aboutsummaryrefslogtreecommitdiffstats
path: root/tools
Commit message (Collapse)AuthorAgeFilesLines
...
* xenstored: Fix socket-based connection teardown. Reading zero byteskfraser@localhost.localdomain2007-07-251-0/+6
| | | | | | *should* in fact cause the connection to be destroyed. Fix this with a little extra code in the readfd() handler. Signed-off-by: Keir Fraser <keir@xensource.com>
* xenstore: Small cleanups and fixes.kfraser@localhost.localdomain2007-07-243-13/+35
| | | | | | | | 1. readfd/writefd account for EINTR/EAGAIN errno returns. 2. Handle zero return from ->read() and ->write() handlers symmetrically. 3. Fix some indentation issues (use hard tabs). Signed-off-by: Keir Fraser <keir@xensource.com>
* Add domain name check and UUID check to 'xm new' command.kfraser@localhost.localdomain2007-07-241-0/+26
| | | | | | | | | | | | | | | | | | | | | | | | Add a domain name check and a UUID check to xm new command. The check logic is as follows: - If the UUID is not specified - If a VM with same name exists => Update the config for that existing VM - Else no vm with same name exists => Define a brand new VM with auto-generated UUID - Else UUID is specified - If a VM with same UUID exists - If name is different => Error - Else if name is same => Update the config for that existing VM - Else no VM with same UUID exists - If name is different => Define a branch new VM with that name - Else if name is same => Error Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>
* [HVM] Live-migration fixups after 15639:c585f993385cTim Deegan2007-07-243-23/+23
| | | | | | Use the same xenstore area for log-dirty commands as for save/continue, and avoid a race condition by acking the save command after the save. Signed-off-by: Tim Deegan <Tim.Deegan@xensource.com>
* MergeTim Deegan2007-07-243-49/+64
|\
| * xenstored: Fairly round-robin schedule work across all connections.kfraser@localhost.localdomain2007-07-242-44/+60
| | | | | | | | | | Avoids total starvation under some workloads. Signed-off-by: Keir Fraser <keir@xensource.com>
| * xenstored: Guarantee to fire @releaseDomain watch when a domain is destructed.kfraser@localhost.localdomain2007-07-241-5/+4
| | | | | | | | | | | | Previously this would be missed on some bail paths within xenstored which would talloc_free() the connection. Signed-off-by: Keir Fraser <keir@xensource.com>
* | [HVM] Control qemu's state-save via xenstore, instead of SIGUSR1Tim Deegan2007-07-248-52/+134
|/ | | | | | | This lets us verify that qemu has indeed stopped processing before we start saving guest memory. Also allow qemu to continue processing after the save has happened, instead of exiting immediately. Signed-off-by: Tim Deegan <Tim.Deegan@xensource.com>
* [PVFB] Fix shift key for graphical vnc displaykfraser@localhost.localdomain2007-07-231-3/+103
| | | | | | | | | | | | | There is a problem in the input of the key in the VNC connection on the PV domain. When client's keyboard is not the same as the kind of the keyboard of PVFB and GuestOS, it is not possible to input it correctly. This patch handled the state of shift from the set keymap. When client's keyboard is not same as the kind of PVFB/GuestOS, it is possible to input it correctly. It was confirmed to input it correctly mutually with this patch between en-us and ja. Signed-off-by: Takanori Kasai <kasai.takanori@jp.fujitsu.com>
* [IOEMU] Fix shift key for graphical vnc displaykfraser@localhost.localdomain2007-07-232-8/+100
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is a problem in the input of the key in the VNC connection on the HVM domain. When client's keyboard is not the same as the kind of the keyboard of qemu-dm and GuestOS, it is not possible to input it correctly. VNC client qemu-dm & GuestOS --------------+----------------------- ja en-us ==> NG en-us en-us ==> OK Originally, the same keysym-code between client and qemu-dm is transmitted. However, even if it is the same character, the state of shift is different according to the kind of keyboard. ex. "=" charactor --------------------- en-us : "=" ja : shift + "-" Therefore, it is necessary to handle the state of the shift by setting qemu-dm and GuestOS. There is information on whether shift is necessary for each key for the keymap of qemu-dm. ex. VNC client : ja qemu-dm & GuestOS : en-us input key : "=" event client to qemu-dm : shift(push) >> "="(push) >> "="(release) >> shift(release) event qemu-dm to guest : shift(push) >> shift(release) >> "="(push) >> "="(release) >> shift(push) >> shift(release) This patch handled the state of shift from the set keymap. When client's keyboard is not same as the kind of qemu-dm/GuestOS, it is possible to input it correctly. It was confirmed to input it correctly mutually with this patch between en-us and ja. Signed-off-by: Takanori Kasai <kasai.takanori@jp.fujitsu.com>
