[ubuntu/questing-proposed] libvirt 11.4.0-1ubuntu1 (Accepted)
Christian Ehrhardt
christian.ehrhardt at canonical.com
Wed Jun 18 11:09:24 UTC 2025
libvirt (11.4.0-1ubuntu1) questing; urgency=medium
[ Christian Ehrhardt ]
* Merge with Debian experimental (LP: #2110424)
* Among many other imrpovements this fixes
- ppc64: P11 Support in Libvirt (LP: #2109469)
- s390x: KVM: Implement virsh hypervisor-cpu-models (LP: #2027925)
* Remaining changes:
- d/p/u-aa/lp2079869-*: allow access for bridge helper to sys node
(LP 2079869)
- d/*(post|pre)(rm|inst), d/*.install: drop generated files
- Disable libssh2 support (universe dependency)
- d/control: add libzfslinux-dev to build-deps
- debian/patches/ubuntu/ovmf_paths.patch: adjust paths to secboot.fd UEFI
Secure Boot enabled variants of the OVMF firmware and variable store for
the paths where we ship these files in Ubuntu.
- Set qemu-group to kvm (for compat with older ubuntu)
- Additional apport package-hook
- Autostart default bridged network (As upstream does, but not Debian).
In addition to just enabling it our solution provides:
+ do not autostart if subnet is already taken (e.g. in guests).
+ iterate some alternative subnets before giving up
- d/p/ubuntu/Allow-libvirt-group-to-access-the-socket.patch: This is
the group based access to libvirt functions as it was used in Ubuntu
for quite a long time.
+ d/p/ubuntu/daemon-augeas-fix-expected.patch fix some related tests
due to the group access change.
+ d/libvirt-daemon-driver-qemu.postinst*: add users in sudo to the libvirt
group.
- Update README.Debian with Ubuntu changes
- d/p/ubuntu/ubuntu_machine_type.patch: accept ubuntu types as pci440fx
- fix autopkgtests (LP 1899180)
+ d/t/control, d/t/smoke-qemu-session: fixup smoke-qemu-session by making
vmlinuz available and accessible (Debian bug 848314)
+ d/t/control: fix smoke-qemu-session by ensuring the service will run
installing libvirt-daemon-system
+ d/t/smoke-lxc: fix smoke-lxc by ignoring potential issues on destroy as
long as the following undefine succeeds
+ d/t/smoke-lxc: use systemd instead of sysV to restart the service
+ d/t/control, d/t/smoke-lxc: retry service restart and skip test if
failing; This was flaky on some release/architectures
+ d/t/smoke-lxc: retry check_domain being flaky on arm64
- dnsmasq related enhancements
+ run dnsmasq as libvirt-dnsmasq (LP 1743718)
+ d/libvirt-daemon-driver-qemu.postinst*: add libvirt-dnsmasq user
and group
+ d/libvirt-daemon-driver-qemu.postrm*: remove libvirt-dnsmasq user
and group
on purge
+ d/p/ubuntu/dnsmasq-as-priv-user: write dnsmasq config with user
libvirt-dnsmasq and adapt the self tests to expect that config
+ d/libvirt-daemon-system.postinst: fix old libvirt-dnsmasq users group
+ Add dnsmasq configuration to work with system wide dnsmasq-base
- d/p/ubuntu/set-default-machine-to-ubuntu.patch: to select default
machine type correctly with newer qemu/libvirt
- d/p/ubuntu/lp-1861125-ubuntu-models: recognize Ubuntu models for
(LP 1861125) fixups
- d/p/ubuntu/wait-for-qemu-kvm.patch - avoid hangs on startup (LP 1887592)
- d/libvirt-daemon-common.libvirt-guests.default: shut guests down
in parallel
- Apparmor Delta that is Ubuntu specific or yet to be upstreamed
split into logical pieces. File names in debian/patches/ubuntu-aa/:
+ 0020-virt-aa-helper-ubuntu-storage-paths.patch:
apparmor, virt-aa-helper: Allow various storage pools and image
locations
+ 0029-appmor-libvirt-qemu-Add-9p-support.patch: appmor,
libvirt-qemu: Add 9p support
+ 0031-virt-aa-helper-Ask-for-no-deny-rule-for-readonly-dis.patch:
virt-aa-helper: Ask for no deny rule for readonly disk
+ 0032-apparmor-libvirt-qemu-Allow-reading-charm-specific-c.patch:
apparmor, libvirt-qemu: Allow reading charm-specific ceph config
+ 0033-UBUNTU-only-apparmor-for-kvm.powerpc-LP-1680384.patch: allow
commands executed by ubuntu only kvm wrapper on ppc64el
(LP 1686621 LP 1680384 LP 1784023)
+ 0034-apparmor-virt-aa-helper-access-for-snapped-nova.patch:
apparmor, virt-aa-helper: access for snapped nova
+ lp-1815910-allow-vhost-hotplug.patch: avoid apparmor issues
with vhost-net/vhost-vsock/vhost-scsi hotplug (LP 1815910)
- libvirt should not use user/group tss for swtpm (LP 1948880)
+ d/libvirt-daemon-system.postinst: own swtpm logdir by user swtpm
+ d/p/u/swtpm-by-swtpm-user.patch: change default spawned swtpm processes
to user swtpm and adapt expected self test result changes triggered by
this
+ d/libvirt-daemon-system.postinst: create user/group swtpm if not present
due to swtpm-tools (LP 1951975)
- d/libvirt-clients.lintian-overrides: Add script-not-executable lintian
override
- libvirt-uri.sh, d/rules: Automatically switch default libvirt URI
for users via user profile (qemu:///system)
+ Update: Set LIBVIRT_DEFAULT_URI to "qemu:///system" in all
cases. (LP #2027838)
- d/control: Demote passt to Suggests (from Recommends) for
libvirt-daemon-driver-qemu, because passt is in universe.
