|
|
|
|
Changelog for xapi-libs-devel-23.31.0-1.5.xcpng8.3.x86_64.rpm :
* Wed Feb 14 2024 Benjamin Reis - 23.31.0-1.5- Add xapi-23.31.0-fix-ipv6-get-primary-address.XCP-ng.patch * Wed Feb 14 2024 Yann Dirson - 23.31.0-1.4- Rebuild with xs-opam-repo-6.74.0-1.2 * Thu Feb 08 2024 Benjamin Reis - 23.31.0-1.3- Add xapi-23.31.0-fix-ipv6-import.XCP-ng.patch * Mon Jan 22 2024 Samuel Verschelde - 23.31.0-1.1- Rebase on 23.31.0-1- Rediff patches (Benjamin Reis)- Rebase changelog on upstream changelog- * * * Former XCP-ng 8.3 changelog * * *- * Tue Dec 12 2023 Benjamin Reis - 23.25.0-1.6- - Add xapi-23.25.0-extend-uefi-cert-api.patch- - Update xapi-23.25.0-update-xapi-conf.XCP-ng.patch- * Wed Oct 25 2023 Samuel Verschelde - 23.25.0-1.4- - Set override-uefi-certs=true in xapi.conf- - Update xapi-23.25.0-update-xapi-conf.XCP-ng.patch- * Fri Oct 20 2023 Samuel Verschelde - 23.25.0-1.3- - Don\'t require XS\'s fork of the setup RPM- - We chose to revert to CentOS\' version, as we don\'t share XenServer\'s view- regarding where to do changes to add users and groups, and we don\'t need- the added users and groups they put there yet.- * Thu Oct 05 2023 Samuel Verschelde - 23.25.0-1.2- - Add missing Requires towards nbd- * Wed Sep 27 2023 Samuel Verschelde - 23.25.0-1.1- - Update to 23.25.0-1- * Wed Sep 20 2023 Samuel Verschelde - 23.24.0-1.1- - Update to 23.24.0-1- - Remove patches merged upstream.- - Rework xapi-23.24.0-update-xapi-conf.XCP-ng.patch- - Rework xapi-23.24.0-update-db-tunnel-protocol-from-other_config.XCP-ng.patch- * Mon Aug 28 2023 Guillaume Thouvenin - 23.3.0-1.9- - Add xapi-23.3.0-Add-vdi_update-filter-to-some-tests.backport.patch- * Wed Aug 23 2023 Guillaume Thouvenin - 23.3.0-1.8- - Add xapi-23.3.0-Allow-a-user-to-select-on-which-SR-to-run-quicktest.backport.patch- * Mon Jul 31 2023 Benjamin Reis - 23.3.0-1.7- - Drop `ext4` from `sm-plugins` in `xapi.conf`- * Fri Jul 21 2023 Benjamin Reis - 23.3.0-1.6- - Rebuild for xs-opam-repo-6.66.0-1.2.xcpng8.3- - Add xapi-23.3.0-filter-link-local-address-ipv6.XCP-ng.patch- * Thu May 04 2023 Samuel Verschelde - 23.3.0-1.5- - Rebuild for blktap-3.53.0-1.xcpng8.3 and sm-3.0.3-1.1.xcpng8.3- * Mon Apr 24 2023 Benjamin Reis - 23.3.0-1.4- - Remove `/etc/xapi.conf.d` files, patch `xapi.conf` instead- * Thu Mar 16 2023 Samuel Verschelde - 23.3.0-1.3- - Rebuild for xs-opam-repo-6.66.0-1.1- * Mon Mar 06 2023 Benjamin Reis - 23.3.0-1.2- - Update xapi-23.3.0-update-xapi-conf.XCP-ng.patch to re-enable HTTP (prerequisite for HTTP to HTTPS redirect)- * Wed Jan 18 2023 Samuel Verschelde - 22.34.0-2.1- - Update to 22.34.0-2- - Drop xapi-22.20.0-redirect-fileserver-https.backport.patch, included in 22.34- * Tue Dec 20 2022 Samuel Verschelde - 22.32.0-1.1- - Update to 22.32.0-1- * Thu Dec 08 2022 Benjamin Reis - 22.31.0-1.1- - Rebase on latest XS 8.3 prerelease updates- - Drop two patches merged upstream- * Thu Dec 01 2022 Benjamin Reis - 22.20.0-1.2- - Add xapi-22.20.0-redirect-fileserver-https.backport.patch- * Wed Aug 31 2022 Samuel Verschelde - 22.20.0-1.1- - Rebase on CH 8.3 Preview- - Remove dependency to non-free packages again- - Remove dependency to new non-free package pvsproxy- - Remove patches merged upstream- - Keep other patches still necessary.- - Rediff xapi-22.20.0-fix-quicktest-default-sr-param.backport.patch- - Add patch xenopsd-22.20.0-use-xcp-clipboardd.XCP-ng.patch, migrated from retired repo xenopsd- - Rediff xenopsd-22.20.0-use-xcp-clipboardd.XCP-ng.patch and adapt paths- - Remove ptoken.py and accesstoken.py yum plugins and their configuration- - Add xapi-22.20.0-xenospd-dont-run-cancel-utils-test-as-unit-test.backport.patch to fix tests in koji * Mon Dec 04 2023 Rob Hoes - 23.31.0-1- maintenance: update opam metadata from xs-opam- CP-45847: Allow any value of trace flag for traceparent- CA-384936 attach static VDIs for redo-log (#5235)- CP-43578: Raise Error in tracing export when HTTP error occurs (#5230)- CA-385080: Finish trace locally for forwarded tasks- Add space between header name and value (#5238)- CP-45921: Make yum commands nonessential- CA-378591: Clear span tables when all observers are disabled- CP-46004: Finish eventgen span to remove spans table clutter- Add span table lengths to export span to help catch future issues.- Add tracing for xe calls in the CLI server- Update datamodel lifecycle- CP-45978 update /etc/xapi.d/plugins/power-on-host- CP-45978 update /etc/xapi.d/plugins/disk-space- CA-365486: repository-domain-name-allowlist could accept a full hostname- using xcp.cmd instead of popen- CA-384537 add logging to quemu_media_change- CA-384537 simplify qemu_media_change- CP-46168: Some py2->py3 update for xapi startup- Update DRAC.py for replacing subprocess.popen- CP-45981: Update xenopsd from python2 to python3- Revert \"CA-379472 increase startup timeout for block_device_io\"- CA-384148 enable logging for redo_log_alert- CA-384148 remove lock in Redo_log.startup- CA-385315: document the certificates\' fingerprints hash algorithm- formatting with black- using the shared lib xcp.cmd instead of subprocess.popen- CP-45977: Update scripts/extensions from python2 to python3- CP-42559: Add RBAC info to C# SDK XML docs- CP-42559: Add RBAC info to Java SDK docs- CP-42559: Add RBAC info to C SDK docs- CP-42559: Hide internal roles from SDK docs- Remove special handling for `get_all_records` messages in C# SDK- xe pif-list: include host-uuid (#5263)- xe pif-list: fix displaying of MAC- CP-45978 update /etc/xapi.d/plugins to python3 for xs9- format with black- ci: create final releases- ci: Simplify release workflow- ci: set up configure appropriately on release- ci: Avoid unnecessary workaround- Advanced changes for python3 syntax:- Improves Code Readability- Change type of observer components to use variant- Enhance debug message in tracing module- Expose `flush_spans` from tracing.ml- Refactor typeCombinator as a single module- Add xapi-clusterd as an observer component- CP-45469: Distributed tracing for xapi-clusterd- Add xenopsd docs from old site- Add live-migration diagram for xenopsd- Remove old xenopsd docs from ocaml/xenopsd/doc- Adjust quality gate for List.hd from 320 to 318- Simplify scanning /sys/block// stats for iostat- CA-365059: Clear source pool messages after migrating VM- Revert \"CP-45981: Update xenopsd from python2 to python3\" * Fri Nov 10 2023 Rob Hoes - 23.30.0-1- Use .ndjson extension for tracing files to denote newline-delimited JSON- CP-41844: Add xs-trace, an executable to submit trace files to an endpoint- CP-41844: Add support for compressed files to xs-trace- CP-41844: Add unit tests to xs-trace- Replace duplicate functions rmrf and rmtree with rm_rec from Xapi_stdext_unix.Unixext- CP-41844: Address PR comments and fix xs-trace tests by ensuring server is ready- xapi-types/ref: add pretty-printer- xapi-types/ref: optimize of_string for real references- CP-45571: Add VM.restart_device_model function (API/CLI)- CP-45741 VCS support, adjust args for qemu, demu- CA-380551: bump minimum HA SR size to 4GiB- CA-380551: xha_statefile: factor out checking for a VDI of given size or available free space- CP-44561: When setting attributes on an Observer, preserve defaults- CP-43901: Block pool member startup if it has a higher xapi version- Update datamodel lifecycle- CP-45304: Remove UUID from span name system.isAlive:- CP-46045 define VTPM feature- CA-380551: HA: assert that the HA SR is big enough for BOTH the statefile AND the redo log- [maintenance]: mark warning 5: ignored partial application as an error in release mode- Add timeout to gpumon client- CP-27910: expose json flag for /vm_rrd in the datamodel- CA-384967: Fixup xcp-networkd service name- CA-384979 replace XenMotion with storage live migration (#5237)- CA-384882: Revert \"CA-365059: Clear source pool messages after migrating VM\" * Tue Oct 31 2023 Rob Hoes - 23.29.0-1- CA-375396: Ignore removed fields when redoing writes * Mon Oct 30 2023 Rob Hoes - 23.28.0-1- Only count VDIs on tested SRs- CA-371002: Reformat checking template with match/with- CA-371002: Do a usual import when a default template cannot be found- Remove old and unused script- CA-381044: Raise error when pool.set_update_sync_enabled is called with true and empty repos- Choose size of batch VM evacuation- xapi.conf: match the default value for override-uefi-certs- CP-40123: encode the dumped JSON in rrdd as utf-8- CP-43652: Remove tracing debug lines generated by xenopsd- CA-383987: Ensure tracing request Host header is correct by not using a fixed host name- Fix suspend-image-viewer binary- CP-44367 - Allow SDK Consumers to create a custom implementation for JsonRpcClient- CA-383987: Only include valid Hosts and Ports in tracing Host header- CA-365059: Clear source pool messages after migrating VM- CP-45938: Fixup xs9 failure due to python2 stuff- XSI-1457: Limit number of sectors to coalesce * Mon Oct 16 2023 Rob Hoes - 23.27.0-1- Python\'s XenAPI: Update metadata- CA-382596: Updated initialization script to work with PS 7 paths on Windows, and PS paths on Linux.- CP-45579: Restored support for building the PowerShell module against .NET Framework 4.5 or above.- Add some more documents from xapi-project.github.io- Do not attempt to start snapshots or templates- jemalloc: avoid bottlenecks with C threads- [maintenance]: commit lifecycle changes- CP-43755: Pam: avoid sleep(1) call when multithreaded- CP-43755: Split internal and external auth locks- CP-43755: Locking_helpers: introduce Semaphore- CP-43755: xapi_session: switch to using Semaphore instead of Mutex- CP-43755: Datamodel_pool: introduce local_auth_max_threads and ext_auth_max_threads- CP-43755: Increase default max threads for PAM from 1 to 8- fix(dune): gen_lifecycle depends on git describe output, which is outside of the normal source and build dependencies- CP-43755: commit lifecycle changes- CP-44320 scaffolding for NVidia Virtual Compute Service (VCS) * Wed Oct 11 2023 Rob Hoes - 23.26.0-1- Install suspend_image_viewer- CA-379459 protect Redo_log.startup, shutdown with a lock- CA-379459 use database lock, add logging- Updated the PowerShell Readme.- CP-45006: Define volume.compose API for SMAPIv3.- forkexecd: handle invalid rpc messages more gracefully- maintenance: relax message-switch\'s bounds on mtime- CP-44271: Remove python build/install from source code- CP-44271: Conditionally run python test- Initial hugo config- Hugo theme basics- Docs: initial content- Rename suspend_image_image_viewer -> suspend-image-viewer- Updated docs links.- CP-45175: Enable the OVMF debugging port by default- [maintenance]: use full cmdline for vhd unit test runner- fix(runtest): clean up after unit test- Fix indentation issues in rrdd.py before py3- CP-45338: futurize rrdd.py- Publish new Hugo-based docs- CA-381047: Add observer capability to bugtool- CP-44563: Add compress_file function and compress tracing files with zstd when compress_tracing_files flag set- CP-45214: Fix tracing HTTP request not working with Jaegers FQDN by flushing instead of closing the sending stream- Do not fetch random SR in empty list- CA-383491: Run pygrub in deprivileged mode when invoked from XAPI (upstreamed patch from 23.25.0-2) * Thu Sep 28 2023 Alejandro Vallejo - 23.25.0-2- CA-383491: Addresses XSA-443 - CVE-2023-34325- Run pygrub in depriv mode to protect against priv escalation * Thu Aug 31 2023 Rob Hoes - 23.25.0-1- CP-43977: Fallback un-recognized guidance as RebootHost- xapi-aux: log error when reading ip type in inventory- xapi-aux: filter out all link-local addresses- CA-378966: Prepare ip monitor watcher to read more lines- CA-378966: Detect state network interface changes- network_monitor_thread: reuse named parameters- xxhash(maintenance): add dependency to ctype stubs- maintenance: use ounit2 instead of ounit- maintenance: prepare mtime usage for 2.0- CA-381856: preserve host.last_software_update on pool join- CP-44988: remove API: host.apply_recommended_guidances- fixup: update lifecycle for \"host.apply_recommended_guidances\"- Move helpers to determine the client of a call from Context to Http_svr- Improve logging at start of HTTP handler- CA-381587: log when HTTP Basic auth is used, and by who- CP-33044 replace gpumon shutdown with NVML detach/attach- CP-42949: Ensure storage RRDs are created without tapdev in kernel- Install python3 variant of xapi-storage alongside python2 * Fri Aug 18 2023 Rob Hoes - 23.24.0-1- CA-379459 make shutdown mutex per redo_log- CA-381133: Set pending_guidances based on recommended guidance- CA-381133: Make {host;VM}.recommended_guidances internal-only- CA-381133: Remove usage of host|VM.recommended_guidances- CA-381133: Remove now-unused recommended_guidances fields- Change argument of resort_guidances * Tue Aug 15 2023 Rob Hoes - 23.23.0-1- CA-381503: bump qemu filesize limit * Tue Aug 15 2023 Rob Hoes - 23.22.0-1- Removed class which became obsolete after the removal of the Proxy_ * classes.