions(+), 12 deletions(-) diff --git a

[PATCH 00/14] python: misc cleanups for python code

2025-07-15 Thread Daniel P . Berrangé
7; but this doesn't cover all possible iotest usage. So there might still be some resource leaks hiding in there which will cause failures for devs running tests with unusual config scenarios. Daniel P. Berrangé (13): python: avoid deprecation warning with get_event_loop python: drop '

[PATCH 05/14] python: drop 'asyncio_run' back compat helper

2025-07-15 Thread Daniel P . Berrangé
Our minimum python is now 3.9, so back compat with python 3.6 is no longer required. Signed-off-by: Daniel P. Berrangé --- python/qemu/qmp/util.py | 19 --- python/tests/protocol.py | 2 +- 2 files changed, 1 insertion(+), 20 deletions(-) diff --git a/python/qemu/qmp/util.py

[PATCH 13/14] iotests/151: ensure subprocesses are cleaned up

2025-07-15 Thread Daniel P . Berrangé
-by: Daniel P. Berrangé --- tests/qemu-iotests/151 | 5 + 1 file changed, 5 insertions(+) diff --git a/tests/qemu-iotests/151 b/tests/qemu-iotests/151 index f2ff9c5dac..06ee3585db 100755 --- a/tests/qemu-iotests/151 +++ b/tests/qemu-iotests/151 @@ -263,6 +263,11 @@ class

[PATCH 10/14] functional: always enable all python warnings

2025-07-15 Thread Daniel P . Berrangé
. Signed-off-by: Daniel P. Berrangé --- tests/functional/qemu_test/testcase.py | 4 1 file changed, 4 insertions(+) diff --git a/tests/functional/qemu_test/testcase.py b/tests/functional/qemu_test/testcase.py index 71c7160adc..2a78e735f1 100644 --- a/tests/functional/qemu_test/testcase.py

[PATCH 09/14] functional: ensure sockets and files are closed

2025-07-15 Thread Daniel P . Berrangé
The multiprocess and virtio_gpu tests open sockets but then forget to close them, which triggers resource leak warnings The virtio_gpu test also fails to close a log file it opens. Signed-off-by: Daniel P. Berrangé --- tests/functional/test_multiprocess.py | 3 +++ tests/functional

[PATCH 01/14] python: Replace asyncio.get_event_loop for Python 3.14

2025-07-15 Thread Daniel P . Berrangé
/3.14/whatsnew/3.14.html#id7 Thanks: Miro Hrončok, Daniel P. Berrangé Signed-off-by: Richard W.M. Jones --- python/qemu/qmp/legacy.py | 5 - python/qemu/qmp/qmp_tui.py | 2 +- python/tests/protocol.py | 2 +- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/python/qemu/qmp

Re: [PATCH] meson: Add most 3rd-party includes as system includes

2025-07-15 Thread Daniel P . Berrangé
On Fri, Jul 11, 2025 at 12:00:24PM +0100, Daniel P. Berrangé wrote: > On Fri, Jul 11, 2025 at 11:45:08AM +0100, Peter Maydell wrote: > > On Tue, 17 Jun 2025 at 21:35, Bernhard Beschow wrote: > > > > > > When compiling QEMU against fuse3-3.17.1 with --enable-we

Re: [PATCH v2] python: Replace asyncio.get_event_loop for Python 3.14

2025-07-15 Thread Daniel P . Berrangé
illa.redhat.com/show_bug.cgi?id=2375004#c4 > > See-also: https://docs.python.org/3.14/whatsnew/3.14.html#id7 > Thanks: Miro Hrončok, Daniel P. Berrangé > Signed-off-by: Richard W.M. Jones > --- > python/qemu/qmp/legacy.py | 5 - > python/qemu/qmp/qmp_tui.py | 2 +- > pytho

Re: [PATCH] python: Replace asyncio.get_event_loop for Python 3.14

2025-07-15 Thread Daniel P . Berrangé
On Tue, Jul 15, 2025 at 11:51:10AM +0100, Richard W.M. Jones wrote: > In Python 3.14, no asyncio event loop gets generated automatically. > Instead create one when we need it. This should work with Python 3.13 > as well. This is a mechanical change as suggested here: > > https://bugzilla.redhat.

  1   2   3   4   5   6   7   8   9   10   >