|
|
|
|
Changelog for xcp-networkd-23.25.0-1.6.xcpng8.3.x86_64.rpm :
* Tue Dec 12 2023 Benjamin Reis - 23.25.0-1.6- Add xapi-23.25.0-extend-uefi-cert-api.patch- Update xapi-23.25.0-update-xapi-conf.XCP-ng.patch * Wed Oct 25 2023 Samuel Verschelde - 23.25.0-1.4- Set override-uefi-certs=true in xapi.conf- Update xapi-23.25.0-update-xapi-conf.XCP-ng.patch * Fri Oct 20 2023 Samuel Verschelde - 23.25.0-1.3- Don\'t require XS\'s fork of the setup RPM- We chose to revert to CentOS\' version, as we don\'t share XenServer\'s view regarding where to do changes to add users and groups, and we don\'t need the added users and groups they put there yet. * Thu Oct 05 2023 Samuel Verschelde - 23.25.0-1.2- Add missing Requires towards nbd * Wed Sep 27 2023 Samuel Verschelde - 23.25.0-1.1- Update to 23.25.0-1- * * * Upstream changelog * * *- * Thu Aug 31 2023 Rob Hoes - 23.25.0-1- - CP-43977: Fallback un-recognized guidance as RebootHost- - xapi-aux: log error when reading ip type in inventory- - xapi-aux: filter out all link-local addresses- - CA-378966: Prepare ip monitor watcher to read more lines- - CA-378966: Detect state network interface changes- - network_monitor_thread: reuse named parameters- - xxhash(maintenance): add dependency to ctype stubs- - maintenance: use ounit2 instead of ounit- - maintenance: prepare mtime usage for 2.0- - CA-381856: preserve host.last_software_update on pool join- - CP-44988: remove API: host.apply_recommended_guidances- - fixup: update lifecycle for \"host.apply_recommended_guidances\"- - Move helpers to determine the client of a call from Context to Http_svr- - Improve logging at start of HTTP handler- - CA-381587: log when HTTP Basic auth is used, and by who- - CP-33044 replace gpumon shutdown with NVML detach/attach- - CP-42949: Ensure storage RRDs are created without tapdev in kernel- - Install python3 variant of xapi-storage alongside python2 * Wed Sep 20 2023 Samuel Verschelde - 23.24.0-1.1- Update to 23.24.0-1- Remove patches merged upstream.- Rework xapi-23.24.0-update-xapi-conf.XCP-ng.patch- Rework xapi-23.24.0-update-db-tunnel-protocol-from-other_config.XCP-ng.patch- Rebase changelog on upstream changelog- * * * Former XCP-ng 8.3 changelog * * *- * Mon Aug 28 2023 Guillaume Thouvenin - 23.3.0-1.9- - Add xapi-23.3.0-Add-vdi_update-filter-to-some-tests.backport.patch- * Wed Aug 23 2023 Guillaume Thouvenin - 23.3.0-1.8- - Add xapi-23.3.0-Allow-a-user-to-select-on-which-SR-to-run-quicktest.backport.patch- * Mon Jul 31 2023 Benjamin Reis - 23.3.0-1.7- - Drop `ext4` from `sm-plugins` in `xapi.conf`- * Fri Jul 21 2023 Benjamin Reis - 23.3.0-1.6- - Rebuild for xs-opam-repo-6.66.0-1.2.xcpng8.3- - Add xapi-23.3.0-filter-link-local-address-ipv6.XCP-ng.patch- * Thu May 04 2023 Samuel Verschelde - 23.3.0-1.5- - Rebuild for blktap-3.53.0-1.xcpng8.3 and sm-3.0.3-1.1.xcpng8.3- * Mon Apr 24 2023 Benjamin Reis - 23.3.0-1.4- - Remove `/etc/xapi.conf.d` files, patch `xapi.conf` instead- * Thu Mar 16 2023 Samuel Verschelde - 23.3.0-1.3- - Rebuild for xs-opam-repo-6.66.0-1.1- * Mon Mar 06 2023 Benjamin Reis - 23.3.0-1.2- - Update xapi-23.3.0-update-xapi-conf.XCP-ng.patch to re-enable HTTP (prerequisite for HTTP to HTTPS redirect)- * Wed Jan 18 2023 Samuel Verschelde - 22.34.0-2.1- - Update to 22.34.0-2- - Drop xapi-22.20.0-redirect-fileserver-https.backport.patch, included in 22.34- * Tue Dec 20 2022 Samuel Verschelde - 22.32.0-1.1- - Update to 22.32.0-1- * Thu Dec 08 2022 Benjamin Reis - 22.31.0-1.1- - Rebase on latest XS 8.3 prerelease updates- - Drop two patches merged upstream- * Thu Dec 01 2022 Benjamin Reis - 22.20.0-1.2- - Add xapi-22.20.0-redirect-fileserver-https.backport.patch- * Wed Aug 31 2022 Samuel Verschelde - 22.20.0-1.1- - Rebase on CH 8.3 Preview- - Remove dependency to non-free packages again- - Remove dependency to new non-free package pvsproxy- - Remove patches merged upstream- - Keep other patches still necessary.- - Rediff xapi-22.20.0-fix-quicktest-default-sr-param.backport.patch- - Add patch xenopsd-22.20.0-use-xcp-clipboardd.XCP-ng.patch, migrated from retired repo xenopsd- - Rediff xenopsd-22.20.0-use-xcp-clipboardd.XCP-ng.patch and adapt paths- - Remove ptoken.py and accesstoken.py yum plugins and their configuration- - Add xapi-22.20.0-xenospd-dont-run-cancel-utils-test-as-unit-test.backport.patch to fix tests in koji * Fri Aug 18 2023 Rob Hoes - 23.24.0-1- CA-379459 make shutdown mutex per redo_log- CA-381133: Set pending_guidances based on recommended guidance- CA-381133: Make {host;VM}.recommended_guidances internal-only- CA-381133: Remove usage of host|VM.recommended_guidances- CA-381133: Remove now-unused recommended_guidances fields- Change argument of resort_guidances * Tue Aug 15 2023 Rob Hoes - 23.23.0-1- CA-381503: bump qemu filesize limit * Tue Aug 15 2023 Rob Hoes - 23.22.0-1- Removed class which became obsolete after the removal of the Proxy_ * classes.- Corrections to the unmarshalling of raw API hashtables.- Removed code generating methods and parameters for XML RPC.- Fixed a couple of code smells. Renamed internal method to reflect removal of proxy classes.- Added message override (preserving it for the cases where DMC has been switched off via a feature flag).- Further corrections to Marshalling so the Powershell module can create API objects from hashtables.- CA-379112 make PBD.plug wait for scan results- CA-379112 add logging- CA-379112 update comments in message_forwarding.ml- CA-380789: Not get power_state from snapshots with suspend VDIs- Revert \"CA-380580: cross-pool migration: no CPU checks for halted VMs\"- Revert \"Cross-pool live migration: move CPU check to the target host\"- Revert \"Add VM_metrics to metadata export\"- Revert \"Add VM_metrics to metadata import\"- CA-380581: Remove lock on downloading updates from remote repos- CA-379459 protect redo_log.shutdown with a lock * Thu Aug 03 2023 Pau Ruiz Safont - 23.21.0-1- Allow a user to select on which SR to run quicktest- Added messages raised by v6 and SM.- CA-380368: Replaced < ad > with < and >. Improved the type description.- CA-380389: Version of deprecation/removal for repository.up_to_date not documented correctly- Add option to redirect stderr to stdout to execute_command_get_output *- CA-380178: xenopsd: Fix vTPM manufacture logging- CA-380178: Increase swtpm startup timeout- Add `vdi_update` filter to some tests- CA-379472 log more block_device_io messages to info- CA-379472 increase startup timeout for block_device_io- CA-379112 log details of insufficient SR size * Wed Aug 02 2023 Pau Ruiz Safont - 23.20.0-1- CA-375992 remove stale swtpm chroots after boot- CA-379472 more redo_log debugging- CA-379350: Use up-to-date vTPM UUIDs when creating device models- maintenance: make code easier to follow with aesthetic changes * Thu Jul 27 2023 Rob Hoes - 23.19.0-1- CA-379472 add debugging to redo_log- Fix logging of CPU pool-level changes- CA-380580: cross-pool migration: no CPU checks for halted VMs * Thu Jul 20 2023 Rob Hoes - 23.18.0-1- CP-42016: Add parameter \"--newest-only\" to \"reposync\" command- CP-42014: Add last_update_sync to pool datamodel- CP-42013: Do not apply recommended guidances automatically- CA-376144: handle host.apply_recommended_guidances first on pool coordinator- CA-375147: UPDATES_REQUIRE_SYNC when toolstack restarted on coordinator- CP-42810: Periodic update sync- CP-40204, CA-366396: Add \"host.latest_synced_updates_applied\", remove \"repository.up_to_date\"- CA-376145: Reset pool.last_update_sync on pool coordinator change- CA-378757: remove \"EvacuateHost\" from recommended guidance- CP-43545: expose `issued` and `severity` from updateinfo- CA-378778: Calculate host guidance correctly- CA-380043: VM recommended guidances is not set correctly * Thu Jul 20 2023 Rob Hoes - 23.17.0-1- CP-43942 Remove \"Portable SR\" pseudo-feature- opam: update metadata from xs-opam- xapi_pgpu: make update_pgpus less scary- vhd: use supported ocaml runtime function names- xapi_guest_agent: use infix function for path concatenation- maintenance(xapi_message): don\'t log scary messages- Add VM_metrics to metadata export- Add VM_metrics to metadata import- opam: sync with latest metadata- ci: update main workflow to setup-ocaml v2- Cross-pool live migration: move CPU check to the target host- Document parameters in Stunnel_cache API- ci: try to reuse dune cache as much as possible- CP-27910: factor out reposnse behaviour from host rrd handler- CP-27910: allow exporting vm rrds and unarchives in json- CP-27910: set content type headers for rrd endpoints- maintenance(http-lib): Disallow invalid values in accept datatype- http-lib: port tests to alcotest- http-lib(fix): Prefer more specific mimetypes in Accept- http-lib(feature): Make API more ergonomic- IH-393: Use Accept header in xcp-rrdd endpoints- http-lib: make all tests belong to the package- CA-379928: enable more logging for redo_log_usage- [maintenance]: reformat redolog_usage following logging change- CA-377945: toolstack restart: ensure xapi is stopped first, started last- Offload VM CPU Policy checks to Xen * Mon Jul 17 2023 Edwin Török - 23.16.2-2- Bump release and rebuild * Wed Jul 12 2023 Rob Hoes - 23.16.2-1- CA-379929: move json dump out of the rrdd plugin directory- xcp-rrdd: remove hardcoded version on http requests- Revert \"CA-375992: clean up previous sandbox when creating one\" * Tue Jul 11 2023 Rob Hoes - 23.16.1-1- Install cohttp-posix * Tue Jul 11 2023 Rob Hoes - 23.16.0-1- CA-373074 Added contents of update_getty script to run after Gencert is started- CP-43551: Dump host_rrd latest data to /dev/shm/metrics/host-dss- CA-378837 log results from Host.get_vms_which_prevent_evacuation- Disable Python 2.7 on Github CI- CP-40214: * */ *.py: raise (AnyException()): Remove optional parentheses- CA-379173 handle race condition in stunnel_cache- CP-40214: ocaml/xapi-storage/python/xapi/ * *.py: modernize -f except,print- Add HTTP Strict Transport Security header- CP-43574: Add host load data source- CP-40214: ocaml/xapi-storage/python/examples/ * *.py: Update except- .gitignore: Ignore the *.bak backup files of the Python modernize tool- CP-40214: xapi-storage/python/xapi/storage/api/volume.py: use long()- Make tracing library independent of xapi-idl- Add a debuginfo library- Context: use Debuginfo library- Task_server: use Tracing type and Debuginfo- Tracing debuginfo: use newline separator for XML-RPC to work- VM.migrate_send: properly pass on tracing data- Storage_mux: wrap all calls with Debug.with_thread_associated- Set up tracing and logging for SXM operations- Set up logging and tracing for SMAPIv1- scripts/plugins/extauth-hook-AD.py: Skip init logging on import- CP-43565: xapi-expiry-alerts: a new library to generate expiry alerts- CP-43777: Install xapi-expiry-alerts and ezxenstore- ci: Break long line in yaml- Add cpuid library- Introduce functions in CPU feature sets in xenopsd- xenopsd: change type of reported CPU feature-sets to an abstract type- xapi: switch CPU feature sets to the abstract type and don\'t interpret them- Remove CPUID tests from xapi and add to xenopsd- Update quality gate- CA-378931: usb_reset: Fix mount call parameters- CA-375992: clean up previous sandbox when creating one- CP-42019: Update wording for expiry message- CA-379472 add debugging to redo_log * Mon Jun 19 2023 Rob Hoes - 23.15.0-1- xenops_sandbox: separate chroot instantiation from fs creation- xenops_sandbox: expose less of chroot module- xenops_sandbox: fix mistake in guard\'s parameter name- xapi-idl: rename varstore interfaces- xapi-guard: do not use a static version- git: ignore another formatting commit for blames- xapiguard_cli: run its tests as part of varstored package- Tidy up class members in the file.