- Corrections to the unmarshalling of raw API hashtables.- Removed code generating methods and parameters for XML RPC.- Fixed a couple of code smells. Renamed internal method to reflect removal of proxy classes.- Added message override (preserving it for the cases where DMC has been switched off via a feature flag).- Further corrections to Marshalling so the Powershell module can create API objects from hashtables.- CA-379112 make PBD.plug wait for scan results- CA-379112 add logging- CA-379112 update comments in message_forwarding.ml- CA-380789: Not get power_state from snapshots with suspend VDIs- Revert \"CA-380580: cross-pool migration: no CPU checks for halted VMs\"- Revert \"Cross-pool live migration: move CPU check to the target host\"- Revert \"Add VM_metrics to metadata export\"- Revert \"Add VM_metrics to metadata import\"- CA-380581: Remove lock on downloading updates from remote repos- CA-379459 protect redo_log.shutdown with a lock * Thu Aug 03 2023 Pau Ruiz Safont - 23.21.0-1- Allow a user to select on which SR to run quicktest- Added messages raised by v6 and SM.- CA-380368: Replaced < ad > with < and >. Improved the type description.- CA-380389: Version of deprecation/removal for repository.up_to_date not documented correctly- Add option to redirect stderr to stdout to execute_command_get_output *- CA-380178: xenopsd: Fix vTPM manufacture logging- CA-380178: Increase swtpm startup timeout- Add `vdi_update` filter to some tests- CA-379472 log more block_device_io messages to info- CA-379472 increase startup timeout for block_device_io- CA-379112 log details of insufficient SR size * Wed Aug 02 2023 Pau Ruiz Safont - 23.20.0-1- CA-375992 remove stale swtpm chroots after boot- CA-379472 more redo_log debugging- CA-379350: Use up-to-date vTPM UUIDs when creating device models- maintenance: make code easier to follow with aesthetic changes * Thu Jul 27 2023 Rob Hoes - 23.19.0-1- CA-379472 add debugging to redo_log- Fix logging of CPU pool-level changes- CA-380580: cross-pool migration: no CPU checks for halted VMs * Thu Jul 20 2023 Rob Hoes - 23.18.0-1- CP-42016: Add parameter \"--newest-only\" to \"reposync\" command- CP-42014: Add last_update_sync to pool datamodel- CP-42013: Do not apply recommended guidances automatically- CA-376144: handle host.apply_recommended_guidances first on pool coordinator- CA-375147: UPDATES_REQUIRE_SYNC when toolstack restarted on coordinator- CP-42810: Periodic update sync- CP-40204, CA-366396: Add \"host.latest_synced_updates_applied\", remove \"repository.up_to_date\"- CA-376145: Reset pool.last_update_sync on pool coordinator change- CA-378757: remove \"EvacuateHost\" from recommended guidance- CP-43545: expose `issued` and `severity` from updateinfo- CA-378778: Calculate host guidance correctly- CA-380043: VM recommended guidances is not set correctly * Thu Jul 20 2023 Rob Hoes - 23.17.0-1- CP-43942 Remove \"Portable SR\" pseudo-feature- opam: update metadata from xs-opam- xapi_pgpu: make update_pgpus less scary- vhd: use supported ocaml runtime function names- xapi_guest_agent: use infix function for path concatenation- maintenance(xapi_message): don\'t log scary messages- Add VM_metrics to metadata export- Add VM_metrics to metadata import- opam: sync with latest metadata- ci: update main workflow to setup-ocaml v2- Cross-pool live migration: move CPU check to the target host- Document parameters in Stunnel_cache API- ci: try to reuse dune cache as much as possible- CP-27910: factor out reposnse behaviour from host rrd handler- CP-27910: allow exporting vm rrds and unarchives in json- CP-27910: set content type headers for rrd endpoints- maintenance(http-lib): Disallow invalid values in accept datatype- http-lib: port tests to alcotest- http-lib(fix): Prefer more specific mimetypes in Accept- http-lib(feature): Make API more ergonomic- IH-393: Use Accept header in xcp-rrdd endpoints- http-lib: make all tests belong to the package- CA-379928: enable more logging for redo_log_usage- [maintenance]: reformat redolog_usage following logging change- CA-377945: toolstack restart: ensure xapi is stopped first, started last- Offload VM CPU Policy checks to Xen * Mon Jul 17 2023 Edwin Török - 23.16.2-2- Bump release and rebuild * Wed Jul 12 2023 Rob Hoes - 23.16.2-1- CA-379929: move json dump out of the rrdd plugin directory- xcp-rrdd: remove hardcoded version on http requests- Revert \"CA-375992: clean up previous sandbox when creating one\" * Tue Jul 11 2023 Rob Hoes - 23.16.1-1- Install cohttp-posix * Tue Jul 11 2023 Rob Hoes - 23.16.0-1- CA-373074 Added contents of update_getty script to run after Gencert is started- CP-43551: Dump host_rrd latest data to /dev/shm/metrics/host-dss- CA-378837 log results from Host.get_vms_which_prevent_evacuation- Disable Python 2.7 on Github CI- CP-40214: * */ *.py: raise (AnyException()): Remove optional parentheses- CA-379173 handle race condition in stunnel_cache- CP-40214: ocaml/xapi-storage/python/xapi/ * *.py: modernize -f except,print- Add HTTP Strict Transport Security header- CP-43574: Add host load data source- CP-40214: ocaml/xapi-storage/python/examples/ * *.py: Update except- .gitignore: Ignore the *.bak backup files of the Python modernize tool- CP-40214: xapi-storage/python/xapi/storage/api/volume.py: use long()- Make tracing library independent of xapi-idl- Add a debuginfo library- Context: use Debuginfo library- Task_server: use Tracing type and Debuginfo- Tracing debuginfo: use newline separator for XML-RPC to work- VM.migrate_send: properly pass on tracing data- Storage_mux: wrap all calls with Debug.with_thread_associated- Set up tracing and logging for SXM operations- Set up logging and tracing for SMAPIv1- scripts/plugins/extauth-hook-AD.py: Skip init logging on import- CP-43565: xapi-expiry-alerts: a new library to generate expiry alerts- CP-43777: Install xapi-expiry-alerts and ezxenstore- ci: Break long line in yaml- Add cpuid library- Introduce functions in CPU feature sets in xenopsd- xenopsd: change type of reported CPU feature-sets to an abstract type- xapi: switch CPU feature sets to the abstract type and don\'t interpret them- Remove CPUID tests from xapi and add to xenopsd- Update quality gate- CA-378931: usb_reset: Fix mount call parameters- CA-375992: clean up previous sandbox when creating one- CP-42019: Update wording for expiry message- CA-379472 add debugging to redo_log * Mon Jun 19 2023 Rob Hoes - 23.15.0-1- xenops_sandbox: separate chroot instantiation from fs creation- xenops_sandbox: expose less of chroot module- xenops_sandbox: fix mistake in guard\'s parameter name- xapi-idl: rename varstore interfaces- xapi-guard: do not use a static version- git: ignore another formatting commit for blames- xapiguard_cli: run its tests as part of varstored package- Tidy up class members in the file.- Removed cyclical assignment. Reordered assignments.- CP-43400: Expose ServerCertificateValidationCallback in the Session.- Deprecated the Session constructors requesting the \'timeout\' parameter. Added Property to set this instead.- CA-354436: pool.is_slave took a long time to respond- Update lifecycle- CA-378222: assert_sr_can_host_statefile has to take available space into consideration- CA-378229: flush database immediately on redo log enable- [maintenance]: drop redundant \'true\' and factor out anonymous function- [maintenance]: use phantom type parameter to enforce RO operation on redo logs- [maintenance]: simplify Redo_log.flush_db_exn- [maintenance]: split Redo_log.enable on whether it is RO or not- [maintenance]: redo_log hide redo log type- [maintenance]: drop internal functions from interface- CA-378304: check max_file_size limit after writing to tracing file- CA-378035: set nbd client timeout to 60 seconds- CA-378323: prevent find writing to stderr if /var/log/dt not present- CA-378455: Ensure TPM contents are base64-encoded on migration- maintenance (suspend_image_viewer): avoid duplication * Fri Jun 09 2023 Rob Hoes - 23.14.0-1- CP-41837: Create tracing library- CP-41839 Added TracerProvider modules to tracing- CP-41840: Add function to convert span to zipkin json- CP-41841: Export trace json files to http- CP-41841: Export trace json files to dom0 log endpoints- CP-42362: Only export finished spans and implement span garbage collector- CP-42361: Use XenAPI configuration list in TraceProvider to switch between HTTP/dom0 log export- CP-42441 Added SpanKind to Spans- CP-41841 Added conversion between Spans and W3C Traceparent headers- CP-42441: Capture exceptions from failed operations in span tag- CP-42609 Service name is set dynamically depending on the service- CP-42607 Created set, create, destroy functions for TracerProviders- CP-42854 Add Unit Tests for Tracing Library- CP-41842 Created Observer class with IDL functions to manage Open Telemetry providers- CP-41842 Added CLI for Observer commands- CP-41842 Added initialisation of Tracing library for Xapi- CP-41842 Added Tracing Library calls to Xapi_observer to link to the library- CP-41842 Added Attribute validator in library and in xapi_observer- Instrument tracing in Xapi- CP-41841 Added traceparent header to http_svr- CP-41841 Populate traceparent header in rpc and retreive it in context.ml- Nested tasks in startup sequence- Trace xenopsd operations- Xenopsd: nest parallel tasks- Xenopsd: always use task for import_metadata- Trace SM ops and link from xenopsd- CP-42606 Add Management interface to Xenopsd- CP-42608 Added mechanism to manage components in other Daemons- CP-42608 Added set_components to register and unregister changed components- Fix errors in message forwarding- CP-41843: Add /var/log/dt to bugreport- Link up xapi/xenopsd tracing for live migration- xenopsd: include traceparent header in requests to a remote xenopsd- xenopsd: add received traceparent header to task- Remove unused module definitions- CP-42553: Periodically delete old files and files beyond a size limit- Add error identifier to attributes to mark a span as having an error- Add more endpoint valdiation for URLs- Added tracing to rpc calls using make_remote_rpc- Remove filters and processors from TracerProvider and rename tags to attributes- Remove service_name as a TracerProvider and Span field and set it as a library level constant- Added SpanLink to spans- Added SpanEvent to spans- Use w3c format to serialise spans going into xenopsd to avoid bloat- Moved Attribute fields on Spans and TracerProviders to being a StringMap- Updating Zipkin to export events (annotations) and to include remoteEndpoint- Fixing Quality gate- CP-42825: Add XAPI Alcotest unit tests- CP-42553 Write spans in files up to 1mb then flush to logs- Trace Export operations in the library- Add Attributes to Tracing in the library- Batch all Traces in one export call to improve perfomrance- CP-42999: Return new \"preview\" in return of v6 \"get_version\"- CA-377824 fix FD leak in xenopsd- CP-43518: tap-ctl stats: treat `tap` key