- d/control: Make libvirt-daemon Suggest (instead of Recommend)
libvirt-daemon-plugin-sanlock, which is in universe.
* Added changes
- d/control: re-generate from d/control-in: we stop changing both files
and eventually re-generate from d/control-in as it is meant to be.
Having more than just d/control-in is only a git-import artifact anyway.
* Drop changes [in Debian 11.1.0-2]
- Fix potential issue in regard to conffile transfer on upgrades
(LP 2105496)
* Drop changes [in Upstream 11.1.0]
- d/control: drop libvirt-lxc, vbox and xen drivers to suggest
- apparmor: Allow SGX if configured (LP 2100024)
- d/p/u/lp2097886: Enable virtio-mem support not in 11.0 (LP 2097886)
[ Lukas Märdian ]
* Move autostart of default bridged network from libvirt-daemon-driver-qemu
to libvirt-daemon-config-network.postinst, as it depends on the default.xml
template shipped by the latter. (LP: #2107448)
- Move dnsmasq related enhancements to libvirt-daemon-config-network
+ run dnsmasq as libvirt-dnsmasq (LP: 1743718)
+ d/libvirt-daemon-config-network.postinst*: add libvirt-dnsmasq
user/group, as moved from d/libvirt-daemon-driver-qemu.postinst.
+ d/libvirt-daemon-config-network.postrm*: remove libvirt-dnsmasq
user/group on purge, as moved from d/libvirt-daemon-driver-qemu.postinst
+ Move dnsmasq configuration to work with system wide dnsmasq-base from
libvirt-daemon-driver-qemu.post* to libvirt-daemon-config-network.post*
- d/control: Add Breaks/Replaces, to account for the move of configuration
of the default bridged network to libvirt-daemon-config-network.
As per https://wiki.debian.org/PackageTransition case #9.
- d/t/network: Test automatic virbr0 setup via autopkgtest.
- d/l-d-config-network.{pre,post}inst.in: Add diversions for network config.
- d/l-d-config-network.{pre,post}inst.in: retain non pkg owned network
config.
* Start default network on install (LP: #2093864)
- d/l-d-config-network.postinst: add explicit virsh net-start workaround
- d/control: add libvirt-clients Recommends to l-d-config-network
- d/l-d-config-network.dirs: add var/libvirt/dnsmasq to store lease files
to avoid a warning on install
* Drop Changes:
- d/libvirt-daemon-system.postinst: fix old libvirt-dnsmasq users group
[Upgrade path for 4.0.0-1ubuntu5~ not relevant anymore]
Date: Wed, 11 Jun 2025 13:11:23 +0200
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libvirt/11.4.0-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 11 Jun 2025 13:11:23 +0200
Source: libvirt
Built-For-Profiles: noudeb
Architecture: source
Version: 11.4.0-1ubuntu1
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Launchpad-Bugs-Fixed: 2027925 2093864 2107448 2109469 2110424
Changes:
libvirt (11.4.0-1ubuntu1) questing; urgency=medium
.
[ Christian Ehrhardt ]
* Merge with Debian experimental (LP: #2110424)
* Among many other imrpovements this fixes
- ppc64: P11 Support in Libvirt (LP: #2109469)
- s390x: KVM: Implement virsh hypervisor-cpu-models (LP: #2027925)
* Remaining changes:
- d/p/u-aa/lp2079869-*: allow access for bridge helper to sys node
(LP 2079869)
- d/*(post|pre)(rm|inst), d/*.install: drop generated files
- Disable libssh2 support (universe dependency)
- d/control: add libzfslinux-dev to build-deps
- debian/patches/ubuntu/ovmf_paths.patch: adjust paths to secboot.fd UEFI
Secure Boot enabled variants of the OVMF firmware and variable store for
the paths where we ship these files in Ubuntu.
