[pve-devel] applied: [PATCH proxmox-firewall] config: macros: add SPICEproxy macro

Am 25/04/2024 um 19:16 schrieb Stefan Hanreich: > Signed-off-by: Stefan Hanreich > --- > proxmox-ve-config/resources/macros.json | 9 + > 1 file changed, 9 insertions(+) > > applied, thanks! ___ pve-devel mailing list pve-devel@lists.proxmox

[pve-devel] applied: [PATCH proxmox-firewall] firewall: improve error handling of firewall

Am 25/04/2024 um 19:23 schrieb Stefan Hanreich: > Error handling of the firewall binary should now be much more robust > on configuration errors. Instead of panicking in some cases it should > now log an error. > > Signed-off-by: Stefan Hanreich > --- > proxmox-firewall/src/bin/proxmox-firewall.

[pve-devel] applied: [PATCH proxmox-firewall] config: nftables: add support for icmp-type any

Am 25/04/2024 um 19:16 schrieb Stefan Hanreich: > We support any as wildcard for matching all icmp types. Implement > parsing logic for parsing the any value and support converting the any > value into an nftables expression. > > Signed-off-by: Stefan Hanreich > --- > proxmox-nftables/src/expres

[pve-devel] [PATCH proxmox-firewall] firewall: improve error handling of firewall

Error handling of the firewall binary should now be much more robust on configuration errors. Instead of panicking in some cases it should now log an error. Signed-off-by: Stefan Hanreich --- proxmox-firewall/src/bin/proxmox-firewall.rs | 7 +- proxmox-firewall/src/config.rs | 23

[pve-devel] [PATCH proxmox-firewall] config: nftables: add support for icmp-type any

We support any as wildcard for matching all icmp types. Implement parsing logic for parsing the any value and support converting the any value into an nftables expression. Signed-off-by: Stefan Hanreich --- proxmox-nftables/src/expression.rs | 2 ++ proxmox-ve-config/src/firewal

[pve-devel] [PATCH proxmox-firewall] config: macros: add SPICEproxy macro

Signed-off-by: Stefan Hanreich --- proxmox-ve-config/resources/macros.json | 9 + 1 file changed, 9 insertions(+) diff --git a/proxmox-ve-config/resources/macros.json b/proxmox-ve-config/resources/macros.json index 67e1d89..2fcc0fb 100644 --- a/proxmox-ve-config/resources/macros.json ++

[pve-devel] applied: [PATCH container] fix #5414: use proper percentages in `pct df`

Am 25/04/2024 um 09:40 schrieb Fabian Grünbichler: > while some people write percentages as 0.XX , putting a % next to that is just > confusing. also, combined with the format modifier this would be rather lossy, > and also not match regular `df` output.. > Fixes: c6b5965 ("added 'pct df'") (but

[pve-devel] applied-series: [PATCH installer] install module: getters: correctly use plural in error messages

Am 25/04/2024 um 10:40 schrieb Alexander Zeidler: > Signed-off-by: Alexander Zeidler > --- > Proxmox/Install.pm | 8 > 1 file changed, 4 insertions(+), 4 deletions(-) > > applied both patches, thanks! ___ pve-devel mailing list pve-devel@li

[pve-devel] [PATCH qemu 1/4] makefile: adapt firmware blob removal to changes for QEMU 8.2

Namely, it's also necessary to remove .dts source files from the meson.build file, because the .dtb file names are not directly listed anymore since commit 6e0dc9d2a8 ("meson: compile bundled device trees"). The same commit also introduced a "'.dtb'" in a line not just listing a file name and remo

[pve-devel] [PATCH-SERIES qemu] update to QEMU 9.0.0

QEMU 8.2.2 required many changes, in particular to the alloc-track block driver. It should be the same as [0] just with backup fleecing patches added in. See the patch for details. The only bigger change in QEMU 9.0.0 is that the AioContext locking was removed, and it just required dropping the ca

[pve-devel] [PATCH qemu 2/4] makefile: also filter 64-bit hppa ROM for QEMU 8.2

Same rationale as 6facdf3 ("also exclude hppa-firmware.img ROM from build"), not used by Proxmox VE and would cause a failure during build. Signed-off-by: Fiona Ebner --- Makefile | 1 + 1 file changed, 1 insertion(+) diff --git a/Makefile b/Makefile index a719e43..f23b041 100644 --- a/Makefile

[pve-devel] [PATCH pve-network 1/1] vnets : add ports isolation

--- Begin Message --- Add support for bridge ports isolation https://github.com/torvalds/linux/commit/7d850abd5f4edb1b1ca4b4141a4453305736f564 This allow to drop traffic between all ports having isolation enabled on the local bridge, but allow traffic with non isolated ports. Here,we isolate traf

[pve-devel] [PATCH pve-manager 1/1] sdn: vnet: add ports-isolation option.

