Format: 1.8 Date: Thu, 10 Aug 2017 12:44:47 +0200 Source: libvirt Binary: libvirt-bin libvirt-clients libvirt-daemon libvirt-daemon-system libvirt0 libvirt-doc libvirt-dev libvirt-sanlock libnss-libvirt Architecture: s390x s390x_translations Version: 3.6.0-1ubuntu1~ppa1 Distribution: artful Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Christian Ehrhardt Description: libnss-libvirt - nss plugin providing IP add ress resolution for virtual machines libvirt-bin - programs for the libvirt library libvirt-clients - Programs for the libvirt library libvirt-daemon - Virtualization daemon libvirt-daemon-system - Libvirt daemon configuration files libvirt-dev - development files for the libvirt library libvirt-doc - documentation for the libvirt library libvirt-sanlock - Sanlock plugin for virtlockd libvirt0 - library for interfacing with different virtualization systems Launchpad-Bugs-Fixed: 1697610 1708305 1709818 Changes: libvirt (3.6.0-1ubuntu1~ppa1) artful; urgency=medium . * Merged with Debian unstable (3.6) This closes several bugs: - aarch64: improved chardev handling (LP: #1697610) - Forbid locking memory without memtune (LP: #1708305) * Remaining changes: - Disable sheepdog (universe dependency) - Disable libssh2 support (universe dependency) - Disable firewalld support (universe dependency) - Disable selinux - Set qemu-group to kvm (for compat with older ubuntu) - Regularly clear AppArmor profiles for vms that no longer exist - Additional apport package-hook - Modifications to adapt for our delayed switch away from libvirt-bin (can be dropped >18.04). + d/p/ubuntu/libvirtd-service-add-bin-alias.patch: systemd: define alias to old service name so that old references work + d/p/ubuntu/libvirtd-init-add-bin-alias.patch: sysv init: define alias to old service name so that old references work + d/control: transitional package with the old name and maintainer scripts to handle the transition - Backwards compatible handling of group rename (can be dropped >18.04). - config details and autostart of default bridged network. Creating that is now the default in general, yet our solution provides the following on top as of today: + nat only on some ports + autostart the default network by default + do not autostart if 192.168.122.0 is already taken (e.g. in containers) - d/p/ubuntu/Allow-libvirt-group-to-access-the-socket.patch: This is the group based access to libvirt functions as it was used in Ubuntu for quite long. + d/p/ubuntu/daemon-augeas-fix-expected.patch fix some related tests due to the group access change. - ubuntu/parallel-shutdown.patch: set parallel shutdown by default. - d/p/ubuntu/enable-kvm-spice.patch: compat with older Ubuntu qemu/kvm which provided a separate kvm-spice. - d/p/ubuntu/storage-disable-gluster-test: gluster not enabled, skip test - d/p/ubuntu/ubuntu-libxl-qemu-path.patch: this change was split. The section that adapts the path of the emulator to the Debian/Ubuntu packaging is kept. - d/p/ubuntu/ubuntu-libxl-Fix-up-VRAM-to-minimum-requirements.patch: auto set VRAM to minimum requirements - d/p/ubuntu/xen-default-uri.patch: set default URI on xen hosts - Add libxl log directory - libvirt-uri.sh: Automatically switch default libvirt URI for users on Xen dom0 via user profile (was missing on changelogs before) - d/p/ubuntu/apibuild-skip-libvirt-common.h: drop libvirt-common.h from included_files to avoid build failures due to duplicate definitions. - Update README.Debian with Ubuntu changes - Convert libvirt0, libnss_libvirt and libvirt-dev to multi-arch. - Enable some additional features on ppc64el and s390x (for arch parity) + systemtap, zfs, numa and numad on s390x. + systemtap on ppc64el. - fix conffile upgrade handling to avoid obsolete files and inactive duplicates (LP 