- Removed cyclical assignment. Reordered assignments.- CP-43400: Expose ServerCertificateValidationCallback in the Session.- Deprecated the Session constructors requesting the \'timeout\' parameter. Added Property to set this instead.- CA-354436: pool.is_slave took a long time to respond- Update lifecycle- CA-378222: assert_sr_can_host_statefile has to take available space into consideration- CA-378229: flush database immediately on redo log enable- [maintenance]: drop redundant \'true\' and factor out anonymous function- [maintenance]: use phantom type parameter to enforce RO operation on redo logs- [maintenance]: simplify Redo_log.flush_db_exn- [maintenance]: split Redo_log.enable on whether it is RO or not- [maintenance]: redo_log hide redo log type- [maintenance]: drop internal functions from interface- CA-378304: check max_file_size limit after writing to tracing file- CA-378035: set nbd client timeout to 60 seconds- CA-378323: prevent find writing to stderr if /var/log/dt not present- CA-378455: Ensure TPM contents are base64-encoded on migration- maintenance (suspend_image_viewer): avoid duplication * Fri Jun 09 2023 Rob Hoes - 23.14.0-1- CP-41837: Create tracing library- CP-41839 Added TracerProvider modules to tracing- CP-41840: Add function to convert span to zipkin json- CP-41841: Export trace json files to http- CP-41841: Export trace json files to dom0 log endpoints- CP-42362: Only export finished spans and implement span garbage collector- CP-42361: Use XenAPI configuration list in TraceProvider to switch between HTTP/dom0 log export- CP-42441 Added SpanKind to Spans- CP-41841 Added conversion between Spans and W3C Traceparent headers- CP-42441: Capture exceptions from failed operations in span tag- CP-42609 Service name is set dynamically depending on the service- CP-42607 Created set, create, destroy functions for TracerProviders- CP-42854 Add Unit Tests for Tracing Library- CP-41842 Created Observer class with IDL functions to manage Open Telemetry providers- CP-41842 Added CLI for Observer commands- CP-41842 Added initialisation of Tracing library for Xapi- CP-41842 Added Tracing Library calls to Xapi_observer to link to the library- CP-41842 Added Attribute validator in library and in xapi_observer- Instrument tracing in Xapi- CP-41841 Added traceparent header to http_svr- CP-41841 Populate traceparent header in rpc and retreive it in context.ml- Nested tasks in startup sequence- Trace xenopsd operations- Xenopsd: nest parallel tasks- Xenopsd: always use task for import_metadata- Trace SM ops and link from xenopsd- CP-42606 Add Management interface to Xenopsd- CP-42608 Added mechanism to manage components in other Daemons- CP-42608 Added set_components to register and unregister changed components- Fix errors in message forwarding- CP-41843: Add /var/log/dt to bugreport- Link up xapi/xenopsd tracing for live migration- xenopsd: include traceparent header in requests to a remote xenopsd- xenopsd: add received traceparent header to task- Remove unused module definitions- CP-42553: Periodically delete old files and files beyond a size limit- Add error identifier to attributes to mark a span as having an error- Add more endpoint valdiation for URLs- Added tracing to rpc calls using make_remote_rpc- Remove filters and processors from TracerProvider and rename tags to attributes- Remove service_name as a TracerProvider and Span field and set it as a library level constant- Added SpanLink to spans- Added SpanEvent to spans- Use w3c format to serialise spans going into xenopsd to avoid bloat- Moved Attribute fields on Spans and TracerProviders to being a StringMap- Updating Zipkin to export events (annotations) and to include remoteEndpoint- Fixing Quality gate- CP-42825: Add XAPI Alcotest unit tests- CP-42553 Write spans in files up to 1mb then flush to logs- Trace Export operations in the library- Add Attributes to Tracing in the library- Batch all Traces in one export call to improve perfomrance- CP-42999: Return new \"preview\" in return of v6 \"get_version\"- CA-377824 fix FD leak in xenopsd- CP-43518: tap-ctl stats: treat `tap` key as optional in returned object * Thu Jun 08 2023 Rob Hoes - 23.13.0-2- Bump release and rebuild * Wed Jun 07 2023 Rob Hoes - 23.13.0-1- xenopsd: use HVM memory model for PVH guest not using shim- maintenance: small simplifications and reformattings- squeezed: Be aware of PVH domains- CP-42739: Bump Java SDK to JDK 11 (LTS)- opam: move vhd-format metadata to root directory- [maintenance]: delete xen-gnt-unix dependency- [maintenance]: avoid building bytecode versions of executables- libs/vhd: run make format- squeezed: fix link to architectural drawing- CA-376879: VLAN PIF created in pool.join is shown as disconnected (#5026)- CP-40775 remove VTPM check from VM.clone- CP-40775 remove VTPM check from VM cross-pool migration- CP-40775 remove VTPM check from VM.checkpoint- CP-40775 update quality gate- CP-40775 remove VTPM check VTPM.create wrt HA- CA-376864: prefer use of NBD path for static VDIs on SMAPIv1- redo-log: bump default size to 4GiB- xapi-guard: initialize Logs- xapi-guard: do not use a static version- xapi-guard: refactor serve_forever_lwt- xapiguard_cli: install- xenopsd: plumb through vtpm uuid to suspend/restore- swtpm-wrapper: do not spawn additional logger- swtpm-wrapper: be explicit on when to manufacture a new vTPM- swtpm-wrapper: unix+http scheme support- xapi-guard: add minimal REST interface for swtpm- CP-42726: Create socket whenever swtpm starts up- swtpm_guard: spawn with correct gid- xenopsd: drop reading/writing of vTPM state through the file- vTPM smoke test- CP-40775 remove assert_ha_vtpms_compatible- CP-40775 remove assert_ha_vtpms_compatible - update quality gate * Tue Jun 06 2023 Pau Ruiz Safont - 23.12.0-2- Bump release and rebuild * Thu May 25 2023 Rob Hoes - 23.12.0-1- Check if user if root before continuing with test- CA-377169 block VM.checkpoint of running VM with VTPM- Update quality-gate- ocaml-vhd: fix unit tests- ocaml-vhd: Cstruct.len -> Cstruct.length- ocaml-vhd: Split off function for VHD creation from Raw_input.vhd- ocaml-vhd: Add Hybrid_raw_input to VHD- vhd-tool: Remove unnecessary values from match- vhd-tool: Remove unnecessary parameter from write_stream- vhd-tool: Extend documentation in impl.ml- vhd-tool: fix progress bar- Make NBD disconnect robust to the device being gone- CP-43131: Make gvt-g support configurable- CA-333441, CA-377454 create /var/lock/sm/iscsiadm- CP-31856: Option to use NBD to attach disks to the control domain- CP-33338: call vhd-tool with source-format nbdhybrid for NBD sources- Install rrdd.py into the build output- Make session errors look less scary in the logs- Update rrdd to send v2 protocol data- CA-377456 unblock cross-pool migration with VTPM when halted- Set PIF\'s IPv6 Gateway when in DHCP/Autconf- CP-42182 Set Makefile to install rrd-cli- xapi-rrdd: test rrd_cli- editorconfig: correct setting for Makefile is tab, not tabs- database: document values of exceptions- maintennce: avoid future warnings- maintenance: add reformat commit to ignored revs- CP-42533: vhd-tool: add hybrid NBD-to-VHD exporter- CP-42533: vhd-tool: add nbdhybrid as a supported source format- CP-42533: vhd-tool: wire up nbdhybrid to vhd- CP-43387: Fix VDI delta copy with NBD datapath connection- CP-42064: Move NbdClient module from Xapi_vbd to Attach_helpers- CP-42064: Fix storage migration for NBD-backed storage * Tue May 09 2023 Pau Ruiz Safont - 23.11.0-1- CA-376297: Test that mirage-crypto accepts all valid RSA keys- CP-42642: Support share server certificate file to group users- CP-42835: Allow changing DNS servers when HA or clustering enabled- CA-375358: Parse output of yum upgrade to get RPMs to be updated/installed- Add comments for RPM version comparison functions- CA-375358: Add redundancy in getting latest updates/installations- xapi_blob: don\'t verify connection when sending between pools- ocamlformat: reformat using ocamlformat 0.22.4- ci: publish XenAPI releases to PyPI- ci: reduce code run with permissions to release to PyPI- xapi-cli: Have a consistent interface for vtpms\'s vm- Move writing init complete to the end of startup sequence- CA-374989: Avoid using get_record on cross-pool migration- `rrdd-plugin`: do not write payload if page count is 0- CA-376894 update VM allowed ops after deleting VTPM- Fix a few auto formatting differences- [maintenance]: varstored-guard depends on alcotest-lwt for tests- [maintenance]: remove xapi-types to http-svr dependency- [maintenance]: xapi-guard: drop inotify dependency- [maintenance]: xapi-guard: make unit tests run on Mac OS- [maintenance]: allow building some libraries on macOS- [maintenance]: repeat test errors at the end- [maintenance]: xen-api-client: avoid name clash on Util module- xen-api-client: add http+unix URI- xen-api-client-lwt: introduce a SessionCache- [maintenance]: update xen-api-client-lwt examples to use the SessionCache- [maintenance]: tweak xen-api-client-lwt examples- maintenance: add undeclared dune dependencies- CP-40528 VTPM snapshot, revert, clone- CA-376993 disable test_clustering (revert this!)- ci: do not attempt to install xapi-database- Revert \"CA-376993 disable test_clustering (revert this!)\"- spec: specify SPDX licenses- spec: changes in library files packaged * Wed Apr 19 2023 Rob Hoes - 23.10.0-1- Xen libraries are are now taken straight from the xen package instead of through xs-opam- Import ezxenstore into the xen-api repo- CP-39863 add allowed VTPM ops for VMs- CP-42455 Revert disable DMC- CA-376319: Ensure that nbd_client_manager cannot block forever.