as optional in returned object * Thu Jun 08 2023 Rob Hoes - 23.13.0-2- Bump release and rebuild * Wed Jun 07 2023 Rob Hoes - 23.13.0-1- xenopsd: use HVM memory model for PVH guest not using shim- maintenance: small simplifications and reformattings- squeezed: Be aware of PVH domains- CP-42739: Bump Java SDK to JDK 11 (LTS)- opam: move vhd-format metadata to root directory- [maintenance]: delete xen-gnt-unix dependency- [maintenance]: avoid building bytecode versions of executables- libs/vhd: run make format- squeezed: fix link to architectural drawing- CA-376879: VLAN PIF created in pool.join is shown as disconnected (#5026)- CP-40775 remove VTPM check from VM.clone- CP-40775 remove VTPM check from VM cross-pool migration- CP-40775 remove VTPM check from VM.checkpoint- CP-40775 update quality gate- CP-40775 remove VTPM check VTPM.create wrt HA- CA-376864: prefer use of NBD path for static VDIs on SMAPIv1- redo-log: bump default size to 4GiB- xapi-guard: initialize Logs- xapi-guard: do not use a static version- xapi-guard: refactor serve_forever_lwt- xapiguard_cli: install- xenopsd: plumb through vtpm uuid to suspend/restore- swtpm-wrapper: do not spawn additional logger- swtpm-wrapper: be explicit on when to manufacture a new vTPM- swtpm-wrapper: unix+http scheme support- xapi-guard: add minimal REST interface for swtpm- CP-42726: Create socket whenever swtpm starts up- swtpm_guard: spawn with correct gid- xenopsd: drop reading/writing of vTPM state through the file- vTPM smoke test- CP-40775 remove assert_ha_vtpms_compatible- CP-40775 remove assert_ha_vtpms_compatible - update quality gate * Tue Jun 06 2023 Pau Ruiz Safont - 23.12.0-2- Bump release and rebuild * Thu May 25 2023 Rob Hoes - 23.12.0-1- Check if user if root before continuing with test- CA-377169 block VM.checkpoint of running VM with VTPM- Update quality-gate- ocaml-vhd: fix unit tests- ocaml-vhd: Cstruct.len -> Cstruct.length- ocaml-vhd: Split off function for VHD creation from Raw_input.vhd- ocaml-vhd: Add Hybrid_raw_input to VHD- vhd-tool: Remove unnecessary values from match- vhd-tool: Remove unnecessary parameter from write_stream- vhd-tool: Extend documentation in impl.ml- vhd-tool: fix progress bar- Make NBD disconnect robust to the device being gone- CP-43131: Make gvt-g support configurable- CA-333441, CA-377454 create /var/lock/sm/iscsiadm- CP-31856: Option to use NBD to attach disks to the control domain- CP-33338: call vhd-tool with source-format nbdhybrid for NBD sources- Install rrdd.py into the build output- Make session errors look less scary in the logs- Update rrdd to send v2 protocol data- CA-377456 unblock cross-pool migration with VTPM when halted- Set PIF\'s IPv6 Gateway when in DHCP/Autconf- CP-42182 Set Makefile to install rrd-cli- xapi-rrdd: test rrd_cli- editorconfig: correct setting for Makefile is tab, not tabs- database: document values of exceptions- maintennce: avoid future warnings- maintenance: add reformat commit to ignored revs- CP-42533: vhd-tool: add hybrid NBD-to-VHD exporter- CP-42533: vhd-tool: add nbdhybrid as a supported source format- CP-42533: vhd-tool: wire up nbdhybrid to vhd- CP-43387: Fix VDI delta copy with NBD datapath connection- CP-42064: Move NbdClient module from Xapi_vbd to Attach_helpers- CP-42064: Fix storage migration for NBD-backed storage * Tue May 09 2023 Pau Ruiz Safont - 23.11.0-1- CA-376297: Test that mirage-crypto accepts all valid RSA keys- CP-42642: Support share server certificate file to group users- CP-42835: Allow changing DNS servers when HA or clustering enabled- CA-375358: Parse output of yum upgrade to get RPMs to be updated/installed- Add comments for RPM version comparison functions- CA-375358: Add redundancy in getting latest updates/installations- xapi_blob: don\'t verify connection when sending between pools- ocamlformat: reformat using ocamlformat 0.22.4- ci: publish XenAPI releases to PyPI- ci: reduce code run with permissions to release to PyPI- xapi-cli: Have a consistent interface for vtpms\'s vm- Move writing init complete to the end of startup sequence- CA-374989: Avoid using get_record on cross-pool migration- `rrdd-plugin`: do not write payload if page count is 0- CA-376894 update VM allowed ops after deleting VTPM- Fix a few auto formatting differences- [maintenance]: varstored-guard depends on alcotest-lwt for tests- [maintenance]: remove xapi-types to http-svr dependency- [maintenance]: xapi-guard: drop inotify dependency- [maintenance]: xapi-guard: make unit tests run on Mac OS- [maintenance]: allow building some libraries on macOS- [maintenance]: repeat test errors at the end- [maintenance]: xen-api-client: avoid name clash on Util module- xen-api-client: add http+unix URI- xen-api-client-lwt: introduce a SessionCache- [maintenance]: update xen-api-client-lwt examples to use the SessionCache- [maintenance]: tweak xen-api-client-lwt examples- maintenance: add undeclared dune dependencies- CP-40528 VTPM snapshot, revert, clone- CA-376993 disable test_clustering (revert this!)- ci: do not attempt to install xapi-database- Revert \"CA-376993 disable test_clustering (revert this!)\"- spec: specify SPDX licenses- spec: changes in library files packaged * Wed Apr 19 2023 Rob Hoes - 23.10.0-1- Xen libraries are are now taken straight from the xen package instead of through xs-opam- Import ezxenstore into the xen-api repo- CP-39863 add allowed VTPM ops for VMs- CP-42455 Revert disable DMC- CA-376319: Ensure that nbd_client_manager cannot block forever.- CA-376326: rrdd_proxy: compare the localhost uuid with a uuid instead of a ref- CA-376326: rrdd: return 404 instead of just failing- ezxenstore: make tests exclusive to it- CA-376294: Extract hostname from FQDN- CA-376294: Update log message about compressed netbios name- CP-39935 catch and log unexpected exceptions during import- CA-376448: explicitly validate refs in PVS_cache_storage.create * Fri Mar 24 2023 Rob Hoes - 23.9.0-2- Bump release and rebuild * Fri Mar 24 2023 Rob Hoes - 23.9.0-1- CA-343683 Added lock to disk writing in Networkd to avoid writing to disk with incomplete configuration details- ci: nosetests are only located in scripts- python: port tests to pytest- ci: setup python tests in the yml definition- CA-375705: fix total order on Ref.compare- CA-375705: unit test for total order on Ref.compare- CP-39935 implement VTPM export- CP-39935 Implement VTPM import- CP-39935 Update quality-gate.sh for VTPM- CP-39935 improve full restore- xapi_vtpm: do not reuse name for get_contents- CP-41574: Add telemetry configuration data- CP-41574: Expose repository proxy password access to API- CP-41574: Update DB schema- CP-41574: Updated datamodel_lifecycle.ml for new added fields- CA-375359 improve \"pool_total_session_count\" RRD description- CP-30367: xenopsd: add support for PVH- CP-30367: XAPI: allow PV and PVH kernels in /var/lib/xcp/guest too- CA-375359 & CP-42286: Rename `sessions per second` to `sessions/s`- CP-41796 enable HTTPS migration by default- CP-41796 prevent changes to https_only in CC_PREPARATIONS=true * Wed Mar 08 2023 Rob Hoes - 23.8.0-1- CA-375427: Make DP.destroy idempotent again- CA-364049: Tell external auth plugins to use python3- CA-375634: Move probe-device-for-file to Python 3 * Fri Mar 03 2023 Rob Hoes - 23.7.0-1- CP-40847: synchronize read-only uefi-certificates field for both host & pool * Thu Mar 02 2023 Rob Hoes - 23.6.0-1- [maintenance] Makefile: add a rule to write out a compile_flags.txt- CA-375274: xenctrlext: fix wrong number of arguments to interface_open and unshadow- CA-375273: xenctrlext: fix race conditions- [maintenance] direct_copy_stubs.c: uerror is available in caml/unixsupport.h- [maintenance] vhd-tool/direct_copy_stubs: fix setting of O_DIRECT flag- [maintenance] add .editorconfig: use spaces instead of tabs in C files- CA-375106: tuntap_stubs.c: raise Unix.error instead of failwith- CA-375276: xenctrlext_stubs.c: xc_get_last_error is not thread safe, use just errno which is- [maintenance] xa_auth_stubs.c: move free inside the blocking section- CA-375280: xe-toolstack-restart: stop and start all services at once- python/XenAPI: Replace import six.moves with stdlib imports- Allow to use a CIDR for VIFs IPv4 and IPv6 allowed IPs- CP-41730: Limit ldap query timeout for subject information- python/setup.cfg: Fix deprecated dash-separated key- python: Use xapi\'s versioning scheme for XenAPI package- ci: use official gh cli for release workflow- CP-40388: Rename SMAPIv3 feature VDI_ATTACH_READONLY- CP-40388: define VDI_ACTIVATE_READONLY in Smint- CP-40388: store SR feature table upon mux registration- CP-40388: store attach mode (rw/ro) with datapath in mux- CP-40388: Add VDI.activate_readonly to the storage interface- CP-41675: add new field override_uefi_certs to xapi.conf- CP-41675: xapi-start behaves according to field override-uefi-certs in xapi.conf- CP-41672: wipe the contents of the pool.uefi_certificates during upgrade- CP-40847: CP-42007: make pool.uefi-certificates field read-only- CP-41675: fix idempotent behaviour of Helpers.FileSys.rmrf- CP-42007: platform:secureboot=auto means platform:secureboot=true always- CP-42007: separate error msg from exception generation * Fri Feb 17 2023 Rob Hoes - 23.5.0-1- ci: fix docs upload of xapi-storage- CP-42173: xenctrlext: stop using xentoolog bindings- Remove log spam about leaked VDI locks at startup- Fix storage_smapiv1_wrapper log name- Storage mux: filter out duplicates in SR.list- CA-375256: Fix storage initialisation on xapi startup * Fri Feb 10 2023 Christian Lindig - 23.4.0-2- CP-40650 Remove vtpm feature restriction (i.e., enable feature) * Fri Feb 10 2023 Rob Hoes - 23.4.0-1- Reorganise the storage API layer in xapi and xapi-storage-script * Wed Feb 08 2023 Pau Ruiz Safont - 23.3.0-1- CA-374989: add default values for removed fields- CA-374989: Revert \"CP-40357: Purge all removed fields from the database and clients\"- CA-374989: Bump datamodel version * Thu Feb 02 2023 Pau Ruiz Safont - 23.2.0-1- Stop generating classes for the XmlRpcProxy.- CP-33338: write physical-device-path to xenstore for nbd devices- maintenance: commit calculated changes for datamodel_lifecycle- CP-39806: use updated C function names for ocaml 4.14- CP-40065: Delete VTPM contents when VM is deleted- CP-40065: Add VTPMs to the database garbage collector- CP-41812: Add total_sessions_count RRD- CP-41818: Branding and copyright updates for the SDK * Mon Jan 30 2023 Pau Ruiz Safont - 23.1.0-2- Bump release and rebuild * Mon Jan 30 2023 Pau Ruiz Safont - 23.1.0-1- CA-374872: error when `BOND_MEMBERS` is not in `management.conf` * Fri Jan 27 2023 Pau Ruiz Safont - 23.0.0-1- xcp-rrdd: add interface for rrdd_server- CA-374274: Provide more information when datasource is not found- CA-362358: Filter out new files when refreshing directory of certificates- Filter out new.pem in cert_distrib- Support bond at firstboot- CP-41444 Added actions_after_softreboot field to VM for Xenopsd soft_reboot- xenopsd: use uuid instead of deprecated uuidm functions- message-switch: conform to new APIs in jst libs- xapi-storage-script: conform to new APIs in jst libs- xen-api-client: conform to new APIs in jst libs- stream_vdi, import: conform to new APIs in tar- gencert: conform to new APIs in x509- xapi-guard, xen-api-client: conform to new APIs in conduit- message-switch, vhd-tool: drop io-page-unix- nbd: change ocaml-nbd usage- session_check: add action name in the error returned- datamodel_lifecycle: update latest APIs * Thu Jan 26 2023 Pau Ruiz Safont - 22.37.0-1- CA-374238: prevent copying of removed fields when reverting snapshots * Mon Jan 23 2023 Pau Ruiz Safont - 22.36.0-1- Makefile: install and uninstall xapi-schema using dune- install xapi-schema libraries as part of xapi-datamodel-devel * Thu Jan 19 2023 Pau Ruiz Safont - 22.35.0-1- CP-40357: Enable computation of correct API lifecycles- CP-40357: Patch invalid lifecycles- CP-40357: Statically parse all the datamodel lifecycles- CP-40357: separate schema modules into xapi-schema package- database / idl: reduce code complexity- CP-40357: Change comment on failure to load db row- CP-40357: Avoid loading removed fields into the database- xapi_version: extract \"git_id\" from version- CP-40357: Remove oss_deprecation_since:None- CP-40357: Integrate state into the datamodel\'s lifecycle- CP-40357: Purge all removed fields from the database and clients- CP-40357 (idl/json): Only show latest entity change in a release- CP-41450: The SDK sample code has moved to a different repo.