* Improve xm vcpu-list command for inactive managed domains.kfraser@localhost.localdomain2007-07-192-17/+35
| | | | Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>
* xend: Give back memory to dom0 after a failed auto-balloon attempt.kfraser@localhost.localdomain2007-07-191-2/+6
| | | | Signed-off-by: Frank van der Linden <frank.vanderlinden@sun.com>
* [xend / libxen] Add support for labeling of virtual network interfaces.kfraser@localhost.localdomain2007-07-1915-22/+312
| | | | | | | | | | | | | | | | | | | | | | | | | | | This patch adds labeling of virtual network interfaces to xend and makes this manageable through the Xen-API. It's a feature that is only usable if ACM is enabled in Xen and xend is used through the xen-api. A labeled virtual network interface will be plugged into a bridge where other domains with the same-labeled network interface are connected to, so that only same-colored domains can communicate with each other. The bridge should be connected to the outside world using VLAN for isolation, extending the isolation beyond the local machine. If a virtual machine is labeled with a VM label that only has one Simple Type Enforcement Type then it is not necessary to label the virtual network interface, but the color of the network interface is determined from the VM's label. If, however, a virtual machine is labeled with a VM label that has multiple Simple Type Enforcement Types, then the explicit labeling of each virtual network interface is required. To specify the label of a network interface, the vif line in the VM's configuration file has been extended with parameters similar use for specifying the label of the VM: vif = ['policy=<policy name>,label=<resource label>'] This labels the VIF of the virtual machine for usage under the policy 'policy name' and labels it with the label 'resource label'. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
* [xend][xen-api] Save new memory values in domain config when callingkfraser@localhost.localdomain2007-07-181-4/+4
| | | | | VM.set_memory_[dynamic|static]_[min|max] via Xen API. Signed-off-by: Jim Fehlig <jfehlig@novell.com>
* [Xend] More security-related fixeskfraser@localhost.localdomain2007-07-186-14/+29
| | | | | | | This patch provides some more fixes related to the recent security-related extensions to xend. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
* [Xm-Test] Additional tests for the xm-test suitekfraser@localhost.localdomain2007-07-188-19/+1247
| | | | | | | This adds a couple of test cases exercising the new policy management functionality to the security tests. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
* Improve xm uptime command for inactive managed domainskfraser@localhost.localdomain2007-07-171-2/+4
| | | | Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>
* [VTPM] Make vTPM hotplug scripts use the UUID of the vTPM instancekfraser@localhost.localdomain2007-07-1712-114/+77
| | | | | | | | | | Make the vTPM hotplug script use the UUID of the vTPM instance for associating it with its instance number rather than the name of the domain. Also change the cleanup in the xm test to use the atexit mechanism rather than explicitly calling a function to clean up. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
* [HVM] Qemu rtl8139: correct rx CRC calculationTim Deegan2007-07-161-5/+4
| | | | Signed-off-by: Tim Deegan <Tim.Deegan@xensource.com>
* [HVM] Qemu rtl8139: correct ring-buffer wrapping.Tim Deegan2007-07-161-1/+1
| | | | | The rx DMA should never overrun when it hits the end of a 64k buffer Signed-off-by: Tim Deegan <Tim.Deegan@xensource.com>
* [Xend] Fix problem when destroying VMs using the Xen-APIkfraser@localhost.localdomain2007-07-131-0/+1
| | | | | | | | | | When domains are destroyed/suspend-resume/migration using the Xen-API things break due to the domid not having been reset. This patch fixes this. This is the best place I found for fixing this problem. I could not push this line into _stateSet() for the case of DOM_STATE_HALTED and left a comment regarding this. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