- CA-376326: rrdd_proxy: compare the localhost uuid with a uuid instead of a ref- CA-376326: rrdd: return 404 instead of just failing- ezxenstore: make tests exclusive to it- CA-376294: Extract hostname from FQDN- CA-376294: Update log message about compressed netbios name- CP-39935 catch and log unexpected exceptions during import- CA-376448: explicitly validate refs in PVS_cache_storage.create * Fri Mar 24 2023 Rob Hoes - 23.9.0-2- Bump release and rebuild * Fri Mar 24 2023 Rob Hoes - 23.9.0-1- CA-343683 Added lock to disk writing in Networkd to avoid writing to disk with incomplete configuration details- ci: nosetests are only located in scripts- python: port tests to pytest- ci: setup python tests in the yml definition- CA-375705: fix total order on Ref.compare- CA-375705: unit test for total order on Ref.compare- CP-39935 implement VTPM export- CP-39935 Implement VTPM import- CP-39935 Update quality-gate.sh for VTPM- CP-39935 improve full restore- xapi_vtpm: do not reuse name for get_contents- CP-41574: Add telemetry configuration data- CP-41574: Expose repository proxy password access to API- CP-41574: Update DB schema- CP-41574: Updated datamodel_lifecycle.ml for new added fields- CA-375359 improve \"pool_total_session_count\" RRD description- CP-30367: xenopsd: add support for PVH- CP-30367: XAPI: allow PV and PVH kernels in /var/lib/xcp/guest too- CA-375359 & CP-42286: Rename `sessions per second` to `sessions/s`- CP-41796 enable HTTPS migration by default- CP-41796 prevent changes to https_only in CC_PREPARATIONS=true * Wed Mar 08 2023 Rob Hoes - 23.8.0-1- CA-375427: Make DP.destroy idempotent again- CA-364049: Tell external auth plugins to use python3- CA-375634: Move probe-device-for-file to Python 3 * Fri Mar 03 2023 Rob Hoes - 23.7.0-1- CP-40847: synchronize read-only uefi-certificates field for both host & pool * Thu Mar 02 2023 Rob Hoes - 23.6.0-1- [maintenance] Makefile: add a rule to write out a compile_flags.txt- CA-375274: xenctrlext: fix wrong number of arguments to interface_open and unshadow- CA-375273: xenctrlext: fix race conditions- [maintenance] direct_copy_stubs.c: uerror is available in caml/unixsupport.h- [maintenance] vhd-tool/direct_copy_stubs: fix setting of O_DIRECT flag- [maintenance] add .editorconfig: use spaces instead of tabs in C files- CA-375106: tuntap_stubs.c: raise Unix.error instead of failwith- CA-375276: xenctrlext_stubs.c: xc_get_last_error is not thread safe, use just errno which is- [maintenance] xa_auth_stubs.c: move free inside the blocking section- CA-375280: xe-toolstack-restart: stop and start all services at once- python/XenAPI: Replace import six.moves with stdlib imports- Allow to use a CIDR for VIFs IPv4 and IPv6 allowed IPs- CP-41730: Limit ldap query timeout for subject information- python/setup.cfg: Fix deprecated dash-separated key- python: Use xapi\'s versioning scheme for XenAPI package- ci: use official gh cli for release workflow- CP-40388: Rename SMAPIv3 feature VDI_ATTACH_READONLY- CP-40388: define VDI_ACTIVATE_READONLY in Smint- CP-40388: store SR feature table upon mux registration- CP-40388: store attach mode (rw/ro) with datapath in mux- CP-40388: Add VDI.activate_readonly to the storage interface- CP-41675: add new field override_uefi_certs to xapi.conf- CP-41675: xapi-start behaves according to field override-uefi-certs in xapi.conf- CP-41672: wipe the contents of the pool.uefi_certificates during upgrade- CP-40847: CP-42007: make pool.uefi-certificates field read-only- CP-41675: fix idempotent behaviour of Helpers.FileSys.rmrf- CP-42007: platform:secureboot=auto means platform:secureboot=true always- CP-42007: separate error msg from exception generation * Fri Feb 17 2023 Rob Hoes - 23.5.0-1- ci: fix docs upload of xapi-storage- CP-42173: xenctrlext: stop using xentoolog bindings- Remove log spam about leaked VDI locks at startup- Fix storage_smapiv1_wrapper log name- Storage mux: filter out duplicates in SR.list- CA-375256: Fix storage initialisation on xapi startup * Fri Feb 10 2023 Christian Lindig - 23.4.0-2- CP-40650 Remove vtpm feature restriction (i.e., enable feature) * Fri Feb 10 2023 Rob Hoes - 23.4.0-1- Reorganise the storage API layer in xapi and xapi-storage-script * Wed Feb 08 2023 Pau Ruiz Safont - 23.3.0-1- CA-374989: add default values for removed fields- CA-374989: Revert \"CP-40357: Purge all removed fields from the database and clients\"- CA-374989: Bump datamodel version * Thu Feb 02 2023 Pau Ruiz Safont - 23.2.0-1- Stop generating classes for the XmlRpcProxy.- CP-33338: write physical-device-path to xenstore for nbd devices- maintenance: commit calculated changes for datamodel_lifecycle- CP-39806: use updated C function names for ocaml 4.14- CP-40065: Delete VTPM contents when VM is deleted- CP-40065: Add VTPMs to the database garbage collector- CP-41812: Add total_sessions_count RRD- CP-41818: Branding and copyright updates for the SDK * Mon Jan 30 2023 Pau Ruiz Safont - 23.1.0-2- Bump release and rebuild * Mon Jan 30 2023 Pau Ruiz Safont - 23.1.0-1- CA-374872: error when `BOND_MEMBERS` is not in `management.conf` * Fri Jan 27 2023 Pau Ruiz Safont - 23.0.0-1- xcp-rrdd: add interface for rrdd_server- CA-374274: Provide more information when datasource is not found- CA-362358: Filter out new files when refreshing directory of certificates- Filter out new.pem in cert_distrib- Support bond at firstboot- CP-41444 Added actions_after_softreboot field to VM for Xenopsd soft_reboot- xenopsd: use uuid instead of deprecated uuidm functions- message-switch: conform to new APIs in jst libs- xapi-storage-script: conform to new APIs in jst libs- xen-api-client: conform to new APIs in jst libs- stream_vdi, import: conform to new APIs in tar- gencert: conform to new APIs in x509- xapi-guard, xen-api-client: conform to new APIs in conduit- message-switch, vhd-tool: drop io-page-unix- nbd: change ocaml-nbd usage- session_check: add action name in the error returned- datamodel_lifecycle: update latest APIs * Thu Jan 26 2023 Pau Ruiz Safont - 22.37.0-1- CA-374238: prevent copying of removed fields when reverting snapshots * Mon Jan 23 2023 Pau Ruiz Safont - 22.36.0-1- Makefile: install and uninstall xapi-schema using dune- install xapi-schema libraries as part of xapi-datamodel-devel * Thu Jan 19 2023 Pau Ruiz Safont - 22.35.0-1- CP-40357: Enable computation of correct API lifecycles- CP-40357: Patch invalid lifecycles- CP-40357: Statically parse all the datamodel lifecycles- CP-40357: separate schema modules into xapi-schema package- database / idl: reduce code complexity- CP-40357: Change comment on failure to load db row- CP-40357: Avoid loading removed fields into the database- xapi_version: extract \"git_id\" from version- CP-40357: Remove oss_deprecation_since:None- CP-40357: Integrate state into the datamodel\'s lifecycle- CP-40357: Purge all removed fields from the database and clients- CP-40357 (idl/json): Only show latest entity change in a release- CP-41450: The SDK sample code has moved to a different repo.- Stop installing internal headers. Create dll symlink for cygwin.- opam: synchronize opam metadata with xs-opam- xapi-storage{,-script}: explicitely use python2 instead of python- Add new bias_enabled field to pool datamodel- Make bias against scheduling vms on pool master configurable- Switch from Xenctrl.hvm_check_pvdriver to Xenctrl.hvm_param_get- Corrected repo link in the README.- ci: avoid github API deprecation warnings- xenctrlext_stubs: fix xfm_open parameter mismatch- CP-40946 Make ATTACH_READONLY consistent with other features- CA-373776 Added unhandled exception handler to nbd to log errors instead of the messages being printed to the host console- CP-41366: Rename Citrix Hypervisor to XenServer- Fix extra `/` in https redirection- CA-373785: Deny HTTP requests on website_https_only- maintenance: use generated datamodel_lifecycle * Tue Dec 13 2022 Rob Hoes - 22.34.0-2- Bump release and rebuild * Mon Dec 12 2022 Rob Hoes - 22.34.0-1- Update lifecycle for pool.migration_compression- CA-373551: register for host events rather than task in events_from_xapi * Thu Dec 08 2022 Rob Hoes - 22.33.0-1- CP-40404: Add C# NuGet specs in its csproj- CP-40404: Move C# SDK samples to .NET 6.0- CP-41213: swtpm-wrapper should not fiddle with cgroups- CP-40404: Do not specify assembly info in `AssemblyInfo.cs`- CP-40404: Build C# SDK to .NET Framework 4.5- CA-372785 make with-vdi more robust- CP-40404: Replace deprecated module manifest member with `RootModule`- Fix missing `Reference` value in PS SDK cmdlets output- Modify Xenctrlext to use its own libxc handle- CP-40404: Do not specify PS SDK assembly info in `AssemblyInfo.cs`- CP-40404: Update Powershell and C# SDK READMEs- CP-41348: Convert swtpm-wrapper to Python 3- Redirect fileserver towards https- CA-371790: Restrict the permissions on pool tokens- Xenctrl: drop interface_close- CP-41279: add migration_compression pool option * Fri Nov 18 2022 Rob Hoes - 22.32.0-1- CA-342527: Remove unnecessary list traversals on rbac.check- xapi/rbac: Remove the non-\"efficient\" code path- xapi/rbac_audit: do not audit rrd_updates- CA-371780: Reduce cost of merge_new_dss- rbac_audit: refactor module- CA-372128: DB performance optimisations- CA-140252: fix flag handling- CP-40190: vTPM - Fix xenopsd to indicate correct state file format to swtpm-wrapper.- CP-40747: Add certificate checking options to sparse_dd and vhd-tool- CP-33044 define attach/detach IDL calls for gpumon- CA-371780: Port xcp-rrdd tests to alcotest- CA-371780: Reduce overheads in update_rrdds- CP-40823 Edited Vdi.t in xapi/storage_impl.ml to record vm- CP-40823 Created tests to the modules in storage_impl- CP-41028: enable certificate checking for storage migrations- CP-40190: Prevent SWTPM from filling dom0 root partition- xenopsd: define uncaught-exception handler- CA-369444: Ensure xenopsd still starts if VM state upgrade fails- CA-371419: Always log exceptions when responding with 500 Internal Error- CA-369690: Prioritize loglines when backing up RRDs- CA-369690: Reduce logging produced by xmlrpc_client- Debug: remember previous log names per thread in a stack- Do not log out session in xapi events loop to re-register VMs- Enable HTTPS for storage migration on the source * Thu Nov 17 2022 Christian Lindig - 22.31.0-2- CP-33044 install gpumon-cli * Tue Nov 01 2022 Rob Hoes - 22.31.0-1- CA-370575: [XSI-1310] Driver disks / supp packs applied at host- CA-370947 increase robustness of with-vdi script- CA-364194: Add a comment on static-vdis for a timeout enhancement- CA-364194: add timeout parameter to script callers in xapi- CA-364194: Allow creation of statefiles to time out- CA-370578 use subsystemId in NVidia GPU matching- maintenance: explicitely declare direct dependencies- ci: add xapi-log and xapi-open-uri- idl/json_backend: Process unreleased versioned releases- ocaml/idl: make gen_lifecycle compatible with gitless spec building- idl/json_backend: order releases from latest to oldest- CA-370082: Block multiple definitions of certificate-chain in xe cli- maintenance: avoid traversing lists twice when reading cli params- exit with error if add_vswitch_port fails- Revert `uuidx` rename in `gen_powershell_binding.ml`- xapi-idl: make storage-test be part of a package- opam: update metadata- xenopsd/dbgring: don\'t mention xenmmap dependency- CA-371759: check certificates in xsh- CP-40490: Require --force parameter to destroy VTPMs- xapi-cli-server/cli_ops: reuse --force message- xapi: group import error and cause into the same line- CP-39134: xapi-guard: do not hardcode rpc function - allow for unit testing- CP-39134: xapi-guard: separate code into own library for testability- CP-39134: basic unit test for xapi-guard- CP-39134: xapi-guard: add unit tests for bad values- CP-39134: varstore-guard: use inotify to wait for the apperance of the socket- Maintenance: xapi-guard: use Lwt.Syntax instead of Lwt.Infix- CP-39134: add shutdown unit test- CP-39134: quality gate fixups- xapi-guard/test: Count file descriptors- CP-41033: install XenAPI to Python 3- CP-41033: update XenAPIPlugin for Python3- idl/ocaml_backend: do not generate empty docstrings- idl/gen_server: Remove custom functions- CA-352073: gen_server: Serialize lists in [ ... ] form- CA-352073: Prepare to reuse defaults unmarshalling code- CA-352073: Ensure all serialized calls can pass rbac checks- CP-41033: further updates to XenAPIPlugin for Python3 * Wed Oct 12 2022 Rob Hoes - 22.30.0-1- CP-40402: Move C# and Powershell SDK Generation to .NET- opam: Update Alpine deps for xapi- CP-40754: Sync host.https_only fields on