|
|
 |
|
|
Changelog for xapi-xe-22.20.0-1.2.xcpng8.3.x86_64.rpm :
* Thu Dec 01 2022 Benjamin Reis - 22.20.0-1.2- Add xapi-22.20.0-redirect-fileserver-https.backport.patch
* Wed Aug 31 2022 Samuel Verschelde - 22.20.0-1.1- Rebase on CH 8.3 Preview- Remove dependency to non-free packages again- Remove dependency to new non-free package pvsproxy- Remove patches merged upstream- Keep other patches still necessary.- Rediff xapi-22.20.0-fix-quicktest-default-sr-param.backport.patch- Add patch xenopsd-22.20.0-use-xcp-clipboardd.XCP-ng.patch, migrated from retired repo xenopsd- Rediff xenopsd-22.20.0-use-xcp-clipboardd.XCP-ng.patch and adapt paths- Remove ptoken.py and accesstoken.py yum plugins and their configuration- Add xapi-22.20.0-xenospd-dont-run-cancel-utils-test-as-unit-test.backport.patch to fix tests in koji
* Wed Jun 08 2022 Rob Hoes - 22.20.0-1- CA-367738: Short-circuit auth of HTTP requests without auth header- CA-365905 (XSI-1215): Create a temporary file in the target download folder (...)- CA-355432: Fixed generation of method overloads.- CP-39884: generalise interface to gzip/zstd-like tools- CP-37091: Do not use a loop for only one iteration.- CP-36245: Refine merge_livepatches function- CP-32574: Apply livepatches- CP-38583: add Host.last_software_update field with data/time- maintenance: make xapi-xenops-tests more granular- maintenance: move tests for platformdata together- Use file type for is_raw_image()- XenAPI.py: define how to build package in pyproject.toml- xapi: avoid spawning processes- Added Repository Update Unit Tests
* Wed May 18 2022 Rob Hoes - 22.19.0-1- libs/uuid: run tests only in the uuid package- CP-39805: Avoid deprecated bindings in mtime- Datamodel: replace some recent rel_next entries- CA-366801: xsh: fix XAPI blob sync and EBADF- CP-38688 introduce Message.destroy_many() API/CLI call- Upgrade VM runtime state when xenopsd restarts- CA-367120: Missing net new RPMs in picking up metadata from updateinfo- CA-367120: Add un-installed packages into accumulative update list- CA-367120: Add debug logs for outputs of YUM/RPM command lines- CP-38688 make Message.destroy_many() async, too- XSI-1246/CA-367232: Daily license re-apply fails is HA is enabled- Filter input dns when reconfiguring a pif IP(v6)- CA-366309: ignore HA when checking update readiness
* Tue May 10 2022 Christian Lindig - 22.18.0-2- CP-39640 add zstd dependency for suspend/migration stream compression
* Wed Apr 27 2022 Rob Hoes - 22.18.0-1- CA-366014: pass -dm qemu to UEFI qemu too- CP-39551: avoid warnings in xapi- Don\'t use --force in gzip decompress- CP-34028: Replace Uuidm with Uuid wherever possible- CP-32574: Life-patch support part 1- CA-366098: Raise internal xenopsd error on task timeout
* Wed Apr 20 2022 Rob Hoes - 22.17.0-1- Add binary xapi_gzip for testing Xapi_compression- CA-366430: do not wipe PK.auth/dbx.auth
* Tue Apr 19 2022 Rob Hoes - 22.16.0-1- CA-366428: Add temporary feature \'Internal_repo_access\' to allow update in mix mode- Add `9pfs` backend to vbds- Sync varstore certificates in XAPI with those on disks- CP-39551: avoid warnings- Fixes regarding DNS management in IPv6- ci: fix testing of xapi-xenstored in newer opam\'s sandboxes
* Wed Apr 13 2022 Rob Hoes - 22.15.0-1- CA-364138 XSI-1217: fix FD leak, Unix.EMFILE- CA-365900: Clean up remanent stunnel client proxy- CA-359978: Flush IP addresses when switching from static to DHCP- CA-355588: users in pool admin group which contains # can not ssh into dom0- CP-35846: Restrict access to internal yum repo server (members only)
* Fri Apr 01 2022 Rob Hoes - 22.14.0-1- CA-363700: update xenopsd platformdata if rtc-timeoffset changes- CA-365474: Synchronize trust roots at startup- Make Xapi_compression.compress more polymorphic
* Mon Mar 28 2022 Rob Hoes - 22.13.0-1- CA-365130: print exception on backup failure- CA-365130: Print the name of signals in FE exceptions- CA-365121: pool join: require common xapi versions- CA-364021: reload certificates offered after emergency-reset-server-certificate- CA-365438: Retrieve updateinfo.xml.gz file path from repomd- CA-365438: Retrieve group file path from repomd- CA-365516: CLI: protect cmdtable population with mutex- CP-33973: disable DMC- Fix and extend bugtool plugins
* Wed Mar 23 2022 Rob Hoes - 22.12.0-2- Add dependency on pvsproxy to xcp-networkd
* Tue Mar 15 2022 Rob Hoes - 22.12.0-1- CA-364630: Add [post|put]_services_xenops to client auth permission list- CA-364450: Fix YUM repo config for repo metadata checking- CP-39209: Add new field \'gpgkey_name\' in repository object- CA-364138: log when about to stop varstored and varstore-guard- CA-365279: Client-cert auth: use CAfile- CP-39375: Remove RPM gpgcheck in reposync- CA-365112: Permit pool admin username with space to ssh login- Fist point of cert exchange: keep all operations- maintenance(ocaml): remove warnings- maintenance: avoid using Cstruct.len- maintenance: replace Lwt_unix.yield usages- maintenance: dedicate a test binary for repository test_repository_helpers- maintenance: remove most usages of Re.Str
* Thu Mar 03 2022 Rob Hoes - 22.11.0-1- CP-38450: Add pool.set_wlb_enabled permission for client auth- REQ-403 add cert checking for clusterd
* Mon Feb 28 2022 Rob Hoes - 22.10.0-1- CA-363903: Winbind does not rotate keytab file- CA-363903: Enable UPN format in hcp_users- CA-363903: Rotate machine password on Closest KDC- CA-362704: Hide proxy_username and proxy_password for repo proxy- CA-362704: Remove credential related info from remote repository conf file
* Mon Feb 21 2022 Rob Hoes - 22.9.0-1- CP-39031 keep more xapi version details for Host.software_versions- CP-38462: Recognise ethtool-advertise on PIFs- CP-38763: Enforce kerberos protocol talking with DC
* Tue Feb 15 2022 Rob Hoes - 22.8.0-2- Bump release and rebuild with OCaml 4.13.1 compiler.