1694159) - d/t/control, d/t/smoke-qemu-session: fixup smoke-qemu-session by making vmlinuz available and accessible (Debian bug 848314) - d/test/smoke-lxc workaround for debbug 848317/867379 - d/t/control, d/t/smoke-lxc: fix up lxc smoke test (Debian bug 848317) - Extended handling of apparmor profiles - clear lost profiles via cron - Add dnsmasq configuration to work with system wide dnsmasq (drop >18.04, no more UCA onto Xenial then which has global dnsmasq by default). - d/p/ubuntu/ubuntu_machine_type.patch: accept ubuntu types as pci440fx - conffile handling of files dropped in 3.5 (can be dropped >18.04) + /etc/init.d/virtlockd was sysv init only + /etc/apparmor.d/local/usr.sbin.libvirtd and /etc/apparmor.d/local/usr.lib.libvirt.virt-aa-helper are now generated by dh_apparmor as needed - Reworked apparmor Delta, especially the more complex delta is dropped now, also our former delta is now split into logical pieces, has improved comments and is part of a continuous upstreaming effort. Listing related remaining changes: + d/p/0001-apparmor-Allow-pygrub-to-run-on-Debian-Ubuntu.patch: apparmor: Allow pygrub to run on Debian/Ubuntu + d/p/0002-apparmor-libvirt-qemu-Allow-macvtap-access.patch: apparmor, libvirt-qemu: Allow macvtap access + d/p/0003-apparmor-libvirt-qemu-Allow-read-access-to-overcommi.patch: apparmor, libvirt-qemu: Allow read access to overcommit_memory + d/p/0004-apparmor-Explicit-deny-for-setpcap.patch: apparmor: Explicit deny for setpcap + d/p/0005-apparmor-libvirt-qemu-Allow-use-of-sgabios.patch: apparmor, libvirt-qemu: Allow use of sgabios + d/p/0006-apparmor-libvirt-qemu-Silence-lttng-related-deny-mes.patch: apparmor, libvirt-qemu: Silence lttng related deny messages + d/p/0007-apparmor-libvirt-qemu-Allow-owner-read-access-to-PRO.patch: apparmor, libvirt-qemu: Allow owner read access to @{PROC}/*/auxv + d/p/0008-apparmor-libvirt-qemu-Allow-read-access-to-sysfs-sys.patch: apparmor, libvirt-qemu: Allow read access to sysfs system info + d/p/0009-apparmor-libvirt-qemu-Allow-read-access-to-max_mem_r.patch: apparmor, libvirt-qemu: Allow read access to max_mem_regions + d/p/0010-apparmor-libvirt-qemu-Allow-qemu-block-extra-librari.patch: apparmor, libvirt-qemu: Allow qemu-block-extra libraries + d/p/0011-apparmor-libvirt-qemu-Allow-access-to-hugepage-mount.patch: apparmor, libvirt-qemu: Allow access to hugepage mounts + d/p/0012-apparmor-libvirtd-Allow-access-to-netlink-sockets.patch: apparmor, libvirtd: Allow access to netlink sockets + d/p/0013-apparmor-Add-rules-for-mediation-support.patch: apparmor: Add rules for mediation support + d/p/0014-apparmor-virt-aa-helper-Improve-comment-about-backin.patch: apparmor, virt-aa-helper: Improve comment about backing store + d/p/0015-apparmor-virt-aa-helper-Allow-access-to-ecryptfs-fil.patch: apparmor, virt-aa-helper: Allow access to ecryptfs files + d/p/0016-apparmor-libvirtd-Allow-ixr-to-var-lib-libvirt-virtd.patch: apparmor, libvirtd: Allow ixr to /var/lib/libvirt/virtd* + d/p/0017-apparmor-virt-aa-helper-Allow-access-to-tmp-director.patch: apparmor, virt-aa-helper: Allow access to tmp directories + d/p/0018-apparmor-virt-aa-helper-Add-ipv6-network-policy.patch: apparmor, virt-aa-helper: Add ipv6 network policy + d/p/0019-apparmor-virt-aa-helper-Allow-access-to-sys-bus-usb-.patch: apparmor, virt-aa-helper: Allow access to /sys/bus/usb/devices + d/p/0020-apparmor-virt-aa-helper-Allow-various-storage-pools-.patch: apparmor, virt-aa-helper: Allow various storage pools and image locations + d/p/0021-apparmor-virt-aa-helper-Add-openvswitch-support.patch: apparmor, virt-aa-helper: Add openvswitch support + d/p/0022-apparmor-drop-references-to-qemu-kvm.patch: apparmor: drop references to qemu-kvm + d/p/0023-apparmor-qemu-won-t-call-qemu-nbd.patch: apparmor: qemu won't