2006-09-21 19:24:37 +04:00
# -*- rpm-spec -*-
2016-10-19 17:49:17 +03:00
# This spec file assumes you are building on a Fedora or RHEL version
# that's still supported by the vendor: that means Fedora 23 or newer,
# or RHEL 6 or newer. It may need some tweaks for other distros.
2015-09-22 22:56:50 +03:00
# If neither fedora nor rhel was defined, try to guess them from dist
2016-10-19 17:49:17 +03:00
%if (0%{?fedora} && 0%{?fedora} >= 23) || (0%{?rhel} && 0%{?rhel} >= 6)
2016-05-11 21:03:57 +03:00
%define supported_platform 1
2016-05-04 17:43:08 +03:00
%else
2016-05-11 21:03:57 +03:00
%define supported_platform 0
2011-03-16 20:50:44 +03:00
%endif
2011-12-05 21:22:10 +04:00
# Default to skipping autoreconf. Distros can change just this one line
# (or provide a command-line override) if they backport any patches that
# touch configure.ac or Makefile.am.
2015-09-22 22:56:50 +03:00
%{!?enable_autotools:%global enable_autotools 0}
2011-12-05 21:22:10 +04:00
2009-09-16 19:02:38 +04:00
2016-05-04 18:21:42 +03:00
# The hypervisor drivers that run in libvirtd
2016-05-04 17:44:57 +03:00
%define with_xen 0%{!?_without_xen:1}
%define with_qemu 0%{!?_without_qemu:1}
%define with_lxc 0%{!?_without_lxc:1}
%define with_uml 0%{!?_without_uml:1}
%define with_libxl 0%{!?_without_libxl:1}
%define with_vbox 0%{!?_without_vbox:1}
2009-09-16 19:02:38 +04:00
2012-04-03 14:54:27 +04:00
%define with_qemu_tcg %{with_qemu}
2014-07-17 17:48:37 +04:00
%define qemu_kvm_arches %{ix86} x86_64
%if 0%{?fedora}
2016-05-04 17:43:08 +03:00
%define qemu_kvm_arches %{ix86} x86_64 %{power64} s390x %{arm} aarch64
2014-07-17 17:48:37 +04:00
%endif
%if 0%{?rhel}
%define with_qemu_tcg 0
%define qemu_kvm_arches x86_64
2016-03-17 13:00:54 +03:00
%if 0%{?rhel} >= 7
2017-01-27 20:47:26 +03:00
%define qemu_kvm_arches x86_64 %{power64} aarch64
2016-03-17 13:00:54 +03:00
%endif
2012-11-16 21:50:20 +04:00
%endif
%ifarch %{qemu_kvm_arches}
2013-01-10 00:50:03 +04:00
%define with_qemu_kvm %{with_qemu}
2012-04-03 14:54:27 +04:00
%else
2013-01-10 00:50:03 +04:00
%define with_qemu_kvm 0
2012-04-03 14:54:27 +04:00
%endif
2014-07-17 17:48:37 +04:00
%if ! %{with_qemu_tcg} && ! %{with_qemu_kvm}
%define with_qemu 0
%endif
2012-04-03 15:05:32 +04:00
# Then the hypervisor drivers that run outside libvirtd, in libvirt.so
%define with_openvz 0%{!?_without_openvz:1}
%define with_vmware 0%{!?_without_vmware:1}
2009-09-16 19:02:38 +04:00
%define with_phyp 0%{!?_without_phyp:1}
%define with_esx 0%{!?_without_esx:1}
2011-07-13 18:05:18 +04:00
%define with_hyperv 0%{!?_without_hyperv:1}
2009-09-16 19:02:38 +04:00
2012-04-03 15:05:32 +04:00
# Then the secondary host drivers, which run inside libvirtd
2016-05-04 17:43:08 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2016-05-04 17:44:57 +03:00
%define with_storage_rbd 0%{!?_without_storage_rbd:1}
2012-05-22 12:07:02 +04:00
%else
2013-01-10 00:50:03 +04:00
%define with_storage_rbd 0
2012-05-14 13:06:42 +04:00
%endif
2016-05-04 17:43:08 +03:00
%if 0%{?fedora}
2016-05-04 17:44:57 +03:00
%define with_storage_sheepdog 0%{!?_without_storage_sheepdog:1}
2012-07-18 23:06:58 +04:00
%else
2013-01-10 00:50:03 +04:00
%define with_storage_sheepdog 0
2012-07-18 23:06:58 +04:00
%endif
2016-05-04 17:44:57 +03:00
%define with_storage_gluster 0%{!?_without_storage_gluster:1}
%define with_numactl 0%{!?_without_numactl:1}
2009-09-16 19:02:38 +04:00
# A few optional bits off by default, we enable later
2012-11-12 11:02:23 +04:00
%define with_fuse 0%{!?_without_fuse:0}
2010-12-23 11:44:19 +03:00
%define with_cgconfig 0%{!?_without_cgconfig:0}
2011-01-18 21:37:45 +03:00
%define with_sanlock 0%{!?_without_sanlock:0}
2011-07-07 17:45:07 +04:00
%define with_systemd 0%{!?_without_systemd:0}
2012-03-24 05:35:20 +04:00
%define with_numad 0%{!?_without_numad:0}
network: use firewalld instead of iptables, when available
* configure.ac, spec file: firewalld defaults to enabled if dbus is
available, otherwise is disabled. If --with_firewalld is explicitly
requested and dbus is not available, configure will fail.
* bridge_driver: add dbus filters to get the FirewallD1.Reloaded
signal and DBus.NameOwnerChanged on org.fedoraproject.FirewallD1.
When these are encountered, reload all the iptables reuls of all
libvirt's virtual networks (similar to what happens when libvirtd is
restarted).
* iptables, ebtables: use firewall-cmd's direct passthrough interface
when available, otherwise use iptables and ebtables commands. This
decision is made once the first time libvirt calls
iptables/ebtables, and that decision is maintained for the life of
libvirtd.
* Note that the nwfilter part of this patch was separated out into
another patch by Stefan in V2, so that needs to be revised and
re-reviewed as well.
================
All the configure.ac and specfile changes are unchanged from Thomas'
V3.
V3 re-ran "firewall-cmd --state" every time a new rule was added,
which was extremely inefficient. V4 uses VIR_ONCE_GLOBAL_INIT to set
up a one-time initialization function.
The VIR_ONCE_GLOBAL_INIT(x) macro references a static function called
vir(Ip|Eb)OnceInit(), which will then be called the first time that
the static function vir(Ip|Eb)TablesInitialize() is called (that
function is defined for you by the macro). This is
thread-safe, so there is no chance of any race.
IMPORTANT NOTE: I've left the VIR_DEBUG messages in these two init
functions (one for iptables, on for ebtables) as VIR_WARN so that I
don't have to turn on all the other debug message just to see
these. Even if this patch doesn't need any other modification, those
messages need to be changed to VIR_DEBUG before pushing.
This one-time initialization works well. However, I've encountered
problems with testing:
1) Whenever I have enabled the firewalld service, *all* attempts to
call firewall-cmd from within libvirtd end with firewall-cmd hanging
internally somewhere. This is *not* the case if firewall-cmd returns
non-0 in response to "firewall-cmd --state" (i.e. *that* command runs
and returns to libvirt successfully.)
2) If I start libvirtd while firewalld is stopped, then start
firewalld later, this triggers libvirtd to reload its iptables rules,
however it also spits out a *ton* of complaints about deletion failing
(I suppose because firewalld has nuked all of libvirt's rules). I
guess we need to suppress those messages (which is a more annoying
problem to fix than you might think, but that's another story).
3) I noticed a few times during this long line of errors that
firewalld made a complaint about "Resource Temporarily
unavailable. Having libvirtd access iptables commands directly at the
same time as firewalld is doing so is apparently problematic.
4) In general, I'm concerned about the "set it once and never change
it" method - if firewalld is disabled at libvirtd startup, causing
libvirtd to always use iptables/ebtables directly, this won't cause
*terrible* problems, but if libvirtd decides to use firewall-cmd and
firewalld is later disabled, libvirtd will not be able to recover.
2012-08-14 22:59:52 +04:00
%define with_firewalld 0%{!?_without_firewalld:0}
2013-01-09 01:47:55 +04:00
%define with_libssh2 0%{!?_without_libssh2:0}
2014-02-04 23:37:15 +04:00
%define with_wireshark 0%{!?_without_wireshark:0}
2016-11-09 17:28:37 +03:00
%define with_libssh 0%{!?_without_libssh:0}
2014-04-11 11:20:48 +04:00
%define with_pm_utils 1
2009-07-29 13:05:39 +04:00
2009-09-16 19:02:38 +04:00
# Finally set the OS / architecture specific special cases
2008-06-12 20:10:50 +04:00
# Xen is available only on i386 x86_64 ia64
2012-02-20 20:27:11 +04:00
%ifnarch %{ix86} x86_64 ia64
2013-01-10 00:50:03 +04:00
%define with_xen 0
%define with_libxl 0
2008-06-12 20:10:50 +04:00
%endif
2013-05-24 17:44:19 +04:00
# vbox is available only on i386 x86_64
%ifnarch %{ix86} x86_64
%define with_vbox 0
%endif
2011-11-10 15:33:17 +04:00
# Numactl is not available on s390[x] and ARM
%ifarch s390 s390x %{arm}
2013-01-10 00:50:03 +04:00
%define with_numactl 0
2009-11-11 21:07:34 +03:00
%endif
2009-09-16 19:02:38 +04:00
2014-02-17 16:47:32 +04:00
# libgfapi is built only on x86_64 on rhel
%ifnarch x86_64
2016-05-04 17:43:08 +03:00
%if 0%{?rhel}
2014-02-17 16:47:32 +04:00
%define with_storage_gluster 0
%endif
%endif
2015-03-05 13:40:54 +03:00
# librados and librbd are built only on x86_64 on rhel
%ifnarch x86_64
%if 0%{?rhel} >= 7
%define with_storage_rbd 0
%endif
%endif
Remove the Open Nebula driver
The Open Nebula driver has been unmaintained since it was first
introduced. The only commits have been for tree-wide cleanups.
It also has a major design flaw, in that it only knows about guests
that it has created itself, which makes it of very limited use.
Discussions wrt evolution of the VMWare ESX driver, concluded that
it should limit itself to single-node ESX operation and not try to
manage the multi-node architecture of VirtualCenter. Open Nebula
is a cluster like Virtual Center, not a single node system, so
the same reasoning applies.
The DeltaCloud project includes an Open Nebula driver and is a much
better fit architecturally, since it is explicitly targetting the
distributed multihost cluster scenario.
Thus this patch deletes the libvirt Open Nebula driver with the
recommendation that people use DeltaCloud for managing it instead.
* configure.ac: Remove probe for xmlrpc & --with-one arg
* daemon/Makefile.am, daemon/libvirtd.c, src/Makefile.am: Remove
ONE driver build
* src/opennebula/one_client.c, src/opennebula/one_client.h,
src/opennebula/one_conf.c, src/opennebula/one_conf.h,
src/opennebula/one_driver.c, src/opennebula/one_driver.c: Delete
files
* autobuild.sh, libvirt.spec.in, mingw32-libvirt.spec.in: Remove
build rules for Open Nebula
* docs/drivers.html.in, docs/sitemap.html.in: Remove reference
to OpenNebula
* docs/drvone.html.in: Delete file
2011-03-22 19:12:34 +03:00
# RHEL doesn't ship OpenVZ, VBox, UML, PowerHypervisor,
2016-02-15 17:34:24 +03:00
# VMware, libxenserver (xenapi), libxenlight (Xen 4.1 and newer),
2011-09-27 00:28:47 +04:00
# or HyperV.
2009-09-16 19:02:38 +04:00
%if 0%{?rhel}
2013-01-10 00:50:03 +04:00
%define with_openvz 0
%define with_vbox 0
%define with_uml 0
%define with_phyp 0
%define with_vmware 0
%define with_xenapi 0
%define with_libxl 0
%define with_hyperv 0
2015-06-10 10:50:00 +03:00
%define with_vz 0
2009-09-16 19:02:38 +04:00
%endif
2012-06-11 20:57:38 +04:00
# Fedora 17 / RHEL-7 are first where we use systemd. Although earlier
# Fedora has systemd, libvirt still used sysvinit there.
2016-05-04 17:43:08 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2013-01-10 00:50:03 +04:00
%define with_systemd 1
2014-04-11 11:20:48 +04:00
%define with_pm_utils 0
2011-07-07 17:45:07 +04:00
%endif
network: use firewalld instead of iptables, when available
* configure.ac, spec file: firewalld defaults to enabled if dbus is
available, otherwise is disabled. If --with_firewalld is explicitly
requested and dbus is not available, configure will fail.
* bridge_driver: add dbus filters to get the FirewallD1.Reloaded
signal and DBus.NameOwnerChanged on org.fedoraproject.FirewallD1.
When these are encountered, reload all the iptables reuls of all
libvirt's virtual networks (similar to what happens when libvirtd is
restarted).
* iptables, ebtables: use firewall-cmd's direct passthrough interface
when available, otherwise use iptables and ebtables commands. This
decision is made once the first time libvirt calls
iptables/ebtables, and that decision is maintained for the life of
libvirtd.
* Note that the nwfilter part of this patch was separated out into
another patch by Stefan in V2, so that needs to be revised and
re-reviewed as well.
================
All the configure.ac and specfile changes are unchanged from Thomas'
V3.
V3 re-ran "firewall-cmd --state" every time a new rule was added,
which was extremely inefficient. V4 uses VIR_ONCE_GLOBAL_INIT to set
up a one-time initialization function.
The VIR_ONCE_GLOBAL_INIT(x) macro references a static function called
vir(Ip|Eb)OnceInit(), which will then be called the first time that
the static function vir(Ip|Eb)TablesInitialize() is called (that
function is defined for you by the macro). This is
thread-safe, so there is no chance of any race.
IMPORTANT NOTE: I've left the VIR_DEBUG messages in these two init
functions (one for iptables, on for ebtables) as VIR_WARN so that I
don't have to turn on all the other debug message just to see
these. Even if this patch doesn't need any other modification, those
messages need to be changed to VIR_DEBUG before pushing.
This one-time initialization works well. However, I've encountered
problems with testing:
1) Whenever I have enabled the firewalld service, *all* attempts to
call firewall-cmd from within libvirtd end with firewall-cmd hanging
internally somewhere. This is *not* the case if firewall-cmd returns
non-0 in response to "firewall-cmd --state" (i.e. *that* command runs
and returns to libvirt successfully.)
2) If I start libvirtd while firewalld is stopped, then start
firewalld later, this triggers libvirtd to reload its iptables rules,
however it also spits out a *ton* of complaints about deletion failing
(I suppose because firewalld has nuked all of libvirt's rules). I
guess we need to suppress those messages (which is a more annoying
problem to fix than you might think, but that's another story).
3) I noticed a few times during this long line of errors that
firewalld made a complaint about "Resource Temporarily
unavailable. Having libvirtd access iptables commands directly at the
same time as firewalld is doing so is apparently problematic.
4) In general, I'm concerned about the "set it once and never change
it" method - if firewalld is disabled at libvirtd startup, causing
libvirtd to always use iptables/ebtables directly, this won't cause
*terrible* problems, but if libvirtd decides to use firewall-cmd and
firewalld is later disabled, libvirtd will not be able to recover.
2012-08-14 22:59:52 +04:00
# Fedora 18 / RHEL-7 are first where firewalld support is enabled
2016-05-04 17:43:08 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2013-01-10 00:50:03 +04:00
%define with_firewalld 1
network: use firewalld instead of iptables, when available
* configure.ac, spec file: firewalld defaults to enabled if dbus is
available, otherwise is disabled. If --with_firewalld is explicitly
requested and dbus is not available, configure will fail.
* bridge_driver: add dbus filters to get the FirewallD1.Reloaded
signal and DBus.NameOwnerChanged on org.fedoraproject.FirewallD1.
When these are encountered, reload all the iptables reuls of all
libvirt's virtual networks (similar to what happens when libvirtd is
restarted).
* iptables, ebtables: use firewall-cmd's direct passthrough interface
when available, otherwise use iptables and ebtables commands. This
decision is made once the first time libvirt calls
iptables/ebtables, and that decision is maintained for the life of
libvirtd.
* Note that the nwfilter part of this patch was separated out into
another patch by Stefan in V2, so that needs to be revised and
re-reviewed as well.