- Stop installing internal headers. Create dll symlink for cygwin.- opam: synchronize opam metadata with xs-opam- xapi-storage{,-script}: explicitely use python2 instead of python- Add new bias_enabled field to pool datamodel- Make bias against scheduling vms on pool master configurable- Switch from Xenctrl.hvm_check_pvdriver to Xenctrl.hvm_param_get- Corrected repo link in the README.- ci: avoid github API deprecation warnings- xenctrlext_stubs: fix xfm_open parameter mismatch- CP-40946 Make ATTACH_READONLY consistent with other features- CA-373776 Added unhandled exception handler to nbd to log errors instead of the messages being printed to the host console- CP-41366: Rename Citrix Hypervisor to XenServer- Fix extra `/` in https redirection- CA-373785: Deny HTTP requests on website_https_only- maintenance: use generated datamodel_lifecycle * Tue Dec 13 2022 Rob Hoes - 22.34.0-2- Bump release and rebuild * Mon Dec 12 2022 Rob Hoes - 22.34.0-1- Update lifecycle for pool.migration_compression- CA-373551: register for host events rather than task in events_from_xapi * Thu Dec 08 2022 Rob Hoes - 22.33.0-1- CP-40404: Add C# NuGet specs in its csproj- CP-40404: Move C# SDK samples to .NET 6.0- CP-41213: swtpm-wrapper should not fiddle with cgroups- CP-40404: Do not specify assembly info in `AssemblyInfo.cs`- CP-40404: Build C# SDK to .NET Framework 4.5- CA-372785 make with-vdi more robust- CP-40404: Replace deprecated module manifest member with `RootModule`- Fix missing `Reference` value in PS SDK cmdlets output- Modify Xenctrlext to use its own libxc handle- CP-40404: Do not specify PS SDK assembly info in `AssemblyInfo.cs`- CP-40404: Update Powershell and C# SDK READMEs- CP-41348: Convert swtpm-wrapper to Python 3- Redirect fileserver towards https- CA-371790: Restrict the permissions on pool tokens- Xenctrl: drop interface_close- CP-41279: add migration_compression pool option * Fri Nov 18 2022 Rob Hoes - 22.32.0-1- CA-342527: Remove unnecessary list traversals on rbac.check- xapi/rbac: Remove the non-\"efficient\" code path- xapi/rbac_audit: do not audit rrd_updates- CA-371780: Reduce cost of merge_new_dss- rbac_audit: refactor module- CA-372128: DB performance optimisations- CA-140252: fix flag handling- CP-40190: vTPM - Fix xenopsd to indicate correct state file format to swtpm-wrapper.- CP-40747: Add certificate checking options to sparse_dd and vhd-tool- CP-33044 define attach/detach IDL calls for gpumon- CA-371780: Port xcp-rrdd tests to alcotest- CA-371780: Reduce overheads in update_rrdds- CP-40823 Edited Vdi.t in xapi/storage_impl.ml to record vm- CP-40823 Created tests to the modules in storage_impl- CP-41028: enable certificate checking for storage migrations- CP-40190: Prevent SWTPM from filling dom0 root partition- xenopsd: define uncaught-exception handler- CA-369444: Ensure xenopsd still starts if VM state upgrade fails- CA-371419: Always log exceptions when responding with 500 Internal Error- CA-369690: Prioritize loglines when backing up RRDs- CA-369690: Reduce logging produced by xmlrpc_client- Debug: remember previous log names per thread in a stack- Do not log out session in xapi events loop to re-register VMs- Enable HTTPS for storage migration on the source * Thu Nov 17 2022 Christian Lindig - 22.31.0-2- CP-33044 install gpumon-cli * Tue Nov 01 2022 Rob Hoes - 22.31.0-1- CA-370575: [XSI-1310] Driver disks / supp packs applied at host- CA-370947 increase robustness of with-vdi script- CA-364194: Add a comment on static-vdis for a timeout enhancement- CA-364194: add timeout parameter to script callers in xapi- CA-364194: Allow creation of statefiles to time out- CA-370578 use subsystemId in NVidia GPU matching- maintenance: explicitely declare direct dependencies- ci: add xapi-log and xapi-open-uri- idl/json_backend: Process unreleased versioned releases- ocaml/idl: make gen_lifecycle compatible with gitless spec building- idl/json_backend: order releases from latest to oldest- CA-370082: Block multiple definitions of certificate-chain in xe cli- maintenance: avoid traversing lists twice when reading cli params- exit with error if add_vswitch_port fails- Revert `uuidx` rename in `gen_powershell_binding.ml`- xapi-idl: make storage-test be part of a package- opam: update metadata- xenopsd/dbgring: don\'t mention xenmmap dependency- CA-371759: check certificates in xsh- CP-40490: Require --force parameter to destroy VTPMs- xapi-cli-server/cli_ops: reuse --force message- xapi: group import error and cause into the same line- CP-39134: xapi-guard: do not hardcode rpc function - allow for unit testing- CP-39134: xapi-guard: separate code into own library for testability- CP-39134: basic unit test for xapi-guard- CP-39134: xapi-guard: add unit tests for bad values- CP-39134: varstore-guard: use inotify to wait for the apperance of the socket- Maintenance: xapi-guard: use Lwt.Syntax instead of Lwt.Infix- CP-39134: add shutdown unit test- CP-39134: quality gate fixups- xapi-guard/test: Count file descriptors- CP-41033: install XenAPI to Python 3- CP-41033: update XenAPIPlugin for Python3- idl/ocaml_backend: do not generate empty docstrings- idl/gen_server: Remove custom functions- CA-352073: gen_server: Serialize lists in [ ... ] form- CA-352073: Prepare to reuse defaults unmarshalling code- CA-352073: Ensure all serialized calls can pass rbac checks- CP-41033: further updates to XenAPIPlugin for Python3 * Wed Oct 12 2022 Rob Hoes - 22.30.0-1- CP-40402: Move C# and Powershell SDK Generation to .NET- opam: Update Alpine deps for xapi- CP-40754: Sync host.https_only fields on startup- CA-370140: shut down swtpm after qemu- CP-40755: Allow memory+storage+vGPU migrate to use HTTPS only- Update JSON backend for modern xapi releases- CA-368579: Mitigations against DoS attacks by unauthenticated clients (now upstream, replacing patch queue) * Wed Oct 12 2022 Rob Hoes - 22.29.0-1- CP-40753 host.set_https_only updates firewall using firewall_port_config_script helper- CP-40753 Added change to the firewall-port script to modify the RH-Firewall-1-INPUT chain- Update Makefile (un)install targets * Wed Oct 12 2022 Rob Hoes - 22.28.0-1- Revert \"Add a fallback system for auth files belonging to RPMs\"- Rename Uuid module to Uuidx- Move good_ciphersuites from Xcp_consts to Constants- Move logging lib from xapi-idl to its own package- Move Open_uri from xapi-idl to its own package- Add HTTPS support to open-uri- idl: update datamodel_lifecycle after tag- xenopsd/xc: Print all information in Service_failed exceptions- CP-39744: simplify vm_platform.sanity_check parameters- CP-39744: Block BIOS VMs with vTPM attached from booting- CP-40775: share function raising not done for vtpm exceptions- CA-370858: disallow VM exports with VTPMs attached * Wed Oct 12 2022 Rob Hoes - 22.27.0-1- Add a fallback system for auth files belonging to RPMs- CA-370084: Test pem with DOS line endings- Update lifecycle for VTPM datamodel- xapi-cli-server: change vm record to show \"vtpms\"- CA-370731: remove obsoleted copies of ca certs in the db- CA-370731: Allow pool to recover from duplicate ca certs- CP-33973 disable DMC; fix unit test- CP-40767 CP-40429 Migration Compression - define Zstd.Fast, more- CP-40749 Added https_only field- CP-40750 Added set_https_only function- CP-40751 Added and implemented Pool.set_https_only- CP-40752 Added CLI functionality for a pool level getter and setter- configure.ml: inject version number here- xapi-xenopsd.opam: declare zstd as dependency- maintenance: Remove obsolete version-gathering methods * Fri Oct 07 2022 Rob Hoes - 22.26.0-2- CA-368579: Mitigations against DoS attacks by unauthenticated clients * Fri Sep 09 2022 Rob Hoes - 22.26.0-1- Introduce vTPM * Mon Aug 22 2022 Rob Hoes - 22.25.0-1- XenAPI.py: Simplify and fix UDSTransport implementation- CP-40375: Allow cert clients to perform VM.shutdown and VM.start_on- CP-37225: Added unmarshalling code for Ocaml\'s Set(Set string) for C.- Fix quicktest\'s -default-sr parameter- CP-40392 compress vGPU migration stream- CA-369599: ignore invalid references on eject- maintenance: factor out Ref.to_option and Helpers.ignore_invalid_ref * Mon Aug 08 2022 Pau Ruiz Safont - 22.24.0-2- Bump release and rebuild * Fri Jul 29 2022 Rob Hoes - 22.24.0-1- CP-39894: move xenopsd\'s daemon modules from device to service- xenopsd/xc/service: add licensing header- CP-39894: move all varstored starting code to service module- CP-39894: move vgpu starting code to service module- CP-39894: Replace is_pidfile and pid_path with pid_location- CP-39894: tweak Service.Qemu interface- CP-39894: Use pid_location for file and xenstore cleanups- CA-366479: Remove Qemu\'s pidfile on domain shutdown- Factor out Throttle module- Update datamodel_lifecycle.ml only when changed- ci: generate releases from tags, upload XenAPI python lib- CHCLOUD-717: Spawn a thread to run xe-toolstack-restart- CP-40155 Parallelize Host.evacuate- CP-37091: Updated samples and fixed some code issues in the Java SDK.- CP-37225: Added unmarshalling code for Ocaml\'s Set(Set string) for C# and PS.- Removed dependency on 3rd party libraries from the PS module project.- CP-37091: Fixed some code issues in the PowerShell SDK.- CA-368910: Allow destruction of PVS_cache_storage if SR is already gone- CA-368437 remove duplicate keys from SM.features- CA-368806: Workaround pbis get wedged- CP-40175: Strip metadata of non-applicable livepatches- CA-347473: Minor memory leak from unloaded Xen livepatches (#4762)- CA-367236 replace Ezjsonm with Yojson * Wed Jul 06 2022 Rob Hoes - 22.23.0-1- CP-40027 VM migration introduce /services/xenops/migrate-mem- CP-39640/CP-39157 Add stream compression for VM migration- Add matching Synchronisation point 1-mem ACK log on receiver- Allow VBD.plug to dom0 again * Tue Jul 05 2022 Pau Ruiz Safont - 22.22.0-1- CA-365946: Block VIF and VBD hotplug into dom0- Update datamodel lifecycle- CP-39805: Adapt xenopsd\'s cli to new cmdliner- CP-39805: Adapt rrd tools to new cmdliner interface- CP-39805: Adapt xapi-storage-cli to new cmdliner- CP-39805: Adapt vhd-tool to new cmdliner- CP-39805: Adapt xcp_service to new cmdliner interface- CP-39805: Adapt xapi-guard to new cmdliner- CP-39805: Adapt message-switch to new cmdliner- CP-39805: Adapt xapi-gzip to new cmdliner- CP-39805: Adapt nbd to new cmdliner- CP-39805: Adapt idl clis to new cmdliner and rpclib- CP-39805: Adapt xcp_service to new cmdliner- CP-39805: Adapt xapi-idl binaries to new cmdliner- CP-39805: Adapt xapi-storage(-script) to new cmdliner- maintenance: consolidate idl\'s cli client argument parsing- CP-39805: update tests to be compatible with rpclib +8.1.2- xapi-idl: clients now better report cli errors- maintenance: make gzip rules compatible with the dune cache * Mon Jun 27 2022 Rob Hoes - 22.21.0-1- xenopsd/xc: do not log error when querying for migrability- CP-39996: Generate and push docs to xapi-storage- CP-39806: remove code without a stable formatting- CP-39806: avoid opening Threadext modules- CA-365604: Support external user ssh into dom0 with name in unicode- CA-367979: Bugfix - Wrong format of livepatch in returned updateinfo- CA-368069: Got wrong kernel base build_id- CP-39877: define activate_readonly method for SMAPIv3- Remove unused xenopsd/Makefile and qemu-dm-wrapper- CA-367979: Bugfix - Add RebootHost guidance wrongly when a livepatch failed- CA-367979: Bugfix - Add new unit test for livepatch failure case- CA-367979: Return changed guidance from host.apply_updates- CA-367979: Bugfix - Remove RebootHostOnLivePatchFailure after a completion of update- Refine unit test of eval_guidance_for_one_update * Wed Jun 08 2022 Rob Hoes - 22.20.0-1- CA-367738: Short-circuit auth of HTTP requests without auth header- CA-365905 (XSI-1215): Create a temporary file in the target download folder (...)