[Pkg-libvirt-commits] [Git][libvirt-team/libvirt][debian/latest] 10 commits: changelog: Create entry for 10.4.0-1

Andrea Bolognani (@abologna) gitlab at salsa.debian.org
Tue Jun 4 20:42:30 BST 2024



Andrea Bolognani pushed to branch debian/latest at Libvirt Packaging Team / libvirt


Commits:
22ec2eb9 by Andrea Bolognani at 2024-06-03T22:47:19+02:00
changelog: Create entry for 10.4.0-1

Gbp-Dch: Ignore

- - - - -
861f484b by Andrea Bolognani at 2024-06-03T22:48:33+02:00
symbols: Bump symbol versions

No new public symbols.

Gbp-Dch: Ignore

- - - - -
d8acf233 by Andrea Bolognani at 2024-06-03T22:49:49+02:00
patches: Drop backports

- - - - -
a81a6dc4 by Andrea Bolognani at 2024-06-03T22:50:30+02:00
patches: Refresh patches

Gbp-Dch: Ignore

- - - - -
6d0beb40 by Andrea Bolognani at 2024-06-04T00:07:36+02:00
control: Drop Build-Depends on iptables

Checking for its availability at build time was always pointless
and upstream has finally stopped doing that.

Gbp-Dch: Ignore

- - - - -
f261128a by Andrea Bolognani at 2024-06-04T00:08:38+02:00
rules: Disable ssh proxy for now

It's a new feature that, at least upstream, gets its own binary
package. We probably want to do the same in Debian. Either way,
let's just disable it for now so that we can upload the new
upstream release without further delays; we can decide how
exactly we should present the new feature to users separately.

Gbp-Dch: Ignore

- - - - -
21fb956a by Andrea Bolognani at 2024-06-04T00:19:43+02:00
rules: Set sshconfdir explicitly

The default value would be correct, but it's better to be
explicit.

Gbp-Dch: Ignore

- - - - -
bd68bdfe by Andrea Bolognani at 2024-06-04T00:19:43+02:00
rules: Configure firewall backend explicitly

Upstream has just introduced an nftables-based backend and made
it the default. We almost certainly want it to be the default
for trixie, but it's probably a good idea to be conservative in
the short term and give it a little time to stabilize upstream
before making the switch ourselves.

Gbp-Dch: Ignore

- - - - -
38cdad69 by Andrea Bolognani at 2024-06-04T00:19:43+02:00
install: Include new configuration files

Gbp-Dch: Ignore

- - - - -
0fc5ee29 by Andrea Bolognani at 2024-06-04T00:22:35+02:00
Document changes and release 10.4.0-1

- - - - -


13 changed files:

- debian/changelog
- debian/control
- debian/control.in
- debian/libvirt-daemon-system.install.in
- debian/libvirt-daemon.install.in
- debian/libvirt0.symbols
- − debian/patches/backport/rpc-ensure-temporary-GSource-is-removed-from-client-event.patch
- − debian/patches/backport/tests-fix-hang-in-virshtest-read-big-pipe-case.patch
- − debian/patches/backport/vsh-Don-t-init-history-in-cmdComplete.patch
- debian/patches/debian/Use-sensible-editor-by-default.patch
- debian/patches/forward/Reduce-udevadm-settle-timeout-to-10-seconds.patch
- debian/patches/series
- debian/rules


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,10 @@
+libvirt (10.4.0-1) unstable; urgency=medium
+
+  * [7ed6608] New upstream version 10.4.0
+  * [d8acf23] patches: Drop backports
+
+ -- Andrea Bolognani <eof at kiyuko.org>  Tue, 04 Jun 2024 00:19:48 +0200
+
 libvirt (10.3.0-3) unstable; urgency=medium
 
   * [aa7ed20] patches: Add backport/tests-fix-hang-in-virshtest[...]


