Allow users with the VM.Config.HWType privilege to configure VirtIO RNG
devices on VMs with either /dev/urandom or /dev/random as the entropy
source.
Further introduce hardware RNG device mapping to be able to selectively
allow non-root users with the Mapping.Use privilege to configure
hardware RNG devices as entropy sources.
Changes since v2:
* Restrict RNG device format to enum of
* Add descriptive commit message
* Code style fixes
* Remove outdated remarks about entropy stravation of /dev/random
* Split helpers for VirtIO RNG command line arguments into its own
commit
* Add explicit "use PVE::QemuServer::RNG;" statement to PVE/API2/Qemu.pm
* Fix "map: type check ('array') failed" error when adding a mapping in
the UI
* ui: split resource mapping types into tabbed views
Changes since v1:
* Restrict use of /dev/hwrng to the root user
* introduce hardware RNG mapping
pve-guest-common:
Filip Schauer (1):
mapping: add a hardware RNG mapping config
src/Makefile | 1 +
src/PVE/Mapping/HWRNG.pm | 147 +++++++++++++++++++++++++++++++++++++++
2 files changed, 148 insertions(+)
create mode 100644 src/PVE/Mapping/HWRNG.pm
pve-cluster:
Filip Schauer (1):
cfs: add 'mapping/hwrng.cfg' to observed files
src/PVE/Cluster.pm | 1 +
src/pmxcfs/status.c | 1 +
2 files changed, 2 insertions(+)
pve-manager:
Filip Schauer (5):
introduce hardware rng mapping api
introduce hardware rng scanning api
ui: add hardware RNG resource mapping
ui: allow use of mapped hardware RNGs as entropy sources for VMs
ui: split resource mapping types into tabbed views
PVE/API2/Cluster/Mapping.pm | 7 +
PVE/API2/Cluster/Mapping/HWRNG.pm | 286 ++++++++++++++++++
PVE/API2/Cluster/Mapping/Makefile | 5 +-
PVE/API2/Hardware.pm | 7 +
PVE/API2/Hardware/HWRNG.pm | 47 +++
PVE/API2/Hardware/Makefile | 1 +
www/manager6/Makefile | 12 +-
www/manager6/data/PermPathStore.js | 1 +
www/manager6/dc/Config.js | 41 +--
www/manager6/form/HWRNGMapSelector.js | 99 ++++++
www/manager6/qemu/HardwareView.js | 9 +-
www/manager6/qemu/RNGEdit.js | 79 +++--
www/manager6/resource-map/HWRNGMapEdit.js | 149 +++++++++
www/manager6/resource-map/HWRNGMapView.js | 76 +++++
.../{window => resource-map}/PCIMapEdit.js | 2 +-
.../{dc => resource-map}/PCIMapView.js | 4 +-
www/manager6/resource-map/ResourceMapView.js | 23 ++
.../{window => resource-map}/USBMapEdit.js | 2 +-
.../{dc => resource-map}/USBMapView.js | 4 +-
19 files changed, 778 insertions(+), 76 deletions(-)
create mode 100644 PVE/API2/Cluster/Mapping/HWRNG.pm
create mode 100644 PVE/API2/Hardware/HWRNG.pm
create mode 100644 www/manager6/form/HWRNGMapSelector.js
create mode 100644 www/manager6/resource-map/HWRNGMapEdit.js
create mode 100644 www/manager6/resource-map/HWRNGMapView.js
rename www/manager6/{window => resource-map}/PCIMapEdit.js (99%)
rename www/manager6/{dc => resource-map}/PCIMapView.js (96%)
create mode 100644 www/manager6/resource-map/ResourceMapView.js
rename www/manager6/{window => resource-map}/USBMapEdit.js (99%)
rename www/manager6/{dc => resource-map}/USBMapView.js (95%)
qemu-server:
Filip Schauer (4):
refactor: move rng related code into its own module
add helpers for VirtIO RNG command line arguments
allow non-root users to set /dev/u?random as an RNG source
let VirtIO RNG devices source entropy from mapped HWRNGs
PVE/API2/Qemu.pm | 48 +++++++++++++
PVE/QemuServer.pm | 97 ++++++-------------------
PVE/QemuServer/Makefile | 1 +
PVE/QemuServer/RNG.pm | 153 ++++++++++++++++++++++++++++++++++++++++
4 files changed, 224 insertions(+), 75 deletions(-)
create mode 100644 PVE/QemuServer/RNG.pm
Summary over all repositories:
27 files changed, 1152 insertions(+), 151 deletions(-)
--
Generated by git-murpp 0.6.0
_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