startup- CA-370140: shut down swtpm after qemu- CP-40755: Allow memory+storage+vGPU migrate to use HTTPS only- Update JSON backend for modern xapi releases- CA-368579: Mitigations against DoS attacks by unauthenticated clients (now upstream, replacing patch queue) * Wed Oct 12 2022 Rob Hoes - 22.29.0-1- CP-40753 host.set_https_only updates firewall using firewall_port_config_script helper- CP-40753 Added change to the firewall-port script to modify the RH-Firewall-1-INPUT chain- Update Makefile (un)install targets * Wed Oct 12 2022 Rob Hoes - 22.28.0-1- Revert \"Add a fallback system for auth files belonging to RPMs\"- Rename Uuid module to Uuidx- Move good_ciphersuites from Xcp_consts to Constants- Move logging lib from xapi-idl to its own package- Move Open_uri from xapi-idl to its own package- Add HTTPS support to open-uri- idl: update datamodel_lifecycle after tag- xenopsd/xc: Print all information in Service_failed exceptions- CP-39744: simplify vm_platform.sanity_check parameters- CP-39744: Block BIOS VMs with vTPM attached from booting- CP-40775: share function raising not done for vtpm exceptions- CA-370858: disallow VM exports with VTPMs attached * Wed Oct 12 2022 Rob Hoes - 22.27.0-1- Add a fallback system for auth files belonging to RPMs- CA-370084: Test pem with DOS line endings- Update lifecycle for VTPM datamodel- xapi-cli-server: change vm record to show \"vtpms\"- CA-370731: remove obsoleted copies of ca certs in the db- CA-370731: Allow pool to recover from duplicate ca certs- CP-33973 disable DMC; fix unit test- CP-40767 CP-40429 Migration Compression - define Zstd.Fast, more- CP-40749 Added https_only field- CP-40750 Added set_https_only function- CP-40751 Added and implemented Pool.set_https_only- CP-40752 Added CLI functionality for a pool level getter and setter- configure.ml: inject version number here- xapi-xenopsd.opam: declare zstd as dependency- maintenance: Remove obsolete version-gathering methods * Fri Oct 07 2022 Rob Hoes - 22.26.0-2- CA-368579: Mitigations against DoS attacks by unauthenticated clients * Fri Sep 09 2022 Rob Hoes - 22.26.0-1- Introduce vTPM * Mon Aug 22 2022 Rob Hoes - 22.25.0-1- XenAPI.py: Simplify and fix UDSTransport implementation- CP-40375: Allow cert clients to perform VM.shutdown and VM.start_on- CP-37225: Added unmarshalling code for Ocaml\'s Set(Set string) for C.- Fix quicktest\'s -default-sr parameter- CP-40392 compress vGPU migration stream- CA-369599: ignore invalid references on eject- maintenance: factor out Ref.to_option and Helpers.ignore_invalid_ref * Mon Aug 08 2022 Pau Ruiz Safont - 22.24.0-2- Bump release and rebuild * Fri Jul 29 2022 Rob Hoes - 22.24.0-1- CP-39894: move xenopsd\'s daemon modules from device to service- xenopsd/xc/service: add licensing header- CP-39894: move all varstored starting code to service module- CP-39894: move vgpu starting code to service module- CP-39894: Replace is_pidfile and pid_path with pid_location- CP-39894: tweak Service.Qemu interface- CP-39894: Use pid_location for file and xenstore cleanups- CA-366479: Remove Qemu\'s pidfile on domain shutdown- Factor out Throttle module- Update datamodel_lifecycle.ml only when changed- ci: generate releases from tags, upload XenAPI python lib- CHCLOUD-717: Spawn a thread to run xe-toolstack-restart- CP-40155 Parallelize Host.evacuate- CP-37091: Updated samples and fixed some code issues in the Java SDK.- CP-37225: Added unmarshalling code for Ocaml\'s Set(Set string) for C# and PS.- Removed dependency on 3rd party libraries from the PS module project.- CP-37091: Fixed some code issues in the PowerShell SDK.- CA-368910: Allow destruction of PVS_cache_storage if SR is already gone- CA-368437 remove duplicate keys from SM.features- CA-368806: Workaround pbis get wedged- CP-40175: Strip metadata of non-applicable livepatches- CA-347473: Minor memory leak from unloaded Xen livepatches (#4762)- CA-367236 replace Ezjsonm with Yojson * Wed Jul 06 2022 Rob Hoes - 22.23.0-1- CP-40027 VM migration introduce /services/xenops/migrate-mem- CP-39640/CP-39157 Add stream compression for VM migration- Add matching Synchronisation point 1-mem ACK log on receiver- Allow VBD.plug to dom0 again * Tue Jul 05 2022 Pau Ruiz Safont - 22.22.0-1- CA-365946: Block VIF and VBD hotplug into dom0- Update datamodel lifecycle- CP-39805: Adapt xenopsd\'s cli to new cmdliner- CP-39805: Adapt rrd tools to new cmdliner interface- CP-39805: Adapt xapi-storage-cli to new cmdliner- CP-39805: Adapt vhd-tool to new cmdliner- CP-39805: Adapt xcp_service to new cmdliner interface- CP-39805: Adapt xapi-guard to new cmdliner- CP-39805: Adapt message-switch to new cmdliner- CP-39805: Adapt xapi-gzip to new cmdliner- CP-39805: Adapt nbd to new cmdliner- CP-39805: Adapt idl clis to new cmdliner and rpclib- CP-39805: Adapt xcp_service to new cmdliner- CP-39805: Adapt xapi-idl binaries to new cmdliner- CP-39805: Adapt xapi-storage(-script) to new cmdliner- maintenance: consolidate idl\'s cli client argument parsing- CP-39805: update tests to be compatible with rpclib +8.1.2- xapi-idl: clients now better report cli errors- maintenance: make gzip rules compatible with the dune cache * Mon Jun 27 2022 Rob Hoes - 22.21.0-1- xenopsd/xc: do not log error when querying for migrability- CP-39996: Generate and push docs to xapi-storage- CP-39806: remove code without a stable formatting- CP-39806: avoid opening Threadext modules- CA-365604: Support external user ssh into dom0 with name in unicode- CA-367979: Bugfix - Wrong format of livepatch in returned updateinfo- CA-368069: Got wrong kernel base build_id- CP-39877: define activate_readonly method for SMAPIv3- Remove unused xenopsd/Makefile and qemu-dm-wrapper- CA-367979: Bugfix - Add RebootHost guidance wrongly when a livepatch failed- CA-367979: Bugfix - Add new unit test for livepatch failure case- CA-367979: Return changed guidance from host.apply_updates- CA-367979: Bugfix - Remove RebootHostOnLivePatchFailure after a completion of update- Refine unit test of eval_guidance_for_one_update * Wed Jun 08 2022 Rob Hoes - 22.20.0-1- CA-367738: Short-circuit auth of HTTP requests without auth header- CA-365905 (XSI-1215): Create a temporary file in the target download folder (...)- CA-355432: Fixed generation of method overloads.- CP-39884: generalise interface to gzip/zstd-like tools- CP-37091: Do not use a loop for only one iteration.- CP-36245: Refine merge_livepatches function- CP-32574: Apply livepatches- CP-38583: add Host.last_software_update field with data/time- maintenance: make xapi-xenops-tests more granular- maintenance: move tests for platformdata together- Use file type for is_raw_image()- XenAPI.py: define how to build package in pyproject.toml- xapi: avoid spawning processes- Added Repository Update Unit Tests * Wed May 18 2022 Rob Hoes - 22.19.0-1- libs/uuid: run tests only in the uuid package- CP-39805: Avoid deprecated bindings in mtime- Datamodel: replace some recent rel_next entries- CA-366801: xsh: fix XAPI blob sync and EBADF- CP-38688 introduce Message.destroy_many() API/CLI call- Upgrade VM runtime state when xenopsd restarts- CA-367120: Missing net new RPMs in picking up metadata from updateinfo- CA-367120: Add un-installed packages into accumulative update list- CA-367120: Add debug logs for outputs of YUM/RPM command lines- CP-38688 make Message.destroy_many() async, too- XSI-1246/CA-367232: Daily license re-apply fails is HA is enabled- Filter input dns when reconfiguring a pif IP(v6)- CA-366309: ignore HA when checking update readiness * Tue May 10 2022 Christian Lindig - 22.18.0-2- CP-39640 add zstd dependency for suspend/migration stream compression * Wed Apr 27 2022 Rob Hoes - 22.18.0-1- CA-366014: pass -dm qemu to UEFI qemu too- CP-39551: avoid warnings in xapi- Don\'t use --force in gzip decompress- CP-34028: Replace Uuidm with Uuid wherever possible- CP-32574: Life-patch support part 1- CA-366098: Raise internal xenopsd error on task timeout * Wed Apr 20 2022 Rob Hoes - 22.17.0-1- Add binary xapi_gzip for testing Xapi_compression- CA-366430: do not wipe PK.auth/dbx.auth * Tue Apr 19 2022 Rob Hoes - 22.16.0-1- CA-366428: Add temporary feature \'Internal_repo_access\' to allow update in mix mode- Add `9pfs` backend to vbds- Sync varstore certificates in XAPI with those on disks- CP-39551: avoid warnings- Fixes regarding DNS management in IPv6- ci: fix testing of xapi-xenstored in newer opam\'s sandboxes * Wed Apr 13 2022 Rob Hoes - 22.15.0-1- CA-364138 XSI-1217: fix FD leak, Unix.EMFILE- CA-365900: Clean up remanent stunnel client proxy- CA-359978: Flush IP addresses when switching from static to DHCP- CA-355588: users in pool admin group which contains # can not ssh into dom0- CP-35846: Restrict access to internal yum repo server (members only) * Fri Apr 01 2022 Rob Hoes - 22.14.0-1- CA-363700: update xenopsd platformdata if rtc-timeoffset changes- CA-365474: Synchronize trust roots at startup- Make Xapi_compression.compress more polymorphic * Mon Mar 28 2022 Rob Hoes - 22.13.0-1- CA-365130: print exception on backup failure- CA-365130: Print the name of signals in FE exceptions- CA-365121: pool join: require common xapi versions- CA-364021: reload certificates offered after emergency-reset-server-certificate- CA-365438: Retrieve updateinfo.xml.gz file path from repomd- CA-365438: Retrieve group file path from repomd- CA-365516: CLI: protect cmdtable population with mutex- CP-33973: disable DMC- Fix and extend bugtool plugins * Wed Mar 23 2022 Rob Hoes - 22.12.0-2- Add dependency on pvsproxy to xcp-networkd * Tue Mar 15 2022 Rob Hoes - 22.12.0-1- CA-364630: Add [post|put]_services_xenops to client auth permission list- CA-364450: Fix YUM repo config for repo metadata checking- CP-39209: Add new field \'gpgkey_name\' in repository object- CA-364138: log when about to stop varstored and varstore-guard- CA-365279: Client-cert auth: use CAfile- CP-39375: Remove RPM gpgcheck in reposync- CA-365112: Permit pool admin username with space to ssh login- Fist point of cert exchange: keep all operations- maintenance(ocaml): remove warnings- maintenance: avoid using Cstruct.len- maintenance: replace Lwt_unix.yield usages- maintenance: dedicate a test binary for repository test_repository_helpers- maintenance: remove most usages of Re.Str * Thu Mar 03 2022 Rob Hoes - 22.11.0-1- CP-38450: Add pool.set_wlb_enabled permission for client auth- REQ-403 add cert checking for clusterd * Mon Feb 28 2022 Rob Hoes - 22.10.0-1- CA-363903: Winbind does not rotate keytab file- CA-363903: Enable UPN format in hcp_users- CA-363903: Rotate machine password on Closest KDC- CA-362704: Hide proxy_username and proxy_password for repo proxy- CA-362704: Remove credential related info from remote repository conf file * Mon Feb 21 2022 Rob Hoes - 22.9.0-1- CP-39031 keep more xapi version details for Host.software_versions- CP-38462: Recognise ethtool-advertise on PIFs- CP-38763: Enforce kerberos protocol talking with DC * Tue Feb 15 2022 Rob Hoes - 22.8.0-2- Bump release and rebuild with OCaml 4.13.1 compiler. * Mon Feb 14 2022 Rob Hoes - 22.8.0-1- CP-38610: Automatically record the versions of new datamodel elements- Update lifecycles for existing API elements- Update version comparison for numbered versions- Replace rel_next with actual versions- CA-363633: Always take the generation-id