=====================================
debian/control
=====================================
@@ -10,7 +10,6 @@ Build-Depends:
  bash-completion,
  debhelper-compat (= 13),
  dh-apparmor [linux-any],
- iptables [linux-any],
  kmod [linux-any],
  libacl1-dev [linux-any],
  libapparmor-dev (>= 3.0.0) [linux-any],


=====================================
debian/control.in
=====================================
@@ -10,7 +10,6 @@ Build-Depends:
  bash-completion,
  debhelper-compat (= 13),
  dh-apparmor [linux-any],
- iptables [linux-any],
  kmod [linux-any],
  libacl1-dev [linux-any],
  libapparmor-dev (>= 3.0.0) [linux-any],


=====================================
debian/libvirt-daemon-system.install.in
=====================================
@@ -9,6 +9,7 @@ etc/libvirt/libvirtd.conf
 [${ARCHES_XEN}] etc/libvirt/libxl-sanlock.conf
 [${ARCHES_XEN}] etc/libvirt/libxl.conf
 [${ARCHES_LXC}] etc/libvirt/lxc.conf
+etc/libvirt/network.conf
 [${ARCHES_QEMU}] etc/libvirt/qemu-lockd.conf
 [${ARCHES_QEMU}] etc/libvirt/qemu-sanlock.conf
 [${ARCHES_QEMU}] etc/libvirt/qemu.conf


=====================================
debian/libvirt-daemon.install.in
=====================================
@@ -24,9 +24,11 @@ usr/sbin/virtlogd
 usr/share/augeas/lenses/libvirt_lockd.aug
 usr/share/augeas/lenses/libvirt_sanlock.aug
 usr/share/augeas/lenses/libvirtd.aug
+usr/share/augeas/lenses/libvirtd_network.aug
 [${ARCHES_QEMU}] usr/share/augeas/lenses/tests/test_libvirt_lockd.aug
 [${ARCHES_QEMU}] usr/share/augeas/lenses/tests/test_libvirt_sanlock.aug
 usr/share/augeas/lenses/tests/test_libvirtd.aug
+usr/share/augeas/lenses/tests/test_libvirtd_network.aug
 usr/share/augeas/lenses/tests/test_virtlockd.aug
 usr/share/augeas/lenses/tests/test_virtlogd.aug
 usr/share/augeas/lenses/virtlockd.aug


=====================================
debian/libvirt0.symbols
=====================================
@@ -101,7 +101,7 @@ libvirt.so.0 libvirt0 #MINVER#
  *@LIBVIRT_9.7.0 9.7.0
  *@LIBVIRT_10.1.0 10.1.0
  *@LIBVIRT_10.2.0 10.2.0
- *@LIBVIRT_PRIVATE_10.3.0 10.3.0
+ *@LIBVIRT_PRIVATE_10.4.0 10.4.0
 
 libvirt-qemu.so.0 libvirt0 #MINVER#
  *@LIBVIRT_QEMU_0.8.3 0.8.3
@@ -119,4 +119,4 @@ libvirt-admin.so.0 libvirt0 #MINVER#
  *@LIBVIRT_ADMIN_2.0.0 2.0.0~rc1
  *@LIBVIRT_ADMIN_3.0.0 3.0.0
  *@LIBVIRT_ADMIN_8.6.0 8.9.0
- *@LIBVIRT_ADMIN_PRIVATE_10.3.0 10.3.0
+ *@LIBVIRT_ADMIN_PRIVATE_10.4.0 10.4.0