================
All the configure.ac and specfile changes are unchanged from Thomas'
V3.
V3 re-ran "firewall-cmd --state" every time a new rule was added,
which was extremely inefficient. V4 uses VIR_ONCE_GLOBAL_INIT to set
up a one-time initialization function.
The VIR_ONCE_GLOBAL_INIT(x) macro references a static function called
vir(Ip|Eb)OnceInit(), which will then be called the first time that
the static function vir(Ip|Eb)TablesInitialize() is called (that
function is defined for you by the macro). This is
thread-safe, so there is no chance of any race.
IMPORTANT NOTE: I've left the VIR_DEBUG messages in these two init
functions (one for iptables, on for ebtables) as VIR_WARN so that I
don't have to turn on all the other debug message just to see
these. Even if this patch doesn't need any other modification, those
messages need to be changed to VIR_DEBUG before pushing.
This one-time initialization works well. However, I've encountered
problems with testing:
1) Whenever I have enabled the firewalld service, *all* attempts to
call firewall-cmd from within libvirtd end with firewall-cmd hanging
internally somewhere. This is *not* the case if firewall-cmd returns
non-0 in response to "firewall-cmd --state" (i.e. *that* command runs
and returns to libvirt successfully.)
2) If I start libvirtd while firewalld is stopped, then start
firewalld later, this triggers libvirtd to reload its iptables rules,
however it also spits out a *ton* of complaints about deletion failing
(I suppose because firewalld has nuked all of libvirt's rules). I
guess we need to suppress those messages (which is a more annoying
problem to fix than you might think, but that's another story).
3) I noticed a few times during this long line of errors that
firewalld made a complaint about "Resource Temporarily
unavailable. Having libvirtd access iptables commands directly at the
same time as firewalld is doing so is apparently problematic.
4) In general, I'm concerned about the "set it once and never change
it" method - if firewalld is disabled at libvirtd startup, causing
libvirtd to always use iptables/ebtables directly, this won't cause
*terrible* problems, but if libvirtd decides to use firewall-cmd and
firewalld is later disabled, libvirtd will not be able to recover.
2012-08-14 22:59:52 +04:00
%endif
2014-07-17 17:48:37 +04:00
# RHEL-6 stopped including Xen on all archs.
2016-05-04 17:43:08 +03:00
%if 0%{?rhel}
2013-01-10 00:50:03 +04:00
%define with_xen 0
2009-09-16 19:02:38 +04:00
%endif
2012-11-12 11:02:23 +04:00
# fuse is used to provide virtualized /proc for LXC
2016-05-04 17:43:08 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2013-01-10 00:50:03 +04:00
%define with_fuse 0%{!?_without_fuse:1}
2012-11-12 11:02:23 +04:00
%endif
2011-01-18 21:37:45 +03:00
# Enable sanlock library for lock management with QEMU
2014-07-23 11:04:22 +04:00
# Sanlock is available only on arches where kvm is available for RHEL
2016-05-04 17:43:08 +03:00
%if 0%{?fedora}
2016-05-04 17:44:57 +03:00
%define with_sanlock 0%{!?_without_sanlock:1}
2011-12-05 21:37:33 +04:00
%endif
2016-05-04 17:43:08 +03:00
%if 0%{?rhel}
2014-07-23 11:04:22 +04:00
%ifarch %{qemu_kvm_arches}
2016-05-04 17:44:57 +03:00
%define with_sanlock 0%{!?_without_sanlock:1}
2013-01-10 00:50:03 +04:00
%endif
2011-01-18 21:37:45 +03:00
%endif
2012-10-12 18:50:42 +04:00
# Enable libssh2 transport for new enough distros
2016-05-04 17:43:08 +03:00
%if 0%{?fedora}
2013-01-10 00:50:03 +04:00
%define with_libssh2 0%{!?_without_libssh2:1}
2012-10-12 18:50:42 +04:00
%endif
2014-02-04 23:37:15 +04:00
# Enable wireshark plugins for all distros shipping libvirt 1.2.2 or newer
2016-10-19 17:49:17 +03:00
%if 0%{?fedora}
2014-02-04 23:37:15 +04:00
%define with_wireshark 0%{!?_without_wireshark:1}
%endif
2016-11-09 17:28:37 +03:00
# Enable libssh transport for new enough distros
%if 0%{?fedora}
%define with_libssh 0%{!?_without_libssh:1}
%endif
2011-07-14 09:20:19 +04:00
2012-04-03 14:54:27 +04:00
%if %{with_qemu} || %{with_lxc} || %{with_uml}
2012-05-09 08:26:36 +04:00
# numad is used to manage the CPU and memory placement dynamically,
2012-03-24 05:35:20 +04:00
# it's not available on s390[x] and ARM.
2016-05-04 17:43:08 +03:00
%ifnarch s390 s390x %{arm}
2016-05-04 17:44:57 +03:00
%define with_numad 0%{!?_without_numad:1}
2013-01-10 00:50:03 +04:00
%endif
2010-05-25 23:31:38 +04:00
%endif
2010-12-23 11:44:19 +03:00
# Pull in cgroups config system
2016-05-04 17:43:08 +03:00
%if %{with_qemu} || %{with_lxc}
%define with_cgconfig 0%{!?_without_cgconfig:1}
2010-12-23 11:44:19 +03:00
%endif
2009-09-16 19:02:38 +04:00
# Force QEMU to run as non-root
2016-05-04 17:43:08 +03:00
%define qemu_user qemu
%define qemu_group qemu
2009-07-16 01:25:01 +04:00
2009-09-16 19:02:38 +04:00
2016-05-04 17:43:08 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2013-01-10 00:50:03 +04:00
%define with_systemd_macros 1
2012-10-25 14:10:55 +04:00
%else
2013-01-10 00:50:03 +04:00
%define with_systemd_macros 0
2012-10-25 14:10:55 +04:00
%endif
2013-07-30 18:01:11 +04:00
# RHEL releases provide stable tool chains and so it is safe to turn
# compiler warning into errors without being worried about frequent
# changes in reported warnings
%if 0%{?rhel}
%define enable_werror --enable-werror
2014-12-16 11:21:40 +03:00
%else
2014-12-15 18:24:01 +03:00
%define enable_werror --disable-werror
2013-07-30 18:01:11 +04:00
%endif
2016-08-04 10:56:27 +03:00
%if 0%{?fedora} >= 25
%define tls_priority "@LIBVIRT,SYSTEM"
2016-06-06 18:02:22 +03:00
%else
2016-10-19 17:49:17 +03:00
%if 0%{?fedora}
2016-08-04 10:56:27 +03:00
%define tls_priority "@SYSTEM"
%else
%define tls_priority "NORMAL"
%endif
2016-06-06 18:02:22 +03:00
%endif
2013-07-30 18:01:11 +04:00
2010-11-11 20:21:28 +03:00
Summary : Library providing a simple virtualization API
2006-02-09 20:45:11 +03:00
Name : libvirt
2005-11-02 18:37:34 +03:00
Version : @VERSION@
2008-06-12 20:10:50 +04:00
Release : 1%{?dist} %{?extra_release}
2008-08-08 18:27:05 +04:00
License : LGPLv2+
2005-11-02 18:37:34 +03:00
Group : Development/Libraries
2008-07-07 14:00:30 +04:00
BuildRoot : %{_tmppath} /%{name} -%{version} -%{release} -root
2006-09-21 19:24:37 +04:00
URL : http://libvirt.org/
2011-03-23 19:20:14 +03:00
2012-05-06 22:09:22 +04:00
%if %(echo %{version} | grep -o \\. | wc -l) == 3
2013-01-10 00:50:03 +04:00
%define mainturl stable_updates/
2012-05-06 22:09:22 +04:00
%endif
2016-06-15 14:19:32 +03:00
Source : http://libvirt.org/sources/%{?mainturl} libvirt-%{version} .tar.xz
2012-05-06 22:09:22 +04:00
2012-04-03 14:44:59 +04:00
Requires : libvirt-daemon = %{version} -%{release}
Requires : libvirt-daemon-config-network = %{version} -%{release}
Requires : libvirt-daemon-config-nwfilter = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%if %{with_libxl}
2012-07-18 20:27:03 +04:00
Requires : libvirt-daemon-driver-libxl = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%endif
%if %{with_lxc}
2012-07-18 20:27:03 +04:00
Requires : libvirt-daemon-driver-lxc = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%endif
%if %{with_qemu}
2012-07-18 20:27:03 +04:00
Requires : libvirt-daemon-driver-qemu = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%endif
%if %{with_uml}
2012-07-18 20:27:03 +04:00
Requires : libvirt-daemon-driver-uml = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%endif
%if %{with_xen}
2012-07-18 20:27:03 +04:00
Requires : libvirt-daemon-driver-xen = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%endif
%if %{with_vbox}
2013-05-17 16:31:59 +04:00
Requires : libvirt-daemon-driver-vbox = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%endif
2013-12-06 01:43:28 +04:00
Requires : libvirt-daemon-driver-nwfilter = %{version} -%{release}
2012-07-18 20:27:03 +04:00
Requires : libvirt-daemon-driver-interface = %{version} -%{release}
Requires : libvirt-daemon-driver-secret = %{version} -%{release}
Requires : libvirt-daemon-driver-storage = %{version} -%{release}
Requires : libvirt-daemon-driver-network = %{version} -%{release}
Requires : libvirt-daemon-driver-nodedev = %{version} -%{release}
2012-04-03 14:44:59 +04:00
Requires : libvirt-client = %{version} -%{release}
2016-06-25 09:37:22 +03:00
Requires : libvirt-libs = %{version} -%{release}
2011-03-23 19:20:14 +03:00
2012-04-03 14:44:59 +04:00
# All build-time requirements. Run-time requirements are
# listed against each sub-RPM
2011-12-05 21:22:10 +04:00
%if 0%{?enable_autotools}
BuildRequires : autoconf
BuildRequires : automake
BuildRequires : gettext-devel
BuildRequires : libtool
2013-04-08 16:48:18 +04:00
BuildRequires : /usr/bin/pod2man
2011-12-05 21:22:10 +04:00
%endif
2014-11-21 20:09:36 +03:00
BuildRequires : git
2014-08-14 07:37:45 +04:00
BuildRequires : perl
2013-11-22 20:42:22 +04:00
BuildRequires : python
2011-07-07 17:45:07 +04:00
%if %{with_systemd}
BuildRequires : systemd-units
%endif
2013-06-30 00:50:14 +04:00
%if %{with_xen} || %{with_libxl}
2006-07-24 18:32:03 +04:00
BuildRequires : xen-devel
2008-06-12 20:10:50 +04:00
%endif
2006-02-23 14:35:37 +03:00
BuildRequires : libxml2-devel
2008-08-20 17:16:29 +04:00
BuildRequires : xhtml1-dtds
2011-03-23 19:30:49 +03:00
BuildRequires : libxslt
2006-03-04 11:57:22 +03:00
BuildRequires : readline-devel
2006-07-14 02:27:31 +04:00
BuildRequires : ncurses-devel
2006-09-21 19:24:37 +04:00
BuildRequires : gettext
2011-07-25 21:17:57 +04:00
BuildRequires : libtasn1-devel
2016-05-04 17:43:08 +03:00
%if (0%{?rhel} && 0%{?rhel} < 7)
2013-06-03 16:57:29 +04:00
BuildRequires : libgcrypt-devel
build: avoid -lgcrypt with newer gnutls
https://bugzilla.redhat.com/show_bug.cgi?id=951637
Newer gnutls uses nettle, rather than gcrypt, which is a lot nicer
regarding initialization. Yet we were unconditionally initializing
gcrypt even when gnutls wouldn't be using it, and having two crypto
libraries linked into libvirt.so is pointless, but mostly harmless
(it doesn't crash, but does interfere with certification efforts).
There are three distinct version ranges to worry about when
determining which crypto lib gnutls uses, per these gnutls mails:
2.12: http://lists.gnu.org/archive/html/gnutls-devel/2011-03/msg00034.html
3.0: http://lists.gnu.org/archive/html/gnutls-devel/2011-07/msg00035.html
If pkg-config can prove version numbers and/or list the crypto
library used for static linking, we have our proof; if not, it
is safer (even if pointless) to continue to use gcrypt ourselves.
* configure.ac (WITH_GNUTLS): Probe whether to add -lgcrypt, and
define a witness WITH_GNUTLS_GCRYPT.
* src/libvirt.c (virTLSMutexInit, virTLSMutexDestroy)
(virTLSMutexLock, virTLSMutexUnlock, virTLSThreadImpl)
(virGlobalInit): Honor the witness.
* libvirt.spec.in (BuildRequires): Make gcrypt usage conditional,
no longer needed in Fedora 19.
Signed-off-by: Eric Blake <eblake@redhat.com>
2013-07-26 02:03:17 +04:00
%endif
2007-06-11 17:24:45 +04:00
BuildRequires : gnutls-devel
2012-09-19 17:00:34 +04:00
BuildRequires : libattr-devel
2013-05-02 00:16:10 +04:00
# For pool-build probing for existing pools
BuildRequires : libblkid-devel >= 2.17
2011-03-23 19:30:49 +03:00
# for augparse, optionally used in testing
BuildRequires : augeas
2016-05-04 18:25:37 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2012-06-06 22:03:47 +04:00
BuildRequires : systemd-devel >= 185
2016-05-04 18:25:37 +03:00
%else
2009-11-20 18:45:46 +03:00
BuildRequires : libudev-devel >= 145
%endif
2016-05-04 18:25:37 +03:00
BuildRequires : libpciaccess-devel >= 0.10.9
2009-11-03 21:59:18 +03:00
BuildRequires : yajl-devel
2011-01-18 21:37:45 +03:00
%if %{with_sanlock}
2012-10-16 14:45:27 +04:00
BuildRequires : sanlock-devel >= 2.4
%endif
nwfilter: Support for learning a VM's IP address
This patch implements support for learning a VM's IP address. It uses
the pcap library to listen on the VM's backend network interface (tap)
or the physical ethernet device (macvtap) and tries to capture packets
with source or destination MAC address of the VM and learn from DHCP
Offers, ARP traffic, or first-sent IPv4 packet what the IP address of
the VM's interface is. This then allows to instantiate the network
traffic filtering rules without the user having to provide the IP
parameter somewhere in the filter description or in the interface
description as a parameter. This only supports to detect the parameter
IP, which is for the assumed single IPv4 address of a VM. There is not
support for interfaces that may have multiple IP addresses (IP
aliasing) or IPv6 that may then require more than one valid IP address
to be detected. A VM can have multiple independent interfaces that each
uses a different IP address and in that case it will be attempted to
detect each one of the address independently.
So, when for example an interface description in the domain XML has
looked like this up to now:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'>
<parameter name='IP' value='10.2.3.4'/>
</filterref>
</interface>
you may omit the IP parameter:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'/>
</interface>
Internally I am walking the 'tree' of a VM's referenced network filters
and determine with the given variables which variables are missing. Now,
the above IP parameter may be missing and this causes a libvirt-internal
thread to be started that uses the pcap library's API to listen to the
backend interface (in case of macvtap to the physical interface) in an
attempt to determine the missing IP parameter. If the backend interface
disappears the thread terminates assuming the VM was brought down. In
case of a macvtap device a timeout is being used to wait for packets
from the given VM (filtering by VM's interface MAC address). If the VM's
macvtap device disappeared the thread also terminates. In all other
cases it tries to determine the IP address of the VM and will then apply
the rules late on the given interface, which would have happened
immediately if the IP parameter had been explicitly given. In case an
error happens while the firewall rules are applied, the VM's backend
interface is 'down'ed preventing it to communicate. Reasons for failure
for applying the network firewall rules may that an ebtables/iptables
command failes or OOM errors. Essentially the same failure reasons may
occur as when the firewall rules are applied immediately on VM start,
except that due to the late application of the filtering rules the VM
now is already running and cannot be hindered anymore from starting.
Bringing down the whole VM would probably be considered too drastic.
While a VM's IP address is attempted to be determined only limited
updates to network filters are allowed. In particular it is prevented
that filters are modified in such a way that they would introduce new
variables.
A caveat: The algorithm does not know which one is the appropriate IP
address of a VM. If the VM spoofs an IP address in its first ARP traffic
or IPv4 packets its filtering rules will be instantiated for this IP
address, thus 'locking' it to the found IP address. So, it's still
'safer' to explicitly provide the IP address of a VM's interface in the
filter description if it is known beforehand.