* Mon Feb 14 2022 Rob Hoes - 22.8.0-1- CP-38610: Automatically record the versions of new datamodel elements- Update lifecycles for existing API elements- Update version comparison for numbered versions- Replace rel_next with actual versions- CA-363633: Always take the generation-id directly from xapi
* Wed Feb 09 2022 Rob Hoes - 22.7.0-1- xenopsd: explicitly clean VM state if VM_restore failed during VM_receive_memory- CA-363207: SSH access failing when using AD groups with spaces in name- XSI-791/CA-343760: Make reboot equal to shutdown+start for CPUID changes- CA-362924: Fix typo when syncing repository fails- XSI-1175 make message limit configurable- Maintenance: reformat with new ocamlformat version- CA-363391: fix wake-on-lan script- Use Filename to concat varstore dir and file- CA-363154: Use repoquery to get available updates- CA-363154: Remove usage of \'yum list updates\'- CA-363154: Ignore errors in repo update- CA-363154: Use repoquery to get installed packages
* Thu Feb 03 2022 Rob Hoes - 22.6.0-1- CA-361209: When using WoL find the remote physical PIF- CA-361209: add vlan references to PIF\'s cli records- REQ-403 Enable TLS verification by default- REQ-403 make cron job for cert rotation conditional- Fixes to prepare for OCaml upgrade
* Wed Jan 26 2022 Rob Hoes - 22.5.0-1- CP-38850 add xapi.conf option for cert-expiration-days- nbd: include the test binary into xapi-nbd package- ocaml/tests: workaround opam\'s sandbox on db upgrade test- use TMPDIR on tests if possible- CP-38892: add role.is_internal field- Update API version; record yangtze schema version
* Tue Jan 11 2022 Rob Hoes - 22.4.0-1- Merge varstored-guard
* Mon Jan 10 2022 Rob Hoes - 22.3.0-1- Merge sm-cli
* Mon Jan 10 2022 Rob Hoes - 22.2.0-1- Merge xapi-nbd
* Mon Jan 10 2022 Rob Hoes - 22.1.0-1- Merge wsproxy
* Mon Jan 10 2022 Rob Hoes - 22.0.0-1- fix (http-svr): allow : in passwords when using basic auth- maintenance (http-svr): simplify base64.decode usage
* Fri Dec 17 2021 Rob Hoes - 21.4.0-1- xapi/import: report duplicate mac seeds on import as such- Add `ignore_vdis` to `VM.snapshot` method- Fix description of configure_repository_proxy- CP-38759: Add pool.disable_repository_proxy- CP-38701: Restrict client-cert role- CA-361988 execute cluster host_resync always locally
* Fri Dec 10 2021 Edwin Török - 21.3.0-3- Add coverity macros
* Tue Dec 07 2021 Edwin Török - 21.3.0-2- CP-38218: obsolete xsi{f,o}stat by installing xapi-rrd2csv
* Fri Dec 03 2021 Rob Hoes - 21.3.0-1- add setter for `Task.result` & `Task.error_info`- Use stunnel proxy to access internal YUM repo- Enable to set a `Task`\'s `resident_on` field.- CA-361151: Ldap does not work for cross domain 1-way trust- CA-361151: remove \'winbind offline logon = Yes\'- CA-361221: utf8_recode: use Uutf.{Buffer.add_utf_8,String.fold_utf_8} instead of Uutf.{encode,decoder}- CA-361221: utf8_recode: avoid allocations if string is all utf8- CA-361220: Do not leak xsclient thread- CA-361220: xenopsd: introduce TASK.destroy_on_finish- CA-361220: xenopsd: avoid space leak in VM.import_metadata_async- CP-35957: Update datamodel_pool for pool.configure_repository_proxy- CP-35957: Add repository proxy configurations in syncing
* Thu Nov 25 2021 Rob Hoes - 21.2.0-2- Bump release and rebuild
* Thu Nov 25 2021 Rob Hoes - 21.2.0-1- Introduce session.client_cert field- CA-360754: exclude client-cert sessions from revalidation- CA-360951: Failed to lookup workgroup from domain as DNS cache
* Wed Nov 24 2021 Edwin Török - 21.1.0-2- Bump release and rebuild
* Tue Nov 23 2021 Rob Hoes - 21.1.0-1- Fix typo in message name- CA-360997: Don\'t reject imports if the host\'s major version is larger
* Fri Nov 19 2021 Rob Hoes - 21.0.0-1- Import message-switch, xcp-idl, xapi-storage, xapi-storage-script
* Tue Nov 16 2021 Rob Hoes - 1.331.0-1- CA-359869: Make Sysfs.list robust against disappearing devices- CA-360634: Change the allowed role of host.apply_updates to pool operator- CA-360485: Fix SR-IOV capability detection- CA-359714: update-precheck: fix uninitialised variable- CA-360577: Add RBAC checking for client cert HTTPs requests
* Wed Nov 10 2021 Rob Hoes - 1.330.0-3- Bump release and rebuild
* Mon Nov 08 2021 Christian Lindig - 1.330.0-1- CA-359975: set the IP in /etc/issue on first boot- Copied README from last draft, and actually signning the commit this time- Making comment start with an uppercase- CP-38309 make TLS more explicit in clusterd interface
* Wed Oct 27 2021 Edwin Török - 1.329.0-1- vhd-tool: stress test compatibility with python3- vhd-tool: Adapt stress-test to alcotest 1.0- CP-38046: Add token in pool.sync_updates to support repository client authentication
* Thu Oct 21 2021 Rob Hoes - 1.328.0-1- Merge xcp-networkd
* Thu Oct 21 2021 Rob Hoes - 1.327.0-1- CA-356541 migration debug msg: ensure host is defined- Replace ETCDIR by ETCXENDIR everywhere in scripts/
* Tue Oct 19 2021 Rob Hoes - 1.326.0-1- Merge xenopsd and squeezed
* Wed Oct 13 2021 Rob Hoes - 1.325.0-1- stunnel/gencert services: use Wants rather than Requires
* Wed Oct 13 2021 Rob Hoes - 1.324.0-1- CHCLOUD-109: Remove checking on \'description\' field in updateinfo- CA-357075: Handle error from get_cluster_config call during RPU- CA-359835: Enable \'Updates\' feature in rolling pool update
* Mon Oct 11 2021 Rob Hoes - 1.323.0-1- Maintenance: remove warnings- CA-359214: Only restart stunnel if the config file has changed
* Fri Oct 01 2021 Rob Hoes - 1.322.0-1- XenAPI.Session: raise exception on attempted forwarding of python magic methods- CA-358904 REQ-403 cross pool migration must not use cert checking- CA-356358: enable clustering daemon before attempting RPC call to fetch pems- CA-358326 log cron job for cert refresh in syslog- Remove old-style xva import code (finally)- xe: remove prefix-match workaround- CA-357785: Stop metrics binaries from logging to stdout- maintenance: remove option to daemonize metric collectors- CA-359226 add fist point to backdate new certs during testing
* Wed Sep 22 2021 Rob Hoes - 1.321.0-1- Merge tapctl and vhd-tool- Upgrade to dune 2.0
* Tue Sep 21 2021 Rob Hoes - 1.320.0-1- CA-358904 REQ-403 cross pool migration must not use cert checking- CA-359076: avoid DB calls when starting management server- CP-38206: Merge xen-api-libs-transitional
* Fri Sep 17 2021 Rob Hoes - 1.319.0-1- CA-358898: handle IPv6 state when management disabled
* Thu Sep 16 2021 Rob Hoes - 1.318.0-1- CP-35393: Introduce client_certificate_auth- CP-34726: Use a separate service and port for the client cert auth- CP-34727: configure unix socket for client certificate auth- CP-36249: Reconfigure management server when en/disabling client certificate auth- CP-37692: Introduce RBAC role for client-auth sessions- Use port 443 for client certificate auth (again)- Duplicate cipher options in stunnel SNI service- Change role for repository-related calls to pool-operator- CP-37598: Add feature flag to restrict updates from a repository- Fix missing xenopsd diagnostics from bugtools- Fix handling of web-dir parameter- CA-356959: Decide user account locked out by lockoutTime- CA-358568: Password expired could not show on XenCenter- CA-358816: Updated subject name in DC does not get updated in pam
* Mon Sep 13 2021 Rob Hoes - 1.317.0-4- CA-358445: move %pre section to xcp-rrdd subpackage
* Mon Sep 06 2021 Rob Hoes - 1.317.0-3- CA-358445: add rrdmetrics group (missing in xcp-rrdd merge)
* Fri Sep 03 2021 Rob Hoes - 1.317.0-2- Bump release and rebuild
* Thu Sep 02 2021 Rob Hoes - 1.317.0-1- CP-37370 add certificate-refresh to cron.daily- CP-37370 revert this for release: use cron.hourly
* Wed Sep 01 2021 Rob Hoes - 1.316.0-1- Specsavers: merge xcp-rrdd- CP-37590: Replaced negative language within `FriendlyErrorNames.resx`- CP-37590: Replaced negative language within `datamodel_errors.ml`- CP-37590: Remove useless override in C# SDK generation- Amend typos in errors datamodel- Undo TLS verification change from v1.315.0, which was incomplete
* Thu Aug 26 2021 Christian Lindig - 1.315.0-1- Enable TLS verification by default
* Wed Aug 25 2021 Christian Lindig - 1.314.0-1- CA-357025 enable TLS cert checking for pool and WLB together
* Wed Aug 25 2021 Christian Lindig - 1.313.0-1- Add datamodel option to log Db.X.destroy calls- CA-356441: reload-or-restart sshd to apply sshd configuration- REQ-403 CA-356724 unix time serial number to xapi-pool-tls.pem- Stunnel.reload: wait 5s by default- CA-355657 wait before serving refrehed SSL cert- Fix issue #4491: USB device reset for Privileged VMs (with PCI device attached) is not working due to bad argument \'-r\'- CP-36863: Expose local YUM repository only on TLS interface- CA-357151 REQ-403 add joiner\'s ca certs to db- CA-357151 REQ-403 consistent output about ca certs- CA-356854 REQ-403 ejected hosts come back with verification enabled- REQ-403 revert me! FIRSTBOOT_ENABLE_TLS_VERIFICATION=false- CP-37866 add Host.tls_verification_enabled field- CA-354374: Update pool_cpuinfo and pool_features after the ejected host having been destroyed- CP-37898: Make winbind encryption types configurable- CA-357417 REQ-403 ensure valid cert alerts are not deleted