=====================================
debian/patches/backport/rpc-ensure-temporary-GSource-is-removed-from-client-event.patch deleted
=====================================
@@ -1,98 +0,0 @@
-From: =?utf-8?b?IkRhbmllbCBQLiBCZXJyYW5nw6ki?= <berrange at redhat.com>
-Date: Tue, 30 Apr 2024 11:51:15 +0100
-Subject: rpc: ensure temporary GSource is removed from client event loop
-MIME-Version: 1.0
-Content-Type: text/plain; charset="utf-8"
-Content-Transfer-Encoding: 8bit
-
-Users are seeing periodic segfaults from libvirt client apps,
-especially thread heavy ones like virt-manager. A typical
-stack trace would end up in the virNetClientIOEventFD method,
-with illegal access to stale stack data. eg
-
-==238721==ERROR: AddressSanitizer: stack-use-after-return on address 0x75cd18709788 at pc 0x75cd3111f907 bp 0x75cd181ff550 sp 0x75cd181ff548
-WRITE of size 4 at 0x75cd18709788 thread T11
-    #0 0x75cd3111f906 in virNetClientIOEventFD /usr/src/debug/libvirt/libvirt-10.2.0/build/../src/rpc/virnetclient.c:1634:15
-    #1 0x75cd3210d198  (/usr/lib/libglib-2.0.so.0+0x5a198) (BuildId: 0a2311dfbbc6c215dc36f4b6bdd2b4b6fbae55a2)
-    #2 0x75cd3216c3be  (/usr/lib/libglib-2.0.so.0+0xb93be) (BuildId: 0a2311dfbbc6c215dc36f4b6bdd2b4b6fbae55a2)
-    #3 0x75cd3210ddc6 in g_main_loop_run (/usr/lib/libglib-2.0.so.0+0x5adc6) (BuildId: 0a2311dfbbc6c215dc36f4b6bdd2b4b6fbae55a2)
-    #4 0x75cd3111a47c in virNetClientIOEventLoop /usr/src/debug/libvirt/libvirt-10.2.0/build/../src/rpc/virnetclient.c:1722:9
-    #5 0x75cd3111a47c in virNetClientIO /usr/src/debug/libvirt/libvirt-10.2.0/build/../src/rpc/virnetclient.c:2002:10
-    #6 0x75cd3111a47c in virNetClientSendInternal /usr/src/debug/libvirt/libvirt-10.2.0/build/../src/rpc/virnetclient.c:2170:11
-    #7 0x75cd311198a8 in virNetClientSendWithReply /usr/src/debug/libvirt/libvirt-10.2.0/build/../src/rpc/virnetclient.c:2198:11
-    #8 0x75cd31111653 in virNetClientProgramCall /usr/src/debug/libvirt/libvirt-10.2.0/build/../src/rpc/virnetclientprogram.c:318:9
-    #9 0x75cd31241c8f in callFull /usr/src/debug/libvirt/libvirt-10.2.0/build/../src/remote/remote_driver.c:6054:10
-    #10 0x75cd31241c8f in call /usr/src/debug/libvirt/libvirt-10.2.0/build/../src/remote/remote_driver.c:6076:12
-    #11 0x75cd31241c8f in remoteNetworkGetXMLDesc /usr/src/debug/libvirt/libvirt-10.2.0/build/src/remote/remote_client_bodies.h:5959:9
-    #12 0x75cd31410ff7 in virNetworkGetXMLDesc /usr/src/debug/libvirt/libvirt-10.2.0/build/../src/libvirt-network.c:952:15
-
-The root cause is a bad assumption in the virNetClientIOEventLoop
-method. This method is run by whichever thread currently owns the
-buck, and is responsible for handling I/O. Inside a for(;;) loop,
-this method creates a temporary GSource, adds it to the event loop
-and runs g_main_loop_run(). When I/O is ready, the GSource callback
-(virNetClientIOEventFD) will fire and call g_main_loop_quit(), and
-return G_SOURCE_REMOVE which results in the temporary GSource being
-destroyed. A g_autoptr() will then remove the last reference.
-
-What was overlooked, is that a second thread can come along and
-while it can't enter virNetClientIOEventLoop, it will register an
-idle source that uses virNetClientIOWakeup to interrupt the
-original thread's 'g_main_loop_run' call. When this happens the
-virNetClientIOEventFD callback never runs, and so the temporary
-GSource is not destroyed. The g_autoptr() will remove a reference,
-but by virtue of still being attached to the event context, there
-is an extra reference held causing GSource to be leaked. The
-next time 'g_main_loop_run' is called, the original GSource will
-trigger its callback, and access data that was allocated on the
-stack by the previous thread, and likely SEGV.
-
-To solve this, the thread calling 'g_main_loop_run' must call
-g_source_destroy, immediately upon return, to guarantee that
-the temporary GSource is removed.
-
-CVE-2024-4418
-Reviewed-by: Ján Tomko <jtomko at redhat.com>
-Reported-by: Martin Shirokov <shirokovmartin at gmail.com>
-Tested-by: Martin Shirokov <shirokovmartin at gmail.com>
-Signed-off-by: Daniel P. Berrangé <berrange at redhat.com>
-(cherry picked from commit 8074d64dc2eca846d6a61efe1a9b7428a0ce1dd1)
-
-Forwarded: not-needed
-Origin: https://gitlab.com/libvirt/libvirt/-/commit/8074d64dc2eca846d6a61efe1a9b7428a0ce1dd1
----
- src/rpc/virnetclient.c | 14 +++++++++++++-
- 1 file changed, 13 insertions(+), 1 deletion(-)
-
-diff --git a/src/rpc/virnetclient.c b/src/rpc/virnetclient.c
-index 68098b1..147b0d6 100644
---- a/src/rpc/virnetclient.c
-+++ b/src/rpc/virnetclient.c
-@@ -1657,7 +1657,7 @@ static int virNetClientIOEventLoop(virNetClient *client,
- #endif /* !WIN32 */
-         int timeout = -1;
-         virNetMessage *msg = NULL;
--        g_autoptr(GSource) G_GNUC_UNUSED source = NULL;
-+        g_autoptr(GSource) source = NULL;
-         GIOCondition ev = 0;
-         struct virNetClientIOEventData data = {
-             .client = client,
-@@ -1721,6 +1721,18 @@ static int virNetClientIOEventLoop(virNetClient *client,
- 
-         g_main_loop_run(client->eventLoop);
- 
-+        /*
-+         * If virNetClientIOEventFD ran, this GSource will already be
-+         * destroyed due to G_SOURCE_REMOVE. It is harmless to re-destroy
-+         * it, since we still own a reference.
-+         *
-+         * If virNetClientIOWakeup ran, it will have interrupted the
-+         * g_main_loop_run call, before virNetClientIOEventFD could
-+         * run, and thus the GSource is still registered, and we need
-+         * to destroy it since it is referencing stack memory for 'data'
-+         */
-+        g_source_destroy(source);
-+
- #ifndef WIN32
-         ignore_value(pthread_sigmask(SIG_SETMASK, &oldmask, NULL));
- #endif /* !WIN32 */