- Set qemu-group to kvm (for compat with older ubuntu)
- Additional apport package-hook
- Autostart default bridged network (As upstream does, but not Debian).
In addition to just enabling it our solution provides:
+ do not autostart if subnet is already taken (e.g. in guests).
+ iterate some alternative subnets before giving up
- d/p/ubuntu/Allow-libvirt-group-to-access-the-socket.patch: This is
the group based access to libvirt functions as it was used in Ubuntu
for quite a long time.
+ d/p/ubuntu/daemon-augeas-fix-expected.patch fix some related tests
due to the group access change.
+ d/libvirt-daemon-driver-qemu.postinst*: add users in sudo to the libvirt
group.
- Update README.Debian with Ubuntu changes
- d/p/ubuntu/ubuntu_machine_type.patch: accept ubuntu types as pci440fx
- fix autopkgtests (LP 1899180)
+ d/t/control, d/t/smoke-qemu-session: fixup smoke-qemu-session by making
vmlinuz available and accessible (Debian bug 848314)
+ d/t/control: fix smoke-qemu-session by ensuring the service will run
installing libvirt-daemon-system
+ d/t/smoke-lxc: fix smoke-lxc by ignoring potential issues on destroy as
long as the following undefine succeeds
+ d/t/smoke-lxc: use systemd instead of sysV to restart the service
+ d/t/control, d/t/smoke-lxc: retry service restart and skip test if
failing; This was flaky on some release/architectures
+ d/t/smoke-lxc: retry check_domain being flaky on arm64
- dnsmasq related enhancements
+ run dnsmasq as libvirt-dnsmasq (LP 1743718)
+ d/libvirt-daemon-driver-qemu.postinst*: add libvirt-dnsmasq user
and group
+ d/libvirt-daemon-driver-qemu.postrm*: remove libvirt-dnsmasq user
and group
on purge
+ d/p/ubuntu/dnsmasq-as-priv-user: write dnsmasq config with user
libvirt-dnsmasq and adapt the self tests to expect that config
+ d/libvirt-daemon-system.postinst: fix old libvirt-dnsmasq users group
+ Add dnsmasq configuration to work with system wide dnsmasq-base
- d/p/ubuntu/set-default-machine-to-ubuntu.patch: to select default
machine type correctly with newer qemu/libvirt
- d/p/ubuntu/lp-1861125-ubuntu-models: recognize Ubuntu models for
(LP 1861125) fixups
- d/p/ubuntu/wait-for-qemu-kvm.patch - avoid hangs on startup (LP 1887592)
- d/libvirt-daemon-common.libvirt-guests.default: shut guests down
in parallel
- Apparmor Delta that is Ubuntu specific or yet to be upstreamed
split into logical pieces. File names in debian/patches/ubuntu-aa/:
+ 0020-virt-aa-helper-ubuntu-storage-paths.patch:
apparmor, virt-aa-helper: Allow various storage pools and image
locations
+ 0029-appmor-libvirt-qemu-Add-9p-support.patch: appmor,
libvirt-qemu: Add 9p support
+ 0031-virt-aa-helper-Ask-for-no-deny-rule-for-readonly-dis.patch:
virt-aa-helper: Ask for no deny rule for readonly disk
+ 0032-apparmor-libvirt-qemu-Allow-reading-charm-specific-c.patch:
apparmor, libvirt-qemu: Allow reading charm-specific ceph config
+ 0033-UBUNTU-only-apparmor-for-kvm.powerpc-LP-1680384.patch: allow
commands executed by ubuntu only kvm wrapper on ppc64el
(LP 1686621 LP 1680384 LP 1784023)
+ 0034-apparmor-virt-aa-helper-access-for-snapped-nova.patch:
apparmor, virt-aa-helper: access for snapped nova
+ lp-1815910-allow-vhost-hotplug.patch: avoid apparmor issues
with vhost-net/vhost-vsock/vhost-scsi hotplug (LP 1815910)
- libvirt should not use user/group tss for swtpm (LP 1948880)
+ d/libvirt-daemon-system.postinst: own swtpm logdir by user swtpm
+ d/p/u/swtpm-by-swtpm-user.patch: change default spawned swtpm processes
to user swtpm and adapt expected self test result changes triggered by
this
+ d/libvirt-daemon-system.postinst: create user/group swtpm if not present
due to swtpm-tools (LP 1951975)
- d/libvirt-clients.lintian-overrides: Add script-not-executable lintian
override
- libvirt-uri.sh, d/rules: Automatically switch default libvirt URI
for users via user profile (qemu:///system)
+ Update: Set LIBVIRT_DEFAULT_URI to "qemu:///system" in all
cases. (LP #2027838)
- d/control: Demote passt to Suggests (from Recommends) for
libvirt-daemon-driver-qemu, because passt is in universe.