directly from xapi * Wed Feb 09 2022 Rob Hoes - 22.7.0-1- xenopsd: explicitly clean VM state if VM_restore failed during VM_receive_memory- CA-363207: SSH access failing when using AD groups with spaces in name- XSI-791/CA-343760: Make reboot equal to shutdown+start for CPUID changes- CA-362924: Fix typo when syncing repository fails- XSI-1175 make message limit configurable- Maintenance: reformat with new ocamlformat version- CA-363391: fix wake-on-lan script- Use Filename to concat varstore dir and file- CA-363154: Use repoquery to get available updates- CA-363154: Remove usage of \'yum list updates\'- CA-363154: Ignore errors in repo update- CA-363154: Use repoquery to get installed packages * Thu Feb 03 2022 Rob Hoes - 22.6.0-1- CA-361209: When using WoL find the remote physical PIF- CA-361209: add vlan references to PIF\'s cli records- REQ-403 Enable TLS verification by default- REQ-403 make cron job for cert rotation conditional- Fixes to prepare for OCaml upgrade * Wed Jan 26 2022 Rob Hoes - 22.5.0-1- CP-38850 add xapi.conf option for cert-expiration-days- nbd: include the test binary into xapi-nbd package- ocaml/tests: workaround opam\'s sandbox on db upgrade test- use TMPDIR on tests if possible- CP-38892: add role.is_internal field- Update API version; record yangtze schema version * Tue Jan 11 2022 Rob Hoes - 22.4.0-1- Merge varstored-guard * Mon Jan 10 2022 Rob Hoes - 22.3.0-1- Merge sm-cli * Mon Jan 10 2022 Rob Hoes - 22.2.0-1- Merge xapi-nbd * Mon Jan 10 2022 Rob Hoes - 22.1.0-1- Merge wsproxy * Mon Jan 10 2022 Rob Hoes - 22.0.0-1- fix (http-svr): allow : in passwords when using basic auth- maintenance (http-svr): simplify base64.decode usage * Fri Dec 17 2021 Rob Hoes - 21.4.0-1- xapi/import: report duplicate mac seeds on import as such- Add `ignore_vdis` to `VM.snapshot` method- Fix description of configure_repository_proxy- CP-38759: Add pool.disable_repository_proxy- CP-38701: Restrict client-cert role- CA-361988 execute cluster host_resync always locally * Fri Dec 10 2021 Edwin Török - 21.3.0-3- Add coverity macros * Tue Dec 07 2021 Edwin Török - 21.3.0-2- CP-38218: obsolete xsi{f,o}stat by installing xapi-rrd2csv * Fri Dec 03 2021 Rob Hoes - 21.3.0-1- add setter for `Task.result` & `Task.error_info`- Use stunnel proxy to access internal YUM repo- Enable to set a `Task`\'s `resident_on` field.- CA-361151: Ldap does not work for cross domain 1-way trust- CA-361151: remove \'winbind offline logon = Yes\'- CA-361221: utf8_recode: use Uutf.{Buffer.add_utf_8,String.fold_utf_8} instead of Uutf.{encode,decoder}- CA-361221: utf8_recode: avoid allocations if string is all utf8- CA-361220: Do not leak xsclient thread- CA-361220: xenopsd: introduce TASK.destroy_on_finish- CA-361220: xenopsd: avoid space leak in VM.import_metadata_async- CP-35957: Update datamodel_pool for pool.configure_repository_proxy- CP-35957: Add repository proxy configurations in syncing * Thu Nov 25 2021 Rob Hoes - 21.2.0-2- Bump release and rebuild * Thu Nov 25 2021 Rob Hoes - 21.2.0-1- Introduce session.client_cert field- CA-360754: exclude client-cert sessions from revalidation- CA-360951: Failed to lookup workgroup from domain as DNS cache * Wed Nov 24 2021 Edwin Török - 21.1.0-2- Bump release and rebuild * Tue Nov 23 2021 Rob Hoes - 21.1.0-1- Fix typo in message name- CA-360997: Don\'t reject imports if the host\'s major version is larger * Fri Nov 19 2021 Rob Hoes - 21.0.0-1- Import message-switch, xcp-idl, xapi-storage, xapi-storage-script * Tue Nov 16 2021 Rob Hoes - 1.331.0-1- CA-359869: Make Sysfs.list robust against disappearing devices- CA-360634: Change the allowed role of host.apply_updates to pool operator- CA-360485: Fix SR-IOV capability detection- CA-359714: update-precheck: fix uninitialised variable- CA-360577: Add RBAC checking for client cert HTTPs requests * Wed Nov 10 2021 Rob Hoes - 1.330.0-3- Bump release and rebuild * Mon Nov 08 2021 Christian Lindig - 1.330.0-1- CA-359975: set the IP in /etc/issue on first boot- Copied README from last draft, and actually signning the commit this time- Making comment start with an uppercase- CP-38309 make TLS more explicit in clusterd interface * Wed Oct 27 2021 Edwin Török - 1.329.0-1- vhd-tool: stress test compatibility with python3- vhd-tool: Adapt stress-test to alcotest 1.0- CP-38046: Add token in pool.sync_updates to support repository client authentication * Thu Oct 21 2021 Rob Hoes - 1.328.0-1- Merge xcp-networkd * Thu Oct 21 2021 Rob Hoes - 1.327.0-1- CA-356541 migration debug msg: ensure host is defined- Replace ETCDIR by ETCXENDIR everywhere in scripts/ * Tue Oct 19 2021 Rob Hoes - 1.326.0-1- Merge xenopsd and squeezed * Wed Oct 13 2021 Rob Hoes - 1.325.0-1- stunnel/gencert services: use Wants rather than Requires * Wed Oct 13 2021 Rob Hoes - 1.324.0-1- CHCLOUD-109: Remove checking on \'description\' field in updateinfo- CA-357075: Handle error from get_cluster_config call during RPU- CA-359835: Enable \'Updates\' feature in rolling pool update * Mon Oct 11 2021 Rob Hoes - 1.323.0-1- Maintenance: remove warnings- CA-359214: Only restart stunnel if the config file has changed * Fri Oct 01 2021 Rob Hoes - 1.322.0-1- XenAPI.Session: raise exception on attempted forwarding of python magic methods- CA-358904 REQ-403 cross pool migration must not use cert checking- CA-356358: enable clustering daemon before attempting RPC call to fetch pems- CA-358326 log cron job for cert refresh in syslog- Remove old-style xva import code (finally)- xe: remove prefix-match workaround- CA-357785: Stop metrics binaries from logging to stdout- maintenance: remove option to daemonize metric collectors- CA-359226 add fist point to backdate new certs during testing * Wed Sep 22 2021 Rob Hoes - 1.321.0-1- Merge tapctl and vhd-tool- Upgrade to dune 2.0 * Tue Sep 21 2021 Rob Hoes - 1.320.0-1- CA-358904 REQ-403 cross pool migration must not use cert checking- CA-359076: avoid DB calls when starting management server- CP-38206: Merge xen-api-libs-transitional * Fri Sep 17 2021 Rob Hoes - 1.319.0-1- CA-358898: handle IPv6 state when management disabled * Thu Sep 16 2021 Rob Hoes - 1.318.0-1- CP-35393: Introduce client_certificate_auth- CP-34726: Use a separate service and port for the client cert auth- CP-34727: configure unix socket for client certificate auth- CP-36249: Reconfigure management server when en/disabling client certificate auth- CP-37692: Introduce RBAC role for client-auth sessions- Use port 443 for client certificate auth (again)- Duplicate cipher options in stunnel SNI service- Change role for repository-related calls to pool-operator- CP-37598: Add feature flag to restrict updates from a repository- Fix missing xenopsd diagnostics from bugtools- Fix handling of web-dir parameter- CA-356959: Decide user account locked out by lockoutTime- CA-358568: Password expired could not show on XenCenter- CA-358816: Updated subject name in DC does not get updated in pam * Mon Sep 13 2021 Rob Hoes - 1.317.0-4- CA-358445: move %pre section to xcp-rrdd subpackage * Mon Sep 06 2021 Rob Hoes - 1.317.0-3- CA-358445: add rrdmetrics group (missing in xcp-rrdd merge) * Fri Sep 03 2021 Rob Hoes - 1.317.0-2- Bump release and rebuild * Thu Sep 02 2021 Rob Hoes - 1.317.0-1- CP-37370 add certificate-refresh to cron.daily- CP-37370 revert this for release: use cron.hourly * Wed Sep 01 2021 Rob Hoes - 1.316.0-1- Specsavers: merge xcp-rrdd- CP-37590: Replaced negative language within `FriendlyErrorNames.resx`- CP-37590: Replaced negative language within `datamodel_errors.ml`- CP-37590: Remove useless override in C# SDK generation- Amend typos in errors datamodel- Undo TLS verification change from v1.315.0, which was incomplete * Thu Aug 26 2021 Christian Lindig - 1.315.0-1- Enable TLS verification by default * Wed Aug 25 2021 Christian Lindig - 1.314.0-1- CA-357025 enable TLS cert checking for pool and WLB together * Wed Aug 25 2021 Christian Lindig - 1.313.0-1- Add datamodel option to log Db.X.destroy calls- CA-356441: reload-or-restart sshd to apply sshd configuration- REQ-403 CA-356724 unix time serial number to xapi-pool-tls.pem- Stunnel.reload: wait 5s by default- CA-355657 wait before serving refrehed SSL cert- Fix issue #4491: USB device reset for Privileged VMs (with PCI device attached) is not working due to bad argument \'-r\'- CP-36863: Expose local YUM repository only on TLS interface- CA-357151 REQ-403 add joiner\'s ca certs to db- CA-357151 REQ-403 consistent output about ca certs- CA-356854 REQ-403 ejected hosts come back with verification enabled- REQ-403 revert me! FIRSTBOOT_ENABLE_TLS_VERIFICATION=false- CP-37866 add Host.tls_verification_enabled field- CA-354374: Update pool_cpuinfo and pool_features after the ejected host having been destroyed- CP-37898: Make winbind encryption types configurable- CA-357417 REQ-403 ensure valid cert alerts are not deleted * Mon Aug 09 2021 Edwin Török - 1.312.0-4- Re-enable upgrade-pbis-to-winbind * Mon Aug 02 2021 Rob Hoes - 1.312.0-3- Temporarily revert upgrade-pbis-to-winbind requirement * Thu Jul 29 2021 Rob Hoes - 1.312.0-1- Merge winbind feature branch- REQ-403 change type of cert generated during cert refresh * Thu Jul 29 2021 Rob Hoes - 1.311.0-1- CP-37571 REQ-403 add fist to Cert_distrib.exchange_certificates_in_pool * Thu Jul 29 2021 Rob Hoes - 1.310.0-1- REQ-403: failed_login_alert_freq- Add explicit package to dune tests- REQ-403 concurrency fixes pt 4- Revert \"REQ-403 concurrency fixes pt 4\"- maintenance: add copyright to cert_distrib files- REQ-403 use pool ops rather than cert distrib mutex- REQ-403 replace exchange_certificates_on_join lock- REQ-403 remove exchange_certificates_among_all_members lock- REQ-403 replace exchange_ca_certificates_with_joiner lock- REQ-403 replace copy_primary_host_certs lock- REQ-403 pool ejectees should remove trusted ca certs- ci: run format on future feature and lcm branches- configure: work around read-only /tmp found in opam\'s 2.1.0- CA-356977 REQ-403 fix broken external auth for Host.reset_server_certificate * Mon Jul 19 2021 Rob Hoes - 1.309.1-1- Revert \"Remove unused function\"- qualitygate: expect 1 instance of \"==\" * Mon Jul 19 2021 Rob Hoes - 1.309.0-1- Import xen-api client- CP-36098 don\'t refresh certs if any host offline- quality-gate: error if somebody used physical equality- REQ-403 define how to generate cluster certificates- REQ-403 give cluster daemon pem information- CP-36097 REQ-403 write_pem API impl- CP-36097 REQ-403 cluster must have a pem file before enabling tls verification- CP-36097 REQ-403 cluster pems never expire- CP-36097 REQ-403 use result monad rather than exceptions in selfcert- CP-36097 REQ-403: maybe restart cluster daemon on cert refresh * Thu Jul 08 2021 Christian Lindig - 1.308.0-1- CA-355629 use hostname for CN in host cert * Mon Jul 05 2021 Rob Hoes - 1.307.0-1- CP-36098 introduce host-refresh-server-certificates- CP-36098 add path argument to Gencertlib.Lib.install_server_certificate- CP-36098 new API: host.refresh-host-certficate- CP-36098 introduce pool op cert_refresh- CA-355657 XSI-1037 reduce load during bugtool- Maintenance: fix unixpwd warnings about loosing const qualifier- Maintenance: fix indent in unixpwd- CA-341715: control-domain-params-init: skip on upgrade- CA-355625 reload Stunnel instead of restart after cert change- CA-355625 remove dead code- CA-341715: fix control-domain-params-init- REQ-403 copy_primary_host_certs API call- REQ-403 am i missing certs thread- REQ-403 only exchange certs between primary and joiner during pool.join- REQ-403 best effort distribution of joiner\'s pool certs to all hosts- REQ-403 check for missing certs only when db connection established * Fri Jun 25 2021 Edwin Török - 1.306.0-1- REQ-403 update_ca_bundle lock- Only add XAPI message for VM when migration is live and intrapool * Thu Jun 24 2021 Edwin Török - 1.305.0-1- Remove unnecessary scope restriction Result- CA-354414 perform best effort Pool.eject cleanups- REQ-403 cert_distrib lock- CA-355571: Include accumulative updates for updates description and guidances- CA-355571: Refine precedence between guidances- CA-355571: Unit Tests: Include accumulative updates for updates description and guidances- CA-355571: Unit Tests: Refine precedence between guidances- Add more messages to a VM lifecycle * Fri Jun 11 2021 Rob Hoes - 1.304.0-1- CA-354260 REQ-403: check certs haven\'t expired before installing them- CA-354834 log ref, uuid when adding CA cert- Fix update-ca-bundle.sh hangling of deleted certs- CP-37014 verify TLS-based RPC before enabling it- CA-354834 log ref, uuid when adding CA cert- CA-355179: Support epoch in RPM- CA-355179: Support epoch in RPM: Update unit tests- CA-355179: Support epoch in RPM: Add unit tests- CA-355180: Improve parsing output of \'yum list updates\'- Added missing release date and restored as yet unreleased versions in the API docs.