=====================================
debian/patches/backport/tests-fix-hang-in-virshtest-read-big-pipe-case.patch deleted
=====================================
@@ -1,82 +0,0 @@
-From: =?utf-8?b?IkRhbmllbCBQLiBCZXJyYW5nw6ki?= <berrange at redhat.com>
-Date: Wed, 8 May 2024 11:50:09 +0100
-Subject: tests: fix hang in virshtest 'read-big-pipe' case
-MIME-Version: 1.0
-Content-Type: text/plain; charset="utf-8"
-Content-Transfer-Encoding: 8bit
-
-The virshtest program testPipeFeeder method is doing this:
-
-  mkfifo("test.fifo", 0600) ;
-
-  int fd = open("test.fifo", O_RDWR);
-
-  char buf[...];
-  memset(buf, 'a', sizeof(buf));
-  write(fd, buf, sizeof(buf)) == sizeof(buf));
-  close(fd);
-
-while the the 'virsh' child process then ends up doing:
-
-  fd = open("test.fifo", O_RDONLY);
-  read(fd, buf, sizeof(buf)) == sizeof(buf));
-  close(fd);
-
-The 'virsh' code hangs on open() on at least ppc64 and some other
-arches. It can be provoked to hang even on x86 by reducing the size of
-the buffer. It can be prevented from hanging on ppc64 by increasing the
-size of the buffer.
-
-What is happening is a result of differing page sizes, altering the
-overall pipe capacity size, since pipes on linux default to 16 pages
-in size and thus have architecture specific capacity when measured
-in bytes.
-
- * On x86, testPipeFeeder opens R+W, tries to write 140kb and
-   write() blocks because the pipe is full. This gives time for
-   virsh to start up, and it can open the pipe for O_RDONLY
-   since testPipeFeeder still has it open for write. Everything
-   works as intended.
-
- * On ppc64,  testPipeFeeder opens R+W, tries to write 140kb
-   and write() succeeds because the larger 64kb page size
-   resulted in greater buffer capacity for the pipe. It thus
-   quickly closes the pipe, removing the writer, and triggering
-   discard of all the unread data. Now virsh starts up, tries
-   to open the pipe for O_RDONLY and blocks waiting for a new
-   writer to open it, which will never happen. Meson kills
-   the test after 30 seconds.
-
-   NB, every now & then, it will not block because virsh starts
-   up quickly enough that testPipeFeeder has not yet closed the
-   write end of the pipe, giving the illusion of correctness.
-
-The key flaw here is that it should not have been using O_RDWR
-in testPipeFeeder. Synchronization is required such that both
-virsh and testPipeFeeder have their respective ends of the pipe
-open before any data is sent. This is trivially arranged by
-using O_WRONLY in testPipeFeeder.
-
-Reviewed-by: Andrea Bolognani <abologna at redhat.com>
-Signed-off-by: Daniel P. Berrangé <berrange at redhat.com>
-(cherry picked from commit e1c32120ce6eddb72272b4717dd8384075b32c2f)
-
-Forwarded: not-needed
-Origin: https://gitlab.com/libvirt/libvirt/-/commit/e1c32120ce6eddb72272b4717dd8384075b32c2f
----
- tests/virshtest.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/tests/virshtest.c b/tests/virshtest.c
-index a1ae481..7a77976 100644
---- a/tests/virshtest.c
-+++ b/tests/virshtest.c
-@@ -145,7 +145,7 @@ testPipeFeeder(void *opaque)
-     g_autofree char *doc = g_new0(char, emptyspace + xmlsize + 1);
-     VIR_AUTOCLOSE fd = -1;
- 
--    if ((fd = open(pipepath, O_RDWR)) < 0) {
-+    if ((fd = open(pipepath, O_WRONLY)) < 0) {
-         fprintf(stderr, "\nfailed to open pipe '%s': %s\n", pipepath, g_strerror(errno));
-         return;
-     }