* Mon Aug 09 2021 Edwin Török - 1.312.0-4- Re-enable upgrade-pbis-to-winbind
* Mon Aug 02 2021 Rob Hoes - 1.312.0-3- Temporarily revert upgrade-pbis-to-winbind requirement
* Thu Jul 29 2021 Rob Hoes - 1.312.0-1- Merge winbind feature branch- REQ-403 change type of cert generated during cert refresh
* Thu Jul 29 2021 Rob Hoes - 1.311.0-1- CP-37571 REQ-403 add fist to Cert_distrib.exchange_certificates_in_pool
* Thu Jul 29 2021 Rob Hoes - 1.310.0-1- REQ-403: failed_login_alert_freq- Add explicit package to dune tests- REQ-403 concurrency fixes pt 4- Revert \"REQ-403 concurrency fixes pt 4\"- maintenance: add copyright to cert_distrib files- REQ-403 use pool ops rather than cert distrib mutex- REQ-403 replace exchange_certificates_on_join lock- REQ-403 remove exchange_certificates_among_all_members lock- REQ-403 replace exchange_ca_certificates_with_joiner lock- REQ-403 replace copy_primary_host_certs lock- REQ-403 pool ejectees should remove trusted ca certs- ci: run format on future feature and lcm branches- configure: work around read-only /tmp found in opam\'s 2.1.0- CA-356977 REQ-403 fix broken external auth for Host.reset_server_certificate
* Mon Jul 19 2021 Rob Hoes - 1.309.1-1- Revert \"Remove unused function\"- qualitygate: expect 1 instance of \"==\"
* Mon Jul 19 2021 Rob Hoes - 1.309.0-1- Import xen-api client- CP-36098 don\'t refresh certs if any host offline- quality-gate: error if somebody used physical equality- REQ-403 define how to generate cluster certificates- REQ-403 give cluster daemon pem information- CP-36097 REQ-403 write_pem API impl- CP-36097 REQ-403 cluster must have a pem file before enabling tls verification- CP-36097 REQ-403 cluster pems never expire- CP-36097 REQ-403 use result monad rather than exceptions in selfcert- CP-36097 REQ-403: maybe restart cluster daemon on cert refresh
* Thu Jul 08 2021 Christian Lindig - 1.308.0-1- CA-355629 use hostname for CN in host cert
* Mon Jul 05 2021 Rob Hoes - 1.307.0-1- CP-36098 introduce host-refresh-server-certificates- CP-36098 add path argument to Gencertlib.Lib.install_server_certificate- CP-36098 new API: host.refresh-host-certficate- CP-36098 introduce pool op cert_refresh- CA-355657 XSI-1037 reduce load during bugtool- Maintenance: fix unixpwd warnings about loosing const qualifier- Maintenance: fix indent in unixpwd- CA-341715: control-domain-params-init: skip on upgrade- CA-355625 reload Stunnel instead of restart after cert change- CA-355625 remove dead code- CA-341715: fix control-domain-params-init- REQ-403 copy_primary_host_certs API call- REQ-403 am i missing certs thread- REQ-403 only exchange certs between primary and joiner during pool.join- REQ-403 best effort distribution of joiner\'s pool certs to all hosts- REQ-403 check for missing certs only when db connection established
* Fri Jun 25 2021 Edwin Török - 1.306.0-1- REQ-403 update_ca_bundle lock- Only add XAPI message for VM when migration is live and intrapool
* Thu Jun 24 2021 Edwin Török - 1.305.0-1- Remove unnecessary scope restriction Result- CA-354414 perform best effort Pool.eject cleanups- REQ-403 cert_distrib lock- CA-355571: Include accumulative updates for updates description and guidances- CA-355571: Refine precedence between guidances- CA-355571: Unit Tests: Include accumulative updates for updates description and guidances- CA-355571: Unit Tests: Refine precedence between guidances- Add more messages to a VM lifecycle
* Fri Jun 11 2021 Rob Hoes - 1.304.0-1- CA-354260 REQ-403: check certs haven\'t expired before installing them- CA-354834 log ref, uuid when adding CA cert- Fix update-ca-bundle.sh hangling of deleted certs- CP-37014 verify TLS-based RPC before enabling it- CA-354834 log ref, uuid when adding CA cert- CA-355179: Support epoch in RPM- CA-355179: Support epoch in RPM: Update unit tests- CA-355179: Support epoch in RPM: Add unit tests- CA-355180: Improve parsing output of \'yum list updates\'- Added missing release date and restored as yet unreleased versions in the API docs.- Build the doc-json target as part of the install target. Restructured output.- Remove pool.slave_network_report- Audit log: extend suppression to calls with _ separators- CP-36178: Add basic precheck function for updates- Removed rel_honolulu as it contained no API changes. Updated last_known_schema_hash.- fixup! CA-355179: Support epoch in RPM- Fix SDK build
* Thu May 27 2021 Rob Hoes - 1.303.0-1- CA-354689 don\'t fail if host cert to be removed doesn\'t exist- Maintenance: reformat code- xapi_pool_helpers: refactor call_fn_on_hosts- C# SDK: Fixes to generated code:- CP-35955: Datamodel: Add pending_guidances for host- CP-35955: Datamodel: Add pending_guidances for VM- CP-35955: Bump up last_known_schema_hash- CP-35955: Add absolute guidances in pending_guidances- CP-35955: Clean up pending guidances- CA-355039: Support single guidance from one update in updateinfo.xml- Adapt xe-reset-networking for IPv6
* Thu May 20 2021 Rob Hoes - 1.302.0-1- CP-35348 cover alerts for internal and CA certificates- xapi-cli-protocol: make unit-tests runnable- fix: cli protocol tests cannot depend on xapi-cli-server- xe-enable-ipv6 edits net.ipv6.conf.{ all | default }.disable_ipv6- Maintenance: replace deprecated Listext.assoc- Set IPv6 parameters in check_network_reset- cert_distrib: refactor go method- CP-36866: Generalize code for certificate distribution- CP-36866: block pool join when ca certificates might conflict- CP-36866: Distribute CA certificates on join
* Mon May 17 2021 Rob Hoes - 1.301.0-1- Centaurus repository APIs: merge from feature/centaurus/master-1
* Mon May 10 2021 Rob Hoes - 1.300.0-1- CP-35523: Always accept requests from the unix socket
* Fri May 07 2021 Rob Hoes - 1.299.0-1- CP-35523: Block access to the website on port 80
* Thu May 06 2021 Rob Hoes - 1.298.0-1- CP-36744: Allow users to reenable tls cert checking- CA-329462 Cluster.create should clean up if it fails- ci: quality-gate shell script- CA-353388: Control debug level by debug_stunnel env variable- CP-36658 remove certs of host when it is ejected- CA-349123: Tweak previous hotplug fix- CA-353553 add API error for when NVidia GPU is misconfigured- CA-353747 accept RSA and EC private key headers in PEM- CA-353747 add negative test case- CP-34467: Exchange certificate when a hosts joins a pool- CP-34467: simplify certificate distribution
* Tue Apr 27 2021 Rob Hoes - 1.297.0-1- CP-34467: Pre-join checks for TLS verification- CA-353309: Create correct filters for uninstalling ca certs- CP-34467: Avoid Not_found error when getting remote pool- CP-36750: Block enabling TLS verification on pool ops- Enable to choose a migration network in `VM.pool_migrate`:- CA-349123: Fix metadata race in VBD/VIF plug
* Thu Apr 22 2021 Rob Hoes - 1.296.0-1- REQ-403: Display expiry for certificates on the cli- CA-341715: Sync certificates after bringing up mgmnt IF- CP-36690 at startup, sync host certs with DB- CP-36690 fix update_certificates at startup
* Wed Apr 14 2021 Rob Hoes - 1.295.0-2- Bump release and rebuild
* Wed Apr 14 2021 Rob Hoes - 1.295.0-1- CP-36509 update db for xapi_ssl.pem on startup if changed- CP-36509 simplify cert decoding- CP-36509 add MLI for certificates_sync module- fixup! CP-36509 simplify cert decoding- CP-36099 REQ-403 add type:host_internal to cert db schema- CP-36099 REQ-403 add host_internal cert type to db utils- CP-36099 REQ-403 only produce alerts for `host certs- fixup! CP-36509 simplify cert decoding- REQ-403 file system helpers- REQ-403 declare cert related files/folders in xapi_globs- CP-36510 REQ-403 distribute certs during Pool.enable_tls_verification- CA-353011: Clean up certificates from unknown hosts- CP-34469 on pool eject, remove host certificates- XSI-995 handle case where pci doesn\'t exist in VM.power_state_reset
* Thu Apr 01 2021 Rob Hoes - 1.294.0-1- CP-36100 extend update-ca-bundle to handle pool certs- maintenance: reformat- REQ-403: remove deprecated host cert (un)install calls- CA-36099 REQ-403 add name and type to certificate db record- CP-36099 REQ-403 comment about cert locations- REQ-403 CP-36099 remove / add certs to db when un / installing them- REQ-403 CP-36099 initialize rng- CP-36100-3 Use explicit config for TLS Stunnel verification- CP-36100-3 set TLS verification default at Xapi startup- CP-36100-3 verify VNC connections as a pool-level connection- CP-36100-3 change name of Stunnel.verification_config- CP-36100-3 make ~verify_cert:None more explicit- CP-36100-3 count verify_cert:None in Makefile- CP-36100-3 persist TLS emergency flag- README file was left out of the package.- CP-36100: format code around rrdd commands
* Fri Mar 26 2021 Rob Hoes - 1.293.0-2- Bump release and rebuild
* Fri Mar 12 2021 Rob Hoes - 1.293.0-1- Merge xen-api-sdk repo to \'ocaml/sdk-gen/\' from commit \'e278e5de021b0f354d2a98810cf77ad3a1b7de40\'- CP-36113: Added targets for compiling the SDK generator and generating the SDK source code.- Keep the java library and samples version in sync.- Added the xen-api-sdk package to the tests.- Auto-formatted files.
* Wed Mar 10 2021 Konstantina Chremmou - 1.292.0-2- CP-36113: Merged the SDK into xapi.