call qemu-nbd + d/p/0024-apparmor-virt-aa-helper-Allow-access-to-name-service.patch: apparmor, virt-aa-helper: Allow access to name services + d/p/0025-apparmor-fix-newer-virt-manager-1.4.0.patch: Add Apparmor permissions so virt-manager 1.4.0 viewing works (LP 1668681). + d/p/0026-apparmor-add-generic-base-vfio-device.patch: apparmor: add /dev/vfio for vf (hot) attach (LP 1680384). + d/p/0027-apparmor-allow-reading-cmdline-of-shutdown-signal.patch: apparmor: allow to parse cmdline of the pid that send the shutdown signal (LP 1680384). + d/p/0028-apparmor-add-default-pki-path-of-lbvirt-spice.patch: apparmor: add default pki path of lbvirt-spice (LP 1690140) + d/p/0029-appmor-libvirt-qemu-Add-9p-support.patch: appmor, libvirt-qemu: Add 9p support + d/p/0030-virt-aa-helper-Complete-9p-support.patch: virt-aa-helper: add l to 9p file options. + d/p/0031-virt-aa-helper-Ask-for-no-deny-rule-for-readonly-dis.patch: virt-aa-helper: Ask for no deny rule for readonly disk (renamed and reworded, was virt-aa-helper-no-explicity-deny-for-basefiles.patch) + d/p/0032-apparmor-libvirt-qemu-Allow-reading-charm-specific-c.patch: apparmor, libvirt-qemu: Allow reading charm-specific ceph config + d/p/0033-UBUNTU-only-apparmor-for-kvm.powerpc-LP-1680384.patch: allow commands executed by ubuntu only kvm wrapper on ppc64el (LP 1686621). + d/p/0034-apparmor-virt-aa-helper-access-for-snapped-nova.patch: apparmor, virt-aa-helper: access for snapped nova * Dropped Changes (Upstream): - d/p/ubuntu/fix-libxl-default-driver-name.patch: avoid an issue with default driver entries missing name='qemu'. - d/p/u/aa-helper-Properly-link-with-storage-driver.patch (LP 1704782) Fix to be able to follow BackinStorage chains when creating per guest apparmor rules. * Dropped Changes (In Debian): - Enable esx support + Add build-dep to libcurl4-gnutls-dev (required for esx) * Added Changes: - d/p/ubuntu-aa/0035-virt-aa-helper-locking-disk-files-for-qemu-2.10.patch: for compatibility with the behavior of qemu 2.10 this adds locking permission to rules generated for disk files (LP: #1709818) Checksums-Sha1: 30e82209a9111d07976ccd0f45fc38e05dbabe47 371002 libnss-libvirt-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 2e4cda11b25fc8e9b999d771c0d45669f52cac33 111668 libnss-libvirt_3.6.0-1ubuntu1~ppa1_s390x.deb a38de680b7da9d7fa41e5f5c4b3272fc107e8b34 5034 libvirt-bin_3.6.0-1ubuntu1~ppa1_s390x.deb 27e27eeff225c228a22253d17847096420f0a103 1750690 libvirt-clients-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 67eb4d796d9c6f8cb9e818f81118e996389472da 532224 libvirt-clients_3.6.0-1ubuntu1~ppa1_s390x.deb c0aadef5c12ac9e886765af06b38f3ca134770e2 9206932 libvirt-daemon-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 4096a0aeaf6b608197a14d17fd8e037ce21ebd26 120254 libvirt-daemon-system-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb f345d4e5888c061bd1521e2ee7c05f0e768b92f1 75922 libvirt-daemon-system_3.6.0-1ubuntu1~ppa1_s390x.deb 718e14cb3be1eb55f1ac70168bedb9ae87c3680f 1646858 libvirt-daemon_3.6.0-1ubuntu1~ppa1_s390x.deb bec26b0635cc3bc02eabcb24804c1a032e4aab28 140780 libvirt-dev_3.6.0-1ubuntu1~ppa1_s390x.deb 29744b4c86f46c1e19694f9b8d37bd8427a09601 107456 libvirt-sanlock-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 7cb943cd202d01d5d3b4b59892bbdd29f78cb4b1 39642 libvirt-sanlock_3.6.0-1ubuntu1~ppa1_s390x.deb 624941eab871d60aa98d1fb41fbd7b88a334d462 4992158 libvirt0-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb c8e58c62758b2629bc3c14a9cf1c900a1bd1f2ea 1043188 libvirt0_3.6.0-1ubuntu1~ppa1_s390x.deb be0ba4c9a3ea8d7c6f88705e6b207e4b7b7e5a2b 16045 libvirt_3.6.0-1ubuntu1~ppa1_s390x.buildinfo 124414d47b301b3e44b8010d71db3780b6197a9b 18922586 libvirt_3.6.0-1ubuntu1~ppa1_s390x_translations.tar.gz Checksums-Sha256: 