- CA-355432: Fixed generation of method overloads.- CP-39884: generalise interface to gzip/zstd-like tools- CP-37091: Do not use a loop for only one iteration.- CP-36245: Refine merge_livepatches function- CP-32574: Apply livepatches- CP-38583: add Host.last_software_update field with data/time- maintenance: make xapi-xenops-tests more granular- maintenance: move tests for platformdata together- Use file type for is_raw_image()- XenAPI.py: define how to build package in pyproject.toml- xapi: avoid spawning processes- Added Repository Update Unit Tests * Wed May 18 2022 Rob Hoes - 22.19.0-1- libs/uuid: run tests only in the uuid package- CP-39805: Avoid deprecated bindings in mtime- Datamodel: replace some recent rel_next entries- CA-366801: xsh: fix XAPI blob sync and EBADF- CP-38688 introduce Message.destroy_many() API/CLI call- Upgrade VM runtime state when xenopsd restarts- CA-367120: Missing net new RPMs in picking up metadata from updateinfo- CA-367120: Add un-installed packages into accumulative update list- CA-367120: Add debug logs for outputs of YUM/RPM command lines- CP-38688 make Message.destroy_many() async, too- XSI-1246/CA-367232: Daily license re-apply fails is HA is enabled- Filter input dns when reconfiguring a pif IP(v6)- CA-366309: ignore HA when checking update readiness * Tue May 10 2022 Christian Lindig - 22.18.0-2- CP-39640 add zstd dependency for suspend/migration stream compression * Wed Apr 27 2022 Rob Hoes - 22.18.0-1- CA-366014: pass -dm qemu to UEFI qemu too- CP-39551: avoid warnings in xapi- Don\'t use --force in gzip decompress- CP-34028: Replace Uuidm with Uuid wherever possible- CP-32574: Life-patch support part 1- CA-366098: Raise internal xenopsd error on task timeout * Wed Apr 20 2022 Rob Hoes - 22.17.0-1- Add binary xapi_gzip for testing Xapi_compression- CA-366430: do not wipe PK.auth/dbx.auth * Tue Apr 19 2022 Rob Hoes - 22.16.0-1- CA-366428: Add temporary feature \'Internal_repo_access\' to allow update in mix mode- Add `9pfs` backend to vbds- Sync varstore certificates in XAPI with those on disks- CP-39551: avoid warnings- Fixes regarding DNS management in IPv6- ci: fix testing of xapi-xenstored in newer opam\'s sandboxes * Wed Apr 13 2022 Rob Hoes - 22.15.0-1- CA-364138 XSI-1217: fix FD leak, Unix.EMFILE- CA-365900: Clean up remanent stunnel client proxy- CA-359978: Flush IP addresses when switching from static to DHCP- CA-355588: users in pool admin group which contains # can not ssh into dom0- CP-35846: Restrict access to internal yum repo server (members only) * Fri Apr 01 2022 Rob Hoes - 22.14.0-1- CA-363700: update xenopsd platformdata if rtc-timeoffset changes- CA-365474: Synchronize trust roots at startup- Make Xapi_compression.compress more polymorphic * Mon Mar 28 2022 Rob Hoes - 22.13.0-1- CA-365130: print exception on backup failure- CA-365130: Print the name of signals in FE exceptions- CA-365121: pool join: require common xapi versions- CA-364021: reload certificates offered after emergency-reset-server-certificate- CA-365438: Retrieve updateinfo.xml.gz file path from repomd- CA-365438: Retrieve group file path from repomd- CA-365516: CLI: protect cmdtable population with mutex- CP-33973: disable DMC- Fix and extend bugtool plugins * Wed Mar 23 2022 Rob Hoes - 22.12.0-2- Add dependency on pvsproxy to xcp-networkd * Tue Mar 15 2022 Rob Hoes - 22.12.0-1- CA-364630: Add [post|put]_services_xenops to client auth permission list- CA-364450: Fix YUM repo config for repo metadata checking- CP-39209: Add new field \'gpgkey_name\' in repository object- CA-364138: log when about to stop varstored and varstore-guard- CA-365279: Client-cert auth: use CAfile- CP-39375: Remove RPM gpgcheck in reposync- CA-365112: Permit pool admin username with space to ssh login- Fist point of cert exchange: keep all operations- maintenance(ocaml): remove warnings- maintenance: avoid using Cstruct.len- maintenance: replace Lwt_unix.yield usages- maintenance: dedicate a test binary for repository test_repository_helpers- maintenance: remove most usages of Re.Str * Thu Mar 03 2022 Rob Hoes - 22.11.0-1- CP-38450: Add pool.set_wlb_enabled permission for client auth- REQ-403 add cert checking for clusterd * Mon Feb 28 2022 Rob Hoes - 22.10.0-1- CA-363903: Winbind does not rotate keytab file- CA-363903: Enable UPN format in hcp_users- CA-363903: Rotate machine password on Closest KDC- CA-362704: Hide proxy_username and proxy_password for repo proxy- CA-362704: Remove credential related info from remote repository conf file * Mon Feb 21 2022 Rob Hoes - 22.9.0-1- CP-39031 keep more xapi version details for Host.software_versions- CP-38462: Recognise ethtool-advertise on PIFs- CP-38763: Enforce kerberos protocol talking with DC * Tue Feb 15 2022 Rob Hoes - 22.8.0-2- Bump release and rebuild with OCaml 4.13.1 compiler. * Mon Feb 14 2022 Rob Hoes - 22.8.0-1- CP-38610: Automatically record the versions of new datamodel elements- Update lifecycles for existing API elements- Update version comparison for numbered versions- Replace rel_next with actual versions- CA-363633: Always take the generation-id directly from xapi * Wed Feb 09 2022 Rob Hoes - 22.7.0-1- xenopsd: explicitly clean VM state if VM_restore failed during VM_receive_memory- CA-363207: SSH access failing when using AD groups with spaces in name- XSI-791/CA-343760: Make reboot equal to shutdown+start for CPUID changes- CA-362924: Fix typo when syncing repository fails- XSI-1175 make message limit configurable- Maintenance: reformat with new ocamlformat version- CA-363391: fix wake-on-lan script- Use Filename to concat varstore dir and file- CA-363154: Use repoquery to get available updates- CA-363154: Remove usage of \'yum list updates\'- CA-363154: Ignore errors in repo update- CA-363154: Use repoquery to get installed packages * Thu Feb 03 2022 Rob Hoes - 22.6.0-1- CA-361209: When using WoL find the remote physical PIF- CA-361209: add vlan references to PIF\'s cli records- REQ-403 Enable TLS verification by default- REQ-403 make cron job for cert rotation conditional- Fixes to prepare for OCaml upgrade * Wed Jan 26 2022 Rob Hoes - 22.5.0-1- CP-38850 add xapi.conf option for cert-expiration-days- nbd: include the test binary into xapi-nbd package- ocaml/tests: workaround opam\'s sandbox on db upgrade test- use TMPDIR on tests if possible- CP-38892: add role.is_internal field- Update API version; record yangtze schema version * Tue Jan 11 2022 Rob Hoes - 22.4.0-1- Merge varstored-guard * Mon Jan 10 2022 Rob Hoes - 22.3.0-1- Merge sm-cli * Mon Jan 10 2022 Rob Hoes - 22.2.0-1- Merge xapi-nbd * Mon Jan 10 2022 Rob Hoes - 22.1.0-1- Merge wsproxy * Mon Jan 10 2022 Rob Hoes - 22.0.0-1- fix (http-svr): allow : in passwords when using basic auth- maintenance (http-svr): simplify base64.decode usage * Fri Dec 17 2021 Rob Hoes - 21.4.0-1- xapi/import: report duplicate mac seeds on import as such- Add `ignore_vdis` to `VM.snapshot` method- Fix description of configure_repository_proxy- CP-38759: Add pool.disable_repository_proxy- CP-38701: Restrict client-cert role- CA-361988 execute cluster host_resync always locally * Fri Dec 10 2021 Edwin Török - 21.3.0-3- Add coverity macros * Tue Dec 07 2021 Edwin Török - 21.3.0-2- CP-38218: obsolete xsi{f,o}stat by installing xapi-rrd2csv * Fri Dec 03 2021 Rob Hoes - 21.3.0-1- add setter for `Task.result` & `Task.error_info`- Use stunnel proxy to access internal YUM repo- Enable to set a `Task`\'s `resident_on` field.- CA-361151: Ldap does not work for cross domain 1-way trust- CA-361151: remove \'winbind offline logon = Yes\'- CA-361221: utf8_recode: use Uutf.{Buffer.add_utf_8,String.fold_utf_8} instead of Uutf.{encode,decoder}- CA-361221: utf8_recode: avoid allocations if string is all utf8- CA-361220: Do not leak xsclient thread- CA-361220: xenopsd: introduce TASK.destroy_on_finish- CA-361220: xenopsd: avoid space leak in VM.import_metadata_async- CP-35957: Update datamodel_pool for pool.configure_repository_proxy- CP-35957: Add repository proxy configurations in syncing * Thu Nov 25 2021 Rob Hoes - 21.2.0-2- Bump release and rebuild * Thu Nov 25 2021 Rob Hoes - 21.2.0-1- Introduce session.client_cert field- CA-360754: exclude client-cert sessions from revalidation- CA-360951: Failed to lookup workgroup from domain as DNS cache * Wed Nov 24 2021 Edwin Török - 21.1.0-2- Bump release and rebuild * Tue Nov 23 2021 Rob Hoes - 21.1.0-1- Fix typo in message name- CA-360997: Don\'t reject imports if the host\'s major version is larger * Fri Nov 19 2021 Rob Hoes - 21.0.0-1- Import message-switch, xcp-idl, xapi-storage, xapi-storage-script * Tue Nov 16 2021 Rob Hoes - 1.331.0-1- CA-359869: Make Sysfs.list robust against disappearing devices- CA-360634: Change the allowed role of host.apply_updates to pool operator- CA-360485: Fix SR-IOV capability detection- CA-359714: update-precheck: fix uninitialised variable- CA-360577: Add RBAC checking for client cert HTTPs requests * Wed Nov 10 2021 Rob Hoes - 1.330.0-3- Bump release and rebuild * Mon Nov 08 2021 Christian Lindig - 1.330.0-1- CA-359975: set the IP in /etc/issue on first boot- Copied README from last draft, and actually signning the commit this time- Making comment start with an uppercase- CP-38309 make TLS more explicit in clusterd interface * Wed Oct 27 2021 Edwin Török - 1.329.0-1- vhd-tool: stress test compatibility with python3- vhd-tool: Adapt stress-test to alcotest 1.0- CP-38046: Add token in pool.sync_updates to support repository client authentication * Thu Oct 21 2021 Rob Hoes - 1.328.0-1- Merge xcp-networkd * Thu Oct 21 2021 Rob Hoes - 1.327.0-1- CA-356541 migration debug msg: ensure host is defined- Replace ETCDIR by ETCXENDIR everywhere in scripts/ * Tue Oct 19 2021 Rob Hoes - 1.326.0-1- Merge xenopsd and squeezed * Wed Oct 13 2021 Rob Hoes - 1.325.0-1- stunnel/gencert services: use Wants rather than Requires * Wed Oct 13 2021 Rob Hoes - 1.324.0-1- CHCLOUD-109: Remove checking on \'description\' field in updateinfo- CA-357075: Handle error from get_cluster_config call during RPU- CA-359835: Enable \'Updates\' feature in rolling pool update * Mon Oct 11 2021 Rob Hoes - 1.323.0-1- Maintenance: remove warnings- CA-359214: Only restart stunnel if the config file has changed * Fri Oct 01 2021 Rob Hoes - 1.322.0-1- XenAPI.Session: raise exception on attempted forwarding of python magic methods- CA-358904 REQ-403 cross pool migration must not use cert checking- CA-356358: enable clustering daemon before attempting RPC call to fetch pems- CA-358326 log cron job for cert refresh in syslog- Remove old-style xva import code (finally)- xe: remove prefix-match workaround- CA-357785: Stop metrics binaries from logging to stdout- maintenance: remove option to daemonize metric collectors- CA-359226 add fist point to backdate new certs during testing * Wed Sep 22 2021 Rob Hoes - 1.321.0-1- Merge tapctl and vhd-tool- Upgrade to dune 2.0 * Tue Sep 21 2021 Rob Hoes - 1.320.0-1- CA-358904 REQ-403 cross pool migration must not use cert checking- CA-359076: avoid DB calls when starting management server- CP-38206: Merge xen-api-libs-transitional * Fri Sep 17 2021 Rob Hoes - 1.319.0-1- CA-358898: handle IPv6 state when management disabled * Thu Sep 16 2021 Rob Hoes - 1.318.0-1- CP-35393: Introduce client_certificate_auth- CP-34726: Use a separate service and port for the client cert auth- CP-34727: configure unix socket for client certificate auth- CP-36249: Reconfigure management server when en/disabling client certificate