* Mon Mar 08 2021 Rob Hoes - 1.292.0-1- Initialise Mirage RNG on startup
* Fri Mar 05 2021 Rob Hoes - 1.291.0-1- CP-36096: Generate two certificates at startup- CP-36096: serve the new certificate for xapi:pool clients- CA-352329: Revert original formatting of lists in xapi-cli-server- xapi-cli-server: Consolidate formatting on comma-separated lists- xapi-cli-server: consolidate formatting of semicolon-separated lists
* Tue Mar 02 2021 Rob Hoes - 1.290.0-1- When creating bonds, use primary_member\'s primary_address_type- When creating tunnels, use transport_PIF\'s primary_address_type- When creating vlans, use tagged_PIF\'s primary_address_type- make format- When creating sriov networks, use physical_ref\'s primary_address_type- CA-352111: Do not output on cronjobs unless there\'s an error- xapi-cli-server: clean up imports and comments- xapi-cli-server: be consistent when showing list of references- xapi-cli-server: be consistent when showing lists- REQ-403 CP-33822 add IP address as SAN in self-signed certs- CP-36096: Move helper_hostname to xapi_aux- CP-36096: Move functions that collect hostnames and ip to xapi-aux- CP-36096: Hostnames for certificates are gathered consistently- CP-36096: Allow any number of IPs in SAN- CP-36096: Move format conversion of mgmt IP to the edge- CP-36096: generate x509 extensions when the issuer is- CP-33822: Use Unix.gethostname instead the hostname binary- maintenance: restrict the usage of read_localhost_info- Replace gethostbyname by getaddrinfo to support IPv6- CA-265116 rename and deprecate Pool cert functions- CA-265116 rename and deprecate Host cert funtions- CA-265116 use new names for cert functions- REQ-403 CP-34468 add Host.reset_server_certificate- REQ-403 add module to split PEM files- REQ-403 use Pem.parse_file- REQ-403 introduce path to CA certificates- REQ-403 CP-33822 enable_tls_verification- REQ-403 CP-34461 emergency disable tls verification- REQ-403 CP-34461 tls verification health check- CP-34942: Update pem library for angstrom 0.14.0+- REQ-403 CP-35584 deprecate wlb_verify_cert- CP-35761: Add feature flag for TLS certificate checking- REQ-403: add logging to cert related handlers- CA-351391: Make certificate alerts ignore CA certs- REQ-403 bump schema version- CP-34643: Reduce usage of Listext- maintenance: avoid warnings for unused names- CP-32669: Remove vendored PCI library
* Tue Feb 23 2021 Rob Hoes - 1.289.0-1- CP-36094 add SNI to stunnel server config- Revert \"CA-342527: Avoid traversing lists when possible\"- CP-34472 expose User-Agent from a context- CP-34472 throw the correct error on auth failure- CP-34472 ensure auth error is thrown correctly- CP-34472 add ability to record login failures- CP-34472 actually record login failures- CP-34472 generate failed login alerts- REQ-403 CP-34472 include IP address in login fail alerts- REQ-403 CP-34472 use UTC in failed login alerts
* Tue Feb 16 2021 Rob Hoes - 1.288.0-1- CA-342527: remove argument logging of VMPP messages- CA-342527: Avoid traversing lists when possible- xapi: remove unused json module- maintenance: detect schema updates which are missing version bumps- ci: count usages of List.hd- Remove usage of List.hd in gencert
* Fri Feb 05 2021 Rob Hoes - 1.287.0-2- Bump release and rebuild
* Tue Jan 26 2021 Rob Hoes - 1.287.0-1- Support IPv6 in vncproxy- ci: check whether code in PRs is formatted- XSI-804 ensure HVM boot params consistent- maintenance: default hvm boot policy constant- CA-351323 XSI-828 fix snapshot metadata lookup
* Tue Jan 26 2021 Rob Hoes - 1.286.0-1- CA-343646: generate certificate alerts- CA-343646: Avoid using API when no alerts are going to be modified- maintenance: format code with ocamlformat- Allow migration on IPv6-only host
* Wed Jan 06 2021 Rob Hoes - 1.285.0-2- Bump release and rebuild
* Mon Jan 04 2021 Christian Lindig - 1.285.0-1- CP-34602: test get_server_localtime and message.get_since- Add ipv6 addresses to this_is_my_address- Wrap IPv6 addresses when creating URLs- Continue fixing console location in IPv6- CP-34643: Replace deprecated usages of pervasiveext
* Wed Dec 16 2020 Christian Lindig - 1.284.0-1- CA-350253: cli_operations: use `set []` when clearing if available- CA-320523: records: implement setting of the map for `xenstore-data`
* Wed Dec 02 2020 Christian Lindig - 1.283.0-1- CP-34942: update dmidecode parser for angstrom 0.14- CA-348700: Block VDI.copy if on-boot=reset
* Fri Nov 27 2020 Christian Lindig - 1.282.0-1- Fix IPv6 console location
* Fri Nov 20 2020 Christian Lindig - 1.281.0-1- ci: unpin packages on cleanup
* Wed Nov 18 2020 Edwin Török - 1.280.0-3- Re-enabled automatic ocaml dependency generator
* Wed Nov 18 2020 Edwin Török - 1.280.0-2- CA-349027: be explicit about the choice of sendmail implementation
* Thu Nov 12 2020 Christian Lindig - 1.280.0-1- CA-332779: Update power_state first in force_state_reset_keep_current_ops- CA-332779: Avoid VM.remove in maybe_cleanup_vm- CA-347560: Call VM.import_metadata_async for MD updates
* Tue Nov 10 2020 Christian Lindig - 1.279.0-1- CP-35021 VM.suspend - assert support for NVidia cards- CP-35021 introduce new API error for vGPU suspend
* Thu Nov 05 2020 Christian Lindig - 1.278.0-1- CA-347543 use /usr/bin/pool_secret_wrapper only if CC
* Thu Oct 29 2020 Christian Lindig - 1.277.0-1- CP-35210: log why a private key or certificates failed to validate- CP-32138: rely on systemd to have wsproxy available- maintenance: update github actions dependency- maintenance: Schedule weekly run for 1.249-lcm- ci: do not cache unversioned packages, update versiones ones- CA-347611 Revert \"CA-332779: Update power_state first in force_state_reset_keep_current_operations\"- CA-347611 Revert \"CA-332779: Avoid VM.remove in maybe_cleanup_vm\"
* Thu Oct 22 2020 Christian Lindig - 1.276.0-1- CA-332779: Update power_state first in force_state_reset_keep_current_operations- CA-332779: Avoid VM.remove in maybe_cleanup_vm- CP-35026 tell stunnel to provide inet address info- CP-35026 utils for extracting IP addresses- CP-35026 add client field to Context.t- CP-35026 pass client info to the debug module- maintenance: format
* Wed Oct 21 2020 Christian Lindig - 1.275.0-1- CA-333441 - restarting ISCSI daemon after setting initiator IQN- CA-333441: Do not fail the startup sequence if the iSCSI initiator cannot be set- maintenance: allow tests to run in a sandbox- fix: update ocamlformat metadata to work with 0.15.0- maintenance: format code with ocamlformat
* Thu Oct 15 2020 Christian Lindig - 1.274.0-1- fix: correctly show add_to_sm_config to logs
* Mon Oct 12 2020 Christian Lindig - 1.273.0-1- Revert \"CA-333441 - restarting ISCSI daemon after setting initiator IQN\"
* Thu Oct 08 2020 Christian Lindig - 1.272.0-1- CP-34942: update for rpclib 7 compatibility- CP-34942: adapt to message-switch usage of result- CP-34942: update for rpclib 8 compatibility- CA-333441 - restarting ISCSI daemon after setting initiator IQN- opam: add jobs for build and tests for all packages
* Mon Oct 05 2020 Christian Lindig - 1.271.0-1- CA-333441 - restarting ISCSI daemon after setting initiator IQN- Delete unimplemented HTTP action definitions- Remove misleading comment on expose_get_all_messages_for- CA-262525: add missing parameters to HTTP actions- Add 2 new methods to the `Host` object
* Wed Sep 16 2020 Christian Lindig - 1.270.0-1- Branding for the Stockholm release.- CA-332605 Fixed Bad error message for vcpu/cores-per-socket- maintenance: make call_script interface cleaner- maintenance: reintroduce missing PSR unit tests- maintenance: remove AATT list concats in suite_alcotest- maintenance: remove reference to unused file- maintenance: Remove travis CI- maintenance: remove unused pool op valid assert from mli- define rel_next- REQ-819 CA-34357 add PSR feature flag- REQ-819 CA-34873 remove genptoken & genptoken.service- REQ-819 CP-33774 PSR orchestration- REQ-819 CP-33777 expose code to generate ptoken as a library- REQ-819 CP-33777 real implementation- REQ-819 CP-33777 store list of pool secrets rather than only one- REQ-819 CP-33780 add pool secret rotation fistpoints- REQ-819 CP-34357 add designate_new_master to pool operations- REQ-819 CP-34357 block PSR if any pool operations are in progress- REQ-819 CP-34379 don\'t proceed with rotation if PSR state is inconsistent- REQ-819 CP-34873 generate pool secrets optionally via script- REQ-819 CP-34936 don\'t log result from pool_secret_wrapper- REQ-819 make PSR and HA mutually exclusive- REQ-819 rel_next -> rel_stockholm_psr
* Wed Sep 16 2020 Ben Anson - 1.269.0-2- REQ-819 CP-34873: remove genptoken services
* Mon Sep 14 2020 Christian Lindig - 1.269.0-1- CA-344268: Fix timing issue in PBIS available check- CA-265116 clarify doc for CA Cert Revoc. Lists- CP-33823 replace generate_ssl_cert with OCaml code for more control
* Mon Sep 14 2020 Christian Lindig - 1.268.0-1- CA-322708 - VM must not be allowed to start during storage migration
* Tue Sep 08 2020 Christian Lindig - 1.267.0-1- XSI-795 CA-343951 fix Nvidia version parsing
* Wed Sep 02 2020 Christian Lindig - 1.266.0-1- CA-343769 get CC_PREPARATIONS from xs-inventory- Do not lose backtrace in RBAC
* Fri Aug 28 2020 Christian Lindig - 1.265.0-1- XSO-974: add full lifecycle to VM.last_booted_record- maintenance: formatting- maintenance: remove occurences of !=- maintenance: remove occurences of \' == \'- maintenance: ensure all fistpoints work as expected- Remove duplicate line from xapi.service- CP-33121: open listext from its own library- CP-33121: open xstringext from its own library- CP-33121: open unixext from its own library- CP-33121: open threadtext from its own library- CP-33121: open pervasiveext from its own library- CP-33121: open date from its own library- CP-33121: Remove all open Stdext- CP-33121: Stop depending on stdext
* Mon Aug 17 2020 Christian Lindig - 1.264.0-1- CA-341155: Fix console refresh when starting management server- Remove Xapi_mgmt_iface.rebind- CA-342171 fix get_server_localtime- CA-343230 improve bewildering HTTP 403 error- CA-343230 assert (rather than assume) that update VBDs are attached- xapi_mgmt_iface: restructure- xapi_mgmt_iface: hide himn_addr ref from the interface- Remove Xapi_network.detach call from Xapi_vlan.destroy- Clear the HIMN state if the network is detached- CA-342551: Avoid replacing certificate alerts
* Wed Aug 12 2020 Christian Lindig - 1.263.0-1- Improve HA parameter derived from timeout (#4169)- CA-343117: host-backup: Include /boot/efi in the tarball
* Thu Jul 30 2020 Christian Lindig - 1.262.0-1- CA-319021 fixed resident_on field update issue- maintenance: make format- maintenance: do not link to system OCaml when using opam
* Fri Jul 24 2020 Christian Lindig - 1.261.0-1- merger rrd2cvs into xapi- CP-34439: ensure rrd2csv compiles alongside xapi- CP-34439: tidy rrd2csv after merging into xapi
* Tue Jul 21 2020 Christian Lindig - 1.260.0-1- CA-338596: Upload files limit should deal with the dot style- CA-338608: Limit xe client to download files specified in the args- opam: update dependencies- ci: add github actions
* Fri Jul 17 2020 Rob Hoes - 1.259.0-2- Remove the patches, which have now been upstreamed.
