Re: [PATCH 0/9] qemu: support passt as the backend for vhost-user network interfaces

2025-02-14 Thread Stefano Brivio
On Fri, 14 Feb 2025 06:47:53 -0800 Andrea Bolognani wrote: > On Fri, Feb 14, 2025 at 09:08:36AM -0500, Laine Stump wrote: > > On 2/14/25 6:17 AM, Andrea Bolognani wrote: > > > Speaking of SELinux, with the current policy on Fedora 41 I get a > > > couple of AVC denials related to accessing the

Re: [PATCH 0/9] qemu: support passt as the backend for vhost-user network interfaces

2025-02-14 Thread Andrea Bolognani
On Fri, Feb 14, 2025 at 09:08:36AM -0500, Laine Stump wrote: > On 2/14/25 6:17 AM, Andrea Bolognani wrote: > > Speaking of SELinux, with the current policy on Fedora 41 I get a > > couple of AVC denials related to accessing the shared memory file. > > I understand that's expected, based on the abov

Re: [PATCH 0/9] qemu: support passt as the backend for vhost-user network interfaces

2025-02-14 Thread Stefano Brivio
On Fri, 14 Feb 2025 03:17:06 -0800 Andrea Bolognani wrote: > On Thu, Feb 13, 2025 at 01:19:44PM -0500, Laine Stump wrote: > > passt (https://passt.top) provides a method of connecting QEMU virtual > > machines to the external network without requiring special privileges > > or capabilities of any

Re: [PATCH 0/9] qemu: support passt as the backend for vhost-user network interfaces

2025-02-14 Thread Laine Stump
On 2/14/25 6:17 AM, Andrea Bolognani wrote: On Thu, Feb 13, 2025 at 01:19:44PM -0500, Laine Stump wrote: passt (https://passt.top) provides a method of connecting QEMU virtual machines to the external network without requiring special privileges or capabilities of any participating processes - e

Re: [PATCH 0/9] qemu: support passt as the backend for vhost-user network interfaces

2025-02-14 Thread Andrea Bolognani
On Thu, Feb 13, 2025 at 01:19:44PM -0500, Laine Stump wrote: > passt (https://passt.top) provides a method of connecting QEMU virtual > machines to the external network without requiring special privileges > or capabilities of any participating processes - even libvirt itself > can run unprivileged

Re: [PATCH 0/9] qemu: support passt as the backend for vhost-user network interfaces

2025-02-14 Thread Ján Tomko
On a Thursday in 2025, Laine Stump wrote: [...] This Resolves: https://issues.redhat.com/browse/RHEL-69455 Laine Stump (9): conf: change virDomainHostdevInsert() to return void qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' qemu: validate that model is virtio f

[PATCH 0/9] qemu: support passt as the backend for vhost-user network interfaces

2025-02-13 Thread Laine Stump
passt (https://passt.top) provides a method of connecting QEMU virtual machines to the external network without requiring special privileges or capabilities of any participating processes - even libvirt itself can run unprivileged and create an instance of passt (which *always* runs unprivileged) t