* configure.ac: detect libpcap
* libvirt.spec.in: require libpcap[-devel] if qemu is built
* src/internal.h: add the new ATTRIBUTE_PACKED define
* src/Makefile.am src/libvirt_private.syms: add the new modules and symbols
* src/nwfilter/nwfilter_learnipaddr.[ch]: new module being added
* src/nwfilter/nwfilter_driver.c src/conf/nwfilter_conf.[ch]
src/nwfilter/nwfilter_ebiptables_driver.[ch]
src/nwfilter/nwfilter_gentech_driver.[ch]: plu the new functionality in
* tests/nwfilterxml2xmltest: extend testing
2010-04-08 01:02:18 +04:00
BuildRequires : libpcap-devel
2016-06-29 19:37:28 +03:00
%if 0%{?rhel} && 0%{?rhel} < 7
BuildRequires : libnl-devel
%else
2012-08-25 01:57:42 +04:00
BuildRequires : libnl3-devel
2016-06-29 19:37:28 +03:00
%endif
2007-09-19 05:56:55 +04:00
BuildRequires : avahi-devel
2008-02-20 18:38:29 +03:00
BuildRequires : libselinux-devel
2010-08-11 22:25:09 +04:00
BuildRequires : dnsmasq >= 2.41
2011-03-23 19:30:49 +03:00
BuildRequires : iptables
2016-05-04 18:36:17 +03:00
%if 0%{?rhel} && 0%{?rhel} < 7
2011-03-23 19:30:49 +03:00
BuildRequires : iptables-ipv6
%endif
2016-05-04 18:36:17 +03:00
BuildRequires : radvd
2011-03-23 19:30:49 +03:00
BuildRequires : ebtables
BuildRequires : module-init-tools
2008-06-12 20:10:50 +04:00
BuildRequires : cyrus-sasl-devel
2016-05-04 18:31:38 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2015-07-14 21:42:28 +03:00
# F22 polkit-devel doesn't pull in polkit anymore, which we need for pkcheck
BuildRequires : polkit >= 0.112
2014-07-15 17:18:33 +04:00
BuildRequires : polkit-devel >= 0.112
2016-05-04 18:31:38 +03:00
%else
2014-07-16 03:11:56 +04:00
BuildRequires : polkit-devel >= 0.93
2009-08-06 16:54:08 +04:00
%endif
2008-02-20 18:42:30 +03:00
# For mount/umount in FS driver
BuildRequires : util-linux
%if %{with_qemu}
2017-02-14 16:42:54 +03:00
# For managing ACLs
BuildRequires : libacl-devel
2008-02-20 18:42:30 +03:00
# From QEMU RPMs
BuildRequires : /usr/bin/qemu-img
%else
2013-01-10 00:50:03 +04:00
%if %{with_xen}
2008-02-20 18:42:30 +03:00
# From Xen RPMs
BuildRequires : /usr/sbin/qcow-create
2013-01-10 00:50:03 +04:00
%endif
2008-06-12 20:10:50 +04:00
%endif
2008-02-20 18:45:33 +03:00
# For LVM drivers
BuildRequires : lvm2
2008-02-20 18:49:25 +03:00
# For ISCSI driver
BuildRequires : iscsi-initiator-utils
2008-02-20 18:52:17 +03:00
# For disk driver
BuildRequires : parted-devel
2009-09-08 18:07:54 +04:00
# For Multipath support
BuildRequires : device-mapper-devel
2014-02-25 23:28:53 +04:00
%if %{with_storage_rbd}
2015-03-05 13:40:54 +03:00
%if 0%{?rhel} >= 7
BuildRequires : librados2-devel
BuildRequires : librbd1-devel
%else
2012-05-14 13:06:42 +04:00
BuildRequires : ceph-devel
2015-03-05 13:40:54 +03:00
%endif
2009-09-16 19:02:38 +04:00
%endif
2013-11-20 03:26:05 +04:00
%if %{with_storage_gluster}
BuildRequires : glusterfs-api-devel >= 3.4.1
BuildRequires : glusterfs-devel >= 3.4.1
%endif
2016-05-11 18:41:34 +03:00
%if %{with_storage_sheepdog}
BuildRequires : sheepdog
%endif
2009-03-31 16:45:07 +04:00
%if %{with_numactl}
2008-11-28 14:20:27 +03:00
# For QEMU/LXC numa info
BuildRequires : numactl-devel
2009-03-31 16:45:07 +04:00
%endif
2009-07-28 21:30:20 +04:00
BuildRequires : libcap-ng-devel >= 0.5.0
2012-11-12 11:02:23 +04:00
%if %{with_fuse}
BuildRequires : fuse-devel >= 2.8.6
%endif
2013-01-09 01:47:55 +04:00
%if %{with_phyp} || %{with_libssh2}
2012-10-12 18:50:42 +04:00
BuildRequires : libssh2-devel >= 1.3.0
%endif
2012-08-25 01:57:42 +04:00
2016-05-04 18:26:30 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2012-08-25 01:57:42 +04:00
BuildRequires : netcf-devel >= 0.2.2
2016-05-04 18:26:30 +03:00
%else
2011-06-20 19:41:49 +04:00
BuildRequires : netcf-devel >= 0.1.8
2012-08-25 01:57:42 +04:00
%endif
2010-05-04 18:13:55 +04:00
%if %{with_esx}
BuildRequires : libcurl-devel
%endif
2011-07-13 18:05:18 +04:00
%if %{with_hyperv}
BuildRequires : libwsman-devel >= 2.2.3
%endif
2010-09-15 17:44:11 +04:00
BuildRequires : audit-libs-devel
2010-11-30 21:52:25 +03:00
# we need /usr/sbin/dtrace
BuildRequires : systemtap-sdt-devel
2011-03-23 19:20:14 +03:00
# For mount/umount in FS driver
BuildRequires : util-linux
# For showmount in FS driver (netfs discovery)
BuildRequires : nfs-utils
2008-06-12 20:10:50 +04:00
2015-12-31 08:09:11 +03:00
# Communication with the firewall and polkit daemons use DBus
2012-08-23 13:44:08 +04:00
BuildRequires : dbus-devel
2008-06-12 20:10:50 +04:00
# Fedora build root suckage
BuildRequires : gawk
2005-11-02 18:37:34 +03:00
2012-02-14 14:09:42 +04:00
# For storage wiping with different algorithms
BuildRequires : scrub
2012-03-24 05:35:20 +04:00
%if %{with_numad}
BuildRequires : numad
%endif
2014-02-04 23:37:15 +04:00
%if %{with_wireshark}
2016-07-28 13:48:00 +03:00
%if 0%{fedora} >= 24
2016-07-27 17:58:32 +03:00
BuildRequires : wireshark-devel >= 2.1.0
2016-07-28 13:48:00 +03:00
%else
2016-07-28 13:00:18 +03:00
BuildRequires : wireshark-devel >= 1.12.1
2016-07-28 13:48:00 +03:00
%endif
2014-02-04 23:37:15 +04:00
%endif
2016-11-09 17:28:37 +03:00
%if %{with_libssh}
BuildRequires : libssh-devel >= 0.7.0
%endif
2012-05-15 19:03:14 +04:00
Provides : bundled(gnulib)
2005-11-02 18:37:34 +03:00
%description
2008-01-24 13:15:13 +03:00
Libvirt is a C toolkit to interact with the virtualization capabilities
2009-07-21 13:16:15 +04:00
of recent versions of Linux (and other OSes). The main package includes
the libvirtd server exporting the virtualization support.
2012-04-03 13:52:12 +04:00
%package docs
Summary : API reference and website documentation
Group : Development/Libraries
%description docs
Includes the API reference for the libvirt C library, and a complete
copy of the libvirt.org website documentation.
2012-04-03 14:44:59 +04:00
%package daemon
Summary : Server side daemon and supporting files for libvirt library
Group : Development/Libraries
# All runtime requirements for the libvirt package (runtime requrements
# for subpackages are listed later in those subpackages)
2016-06-25 09:37:22 +03:00
# The client side, i.e. shared libs are in a subpackage
Requires : %{name} -libs = %{version} -%{release}
2012-04-03 14:44:59 +04:00
# for modprobe of pci devices
Requires : module-init-tools
# for /sbin/ip & /sbin/tc
Requires : iproute
Requires : avahi-libs
2016-05-04 18:31:38 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2014-07-15 17:18:33 +04:00
Requires : polkit >= 0.112
2016-05-04 18:31:38 +03:00
%else
2014-07-16 03:11:56 +04:00
Requires : polkit >= 0.93
2016-05-04 18:20:58 +03:00
%endif
%if %{with_cgconfig}
2012-04-03 14:44:59 +04:00
Requires : libcgroup
2016-05-04 18:20:58 +03:00
%endif
%ifarch %{ix86} x86_64 ia64
2012-04-03 14:44:59 +04:00
# For virConnectGetSysinfo
Requires : dmidecode
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:44:59 +04:00
# For service management
2016-05-04 18:20:58 +03:00
%if %{with_systemd}
2012-04-03 14:44:59 +04:00
Requires(post) : systemd-units
Requires(post) : systemd-sysv
Requires(preun) : systemd-units
Requires(postun) : systemd-units
2016-05-04 18:20:58 +03:00
%endif
%if %{with_numad}
2012-04-03 14:44:59 +04:00
Requires : numad
2016-05-04 18:20:58 +03:00
%endif
2012-12-05 07:43:05 +04:00
# libvirtd depends on 'messagebus' service
Requires : dbus
2013-05-02 00:28:43 +04:00
# For uid creation during pre
Requires(pre) : shadow-utils
2012-04-03 14:44:59 +04:00
%description daemon
Server side daemon required to manage the virtualization capabilities
of recent versions of Linux. Requires a hypervisor specific sub-RPM
for specific drivers.
%package daemon-config-network
Summary : Default configuration files for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2014-02-11 14:35:20 +04:00
Requires : libvirt-daemon-driver-network = %{version} -%{release}
2012-04-03 14:44:59 +04:00
%description daemon-config-network
Default configuration files for setting up NAT based networking
%package daemon-config-nwfilter
Summary : Network filter configuration files for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2014-02-13 01:33:16 +04:00
Requires : libvirt-daemon-driver-nwfilter = %{version} -%{release}
2012-04-03 14:44:59 +04:00
%description daemon-config-nwfilter
Network filter configuration files for cleaning guest traffic
2012-04-03 14:54:27 +04:00
2012-04-02 23:53:43 +04:00
%package daemon-driver-network
Summary : Network driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2013-10-29 15:27:45 +04:00
Requires : dnsmasq >= 2.41
Requires : radvd
Requires : iptables
2016-05-04 18:36:17 +03:00
%if 0%{?rhel} && 0%{?rhel} < 7
2013-10-29 15:27:45 +04:00
Requires : iptables-ipv6
2016-05-04 18:36:17 +03:00
%endif
2012-04-02 23:53:43 +04:00
%description daemon-driver-network
The network driver plugin for the libvirtd daemon, providing
an implementation of the virtual network APIs using the Linux
bridge capabilities.
%package daemon-driver-nwfilter
Summary : Nwfilter driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2013-10-29 15:27:45 +04:00
Requires : iptables
2016-05-04 18:42:30 +03:00
%if 0%{?rhel} && 0%{?rhel} < 7
2013-10-29 15:27:45 +04:00
Requires : iptables-ipv6
2016-05-04 18:42:30 +03:00
%endif
2013-10-29 15:27:45 +04:00
Requires : ebtables
2012-04-02 23:53:43 +04:00
%description daemon-driver-nwfilter
The nwfilter driver plugin for the libvirtd daemon, providing
an implementation of the firewall APIs using the ebtables,
iptables and ip6tables capabilities
%package daemon-driver-nodedev
Summary : Nodedev driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2013-10-29 15:27:45 +04:00
# needed for device enumeration
2016-05-04 18:41:16 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2013-10-29 15:27:45 +04:00
Requires : systemd >= 185
2016-05-04 18:41:16 +03:00
%else
2013-10-29 15:27:45 +04:00
Requires : udev >= 145
2016-05-04 18:25:37 +03:00
%endif
2012-04-02 23:53:43 +04:00
%description daemon-driver-nodedev
The nodedev driver plugin for the libvirtd daemon, providing
an implementation of the node device APIs using the udev
capabilities.
%package daemon-driver-interface
Summary : Interface driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2016-05-04 18:34:37 +03:00
%if (0%{?fedora} || 0%{?rhel} >= 7)
2013-10-29 15:27:45 +04:00
Requires : netcf-libs >= 0.2.2
2016-05-04 18:34:37 +03:00
%endif
2012-04-02 23:53:43 +04:00
%description daemon-driver-interface
The interface driver plugin for the libvirtd daemon, providing
an implementation of the network interface APIs using the
netcf library
%package daemon-driver-secret
Summary : Secret driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
%description daemon-driver-secret
The secret driver plugin for the libvirtd daemon, providing
an implementation of the secret key APIs.
%package daemon-driver-storage
Summary : Storage driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2013-10-29 15:27:45 +04:00
Requires : nfs-utils
# For mkfs
Requires : util-linux
# For glusterfs
2016-05-04 18:40:08 +03:00
%if 0%{?fedora}
2013-10-29 15:27:45 +04:00
Requires : glusterfs-client >= 2.0.1
2016-05-04 18:40:08 +03:00
%endif
2017-01-10 20:08:44 +03:00
# gluster cli tool for pool discovery
%if (0%{?fedora} || 0%{?with_storage_gluster})
Requires : /usr/sbin/gluster
%endif
2013-10-29 15:27:45 +04:00
# For LVM drivers
Requires : lvm2
# For ISCSI driver
Requires : iscsi-initiator-utils
# For disk driver
Requires : parted
Requires : device-mapper
# For multipath support
Requires : device-mapper
2016-05-04 18:40:08 +03:00
%if %{with_storage_sheepdog}
2013-10-29 15:27:45 +04:00
# For Sheepdog support
Requires : sheepdog
2016-05-04 18:40:08 +03:00
%endif
%if %{with_qemu}
2013-10-29 15:27:45 +04:00
# From QEMU RPMs
Requires : /usr/bin/qemu-img
2016-05-04 18:40:08 +03:00
%else
%if %{with_xen}
2013-10-29 15:27:45 +04:00
# From Xen RPMs
Requires : /usr/sbin/qcow-create
2016-05-04 18:20:58 +03:00
%endif
2016-05-04 18:40:08 +03:00
%endif
2012-04-02 23:53:43 +04:00
%description daemon-driver-storage
The storage driver plugin for the libvirtd daemon, providing
an implementation of the storage APIs using LVM, iSCSI,
parted and more.