* Thu Jul 16 2020 Christian Lindig - 1.259.0-1- CP-33121: Remove unused dependency on stdext\'s fun module
* Fri Jul 10 2020 Christian Lindig - 1.258.0-1- Increase sharing of strings in database- maintenance: remove Listext- CA-341988 don\'t take basename of empty update key
* Fri Jul 03 2020 Christian Lindig - 1.257.0-1- CA-341149: Ensure a wait happen when the heartbeat connection fails- XSO-974: correctly reflect datamodel changes in stockholm- pci: fix tests for all distributions
* Tue Jun 30 2020 Christian Lindig - 1.256.0-1- Branding for the Stockholm release
* Sun Jun 28 2020 Konstantina Chremmou - 1.255.0-2- Removed patch with branding for the Stockholm release as it has moved to the repo.
* Fri Jun 26 2020 Christian Lindig - 1.255.0-1- capitalise \'PEM\' in English translations of certificate error messages
* Thu Jun 18 2020 Christian Lindig - 1.254.0-1- CA-340148: Format code with ocamlformat- Fix use of close_in/out on Unixfd.with_connection- CA-340776: disconnect from stunnel cleanly- CA-340776: move stunnel disconnection to the end where it was- maintenance: bump schema version- CA-335033 avoid idle connections during VDI copy
* Tue Jun 16 2020 Christian Lindig - 1.253.0-1- maintenance: move tar_helpers to xapi_aux- maintenance: format code with ocamlformat
* Tue Jun 16 2020 Christian Lindig - 1.252.0-1- fix pool config parsing
* Mon Jun 15 2020 Christian Lindig - 1.251.0-1- CP-33121: remove stdext\'s hashtbl only usages- CP-33121: Remove stdext\'s range usages- CP-33121: remove stdext usages in xapi_vm_helpers- CP-33121: Remove stdext\'s usages from xapi_xenops- opam: add fedora depexts- maintenance: remove compilation warnings- CP-33121: remove stdext usages from xapi- CP-33121: remove stdext\'s usages from xapi-cli-server- maintenance: use label to remove warning- maintenance: add direct dependencies to dune files- CP-33121: remove stdext\'s usages from xapi-aux- maintenance: add missing transitive dependencies to dune files- maintenance: drop stringext dependency- mainteance: reduce reliaance on sexplib- adding sriov_configuration_mode `manual, Net.Sriov.enable return Manual_successful and respective handling
* Fri Jun 12 2020 Christian Lindig - 1.250.0-1- Revert \"Revert \"CA-334811 assign xapi version automatically\"\"- Enable to create a VM in `Suspended` state with a `suspend_VDI` set- Allow migrate_send during RPU- Fix use of close_in/out on Unixfd.with_connection- CA-340776: disconnect from stunnel cleanly- maintenance: removed deprecated UTC assertion- restructed Tar to remove warnings- Open VxLAN port of VxLAN tunnels:
* Mon Jun 01 2020 Christian Lindig - 1.249.0-1- maintenance: improve IMPORT_INCOMPATIBLE_VERSION error message- maintenance: fix build with workspaces- CA-337546: update to new Stunnel_cache API with Safe_resources support- CA-337546: enable runtime warnings- Revert \"CA-334811 assign xapi version automatically\"
* Fri May 29 2020 Christian Lindig - 1.248.0-1- Format extauth_plugin_ADpbis- maintenance: improve logging when loading db backup fails- CA-334811 assign xapi version automatically- CA-338602: lwsmd daemon should not be running when AD is not configured- CA-338602: Enable nsswitch during bootup if host is authed with AD- CA-337867: Expose \'scheduled_to_be_resident_on\' to XAPI event- CA-339526 make gc_compact call public- CA-339329 firstboot scripts shouldn\'t sync DB when ugprading- CA-339656 use HOME when generating SSL certificate- CA-339656 print generate_ssl_cert output neatly- CA-339656 add generate_ssl_cert to essential executables- CA-338565: Improve error message for uploading file exceeds the limit.- CA-337867: Expose \'VM.scheduled_to_be_resident_on\' field (take 2)
* Tue May 19 2020 Christian Lindig - 1.247.0-1- maintenance: prepare for ocamlformat
* Mon May 18 2020 Christian Lindig - 1.246.0-1- CP-33121: Remove Stdext and Stdext.monadic usages from tests- CP-33121: Remove Stdext and Stdext.monadic from xapi_database- CP-33121: remove Stdext.monadic from quicktests- CP-33121: remove Stdext and Stdext.monadic from xapi_datamodel- CP-33121: Remove Stdext.Opt usages from xapi- maintenance: prefer using Option.fold
* Mon May 18 2020 Christian Lindig - 1.245.0-1- CA-339601: source the iqn conf file.
* Fri May 15 2020 Lin Liu - 1.244.0-2- CA-338596: Check filenames for xe upload and download files
* Tue May 12 2020 Christian Lindig - 1.244.0-1- CA-338137: Fix upgrade case in generate-iscsi-iqn
* Wed May 06 2020 Christian Lindig - 1.243.0-1- CA-336730 add debugging to help solve template timeout issue
* Wed Apr 29 2020 Christian Lindig - 1.242.0-1- CA-338617: Use the FQDN if possible when generating certificates
* Wed Apr 29 2020 Christian Lindig - 1.241.0-1- CA-334763: Show errors during metadata export/import- CP-33511 reduced XenAPI sessions to one per mail-alarm script invocation- CP-33511 code formatted using black- CP-27904: use Pci instead of Pciutils- CA-337113/CA-338521: No more Tools ISO by default- CA-338423: Remove use of Tools SR from Quicktest
* Mon Apr 27 2020 Christian Lindig - 1.240.0-1- Merge REQ-821: Separate out xapi\'s CLI server into its own library- CP-33465: xapi-cli-server: initial library- CP-33473: Remove deprecated CLI commands.- CP-33457: Add field \'editions\' to host class.- CP-33457: Use RPC call in \'host_all_editions\' CLI implementation.- CP-33457: Get license editions by Host RPC call.- CP-33489: Remove direct use Xapi_role.expr_no_permissions in gen_cmds.- CP-33490: Remove use ExnHelper in CLI implementations- CP-33400: xe command check to make sure uploaded files- CP-33400: parse_eql use Astring lib- CP-33451: Create diagnostics class- CP-33503: Remove direct use of class_to_string and string_to_class in records.ml.- CP-33212: Restrict CLI upload file size- CP-33501: Move the \"fake\" RPC function into Xapi_cli- CP-33501: Avoid use of Context in Xapi_cli- CP-33452: cli server call Diagnostics.gc_compact to compact the heap- CP-33494: Add Task.set_progress API call- CP-33494: Eliminate uses of Db_actions and TaskHelper in Cli_operations- CP-33453: cli server call Diagnostics.gc_stats to retrieve gc stats- CP-33499: Refine cli_util.ml in CLI implementations.- CP-33454: cli server call API to retrieve db stats- CP-33455: cli server call Diagnostics.network_stats to- CP-33455: Only pass the necessary params to API call- CP-33493: Eliminate uses of Xapi_template in Cli_operations.- CP-33540: Remove Diagnostic function session argument- CP-33492: Remove use of Xapi_globs.