=====================================
debian/patches/backport/vsh-Don-t-init-history-in-cmdComplete.patch deleted
=====================================
@@ -1,83 +0,0 @@
-From: Michal Privoznik <mprivozn at redhat.com>
-Date: Sat, 4 May 2024 05:12:54 +0200
-Subject: vsh: Don't init history in cmdComplete()
-MIME-Version: 1.0
-Content-Type: text/plain; charset="utf-8"
-Content-Transfer-Encoding: 8bit
-
-Recent rework of virshtest uncovered a subtle bug that was
-dormant in now vsh but before that even in monolithic virsh.
-
-In vsh.c there's this vshReadlineInit() function that's supposed
-to initialize readline library, i.e. set those global rl_*
-pointers.  But it also initializes history library. Then, when
-virsh/virt-admin quits, vshReadlineDeinit() is called which
-writes history into a file (ensuring the parent directory
-exists). So far no problem.
-
-Problem arises when cmdComplete() is called (from a bash
-completer, for instance). It does not guard call to
-vshReadlineInit() with check for interactive shell (and it should
-not), but it sets ctl->historyfile which signals to
-vshReadlineDeinit() the history should be written.
-
-Now, no real history is written, because nothing was entered on
-the stdin, but the parent directory is created nevertheless. With
-recent movement in virshtest.c this means some test cases might
-create virsh history file which breaks our promise of not
-touching user's data in test suite.
-
-Resolves: https://bugs.gentoo.org/931109
-Signed-off-by: Michal Privoznik <mprivozn at redhat.com>
-Reviewed-by: Ján Tomko <jtomko at redhat.com>
-(cherry picked from commit cab1e71f0161fd24c5d6ff4c379d3a242ea8c2d9)
-
-Forwarded: not-needed
-Origin: https://gitlab.com/libvirt/libvirt/-/commit/cab1e71f0161fd24c5d6ff4c379d3a242ea8c2d9
----
- tools/vsh.c | 11 ++++++++---
- 1 file changed, 8 insertions(+), 3 deletions(-)
-
-diff --git a/tools/vsh.c b/tools/vsh.c
-index 58855f6..e74045c 100644
---- a/tools/vsh.c
-+++ b/tools/vsh.c
-@@ -2973,7 +2973,7 @@ vshReadlineInit(vshControl *ctl)
-     const char *quote_characters = "\"'";
- 
-     /* initialize readline stuff only once */
--    if (ctl->historydir)
-+    if (autoCompleteOpaque)
-         return 0;
- 
-     /* Opaque data for autocomplete callbacks. */
-@@ -2989,6 +2989,11 @@ vshReadlineInit(vshControl *ctl)
-     rl_completer_quote_characters = quote_characters;
-     rl_char_is_quoted_p = vshReadlineCharIsQuoted;
- 
-+    /* Stuff below is needed only for interactive mode. */
-+    if (!ctl->imode) {
-+        return 0;
-+    }
-+
-     histsize_env = g_strdup_printf("%s_HISTSIZE", ctl->env_prefix);
- 
-     /* Limit the total size of the history buffer */
-@@ -3149,7 +3154,7 @@ vshInit(vshControl *ctl, const vshCmdGrp *groups)
-     cmdGroups = groups;
- 
-     if (vshInitDebug(ctl) < 0 ||
--        (ctl->imode && vshReadlineInit(ctl) < 0))
-+        vshReadlineInit(ctl) < 0)
-         return false;
- 
-     return true;
-@@ -3168,7 +3173,7 @@ vshInitReload(vshControl *ctl)
- 
-     if (ctl->imode)
-         vshReadlineDeinit(ctl);
--    if (ctl->imode && vshReadlineInit(ctl) < 0)
-+    if (vshReadlineInit(ctl) < 0)
-         return false;
- 
-     return true;