2016-05-04 18:20:58 +03:00
%if %{with_qemu}
2012-04-02 23:53:43 +04:00
%package daemon-driver-qemu
Summary : Qemu driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
# There really is a hard cross-driver dependency here
2012-05-25 11:10:56 +04:00
Requires : libvirt-daemon-driver-network = %{version} -%{release}
2016-06-16 19:42:20 +03:00
Requires : libvirt-daemon-driver-storage = %{version} -%{release}
2013-10-29 15:27:45 +04:00
Requires : /usr/bin/qemu-img
# For image compression
Requires : gzip
Requires : bzip2
Requires : lzop
Requires : xz
2016-07-13 20:01:14 +03:00
%if 0%{?fedora} >= 24
2016-07-12 17:57:39 +03:00
Requires : systemd-container
2016-07-13 20:01:14 +03:00
%endif
2012-04-02 23:53:43 +04:00
%description daemon-driver-qemu
The qemu driver plugin for the libvirtd daemon, providing
an implementation of the hypervisor driver APIs using
QEMU
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_lxc}
2012-04-02 23:53:43 +04:00
%package daemon-driver-lxc
Summary : LXC driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
# There really is a hard cross-driver dependency here
2012-05-25 11:10:56 +04:00
Requires : libvirt-daemon-driver-network = %{version} -%{release}
2016-07-13 20:01:14 +03:00
%if 0%{?fedora} >= 24
2016-07-12 17:57:39 +03:00
Requires : systemd-container
2016-07-13 20:01:14 +03:00
%endif
2012-04-02 23:53:43 +04:00
%description daemon-driver-lxc
The LXC driver plugin for the libvirtd daemon, providing
an implementation of the hypervisor driver APIs using
the Linux kernel
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_uml}
2012-04-02 23:53:43 +04:00
%package daemon-driver-uml
Summary : Uml driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
%description daemon-driver-uml
The UML driver plugin for the libvirtd daemon, providing
an implementation of the hypervisor driver APIs using
User Mode Linux
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_xen}
2012-04-02 23:53:43 +04:00
%package daemon-driver-xen
Summary : Xen driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
%description daemon-driver-xen
The Xen driver plugin for the libvirtd daemon, providing
an implementation of the hypervisor driver APIs using
Xen
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_vbox}
2013-05-17 16:31:59 +04:00
%package daemon-driver-vbox
Summary : VirtualBox driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
%description daemon-driver-vbox
The vbox driver plugin for the libvirtd daemon, providing
an implementation of the hypervisor driver APIs using
VirtualBox
2016-05-04 18:20:58 +03:00
%endif
2013-05-17 16:31:59 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_libxl}
2012-04-02 23:53:43 +04:00
%package daemon-driver-libxl
Summary : Libxl driver plugin for the libvirtd daemon
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
%description daemon-driver-libxl
The Libxl driver plugin for the libvirtd daemon, providing
an implementation of the hypervisor driver APIs using
Libxl
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2012-04-03 14:54:27 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_qemu_tcg}
2012-04-03 14:54:27 +04:00
%package daemon-qemu
Summary : Server side daemon & driver required to run QEMU guests
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-qemu = %{version} -%{release}
Requires : libvirt-daemon-driver-interface = %{version} -%{release}
Requires : libvirt-daemon-driver-network = %{version} -%{release}
Requires : libvirt-daemon-driver-nodedev = %{version} -%{release}
2012-05-25 11:10:56 +04:00
Requires : libvirt-daemon-driver-nwfilter = %{version} -%{release}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-secret = %{version} -%{release}
Requires : libvirt-daemon-driver-storage = %{version} -%{release}
2012-04-03 14:54:27 +04:00
Requires : qemu
%description daemon-qemu
Server side daemon and driver required to manage the virtualization
capabilities of the QEMU TCG emulators
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:54:27 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_qemu_kvm}
2012-04-03 14:54:27 +04:00
%package daemon-kvm
Summary : Server side daemon & driver required to run KVM guests
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-qemu = %{version} -%{release}
Requires : libvirt-daemon-driver-interface = %{version} -%{release}
Requires : libvirt-daemon-driver-network = %{version} -%{release}
Requires : libvirt-daemon-driver-nodedev = %{version} -%{release}
2012-05-25 11:10:56 +04:00
Requires : libvirt-daemon-driver-nwfilter = %{version} -%{release}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-secret = %{version} -%{release}
Requires : libvirt-daemon-driver-storage = %{version} -%{release}
2012-04-03 14:54:27 +04:00
Requires : qemu-kvm
%description daemon-kvm
Server side daemon and driver required to manage the virtualization
capabilities of the KVM hypervisor
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:54:27 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_lxc}
2012-04-03 14:54:27 +04:00
%package daemon-lxc
Summary : Server side daemon & driver required to run LXC guests
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-lxc = %{version} -%{release}
Requires : libvirt-daemon-driver-interface = %{version} -%{release}
Requires : libvirt-daemon-driver-network = %{version} -%{release}
Requires : libvirt-daemon-driver-nodedev = %{version} -%{release}
2012-05-25 11:10:56 +04:00
Requires : libvirt-daemon-driver-nwfilter = %{version} -%{release}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-secret = %{version} -%{release}
Requires : libvirt-daemon-driver-storage = %{version} -%{release}
2012-04-03 14:54:27 +04:00
%description daemon-lxc
Server side daemon and driver required to manage the virtualization
capabilities of LXC
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:54:27 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_uml}
2012-04-03 14:54:27 +04:00
%package daemon-uml
Summary : Server side daemon & driver required to run UML guests
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-uml = %{version} -%{release}
Requires : libvirt-daemon-driver-interface = %{version} -%{release}
Requires : libvirt-daemon-driver-network = %{version} -%{release}
Requires : libvirt-daemon-driver-nodedev = %{version} -%{release}
2012-05-25 11:10:56 +04:00
Requires : libvirt-daemon-driver-nwfilter = %{version} -%{release}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-secret = %{version} -%{release}
Requires : libvirt-daemon-driver-storage = %{version} -%{release}
2012-04-03 14:54:27 +04:00
# There are no UML kernel RPMs in Fedora/RHEL to depend on.
%description daemon-uml
Server side daemon and driver required to manage the virtualization
capabilities of UML
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:54:27 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_xen} || %{with_libxl}
2012-04-03 14:54:27 +04:00
%package daemon-xen
Summary : Server side daemon & driver required to run XEN guests
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%if %{with_xen}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-xen = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%endif
%if %{with_libxl}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-libxl = %{version} -%{release}
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-interface = %{version} -%{release}
Requires : libvirt-daemon-driver-network = %{version} -%{release}
Requires : libvirt-daemon-driver-nodedev = %{version} -%{release}
2012-05-25 11:10:56 +04:00
Requires : libvirt-daemon-driver-nwfilter = %{version} -%{release}
2012-04-02 23:53:43 +04:00
Requires : libvirt-daemon-driver-secret = %{version} -%{release}
Requires : libvirt-daemon-driver-storage = %{version} -%{release}
2012-04-03 14:54:27 +04:00
Requires : xen
%description daemon-xen
Server side daemon and driver required to manage the virtualization
capabilities of XEN
2016-05-04 18:20:58 +03:00
%endif
2013-05-17 16:31:59 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_vbox}
2013-05-17 16:31:59 +04:00
%package daemon-vbox
Summary : Server side daemon & driver required to run VirtualBox guests
Group : Development/Libraries
Requires : libvirt-daemon = %{version} -%{release}
Requires : libvirt-daemon-driver-vbox = %{version} -%{release}
Requires : libvirt-daemon-driver-interface = %{version} -%{release}
Requires : libvirt-daemon-driver-network = %{version} -%{release}
Requires : libvirt-daemon-driver-nodedev = %{version} -%{release}
Requires : libvirt-daemon-driver-nwfilter = %{version} -%{release}
Requires : libvirt-daemon-driver-secret = %{version} -%{release}
Requires : libvirt-daemon-driver-storage = %{version} -%{release}
%description daemon-vbox
Server side daemon and driver required to manage the virtualization
capabilities of VirtualBox
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:44:59 +04:00
2009-07-21 13:16:15 +04:00
%package client
2016-06-25 09:37:22 +03:00
Summary : Client side utilities of the libvirt library
2009-07-21 13:16:15 +04:00
Group : Development/Libraries
2016-06-25 09:37:22 +03:00
Requires : %{name} -libs = %{version} -%{release}
2009-07-21 13:16:15 +04:00
Requires : readline
Requires : ncurses
2013-05-15 06:14:34 +04:00
# Needed by /usr/libexec/libvirt-guests.sh script.
2011-02-18 08:45:13 +03:00
Requires : gettext
2011-02-21 20:43:29 +03:00
# Needed by virt-pki-validate script.
Requires : gnutls-utils
2014-04-11 11:20:48 +04:00
%if %{with_pm_utils}
2011-11-22 07:31:22 +04:00
# Needed for probing the power management features of the host.
Requires : pm-utils
2014-04-11 11:20:48 +04:00
%endif
2016-06-25 09:37:22 +03:00
%description client
The client binaries needed to access the virtualization
capabilities of recent versions of Linux (and other OSes).
%package libs
Summary : Client side libraries
Group : Development/Libraries
# So remote clients can access libvirt over SSH tunnel
# (client invokes 'nc' against the UNIX socket on the server)
Requires : nc
2009-07-21 13:16:15 +04:00
Requires : cyrus-sasl
# Not technically required, but makes 'out-of-box' config
# work correctly & doesn't have onerous dependencies
Requires : cyrus-sasl-md5
2016-06-25 09:37:22 +03:00
%description libs
Shared libraries for accessing the libvirt daemon.
2005-11-02 18:37:34 +03:00
2016-06-27 11:15:21 +03:00
%package admin
Summary : Set of tools to control libvirt daemon
Group : Development/Libraries
Requires : %{name} -libs = %{version} -%{release}
Requires : readline
%description admin
The client side utilities to control the libvirt daemon.
2014-02-04 23:37:15 +04:00
%if %{with_wireshark}
%package wireshark
Summary : Wireshark dissector plugin for libvirt RPC transactions
Group : Development/Libraries
2015-10-27 16:02:19 +03:00
Requires : wireshark >= 1.12.6-4
2016-06-25 09:37:22 +03:00
Requires : %{name} -libs = %{version} -%{release}
2014-02-04 23:37:15 +04:00
%description wireshark
Wireshark dissector plugin for better analysis of libvirt RPC traffic.
%endif
2013-10-17 17:18:18 +04:00
%if %{with_lxc}
%package login-shell
Summary : Login shell for connecting users to an LXC container
Group : Development/Libraries
2016-06-25 09:37:22 +03:00
Requires : %{name} -libs = %{version} -%{release}
2013-10-17 17:18:18 +04:00
%description login-shell
Provides the set-uid virt-login-shell binary that is used to
connect a user to an LXC container when they login, by switching
namespaces.
%endif
2005-11-02 18:37:34 +03:00
%package devel
2006-02-09 20:45:11 +03:00
Summary : Libraries, includes, etc. to compile with the libvirt library
2005-11-02 18:37:34 +03:00
Group : Development/Libraries
2016-06-25 09:37:22 +03:00
Requires : %{name} -libs = %{version} -%{release}
2006-11-07 19:28:16 +03:00
Requires : pkgconfig
2005-11-02 18:37:34 +03:00
%description devel
2012-04-03 13:52:12 +04:00
Include header files & development libraries for the libvirt C library.
2005-11-02 18:37:34 +03:00
2011-01-18 21:37:45 +03:00
%if %{with_sanlock}
%package lock-sanlock
Summary : Sanlock lock manager plugin for QEMU driver
Group : Development/Libraries
2012-10-17 01:54:18 +04:00
Requires : sanlock >= 2.4
2011-09-15 18:55:36 +04:00
#for virt-sanlock-cleanup require augeas
Requires : augeas
2012-05-21 22:36:30 +04:00
Requires : %{name} -daemon = %{version} -%{release}
2016-06-25 09:37:22 +03:00
Requires : %{name} -libs = %{version} -%{release}
2011-01-18 21:37:45 +03:00
%description lock-sanlock
Includes the Sanlock lock manager plugin for the QEMU
driver
%endif
2016-02-16 11:41:30 +03:00
%package nss
Summary : Libvirt plugin for Name Service Switch
Group : Development/Libraries
Requires : libvirt-daemon-driver-network = %{version} -%{release}
%description nss
Libvirt plugin for NSS for translating domain names into IP addresses.
2015-04-15 17:16:24 +03:00
2005-11-02 18:37:34 +03:00
%prep
2016-05-04 17:43:08 +03:00
%if ! %{supported_platform}
echo " T h i s R P M r e q u i r e s e i t h e r F e d o r a > = 2 0 o r R H E L > = 6 "
exit 1
%endif
2005-11-02 18:37:34 +03:00
%setup -q
2014-11-21 20:09:36 +03:00
# Patches have to be stored in a temporary file because RPM has
# a limit on the length of the result of any macro expansion;
# if the string is longer, it's silently cropped
%{lua:
tmp = os.tmpname();
f = io.open(tmp, " w + " );
count = 0;
for i, p in ipairs(patches) do
f:write(p.." \n " );
count = count + 1;
end;
f:close();
print(" P A T C H C O U N T = " ..count.." \n " )
print(" P A T C H L I S T = " ..tmp.." \n " )
}
git init -q
git config user.name rpm-build
git config user.email rpm-build
git config gc.auto 0
git add .
git commit -q -a --author 'rpm-build <rpm-build>' \
-m '%{name}-%{version} base'
COUNT=$(grep '\.patch$' $PATCHLIST | wc -l)
if [ $COUNT -ne $PATCHCOUNT ]; then
echo " F o u n d $ C O U N T p a t c h e s i n $ P A T C H L I S T , e x p e c t e d $ P A T C H C O U N T "
exit 1
fi
if [ $COUNT -gt 0 ]; then
xargs git am <$PATCHLIST || exit 1
fi
echo " A p p l i e d $ C O U N T p a t c h e s "
rm -f $PATCHLIST
2015-10-06 22:54:47 +03:00
rm -rf .git
2014-11-21 20:09:36 +03:00
2005-11-02 18:37:34 +03:00
%build
2016-05-04 18:50:55 +03:00
%if %{with_xen}
%define arg_xen --with-xen
%else
%define arg_xen --without-xen
2008-06-12 20:10:50 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_qemu}
%define arg_qemu --with-qemu
%else
%define arg_qemu --without-qemu
2008-06-12 20:10:50 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_openvz}
%define arg_openvz --with-openvz
%else
%define arg_openvz --without-openvz
2008-08-21 13:28:54 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_lxc}
%define arg_lxc --with-lxc
%else
%define arg_lxc --without-lxc
2008-08-21 13:28:54 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_vbox}
%define arg_vbox --with-vbox
%else
%define arg_vbox --without-vbox
2009-07-28 20:59:34 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_libxl}
%define arg_libxl --with-libxl
%else
%define arg_libxl --without-libxl
2011-02-11 01:42:34 +03:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_phyp}
%define arg_phyp --with-phyp
%else
%define arg_phyp --without-phyp
2009-07-24 18:26:54 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_esx}
%define arg_esx --with-esx
%else
%define arg_esx --without-esx
2009-09-16 19:02:38 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_hyperv}
%define arg_hyperv --with-hyperv
%else
%define arg_hyperv --without-hyperv
2011-07-13 18:05:18 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_vmware}
%define arg_vmware --with-vmware
%else
%define arg_vmware --without-vmware
2010-12-21 20:13:50 +03:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_uml}
%define arg_uml --with-uml
%else
%define arg_uml --without-uml
2008-11-21 13:09:08 +03:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_storage_rbd}
%define arg_storage_rbd --with-storage-rbd
%else
%define arg_storage_rbd --without-storage-rbd
2012-05-14 13:06:42 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_storage_sheepdog}
%define arg_storage_sheepdog --with-storage-sheepdog
%else
%define arg_storage_sheepdog --without-storage-sheepdog
2012-07-18 23:06:58 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_storage_gluster}
%define arg_storage_gluster --with-storage-gluster
%else
%define arg_storage_gluster --without-storage-gluster
2013-11-20 03:26:05 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_numactl}
%define arg_numactl --with-numactl
%else
%define arg_numactl --without-numactl
2009-03-31 16:45:07 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_numad}
%define arg_numad --with-numad
%else
%define arg_numad --without-numad
2012-03-24 05:35:20 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_fuse}
%define arg_fuse --with-fuse
%else
%define arg_fuse --without-fuse
2012-11-12 11:02:23 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_sanlock}
%define arg_sanlock --with-sanlock
%else
%define arg_sanlock --without-sanlock
2011-01-18 21:37:45 +03:00
%endif
network: use firewalld instead of iptables, when available
* configure.ac, spec file: firewalld defaults to enabled if dbus is
available, otherwise is disabled. If --with_firewalld is explicitly
requested and dbus is not available, configure will fail.
* bridge_driver: add dbus filters to get the FirewallD1.Reloaded
signal and DBus.NameOwnerChanged on org.fedoraproject.FirewallD1.
When these are encountered, reload all the iptables reuls of all
libvirt's virtual networks (similar to what happens when libvirtd is
restarted).
* iptables, ebtables: use firewall-cmd's direct passthrough interface
when available, otherwise use iptables and ebtables commands. This
decision is made once the first time libvirt calls
iptables/ebtables, and that decision is maintained for the life of
libvirtd.
* Note that the nwfilter part of this patch was separated out into
another patch by Stefan in V2, so that needs to be revised and
re-reviewed as well.
================
All the configure.ac and specfile changes are unchanged from Thomas'
V3.
V3 re-ran "firewall-cmd --state" every time a new rule was added,
which was extremely inefficient. V4 uses VIR_ONCE_GLOBAL_INIT to set
up a one-time initialization function.
The VIR_ONCE_GLOBAL_INIT(x) macro references a static function called
vir(Ip|Eb)OnceInit(), which will then be called the first time that
the static function vir(Ip|Eb)TablesInitialize() is called (that
function is defined for you by the macro). This is
thread-safe, so there is no chance of any race.