104243e3ff78518cb0b856aa9ec013e8bf2b66dd696b36edc837a9337f198421 371002 libnss-libvirt-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 83801b81c79f4a1df4cdc690bcdbbd805bdf3cd633b92e7badc320dedf46ad94 111668 libnss-libvirt_3.6.0-1ubuntu1~ppa1_s390x.deb acdcf9e68acc0e26182b3a49d46a645d3960151713c7ecc8dd3e3c6fdf10f1ee 5034 libvirt-bin_3.6.0-1ubuntu1~ppa1_s390x.deb 4cc4eea29232badb64e9f4a65b4f718466757e9e0c6ebbe7c8efdc6020f643c9 1750690 libvirt-clients-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 2c8172495614c542dec432e173e56bbda46502c0b310abfc30f6d133a14a0a8a 532224 libvirt-clients_3.6.0-1ubuntu1~ppa1_s390x.deb acdf81e23cb097d723d4ca7d89ba633173a741518775f963db36f22f8e119f56 9206932 libvirt-daemon-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb d11162cf5eddf42f597b36ab9c80502e03c6dc428f67cffcf0313147dad11add 120254 libvirt-daemon-system-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 741d25ce19be01e1b5c1f357147be61e4de49c4b27d28042b56911a6ff0f4f6d 75922 libvirt-daemon-system_3.6.0-1ubuntu1~ppa1_s390x.deb 4577fc4ca01d9e19ac8535696131b3de04cfdfdcad46b9f8086bc2acb267dc3a 1646858 libvirt-daemon_3.6.0-1ubuntu1~ppa1_s390x.deb 1498e5b5c9dbb02cf5ed15f2b09942f93c5dc61631702f38c3c8b34ab7f1ca2d 140780 libvirt-dev_3.6.0-1ubuntu1~ppa1_s390x.deb ac37d8c129b144e91a1b3db3e51ade13d3a6f5d282634f1ec13a3abc84d2c56c 107456 libvirt-sanlock-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 74362a43f1871cd4853a987ca04280f46e69ddb5c1ec7450b05f0c4f37216f0a 39642 libvirt-sanlock_3.6.0-1ubuntu1~ppa1_s390x.deb b82a70258d6e4768c0de5501db43225a92b79ed2bdc86476f49aae9f33690f1a 4992158 libvirt0-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 01f73de51aca127eb2bdec28f0f731b5231b644db57fcdd0193d6ea1f26f2bec 1043188 libvirt0_3.6.0-1ubuntu1~ppa1_s390x.deb 2055d37caddaf09881b6075e218ff1905d500bdc113d99df6c7d4a596e742f21 16045 libvirt_3.6.0-1ubuntu1~ppa1_s390x.buildinfo c77f74d214156ea66a9386eb11b4698e716aced243212b80233f62fd91dd43b2 18922586 libvirt_3.6.0-1ubuntu1~ppa1_s390x_translations.tar.gz Files: 92bb4beeded73dae3ff2edf5999ff300 371002 debug extra libnss-libvirt-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 00634bcc315f5393ba6e07afab580730 111668 libs extra libnss-libvirt_3.6.0-1ubuntu1~ppa1_s390x.deb 02c10115ce9c32db7906552a644dd730 5034 oldlibs extra libvirt-bin_3.6.0-1ubuntu1~ppa1_s390x.deb 11eb11cc7ebc70b94d7ada5d6735a775 1750690 debug extra libvirt-clients-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 4c59a78035a3399448ac108149020360 532224 admin optional libvirt-clients_3.6.0-1ubuntu1~ppa1_s390x.deb 3428d823d2528c974d72ff05824830c7 9206932 debug extra libvirt-daemon-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb b5e01bbce7db1857c67039ab290f044d 120254 debug extra libvirt-daemon-system-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 095ff78876a66bf4726edf37960f7c1f 75922 admin optional libvirt-daemon-system_3.6.0-1ubuntu1~ppa1_s390x.deb 908b9d6cbba4580b06b56eb956fd6aaa 1646858 admin optional libvirt-daemon_3.6.0-1ubuntu1~ppa1_s390x.deb 00625c5240e71d9e6326d514cc067a8f 140780 libdevel optional libvirt-dev_3.6.0-1ubuntu1~ppa1_s390x.deb 61fd43972c62a239bc6e690810ea7f22 107456 debug extra libvirt-sanlock-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb 6bba2c03fa2c8b18d8363e17022c5f1d 39642 libs extra libvirt-sanlock_3.6.0-1ubuntu1~ppa1_s390x.deb af18140a12c3f3a599f8dcf453653b92 4992158 debug extra libvirt0-dbgsym_3.6.0-1ubuntu1~ppa1_s390x.ddeb e576fcdbb5119f43ca90ef4bbcb497e9 1043188 libs optional libvirt0_3.6.0-1ubuntu1~ppa1_s390x.deb aca7f0979d4ceb77b198136af621c6fd 16045 libs optional libvirt_3.6.0-1ubuntu1~ppa1_s390x.buildinfo 71e770891ec0102986dd89f73e4e7d41 18922586 raw-translations - libvirt_3.6.0-1ubuntu1~ppa1_s390x_translations.tar.gz Original-Maintainer: Debian Libvirt Maintainers