- Build the doc-json target as part of the install target. Restructured output.- Remove pool.slave_network_report- Audit log: extend suppression to calls with _ separators- CP-36178: Add basic precheck function for updates- Removed rel_honolulu as it contained no API changes. Updated last_known_schema_hash.- fixup! CA-355179: Support epoch in RPM- Fix SDK build * Thu May 27 2021 Rob Hoes - 1.303.0-1- CA-354689 don\'t fail if host cert to be removed doesn\'t exist- Maintenance: reformat code- xapi_pool_helpers: refactor call_fn_on_hosts- C# SDK: Fixes to generated code:- CP-35955: Datamodel: Add pending_guidances for host- CP-35955: Datamodel: Add pending_guidances for VM- CP-35955: Bump up last_known_schema_hash- CP-35955: Add absolute guidances in pending_guidances- CP-35955: Clean up pending guidances- CA-355039: Support single guidance from one update in updateinfo.xml- Adapt xe-reset-networking for IPv6 * Thu May 20 2021 Rob Hoes - 1.302.0-1- CP-35348 cover alerts for internal and CA certificates- xapi-cli-protocol: make unit-tests runnable- fix: cli protocol tests cannot depend on xapi-cli-server- xe-enable-ipv6 edits net.ipv6.conf.{ all | default }.disable_ipv6- Maintenance: replace deprecated Listext.assoc- Set IPv6 parameters in check_network_reset- cert_distrib: refactor go method- CP-36866: Generalize code for certificate distribution- CP-36866: block pool join when ca certificates might conflict- CP-36866: Distribute CA certificates on join * Mon May 17 2021 Rob Hoes - 1.301.0-1- Centaurus repository APIs: merge from feature/centaurus/master-1 * Mon May 10 2021 Rob Hoes - 1.300.0-1- CP-35523: Always accept requests from the unix socket * Fri May 07 2021 Rob Hoes - 1.299.0-1- CP-35523: Block access to the website on port 80 * Thu May 06 2021 Rob Hoes - 1.298.0-1- CP-36744: Allow users to reenable tls cert checking- CA-329462 Cluster.create should clean up if it fails- ci: quality-gate shell script- CA-353388: Control debug level by debug_stunnel env variable- CP-36658 remove certs of host when it is ejected- CA-349123: Tweak previous hotplug fix- CA-353553 add API error for when NVidia GPU is misconfigured- CA-353747 accept RSA and EC private key headers in PEM- CA-353747 add negative test case- CP-34467: Exchange certificate when a hosts joins a pool- CP-34467: simplify certificate distribution * Tue Apr 27 2021 Rob Hoes - 1.297.0-1- CP-34467: Pre-join checks for TLS verification- CA-353309: Create correct filters for uninstalling ca certs- CP-34467: Avoid Not_found error when getting remote pool- CP-36750: Block enabling TLS verification on pool ops- Enable to choose a migration network in `VM.pool_migrate`:- CA-349123: Fix metadata race in VBD/VIF plug * Thu Apr 22 2021 Rob Hoes - 1.296.0-1- REQ-403: Display expiry for certificates on the cli- CA-341715: Sync certificates after bringing up mgmnt IF- CP-36690 at startup, sync host certs with DB- CP-36690 fix update_certificates at startup * Wed Apr 14 2021 Rob Hoes - 1.295.0-2- Bump release and rebuild * Wed Apr 14 2021 Rob Hoes - 1.295.0-1- CP-36509 update db for xapi_ssl.pem on startup if changed- CP-36509 simplify cert decoding- CP-36509 add MLI for certificates_sync module- fixup! CP-36509 simplify cert decoding- CP-36099 REQ-403 add type:host_internal to cert db schema- CP-36099 REQ-403 add host_internal cert type to db utils- CP-36099 REQ-403 only produce alerts for `host certs- fixup! CP-36509 simplify cert decoding- REQ-403 file system helpers- REQ-403 declare cert related files/folders in xapi_globs- CP-36510 REQ-403 distribute certs during Pool.enable_tls_verification- CA-353011: Clean up certificates from unknown hosts- CP-34469 on pool eject, remove host certificates- XSI-995 handle case where pci doesn\'t exist in VM.power_state_reset * Thu Apr 01 2021 Rob Hoes - 1.294.0-1- CP-36100 extend update-ca-bundle to handle pool certs- maintenance: reformat- REQ-403: remove deprecated host cert (un)install calls- CA-36099 REQ-403 add name and type to certificate db record- CP-36099 REQ-403 comment about cert locations- REQ-403 CP-36099 remove / add certs to db when un / installing them- REQ-403 CP-36099 initialize rng- CP-36100-3 Use explicit config for TLS Stunnel verification- CP-36100-3 set TLS verification default at Xapi startup- CP-36100-3 verify VNC connections as a pool-level connection- CP-36100-3 change name of Stunnel.verification_config- CP-36100-3 make ~verify_cert:None more explicit- CP-36100-3 count verify_cert:None in Makefile- CP-36100-3 persist TLS emergency flag- README file was left out of the package.- CP-36100: format code around rrdd commands * Fri Mar 26 2021 Rob Hoes - 1.293.0-2- Bump release and rebuild * Fri Mar 12 2021 Rob Hoes - 1.293.0-1- Merge xen-api-sdk repo to \'ocaml/sdk-gen/\' from commit \'e278e5de021b0f354d2a98810cf77ad3a1b7de40\'- CP-36113: Added targets for compiling the SDK generator and generating the SDK source code.- Keep the java library and samples version in sync.- Added the xen-api-sdk package to the tests.- Auto-formatted files. * Wed Mar 10 2021 Konstantina Chremmou - 1.292.0-2- CP-36113: Merged the SDK into xapi. * Mon Mar 08 2021 Rob Hoes - 1.292.0-1- Initialise Mirage RNG on startup * Fri Mar 05 2021 Rob Hoes - 1.291.0-1- CP-36096: Generate two certificates at startup- CP-36096: serve the new certificate for xapi:pool clients- CA-352329: Revert original formatting of lists in xapi-cli-server- xapi-cli-server: Consolidate formatting on comma-separated lists- xapi-cli-server: consolidate formatting of semicolon-separated lists * Tue Mar 02 2021 Rob Hoes - 1.290.0-1- When creating bonds, use primary_member\'s primary_address_type- When creating tunnels, use transport_PIF\'s primary_address_type- When creating vlans, use tagged_PIF\'s primary_address_type- make format- When creating sriov networks, use physical_ref\'s primary_address_type- CA-352111: Do not output on cronjobs unless there\'s an error- xapi-cli-server: clean up imports and comments- xapi-cli-server: be consistent when showing list of references- xapi-cli-server: be consistent when showing lists- REQ-403 CP-33822 add IP address as SAN in self-signed certs- CP-36096: Move helper_hostname to xapi_aux- CP-36096: Move functions that collect hostnames and ip to xapi-aux- CP-36096: Hostnames for certificates are gathered consistently- CP-36096: Allow any number of IPs in SAN- CP-36096: Move format conversion of mgmt IP to the edge- CP-36096: generate x509 extensions when the issuer is- CP-33822: Use Unix.gethostname instead the hostname binary- maintenance: restrict the usage of read_localhost_info- Replace gethostbyname by getaddrinfo to support IPv6- CA-265116 rename and deprecate Pool cert functions- CA-265116 rename and deprecate Host cert funtions- CA-265116 use new names for cert functions- REQ-403 CP-34468 add Host.reset_server_certificate- REQ-403 add module to split PEM files- REQ-403 use Pem.parse_file- REQ-403 introduce path to CA certificates- REQ-403 CP-33822 enable_tls_verification- REQ-403 CP-34461 emergency disable tls verification- REQ-403 CP-34461 tls verification health check- CP-34942: Update pem library for angstrom 0.14.0+- REQ-403 CP-35584 deprecate wlb_verify_cert- CP-35761: Add feature flag for TLS certificate checking- REQ-403: add logging to cert related handlers- CA-351391: Make certificate alerts ignore CA certs- REQ-403 bump schema version- CP-34643: Reduce usage of Listext- maintenance: avoid warnings for unused names- CP-32669: Remove vendored PCI library * Tue Feb 23 2021 Rob Hoes - 1.289.0-1- CP-36094 add SNI to stunnel server config- Revert \"CA-342527: Avoid traversing lists when possible\"- CP-34472 expose User-Agent from a context- CP-34472 throw the correct error on auth failure- CP-34472 ensure auth error is thrown correctly- CP-34472 add ability to record login failures- CP-34472 actually record login failures- CP-34472 generate failed login alerts- REQ-403 CP-34472 include IP address in login fail alerts- REQ-403 CP-34472 use UTC in failed login alerts * Tue Feb 16 2021 Rob Hoes - 1.288.0-1- CA-342527: remove argument logging of VMPP messages- CA-342527: Avoid traversing lists when possible- xapi: remove unused json module- maintenance: detect schema updates which are missing version bumps- ci: count usages of List.hd- Remove usage of List.hd in gencert * Fri Feb 05 2021 Rob Hoes - 1.287.0-2- Bump release and rebuild * Tue Jan 26 2021 Rob Hoes - 1.287.0-1- Support IPv6 in vncproxy- ci: check whether code in PRs is formatted- XSI-804 ensure HVM boot params consistent- maintenance: default hvm boot policy constant- CA-351323 XSI-828 fix snapshot metadata lookup * Tue Jan 26 2021 Rob Hoes - 1.286.0-1- CA-343646: generate certificate alerts- CA-343646: Avoid using API when no alerts are going to be modified- maintenance: format code with ocamlformat- Allow migration on IPv6-only host * Wed Jan 06 2021 Rob Hoes - 1.285.0-2- Bump release and rebuild * Mon Jan 04 2021 Christian Lindig - 1.285.0-1- CP-34602: test get_server_localtime and message.get_since- Add ipv6 addresses to this_is_my_address- Wrap IPv6 addresses when creating URLs- Continue fixing console location in IPv6- CP-34643: Replace deprecated usages of pervasiveext * Wed Dec 16 2020 Christian Lindig - 1.284.0-1- CA-350253: cli_operations: use `set []` when clearing if available- CA-320523: records: implement setting of the map for `xenstore-data` * Wed Dec 02 2020 Christian Lindig - 1.283.0-1- CP-34942: update dmidecode parser for angstrom 0.14- CA-348700: Block VDI.copy if on-boot=reset * Fri Nov 27 2020 Christian Lindig - 1.282.0-1- Fix IPv6 console location * Fri Nov 20 2020 Christian Lindig - 1.281.0-1- ci: unpin packages on cleanup * Wed Nov 18 2020 Edwin Török - 1.280.0-3- Re-enabled automatic ocaml dependency generator * Wed Nov 