IMPORTANT NOTE: I've left the VIR_DEBUG messages in these two init
functions (one for iptables, on for ebtables) as VIR_WARN so that I
don't have to turn on all the other debug message just to see
these. Even if this patch doesn't need any other modification, those
messages need to be changed to VIR_DEBUG before pushing.
This one-time initialization works well. However, I've encountered
problems with testing:
1) Whenever I have enabled the firewalld service, *all* attempts to
call firewall-cmd from within libvirtd end with firewall-cmd hanging
internally somewhere. This is *not* the case if firewall-cmd returns
non-0 in response to "firewall-cmd --state" (i.e. *that* command runs
and returns to libvirt successfully.)
2) If I start libvirtd while firewalld is stopped, then start
firewalld later, this triggers libvirtd to reload its iptables rules,
however it also spits out a *ton* of complaints about deletion failing
(I suppose because firewalld has nuked all of libvirt's rules). I
guess we need to suppress those messages (which is a more annoying
problem to fix than you might think, but that's another story).
3) I noticed a few times during this long line of errors that
firewalld made a complaint about "Resource Temporarily
unavailable. Having libvirtd access iptables commands directly at the
same time as firewalld is doing so is apparently problematic.
4) In general, I'm concerned about the "set it once and never change
it" method - if firewalld is disabled at libvirtd startup, causing
libvirtd to always use iptables/ebtables directly, this won't cause
*terrible* problems, but if libvirtd decides to use firewall-cmd and
firewalld is later disabled, libvirtd will not be able to recover.
2012-08-14 22:59:52 +04:00
%if %{with_firewalld}
2016-05-04 18:50:55 +03:00
%define arg_firewalld --with-firewalld
%else
%define arg_firewalld --without-firewalld
network: use firewalld instead of iptables, when available
* configure.ac, spec file: firewalld defaults to enabled if dbus is
available, otherwise is disabled. If --with_firewalld is explicitly
requested and dbus is not available, configure will fail.
* bridge_driver: add dbus filters to get the FirewallD1.Reloaded
signal and DBus.NameOwnerChanged on org.fedoraproject.FirewallD1.
When these are encountered, reload all the iptables reuls of all
libvirt's virtual networks (similar to what happens when libvirtd is
restarted).
* iptables, ebtables: use firewall-cmd's direct passthrough interface
when available, otherwise use iptables and ebtables commands. This
decision is made once the first time libvirt calls
iptables/ebtables, and that decision is maintained for the life of
libvirtd.
* Note that the nwfilter part of this patch was separated out into
another patch by Stefan in V2, so that needs to be revised and
re-reviewed as well.
================
All the configure.ac and specfile changes are unchanged from Thomas'
V3.
V3 re-ran "firewall-cmd --state" every time a new rule was added,
which was extremely inefficient. V4 uses VIR_ONCE_GLOBAL_INIT to set
up a one-time initialization function.
The VIR_ONCE_GLOBAL_INIT(x) macro references a static function called
vir(Ip|Eb)OnceInit(), which will then be called the first time that
the static function vir(Ip|Eb)TablesInitialize() is called (that
function is defined for you by the macro). This is
thread-safe, so there is no chance of any race.
IMPORTANT NOTE: I've left the VIR_DEBUG messages in these two init
functions (one for iptables, on for ebtables) as VIR_WARN so that I
don't have to turn on all the other debug message just to see
these. Even if this patch doesn't need any other modification, those
messages need to be changed to VIR_DEBUG before pushing.
This one-time initialization works well. However, I've encountered
problems with testing:
1) Whenever I have enabled the firewalld service, *all* attempts to
call firewall-cmd from within libvirtd end with firewall-cmd hanging
internally somewhere. This is *not* the case if firewall-cmd returns
non-0 in response to "firewall-cmd --state" (i.e. *that* command runs
and returns to libvirt successfully.)
2) If I start libvirtd while firewalld is stopped, then start
firewalld later, this triggers libvirtd to reload its iptables rules,
however it also spits out a *ton* of complaints about deletion failing
(I suppose because firewalld has nuked all of libvirt's rules). I
guess we need to suppress those messages (which is a more annoying
problem to fix than you might think, but that's another story).
3) I noticed a few times during this long line of errors that
firewalld made a complaint about "Resource Temporarily
unavailable. Having libvirtd access iptables commands directly at the
same time as firewalld is doing so is apparently problematic.
4) In general, I'm concerned about the "set it once and never change
it" method - if firewalld is disabled at libvirtd startup, causing
libvirtd to always use iptables/ebtables directly, this won't cause
*terrible* problems, but if libvirtd decides to use firewall-cmd and
firewalld is later disabled, libvirtd will not be able to recover.
2012-08-14 22:59:52 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_wireshark}
%define arg_wireshark --with-wireshark-dissector
%else
%define arg_wireshark --without-wireshark-dissector
2014-02-04 23:37:15 +04:00
%endif
2016-05-04 18:50:55 +03:00
%if %{with_pm_utils}
%define arg_pm_utils --with-pm-utils
%else
%define arg_pm_utils --without-pm-utils
2014-04-11 11:20:48 +04:00
%endif
Imprint all logs with version + package build information
The logging functions are enhanced so that immediately prior to
the first log message being printed to any output channel, the
libvirt package version will be printed.
eg
$ LIBVIRT_DEBUG=1 virsh
18:13:28.013: 17536: info : libvirt version: 0.8.7
18:13:28.013: 17536: debug : virInitialize:361 : register drivers
...
The 'configure' script gains two new arguments which can be
used as
--with-packager="Fedora Project, x86-01.phx2.fedoraproject.org, 01-27-2011-18:00:10"
--with-packager-version="1.fc14"
to allow distros to append a custom string with package specific
data.
The RPM specfile is modified so that it appends the RPM version,
the build host, the build date and the packager name.
eg
$ LIBVIRT_DEBUG=1 virsh
18:14:52.086: 17551: info : libvirt version: 0.8.7, package: 1.fc13 (Fedora Project, x86-01.phx2.fedoraproject.org, 01-27-2011-18:00:10)
18:14:52.086: 17551: debug : virInitialize:361 : register drivers
Thus when distro packagers receive bug reports they can clearly
see what version was in use, even if the bug reporter mistakenly
or intentionally lies about version/builds
* src/util/logging.c: Output version data prior to first log message
* libvirt.spec.in: Include RPM release, date, hostname & packager
* configure.ac: Add --with-packager & --with-packager-version args
2011-01-27 21:11:16 +03:00
%define when %(date +"%%F-%%T")
%define where %(hostname)
%define who %{?packager}%{!?packager:Unknown}
2016-05-04 18:50:55 +03:00
%define arg_packager --with-packager="%{who}, %{when}, %{where}"
%define arg_packager_version --with-packager-version="%{release}"
Imprint all logs with version + package build information
The logging functions are enhanced so that immediately prior to
the first log message being printed to any output channel, the
libvirt package version will be printed.
eg
$ LIBVIRT_DEBUG=1 virsh
18:13:28.013: 17536: info : libvirt version: 0.8.7
18:13:28.013: 17536: debug : virInitialize:361 : register drivers
...
The 'configure' script gains two new arguments which can be
used as
--with-packager="Fedora Project, x86-01.phx2.fedoraproject.org, 01-27-2011-18:00:10"
--with-packager-version="1.fc14"
to allow distros to append a custom string with package specific
data.
The RPM specfile is modified so that it appends the RPM version,
the build host, the build date and the packager name.
eg
$ LIBVIRT_DEBUG=1 virsh
18:14:52.086: 17551: info : libvirt version: 0.8.7, package: 1.fc13 (Fedora Project, x86-01.phx2.fedoraproject.org, 01-27-2011-18:00:10)
18:14:52.086: 17551: debug : virInitialize:361 : register drivers
Thus when distro packagers receive bug reports they can clearly
see what version was in use, even if the bug reporter mistakenly
or intentionally lies about version/builds
* src/util/logging.c: Output version data prior to first log message
* libvirt.spec.in: Include RPM release, date, hostname & packager
* configure.ac: Add --with-packager & --with-packager-version args
2011-01-27 21:11:16 +03:00
2011-07-07 17:45:07 +04:00
%if %{with_systemd}
2016-05-04 18:50:55 +03:00
%define arg_init_script --with-init-script=systemd
2011-07-07 17:45:07 +04:00
%else
2016-05-04 18:50:55 +03:00
%define arg_init_script --with-init-script=redhat
2011-07-07 17:45:07 +04:00
%endif
Imprint all logs with version + package build information
The logging functions are enhanced so that immediately prior to
the first log message being printed to any output channel, the
libvirt package version will be printed.
eg
$ LIBVIRT_DEBUG=1 virsh
18:13:28.013: 17536: info : libvirt version: 0.8.7
18:13:28.013: 17536: debug : virInitialize:361 : register drivers
...
The 'configure' script gains two new arguments which can be
used as
--with-packager="Fedora Project, x86-01.phx2.fedoraproject.org, 01-27-2011-18:00:10"
--with-packager-version="1.fc14"
to allow distros to append a custom string with package specific
data.
The RPM specfile is modified so that it appends the RPM version,
the build host, the build date and the packager name.
eg
$ LIBVIRT_DEBUG=1 virsh
18:14:52.086: 17551: info : libvirt version: 0.8.7, package: 1.fc13 (Fedora Project, x86-01.phx2.fedoraproject.org, 01-27-2011-18:00:10)
18:14:52.086: 17551: debug : virInitialize:361 : register drivers
Thus when distro packagers receive bug reports they can clearly
see what version was in use, even if the bug reporter mistakenly
or intentionally lies about version/builds
* src/util/logging.c: Output version data prior to first log message
* libvirt.spec.in: Include RPM release, date, hostname & packager
* configure.ac: Add --with-packager & --with-packager-version args
2011-01-27 21:11:16 +03:00
2016-05-04 18:33:14 +03:00
%if 0%{?fedora} || 0%{?rhel} >= 7
2016-05-04 18:50:55 +03:00
%define arg_selinux_mount --with-selinux-mount="/sys/fs/selinux"
2016-05-04 18:33:14 +03:00
%else
2016-05-04 18:50:55 +03:00
%define arg_selinux_mount --with-selinux-mount="/selinux"
2012-09-06 18:22:27 +04:00
%endif
2016-05-20 22:50:16 +03:00
%if 0%{?fedora}
# Nightly firmware repo x86/OVMF
LOADERS=" / u s r / s h a r e / e d k 2 . g i t / o v m f - x 6 4 / O V M F _ C O D E - p u r e - e f i . f d : / u s r / s h a r e / e d k 2 . g i t / o v m f - x 6 4 / O V M F _ V A R S - p u r e - e f i . f d "
# Nightly firmware repo aarch64/AAVMF
LOADERS=" $ L O A D E R S : / u s r / s h a r e / e d k 2 . g i t / a a r c h 6 4 / Q E M U _ E F I - p f l a s h . r a w : / u s r / s h a r e / e d k 2 . g i t / a a r c h 6 4 / v a r s - t e m p l a t e - p f l a s h . r a w "
# Fedora official x86/OVMF
LOADERS=" $ L O A D E R S : / u s r / s h a r e / e d k 2 / o v m f / O V M F _ C O D E . f d : / u s r / s h a r e / e d k 2 / o v m f / O V M F _ V A R S . f d "
# Fedora official aarch64/AAVMF
LOADERS=" $ L O A D E R S : / u s r / s h a r e / e d k 2 / a a r c h 6 4 / Q E M U _ E F I - p f l a s h . r a w : / u s r / s h a r e / e d k 2 / a a r c h 6 4 / v a r s - t e m p l a t e - p f l a s h . r a w "
%define arg_loader_nvram --with-loader-nvram="$LOADERS"
%endif
2013-07-30 18:04:48 +04:00
# place macros above and build commands below this comment
%if 0%{?enable_autotools}
autoreconf -if
%endif
2014-03-06 14:52:25 +04:00
rm -f po/stamp-po
2016-05-04 18:50:55 +03:00
%configure %{?arg_xen} \
%{?arg_qemu} \
%{?arg_openvz} \
%{?arg_lxc} \
%{?arg_vbox} \
%{?arg_libxl} \
2016-05-04 18:29:49 +03:00
--with-sasl \
2016-05-04 18:21:42 +03:00
--with-avahi \
2016-05-04 18:31:38 +03:00
--with-polkit \
2016-05-04 18:20:58 +03:00
--with-libvirtd \
2016-05-04 18:50:55 +03:00
%{?arg_uml} \
%{?arg_phyp} \
%{?arg_esx} \
%{?arg_hyperv} \
%{?arg_vmware} \
2016-05-04 17:11:01 +03:00
--without-xenapi \
--without-vz \
2014-02-25 20:51:40 +04:00
--without-bhyve \
2016-05-04 18:34:37 +03:00
--with-interface \
2016-05-04 18:36:17 +03:00
--with-network \
2016-05-04 18:40:08 +03:00
--with-storage-fs \
--with-storage-lvm \
--with-storage-iscsi \
2017-02-21 12:16:04 +03:00
--with-storage-scsi \
2016-05-04 18:40:08 +03:00
--with-storage-disk \
--with-storage-mpath \
2016-05-04 18:50:55 +03:00
%{?arg_storage_rbd} \
%{?arg_storage_sheepdog} \
%{?arg_storage_gluster} \
2017-02-21 12:16:04 +03:00
--without-storage-zfs \
--without-storage-vstorage \
2016-05-04 18:50:55 +03:00
%{?arg_numactl} \
%{?arg_numad} \
2016-05-04 18:24:39 +03:00
--with-capng \
2016-05-04 18:50:55 +03:00
%{?arg_fuse} \
2016-05-04 18:26:30 +03:00
--with-netcf \
2016-05-04 18:33:14 +03:00
--with-selinux \
2016-05-04 18:50:55 +03:00
%{?arg_selinux_mount} \
2016-05-04 18:24:02 +03:00
--without-apparmor \
2016-05-04 18:22:18 +03:00
--without-hal \
2016-05-04 18:25:37 +03:00
--with-udev \
2016-05-04 18:32:18 +03:00
--with-yajl \
2016-05-04 18:50:55 +03:00
%{?arg_sanlock} \
2016-05-04 18:43:44 +03:00
--with-libpcap \
2016-05-04 18:44:27 +03:00
--with-macvtap \
2016-05-04 18:26:58 +03:00
--with-audit \
2016-05-04 18:27:46 +03:00
--with-dtrace \
2016-05-04 18:14:10 +03:00
--with-driver-modules \
2016-05-04 18:50:55 +03:00
%{?arg_firewalld} \
%{?arg_wireshark} \
%{?arg_pm_utils} \
2016-05-04 18:46:16 +03:00
--with-nss-plugin \
2016-05-04 18:50:55 +03:00
%{arg_packager} \
%{arg_packager_version} \
2009-07-16 01:25:01 +04:00
--with-qemu-user=%{qemu_user} \
--with-qemu-group=%{qemu_group} \
2016-06-06 18:02:22 +03:00
--with-tls-priority=%{tls_priority} \
2016-05-04 18:50:55 +03:00
%{?arg_loader_nvram} \
2013-07-30 18:01:11 +04:00
%{?enable_werror} \
build: add configure option to disable gnulib tests
The gnulib testsuite is relatively stable - the only times it is
likely to have a test change from pass to fail is on a gnulib
submodule update or a major system change (such as moving from
Fedora 18 to 19, or other large change to libc). While it is an
important test for end users on arbitrary machines (to make sure
that the portability glue works for their machine), it mostly
wastes time for development testing (as most developers aren't
making any of the major changes that would cause gnulib tests
to alter behavior). Thus, it pays to make the tests optional
at configure time, defaulting to off for development, on for
tarballs, with autobuilders requesting it to be on. It also
helps to allow a make-time override, via VIR_TEST_EXPENSIVE=[01]
(much the way automake sets up V=[01] for overriding the configure
time default of how verbose to be).
Automake has some pretty hard-coded magic with regards to the
TESTS variable; I had quite a job figuring out how to keep
'make distcheck' passing regardless of the configure option
setting in use, while still disabling the tests at runtime
when I did not configure them on and did not use the override
variable. Thankfully, we require GNU make, which lets me
hide some information from Automake's magic handling of TESTS.
* bootstrap.conf (bootstrap_epilogue): Munge gnulib test variable.
* configure.ac (--enable-expensive-tests): Add new enable switch.
