Commit Graph

446 Commits (master)

Author SHA1 Message Date
Wolfgang Bumiller 23ea029343 disable oob again
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-10-10 11:03:20 +02:00
Wolfgang Bumiller 6116f08aea bump version to 4.0.0-6
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-10-02 10:16:40 +02:00
Wolfgang Bumiller 3b1986f02f merge monitor oob fixup
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-10-02 10:16:40 +02:00
Wolfgang Bumiller 21833e1b41 bump version to 4.0.0-5
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-06 12:49:25 +02:00
Fabian Grünbichler f3c1e32615 fix #2269: build: adapt to glusterfs changes
build-depend on Buster's re-introduced libglusterfs-dev, and depend on
either libglusterfs0 / libgfFOO (Debian repos) or glusterfs-common
(upstream community repos), until the latter gets fixed upstream.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2019-08-06 12:48:20 +02:00
Wolfgang Bumiller 937226f202 bump version to 4.0.0-4
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-05 11:22:46 +02:00
Wolfgang Bumiller d09c80068a merge fix for CVE-2019-14378
merge: slirp: Fix heap overflow in ip_reass on big packet input

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-05 11:22:10 +02:00
Wolfgang Bumiller 92f7f9e807 bump version to 4.0.0-3
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-07-11 09:34:27 +02:00
Wolfgang Bumiller 99c47abaac update live migration patches
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-07-11 09:34:03 +02:00
Thomas Lamprecht 8b017a9a20 bump version to 4.0.0-2
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 16:22:17 +02:00
Thomas Lamprecht d5699f0388 virtio-balloon: use smaller config on older guests
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 16:14:49 +02:00
Thomas Lamprecht 1024d89400 fix qemu PKGVERSION
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-02 13:32:06 +02:00
Thomas Lamprecht 3c99120036 bump version to 4.0.0-1
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-25 11:39:54 +02:00
Thomas Lamprecht 8dfe6145c8 buildsys: ensure docs (man pages) are build
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-25 11:39:54 +02:00
Thomas Lamprecht b70222791a debian/rules: disable building with SDL integration
This was added once by accident, we do not really need it for Proxmox
VE, it could bring some value for testing but here one can build qemu
oneself too.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-25 11:39:54 +02:00
Thomas Lamprecht b855dce76d update patches for v4.0.0
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-25 11:39:54 +02:00
Thomas Lamprecht 5666715394 bump version to 3.0.1-62
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-14 20:54:44 +02:00
Thomas Lamprecht 54e7428425 d/control: add libcurl4-gnutls-dev to build dependencies
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-14 20:50:38 +02:00
Thomas Lamprecht 42dfcf977c d/rules: enable curl support
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-14 13:34:49 +02:00
Thomas Lamprecht ec302df911 d/rules: disable libxml2 support
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-14 13:34:49 +02:00
Thomas Lamprecht bffcf456a2 d/control: add libseccomp-dev to build dependencies
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-14 12:32:55 +02:00
Thomas Lamprecht 1dab59e702 d/control: run wrap-and-sort -tkn
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-14 12:32:24 +02:00
Thomas Lamprecht 73e12bd731 d/rules: ensure QEMU gets compiled with seccomp on
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-14 11:41:17 +02:00
Thomas Lamprecht 964a487a03 d/rules: split and sort configure flags
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-06-14 11:41:13 +02:00
Oguz Bektas 9be61fa466 add fixes for intel MDS CVEs
fixes for:
* CVE-2018-12126
* CVE-2018-12127
* CVE-2018-12130
* CVE-2019-11091

adds the md-clear cpuflag.

Not included by default in any Intel CPU model.

Must be explicitly turned on for all Intel CPU models.

Requires the host CPU microcode to support this feature before it
can be used for guest CPUs.

Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
2019-06-05 14:21:44 +02:00
Thomas Lamprecht 7951909dad remove outdated postinst, cruft from old times
It was for the switch from doing our QEMU/KVM build as 'qemu' to
'kvm', see
https://git.proxmox.com/?p=pve-qemu-kvm.git;a=commitdiff;h=8b7e35182aba87372ba5da5d322791557b744c15

Based on:
https://pve.proxmox.com/pipermail/pve-devel/2019-May/037153.html

Co-developed-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-27 19:34:06 +02:00
Thomas Lamprecht a862f375cb bump version to 3.0.1-61
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 18:26:00 +02:00
Thomas Lamprecht 7392a9817d fixup libspice* dependencies
we only corrected the build-dep, but not the installation one,
so fix this up and bump the version while we're at it - ensures we
have relevant security fixes available