* [ACM-security] Some fixes to tools.kfraser@localhost.localdomain2007-07-125-131/+56
| | | | | | | | | | | | - Allow multiple ChineseWallTypes in a VM labels - check for surfacing exceptions in the python code - check for array sizes in the XML DOM in python - properly display the labels when doing 'xm list --label' in xm's non-Xen-API mode - rely on the security checking hooks in xend to check access to the block interface rather than doing this in xm. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
* [LIBXC] Fix xc_map_grant_refs() function.kfraser@localhost.localdomain2007-07-121-1/+1
| | | | | | | | This patch fixes the xc_map_grant_refs() function, which would fail because, instead of passing the malloc()-ed ioctl argument pointer to the ioctl, the address of this pointer was being passed instead. Signed-off-by: Derek Murray <Derek.Murray@cl.cam.ac.uk>
* Merge with ia64 xen tree.kfraser@localhost.localdomain2007-07-1237-189/+1978
|\
| * hvm: Re-introduce LPT1 device in ACPI tables.kfraser@localhost.localdomain2007-07-116-47/+64
| | | | | | | | | | | | | | | | | | Once the presence of LPT1 is baked into a Windows guest, it gets upset if it is subsequently removed. Hence we add the 'LTP1' device object back into the ACPI DSDT, and remove IRQ 7 from the list of IRQs usable by the PCI-ISA links. Signed-off-by: Keir Fraser <keir@xensource.com>
| * Add new domctl hypercall to expose current heap values. Thiskfraser@localhost.localdomain2007-07-112-0/+35
| | | | | | | | | | | | | | | | functionality is needed for probing how much memory is available in a given node prior to VM creation. Signed-off-by: Ryan Harper <ryanh@us.ibm.com> Signed-off-by: Keir Fraser <keir@xensource.com>
| * [VTPM] Fixed typo in VTPM manager.kfraser@localhost.localdomain2007-07-111-1/+1
| | | | | | | | | | | | | | | | Replaces an instance of pthread_mutex_lock() that should be pthreaad_mutex_unlock(). With thanks to our OpenTC partners at the Technical University of Sofia, whose static analysis found this bug. Signed-off-by: Derek G. Murray <Derek.Murray@cl.cam.ac.uk>
| * [xend] Fix xm trigger command for inactive managed domainskfraser@localhost.localdomain2007-07-111-0/+4
| | | | | | | | Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>
| * xend: Fix 'xm dumpcore' for inactive managed domains.kfraser@localhost.localdomain2007-07-111-0/+4
| | | | | | | | Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>
| * [xenstore] adds a -w (wide) flag to xenstore-ls to support seeing fullkfraser@localhost.localdomain2007-07-111-7/+30
| | | | | | | | | | | | | | | | | | contents of xenstore entries. There is a bit of code cleanup as well (snprintf vs. sprintf), one formatting fix, and comments). There is no change to the behavior of xenstore-ls without -w. Signed-off-by: John Zulauf <john.zulauf@intel.com>
| * [XM] Tools support for extensions of the Xen-API for managing security policieskfraser@localhost.localdomain2007-07-1115-128/+746
| | | | | | | | | | | | | | | | | | This patch adds a couple of new commands for using the Xen-API extensions for security policies. Older tools are converted to support going through the Xen-API for their operations rather than doing the operations directly in their own code. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
| * Make QEMU consistently report write caching support for emulated IDEkfraser@localhost.localdomain2007-07-111-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | drives to fix a hang during SLES 9 HVM guest installation. Without this, the SLES 9 installer kernels (32 and 64 bit) were getting inconsistent information from QEMU as to whether the (emulated) IDE drives support write caching (which they do). So part of the kernel thought write caching was enabled (and enabled the usage of barrier writes) and part of it didn't, which triggered a bug in which the same barrier write is submitted over and over again ... Fixed by setting another bit in the WIN_IDENTIFY (IDE drive "identify" command) response to indicate we really, truly support write caching. Signed-off-by: David Lively <dlively@virtualiron.com> Signed-off-by: Ben Guthro <bguthro@virtualiron.com>