(VIR_TEST_EXPENSIVE_DEFAULT, WITH_EXPENSIVE_TESTS): Set new
witnesses.
* gnulib/tests/Makefile.am (TESTS): Make tests conditional on
configure settings and the VIR_TEST_EXPENSIVE variable.
* tests/Makefile.am (TESTS_ENVIRONMENT): Expose VIR_TEST_EXPENSIVE
to all tests.
* autobuild.sh: Enable all tests during autobuilds.
* libvirt.spec.in (%configure): Likewise.
* mingw-libvirt.spec.in (%mingw_configure): Likewise.
* docs/hacking.html.in: Document the option.
* HACKING: Regenerate.
Signed-off-by: Eric Blake <eblake@redhat.com>
2013-07-31 17:18:58 +04:00
--enable-expensive-tests \
2016-05-04 18:50:55 +03:00
%{arg_init_script}
2008-08-28 13:08:44 +04:00
make %{?_smp_mflags}
2009-07-21 13:16:15 +04:00
gzip -9 ChangeLog
2005-11-02 18:37:34 +03:00
%install
rm -fr %{buildroot}
2013-01-31 18:31:37 +04:00
# Avoid using makeinstall macro as it changes prefixes rather than setting
# DESTDIR. Newer make_install macro would be better but it's not available
# on RHEL 5, thus we need to expand it here.
2016-11-07 18:09:17 +03:00
make %{?_smp_mflags} install DESTDIR=%{?buildroot} SYSTEMD_UNIT_DIR=%{_unitdir}
2013-01-31 18:31:37 +04:00
2016-11-07 18:09:17 +03:00
make %{?_smp_mflags} -C examples distclean
2016-01-10 02:03:56 +03:00
2005-11-02 18:37:34 +03:00
rm -f $RPM_BUILD_ROOT %{_libdir} /*.la
2005-12-16 16:27:23 +03:00
rm -f $RPM_BUILD_ROOT %{_libdir} /*.a
2011-01-18 21:37:45 +03:00
rm -f $RPM_BUILD_ROOT %{_libdir} /libvirt/lock-driver/*.la
rm -f $RPM_BUILD_ROOT %{_libdir} /libvirt/lock-driver/*.a
2012-04-02 23:53:43 +04:00
rm -f $RPM_BUILD_ROOT %{_libdir} /libvirt/connection-driver/*.la
rm -f $RPM_BUILD_ROOT %{_libdir} /libvirt/connection-driver/*.a
2014-02-04 23:37:15 +04:00
%if %{with_wireshark}
2016-07-28 13:48:00 +03:00
%if 0%{fedora} >= 24
2016-07-27 17:58:32 +03:00
rm -f $RPM_BUILD_ROOT %{_libdir} /wireshark/plugins/libvirt.la
2016-07-28 13:48:00 +03:00
%else
2016-07-28 13:00:18 +03:00
rm -f $RPM_BUILD_ROOT %{_libdir} /wireshark/plugins/*/libvirt.la
mv $RPM_BUILD_ROOT %{_libdir} /wireshark/plugins/*/libvirt.so \
$RPM_BUILD_ROOT %{_libdir} /wireshark/plugins/libvirt.so
2016-07-28 13:48:00 +03:00
%endif
2014-02-04 23:37:15 +04:00
%endif
2007-03-15 20:51:11 +03:00
2010-04-28 17:38:47 +04:00
install -d -m 0755 $RPM_BUILD_ROOT %{_datadir} /lib/libvirt/dnsmasq/
2007-03-15 20:51:11 +03:00
# We don't want to install /etc/libvirt/qemu/networks in the main %files list
# because if the admin wants to delete the default network completely, we don't
# want to end up re-incarnating it on every RPM upgrade.
install -d -m 0755 $RPM_BUILD_ROOT %{_datadir} /libvirt/networks/
cp $RPM_BUILD_ROOT %{_sysconfdir} /libvirt/qemu/networks/default.xml \
$RPM_BUILD_ROOT %{_datadir} /libvirt/networks/default.xml
rm -f $RPM_BUILD_ROOT %{_sysconfdir} /libvirt/qemu/networks/default.xml
rm -f $RPM_BUILD_ROOT %{_sysconfdir} /libvirt/qemu/networks/autostart/default.xml
2007-03-12 19:32:43 +03:00
# Strip auto-generated UUID - we need it generated per-install
2007-03-15 20:51:11 +03:00
sed -i -e " / < u u i d > / d " $RPM_BUILD_ROOT %{_datadir} /libvirt/networks/default.xml
2009-09-16 19:02:38 +04:00
%if ! %{with_qemu}
2008-11-26 17:46:49 +03:00
rm -f $RPM_BUILD_ROOT %{_datadir} /augeas/lenses/libvirtd_qemu.aug
rm -f $RPM_BUILD_ROOT %{_datadir} /augeas/lenses/tests/test_libvirtd_qemu.aug
2008-09-17 18:09:13 +04:00
%endif
2006-09-21 19:24:37 +04:00
%find_lang %{name}
2005-11-02 18:37:34 +03:00
2012-05-30 19:15:22 +04:00
%if ! %{with_sanlock}
rm -f $RPM_BUILD_ROOT %{_datadir} /augeas/lenses/libvirt_sanlock.aug
rm -f $RPM_BUILD_ROOT %{_datadir} /augeas/lenses/tests/test_libvirt_sanlock.aug
%endif
2009-10-08 20:06:40 +04:00
%if ! %{with_lxc}
rm -f $RPM_BUILD_ROOT %{_datadir} /augeas/lenses/libvirtd_lxc.aug
rm -f $RPM_BUILD_ROOT %{_datadir} /augeas/lenses/tests/test_libvirtd_lxc.aug
2009-10-13 18:18:45 +04:00
%endif
2009-10-08 20:06:40 +04:00
2008-09-17 18:09:13 +04:00
%if ! %{with_qemu}
rm -rf $RPM_BUILD_ROOT %{_sysconfdir} /libvirt/qemu.conf
2010-03-18 15:50:08 +03:00
rm -rf $RPM_BUILD_ROOT %{_sysconfdir} /logrotate.d/libvirtd.qemu
2008-09-17 18:09:13 +04:00
%endif
2009-10-08 19:40:14 +04:00
%if ! %{with_lxc}
rm -rf $RPM_BUILD_ROOT %{_sysconfdir} /libvirt/lxc.conf
2010-04-13 12:40:21 +04:00
rm -rf $RPM_BUILD_ROOT %{_sysconfdir} /logrotate.d/libvirtd.lxc
2010-03-18 15:50:08 +03:00
%endif
2013-09-09 19:15:15 +04:00
%if ! %{with_libxl}
rm -rf $RPM_BUILD_ROOT %{_sysconfdir} /libvirt/libxl.conf
2015-05-01 00:16:49 +03:00
rm -rf $RPM_BUILD_ROOT %{_sysconfdir} /logrotate.d/libvirtd.libxl
2013-09-09 19:15:15 +04:00
rm -f $RPM_BUILD_ROOT %{_datadir} /augeas/lenses/libvirtd_libxl.aug
rm -f $RPM_BUILD_ROOT %{_datadir} /augeas/lenses/tests/test_libvirtd_libxl.aug
%endif
2010-03-18 15:50:08 +03:00
%if ! %{with_uml}
rm -rf $RPM_BUILD_ROOT %{_sysconfdir} /logrotate.d/libvirtd.uml
2009-10-08 19:40:14 +04:00
%endif
2008-09-17 18:09:13 +04:00
2013-11-20 16:58:24 +04:00
# Copied into libvirt-docs subpackage eventually
mv $RPM_BUILD_ROOT %{_datadir} /doc/libvirt-%{version} libvirt-docs
2012-04-03 13:52:12 +04:00
2016-05-04 18:27:46 +03:00
%ifarch %{power64} s390x x86_64 ia64 alpha sparc64
2012-10-21 06:46:58 +04:00
mv $RPM_BUILD_ROOT %{_datadir} /systemtap/tapset/libvirt_probes.stp \
$RPM_BUILD_ROOT %{_datadir} /systemtap/tapset/libvirt_probes-64.stp
mv $RPM_BUILD_ROOT %{_datadir} /systemtap/tapset/libvirt_qemu_probes.stp \
$RPM_BUILD_ROOT %{_datadir} /systemtap/tapset/libvirt_qemu_probes-64.stp
%endif
2005-11-02 18:37:34 +03:00
%clean
rm -fr %{buildroot}
2010-04-12 22:39:00 +04:00
%check
cd tests
2012-08-01 12:10:36 +04:00
# These tests don't current work in a mock build root
for i in nodeinfotest seclabeltest
2010-04-12 22:39:00 +04:00
do
rm -f $i
2012-08-01 15:09:57 +04:00
printf 'int main(void) { return 0; }' > $i.c
2012-08-01 12:10:36 +04:00
printf '#!/bin/sh\nexit 0\n' > $i
2010-04-12 22:39:00 +04:00
chmod +x $i
done
2016-11-03 15:34:53 +03:00
if ! make %{?_smp_mflags} check VIR_TEST_DEBUG=1
2013-07-29 19:36:20 +04:00
then
cat test-suite.log || true
exit 1
fi
2010-04-12 22:39:00 +04:00
2015-04-29 00:38:00 +03:00
%pre daemon
# 'libvirt' group is just to allow password-less polkit access to
# libvirtd. The uid number is irrelevant, so we use dynamic allocation
# described at the above link.
getent group libvirt >/dev/null || groupadd -r libvirt
exit 0
2012-04-03 14:44:59 +04:00
%post daemon
2007-03-15 20:51:11 +03:00
2016-05-04 18:20:58 +03:00
%if %{with_systemd}
%if %{with_systemd_macros}
%systemd_post virtlockd.socket virtlogd.socket libvirtd.service
%else
2011-07-07 17:45:07 +04:00
if [ $1 -eq 1 ] ; then
# Initial installation
2014-07-23 12:58:00 +04:00
/bin/systemctl enable \
virtlockd.socket \
2015-02-09 19:35:05 +03:00
virtlogd.socket \
2014-07-23 12:58:00 +04:00
libvirtd.service >/dev/null 2>&1 || :
2011-07-07 17:45:07 +04:00
fi
2016-05-04 18:20:58 +03:00
%endif
%else
%if %{with_cgconfig}
2012-06-11 20:57:38 +04:00
# Starting with Fedora 16/RHEL-7, systemd automounts all cgroups,
# and cgconfig is no longer a necessary service.
2016-05-04 18:20:58 +03:00
%if 0%{?rhel} && 0%{?rhel} < 7
2010-12-23 11:44:19 +03:00
if [ " $ 1 " -eq " 1 " ]; then
/sbin/chkconfig cgconfig on
fi
2013-01-10 00:50:03 +04:00
%endif
2016-05-04 18:20:58 +03:00
%endif
2010-12-23 11:44:19 +03:00
2007-03-15 20:51:11 +03:00
/sbin/chkconfig --add libvirtd
2015-02-09 19:35:05 +03:00
/sbin/chkconfig --add virtlogd
2013-12-09 10:23:30 +04:00
/sbin/chkconfig --add virtlockd
2016-05-04 18:20:58 +03:00
%endif
2007-03-15 20:51:11 +03:00
2012-04-03 14:44:59 +04:00
%preun daemon
2016-05-04 18:20:58 +03:00
%if %{with_systemd}
%if %{with_systemd_macros}
%systemd_preun libvirtd.service virtlogd.socket virtlogd.service virtlockd.socket virtlockd.service
%else
2011-07-07 17:45:07 +04:00
if [ $1 -eq 0 ] ; then
# Package removal, not upgrade
2014-07-23 12:58:00 +04:00
/bin/systemctl --no-reload disable \
libvirtd.service \
2015-02-09 19:35:05 +03:00
virtlogd.socket \
virtlogd.service \
2014-07-23 12:58:00 +04:00
virtlockd.socket \
virtlockd.service > /dev/null 2>&1 || :
/bin/systemctl stop \
libvirtd.service \
2015-02-09 19:35:05 +03:00
virtlogd.socket \
virtlogd.service \
2014-07-23 12:58:00 +04:00
virtlockd.socket \
virtlockd.service > /dev/null 2>&1 || :
2011-07-07 17:45:07 +04:00
fi
2016-05-04 18:20:58 +03:00
%endif
%else
2007-02-23 18:53:56 +03:00
if [ $1 = 0 ]; then
/sbin/service libvirtd stop 1>/dev/null 2>&1
/sbin/chkconfig --del libvirtd
2015-02-09 19:35:05 +03:00
/sbin/service virtlogd stop 1>/dev/null 2>&1
/sbin/chkconfig --del virtlogd
2013-12-09 10:23:30 +04:00
/sbin/service virtlockd stop 1>/dev/null 2>&1
/sbin/chkconfig --del virtlockd
2007-02-23 18:53:56 +03:00
fi
2016-05-04 18:20:58 +03:00
%endif
2011-07-07 17:45:07 +04:00
2012-04-03 14:44:59 +04:00
%postun daemon
2016-05-04 18:20:58 +03:00
%if %{with_systemd}
2011-07-07 17:45:07 +04:00
/bin/systemctl daemon-reload >/dev/null 2>&1 || :
if [ $1 -ge 1 ] ; then
2013-12-09 10:23:30 +04:00
/bin/systemctl reload-or-try-restart virtlockd.service >/dev/null 2>&1 || :
2015-02-09 19:35:05 +03:00
/bin/systemctl reload-or-try-restart virtlogd.service >/dev/null 2>&1 || :
2011-07-07 17:45:07 +04:00
/bin/systemctl try-restart libvirtd.service >/dev/null 2>&1 || :
fi
2016-05-04 18:20:58 +03:00
%else
2013-12-09 10:23:30 +04:00
if [ $1 -ge 1 ]; then
/sbin/service virtlockd reload > /dev/null 2>&1 || :
2015-02-09 19:35:05 +03:00
/sbin/service virtlogd reload > /dev/null 2>&1 || :
2013-12-09 10:23:30 +04:00
/sbin/service libvirtd condrestart > /dev/null 2>&1
fi
2016-05-04 18:20:58 +03:00
%endif
2013-12-09 10:23:30 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_systemd}
%else
2013-12-09 10:23:30 +04:00
%triggerpostun daemon -- libvirt-daemon < 1.2.1
if [ " $ 1 " -ge " 1 " ]; then
/sbin/service virtlockd reload > /dev/null 2>&1 || :
2015-02-09 19:35:05 +03:00
/sbin/service virtlogd reload > /dev/null 2>&1 || :
2013-12-09 10:23:30 +04:00
/sbin/service libvirtd condrestart > /dev/null 2>&1
fi
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:44:59 +04:00
2015-12-07 15:48:04 +03:00
# In upgrade scenario we must explicitly enable virtlockd/virtlogd
# sockets, if libvirtd is already enabled and start them if
# libvirtd is running, otherwise you'll get failures to start
# guests
%triggerpostun daemon -- libvirt-daemon < 1.3.0
if [ $1 -ge 1 ] ; then
2016-05-04 18:20:58 +03:00
%if %{with_systemd}
2015-12-07 15:48:04 +03:00
/bin/systemctl is-enabled libvirtd.service 1>/dev/null 2>&1 &&
/bin/systemctl enable virtlogd.socket || :
/bin/systemctl is-active libvirtd.service 1>/dev/null 2>&1 &&
/bin/systemctl start virtlogd.socket || :
2016-05-04 18:20:58 +03:00
%else
2015-12-07 15:48:04 +03:00
/sbin/chkconfig libvirtd 1>/dev/null 2>&1 &&
2015-12-31 08:09:11 +03:00
/sbin/chkconfig virtlogd on || :
2015-12-07 15:48:04 +03:00
/sbin/service libvirtd status 1>/dev/null 2>&1 &&
2015-12-31 08:09:11 +03:00
/sbin/service virtlogd start || :
2016-05-04 18:20:58 +03:00
%endif
2015-12-07 15:48:04 +03:00
fi
2012-04-03 14:44:59 +04:00
%post daemon-config-network
if test $1 -eq 1 && test ! -f %{_sysconfdir} /libvirt/qemu/networks/default.xml ; then