auth- CP-37692: Introduce RBAC role for client-auth sessions- Use port 443 for client certificate auth (again)- Duplicate cipher options in stunnel SNI service- Change role for repository-related calls to pool-operator- CP-37598: Add feature flag to restrict updates from a repository- Fix missing xenopsd diagnostics from bugtools- Fix handling of web-dir parameter- CA-356959: Decide user account locked out by lockoutTime- CA-358568: Password expired could not show on XenCenter- CA-358816: Updated subject name in DC does not get updated in pam * Mon Sep 13 2021 Rob Hoes - 1.317.0-4- CA-358445: move %pre section to xcp-rrdd subpackage * Mon Sep 06 2021 Rob Hoes - 1.317.0-3- CA-358445: add rrdmetrics group (missing in xcp-rrdd merge) * Fri Sep 03 2021 Rob Hoes - 1.317.0-2- Bump release and rebuild * Thu Sep 02 2021 Rob Hoes - 1.317.0-1- CP-37370 add certificate-refresh to cron.daily- CP-37370 revert this for release: use cron.hourly * Wed Sep 01 2021 Rob Hoes - 1.316.0-1- Specsavers: merge xcp-rrdd- CP-37590: Replaced negative language within `FriendlyErrorNames.resx`- CP-37590: Replaced negative language within `datamodel_errors.ml`- CP-37590: Remove useless override in C# SDK generation- Amend typos in errors datamodel- Undo TLS verification change from v1.315.0, which was incomplete * Thu Aug 26 2021 Christian Lindig - 1.315.0-1- Enable TLS verification by default * Wed Aug 25 2021 Christian Lindig - 1.314.0-1- CA-357025 enable TLS cert checking for pool and WLB together * Wed Aug 25 2021 Christian Lindig - 1.313.0-1- Add datamodel option to log Db.X.destroy calls- CA-356441: reload-or-restart sshd to apply sshd configuration- REQ-403 CA-356724 unix time serial number to xapi-pool-tls.pem- Stunnel.reload: wait 5s by default- CA-355657 wait before serving refrehed SSL cert- Fix issue #4491: USB device reset for Privileged VMs (with PCI device attached) is not working due to bad argument \'-r\'- CP-36863: Expose local YUM repository only on TLS interface- CA-357151 REQ-403 add joiner\'s ca certs to db- CA-357151 REQ-403 consistent output about ca certs- CA-356854 REQ-403 ejected hosts come back with verification enabled- REQ-403 revert me! FIRSTBOOT_ENABLE_TLS_VERIFICATION=false- CP-37866 add Host.tls_verification_enabled field- CA-354374: Update pool_cpuinfo and pool_features after the ejected host having been destroyed- CP-37898: Make winbind encryption types configurable- CA-357417 REQ-403 ensure valid cert alerts are not deleted * Mon Aug 09 2021 Edwin Török - 1.312.0-4- Re-enable upgrade-pbis-to-winbind * Mon Aug 02 2021 Rob Hoes - 1.312.0-3- Temporarily revert upgrade-pbis-to-winbind requirement * Thu Jul 29 2021 Rob Hoes - 1.312.0-1- Merge winbind feature branch- REQ-403 change type of cert generated during cert refresh * Thu Jul 29 2021 Rob Hoes - 1.311.0-1- CP-37571 REQ-403 add fist to Cert_distrib.exchange_certificates_in_pool * Thu Jul 29 2021 Rob Hoes - 1.310.0-1- REQ-403: failed_login_alert_freq- Add explicit package to dune tests- REQ-403 concurrency fixes pt 4- Revert \"REQ-403 concurrency fixes pt 4\"- maintenance: add copyright to cert_distrib files- REQ-403 use pool ops rather than cert distrib mutex- REQ-403 replace exchange_certificates_on_join lock- REQ-403 remove exchange_certificates_among_all_members lock- REQ-403 replace exchange_ca_certificates_with_joiner lock- REQ-403 replace copy_primary_host_certs lock- REQ-403 pool ejectees should remove trusted ca certs- ci: run format on future feature and lcm branches- configure: work around read-only /tmp found in opam\'s 2.1.0- CA-356977 REQ-403 fix broken external auth for Host.reset_server_certificate * Mon Jul 19 2021 Rob Hoes - 1.309.1-1- Revert \"Remove unused function\"- qualitygate: expect 1 instance of \"==\" * Mon Jul 19 2021 Rob Hoes - 1.309.0-1- Import xen-api client- CP-36098 don\'t refresh certs if any host offline- quality-gate: error if somebody used physical equality- REQ-403 define how to generate cluster certificates- REQ-403 give cluster daemon pem information- CP-36097 REQ-403 write_pem API impl- CP-36097 REQ-403 cluster must have a pem file before enabling tls verification- CP-36097 REQ-403 cluster pems never expire- CP-36097 REQ-403 use result monad rather than exceptions in selfcert- CP-36097 REQ-403: maybe restart cluster daemon on cert refresh * Thu Jul 08 2021 Christian Lindig - 1.308.0-1- CA-355629 use hostname for CN in host cert * Mon Jul 05 2021 Rob Hoes - 1.307.0-1- CP-36098 introduce host-refresh-server-certificates- CP-36098 add path argument to Gencertlib.Lib.install_server_certificate- CP-36098 new API: host.refresh-host-certficate- CP-36098 introduce pool op cert_refresh- CA-355657 XSI-1037 reduce load during bugtool- Maintenance: fix unixpwd warnings about loosing const qualifier- Maintenance: fix indent in unixpwd- CA-341715: control-domain-params-init: skip on upgrade- CA-355625 reload Stunnel instead of restart after cert change- CA-355625 remove dead code- CA-341715: fix control-domain-params-init- REQ-403 copy_primary_host_certs API call- REQ-403 am i missing certs thread- REQ-403 only exchange certs between primary and joiner during pool.join- REQ-403 best effort distribution of joiner\'s pool certs to all hosts- REQ-403 check for missing certs only when db connection established * Fri Jun 25 2021 Edwin Török - 1.306.0-1- REQ-403 update_ca_bundle lock- Only add XAPI message for VM when migration is live and intrapool * Thu Jun 24 2021 Edwin Török - 1.305.0-1- Remove unnecessary scope restriction Result- CA-354414 perform best effort Pool.eject cleanups- REQ-403 cert_distrib lock- CA-355571: Include accumulative updates for updates description and guidances- CA-355571: Refine precedence between guidances- CA-355571: Unit Tests: Include accumulative updates for updates description and guidances- CA-355571: Unit Tests: Refine precedence between guidances- Add more messages to a VM lifecycle * Fri Jun 11 2021 Rob Hoes - 1.304.0-1- CA-354260 REQ-403: check certs haven\'t expired before installing them- CA-354834 log ref, uuid when adding CA cert- Fix update-ca-bundle.sh hangling of deleted certs- CP-37014 verify TLS-based RPC before enabling it- CA-354834 log ref, uuid when adding CA cert- CA-355179: Support epoch in RPM- CA-355179: Support epoch in RPM: Update unit tests- CA-355179: Support epoch in RPM: Add unit tests- CA-355180: Improve parsing output of \'yum list updates\'- Added missing release date and restored as yet unreleased versions in the API docs.- Build the doc-json target as part of the install target. Restructured output.- Remove pool.slave_network_report- Audit log: extend suppression to calls with _ separators- CP-36178: Add basic precheck function for updates- Removed rel_honolulu as it contained no API changes. Updated last_known_schema_hash.- fixup! CA-355179: Support epoch in RPM- Fix SDK build * Thu May 27 2021 Rob Hoes - 1.303.0-1- CA-354689 don\'t fail if host cert to be removed doesn\'t exist- Maintenance: reformat code- xapi_pool_helpers: refactor call_fn_on_hosts- C# SDK: Fixes to generated code:- CP-35955: Datamodel: Add pending_guidances for host- CP-35955: Datamodel: Add pending_guidances for VM- CP-35955: Bump up last_known_schema_hash- CP-35955: Add absolute guidances in pending_guidances- CP-35955: Clean up pending guidances- CA-355039: Support single guidance from one update in updateinfo.xml- Adapt xe-reset-networking for IPv6 * Thu May 20 2021 Rob Hoes - 1.302.0-1- CP-35348 cover alerts for internal and CA certificates- xapi-cli-protocol: make unit-tests runnable- fix: cli protocol tests cannot depend on xapi-cli-server- xe-enable-ipv6 edits net.ipv6.conf.{ all | default }.disable_ipv6- Maintenance: replace deprecated Listext.assoc- Set IPv6 parameters in check_network_reset- cert_distrib: refactor go method- CP-36866: Generalize code for certificate distribution- CP-36866: block pool join when ca certificates might conflict- CP-36866: Distribute CA certificates on join * Mon May 17 2021 Rob Hoes - 1.301.0-1- Centaurus repository APIs: merge from feature/centaurus/master-1 * Mon May 10 2021 Rob Hoes - 1.300.0-1- CP-35523: Always accept requests from the unix socket * Fri May 07 2021 Rob Hoes - 1.299.0-1- CP-35523: Block access to the website on port 80 * Thu May 06 2021 Rob Hoes - 1.298.0-1- CP-36744: Allow users to reenable tls cert checking- CA-329462 Cluster.create should clean up if it fails- ci: quality-gate shell script- CA-353388: Control debug level by debug_stunnel env variable- CP-36658 remove certs of host when it is ejected- CA-349123: Tweak previous hotplug fix- CA-353553 add API error for when NVidia GPU is misconfigured- CA-353747 accept RSA and EC private key headers in PEM- CA-353747 add negative test case- CP-34467: Exchange certificate when a hosts joins a pool- CP-34467: simplify certificate distribution * Tue Apr 27 2021 Rob Hoes - 1.297.0-1- CP-34467: Pre-join checks for TLS verification- CA-353309: Create correct filters for uninstalling ca certs- CP-34467: Avoid Not_found error when getting remote pool- CP-36750: Block enabling TLS verification on pool ops- Enable to choose a migration network in `VM.pool_migrate`:- CA-349123: Fix metadata race in VBD/VIF plug * Thu Apr 22 2021 Rob Hoes - 1.296.0-1- REQ-403: Display expiry for certificates on the cli- CA-341715: Sync certificates after bringing up mgmnt IF- CP-36690 at startup, sync host certs with DB- CP-36690 fix update_certificates at startup * Wed Apr 14 2021 Rob Hoes - 1.295.0-2- Bump release and rebuild * Wed Apr 14 2021 Rob Hoes - 1.295.0-1- CP-36509 update db for xapi_ssl.pem on startup if changed- CP-36509 simplify cert decoding- CP-36509 add MLI for certificates_sync module- fixup! CP-36509 simplify cert decoding- CP-36099 REQ-403 add type:host_internal to cert db schema- CP-36099 REQ-403 add host_internal cert type to db utils- CP-36099 REQ-403 only produce alerts for `host certs- fixup! CP-36509 simplify cert decoding- REQ-403 file system helpers- REQ-403 declare cert related files/folders in xapi_globs- CP-36510 REQ-403 distribute certs during Pool.enable_tls_verification- CA-353011: Clean up certificates from unknown hosts- CP-34469 on pool eject, remove host certificates- XSI-995 handle case where pci doesn\'t exist in VM.power_state_reset * Thu Apr 01 2021 Rob Hoes - 1.294.0-1- CP-36100 extend update-ca-bundle to handle pool certs- maintenance: reformat- REQ-403: remove deprecated host cert (un)install calls- CA-36099 REQ-403 add name and type to certificate db record- CP-36099 REQ-403 comment about cert locations- REQ-403 CP-36099 remove / add certs to db when un / installing them- REQ-403 CP-36099 initialize rng- CP-36100-3 Use explicit config for TLS Stunnel verification- CP-36100-3 set TLS verification default at Xapi startup- CP-36100-3 verify VNC connections as a pool-level connection- CP-36100-3 change name of Stunnel.verification_config- CP-36100-3 make ~verify_cert:None more explicit- CP-36100-3 count verify_cert:None in Makefile- CP-36100-3 persist TLS emergency flag- README file was left out of the package.- CP-36100: format code around rrdd commands * Fri Mar 26 2021 Rob Hoes - 1.293.0-2- Bump release and rebuild * Fri Mar 12 2021 Rob Hoes - 1.293.0-1- Merge xen-api-sdk repo to \'ocaml/sdk-gen/\' from commit \'e278e5de021b0f354d2a98810cf77ad3a1b7de40\'- CP-36113: Added targets for compiling the SDK generator and generating the SDK source code.- Keep the java library and samples version in sync.- Added the xen-api-sdk package to the tests.