18 2020 Edwin Török - 1.280.0-2- CA-349027: be explicit about the choice of sendmail implementation * Thu Nov 12 2020 Christian Lindig - 1.280.0-1- CA-332779: Update power_state first in force_state_reset_keep_current_ops- CA-332779: Avoid VM.remove in maybe_cleanup_vm- CA-347560: Call VM.import_metadata_async for MD updates * Tue Nov 10 2020 Christian Lindig - 1.279.0-1- CP-35021 VM.suspend - assert support for NVidia cards- CP-35021 introduce new API error for vGPU suspend * Thu Nov 05 2020 Christian Lindig - 1.278.0-1- CA-347543 use /usr/bin/pool_secret_wrapper only if CC * Thu Oct 29 2020 Christian Lindig - 1.277.0-1- CP-35210: log why a private key or certificates failed to validate- CP-32138: rely on systemd to have wsproxy available- maintenance: update github actions dependency- maintenance: Schedule weekly run for 1.249-lcm- ci: do not cache unversioned packages, update versiones ones- CA-347611 Revert \"CA-332779: Update power_state first in force_state_reset_keep_current_operations\"- CA-347611 Revert \"CA-332779: Avoid VM.remove in maybe_cleanup_vm\" * Thu Oct 22 2020 Christian Lindig - 1.276.0-1- CA-332779: Update power_state first in force_state_reset_keep_current_operations- CA-332779: Avoid VM.remove in maybe_cleanup_vm- CP-35026 tell stunnel to provide inet address info- CP-35026 utils for extracting IP addresses- CP-35026 add client field to Context.t- CP-35026 pass client info to the debug module- maintenance: format * Wed Oct 21 2020 Christian Lindig - 1.275.0-1- CA-333441 - restarting ISCSI daemon after setting initiator IQN- CA-333441: Do not fail the startup sequence if the iSCSI initiator cannot be set- maintenance: allow tests to run in a sandbox- fix: update ocamlformat metadata to work with 0.15.0- maintenance: format code with ocamlformat * Thu Oct 15 2020 Christian Lindig - 1.274.0-1- fix: correctly show add_to_sm_config to logs * Mon Oct 12 2020 Christian Lindig - 1.273.0-1- Revert \"CA-333441 - restarting ISCSI daemon after setting initiator IQN\" * Thu Oct 08 2020 Christian Lindig - 1.272.0-1- CP-34942: update for rpclib 7 compatibility- CP-34942: adapt to message-switch usage of result- CP-34942: update for rpclib 8 compatibility- CA-333441 - restarting ISCSI daemon after setting initiator IQN- opam: add jobs for build and tests for all packages * Mon Oct 05 2020 Christian Lindig - 1.271.0-1- CA-333441 - restarting ISCSI daemon after setting initiator IQN- Delete unimplemented HTTP action definitions- Remove misleading comment on expose_get_all_messages_for- CA-262525: add missing parameters to HTTP actions- Add 2 new methods to the `Host` object * Wed Sep 16 2020 Christian Lindig - 1.270.0-1- Branding for the Stockholm release.- CA-332605 Fixed Bad error message for vcpu/cores-per-socket- maintenance: make call_script interface cleaner- maintenance: reintroduce missing PSR unit tests- maintenance: remove AATT list concats in suite_alcotest- maintenance: remove reference to unused file- maintenance: Remove travis CI- maintenance: remove unused pool op valid assert from mli- define rel_next- REQ-819 CA-34357 add PSR feature flag- REQ-819 CA-34873 remove genptoken & genptoken.service- REQ-819 CP-33774 PSR orchestration- REQ-819 CP-33777 expose code to generate ptoken as a library- REQ-819 CP-33777 real implementation- REQ-819 CP-33777 store list of pool secrets rather than only one- REQ-819 CP-33780 add pool secret rotation fistpoints- REQ-819 CP-34357 add designate_new_master to pool operations- REQ-819 CP-34357 block PSR if any pool operations are in progress- REQ-819 CP-34379 don\'t proceed with rotation if PSR state is inconsistent- REQ-819 CP-34873 generate pool secrets optionally via script- REQ-819 CP-34936 don\'t log result from pool_secret_wrapper- REQ-819 make PSR and HA mutually exclusive- REQ-819 rel_next -> rel_stockholm_psr * Wed Sep 16 2020 Ben Anson - 1.269.0-2- REQ-819 CP-34873: remove genptoken services * Mon Sep 14 2020 Christian Lindig - 1.269.0-1- CA-344268: Fix timing issue in PBIS available check- CA-265116 clarify doc for CA Cert Revoc. Lists- CP-33823 replace generate_ssl_cert with OCaml code for more control * Mon Sep 14 2020 Christian Lindig - 1.268.0-1- CA-322708 - VM must not be allowed to start during storage migration * Tue Sep 08 2020 Christian Lindig - 1.267.0-1- XSI-795 CA-343951 fix Nvidia version parsing * Wed Sep 02 2020 Christian Lindig - 1.266.0-1- CA-343769 get CC_PREPARATIONS from xs-inventory- Do not lose backtrace in RBAC * Fri Aug 28 2020 Christian Lindig - 1.265.0-1- XSO-974: add full lifecycle to VM.last_booted_record- maintenance: formatting- maintenance: remove occurences of !=- maintenance: remove occurences of \' == \'- maintenance: ensure all fistpoints work as expected- Remove duplicate line from xapi.service- CP-33121: open listext from its own library- CP-33121: open xstringext from its own library- CP-33121: open unixext from its own library- CP-33121: open threadtext from its own library- CP-33121: open pervasiveext from its own library- CP-33121: open date from its own library- CP-33121: Remove all open Stdext- CP-33121: Stop depending on stdext * Mon Aug 17 2020 Christian Lindig - 1.264.0-1- CA-341155: Fix console refresh when starting management server- Remove Xapi_mgmt_iface.rebind- CA-342171 fix get_server_localtime- CA-343230 improve bewildering HTTP 403 error- CA-343230 assert (rather than assume) that update VBDs are attached- xapi_mgmt_iface: restructure- xapi_mgmt_iface: hide himn_addr ref from the interface- Remove Xapi_network.detach call from Xapi_vlan.destroy- Clear the HIMN state if the network is detached- CA-342551: Avoid replacing certificate alerts * Wed Aug 12 2020 Christian Lindig - 1.263.0-1- Improve HA parameter derived from timeout (#4169)- CA-343117: host-backup: Include /boot/efi in the tarball * Thu Jul 30 2020 Christian Lindig - 1.262.0-1- CA-319021 fixed resident_on field update issue- maintenance: make format- maintenance: do not link to system OCaml when using opam * Fri Jul 24 2020 Christian Lindig - 1.261.0-1- merger rrd2cvs into xapi- CP-34439: ensure rrd2csv compiles alongside xapi- CP-34439: tidy rrd2csv after merging into xapi * Tue Jul 21 2020 Christian Lindig - 1.260.0-1- CA-338596: Upload files limit should deal with the dot style- CA-338608: Limit xe client to download files specified in the args- opam: update dependencies- ci: add github actions * Fri Jul 17 2020 Rob Hoes - 1.259.0-2- Remove the patches, which have now been upstreamed. * Thu Jul 16 2020 Christian Lindig - 1.259.0-1- CP-33121: Remove unused dependency on stdext\'s fun module * Fri Jul 10 2020 Christian Lindig - 1.258.0-1- Increase sharing of strings in database- maintenance: remove Listext- CA-341988 don\'t take basename of empty update key * Fri Jul 03 2020 Christian Lindig - 1.257.0-1- CA-341149: Ensure a wait happen when the heartbeat connection fails- XSO-974: correctly reflect datamodel changes in stockholm- pci: fix tests for all distributions * Tue Jun 30 2020 Christian Lindig - 1.256.0-1- Branding for the Stockholm release * Sun Jun 28 2020 Konstantina Chremmou - 1.255.0-2- Removed patch with branding for the Stockholm release as it has moved to the repo. * Fri Jun 26 2020 Christian Lindig - 1.255.0-1- capitalise \'PEM\' in English translations of certificate error messages * Thu Jun 18 2020 Christian Lindig - 1.254.0-1- CA-340148: Format code with ocamlformat- Fix use of close_in/out on Unixfd.with_connection- CA-340776: disconnect from stunnel cleanly- CA-340776: move stunnel disconnection to the end where it was- maintenance: bump schema version- CA-335033 avoid idle connections during VDI copy * Tue Jun 16 2020 Christian Lindig - 1.253.0-1- maintenance: move tar_helpers to xapi_aux- maintenance: format code with ocamlformat * Tue Jun 16 2020 Christian Lindig - 1.252.0-1- fix pool config parsing * Mon Jun 15 2020 Christian Lindig - 1.251.0-1- CP-33121: remove stdext\'s hashtbl only usages- CP-33121: Remove stdext\'s range usages- CP-33121: remove stdext usages in xapi_vm_helpers- CP-33121: Remove stdext\'s usages from xapi_xenops- opam: add fedora depexts- maintenance: remove compilation warnings- CP-33121: remove stdext usages from xapi- CP-33121: remove stdext\'s usages from xapi-cli-server- maintenance: use label to remove warning- maintenance: add direct dependencies to dune files- CP-33121: remove stdext\'s usages from xapi-aux- maintenance: add missing transitive dependencies to dune files- maintenance: drop stringext dependency- mainteance: reduce reliaance on sexplib- adding sriov_configuration_mode `manual, Net.Sriov.enable return Manual_successful and respective handling * Fri Jun 12 2020 Christian Lindig - 1.250.0-1- Revert \"Revert \"CA-334811 assign xapi version automatically\"\"- Enable to create a VM in `Suspended` state with a `suspend_VDI` set- Allow migrate_send during RPU- Fix use of close_in/out on Unixfd.with_connection- CA-340776: disconnect from stunnel cleanly- maintenance: removed deprecated UTC assertion- restructed Tar to remove warnings- Open VxLAN port of VxLAN tunnels: * Mon Jun 01 2020 Christian Lindig - 1.249.0-1- maintenance: improve IMPORT_INCOMPATIBLE_VERSION error message- maintenance: fix build with workspaces- CA-337546: update to new Stunnel_cache API with Safe_resources support- CA-337546: enable runtime warnings- Revert \"CA-334811 assign xapi version automatically\" * Fri May 29 2020 Christian Lindig - 1.248.0-1- Format extauth_plugin_ADpbis- maintenance: improve logging when loading db backup fails- CA-334811 assign xapi version automatically- CA-338602: lwsmd daemon should not be running when AD is not configured- CA-338602: Enable nsswitch during bootup if host is authed with AD- CA-337867: Expose \'scheduled_to_be_resident_on\' to XAPI event- CA-339526 make gc_compact call public- CA-339329 firstboot scripts shouldn\'t sync DB when ugprading- CA-339656 use HOME when generating SSL certificate- CA-339656 print generate_ssl_cert output neatly- CA-339656 add generate_ssl_cert to essential executables- CA-338565: Improve error message for uploading file exceeds the limit.- CA-337867: Expose \'VM.scheduled_to_be_resident_on\' field (take 2) * Tue May 19 2020 Christian Lindig - 1.247.0-1- maintenance: prepare for ocamlformat * Mon May 18 2020 Christian Lindig - 1.246.0-1- CP-33121: Remove Stdext and Stdext.monadic usages from tests- CP-33121: Remove Stdext and Stdext.monadic from xapi_database- CP-33121: remove Stdext.monadic from quicktests- CP-33121: remove Stdext and Stdext.monadic from xapi_datamodel- CP-33121: Remove Stdext.Opt usages from xapi- maintenance: prefer using Option.fold * Mon May 18 2020 Christian Lindig - 1.245.0-1- CA-339601: source the iqn conf file. * Fri May 15 2020 Lin Liu - 1.244.0-2- CA-338596: Check filenames for xe upload and download files * Tue May 12 2020 Christian Lindig - 1.244.0-1- CA-338137: Fix upgrade case in generate-iscsi-iqn * Wed May 06 2020 Christian Lindig - 1.243.0-1- CA-336730 add debugging to help solve template timeout issue * Wed Apr 29 2020 Christian Lindig - 1.242.0-1- CA-338617: Use the FQDN if possible when generating certificates * Wed Apr 29 2020 Christian Lindig - 1.241.0-1- CA-334763: Show errors during metadata export/import- CP-33511 reduced XenAPI sessions to one per mail-alarm script invocation- CP-33511 code formatted using black- CP-27904: use Pci instead of Pciutils- CA-337113/CA-338521: No more Tools ISO by default- CA-338423: Remove use of Tools SR from Quicktest * Mon Apr 27 2020 Christian Lindig - 1.240.0-1- Merge REQ-821: Separate out xapi\'s CLI server into its own library- CP-33465: xapi-cli-server: initial library- CP-33473: Remove deprecated CLI commands.