* functions in CLI implementations- CP-33498: Remove dependency of storage_interface in cli_operations- CP-33492: Move the BIOS strings to constants.ml.- CP-33454: cli server call API to retrieve db stats- CP-33540: Fix sdk build failure by providing necessary docs- CP-33496: Remove use of Xapi_http module in cli_operations.ml.- CP-33496: Add Vpx_types in xapi types.- CP-33456: Clean diagnostic_license_status with permitted modules- CP-33551: Move Compression_algorithms into xapi_types- CP-33491: Move out the role setter in pool_role- CP-33496: Make xva.ml as module.- CP-33496: Move xapi-xva into xapi-public- CP-33496: Move table.ml to xapi-public- CP-33552: Add API get_attached_live_hosts to SR- CP-33556: Remove Importexport from cli server- CP-33497: Remove dependency of Helper.get_localhost and Context- CP-33552: Code refine basing on comments- Reduce opam packages, rename xapi-public- CP-33488: Move cli related files into xapi-cli-server folder.- CP-33556: Remove Importexport from cli server- Add xapi-inventory as dependency of xapi-consts.opam.
* Thu Apr 23 2020 Christian Lindig - 1.239.0-1- Cp-32669: adapt tests to X509 0.11.0
* Tue Apr 21 2020 Christian Lindig - 1.238.0-1- CP-32678: Use a variant instead of a boolean for certificates- CP-32678: Add private key validation- CP-32678: Add server certificate validation- CP-32686: Don\'t generate diffie-hellman parameters- CP-32686: follow shellcheck recommendations- CP-32686: Server Certificate installation- CP-32681: Add certificates to DB schema- CA-265116: Better documentation for certificate API- CA-265116: Distinguish CA certificates from server ones- CP-32678: Return the certificate on install- CP-32678: Add API to install server certificates- CP-32678: Do not open stdext\'s Listext- CP-32678: Add CLI to install server certificates- CP-32681: store fingerprints as non-binary string- CP-32663: Usage more natural language on errors- CP-32696: Send expiring certificates alerts daily- CP-32706: add emergency call to install a self-signed cert- CA-337491: generate_ssl_cert now can replace existing servert cert- CP-32696: avoid alerts on the 31st day- CP-32696: Place message under a single root- CP-32696: Use a separate test runner for alerts- CA-337520: detect recently expired certificates as such- CP-32695: Use UTC for dates in certificate errors- CP-32708: prepare to detach install code from xapi- CP-32708: Move certificate installation and validation to gencert- CA-337731: reject files without certs for chains- CA-337865: clear expired certificate alerts- CA-337865: filter certificate alerts only once- CP-32663: bump schema version- CA-338141 mirror other_config when performing InternalAsync operation
* Fri Apr 17 2020 Christian Lindig - 1.237.0-1- CA-337899 pass ciphersuites arg to sparse_dd- CA-334756: add missing capabilities to SM features table- CP-33292: add VDI read caching SM capability- CP-31118: Avoid xapi as module name in logs- CA-337929 remove gencert xapi-wait-init-complete dependency- CA-337903 insert stunnel into xapi shutdown order- CA-337875 base not always passed to sparse_dd
* Tue Apr 14 2020 Christian Lindig - 1.236.0-1- CP-31116: simplify dbtest dune for database package- CP-28222: Reenable testing for pci- CP-28222: port db tests to alcotest and enable them on opam- CA-337087 avoid race condition in Helpers.Task.wait_for- CA-337087 fix uncancellable migrations
* Mon Apr 06 2020 Ben Anson - 1.235.0-2- REQ-811: fix stunnel config in xapi.spec
* Mon Apr 06 2020 Christian Lindig - 1.235.0-1- CP-33380: update to x509 0.10.0
* Fri Apr 03 2020 Christian Lindig - 1.234.0-1- maintenance: fix compiler warnings- CP-32840 fix xapi according to Stunnel changes- CA-32840 remove references to ciphersuites- CP-32840 stub out Host.set_ssl_legacy- CP-32840 deprecate ssl_legacy flag in host class- CP-32840 stub out legacy ssl operations on pools- CP-32840 xapi stunnel config shouldn\'t enable legacy options- CP-33058 centralize cipherstring- CP-32840 final clean up of legacy ssl related code/docs- CP-32840 fix xapi according to Stunnel changes- CA-32840 remove references to ciphersuites- CP-33058 centralize cipherstring- CP-33057 purge lingering stunnel configs- CP-33057 rewrite init.d-xapissl script in ocaml- CP-33057 replace usages of xapissl script with systemd- CP-33057 increase number of file descriptors for stunnelAATTxapi- CP-32840 enable fips for CC certification- maintenance: move paths to xapi_globs- CP-33243: gencert binary- CP-33243: create systemd gencert service- CA-336408 ensure legacy ssl is disabled on upgrade- CP-33061 remove iLO script- REQ-453 re-expose reconfigure_stunnel
* Fri Mar 27 2020 Christian Lindig - 1.233.0-1- CA-336735: preserve formatting of stars for wlb recommendations
* Mon Mar 23 2020 Christian Lindig - 1.232.0-1- improve invalid VIF map error message for intra-pool migration- Fix build: drop Xcp_coverage- Simplify build: drop coverage rewriter
* Fri Mar 20 2020 Christian Lindig - 1.231.0-1- improve invalid VIF map error message for intra-pool migration- travis: follow validator recommendations
* Tue Mar 17 2020 Christian Lindig - 1.230.0-1- maintenance: don\'t generate empty modules- CA-333610 generate multiple async client frontends- CA-333610 modify server.ml to accept InternalAsync calls- CP-32398 must not use POD when using SRIOV vGPU- CP-32649: Use Stdlib\'s Result- CA-336258: Remove unused function argument- CA-336258: fix API forwarder for JSONRPC calls- CA-333610 utility to try InternalAsync call with fallback- CA-333610 avoid long running idle connection during migration- maintenance: server_helpers interface file- CA-336685 improve error for mem constraints violation
* Thu Mar 12 2020 Christian Lindig - 1.229.0-1- Fix cluster_stack_in_use error message- datamodel_common: add quebec release- CP-32678: update to X509 0.9.0- license: enable unit-tests- tests: move daily license checks to the suite
* Fri Mar 06 2020 Christian Lindig - 1.228.0-1- CA-334951: Use a variant to model recommendations- CA-334951: Ignore 0-star recommendations from WLB- CA-334951: Code hygiene- CA-334951: Use a map instead of a hashtable- CP-33121: Stop using Xstringext in cli_operations
* Mon Mar 02 2020 Christian Lindig - 1.227.0-1- maintenance: json files must not be executable
* Mon Feb 24 2020 Christian Lindig - 1.226.0-1- CA-334909: Only update if the update is needed- CP-33121: remove Listext usages- CP-33121: reduce Stdext usages from xapi_vm- CP-33121: remove stdext usages from xapi_vm_appliance- CP-33121: Reduce usage of Xstringext- CP-33121: remove uneeded open lines
* Wed Feb 12 2020 Christian Lindig - 1.225.0-1- Fix parsing of platform:cores-per-socket to avoid divide-by-0 error- CP-32124: Set fips=yes explicitly for stunnel- CP-32124: Remove \'LEGACY_CLIENT_ACCEPT\' for stunnel- CP-32124: Set the default log facility as \'authpriv\'- CA-331142: stunnel on server side close SSL sock unexpectedly- CA-334797: Disable TLSv1.3 when legacy is true- CP-32298: Move 40-generate-iscsi-iqn to a standalone service- CA-325068: Move networking firstboot script to its own service- CP-31090: Move prepare-control-domain-params script to its own service- CP-31090: Move reset-and-reboot into a separate script- CA-333712: use wrapped string type for pool internal API calls
* Wed Feb 05 2020 Ross Lagerwall - 1.224.0-2- CP-31090: Migrate toolstack xenserver-firstboot scripts
* Tue Feb 04 2020 Christian Lindig - 1.224.0-1- Mark OCaml source code files as not executable
* Tue Jan 28 2020 Christian Lindig - 1.223.0-1- Branding for the quebec release; defined stockholm release; corrected field version; bumped client min/max version to 2.15.- Remove xenserver-buildenv based Travis builds- REQ-627 CA-333495 add Xapi_pci.dequarantine
* Fri Jan 24 2020 Konstantina Chremmou - 1.222.0-2- Removed patch with Quebec branding (it is moving into the source code)
* Fri Jan 17 2020 Christian Lindig - 1.222.0-1- CA-325582: do not open Listext in message_forwarding- CA-325582: Move DB checks for SR removal to message_forwarding- CA-325582: Allow forwarding SR operations to all hosts with related PBDs- CA-325582: Remove SR DSs from memory on SR.forget and destroy- CA-325582: fix some storage quicktests for pools
* Fri Jan 10 2020 Christian Lindig - 1.221.0-1- CP-32461: Delete CPUID leveling checks from WLB
