Allow users with the VM.Config.HWType privilege to configure VirtIO RNG devices on VMs with either /dev/urandom or /dev/random as the entropy source.
Further introduce hardware RNG device mapping to be able to selectively allow non-root users with the Mapping.Use privilege to configure hardware RNG devices as entropy sources. Changes since v1: * Restrict use of /dev/hwrng to the root user * introduce hardware RNG mapping pve-guest-common: Filip Schauer (1): mapping: add a hardware RNG mapping config src/Makefile | 1 + src/PVE/Mapping/HWRNG.pm | 147 +++++++++++++++++++++++++++++++++++++++ 2 files changed, 148 insertions(+) create mode 100644 src/PVE/Mapping/HWRNG.pm pve-cluster: Filip Schauer (1): cfs: add 'mapping/hwrng.cfg' to observed files src/PVE/Cluster.pm | 1 + src/pmxcfs/status.c | 1 + 2 files changed, 2 insertions(+) pve-manager: Filip Schauer (4): introduce hardware rng mapping api introduce hardware rng scanning api ui: add hardware RNG resource mapping ui: allow use of mapped hardware RNGs as entropy sources for VMs PVE/API2/Cluster/Mapping.pm | 7 + PVE/API2/Cluster/Mapping/HWRNG.pm | 286 ++++++++++++++++++++++++++ PVE/API2/Cluster/Mapping/Makefile | 5 +- PVE/API2/Hardware.pm | 7 + PVE/API2/Hardware/HWRNG.pm | 47 +++++ PVE/API2/Hardware/Makefile | 1 + www/manager6/Makefile | 3 + www/manager6/data/PermPathStore.js | 1 + www/manager6/dc/Config.js | 10 + www/manager6/dc/HWRNGMapView.js | 76 +++++++ www/manager6/form/HWRNGMapSelector.js | 99 +++++++++ www/manager6/qemu/HardwareView.js | 9 +- www/manager6/qemu/RNGEdit.js | 79 ++++--- www/manager6/window/HWRNGMapEdit.js | 149 ++++++++++++++ 14 files changed, 748 insertions(+), 31 deletions(-) create mode 100644 PVE/API2/Cluster/Mapping/HWRNG.pm create mode 100644 PVE/API2/Hardware/HWRNG.pm create mode 100644 www/manager6/dc/HWRNGMapView.js create mode 100644 www/manager6/form/HWRNGMapSelector.js create mode 100644 www/manager6/window/HWRNGMapEdit.js qemu-server: Filip Schauer (3): refactor: move rng related code into its own module allow non-root users to set /dev/u?random as an RNG source let VirtIO RNG devices source entropy from mapped HWRNGs PVE/API2/Qemu.pm | 47 ++++++++++++ PVE/QemuServer.pm | 101 +++++++------------------- PVE/QemuServer/Makefile | 1 + PVE/QemuServer/RNG.pm | 156 ++++++++++++++++++++++++++++++++++++++++ 4 files changed, 229 insertions(+), 76 deletions(-) create mode 100644 PVE/QemuServer/RNG.pm Summary over all repositories: 22 files changed, 1127 insertions(+), 107 deletions(-) -- Generated by git-murpp 0.6.0 _______________________________________________ pve-devel mailing list pve-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