- CP-33457: Add field \'editions\' to host class.- CP-33457: Use RPC call in \'host_all_editions\' CLI implementation.- CP-33457: Get license editions by Host RPC call.- CP-33489: Remove direct use Xapi_role.expr_no_permissions in gen_cmds.- CP-33490: Remove use ExnHelper in CLI implementations- CP-33400: xe command check to make sure uploaded files- CP-33400: parse_eql use Astring lib- CP-33451: Create diagnostics class- CP-33503: Remove direct use of class_to_string and string_to_class in records.ml.- CP-33212: Restrict CLI upload file size- CP-33501: Move the \"fake\" RPC function into Xapi_cli- CP-33501: Avoid use of Context in Xapi_cli- CP-33452: cli server call Diagnostics.gc_compact to compact the heap- CP-33494: Add Task.set_progress API call- CP-33494: Eliminate uses of Db_actions and TaskHelper in Cli_operations- CP-33453: cli server call Diagnostics.gc_stats to retrieve gc stats- CP-33499: Refine cli_util.ml in CLI implementations.- CP-33454: cli server call API to retrieve db stats- CP-33455: cli server call Diagnostics.network_stats to- CP-33455: Only pass the necessary params to API call- CP-33493: Eliminate uses of Xapi_template in Cli_operations.- CP-33540: Remove Diagnostic function session argument- CP-33492: Remove use of Xapi_globs. * functions in CLI implementations- CP-33498: Remove dependency of storage_interface in cli_operations- CP-33492: Move the BIOS strings to constants.ml.- CP-33454: cli server call API to retrieve db stats- CP-33540: Fix sdk build failure by providing necessary docs- CP-33496: Remove use of Xapi_http module in cli_operations.ml.- CP-33496: Add Vpx_types in xapi types.- CP-33456: Clean diagnostic_license_status with permitted modules- CP-33551: Move Compression_algorithms into xapi_types- CP-33491: Move out the role setter in pool_role- CP-33496: Make xva.ml as module.- CP-33496: Move xapi-xva into xapi-public- CP-33496: Move table.ml to xapi-public- CP-33552: Add API get_attached_live_hosts to SR- CP-33556: Remove Importexport from cli server- CP-33497: Remove dependency of Helper.get_localhost and Context- CP-33552: Code refine basing on comments- Reduce opam packages, rename xapi-public- CP-33488: Move cli related files into xapi-cli-server folder.- CP-33556: Remove Importexport from cli server- Add xapi-inventory as dependency of xapi-consts.opam. * Thu Apr 23 2020 Christian Lindig - 1.239.0-1- Cp-32669: adapt tests to X509 0.11.0 * Tue Apr 21 2020 Christian Lindig - 1.238.0-1- CP-32678: Use a variant instead of a boolean for certificates- CP-32678: Add private key validation- CP-32678: Add server certificate validation- CP-32686: Don\'t generate diffie-hellman parameters- CP-32686: follow shellcheck recommendations- CP-32686: Server Certificate installation- CP-32681: Add certificates to DB schema- CA-265116: Better documentation for certificate API- CA-265116: Distinguish CA certificates from server ones- CP-32678: Return the certificate on install- CP-32678: Add API to install server certificates- CP-32678: Do not open stdext\'s Listext- CP-32678: Add CLI to install server certificates- CP-32681: store fingerprints as non-binary string- CP-32663: Usage more natural language on errors- CP-32696: Send expiring certificates alerts daily- CP-32706: add emergency call to install a self-signed cert- CA-337491: generate_ssl_cert now can replace existing servert cert- CP-32696: avoid alerts on the 31st day- CP-32696: Place message under a single root- CP-32696: Use a separate test runner for alerts- CA-337520: detect recently expired certificates as such- CP-32695: Use UTC for dates in certificate errors- CP-32708: prepare to detach install code from xapi- CP-32708: Move certificate installation and validation to gencert- CA-337731: reject files without certs for chains- CA-337865: clear expired certificate alerts- CA-337865: filter certificate alerts only once- CP-32663: bump schema version- CA-338141 mirror other_config when performing InternalAsync operation * Fri Apr 17 2020 Christian Lindig - 1.237.0-1- CA-337899 pass ciphersuites arg to sparse_dd- CA-334756: add missing capabilities to SM features table- CP-33292: add VDI read caching SM capability- CP-31118: Avoid xapi as module name in logs- CA-337929 remove gencert xapi-wait-init-complete dependency- CA-337903 insert stunnel into xapi shutdown order- CA-337875 base not always passed to sparse_dd * Tue Apr 14 2020 Christian Lindig - 1.236.0-1- CP-31116: simplify dbtest dune for database package- CP-28222: Reenable testing for pci- CP-28222: port db tests to alcotest and enable them on opam- CA-337087 avoid race condition in Helpers.Task.wait_for- CA-337087 fix uncancellable migrations * Mon Apr 06 2020 Ben Anson - 1.235.0-2- REQ-811: fix stunnel config in xapi.spec * Mon Apr 06 2020 Christian Lindig - 1.235.0-1- CP-33380: update to x509 0.10.0 * Fri Apr 03 2020 Christian Lindig - 1.234.0-1- maintenance: fix compiler warnings- CP-32840 fix xapi according to Stunnel changes- CA-32840 remove references to ciphersuites- CP-32840 stub out Host.set_ssl_legacy- CP-32840 deprecate ssl_legacy flag in host class- CP-32840 stub out legacy ssl operations on pools- CP-32840 xapi stunnel config shouldn\'t enable legacy options- CP-33058 centralize cipherstring- CP-32840 final clean up of legacy ssl related code/docs- CP-32840 fix xapi according to Stunnel changes- CA-32840 remove references to ciphersuites- CP-33058 centralize cipherstring- CP-33057 purge lingering stunnel configs- CP-33057 rewrite init.d-xapissl script in ocaml- CP-33057 replace usages of xapissl script with systemd- CP-33057 increase number of file descriptors for stunnelAATTxapi- CP-32840 enable fips for CC certification- maintenance: move paths to xapi_globs- CP-33243: gencert binary- CP-33243: create systemd gencert service- CA-336408 ensure legacy ssl is disabled on upgrade- CP-33061 remove iLO script- REQ-453 re-expose reconfigure_stunnel * Fri Mar 27 2020 Christian Lindig - 1.233.0-1- CA-336735: preserve formatting of stars for wlb recommendations * Mon Mar 23 2020 Christian Lindig - 1.232.0-1- improve invalid VIF map error message for intra-pool migration- Fix build: drop Xcp_coverage- Simplify build: drop coverage rewriter * Fri Mar 20 2020 Christian Lindig - 1.231.0-1- improve invalid VIF map error message for intra-pool migration- travis: follow validator recommendations * Tue Mar 17 2020 Christian Lindig - 1.230.0-1- maintenance: don\'t generate empty modules- CA-333610 generate multiple async client frontends- CA-333610 modify server.ml to accept InternalAsync calls- CP-32398 must not use POD when using SRIOV vGPU- CP-32649: Use Stdlib\'s Result- CA-336258: Remove unused function argument- CA-336258: fix API forwarder for JSONRPC calls- CA-333610 utility to try InternalAsync call with fallback- CA-333610 avoid long running idle connection during migration- maintenance: server_helpers interface file- CA-336685 improve error for mem constraints violation * Thu Mar 12 2020 Christian Lindig - 1.229.0-1- Fix cluster_stack_in_use error message- datamodel_common: add quebec release- CP-32678: update to X509 0.9.0- license: enable unit-tests- tests: move daily license checks to the suite * Fri Mar 06 2020 Christian Lindig - 1.228.0-1- CA-334951: Use a variant to model recommendations- CA-334951: Ignore 0-star recommendations from WLB- CA-334951: Code hygiene- CA-334951: Use a map instead of a hashtable- CP-33121: Stop using Xstringext in cli_operations * Mon Mar 02 2020 Christian Lindig - 1.227.0-1- maintenance: json files must not be executable * Mon Feb 24 2020 Christian Lindig - 1.226.0-1- CA-334909: Only update if the update is needed- CP-33121: remove Listext usages- CP-33121: reduce Stdext usages from xapi_vm- CP-33121: remove stdext usages from xapi_vm_appliance- CP-33121: Reduce usage of Xstringext- CP-33121: remove uneeded open lines * Wed Feb 12 2020 Christian Lindig - 1.225.0-1- Fix parsing of platform:cores-per-socket to avoid divide-by-0 error- CP-32124: Set fips=yes explicitly for stunnel- CP-32124: Remove \'LEGACY_CLIENT_ACCEPT\' for stunnel- CP-32124: Set the default log facility as \'authpriv\'- CA-331142: stunnel on server side close SSL sock unexpectedly- CA-334797: Disable TLSv1.3 when legacy is true- CP-32298: Move 40-generate-iscsi-iqn to a standalone service- CA-325068: Move networking firstboot script to its own service- CP-31090: Move prepare-control-domain-params script to its own service- CP-31090: Move reset-and-reboot into a separate script- CA-333712: use wrapped string type for pool internal API calls * Wed Feb 05 2020 Ross Lagerwall - 1.224.0-2- CP-31090: Migrate toolstack xenserver-firstboot scripts * Tue Feb 04 2020 Christian Lindig - 1.224.0-1- Mark OCaml source code files as not executable * Tue Jan 28 2020 Christian Lindig - 1.223.0-1- Branding for the quebec release; defined stockholm release; corrected field version; bumped client min/max version to 2.15.- Remove xenserver-buildenv based Travis builds- REQ-627 CA-333495 add Xapi_pci.dequarantine * Fri Jan 24 2020 Konstantina Chremmou - 1.222.0-2- Removed patch with Quebec branding (it is moving into the source code) * Fri Jan 17 2020 Christian Lindig - 1.222.0-1- CA-325582: do not open Listext in message_forwarding- CA-325582: Move DB checks for SR removal to message_forwarding- CA-325582: Allow forwarding SR operations to all hosts with related PBDs- CA-325582: Remove SR DSs from memory on SR.forget and destroy- CA-325582: fix some storage quicktests for pools * Fri Jan 10 2020 Christian Lindig - 1.221.0-1- CP-32461: Delete CPUID leveling checks from WLB * Mon Jan 06 2020 Christian Lindig - 1.220.0-1- CA-328130 extract usb speed attribute- CA-328130 add usb speed field to api- CA-328130 Make sure speed updated after update- CA-328130 Fix usb_scan tests * Mon Dec 09 2019 Christian Lindig - 1.219.0-1- maintenance: remove Pervasives deprecated warnings- CP-28369: remove unused daemonize code- CP-32429: Modernize python2 code (automated)- CP-32429: Modernize python2 code, needs manual fixes- CP-32429: Fix invalid transformations from futurize- CP-32429: Modernize python2 code, with manual fixes- CP-32429: enable python3 testing- CP-32429: Use python-3 compatible idioms on tests * Wed Dec 04 2019 Christian Lindig - 1.218.0-1- CA-325940 bind PCI before calling sriov-manage * Fri Nov 29 2019 Christian Lindig - 1.217.0-1- CA-330162 Allow explicit floppy userdevice- CA-330162 Improve vbd-create error message- fixup! CA-330162 make floppies a first class citizen- CA-330162 make floppies a first class citizen- CA-330961 Clean the yum cache before prechecking/applying an update- maintenance: optimize Helpers.get_localhost * Mon Nov 25 2019 Christian Lindig - 1.216.0-1- CA-330979: set current_domain_type for slaves- fix compiler warnings: Warning 52- fix compiler warnings: (+++)- fix compiler warnings: Re.get_ofs deprecated * Mon Nov 25 2019 Christian Lindig - 1.215.0-1- CA-313081 fix moving template between SRs | |