Format: 1.8 Date: Thu, 10 Aug 2017 12:44:47 +0200 Source: libvirt Binary: libvirt-bin libvirt-clients libvirt-daemon libvirt-daemon-system libvirt0 libvirt-doc libvirt-dev libvirt-sanlock libnss-libvirt Architecture: s390x s390x_translations Version: 3.6.0-1ubuntu1 Distribution: artful-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Christian Ehrhardt Description: libnss-libvirt - nss plugin providing IP add ress resolution for virtual machines libvirt-bin - programs for the libvirt library libvirt-clients - Programs for the libvirt library libvirt-daemon - Virtualization daemon libvirt-daemon-system - Libvirt daemon configuration files libvirt-dev - development files for the libvirt library libvirt-doc - documentation for the libvirt library libvirt-sanlock - Sanlock plugin for virtlockd libvirt0 - library for interfacing with different virtualization systems Launchpad-Bugs-Fixed: 1697610 1708305 1709818 Changes: libvirt (3.6.0-1ubuntu1) artful; urgency=medium . * Merged with Debian unstable (3.6) This closes several bugs: - aarch64: improved chardev handling (LP: #1697610) - Forbid locking memory without memtune (LP: #1708305) * Remaining changes: - Disable sheepdog (universe dependency) - Disable libssh2 support (universe dependency) - Disable firewalld support (universe dependency) - Disable selinux - Set qemu-group to kvm (for compat with older ubuntu) - Regularly clear AppArmor profiles for vms that no longer exist - Additional apport package-hook - Modifications to adapt for our delayed switch away from libvirt-bin (can be dropped >18.04). + d/p/ubuntu/libvirtd-service-add-bin-alias.patch: systemd: define alias to old service name so that old references work + d/p/ubuntu/libvirtd-init-add-bin-alias.patch: sysv init: define alias to old service name so that old references work + d/control: transitional package with the old name and maintainer scripts to handle the transition - Backwards compatible handling of group rename (can be dropped >18.04). - config details and autostart of default bridged network. Creating that is now the default in general, yet our solution provides the following on top as of today: + nat only on some ports + autostart the default network by default + do not autostart if 192.168.122.0 is already taken (e.g. in containers) - d/p/ubuntu/Allow-libvirt-group-to-access-the-socket.patch: This is the group based access to libvirt functions as it was used in Ubuntu for quite long. + d/p/ubuntu/daemon-augeas-fix-expected.patch fix some related tests due to the group access change. - ubuntu/parallel-shutdown.patch: set parallel shutdown by default. - d/p/ubuntu/enable-kvm-spice.patch: compat with older Ubuntu qemu/kvm which provided a separate kvm-spice. - d/p/ubuntu/storage-disable-gluster-test: gluster not enabled, skip test - d/p/ubuntu/ubuntu-libxl-qemu-path.patch: this change was split. The section that adapts the path of the emulator to the Debian/Ubuntu packaging is kept. - d/p/ubuntu/ubuntu-libxl-Fix-up-VRAM-to-minimum-requirements.patch: auto set VRAM to minimum requirements - d/p/ubuntu/xen-default-uri.patch: set default URI on xen hosts - Add libxl log directory - libvirt-uri.sh: Automatically switch default libvirt URI for users on Xen dom0 via user profile (was missing on changelogs before) - d/p/ubuntu/apibuild-skip-libvirt-common.h: drop libvirt-common.h from included_files to avoid build failures due to duplicate definitions. - Update README.Debian with Ubuntu changes - Convert libvirt0, libnss_libvirt and libvirt-dev to multi-arch. - Enable some additional features on ppc64el and s390x (for arch parity) + systemtap, zfs, numa and numad on s390x. + systemtap on ppc64el. - fix conffile