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 18:26:00 +02:00
Thomas Lamprecht 6b0a3c0f45 bump version to 3.0.1-60
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:59:27 +02:00
Thomas Lamprecht 7df330a978 add lintian overrides for shipped strange BLOBs
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:59:27 +02:00
Thomas Lamprecht edf1ab9a03 disable capstone support for now
would either need another submodule or a extra dependency, for now
disable.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:59:27 +02:00
Thomas Lamprecht 6c69567d15 d/control: record missing build dependency libpixman
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:59:27 +02:00
Thomas Lamprecht 5c0cf1a177 d/control: use libspice-server-dev
we dropped the pve maintained version of this in spiceterm, the only
real user - which used a small patch to allow enabling SASL with this
libary - as it bring much more headache then it brings use we dropped
that support for PVE 6.0 and thus can use the Debian upstream version
here just fine.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:58:05 +02:00
Thomas Lamprecht 0c02b38c72 d/control: fix priority-extra-is-replaced-by-priority-optional
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:12:42 +02:00
Wolfgang Bumiller 64be2e7557 bump version to 3.0.1-2
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-04-26 09:20:04 +02:00
Wolfgang Bumiller c36c53f829 merge: make file locking optional also on creation
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-04-26 09:18:00 +02:00
Wolfgang Bumiller 0775f12b63 bump version to 3.0.1-1
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-04-19 10:32:03 +02:00
Dietmar Maurer 583378ed06 build and include qemu-system-aarch64
Signed-off-by: Dietmar Maurer <dietmar@proxmox.com>
2019-04-19 09:53:44 +02:00
Wolfgang Bumiller 53e83913af bump version to 3.0.0-1
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-09-07 14:52:23 +02:00
Wolfgang Bumiller 9b05d1d427 bump version to 2.11.2-1
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-07-09 10:06:27 +02:00
Wolfgang Bumiller 053dd5777e bump version to 2.11.1-5
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-04-05 11:05:32 +02:00
Wolfgang Bumiller e220dcddbc merge: vma & rbd changes
vma: remove forced NO_FLUSH option
rbd: fix cache mode behavior
vma: add cache option to device map

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-04-05 11:04:11 +02:00
Wolfgang Bumiller a7dac7e733 bump version to 2.11.1-4
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-03-21 15:35:50 +01:00
Alexandre Derumier 46598e97c3 qemu-img : add -n option to dd to skip destination image create 2018-03-21 15:34:39 +01:00
Fabian Grünbichler 8e326f3032 build: use 3.0 source format
instead of manually including and calling quilt. resulting binary debs
are identical.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2018-03-14 14:18:17 +01:00
Thomas Lamprecht 8fefb8827a buildsys: remove new PPC specific files
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2018-03-01 10:26:44 +01:00
Geert Stappers 426b89f032 debian/rules: don't disable Flat Device Tree
I don't know why fdt, Flat Device Tree, is disabled,
but that disabling blocks building e.g. qemu-system-aarch64.
It stops the build and yields this:

 ERROR: fdt disabled but some requested targets require it.
        You can turn off fdt only if you also disable all the system
        emulation targets which need it
        (by specifying a cut down --target-list).

Signed-off-by: Geert Stappers <stappers@stappers.it>
2018-03-01 08:13:41 +01:00
Wolfgang Bumiller d201635146 bump version to 2.11.1-3
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-23 10:33:56 +01:00
Wolfgang Bumiller c854115a5f merge: qemu-img dd: add isize parameter
to write small images from stdin to bigger destinations

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-23 10:33:09 +01:00
Wolfgang Bumiller 707e85d013 bump version to 2.11.1-2
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-22 17:15:45 +01:00
Wolfgang Bumiller 23f2c0ccb0 reapply: vma: add throttling options to drive mapping fifo protocol
This one got lost when rebasing

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-22 17:15:45 +01:00
Wolfgang Bumiller 6838f03890 bump version to 2.11.1-1
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-22 12:40:28 +01:00
Wolfgang Bumiller db442fc8d3 bump version to 2.9.1-9
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-19 10:43:06 +01:00
Wolfgang Bumiller 507c6de3ce merge EPYC and EPYC-IPBP cpu models
and a patch format cleanup round