2014-09-10 21:10:45 +04:00
# see if the network used by default network creates a conflict,
# and try to resolve it
# NB: 192.168.122.0/24 is used in the default.xml template file;
# do not modify any of those values here without also modifying
# them in the template.
orig_sub=122
sub=${orig_sub}
nl='
'
2014-09-15 21:30:08 +04:00
routes=" $ { n l } $ ( i p r o u t e s h o w | c u t - d ' ' - f 1 ) $ { n l } "
2014-09-10 21:10:45 +04:00
case ${routes} in
*" $ { n l } 1 9 2 . 1 6 8 . $ { o r i g _ s u b } . 0 / 2 4 $ { n l } " *)
# there was a match, so we need to look for an unused subnet
for new_sub in $(seq 124 254); do
case ${routes} in
*" $ { n l } 1 9 2 . 1 6 8 . $ { n e w _ s u b } . 0 / 2 4 $ { n l } " *)
;;
*)
sub=$new_sub
break;
;;
esac
done
;;
*)
;;
esac
2012-04-03 14:44:59 +04:00
UUID=`/usr/bin/uuidgen`
2014-09-10 21:10:45 +04:00
sed -e " s / $ { o r i g _ s u b } / $ { s u b } / g " \
-e " s , < / n a m e > , < / n a m e > \n < u u i d > $ U U I D < / u u i d > , " \
2012-04-03 14:44:59 +04:00
< %{_datadir} /libvirt/networks/default.xml \
> %{_sysconfdir} /libvirt/qemu/networks/default.xml
ln -s ../default.xml %{_sysconfdir} /libvirt/qemu/networks/autostart/default.xml
2015-04-16 22:42:05 +03:00
# Make sure libvirt picks up the new network defininiton
2016-05-04 18:36:17 +03:00
%if %{with_systemd}
2015-04-16 22:42:05 +03:00
/bin/systemctl try-restart libvirtd.service >/dev/null 2>&1 ||:
2016-05-04 18:36:17 +03:00
%else
2015-04-16 22:42:05 +03:00
/sbin/service libvirtd condrestart > /dev/null 2>&1 || :
2016-05-04 18:36:17 +03:00
%endif
2015-04-16 22:42:05 +03:00
2012-04-03 14:44:59 +04:00
fi
2011-07-07 17:45:07 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_systemd}
2011-07-07 17:45:07 +04:00
%triggerun -- libvirt < 0.9.4
%{_bindir} /systemd-sysv-convert --save libvirtd >/dev/null 2>&1 ||:
# If the package is allowed to autostart:
/bin/systemctl --no-reload enable libvirtd.service >/dev/null 2>&1 ||:
# Run these because the SysV package being removed won't do them
/sbin/chkconfig --del libvirtd >/dev/null 2>&1 || :
/bin/systemctl try-restart libvirtd.service >/dev/null 2>&1 || :
2016-05-04 18:20:58 +03:00
%endif
2013-12-06 03:15:55 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_qemu}
2013-12-06 03:15:55 +04:00
%pre daemon-driver-qemu
# We want soft static allocation of well-known ids, as disk images
# are commonly shared across NFS mounts by id rather than name; see
# https://fedoraproject.org/wiki/Packaging:UsersAndGroups
getent group kvm >/dev/null || groupadd -f -g 36 -r kvm
getent group qemu >/dev/null || groupadd -f -g 107 -r qemu
if ! getent passwd qemu >/dev/null; then
if ! getent passwd 107 >/dev/null; then
useradd -r -u 107 -g qemu -G kvm -d / -s /sbin/nologin -c " q e m u u s e r " qemu
else
useradd -r -g qemu -G kvm -d / -s /sbin/nologin -c " q e m u u s e r " qemu
fi
fi
exit 0
2016-05-04 18:20:58 +03:00
%endif
2005-11-02 18:37:34 +03:00
2010-05-27 16:47:11 +04:00
%preun client
2011-07-07 17:45:07 +04:00
%if %{with_systemd}
2013-01-10 00:50:03 +04:00
%if %{with_systemd_macros}
%systemd_preun libvirt-guests.service
%endif
2011-07-07 17:45:07 +04:00
%else
2010-05-27 16:47:11 +04:00
if [ $1 = 0 ]; then
/sbin/chkconfig --del libvirt-guests
rm -f /var/lib/libvirt/libvirt-guests
fi
2011-07-07 17:45:07 +04:00
%endif
2010-05-27 16:47:11 +04:00
%post client
/sbin/ldconfig
2011-07-07 17:45:07 +04:00
%if %{with_systemd}
2013-01-10 00:50:03 +04:00
%if %{with_systemd_macros}
%systemd_post libvirt-guests.service
%endif
2011-07-07 17:45:07 +04:00
%else
2010-05-27 16:47:11 +04:00
/sbin/chkconfig --add libvirt-guests
2011-07-07 17:45:07 +04:00
%endif
2009-07-29 12:55:43 +04:00
2012-12-18 03:34:25 +04:00
%postun client
2005-11-02 18:37:34 +03:00
2012-12-18 03:34:25 +04:00
/sbin/ldconfig
2011-07-07 17:45:07 +04:00
%if %{with_systemd}
2013-01-10 00:50:03 +04:00
%if %{with_systemd_macros}
2013-11-25 19:37:32 +04:00
%systemd_postun libvirt-guests.service
2013-01-10 00:50:03 +04:00
%endif
2011-07-07 17:45:07 +04:00
%triggerun client -- libvirt < 0.9.4
%{_bindir} /systemd-sysv-convert --save libvirt-guests >/dev/null 2>&1 ||:
# If the package is allowed to autostart:
/bin/systemctl --no-reload enable libvirt-guests.service >/dev/null 2>&1 ||:
2013-11-22 00:04:35 +04:00
# Run this because the SysV package being removed won't do them
2011-07-07 17:45:07 +04:00
/sbin/chkconfig --del libvirt-guests >/dev/null 2>&1 || :
%endif
2012-11-01 01:21:06 +04:00
%if %{with_sanlock}
2012-10-23 18:34:21 +04:00
%post lock-sanlock
if getent group sanlock > /dev/null ; then
chmod 0770 %{_localstatedir} /lib/libvirt/sanlock
chown root:sanlock %{_localstatedir} /lib/libvirt/sanlock
fi
2012-11-01 01:21:06 +04:00
%endif
2012-10-23 18:34:21 +04:00
2013-11-22 15:13:03 +04:00
%if %{with_lxc}
%pre login-shell
getent group virtlogin >/dev/null || groupadd -r virtlogin
exit 0
%endif
2012-04-03 10:26:41 +04:00
%files
2012-03-30 17:14:00 +04:00
2012-04-03 14:44:59 +04:00
%files docs
2016-04-13 17:37:42 +03:00
%doc AUTHORS ChangeLog.gz NEWS README TODO
%doc libvirt-docs/*
2012-04-03 14:44:59 +04:00
# API docs
%dir %{_datadir} /gtk-doc/html/libvirt/
%doc %{_datadir} /gtk-doc/html/libvirt/*.devhelp
%doc %{_datadir} /gtk-doc/html/libvirt/*.html
%doc %{_datadir} /gtk-doc/html/libvirt/*.png
%doc %{_datadir} /gtk-doc/html/libvirt/*.css
2016-04-13 17:37:42 +03:00
%doc examples/hellolibvirt
%doc examples/object-events
%doc examples/dominfo
%doc examples/domsuspend
%doc examples/dommigrate
%doc examples/openauth
%doc examples/xml
%doc examples/rename
%doc examples/systemtap
2016-06-24 20:50:10 +03:00
%doc examples/admin
2016-04-13 17:37:42 +03:00
2012-04-03 14:44:59 +04:00
%files daemon
2007-03-12 19:32:43 +03:00
%dir %attr (0700, root, root) %{_sysconfdir} /libvirt/
2008-09-17 18:09:13 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_systemd}
2011-07-07 17:45:07 +04:00
%{_unitdir} /libvirtd.service
2016-10-14 10:13:48 +03:00
%{_unitdir} /virt-guest-shutdown.target
2015-02-09 19:35:05 +03:00
%{_unitdir} /virtlogd.service
%{_unitdir} /virtlogd.socket
2011-07-07 18:02:32 +04:00
%{_unitdir} /virtlockd.service
%{_unitdir} /virtlockd.socket
2016-05-04 18:20:58 +03:00
%else
2012-09-24 08:41:56 +04:00
%{_sysconfdir} /rc.d/init.d/libvirtd
2015-02-09 19:35:05 +03:00
%{_sysconfdir} /rc.d/init.d/virtlogd
2012-08-02 23:06:50 +04:00
%{_sysconfdir} /rc.d/init.d/virtlockd
2016-05-04 18:20:58 +03:00
%endif
2011-02-18 21:45:49 +03:00
%doc daemon/libvirtd.upstart
2007-06-27 03:48:46 +04:00
%config (noreplace) %{_sysconfdir} /sysconfig/libvirtd
2015-02-09 19:35:05 +03:00
%config (noreplace) %{_sysconfdir} /sysconfig/virtlogd
2012-08-02 23:06:50 +04:00
%config (noreplace) %{_sysconfdir} /sysconfig/virtlockd
2007-10-12 23:54:15 +04:00
%config (noreplace) %{_sysconfdir} /libvirt/libvirtd.conf
2015-02-09 19:35:05 +03:00
%config (noreplace) %{_sysconfdir} /libvirt/virtlogd.conf
2013-08-08 19:06:31 +04:00
%config (noreplace) %{_sysconfdir} /libvirt/virtlockd.conf
2015-04-15 12:49:22 +03:00
%config (noreplace) %{_prefix} /lib/sysctl.d/60-libvirtd.conf
2008-09-17 18:09:13 +04:00
2011-03-03 10:26:22 +03:00
%config (noreplace) %{_sysconfdir} /logrotate.d/libvirtd
2007-03-15 20:51:11 +03:00
%dir %{_datadir} /libvirt/
2009-09-16 19:02:38 +04:00
spec: mark directories in /var/run as ghosts
We have several directories that are created on the fly, and which
only contain state relevant to a running libvirtd process (all
located in /var/run). Since the directories are created as needed,
and make no sense without a running libvirtd, we want them deleted
if libvirt is uninstalled. And in F15 and newer, /var/run is on
tmpfs (forcing us to recreate on the fly); which means that someone
trying to verify a complete rpm will fail if the directory does not
currently exist because libvirtd has not been started since boot.
The solution, then, is to mark the directories as %ghost, so that
rpm knows that we own them and will clean it up if libvirt is
uninstalled, but will no longer create the directory for us at
install, nor complain at verify time if the directory does not exist.
See https://bugzilla.redhat.com/show_bug.cgi?id=656611.
* libvirt.spec.in (%files): Add %ghost to temporary directories
that we don't install, but want cleaned up on libvirt removal.
2011-12-01 02:34:42 +04:00
%ghost %dir %{_localstatedir} /run/libvirt/
2009-01-21 01:36:10 +03:00
2009-07-31 12:49:08 +04:00
%dir %attr (0711, root, root) %{_localstatedir} /lib/libvirt/images/
2011-11-01 15:21:21 +04:00
%dir %attr (0711, root, root) %{_localstatedir} /lib/libvirt/filesystems/
2009-08-06 18:20:36 +04:00
%dir %attr (0711, root, root) %{_localstatedir} /lib/libvirt/boot/
2011-05-20 19:18:11 +04:00
%dir %attr (0711, root, root) %{_localstatedir} /cache/libvirt/
2008-09-17 18:09:13 +04:00
2009-01-21 01:36:10 +03:00
2012-08-02 23:06:50 +04:00
%dir %attr (0755, root, root) %{_libdir} /libvirt/lock-driver
2012-12-14 14:57:27 +04:00
%attr (0755, root, root) %{_libdir} /libvirt/lock-driver/lockd.so
2012-08-02 23:06:50 +04:00
2008-09-17 18:09:13 +04:00
%{_datadir} /augeas/lenses/libvirtd.aug
%{_datadir} /augeas/lenses/tests/test_libvirtd.aug
2015-02-09 19:35:05 +03:00
%{_datadir} /augeas/lenses/virtlogd.aug
%{_datadir} /augeas/lenses/tests/test_virtlogd.aug
2013-08-08 19:06:31 +04:00
%{_datadir} /augeas/lenses/virtlockd.aug
%{_datadir} /augeas/lenses/tests/test_virtlockd.aug
2012-12-14 14:57:27 +04:00
%{_datadir} /augeas/lenses/libvirt_lockd.aug
2016-05-04 18:20:58 +03:00
%if %{with_qemu}
2012-12-14 14:57:27 +04:00
%{_datadir} /augeas/lenses/tests/test_libvirt_lockd.aug
2016-05-04 18:20:58 +03:00
%endif
2008-09-17 18:09:13 +04:00
2009-08-06 16:54:08 +04:00
%{_datadir} /polkit-1/actions/org.libvirt.unix.policy
2013-06-25 15:44:47 +04:00
%{_datadir} /polkit-1/actions/org.libvirt.api.policy
2015-04-29 00:38:00 +03:00
%{_datadir} /polkit-1/rules.d/50-libvirt.rules
2008-09-17 18:09:13 +04:00
2009-07-28 22:07:51 +04:00
%dir %attr (0700, root, root) %{_localstatedir} /log/libvirt/
2008-09-17 18:09:13 +04:00
2011-03-30 04:54:23 +04:00
%attr (0755, root, root) %{_libexecdir} /libvirt_iohelper
2013-07-30 15:04:55 +04:00
2007-06-27 03:04:49 +04:00
%attr (0755, root, root) %{_sbindir} /libvirtd
2015-02-09 19:35:05 +03:00
%attr (0755, root, root) %{_sbindir} /virtlogd
2012-08-02 23:06:50 +04:00
%attr (0755, root, root) %{_sbindir} /virtlockd
2008-09-17 18:09:13 +04:00
2010-07-12 23:33:35 +04:00
%{_mandir} /man8/libvirtd.8*
2015-02-09 19:35:05 +03:00
%{_mandir} /man8/virtlogd.8*
2013-08-08 18:10:38 +04:00
%{_mandir} /man8/virtlockd.8*
2005-11-02 18:37:34 +03:00
2015-08-04 15:05:52 +03:00
%doc examples/polkit/*.rules
2012-04-03 14:44:59 +04:00
%files daemon-config-network
2014-03-06 06:46:45 +04:00
%dir %{_datadir} /libvirt/networks/
%{_datadir} /libvirt/networks/default.xml
2012-04-03 13:52:12 +04:00
2012-04-03 14:44:59 +04:00
%files daemon-config-nwfilter
%{_sysconfdir} /libvirt/nwfilter/*.xml
2012-04-03 14:54:27 +04:00
2012-04-02 23:53:43 +04:00
%files daemon-driver-interface
%{_libdir} /%{name} /connection-driver/libvirt_driver_interface.so
%files daemon-driver-network
2013-12-13 19:03:26 +04:00
%dir %attr (0700, root, root) %{_sysconfdir} /libvirt/qemu/
%dir %attr (0700, root, root) %{_sysconfdir} /libvirt/qemu/networks/
%dir %attr (0700, root, root) %{_sysconfdir} /libvirt/qemu/networks/autostart
%ghost %dir %{_localstatedir} /run/libvirt/network/
%dir %attr (0700, root, root) %{_localstatedir} /lib/libvirt/network/
%dir %attr (0755, root, root) %{_localstatedir} /lib/libvirt/dnsmasq/
Add helper program to create custom leases
Introduce helper program to catch events from dnsmasq and maintain a custom
lease file per network. It supports dhcpv4 and dhcpv6. The file is saved as
"<interface-name>.status".