upgrade handling to avoid obsolete files and inactive duplicates (LP 1694159) - d/t/control, d/t/smoke-qemu-session: fixup smoke-qemu-session by making vmlinuz available and accessible (Debian bug 848314) - d/test/smoke-lxc workaround for debbug 848317/867379 - d/t/control, d/t/smoke-lxc: fix up lxc smoke test (Debian bug 848317) - Extended handling of apparmor profiles - clear lost profiles via cron - Add dnsmasq configuration to work with system wide dnsmasq (drop >18.04, no more UCA onto Xenial then which has global dnsmasq by default). - d/p/ubuntu/ubuntu_machine_type.patch: accept ubuntu types as pci440fx - conffile handling of files dropped in 3.5 (can be dropped >18.04) + /etc/init.d/virtlockd was sysv init only + /etc/apparmor.d/local/usr.sbin.libvirtd and /etc/apparmor.d/local/usr.lib.libvirt.virt-aa-helper are now generated by dh_apparmor as needed - Reworked apparmor Delta, especially the more complex delta is dropped now, also our former delta is now split into logical pieces, has improved comments and is part of a continuous upstreaming effort. Listing related remaining changes: + d/p/0001-apparmor-Allow-pygrub-to-run-on-Debian-Ubuntu.patch: apparmor: Allow pygrub to run on Debian/Ubuntu + d/p/0002-apparmor-libvirt-qemu-Allow-macvtap-access.patch: apparmor, libvirt-qemu: Allow macvtap access + d/p/0003-apparmor-libvirt-qemu-Allow-read-access-to-overcommi.patch: apparmor, libvirt-qemu: Allow read access to overcommit_memory + d/p/0004-apparmor-Explicit-deny-for-setpcap.patch: apparmor: Explicit deny for setpcap + d/p/0005-apparmor-libvirt-qemu-Allow-use-of-sgabios.patch: apparmor, libvirt-qemu: Allow use of sgabios + d/p/0006-apparmor-libvirt-qemu-Silence-lttng-related-deny-mes.patch: apparmor, libvirt-qemu: Silence lttng related deny messages + d/p/0007-apparmor-libvirt-qemu-Allow-owner-read-access-to-PRO.patch: apparmor, libvirt-qemu: Allow owner read access to @{PROC}/*/auxv + d/p/0008-apparmor-libvirt-qemu-Allow-read-access-to-sysfs-sys.patch: apparmor, libvirt-qemu: Allow read access to sysfs system info + d/p/0009-apparmor-libvirt-qemu-Allow-read-access-to-max_mem_r.patch: apparmor, libvirt-qemu: Allow read access to max_mem_regions + d/p/0010-apparmor-libvirt-qemu-Allow-qemu-block-extra-librari.patch: apparmor, libvirt-qemu: Allow qemu-block-extra libraries + d/p/0011-apparmor-libvirt-qemu-Allow-access-to-hugepage-mount.patch: apparmor, libvirt-qemu: Allow access to hugepage mounts + d/p/0012-apparmor-libvirtd-Allow-access-to-netlink-sockets.patch: apparmor, libvirtd: Allow access to netlink sockets + d/p/0013-apparmor-Add-rules-for-mediation-support.patch: apparmor: Add rules for mediation support + d/p/0014-apparmor-virt-aa-helper-Improve-comment-about-backin.patch: apparmor, virt-aa-helper: Improve comment about backing store + d/p/0015-apparmor-virt-aa-helper-Allow-access-to-ecryptfs-fil.patch: apparmor, virt-aa-helper: Allow access to ecryptfs files + d/p/0016-apparmor-libvirtd-Allow-ixr-to-var-lib-libvirt-virtd.patch: apparmor, libvirtd: Allow ixr to /var/lib/libvirt/virtd* + d/p/0017-apparmor-virt-aa-helper-Allow-access-to-tmp-director.patch: apparmor, virt-aa-helper: Allow access to tmp directories + d/p/0018-apparmor-virt-aa-helper-Add-ipv6-network-policy.patch: apparmor, virt-aa-helper: Add ipv6 network policy + d/p/0019-apparmor-virt-aa-helper-Allow-access-to-sys-bus-usb-.patch: apparmor, virt-aa-helper: Allow access to /sys/bus/usb/devices + d/p/0020-apparmor-virt-aa-helper-Allow-various-storage-pools-.patch: apparmor, virt-aa-helper: Allow various storage pools and image locations + d/p/0021-apparmor-virt-aa-helper-Add-openvswitch-support.patch: apparmor, virt-aa-helper: Add openvswitch support + d/p/0022-apparmor-drop-references-to-qemu-kvm.patch: apparmor: drop references to qemu-kvm + d/p/0023-apparmor-qemu-won-t-call-qemu-nbd.patch: apparmor: qemu won't call qemu-nbd + d/p/0024-apparmor-virt-aa-helper-Allow-access-to-name-service.patch: apparmor, virt-aa-helper: Allow access to name services + d/p/0025-apparmor-fix-newer-virt-manager-1.4.0.patch: Add Apparmor permissions so virt-manager 1.4.0 viewing works (LP 1668681). + d/p/0026-apparmor-add-generic-base-vfio-device.patch: apparmor: add /dev/vfio for vf (hot) attach (LP 1680384). + d/p/0027-apparmor-allow-reading-cmdline-of-shutdown-signal.patch: apparmor: allow to parse cmdline of the pid that send the shutdown signal (LP 1680384). + d/p/0028-apparmor-add-default-pki-path-of-lbvirt-spice.patch: apparmor: add default pki path of lbvirt-spice (LP 1690140) + d/p/0029-appmor-libvirt-qemu-Add-9p-support.patch: appmor, libvirt-qemu: Add 9p support + d/p/0030-virt-aa-helper-Complete-9p-support.patch: virt-aa-helper: add l to 9p file options. + d/p/0031-virt-aa-helper-Ask-for-no-deny-rule-for-readonly-dis.patch: virt-aa-helper: Ask for no deny rule for readonly disk (renamed and reworded, was virt-aa-helper-no-explicity-deny-for-basefiles.patch) + d/p/0032-apparmor-libvirt-qemu-Allow-reading-charm-specific-c.patch: apparmor, libvirt-qemu: Allow reading charm-specific ceph config + d/p/0033-UBUNTU-only-apparmor-for-kvm.powerpc-LP-1680384.patch: allow commands executed by ubuntu only kvm wrapper on ppc64el (LP 1686621). + d/p/0034-apparmor-virt-aa-helper-access-for-snapped-nova.patch: apparmor, virt-aa-helper: access for snapped nova * Dropped Changes (Upstream): - d/p/ubuntu/fix-libxl-default-driver-name.patch: avoid an issue with default driver entries missing name='qemu'. - d/p/u/aa-helper-Properly-link-with-storage-driver.patch (LP 1704782) Fix to be able to follow BackinStorage chains when creating per guest apparmor rules. * Dropped Changes (In Debian): - Enable esx support + Add build-dep to libcurl4-gnutls-dev (required for esx) * Added Changes: - d/p/ubuntu-aa/0035-virt-aa-helper-locking-disk-files-for-qemu-2.10.patch: for compatibility with the behavior of qemu 2.10 this adds locking permission to rules generated for disk files (LP: #1709818) Checksums-Sha1: d368f607b1639d427a16e0ebf3f0ae3c6d0c3274 370800 libnss-libvirt-dbgsym_3.6.0-1ubuntu1_s390x.ddeb e5dfe1e82b97c40382e1754826c98e6894cf3eb3 111414 libnss-libvirt_3.6.0-1ubuntu1_s390x.deb 1bed55cb67cfc254fc93a9635be481c829e3d508 5026 libvirt-bin_3.6.0-1ubuntu1_s390x.deb 291969da992d0627b6f3ed3b16da74024ec9efcf 1751644 libvirt-clients-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 668aab8e5f915b28566e5ce40f9d367bc8ca3b5a 532350 libvirt-clients_3.6.0-1ubuntu1_s390x.deb f35d8766afa51ed5b90fa71eb4a993d7c7895cd9 9187212 libvirt-daemon-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 6f0365ebeab274ac1bfef5b6db600be3ecef9cc2 120232 libvirt-daemon-system-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 15140612f4dbbb3ca5bb1f993e61a93f063addc0 75970 libvirt-daemon-system_3.6.0-1ubuntu1_s390x.deb 5debdfce1af6c4f0f26909a32d284c112284dab6 1650100 libvirt-daemon_3.6.0-1ubuntu1_s390x.deb 44a3fb0490cc1044a25ba84c38d05bc67b137c68 140760 libvirt-dev_3.6.0-1ubuntu1_s390x.deb 50deea81148337545dc6ffa40d96784cc898e83d 107436 libvirt-sanlock-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 99630f9342af0950bb20bd28131835150ed0fb4a 39624 libvirt-sanlock_3.6.0-1ubuntu1_s390x.deb 4ad9cc37430356c99a7b53f75e5254524ce8fc5b 4992124 libvirt0-dbgsym_3.6.0-1ubuntu1_s390x.ddeb eace0f694d4e0caade30f07ebefe480ab5507db6 1041730 libvirt0_3.6.0-1ubuntu1_s390x.deb bd4fa9b7565592e52ab6c6238c677d29489c8306 15785 libvirt_3.6.0-1ubuntu1_s390x.buildinfo 