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-19 10:40:26 +01:00
Wolfgang Bumiller b07d2367db vma: add throttling options to drive mapping fifo protocol
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-19 10:39:42 +01:00
Wolfgang Bumiller 23102ed6dc patch cleanup
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-19 10:38:54 +01:00
Wolfgang Bumiller 84303d56d7 bump version to 2.9.1-8
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-08 10:16:07 +01:00
Alexandre Derumier b45e13fe5c fix qemu 2.9 drive mirroring to nbd target
cherry pick from qemu-kvm-ev-2.9.0-16.el7_4.11.1
https://cbs.centos.org/koji/buildinfo?buildID=21003

Tue Jun 13 2017 Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-10.el7

- kvm-nbd-make-it-thread-safe-fix-qcow2-over-nbd.patch [bz#1454582]

Tue Aug 15 2017 Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.4
- kvm-nbd-strict-nbd_wr_syncv.patch [bz#1467509]
- kvm-nbd-read_sync-and-friends-return-0-on-success.patch [bz#1467509]
- kvm-nbd-make-nbd_drop-public.patch [bz#1467509]
- kvm-nbd-server-get-rid-of-nbd_negotiate_read-and-friends.patch [bz#1467509]

Mon Oct 09 2017 Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.9
- kvm-nbd-client-Fix-regression-when-server-sends-garbage.patch [bz#1495474]
- kvm-fix-build-failure-in-nbd_read_reply_entry.patch [bz#1495474]
- kvm-nbd-client-avoid-spurious-qio_channel_yield-re-entry.patch [bz#1495474]
- kvm-nbd-client-avoid-read_reply_co-entry-if-send-failed.patch [bz#1495474]
- kvm-qemu-iotests-improve-nbd-fault-injector.py-startup-p.patch [bz#1495474]
- kvm-qemu-iotests-test-NBD-over-UNIX-domain-sockets-in-08.patch [bz#1495474]
- kvm-block-nbd-client-nbd_co_send_request-fix-return-code.patch [bz#1495474]
- Resolves: bz#1495474
2018-02-08 10:12:21 +01:00
Wolfgang Bumiller db2a3b4757 bump version to 2.9.1-7
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-08 10:03:52 +01:00
Wolfgang Bumiller 22ea5045c3 fix #1642: merge: ratelimit: don't align wait time with slices
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-08 10:03:10 +01:00
Wolfgang Bumiller ec24bd7a23 bump version to 2.9.1-6
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-01-15 15:26:08 +01:00
Wolfgang Bumiller 3dcc8d3ba2 merge SPEC_CTRL MSR and -IBRS CPU model patches
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-01-15 15:26:07 +01:00
Wolfgang Bumiller 2bd9a6dd9e bump version to 2.9.1-5
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-12-06 11:50:25 +01:00
Wolfgang Bumiller e49090106b merge gluster fixes
* block/gluster: glfs_lseek() workaround
     https://bugzilla.redhat.com/show_bug.cgi?id=1425293
     https://bugzilla.redhat.com/show_bug.cgi?id=1451191

* gluster: add support for PREALLOC_MODE_FALLOC

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-12-06 11:46:25 +01:00
Wolfgang Bumiller 18eb98f0a4 bump version to 2.9.1-4
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-12-06 09:06:59 +01:00
Wolfgang Bumiller c25a222062 merge CVE-2017-17381 fix and backup race condition fix
* CVE-2017-17381: virtio: divide by zero exception while updating rings
* race condition when issuing a 'backup-stop' command

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-12-06 09:06:59 +01:00
Wolfgang Bumiller c53dfb5728 bump version to 2.9.1-3 2017-11-29 10:15:04 +01:00
Wolfgang Bumiller 5b379b84ff lower debhelper dependency to version 9
We're not actually using anything from > 7 - but we also
don't build anywhere with a version < 9.
2017-10-17 12:52:59 +02:00
Wolfgang Bumiller 8d4a2d3f55 bump version to 2.9.1-2
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-10-16 14:05:22 +02:00
Wolfgang Bumiller e780c1e758 cleanup
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-10-16 14:05:22 +02:00
Emmanuel Kasper 723a82fbc5 Add a 'Conflicts' with qemu-system-common from Debian
Both qemu-system-common and our pve-qemu-kvm package install the
file /usr/bin/virtfs-proxy-helper.

Since qemu-system-common does not have reverse dependencies in Debian for
packages besides  qemu-system-<arch>, and ovmf, which we don't want to
install anyway, we do not need a 'Provides' for it.

Acked-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-10-16 14:05:22 +02:00
Emmanuel Kasper b090f37a6b Provides a qemu-system-x86 virtual package
This allows adding additional debian packages on pve hosts
which depends on a qemu binary being installed.