- Auto-formatted files. * Wed Mar 10 2021 Konstantina Chremmou - 1.292.0-2- CP-36113: Merged the SDK into xapi. * Mon Mar 08 2021 Rob Hoes - 1.292.0-1- Initialise Mirage RNG on startup * Fri Mar 05 2021 Rob Hoes - 1.291.0-1- CP-36096: Generate two certificates at startup- CP-36096: serve the new certificate for xapi:pool clients- CA-352329: Revert original formatting of lists in xapi-cli-server- xapi-cli-server: Consolidate formatting on comma-separated lists- xapi-cli-server: consolidate formatting of semicolon-separated lists * Tue Mar 02 2021 Rob Hoes - 1.290.0-1- When creating bonds, use primary_member\'s primary_address_type- When creating tunnels, use transport_PIF\'s primary_address_type- When creating vlans, use tagged_PIF\'s primary_address_type- make format- When creating sriov networks, use physical_ref\'s primary_address_type- CA-352111: Do not output on cronjobs unless there\'s an error- xapi-cli-server: clean up imports and comments- xapi-cli-server: be consistent when showing list of references- xapi-cli-server: be consistent when showing lists- REQ-403 CP-33822 add IP address as SAN in self-signed certs- CP-36096: Move helper_hostname to xapi_aux- CP-36096: Move functions that collect hostnames and ip to xapi-aux- CP-36096: Hostnames for certificates are gathered consistently- CP-36096: Allow any number of IPs in SAN- CP-36096: Move format conversion of mgmt IP to the edge- CP-36096: generate x509 extensions when the issuer is- CP-33822: Use Unix.gethostname instead the hostname binary- maintenance: restrict the usage of read_localhost_info- Replace gethostbyname by getaddrinfo to support IPv6- CA-265116 rename and deprecate Pool cert functions- CA-265116 rename and deprecate Host cert funtions- CA-265116 use new names for cert functions- REQ-403 CP-34468 add Host.reset_server_certificate- REQ-403 add module to split PEM files- REQ-403 use Pem.parse_file- REQ-403 introduce path to CA certificates- REQ-403 CP-33822 enable_tls_verification- REQ-403 CP-34461 emergency disable tls verification- REQ-403 CP-34461 tls verification health check- CP-34942: Update pem library for angstrom 0.14.0+- REQ-403 CP-35584 deprecate wlb_verify_cert- CP-35761: Add feature flag for TLS certificate checking- REQ-403: add logging to cert related handlers- CA-351391: Make certificate alerts ignore CA certs- REQ-403 bump schema version- CP-34643: Reduce usage of Listext- maintenance: avoid warnings for unused names- CP-32669: Remove vendored PCI library * Tue Feb 23 2021 Rob Hoes - 1.289.0-1- CP-36094 add SNI to stunnel server config- Revert \"CA-342527: Avoid traversing lists when possible\"- CP-34472 expose User-Agent from a context- CP-34472 throw the correct error on auth failure- CP-34472 ensure auth error is thrown correctly- CP-34472 add ability to record login failures- CP-34472 actually record login failures- CP-34472 generate failed login alerts- REQ-403 CP-34472 include IP address in login fail alerts- REQ-403 CP-34472 use UTC in failed login alerts * Tue Feb 16 2021 Rob Hoes - 1.288.0-1- CA-342527: remove argument logging of VMPP messages- CA-342527: Avoid traversing lists when possible- xapi: remove unused json module- maintenance: detect schema updates which are missing version bumps- ci: count usages of List.hd- Remove usage of List.hd in gencert * Fri Feb 05 2021 Rob Hoes - 1.287.0-2- Bump release and rebuild * Tue Jan 26 2021 Rob Hoes - 1.287.0-1- Support IPv6 in vncproxy- ci: check whether code in PRs is formatted- XSI-804 ensure HVM boot params consistent- maintenance: default hvm boot policy constant- CA-351323 XSI-828 fix snapshot metadata lookup * Tue Jan 26 2021 Rob Hoes - 1.286.0-1- CA-343646: generate certificate alerts- CA-343646: Avoid using API when no alerts are going to be modified- maintenance: format code with ocamlformat- Allow migration on IPv6-only host * Wed Jan 06 2021 Rob Hoes - 1.285.0-2- Bump release and rebuild * Mon Jan 04 2021 Christian Lindig - 1.285.0-1- CP-34602: test get_server_localtime and message.get_since- Add ipv6 addresses to this_is_my_address- Wrap IPv6 addresses when creating URLs- Continue fixing console location in IPv6- CP-34643: Replace deprecated usages of pervasiveext * Wed Dec 16 2020 Christian Lindig - 1.284.0-1- CA-350253: cli_operations: use `set []` when clearing if available- CA-320523: records: implement setting of the map for `xenstore-data` * Wed Dec 02 2020 Christian Lindig - 1.283.0-1- CP-34942: update dmidecode parser for angstrom 0.14- CA-348700: Block VDI.copy if on-boot=reset * Fri Nov 27 2020 Christian Lindig - 1.282.0-1- Fix IPv6 console location * Fri Nov 20 2020 Christian Lindig - 1.281.0-1- ci: unpin packages on cleanup * Wed Nov 18 2020 Edwin Török - 1.280.0-3- Re-enabled automatic ocaml dependency generator * Wed Nov 18 2020 Edwin Török - 1.280.0-2- CA-349027: be explicit about the choice of sendmail implementation * Thu Nov 12 2020 Christian Lindig - 1.280.0-1- CA-332779: Update power_state first in force_state_reset_keep_current_ops- CA-332779: Avoid VM.remove in maybe_cleanup_vm- CA-347560: Call VM.import_metadata_async for MD updates * Tue Nov 10 2020 Christian Lindig - 1.279.0-1- CP-35021 VM.suspend - assert support for NVidia cards- CP-35021 introduce new API error for vGPU suspend * Thu Nov 05 2020 Christian Lindig - 1.278.0-1- CA-347543 use /usr/bin/pool_secret_wrapper only if CC * Thu Oct 29 2020 Christian Lindig - 1.277.0-1- CP-35210: log why a private key or certificates failed to validate- CP-32138: rely on systemd to have wsproxy available- maintenance: update github actions dependency- maintenance: Schedule weekly run for 1.249-lcm- ci: do not cache unversioned packages, update versiones ones- CA-347611 Revert \"CA-332779: Update power_state first in force_state_reset_keep_current_operations\"- CA-347611 Revert \"CA-332779: Avoid VM.remove in maybe_cleanup_vm\" * Thu Oct 22 2020 Christian Lindig - 1.276.0-1- CA-332779: Update power_state first in force_state_reset_keep_current_operations- CA-332779: Avoid VM.remove in maybe_cleanup_vm- CP-35026 tell stunnel to provide inet address info- CP-35026 utils for extracting IP addresses- CP-35026 add client field to Context.t- CP-35026 pass client info to the debug module- maintenance: format * Wed Oct 21 2020 Christian Lindig - 1.275.0-1- CA-333441 - restarting ISCSI daemon after setting initiator IQN- CA-333441: Do not fail the startup sequence if the iSCSI initiator cannot be set- maintenance: allow tests to run in a sandbox- fix: update ocamlformat metadata to work with 0.15.0- maintenance: format code with ocamlformat * Thu Oct 15 2020 Christian Lindig - 1.274.0-1- fix: correctly show add_to_sm_config to logs * Mon Oct 12 2020 Christian Lindig - 1.273.0-1- Revert \"CA-333441 - restarting ISCSI daemon after setting initiator IQN\" * Thu Oct 08 2020 Christian Lindig - 1.272.0-1- CP-34942: update for rpclib 7 compatibility- CP-34942: adapt to message-switch usage of result- CP-34942: update for rpclib 8 compatibility- CA-333441 - restarting ISCSI daemon after setting initiator IQN- opam: add jobs for build and tests for all packages * Mon Oct 05 2020 Christian Lindig - 1.271.0-1- CA-333441 - restarting ISCSI daemon after setting initiator IQN- Delete unimplemented HTTP action definitions- Remove misleading comment on expose_get_all_messages_for- CA-262525: add missing parameters to HTTP actions- Add 2 new methods to the `Host` object * Wed Sep 16 2020 Christian Lindig - 1.270.0-1- Branding for the Stockholm release.- CA-332605 Fixed Bad error message for vcpu/cores-per-socket- maintenance: make call_script interface cleaner- maintenance: reintroduce missing PSR unit tests- maintenance: remove AATT list concats in suite_alcotest- maintenance: remove reference to unused file- maintenance: Remove travis CI- maintenance: remove unused pool op valid assert from mli- define rel_next- REQ-819 CA-34357 add PSR feature flag- REQ-819 CA-34873 remove genptoken & genptoken.service- REQ-819 CP-33774 PSR orchestration- REQ-819 CP-33777 expose code to generate ptoken as a library- REQ-819 CP-33777 real implementation- REQ-819 CP-33777 store list of pool secrets rather than only one- REQ-819 CP-33780 add pool secret rotation fistpoints- REQ-819 CP-34357 add designate_new_master to pool operations- REQ-819 CP-34357 block PSR if any pool operations are in progress- REQ-819 CP-34379 don\'t proceed with rotation if PSR state is inconsistent- REQ-819 CP-34873 generate pool secrets optionally via script- REQ-819 CP-34936 don\'t log result from pool_secret_wrapper- REQ-819 make PSR and HA mutually exclusive- REQ-819 rel_next -> rel_stockholm_psr * Wed Sep 16 2020 Ben Anson - 1.269.0-2- REQ-819 CP-34873: remove genptoken services * Mon Sep 14 2020 Christian Lindig - 1.269.0-1- CA-344268: Fix timing issue in PBIS available check- CA-265116 clarify doc for CA Cert Revoc. Lists- CP-33823 replace generate_ssl_cert with OCaml code for more control * Mon Sep 14 2020 Christian Lindig - 1.268.0-1- CA-322708 - VM must not be allowed to start during storage migration * Tue Sep 08 2020 Christian Lindig - 1.267.0-1- XSI-795 CA-343951 fix Nvidia version parsing * Wed Sep 02 2020 Christian Lindig - 1.266.0-1- CA-343769 get CC_PREPARATIONS from xs-inventory- Do not lose backtrace in RBAC * Fri Aug 28 2020 Christian Lindig - 1.265.0-1- XSO-974: add full lifecycle to VM.last_booted_record- maintenance: formatting- maintenance: remove occurences of !=- maintenance: remove occurences of \' == \'- maintenance: ensure all fistpoints work as expected- Remove duplicate line from xapi.service- CP-33121: open listext from its own library- CP-33121: open xstringext from its own library- CP-33121: open unixext from its own library- CP-33121: open threadtext from its own library- CP-33121: open pervasiveext from its own library- CP-33121: open date from its own library- CP-33121: Remove all open Stdext- CP-33121: Stop depending on stdext * Mon Aug 17 2020 Christian Lindig - 1.264.0-1- CA-341155: Fix console refresh when starting management server- Remove Xapi_mgmt_iface.rebind- CA-342171 fix get_server_localtime- CA-343230 improve bewildering HTTP 403 error- CA-343230 assert (rather than assume) that update VBDs are attached- xapi_mgmt_iface: restructure- xapi_mgmt_iface: hide himn_addr ref from the interface- Remove Xapi_network.detach call from Xapi_vlan.destroy- Clear the HIMN state if the network is detached- CA-342551: Avoid replacing certificate alerts * Wed Aug 12 2020 Christian Lindig - 1.263.0-1- Improve HA parameter derived from timeout (#4169)- CA-343117: host-backup: Include /boot/efi in the tarball * Thu Jul 30 2020 Christian Lindig - 1.262.0-1- CA-319021 fixed resident_on field update issue- maintenance: make format- maintenance: do not link to system OCaml when using opam * Fri Jul 24 2020 Christian Lindig - 1.261.0-1- merger rrd2cvs into xapi- CP-34439: ensure rrd2csv compiles alongside xapi- CP-34439: tidy rrd2csv after merging into xapi * Tue Jul 21 2020 Christian Lindig - 1.260.0-1- CA-338596: Upload files limit should deal with the dot style- CA-338608: Limit xe client to download files specified in the args- opam: update dependencies- ci: add github actions * Fri Jul 17 2020 Rob Hoes - 1.259.0-2- Remove the patches, which have now been upstreamed. * Thu Jul 16 2020 Christian Lindig - 1.259.0-1- CP-33121: Remove unused dependency on stdext\'s fun module * Fri Jul 10 2020 Christian Lindig - 1.258.0-1- Increase sharing of strings in database- maintenance: remove Listext- CA-341988 don\'t take basename of empty update key * Fri Jul 03 2020 Christian Lindig - 1.257.0-1- CA-341149: Ensure a wait happen when the heartbeat connection fails- XSO-974: correctly reflect datamodel changes in stockholm- pci: fix tests for all distributions * Tue Jun 30 2020 Christian Lindig - 1.256.0-1- Branding for the Stockholm release * Sun Jun 28 2020 Konstantina Chremmou - 1.255.0-2- Removed patch with branding for the Stockholm release as it has moved to the repo. * Fri Jun 26 2020 Christian Lindig - 1.255.0-1- capitalise \'PEM\' in English translations of certificate error messages * Thu Jun 18 2020 Christian Lindig - 1.254.0-1- CA-340148: Format code with ocamlformat- Fix use of close_in/out on Unixfd.with_connection- CA-340776: disconnect from stunnel cleanly- CA-340776: move stunnel disconnection to the end where it was- maintenance: bump schema version- CA-335033 