1a6690b9627efc10c1cfea51ea827889120a3e52 18922558 libvirt_3.6.0-1ubuntu1_s390x_translations.tar.gz Checksums-Sha256: f3a671a490bc5eaf3f4bafeffb8c525410d25c1e0d4481b29e6132073fd8a43d 370800 libnss-libvirt-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 0bab82137c4c501413c9c59f6c520f90a727922810ea171185227e3c95635717 111414 libnss-libvirt_3.6.0-1ubuntu1_s390x.deb 88493e7b6850454565461211b416b8884b499181feaf5d1b0bedc898eb3aa963 5026 libvirt-bin_3.6.0-1ubuntu1_s390x.deb cf9988055fad6eeb2742228fdce2c73fe95b79fa262dfca7dff6edd3c8ce4019 1751644 libvirt-clients-dbgsym_3.6.0-1ubuntu1_s390x.ddeb b89a57686d2ef9fbed4c31a7defa2eb9001f030a50b742fd47f56034370ebb18 532350 libvirt-clients_3.6.0-1ubuntu1_s390x.deb a160449614312590888d07a663a0183d113f67c0ed9221a01b2cab3095cfe214 9187212 libvirt-daemon-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 1e347e6a82ce5559a5cc97da6e1c0a18deb34df7915fc8f470add61fa94d508b 120232 libvirt-daemon-system-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 8e7ace1cd82f6bcffa1856d320191b8101cb88834727029472b0f09784c122c4 75970 libvirt-daemon-system_3.6.0-1ubuntu1_s390x.deb dc0260bda2e0427d4650c44012b98feacee99557a71a8d8012529ccde5c0f461 1650100 libvirt-daemon_3.6.0-1ubuntu1_s390x.deb cfbdd1a7459e144a68033627982d57bc209bf42e7d017aaf8d2dd30d65818462 140760 libvirt-dev_3.6.0-1ubuntu1_s390x.deb 8d9b318840366b3b26f3df93848cf711d800e3784becc85fceab228952bef812 107436 libvirt-sanlock-dbgsym_3.6.0-1ubuntu1_s390x.ddeb ef18bea8ff08d3dfa3b19ddcd2c9f1a819acc903727faaf56e216257621a1adb 39624 libvirt-sanlock_3.6.0-1ubuntu1_s390x.deb a08f5900f653bd9283dbc73a8d31309245f1e48e45a5b61747859ab8876a4706 4992124 libvirt0-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 2ca274497a314d79d74c87e1a28eef0f528374a7440a246248a0bc287dd9f19a 1041730 libvirt0_3.6.0-1ubuntu1_s390x.deb 7f17310839f39ae38d2a91573fb4522f854036f046ee70fa59dd6d6ba4f58a8a 15785 libvirt_3.6.0-1ubuntu1_s390x.buildinfo d10dd6b371bae0f43c209e8e7bd721f2776f253c87dd8e6b144c8f384ba004b4 18922558 libvirt_3.6.0-1ubuntu1_s390x_translations.tar.gz Files: 4d377660deb5a385150530b7e81e71f7 370800 debug extra libnss-libvirt-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 90ef0a3854bedff2e4c8ce9d10c86f02 111414 libs extra libnss-libvirt_3.6.0-1ubuntu1_s390x.deb cfcf11197bd5f05bf89029bdde1ebd2b 5026 oldlibs extra libvirt-bin_3.6.0-1ubuntu1_s390x.deb 3404a0cbf5cfcc86ba5fda126e3c9994 1751644 debug extra libvirt-clients-dbgsym_3.6.0-1ubuntu1_s390x.ddeb 57df11a72f36de69b94e0ff3158de06e 532350 admin optional libvirt-clients_3.6.0-1ubuntu1_s390x.deb ee53aa6b6a4ffca788af83033893e283 9187212 debug extra libvirt-daemon-dbgsym_3.6.0-1ubuntu1_s390x.ddeb a98cdd1775142e521d793e99899e7c69 120232 debug extra libvirt-daemon-system-dbgsym_3.6.0-1ubuntu1_s390x.ddeb a4571111597f60a04196cd6e7bdc3818 75970 admin optional libvirt-daemon-system_3.6.0-1ubuntu1_s390x.deb 6fbc3d354386c0cbc54ce35b2015a757 1650100 admin optional libvirt-daemon_3.6.0-1ubuntu1_s390x.deb f89a2ce5a2883a9b310de63f296c0e06 140760 libdevel optional libvirt-dev_3.6.0-1ubuntu1_s390x.deb d4a4d9bc6273a2c8bb3acd4b0862f083 107436 debug extra libvirt-sanlock-dbgsym_3.6.0-1ubuntu1_s390x.ddeb b97ddb20ef05cc28b44e1df76889a2a4 39624 libs extra libvirt-sanlock_3.6.0-1ubuntu1_s390x.deb 8c517574083d8273e1abbfb630673759 4992124 debug extra libvirt0-dbgsym_3.6.0-1ubuntu1_s390x.ddeb d336eccf318597a0e53d3a105c41f3bc 1041730 libs optional libvirt0_3.6.0-1ubuntu1_s390x.deb 02a1bff8b8891ef36418c409a87d8ddb 15785 libs optional libvirt_3.6.0-1ubuntu1_s390x.buildinfo 5174b57e8d308c16c7b07fb59422aa46 18922558 raw-translations - libvirt_3.6.0-1ubuntu1_s390x_translations.tar.gz Original-Maintainer: Debian Libvirt Maintainers