The following install paths were tested:

 * install of proxmox-ve on debian systems with standard package
 set:  works as expected

 * install of proxmox-ve on debian having the debian qemu package
 installed: refused by the package manager as expected, until
 qemu, qemu-system-x86, libspice-server1 are deinstalled

 * manual install of qemu-system-x86 after proxmox-ve
 is installed: refused by the package manager as expected, until
 libspice-server1 is installed. If libspice-server1 is installed
 then proxmox-ve is deinstalled.

 * install of packages depending on qemu-system-x86
 having proxmox-ve installed: thoses packages are installed as
 expected, no conflict

Acked-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-10-16 14:05:22 +02:00
Emmanuel Kasper 2c2626ddc3 Bump dephelper compatibility level to 10
The debian package content was found to be the same
with diffoscope. No functional change.

Acked-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-10-16 14:05:22 +02:00
Emmanuel Kasper fd202a5abe Install userspace utilities and UEFI roms via dh_install
Acked-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-10-16 14:05:22 +02:00
Emmanuel Kasper 68ba098a84 Remove deprecated dh_clean -k
Acked-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-10-16 14:05:22 +02:00
Wolfgang Bumiller fb8b489c87 fix #1107: merge: virtio: fix descriptor counting in virtqueue_pop 2017-10-16 09:54:18 +02:00
Fabian Grünbichler e1375c973b build: reformat debian/control
using wrap-and-sort -abt
2017-10-04 11:05:33 +02:00
Wolfgang Bumiller ddbcf45e51 bump version to 2.9.1-1 2017-09-08 09:44:31 +02:00
Wolfgang Bumiller 6c7dbd74a9 bump version to 2.9.0-5 2017-09-05 10:13:07 +02:00
Wolfgang Bumiller 507c2194b2 cleanups & style fixups 2017-09-05 10:05:47 +02:00
Fabian Grünbichler 027092309e fix #1420: fix stop mode backup with virtio-blk
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2017-09-05 09:51:36 +02:00
Fabian Grünbichler ab8770fa38 bump version to 2.9.0-4 2017-08-14 13:33:21 +02:00
Wolfgang Bumiller 2ab9b48ef8 vma: fix regression in backup with non-cluster-aligned sizes 2017-08-14 13:29:14 +02:00
Wolfgang Bumiller 4741af5c8f bump version to 2.9.0-3 2017-08-07 10:34:19 +02:00
Wolfgang Bumiller e74c0f316d add CVE fixes
CVE-2017-7539:
   qemu-nbd crashes due to undefined I/O coroutine
 CVE-2017-11434:
   slirp: out-of-bounds read while parsing dhcp options
 CVE-2017-11334:
   exec: oob access during dma operation
 CVE-2017-10806:
   usb-redirect: stack buffer overflow in debug logging
 CVE-2017-10664:
   qemu-nbd: server breaks with SIGPIPE upon client abort
 CVE-2017-9524:
   nbd: segmentation fault due to client non-negotiation
 CVE-2017-9503:
   scsi: null pointer dereference while processing megasas command
2017-08-07 10:32:32 +02:00
Wolfgang Bumiller 67af0fa481 rebased pve patches 2017-08-07 10:16:57 +02:00
Wolfgang Bumiller 3c6facff3f add qemu-img dd stdin/stdout pipe patch 2017-06-23 12:12:36 +02:00
Wolfgang Bumiller 730abe448d bump version to 2.9.0-2 2017-06-06 13:27:30 +02:00
Wolfgang Bumiller 90a6d95729 merge various stable fixes 2017-06-06 13:27:30 +02:00
Wolfgang Bumiller f185a9695e update to 2.9.0 2017-04-21 11:08:44 +02:00
Wolfgang Bumiller 076b402685 update to 2.9.0-rc5 2017-04-19 12:11:00 +02:00
Emmanuel Kasper a21f577853 Disable building the qemu-guest-agent (binary + docs)
This fixes a conflict when installing the qemu-guest-agent debian
package, where our pve-qemu-kvm and the debian package both
tried to install the usr/share/man/man8/qemu-ga.8.gz file
2017-04-11 12:57:17 +02:00
Emmanuel Kasper 2fb093cfd6 Split the very long configure line to fit in 80 columns
No functionnal changes
2017-04-11 12:57:12 +02:00
Wolfgang Bumiller 4516929316 bump version to 2.9.0-1~rc3 2017-04-05 12:15:08 +02:00
Wolfgang Bumiller a544966dce update to 2.9.0-rc2 build files 2017-04-05 11:40:20 +02:00
Wolfgang Bumiller 9525982417 import stable-4 build files 2017-04-05 11:39:09 +02:00