* Mon Jan 06 2020 Christian Lindig - 1.220.0-1- CA-328130 extract usb speed attribute- CA-328130 add usb speed field to api- CA-328130 Make sure speed updated after update- CA-328130 Fix usb_scan tests
* Mon Dec 09 2019 Christian Lindig - 1.219.0-1- maintenance: remove Pervasives deprecated warnings- CP-28369: remove unused daemonize code- CP-32429: Modernize python2 code (automated)- CP-32429: Modernize python2 code, needs manual fixes- CP-32429: Fix invalid transformations from futurize- CP-32429: Modernize python2 code, with manual fixes- CP-32429: enable python3 testing- CP-32429: Use python-3 compatible idioms on tests
* Wed Dec 04 2019 Christian Lindig - 1.218.0-1- CA-325940 bind PCI before calling sriov-manage
* Fri Nov 29 2019 Christian Lindig - 1.217.0-1- CA-330162 Allow explicit floppy userdevice- CA-330162 Improve vbd-create error message- fixup! CA-330162 make floppies a first class citizen- CA-330162 make floppies a first class citizen- CA-330961 Clean the yum cache before prechecking/applying an update- maintenance: optimize Helpers.get_localhost
* Mon Nov 25 2019 Christian Lindig - 1.216.0-1- CA-330979: set current_domain_type for slaves- fix compiler warnings: Warning 52- fix compiler warnings: (+++)- fix compiler warnings: Re.get_ofs deprecated
* Mon Nov 25 2019 Christian Lindig - 1.215.0-1- CA-313081 fix moving template between SRs
* Fri Nov 22 2019 Christian Lindig - 1.214.0-2- Define branding for release Quebec
* Thu Nov 21 2019 Pau Ruiz Safont - 1.214.0-1- CA-330902 Improve logging- CA-330902 host-bugreport-upload args via env vars- CA-330902 Xapi_support.do_upload env vars- CA-330919: Revert \"CP-32138: rely systemd to have wsproxy available\"
* Tue Nov 19 2019 Christian Lindig - 1.213.0-1- fixup! CA-307578 Cluster_host.enable host starts clusterd
* Mon Nov 18 2019 Christian Lindig - 1.212.0-1- CP-32437: update assert_can_boot_here documentation- CP-32437: do the CPUID check inside assert_can_boot_here- CP-32437: call assert_can_boot_here with appropriate do_cpuid_check- CP-32437: use Map_check.getf instead of manipulating and passing around strings- CP-32437: print a delta of features on changes and mismatches- CP-32446: Support extra CPUID features for migration- CP-32446: Enable AssertVMIsCompatible test and fix tests- CP-32446: drop support for RPU from pre-Dundee hosts in CPU leveling
* Fri Nov 15 2019 Christian Lindig - 1.211.0-1- CA-330693: Limit access to state.db to just root
* Fri Nov 15 2019 Christian Lindig - 1.210.0-1- CA-307578 Cluster_host.enable host starts clusterd- CA-330693: Limit access to state.db to just root
* Tue Nov 12 2019 Christian Lindig - 1.209.0-1- CA-329466 Simplify logging for plugins\' parameters- CA-329835 Improve logging- CA-329843 broaden usage of secrets API
* Mon Nov 04 2019 Christian Lindig - 1.208.0-1- fixup! REQ-627 release PCI from VM when halted|suspended- REQ-627 CA-328075 after migration, remove stale PCI
* Tue Oct 29 2019 Edvin Török - 1.207.0-1- CA-327885: update NVIDIA multiple vGPU driver list- Corrected spelling to match the docs. Use en-us spelling. Removed unused error.- CP-32138: rely on systemd to have wsproxy available
* Thu Oct 24 2019 Christian Lindig - 1.206.0-1- Fix a typo in comment
* Tue Oct 22 2019 Christian Lindig - 1.205.0-1- REQ-627 release PCI from VM when halted|suspended- REQ-627 handle multiple SR-IOV vGPUs- CP-30647 Ignore /data/updated key- CP-30647 whitespace- CA-326241 Set resident_on manually for first task- CA-326349 Log when slaves slow during startup- CA-326349 Kill stunnel processes on restart
* Tue Oct 15 2019 Christian Lindig - 1.204.0-1- Merge REQ-627 (SR-IOV support for NVidia GPUs)
* Tue Oct 15 2019 Christian Lindig - 1.203.0-1- Revert \"CA-32641 Orphaned dbsync tasks cleaned up\"
* Mon Oct 14 2019 Christian Lindig - 1.202.0-1- CA-326241 assign localhost_ref earlier
* Fri Oct 04 2019 Christian Lindig - 1.201.0-1- Remove spammy log lines
* Tue Oct 01 2019 Christian Lindig - 1.200.0-1- CA-326621 Remove VM.migrate op when finished
* Fri Sep 27 2019 Christian Lindig - 1.199.0-1- CA-325988: Add a common dmidecode parser- CA-325988: Use new parser for gathering OEM info- CA-325988: Use first board only for baseboard strings- CA-325988: Use new parser for bios and system strings- CA-325988: Cleanups in string cleanups- CA-325988: Tests added for dmidecode output handling- CA-325988: Add fmt dependency to opam for tests
* Tue Sep 24 2019 Christian Lindig - 1.198.0-1- CA-326244: do not include host name in log format- Fix incorrect hostname in syslog: send HUP when hostname is changed
* Wed Sep 18 2019 Christian Lindig - 1.197.0-1- CA-325330 add error for VGPU driver incompatibility
* Fri Sep 13 2019 Christian Lindig - 1.196.0-1- CP-31859 Remove support for VSS- maintenance: remove unused directory
* Tue Sep 10 2019 Christian Lindig - 1.195.0-1- Revert \"CA-326174: fix race condition between SR.scan and VDI.forget\"
* Mon Sep 09 2019 Christian Lindig - 1.194.0-1- CP-32055: Adapt x509 usage to >0.7
* Tue Sep 03 2019 Christian Lindig - 1.193.0-1- CA-326174: fix race condition between SR.scan and VDI.forget- Corrected the spelling of plug-in to be consistent with the docs.
* Fri Aug 30 2019 Christian Lindig - 1.192.0-1- python: fix typo in readme, add link to examples- CA-325988: do not lose newlines from dmidecode
* Fri Aug 23 2019 Edwin Török - 1.191.0-2- bump packages after xs-opam update
* Wed Aug 21 2019 Christian Lindig - 1.191.0-1- travis: load vars from xs-opam repo- Gather the list of host datasources- Gather VM and SR data source lists too- CP-12980: maintain import behaviour on package
* Thu Aug 15 2019 Christian Lindig - 1.190.0-1- CA-311625: alarm only if the last attempt of PBD.plug fails- CA-322204: write to log synchronously before fencing- CA-325319 Fix host-display script console handling- CP-12980: python xenapi: enable building package- CP-12980: turn python xenapi into a module
* Wed Aug 07 2019 Christian Lindig - 1.189.0-1- CP-31117: Remove implementation of obsolete VM options- CP-31117: QEMU stub domains are no longer implemented
* Fri Aug 02 2019 Christian Lindig - 1.188.0-1- CA-299343: Explain reason when DMC operation fails- CP-31450: Add domid to Datapath.attach- CP-31450: Fix toolstack always passing domid 0 to Datapath.attach- CP-31980: Update Nvidia host driver white list that support multiple vGPU- maintenance: report the actual power state on logs- Remove obsolete lines from attach-static-vdis- Remove obsolete network scripts- Remove obsolete references to old network scripts- Remove unused xapi-netdev dependency
* Thu Aug 01 2019 Rob Hoes - 1.187.0-3- Remove obsolete network scripts
* Thu Aug 01 2019 Rob Hoes - 1.187.0-2- Remove unused xapi-netdev dependency
* Tue Jul 30 2019 Christian Lindig - 1.187.0-1- CA-316165: make test_network_event_loop more deterministic- CA-316165: fix race condition in unit test- CA-316165: speed up running the unit test- CP-30614: Only link against libraries that do not use libxc- CP-30614: Add unit test to check that the xenctrl dependency has not come back- CP-30618: Disable host on startup in case of xen or libxc incompatibilities- CP-30618: Prevent calls to xenopsd with incompatible xen/libxc- CA-322045: make light_fuse idempotent
* Mon Jul 29 2019 Christian Lindig - 1.186.0-1- CA-322045: tell XAPI to shut down only once- CP-28368 Remove alcotest from test_highlevel- CP-28368 Whitespace- sr_health_check: Actually make the thread start instead of dead code- Fix some partial application errors in the tests
* Tue Jul 23 2019 Rob Hoes - 1.185.0-1- CA-322146: set NBD device scheduler and max_sectors to more efficient values
* Wed Jul 17 2019 Christian Lindig - 1.184.0-1- CP-31729 Add auto_update_mac to Bond database record and cli- CP-31729 Ensure PIF Bond master\'s MAC address matches primary slave- CA-316165 Convert some Thread.delay to Delay.wait
* Wed Jul 10 2019 Christian Lindig - 1.183.0-1- CA-316165: uplift Thread.delay thresholds to make relative timing more reliable- CA-322749: Add configration variable nvidia_multi_vgpu_enabled_driver_versions- Maintenance: silence Merlin warnings
* Mon Jul 08 2019 Christian Lindig - 1.182.0-1- CA-322682: Remove PVS Proxy from a VM when it is templated- CA-319960: Remove user KRBTGT from cache before checking- Changed the release code name from plymouth to quebec.