--- Begin Message --- also move vlan-aware in advanced section Signed-off-by: Alexandre Derumier --- www/manager6/sdn/VnetEdit.js | 12 1 file changed, 12 insertions(+) diff --git a/www/manager6/sdn/VnetEdit.js b/www/manager6/sdn/VnetEdit.js index cdd83ed4..a00f83e6 100644 --- a/ww

[pve-devel] [PATCH pve-network/pve-common/pve-manager] fix #4300 : sdn: add bridge ports isolation

--- Begin Message --- This patches series add support for sdn vnet bridge ports isolation pve-network: Alexandre Derumier (1): vnets : add ports isolation src/PVE/Network/SDN/VnetPlugin.pm | 5 + src/PVE/Network/SDN/Zones/Plugin.pm | 1 + 2 files changed, 6 insertions(+) pve-common:

[pve-devel] [PATCH pve-common 1/1] tap_plug: add support for bridge port isolation

--- Begin Message --- This is allow to block traffic/isolation traffic between all ports on the bridge with isolation (so between the vms), ans still allow incoming traffic from uplink. Signed-off-by: Alexandre Derumier --- src/PVE/Network.pm | 14 -- 1 file changed, 12 insertions(+)

Re: [pve-devel] [PATCH qemu-server v8 1/3] add C program to get hardware capabilities from CPUID

On Thu Apr 25, 2024 at 1:24 PM CEST, Markus Frank wrote: > Implement a systemd service that runs a C program that extracts AMD > SEV hardware information such as reduced-phys-bios and cbitpos from > CPUID at boot time, looks if SEV, SEV-ES & SEV-SNP are enabled, and > outputs these details as JSON

[pve-devel] [PATCH qemu-server v8 1/3] add C program to get hardware capabilities from CPUID

Implement a systemd service that runs a C program that extracts AMD SEV hardware information such as reduced-phys-bios and cbitpos from CPUID at boot time, looks if SEV, SEV-ES & SEV-SNP are enabled, and outputs these details as JSON to /run/qemu-server/hw-params.json. This programm can also be us

[pve-devel] [PATCH docs v8 3/3] add AMD SEV documentation

add documentation for the "[PATCH qemu-server] config: add AMD SEV support" patch. Signed-off-by: Markus Frank --- v8: * adjust changed parameter names in examples v5: * removed NodeConfig part v4: * added text that SEV-ES is experimental qm.adoc | 103

[pve-devel] [PATCH qemu-server v8 2/3] config: add AMD SEV support

This patch is for enabling AMD SEV (Secure Encrypted Virtualization) support in QEMU. VM-Config-Examples: amd_sev: type=std,no-debug=1,no-key-sharing=1 amd_sev: es,no-debug=1,kernel-hashes=1 kernel-hashes, reduced-phys-bios & cbitpos correspond to the variables with the same name in QEMU. kernel

[pve-devel] [PATCH installer] install module: getters: correctly use plural in error messages

Signed-off-by: Alexander Zeidler --- Proxmox/Install.pm | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Proxmox/Install.pm b/Proxmox/Install.pm index 6ad9d17..c0f8955 100644 --- a/Proxmox/Install.pm +++ b/Proxmox/Install.pm @@ -255,7 +255,7 @@ sub get_zfs_raid_setup {

[pve-devel] [PATCH installer] assistant: fix spelling and precise text in help usage output

Signed-off-by: Alexander Zeidler --- proxmox-auto-install-assistant/src/main.rs | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/proxmox-auto-install-assistant/src/main.rs b/proxmox-auto-install-assistant/src/main.rs index 9bc083e..0debd29 100644 --- a/proxmox-auto-

[pve-devel] [PATCH container] fix #5414: use proper percentages in `pct df`

while some people write percentages as 0.XX , putting a % next to that is just confusing. also, combined with the format modifier this would be rather lossy, and also not match regular `df` output.. Signed-off-by: Fabian Grünbichler --- src/PVE/CLI/pct.pm | 2 +- 1 file changed, 1 insertion(+),