Each lease contains the following info:
<expiry-time (epoch time)> <mac> <iaid> <ip-address> <hostname> <clientid>
Example of custom leases file content:
[
{
"iaid": "1221229",
"ip-address": "2001:db8:ca2:2:1::95",
"mac-address": "52:54:00:12:a2:6d",
"hostname": "Fedora20",
"client-id": "00:04:1a:c1:d9:6b:5a:0a:e2:bc:f8:4b:1e:37:2e:38:22:55",
"expiry-time": 1393244216
},
{
"ip-address": "192.168.150.208",
"mac-address": "52:54:00:11:56:b3",
"hostname": "Wani-PC",
"client-id": "01:52:54:00:11:56:b3",
"expiry-time": 1393244248
}
]
src/Makefile.am:
* Add options to compile the helper program
src/network/bridge_driver.c:
* Introduce networkDnsmasqLeaseFileNameCustom()
* Invoke helper program along with dnsmasq
* Delete the .status file when corresponding n/w is destroyed.
src/network/leaseshelper.c
* Helper program to create the custom lease file
2014-06-02 14:19:26 +04:00
%attr (0755, root, root) %{_libexecdir} /libvirt_leaseshelper
2012-04-02 23:53:43 +04:00
%{_libdir} /%{name} /connection-driver/libvirt_driver_network.so
%files daemon-driver-nodedev
%{_libdir} /%{name} /connection-driver/libvirt_driver_nodedev.so
%files daemon-driver-nwfilter
2014-03-06 06:46:45 +04:00
%dir %attr (0700, root, root) %{_sysconfdir} /libvirt/nwfilter/
%ghost %dir %{_localstatedir} /run/libvirt/network/
2012-04-02 23:53:43 +04:00
%{_libdir} /%{name} /connection-driver/libvirt_driver_nwfilter.so
%files daemon-driver-secret
%{_libdir} /%{name} /connection-driver/libvirt_driver_secret.so
%files daemon-driver-storage
2013-12-06 03:15:55 +04:00
%attr (0755, root, root) %{_libexecdir} /libvirt_parthelper
2016-05-04 18:20:58 +03:00
%{_libdir} /%{name} /connection-driver/libvirt_driver_storage.so
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_qemu}
2012-04-02 23:53:43 +04:00
%files daemon-driver-qemu
2014-03-06 06:46:45 +04:00
%dir %attr (0700, root, root) %{_sysconfdir} /libvirt/qemu/
2013-12-06 03:15:55 +04:00
%dir %attr (0700, root, root) %{_localstatedir} /log/libvirt/qemu/
%config (noreplace) %{_sysconfdir} /libvirt/qemu.conf
%config (noreplace) %{_sysconfdir} /libvirt/qemu-lockd.conf
%config (noreplace) %{_sysconfdir} /logrotate.d/libvirtd.qemu
%ghost %dir %attr (0700, root, root) %{_localstatedir} /run/libvirt/qemu/
2015-09-08 19:34:36 +03:00
%dir %attr (0751, %{qemu_user} , %{qemu_group} ) %{_localstatedir} /lib/libvirt/qemu/
2013-12-06 03:15:55 +04:00
%dir %attr (0750, %{qemu_user} , %{qemu_group} ) %{_localstatedir} /cache/libvirt/qemu/
%{_datadir} /augeas/lenses/libvirtd_qemu.aug
%{_datadir} /augeas/lenses/tests/test_libvirtd_qemu.aug
2013-12-12 17:35:40 +04:00
%{_libdir} /%{name} /connection-driver/libvirt_driver_qemu.so
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_lxc}
2012-04-02 23:53:43 +04:00
%files daemon-driver-lxc
2013-12-06 03:15:55 +04:00
%dir %attr (0700, root, root) %{_localstatedir} /log/libvirt/lxc/
%config (noreplace) %{_sysconfdir} /libvirt/lxc.conf
%config (noreplace) %{_sysconfdir} /logrotate.d/libvirtd.lxc
%ghost %dir %{_localstatedir} /run/libvirt/lxc/
%dir %attr (0700, root, root) %{_localstatedir} /lib/libvirt/lxc/
%{_datadir} /augeas/lenses/libvirtd_lxc.aug
%{_datadir} /augeas/lenses/tests/test_libvirtd_lxc.aug
%attr (0755, root, root) %{_libexecdir} /libvirt_lxc
2012-04-02 23:53:43 +04:00
%{_libdir} /%{name} /connection-driver/libvirt_driver_lxc.so
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_uml}
2012-04-02 23:53:43 +04:00
%files daemon-driver-uml
2013-12-06 03:15:55 +04:00
%dir %attr (0700, root, root) %{_localstatedir} /log/libvirt/uml/
%config (noreplace) %{_sysconfdir} /logrotate.d/libvirtd.uml
%ghost %dir %{_localstatedir} /run/libvirt/uml/
%dir %attr (0700, root, root) %{_localstatedir} /lib/libvirt/uml/
2013-12-12 17:49:19 +04:00
%{_libdir} /%{name} /connection-driver/libvirt_driver_uml.so
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_xen}
2012-04-02 23:53:43 +04:00
%files daemon-driver-xen
2013-12-06 03:15:55 +04:00
%dir %attr (0700, root, root) %{_localstatedir} /lib/libvirt/xen/
2012-04-02 23:53:43 +04:00
%{_libdir} /%{name} /connection-driver/libvirt_driver_xen.so
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_libxl}
2012-04-02 23:53:43 +04:00
%files daemon-driver-libxl
2015-04-22 22:43:38 +03:00
%config (noreplace) %{_sysconfdir} /libvirt/libxl.conf
2015-05-01 00:16:49 +03:00
%config (noreplace) %{_sysconfdir} /logrotate.d/libvirtd.libxl
2015-04-30 18:18:59 +03:00
%config (noreplace) %{_sysconfdir} /libvirt/libxl-lockd.conf
2015-04-22 22:43:38 +03:00
%{_datadir} /augeas/lenses/libvirtd_libxl.aug
%{_datadir} /augeas/lenses/tests/test_libvirtd_libxl.aug
2013-12-06 03:15:55 +04:00
%dir %attr (0700, root, root) %{_localstatedir} /log/libvirt/libxl/
%ghost %dir %{_localstatedir} /run/libvirt/libxl/
%dir %attr (0700, root, root) %{_localstatedir} /lib/libvirt/libxl/
2012-04-02 23:53:43 +04:00
%{_libdir} /%{name} /connection-driver/libvirt_driver_libxl.so
2016-05-04 18:20:58 +03:00
%endif
2013-05-17 16:31:59 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_vbox}
2013-05-17 16:31:59 +04:00
%files daemon-driver-vbox
%{_libdir} /%{name} /connection-driver/libvirt_driver_vbox.so
2016-05-04 18:20:58 +03:00
%endif
2012-04-02 23:53:43 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_qemu_tcg}
2012-04-03 14:54:27 +04:00
%files daemon-qemu
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:54:27 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_qemu_kvm}
2012-04-03 14:54:27 +04:00
%files daemon-kvm
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:54:27 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_lxc}
2012-04-03 14:54:27 +04:00
%files daemon-lxc
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:54:27 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_uml}
2012-04-03 14:54:27 +04:00
%files daemon-uml
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 14:54:27 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_xen} || %{with_libxl}
2012-04-03 14:54:27 +04:00
%files daemon-xen
2016-05-04 18:20:58 +03:00
%endif
2013-05-17 16:31:59 +04:00
2016-05-04 18:20:58 +03:00
%if %{with_vbox}
2013-05-17 16:31:59 +04:00
%files daemon-vbox
2016-05-04 18:20:58 +03:00
%endif
2012-04-03 13:52:12 +04:00
2011-01-18 21:37:45 +03:00
%if %{with_sanlock}
%files lock-sanlock
2013-01-10 00:50:03 +04:00
%if %{with_qemu}
2011-06-14 12:20:49 +04:00
%config (noreplace) %{_sysconfdir} /libvirt/qemu-sanlock.conf
2013-01-10 00:50:03 +04:00
%endif
2015-05-01 21:39:30 +03:00
%if %{with_libxl}
%config (noreplace) %{_sysconfdir} /libvirt/libxl-sanlock.conf
%endif
2011-01-18 21:37:45 +03:00
%attr (0755, root, root) %{_libdir} /libvirt/lock-driver/sanlock.so
2011-06-14 12:20:49 +04:00
%{_datadir} /augeas/lenses/libvirt_sanlock.aug
%{_datadir} /augeas/lenses/tests/test_libvirt_sanlock.aug
2011-07-22 12:38:46 +04:00
%dir %attr (0700, root, root) %{_localstatedir} /lib/libvirt/sanlock
2011-06-14 12:29:00 +04:00
%{_sbindir} /virt-sanlock-cleanup
%{_mandir} /man8/virt-sanlock-cleanup.8*
2012-09-18 15:41:26 +04:00
%attr (0755, root, root) %{_libexecdir} /libvirt_sanlock_helper
2011-01-18 21:37:45 +03:00
%endif
2016-06-25 09:37:22 +03:00
%files client
2009-07-21 13:16:15 +04:00
%{_mandir} /man1/virsh.1*
%{_mandir} /man1/virt-xml-validate.1*
2009-09-16 17:42:57 +04:00
%{_mandir} /man1/virt-pki-validate.1*
2012-01-10 21:31:21 +04:00
%{_mandir} /man1/virt-host-validate.1*
2009-07-21 13:16:15 +04:00
%{_bindir} /virsh
%{_bindir} /virt-xml-validate
2009-09-16 17:42:57 +04:00
%{_bindir} /virt-pki-validate
2012-01-10 21:31:21 +04:00
%{_bindir} /virt-host-validate
2009-07-21 13:16:15 +04:00
2012-10-21 06:46:58 +04:00
%{_datadir} /systemtap/tapset/libvirt_probes*.stp
%{_datadir} /systemtap/tapset/libvirt_qemu_probes*.stp
2012-03-31 15:55:41 +04:00
%{_datadir} /systemtap/tapset/libvirt_functions.stp
2016-06-25 09:37:22 +03:00
%if %{with_systemd}
%{_unitdir} /libvirt-guests.service
%else
%{_sysconfdir} /rc.d/init.d/libvirt-guests
%endif
%config (noreplace) %{_sysconfdir} /sysconfig/libvirt-guests
%attr (0755, root, root) %{_libexecdir} /libvirt-guests.sh
%files libs -f %{name}.lang
%doc COPYING COPYING.LESSER
%config (noreplace) %{_sysconfdir} /libvirt/libvirt.conf
%config (noreplace) %{_sysconfdir} /libvirt/libvirt-admin.conf
%{_libdir} /libvirt.so.*
%{_libdir} /libvirt-qemu.so.*
%{_libdir} /libvirt-lxc.so.*
%{_libdir} /libvirt-admin.so.*
2009-07-21 13:16:15 +04:00
%dir %{_datadir} /libvirt/
%dir %{_datadir} /libvirt/schemas/
2016-06-25 09:37:22 +03:00
%dir %attr (0755, root, root) %{_localstatedir} /lib/libvirt/
2009-07-21 13:16:15 +04:00
2011-08-13 05:33:15 +04:00
%{_datadir} /libvirt/schemas/basictypes.rng
%{_datadir} /libvirt/schemas/capability.rng
2016-09-27 14:27:52 +03:00
%{_datadir} /libvirt/schemas/cputypes.rng
2009-07-21 13:16:15 +04:00
%{_datadir} /libvirt/schemas/domain.rng
2014-06-25 15:24:53 +04:00
%{_datadir} /libvirt/schemas/domaincaps.rng
2011-08-13 05:33:15 +04:00
%{_datadir} /libvirt/schemas/domaincommon.rng
2010-05-27 01:03:47 +04:00
%{_datadir} /libvirt/schemas/domainsnapshot.rng
2011-08-13 05:33:15 +04:00
%{_datadir} /libvirt/schemas/interface.rng
2009-07-21 13:16:15 +04:00
%{_datadir} /libvirt/schemas/network.rng
2011-08-13 05:33:15 +04:00
%{_datadir} /libvirt/schemas/networkcommon.rng
2009-07-21 13:16:15 +04:00
%{_datadir} /libvirt/schemas/nodedev.rng
2011-08-13 05:33:15 +04:00
%{_datadir} /libvirt/schemas/nwfilter.rng
2009-07-28 04:39:48 +04:00
%{_datadir} /libvirt/schemas/secret.rng
2014-04-12 05:33:45 +04:00
%{_datadir} /libvirt/schemas/storagecommon.rng
2011-08-13 05:33:15 +04:00
%{_datadir} /libvirt/schemas/storagepool.rng
%{_datadir} /libvirt/schemas/storagevol.rng
2009-07-21 13:16:15 +04:00
2009-12-23 16:28:42 +03:00
%{_datadir} /libvirt/cpu_map.xml
2016-12-06 15:45:18 +03:00
%{_datadir} /libvirt/test-screenshot.png
2009-07-21 13:16:15 +04:00
%config (noreplace) %{_sysconfdir} /sasl2/libvirt.conf
2016-06-27 11:15:21 +03:00
%files admin
%{_mandir} /man1/virt-admin.1*
%{_bindir} /virt-admin
2014-02-04 23:37:15 +04:00
%if %{with_wireshark}
%files wireshark
2015-10-27 16:02:19 +03:00
%{_libdir} /wireshark/plugins/libvirt.so
2014-02-04 23:37:15 +04:00
%endif
2016-02-16 11:41:30 +03:00
%files nss
%{_libdir} /libnss_libvirt.so.2
2016-12-08 17:25:17 +03:00
%{_libdir} /libnss_libvirt_guest.so.2
2016-02-16 11:41:30 +03:00
2013-10-17 17:18:18 +04:00
%if %{with_lxc}
%files login-shell
2013-11-22 15:13:03 +04:00
%attr (4750, root, virtlogin) %{_bindir} /virt-login-shell
2013-10-17 17:18:18 +04:00
%config (noreplace) %{_sysconfdir} /libvirt/virt-login-shell.conf
%{_mandir} /man1/virt-login-shell.1*
%endif
2005-11-02 18:37:34 +03:00
%files devel
2014-06-20 20:47:15 +04:00
%{_libdir} /libvirt.so
2016-06-24 20:50:10 +03:00
%{_libdir} /libvirt-admin.so
2014-06-20 20:47:15 +04:00
%{_libdir} /libvirt-qemu.so
%{_libdir} /libvirt-lxc.so
2007-03-28 12:48:52 +04:00
%dir %{_includedir} /libvirt
2014-06-20 20:47:15 +04:00
%{_includedir} /libvirt/virterror.h
%{_includedir} /libvirt/libvirt.h
2016-06-24 20:50:10 +03:00
%{_includedir} /libvirt/libvirt-admin.h
2015-12-01 13:07:59 +03:00
%{_includedir} /libvirt/libvirt-common.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-domain.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-domain-snapshot.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-event.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-host.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-interface.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-network.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-nodedev.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-nwfilter.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-secret.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-storage.h
2014-10-23 14:28:16 +04:00
%{_includedir} /libvirt/libvirt-stream.h
2014-06-20 20:47:15 +04:00
%{_includedir} /libvirt/libvirt-qemu.h
%{_includedir} /libvirt/libvirt-lxc.h
2006-02-09 20:45:11 +03:00
%{_libdir} /pkgconfig/libvirt.pc
2016-06-24 20:50:10 +03:00
%{_libdir} /pkgconfig/libvirt-admin.pc
2014-06-20 20:47:15 +04:00
%{_libdir} /pkgconfig/libvirt-qemu.pc
%{_libdir} /pkgconfig/libvirt-lxc.pc
2005-11-02 18:37:34 +03:00
2012-02-15 15:29:38 +04:00
%dir %{_datadir} /libvirt/api/
%{_datadir} /libvirt/api/libvirt-api.xml
2016-06-24 20:50:10 +03:00
%{_datadir} /libvirt/api/libvirt-admin-api.xml
2012-02-15 15:29:38 +04:00
%{_datadir} /libvirt/api/libvirt-qemu-api.xml
Introduce an LXC specific public API & library
This patch introduces support for LXC specific public APIs. In
common with what was done for QEMU, this creates a libvirt_lxc.so
library and libvirt/libvirt-lxc.h header file.
The actual APIs are
int virDomainLxcOpenNamespace(virDomainPtr domain,
int **fdlist,
unsigned int flags);
int virDomainLxcEnterNamespace(virDomainPtr domain,
unsigned int nfdlist,
int *fdlist,
unsigned int *noldfdlist,
int **oldfdlist,
unsigned int flags);
which provide a way to use the setns() system call to move the
calling process into the container's namespace. It is not
practical to write in a generically applicable manner. The
nearest that we could get to such an API would be an API which
allows to pass a command + argv to be executed inside a
container. Even if we had such a generic API, this LXC specific
API is still useful, because it allows the caller to maintain
the current process context, in particular any I/O streams they
have open.
NB the virDomainLxcEnterNamespace() API is special in that it
runs client side, so does not involve the internal driver API.
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2012-12-21 17:15:19 +04:00
%{_datadir} /libvirt/api/libvirt-lxc-api.xml
2016-04-13 17:37:42 +03:00
# Needed building python bindings
2006-02-09 20:45:11 +03:00
%doc docs/libvirt-api.xml
2016-04-13 17:37:42 +03:00
2005-12-07 16:45:20 +03:00
2005-11-02 18:37:34 +03:00
%changelog