=====================================
debian/patches/debian/Use-sensible-editor-by-default.patch
=====================================
@@ -10,10 +10,10 @@ Forwarded: not-needed
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/tools/vsh.c b/tools/vsh.c
-index e74045c..4a306d7 100644
+index 6cc1f60..bf38030 100644
 --- a/tools/vsh.c
 +++ b/tools/vsh.c
-@@ -2554,7 +2554,7 @@ vshEditWriteToTempFile(vshControl *ctl, const char *doc)
+@@ -2557,7 +2557,7 @@ vshEditWriteToTempFile(vshControl *ctl, const char *doc)
  
  /* Hard-code default editor used as a fallback if not configured by
   * VISUAL or EDITOR environment variables. */


=====================================
debian/patches/forward/Reduce-udevadm-settle-timeout-to-10-seconds.patch
=====================================
@@ -10,7 +10,7 @@ Closes: #663931
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/src/util/virutil.c b/src/util/virutil.c
-index bd3bbe3..5e35e09 100644
+index dc5009f..a3b5619 100644
 --- a/src/util/virutil.c
 +++ b/src/util/virutil.c
 @@ -1322,7 +1322,7 @@ void virWaitForDevices(void)


=====================================
debian/patches/series
=====================================
@@ -1,6 +1,3 @@
-backport/rpc-ensure-temporary-GSource-is-removed-from-client-event.patch
-backport/vsh-Don-t-init-history-in-cmdComplete.patch
-backport/tests-fix-hang-in-virshtest-read-big-pipe-case.patch
 forward/Reduce-udevadm-settle-timeout-to-10-seconds.patch
 debian/Debianize-libvirt-guests.patch
 debian/apparmor_profiles_local_include.patch


=====================================
debian/rules
=====================================
@@ -36,7 +36,7 @@ ifeq ($(DEB_HOST_ARCH_OS), linux)
     WITH_UDEV                 = -Dudev=enabled -Dpciaccess=enabled
     WITH_CAPNG                = -Dcapng=enabled
     WITH_LIBNL                = -Dlibnl=enabled
-    WITH_NETWORK              = -Ddriver_network=enabled
+    WITH_NETWORK              = -Ddriver_network=enabled -Dfirewall_backend_priority=iptables,nftables
     WITH_INTERFACE            = -Ddriver_interface=enabled
     WITH_SECRETS              = -Ddriver_secrets=enabled
     WITH_OPENVZ               = -Ddriver_openvz=enabled
@@ -73,7 +73,7 @@ else
     WITH_UDEV                 = -Dudev=disabled -Dpciaccess=disabled
     WITH_CAPNG                = -Dcapng=disabled
     WITH_LIBNL                = -Dlibnl=disabled
-    WITH_NETWORK              = -Ddriver_network=disabled
+    WITH_NETWORK              = -Ddriver_network=disabled -Dfirewall_backend_priority=iptables,nftables
     WITH_INTERFACE            = -Ddriver_interface=disabled
     WITH_SECRETS              = -Ddriver_secrets=disabled
     WITH_OPENVZ               = -Ddriver_openvz=disabled
@@ -136,6 +136,7 @@ DEB_CONFIGURE_EXTRA_ARGS := \
     --libexecdir=/usr/lib/libvirt \
     -Drunstatedir=/run \
     -Dinitconfdir=/etc/default \
+    -Dsshconfdir=/etc/ssh/ssh_config.d \
     -Dno_git=true \
     -Dpackager="$(DEB_VENDOR)" \
     -Dpackager_version="$(DEB_VERSION)" \
@@ -143,6 +144,7 @@ DEB_CONFIGURE_EXTRA_ARGS := \
     $(WITH_QEMU) \
     -Ddriver_remote=enabled \
     -Dremote_default_mode=legacy \
+    -Dssh_proxy=disabled \
     -Ddriver_test=enabled \
     -Ddriver_ch=disabled \
     -Ddriver_bhyve=disabled \



View it on GitLab: https://salsa.debian.org/libvirt-team/libvirt/-/compare/23d739a6226544cf5124ceb3bbccd2736dbdb9bd...0fc5ee29def3607668d90f539c98915bffecef54

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/libvirt-team/libvirt/-/compare/23d739a6226544cf5124ceb3bbccd2736dbdb9bd...0fc5ee29def3607668d90f539c98915bffecef54
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-libvirt-commits/attachments/20240604/5e320bc3/attachment-0001.htm>


More information about the Pkg-libvirt-commits mailing list