| * [libxen] C-bindings for the extensions of the Xen-API for managing security ↵kfraser@localhost.localdomain2007-07-109-1/+1090
| | | | | | | | | | | | policies Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
| * hvm: Fix memcpy_words() asm in ioemu.kfraser@localhost.localdomain2007-07-101-4/+2
| | | | | | | | Signed-off-by: Keir Fraser <keir@xensource.com>
* | merge with xen-unstable.hgAlex Williamson2007-07-1073-4758/+3754
|\|
| * xend: Fix xm pause/unpause for inactive managed domains.kfraser@localhost.localdomain2007-07-101-0/+8
| | | | | | | | Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>
| * xend: Count CPUs rather than relying on a statickfraser@localhost.localdomain2007-07-101-4/+7
| | | | | | | | | | nodes/sockets/cores/threads relationship. Signed-off-by: Alex Williamson <alex.williamson@hp.com>
| * xm: Improve help message for vif creation.kfraser@localhost.localdomain2007-07-101-1/+5
| | | | | | | | Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>
| * xend: Missing last line from Xen_API security patch.kfraser@localhost.localdomain2007-07-091-0/+1
| | | | | | | | Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
| * Add accel option to vif xend config.kfraser@localhost.localdomain2007-07-092-3/+8
| | | | | | | | Signed-off-by: Kieran Mansley <kmansley@solarflare.com>
| * [Xen-API] Extension of the Xen-API for managing Xen Security Policieskfraser@localhost.localdomain2007-07-0915-155/+3408
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch implements extensions for managing security policies in xend. The XSPolicy and ACMPolicy classes provide the interface for the Xen-API and implement functionality for setting, updating and activating of a Xen security policy as well as labeling of virtual machines and resources such as block devices. Labeling of network devices will follow. The acmpolicy class implements a compiler for translating an XML policy into their binary format and provides functionality for comparing a current policy against a new one when changing/updating a policy. The xspolicyadmin class administers the policy of the system. Some of the xend-internal code deals with transforming the labeling information from the S-Expression format into the new Xen-API format. This is similar to much of the other code that is already there. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
| * Fix xm save command for a inactive managed domain.kfraser@localhost.localdomain2007-07-092-8/+6
| | | | | | | | Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>
| * Better error message for 'xm sysrq' on inactive domain.kfraser@localhost.localdomain2007-07-091-0/+3
| | | | | | | | Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>
| * Specify -fno-strict-aliasing in root build config file.Keir Fraser2007-07-074-4/+2
| | | | | | | | | | | | | | | | Fixes correctness issues with xenstored and gcc-4.2. Original patch by Charles Coffing <ccoffing@novell.com> Signed-off-by: Keir Fraser <keir@xensource.com>
| * hvm: Add global default keymap settingkfraser@localhost.localdomain2007-07-064-0/+18
| | | | | | | | | | | | | | Add global default keymap setting to be used when a VM does not have a keymap configuration set. Signed-off-by: Pat Campbell <plc@novell.com>
| * Extended the physinfo sysctl to export NUMA cpu_to_node topology info.kfraser@localhost.localdomain2007-07-068-26/+106
| | | | | | | | | | | | Print this in 'xm info'. Signed-off-by: Ryan Harper <ryanh@us.ibm.com> Signed-off-by: Keir Fraser <keir@xensource.com>
| * Revert 15471:7ac7f147241405af83e7a9d748cf7b01279734fckfraser@localhost.localdomain2007-07-061-4/+2
| | | | | | | | | | | | | | | | Block-device specifiers in ioemu can contain colons, so skipping always past the first colon is not a good idea. Better solutions are in the pipeline to solve the blktap issues. Signed-off-by: Keir Fraser <keir@xensource.com>
| * [ACM] Support for initial unicode handling of strings in policies.kfraser@localhost.localdomain2007-07-061-6/+10
| | | | | | | | Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
| * Export debugger attached state to xc API.kfraser@localhost.localdomain2007-07-062-1/+2
| | | | | | | | Signed-off-by: Tristan Gingold <tgingold@free.fr>
| * xend: Fix xm block/network-attach command for inactive managed domainkfraser@localhost.localdomain2007-07-061-3/+12
| | | | | | | | Signed-off-by: Masaki Kanno <kanno.masaki@jp.fujitsu.com>