- d/control: Make libvirt-daemon Suggest (instead of Recommend)
libvirt-daemon-plugin-sanlock, which is in universe.
* Added changes
- d/control: re-generate from d/control-in: we stop changing both files
and eventually re-generate from d/control-in as it is meant to be.
Having more than just d/control-in is only a git-import artifact anyway.
* Drop changes [in Debian 11.1.0-2]
- Fix potential issue in regard to conffile transfer on upgrades
(LP 2105496)
* Drop changes [in Upstream 11.1.0]
- d/control: drop libvirt-lxc, vbox and xen drivers to suggest
- apparmor: Allow SGX if configured (LP 2100024)
- d/p/u/lp2097886: Enable virtio-mem support not in 11.0 (LP 2097886)
.
[ Lukas Märdian ]
* Move autostart of default bridged network from libvirt-daemon-driver-qemu
to libvirt-daemon-config-network.postinst, as it depends on the default.xml
template shipped by the latter. (LP: #2107448)
- Move dnsmasq related enhancements to libvirt-daemon-config-network
+ run dnsmasq as libvirt-dnsmasq (LP: 1743718)
+ d/libvirt-daemon-config-network.postinst*: add libvirt-dnsmasq
user/group, as moved from d/libvirt-daemon-driver-qemu.postinst.
+ d/libvirt-daemon-config-network.postrm*: remove libvirt-dnsmasq
user/group on purge, as moved from d/libvirt-daemon-driver-qemu.postinst
+ Move dnsmasq configuration to work with system wide dnsmasq-base from
libvirt-daemon-driver-qemu.post* to libvirt-daemon-config-network.post*
- d/control: Add Breaks/Replaces, to account for the move of configuration
of the default bridged network to libvirt-daemon-config-network.
As per https://wiki.debian.org/PackageTransition case #9.
- d/t/network: Test automatic virbr0 setup via autopkgtest.
- d/l-d-config-network.{pre,post}inst.in: Add diversions for network config.
- d/l-d-config-network.{pre,post}inst.in: retain non pkg owned network
config.
* Start default network on install (LP: #2093864)
- d/l-d-config-network.postinst: add explicit virsh net-start workaround
- d/control: add libvirt-clients Recommends to l-d-config-network
- d/l-d-config-network.dirs: add var/libvirt/dnsmasq to store lease files
to avoid a warning on install
* Drop Changes:
- d/libvirt-daemon-system.postinst: fix old libvirt-dnsmasq users group
[Upgrade path for 4.0.0-1ubuntu5~ not relevant anymore]
Checksums-Sha1:
98e19c41c21005ae18407ad6da1084ee893dbcf6 7630 libvirt_11.4.0-1ubuntu1.dsc
aa8f3e32a2accc73674882bb77477497f1f272aa 9849020 libvirt_11.4.0.orig.tar.xz
561ec6c78ae71426c2d55071dc14aade5bea7aa6 163840 libvirt_11.4.0-1ubuntu1.debian.tar.xz
0a0d716673b1c7618b0fffe26b944cb6873fba5f 7981 libvirt_11.4.0-1ubuntu1_source.buildinfo
Checksums-Sha256:
08b625e4f54255f44511472bc6f31a0c5db6d16f177b976306ce949437fd3993 7630 libvirt_11.4.0-1ubuntu1.dsc
e10059efc655532b0cfe44d961c87c5a56e45393cc7bd343bd3348b40d73b267 9849020 libvirt_11.4.0.orig.tar.xz
597df09a1000a5b84fdc6aef7be09ee890fd91f8f04cdb825d453794fee05945 163840 libvirt_11.4.0-1ubuntu1.debian.tar.xz
35e8bc518479d23472ca394e9c1a5aacc72435c7f65d68d86e3e7ef5f6a65440 7981 libvirt_11.4.0-1ubuntu1_source.buildinfo
Files:
17f2ce9853d5f84aa0638da89a1cf881 7630 libs optional libvirt_11.4.0-1ubuntu1.dsc
eb719750397481a8bb445c8fc0f5bcef 9849020 libs optional libvirt_11.4.0.orig.tar.xz
b1fd4c6403794e557ce3045dbe4be1b8 163840 libs optional libvirt_11.4.0-1ubuntu1.debian.tar.xz
d5a60607e2fce168ffaeace1bf2237eb 7981 libs optional libvirt_11.4.0-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Libvirt Maintainers <pkg-libvirt-maintainers at lists.alioth.debian.org>
Vcs-Git: https://git.launchpad.net/~paelzer/ubuntu/+source/libvirt
Vcs-Git-Commit: b85e3b158d8f854ca4ed74ac20694cdf3621b721
Vcs-Git-Ref: refs/heads/lp-2110424-merge-11.4-questing
More information about the Questing-changes
mailing list