* Mon Jul 01 2019 Christian Lindig - 1.181.0-1- CA-321930 XSI-374 GPU compatibility check not done on snapshot revert- CA-321930 XSI-374 Add logging- CA-322710 improve clustering error message
* Tue Jun 25 2019 Christian Lindig - 1.180.0-1- CA-321983: Write compatibility lookup file for NVidia VGPU types- CA-321983: Updates for vgpu changes to xenops IDL- CA-321983: Handle upgrade case in get_vgpu_compatibility_metadata- CA-321983: Bring VGPU device numbers back to a range starting from 0- CA-322450 xe-restore-metadata: ImportError: fsimage- CA-322044: also throttle the automated API calls for SR.scan- Revert \"CA-320458: Upgrade vGPU default device id from 0 to 11\"- VGPU tests: check device/PCI-slot relationship- Catch any exceptions in create_compat_lookup_file- Remove unnecessary log line
* Fri Jun 21 2019 Christian Lindig - 1.179.0-1- CA-321787: Block migrate/suspend/resume when there is no pGPU- CA-322044: throttle number of active SR scans- CP-31400: Improve API error text.- List RRD directory once per monitor poll
* Tue Jun 18 2019 Christian Lindig - 1.178.0-1- CA-320458: Upgrade vGPU default device id from 0 to 11- CA-321654: domains must be stopped before xapi is- CA-258385: Improved phrasing for errors thrown by assert_can_migrate.- Replace /tmp/network-reset literal with Xapi_globs- Travis: remove opam-coverage- Modifications to the error messages for better compliance with the values exposed via the API clients.
* Thu Jun 06 2019 Christian Lindig - 1.177.0-1- CA-320458: Upgrade vGPU default device id from 0 to 11- Replace /tmp/network-reset literal with Xapi_globs- Travis: remove opam-coverage
* Wed Jun 05 2019 Christian Lindig - 1.176.0-1- REQ-720: CP-31058: Datamodel changes for multiple Nvidia VGPU support- CP-29991: Host selection for multiple vGPU- CP-30660: Dry run the allocate vGPU to pGPU- CP-30756: Replace Base64 library- CP-31058: Update Nvidia data structures according to idl change.- CP-31122: Send vGPU uuid to Xenopsd.- CP-31124: Add vGPU uuid as parameter to get metadata.- CP-31160: Support for multiple vGPU creation- CP-31321: Support extra_args for vGPU configration- Add cases for multiple vGPUs in metadata test.- Delete old way of parse Nvidia config file.- Fix test failure.- Fix unit test failures introduced by multi-vGPU code. (#3876)- Improve UUID and code indentation.- maintenance: whitespace- Avoid xapi as module name in logs
* Wed May 29 2019 Christian Lindig - 1.175.0-1- CP-30433: add uefi_certificates field (#3808)- CP-30559 Use the API to add the uefi certificates- CP-30434 Parse secureboot=auto- CP-30440: always set pool certificate- CP-30440: fix tarfile extraction- CA-312227: fix extraction of uefi certificates- CA-314381: fix race condition in secure boot startup- .travis.yml: pin xapi subpackages- Update for Plymouth release- Pass in vm_uuid as well- Use xs-opam\'s uefi branch for travis- Revert \"Use xs-opam\'s uefi branch for travis\"
* Tue May 28 2019 Christian Lindig - 1.174.0-1- CA-296827: Improve CLI log filter
* Mon May 20 2019 Christian Lindig - 1.173.0-1- Remove the Xenctrl dependency in Monitor_master.update_pifs- Drop the xencrtl dependency- Quicktest still needs xenctrl
* Tue May 14 2019 Christian Lindig - 1.172.0-1- CP-30614: Use rrd files to gather memory statistics
* Wed May 08 2019 Christian Lindig - 1.171.0-1- CA-316241 redirect stderr output from probe-device-for-file- CA-315688: Bumped API version to 2.14 for the plymouth release- Do not autogenerate placeholders for unreleased API versions in the docs.
* Fri May 03 2019 Christian Lindig - 1.170.0-1- CA-316165: workaround - disable CBT unit tests- CA-316165: disable more unit tests that used Thread.delay- Changed the checksum algorithm from SHA1 to xxHash, backwards compatability is maintained- Revert \"CP-30614: Use rrd files to gather memory statistics\"
* Thu May 02 2019 Christian Lindig - 1.169.0-1- CA-316165: workaround - disable nondeterministic unit test
* Thu May 02 2019 Christian Lindig - 1.168.0-1- Move jemalloc into xapi.service (was: CA-289625)
* Mon Apr 29 2019 Christian Lindig - 1.167.0-1- CP-30294: Bumped the API minor version and the client min/max version to 2.13- CA-315107 Create xapi-init-complete systemd target
* Tue Apr 16 2019 Christian Lindig - 1.166.0-1- CA-314317: Protect PVS-cache get_or_recreate_vdi by mutex- Zstd export: Implement Zstd option for disk export- Zstd export: Add some helper functions- Zstd export: Allow specifying zstd export on the CLI- Zstd export: On VM import, autodetect whether gzip or zstd has been used to compress the image- Zstd export: Add feature flag for zstd export- Add zstd dependency to xapi.opam- Zstd export: fall back to gzip in all non-zstd cases, not just if the gzip magic string is present
* Tue Apr 09 2019 Christian Lindig - 1.165.0-1- CA-314290: Allow to specify SMBIOS type2 info from the toolstack- CA-312226 XSI-251 add logging for vGPU meta data updates- CA-312226 XSI-251 clear unexpected vGPU metadata on shutdown
* Wed Apr 03 2019 Christian Lindig - 1.164.0-1- Change release name from oslo to plymouth
* Thu Mar 28 2019 Christian Lindig - 1.163.0-1- Revert \"Add zstd dependency to xapi.opam\"- Revert \"Zstd export: Add feature flag for zstd export\"- Revert \"Zstd export: On VM import, autodetect whether gzip or zstd has been used to compress the image\"- Revert \"Zstd export: Allow specifying zstd export on the CLI\"- Revert \"Zstd export: Add some helper functions\"- Revert \"Zstd export: Implement Zstd option for disk export\"
* Tue Mar 26 2019 Christian Lindig - 1.162.0-1- CA-310173: remember multipath status with static vdi data
* Wed Mar 20 2019 Christian Lindig - 1.161.0-1- XSI-132 CA-312644 CA-299554 update dom0 vcpu count- Zstd export: Implement Zstd option for disk export- Zstd export: Add some helper functions- Zstd export: Allow specifying zstd export on the CLI- Zstd export: On VM import, autodetect whether gzip or zstd has been used to compress the image- Zstd export: Add feature flag for zstd export- Add zstd dependency to xapi.opam- maintenance: prepare xapi globs for more metrics types- maintenance: try to make the flow clearer on monitor_pvs_proxy- maintenance: avoid using open on monitor_pvs_proxy- maintenance: move find_rrd_files where it can be common- maintenance: move ignored_errors cache to db_calls_cache- maintenance: move datasource loading to a function- CP-30614: Use rrd files to gather memory statistics
* Thu Mar 14 2019 Christian Lindig - 1.160.0-1- CA-311705: Add VDI usage checking for metadata backup scripts.
* Thu Mar 07 2019 Christian Lindig - 1.159.0-1- CP-29134 Update versions for Naples release
* Tue Mar 05 2019 Christian Lindig - 1.158.0-1- CA-311823: Do not raise alerts for \"new CPU features\"
* Mon Feb 25 2019 Christian Lindig - 1.157.0-1- Revert \"CA-290024: Reject booting pv-iommu VMs on a host where the premap is yet to complete\"
* Mon Feb 25 2019 Christian Lindig - 1.156.0-1- CA-310971: consider enabling the host again after plugging clustering PBDs- CA-309815: add dependencies in perfmon.service
* Wed Feb 20 2019 Christian Lindig - 1.155.0-1- CA-309048 handle domain sockets for wsproxy (#3816)
* Tue Feb 19 2019 Christian Lindig - 1.154.0-1- CA-304473: lock the db before flush_and_exit on master
* Wed Feb 13 2019 Christian Lindig - 1.153.0-1- CA-309809: avoid a stuck GFS2 mount by checking quorate state before PBD plug- ocp-indent xapi-clustering.ml
* Wed Feb 06 2019 Rob Hoes - 1.152.0-1- CP-29962: Ignore monitor_config_file for GVT-g VGPU types
* Tue Feb 05 2019 Christian Lindig - 1.151.0-1- CP-30578: check if clustering required and wait for quorum- Simplify .travis-xs-opam.sh
* Fri Feb 01 2019 Christian Lindig - 1.150.0-1- CP-30527: use Memory for unit conversions- CP-30527: Gather Xen capabilities from xenopsd- CP-30527: Fetch Xen version from xenopsd- CP-30527: Remove Xenctrl check when reading host memory- CP-30527: Constrict usage of xenopsd to gather host info
* Tue Jan 29 2019 Christian Lindig - 1.149.0-1- CP-30508: Reliably detect IOMMU presence in host
* Wed Jan 23 2019 Christian Lindig - 1.148.0-1- Prepare for Dune 1.6- Makefile: remove OPAM_PREFIX, OPAM_LIBDIR | |