avoid idle connections during VDI copy * Tue Jun 16 2020 Christian Lindig - 1.253.0-1- maintenance: move tar_helpers to xapi_aux- maintenance: format code with ocamlformat * Tue Jun 16 2020 Christian Lindig - 1.252.0-1- fix pool config parsing * Mon Jun 15 2020 Christian Lindig - 1.251.0-1- CP-33121: remove stdext\'s hashtbl only usages- CP-33121: Remove stdext\'s range usages- CP-33121: remove stdext usages in xapi_vm_helpers- CP-33121: Remove stdext\'s usages from xapi_xenops- opam: add fedora depexts- maintenance: remove compilation warnings- CP-33121: remove stdext usages from xapi- CP-33121: remove stdext\'s usages from xapi-cli-server- maintenance: use label to remove warning- maintenance: add direct dependencies to dune files- CP-33121: remove stdext\'s usages from xapi-aux- maintenance: add missing transitive dependencies to dune files- maintenance: drop stringext dependency- mainteance: reduce reliaance on sexplib- adding sriov_configuration_mode `manual, Net.Sriov.enable return Manual_successful and respective handling * Fri Jun 12 2020 Christian Lindig - 1.250.0-1- Revert \"Revert \"CA-334811 assign xapi version automatically\"\"- Enable to create a VM in `Suspended` state with a `suspend_VDI` set- Allow migrate_send during RPU- Fix use of close_in/out on Unixfd.with_connection- CA-340776: disconnect from stunnel cleanly- maintenance: removed deprecated UTC assertion- restructed Tar to remove warnings- Open VxLAN port of VxLAN tunnels: * Mon Jun 01 2020 Christian Lindig - 1.249.0-1- maintenance: improve IMPORT_INCOMPATIBLE_VERSION error message- maintenance: fix build with workspaces- CA-337546: update to new Stunnel_cache API with Safe_resources support- CA-337546: enable runtime warnings- Revert \"CA-334811 assign xapi version automatically\" * Fri May 29 2020 Christian Lindig - 1.248.0-1- Format extauth_plugin_ADpbis- maintenance: improve logging when loading db backup fails- CA-334811 assign xapi version automatically- CA-338602: lwsmd daemon should not be running when AD is not configured- CA-338602: Enable nsswitch during bootup if host is authed with AD- CA-337867: Expose \'scheduled_to_be_resident_on\' to XAPI event- CA-339526 make gc_compact call public- CA-339329 firstboot scripts shouldn\'t sync DB when ugprading- CA-339656 use HOME when generating SSL certificate- CA-339656 print generate_ssl_cert output neatly- CA-339656 add generate_ssl_cert to essential executables- CA-338565: Improve error message for uploading file exceeds the limit.- CA-337867: Expose \'VM.scheduled_to_be_resident_on\' field (take 2) * Tue May 19 2020 Christian Lindig - 1.247.0-1- maintenance: prepare for ocamlformat * Mon May 18 2020 Christian Lindig - 1.246.0-1- CP-33121: Remove Stdext and Stdext.monadic usages from tests- CP-33121: Remove Stdext and Stdext.monadic from xapi_database- CP-33121: remove Stdext.monadic from quicktests- CP-33121: remove Stdext and Stdext.monadic from xapi_datamodel- CP-33121: Remove Stdext.Opt usages from xapi- maintenance: prefer using Option.fold * Mon May 18 2020 Christian Lindig - 1.245.0-1- CA-339601: source the iqn conf file. * Fri May 15 2020 Lin Liu - 1.244.0-2- CA-338596: Check filenames for xe upload and download files * Tue May 12 2020 Christian Lindig - 1.244.0-1- CA-338137: Fix upgrade case in generate-iscsi-iqn * Wed May 06 2020 Christian Lindig - 1.243.0-1- CA-336730 add debugging to help solve template timeout issue * Wed Apr 29 2020 Christian Lindig - 1.242.0-1- CA-338617: Use the FQDN if possible when generating certificates * Wed Apr 29 2020 Christian Lindig - 1.241.0-1- CA-334763: Show errors during metadata export/import- CP-33511 reduced XenAPI sessions to one per mail-alarm script invocation- CP-33511 code formatted using black- CP-27904: use Pci instead of Pciutils- CA-337113/CA-338521: No more Tools ISO by default- CA-338423: Remove use of Tools SR from Quicktest * Mon Apr 27 2020 Christian Lindig - 1.240.0-1- Merge REQ-821: Separate out xapi\'s CLI server into its own library- CP-33465: xapi-cli-server: initial library- CP-33473: Remove deprecated CLI commands.- CP-33457: Add field \'editions\' to host class.- CP-33457: Use RPC call in \'host_all_editions\' CLI implementation.- CP-33457: Get license editions by Host RPC call.- CP-33489: Remove direct use Xapi_role.expr_no_permissions in gen_cmds.- CP-33490: Remove use ExnHelper in CLI implementations- CP-33400: xe command check to make sure uploaded files- CP-33400: parse_eql use Astring lib- CP-33451: Create diagnostics class- CP-33503: Remove direct use of class_to_string and string_to_class in records.ml.- CP-33212: Restrict CLI upload file size- CP-33501: Move the \"fake\" RPC function into Xapi_cli- CP-33501: Avoid use of Context in Xapi_cli- CP-33452: cli server call Diagnostics.gc_compact to compact the heap- CP-33494: Add Task.set_progress API call- CP-33494: Eliminate uses of Db_actions and TaskHelper in Cli_operations- CP-33453: cli server call Diagnostics.gc_stats to retrieve gc stats- CP-33499: Refine cli_util.ml in CLI implementations.- CP-33454: cli server call API to retrieve db stats- CP-33455: cli server call Diagnostics.network_stats to- CP-33455: Only pass the necessary params to API call- CP-33493: Eliminate uses of Xapi_template in Cli_operations.- CP-33540: Remove Diagnostic function session argument- CP-33492: Remove use of Xapi_globs. * functions in CLI implementations- CP-33498: Remove dependency of storage_interface in cli_operations- CP-33492: Move the BIOS strings to constants.ml.- CP-33454: cli server call API to retrieve db stats- CP-33540: Fix sdk build failure by providing necessary docs- CP-33496: Remove use of Xapi_http module in cli_operations.ml.- CP-33496: Add Vpx_types in xapi types.- CP-33456: Clean diagnostic_license_status with permitted modules- CP-33551: Move Compression_algorithms into xapi_types- CP-33491: Move out the role setter in pool_role- CP-33496: Make xva.ml as module.- CP-33496: Move xapi-xva into xapi-public- CP-33496: Move table.ml to xapi-public- CP-33552: Add API get_attached_live_hosts to SR- CP-33556: Remove Importexport from cli server- CP-33497: Remove dependency of Helper.get_localhost and Context- CP-33552: Code refine basing on comments- Reduce opam packages, rename xapi-public- CP-33488: Move cli related files into xapi-cli-server folder.- CP-33556: Remove Importexport from cli server- Add xapi-inventory as dependency of xapi-consts.opam. * Thu Apr 23 2020 Christian Lindig - 1.239.0-1- Cp-32669: adapt tests to X509 0.11.0 * Tue Apr 21 2020 Christian Lindig - 1.238.0-1- CP-32678: Use a variant instead of a boolean for certificates- CP-32678: Add private key validation- CP-32678: Add server certificate validation- CP-32686: Don\'t generate diffie-hellman parameters- CP-32686: follow shellcheck recommendations- CP-32686: Server Certificate installation- CP-32681: Add certificates to DB schema- CA-265116: Better documentation for certificate API- CA-265116: Distinguish CA certificates from server ones- CP-32678: Return the certificate on install- CP-32678: Add API to install server certificates- CP-32678: Do not open stdext\'s Listext- CP-32678: Add CLI to install server certificates- CP-32681: store fingerprints as non-binary string- CP-32663: Usage more natural language on errors- CP-32696: Send expiring certificates alerts daily- CP-32706: add emergency call to install a self-signed cert- CA-337491: generate_ssl_cert now can replace existing servert cert- CP-32696: avoid alerts on the 31st day- CP-32696: Place message under a single root- CP-32696: Use a separate test runner for alerts- CA-337520: detect recently expired certificates as such- CP-32695: Use UTC for dates in certificate errors- CP-32708: prepare to detach install code from xapi- CP-32708: Move certificate installation and validation to gencert- CA-337731: reject files without certs for chains- CA-337865: clear expired certificate alerts- CA-337865: filter certificate alerts only once- CP-32663: bump schema version- CA-338141 mirror other_config when performing InternalAsync operation * Fri Apr 17 2020 Christian Lindig - 1.237.0-1- CA-337899 pass ciphersuites arg to sparse_dd- CA-334756: add missing capabilities to SM features table- CP-33292: add VDI read caching SM capability- CP-31118: Avoid xapi as module name in logs- CA-337929 remove gencert xapi-wait-init-complete dependency- CA-337903 insert stunnel into xapi shutdown order- CA-337875 base not always passed to sparse_dd * Tue Apr 14 2020 Christian Lindig - 1.236.0-1- CP-31116: simplify dbtest dune for database package- CP-28222: Reenable testing for pci- CP-28222: port db tests to alcotest and enable them on opam- CA-337087 avoid race condition in Helpers.Task.wait_for- CA-337087 fix uncancellable migrations * Mon Apr 06 2020 Ben Anson - 1.235.0-2- REQ-811: fix stunnel config in xapi.spec * Mon Apr 06 2020 Christian Lindig - 1.235.0-1- CP-33380: update to x509 0.10.0 * Fri Apr 03 2020 Christian Lindig - 1.234.0-1- maintenance: fix compiler warnings- CP-32840 fix xapi according to Stunnel changes- CA-32840 remove references to ciphersuites- CP-32840 stub out Host.set_ssl_legacy- CP-32840 deprecate ssl_legacy flag in host class- CP-32840 stub out legacy ssl operations on pools- CP-32840 xapi stunnel config shouldn\'t enable legacy options- CP-33058 centralize cipherstring- CP-32840 final clean up of legacy ssl related code/docs- CP-32840 fix xapi according to Stunnel changes- CA-32840 remove references to ciphersuites- CP-33058 centralize cipherstring- CP-33057 purge lingering stunnel configs- CP-33057 rewrite init.d-xapissl script in ocaml- CP-33057 replace usages of xapissl script with systemd- CP-33057 increase number of file descriptors for stunnelAATTxapi- CP-32840 enable fips for CC certification- maintenance: move paths to xapi_globs- CP-33243: gencert binary- CP-33243: create systemd gencert service- CA-336408 ensure legacy ssl is disabled on upgrade- CP-33061 remove iLO script- REQ-453 re-expose reconfigure_stunnel * Fri Mar 27 2020 Christian Lindig - 1.233.0-1- CA-336735: preserve formatting of stars for wlb recommendations * Mon Mar 23 2020 Christian Lindig - 1.232.0-1- improve invalid VIF map error message for intra-pool migration- Fix build: drop Xcp_coverage- Simplify build: drop coverage rewriter * Fri Mar 20 2020 Christian Lindig - 1.231.0-1- improve invalid VIF map error message for intra-pool migration- travis: follow validator recommendations * Tue Mar 17 2020 Christian Lindig - 1.230.0-1- maintenance: don\'t generate empty modules- CA-333610 generate multiple async client frontends- CA-333610 modify server.ml to accept InternalAsync calls- CP-32398 must not use POD when using SRIOV vGPU- CP-32649: Use Stdlib\'s Result- CA-336258: Remove unused function argument- CA-336258: fix API forwarder for JSONRPC calls- CA-333610 utility to try InternalAsync call with fallback- CA-333610 avoid long running idle connection during migration- maintenance: server_helpers interface file- CA-336685 improve error for mem constraints violation * Thu Mar 12 2020 Christian Lindig - 1.229.0-1- Fix cluster_stack_in_use error message- datamodel_common: add quebec release- CP-32678: update to X509 0.9.0- license: enable unit-tests- tests: move daily license checks to the suite * Fri Mar 06 2020 Christian Lindig - 1.228.0-1- CA-334951: Use a variant to model recommendations- CA-334951: Ignore 0-star recommendations from WLB- CA-334951: Code hygiene- CA-334951: Use a map instead of a hashtable- CP-33121: Stop using Xstringext in cli_operations * Mon Mar 02 2020 Christian Lindig - 1.227.0-1- maintenance: json files must not be executable * Mon Feb 24 2020 Christian Lindig - 1.226.0-1- CA-334909: Only update if the update is needed- CP-33121: remove Listext usages- CP-33121: reduce Stdext usages from xapi_vm- CP-33121: remove stdext usages from xapi_vm_appliance- CP-33121: Reduce usage of Xstringext- CP-33121: remove uneeded open lines | |