[pve-devel] [PATCH proxmox-ve-rs 1/1] partial fix #6226: macros: add LDAP_UDP macro

2025-03-18 Thread Stefan Hanreich
Add LDAP_UDP macro to the firewall to support LDAP implementations that use UDP as well, such as Windows AD [1] [1] https://learn.microsoft.com/de-de/troubleshoot/windows-server/active-directory/config-firewall-for-ad-domains-and-trusts Signed-off-by: Stefan Hanreich --- proxmox-ve-config/reso

Re: [pve-devel] [PATCH cluster/guest-common/docs/qemu-server/manager v14 0/12] virtiofs

2025-03-18 Thread Markus Frank
ping On 2025-03-04 12:57, Markus Frank wrote: Virtio-fs is a shared file system that enables sharing a directory between host and guest VMs. It takes advantage of the locality of virtual machines and the hypervisor to get a higher throughput than the 9p remote file system protocol. build-order

Re: [pve-devel] Proposal For Podman Container Support

2025-03-18 Thread Daniel Kral
On 3/18/25 13:32, Filip Schauer wrote: Hello, I have skimmed through the OCI Runtime+Image specs. Here is a rough outline of OCI Runtime Bundles and OCI Images: Hi! Just to add to the discussion about this feature: On my very narrow search about existing solutions for creating LXC containers

Re: [pve-devel] [PATCH storage v4] fix #957 iscsi: improve iscsi_test_portal logic

2025-03-18 Thread Friedrich Weber
Hi, thanks for the new version! I think this is shaping up nicely. Some comments inline below, but only minor ones. So it may make sense to wait a couple of days for additional comments from others before sending a new version. I'll also run a few more tests this week and report back. > don't chec

[pve-devel] [RFC PATCH] ui: lxc: set nesting to false for privileged container during creation

2025-03-18 Thread Michael Köppl
The current implementation is slightly misleading. When creating a privileged container, the nesting checkbox is disabled but keeps its current state. However, nesting is not enabled for privileged containers even if the checkbox was set to true. Enabling nesting is still possible through the Optio

Re: [pve-devel] Proposal For Podman Container Support

2025-03-18 Thread Raven King via pve-devel
--- Begin Message --- Thomas, Going forward, I will send all future emails from ra...@encodedbird.com. Its a long story that has nothing to do with proxmox, but the timing is now. Please direct anything else to that as well. Thank you for a thoughtful and explanatory response. I can easily se

Re: [pve-devel] [PATCH access-control v3 1/1] fix #4411: openid: add logic for openid groups support

2025-03-18 Thread Mira Limbeck
On 3/17/25 13:18, Fabian Grünbichler wrote: > On February 13, 2025 12:03 pm, Fabian Grünbichler wrote: >> >>> Mira Limbeck hat am 12.02.2025 15:51 CET >>> geschrieben: >>> >>> >>> On 2/11/25 06:40, Thomas Skinner wrote: Signed-off-by: Thomas Skinner --- src/PVE/API2/OpenId.pm

Re: [pve-devel] [PATCH qemu-server v4 3/4] config: add AMD SEV-SNP support.

2025-03-18 Thread Markus Frank
On 2025-03-11 16:04, Philipp Giersfeld wrote: This patch is for enabling AMD SEV-SNP support. Where applicable, it extends support for existing SEV(-ES) variables to SEV-SNP. This means that it retains no-debug and kernel-hashes options, but the no-key-sharing option is removed. The default p

[pve-devel] applied: [PATCH access-control] debian: remove outdated postinst snippet

2025-03-18 Thread Fabian Grünbichler
thanks! On March 12, 2025 1:59 pm, Fiona Ebner wrote: > Upgrading from a pre-PVE 6 version directly to a (current) PVE 8.x > version can never work in the first place, so the test is not needed > anymore. > > The snippet was added by commit 3a98190 ("add postinst script") and > enabled by commit

[pve-devel] [PATCH] fix #6223: fit terminal after 'OK' message

2025-03-18 Thread Dominik Csapak
instead of simply waiting 250ms after we send the credentials, wait until after the server responded with 'OK' to fit the terminal size. Still keep the timeout to not do that in the onmessage handler itself, but rather at a later point in time. This fixes an issue with not properly fitted area, wh

Re: [pve-devel] [PATCH manager 3/3] ui: qemu hd edit: allow importing a disk from the import storage

2025-03-18 Thread Dominik Csapak
On 3/17/25 12:05, Filip Schauer wrote: I ran into a bug when creating a VM in the Web UI: On the "Disks" tab the wizard does not let me proceed with the default configuration. When selecting an image to import and then unchecking the "Import Image" box again, the wizard lets me proceed again. On

Re: [pve-devel] [PATCH proxmox 1/2] notify: smtp: add missing 'tracing' namespace prefix

2025-03-18 Thread Fabian Grünbichler
this got fixed in a different fashion by Wolfgang: https://git.proxmox.com/?p=proxmox.git;a=commitdiff;h=ddc154e5cdac9705b8ed232664a1e279a2e6f917 On December 6, 2024 11:10 am, Lukas Wagner wrote: > This section of code is only compiled when the 'mail-forwarder' feature > is enabled, which might h

Re: [pve-devel] [PATCH proxmox-mail-forward 2/2] switch to proxmox-log

2025-03-18 Thread Fabian Grünbichler
based on the rest of the discussion, this will be rebased on top of the builder from https://lore.proxmox.com/pve-devel/20250218161311.558674-2-g.gol...@proxmox.com/ ? On December 6, 2024 11:10 am, Lukas Wagner wrote: > The proxmox-notify crate now uses tracing for logging, > hence we have to sw

Re: [pve-devel] Proposal For Podman Container Support

2025-03-18 Thread Filip Schauer
Hello, I have skimmed through the OCI Runtime+Image specs. Here is a rough outline of OCI Runtime Bundles and OCI Images: An **OCI Runtime Bundle** is: > A directory structure that is written ahead of time, distributed, and > used to seed the runtime for creating a container and launching a > p

Re: [pve-devel] [PATCH common 04/14] tools: add run_fork_detached() for spawning daemons

2025-03-18 Thread Wolfgang Bumiller
On Mon, Mar 17, 2025 at 03:11:41PM +0100, Christoph Heiss wrote: > This essentially just does a fork() + setsid(). > Needed to e.g. properly spawn background processes. > > Signed-off-by: Christoph Heiss > --- > Something similar is already used in e.g. pve-storage to spawn fuse > mounts. If and

Re: [pve-devel] [PATCH edk2-firmware v4 1/4] Add OVMF targets for AMD SEV-ES and SEV-SNP

2025-03-18 Thread Markus Frank
On 2025-03-11 16:04, Philipp Giersfeld wrote: AMD SEV-SNP boots with a single volatile firmware image OVMF.fd via the -bios option. This requires building the `OvmfPkg/OvmfPkgX64.dsc` target. Also, SEV-ES and SEV-SNP do not support SMM [1,2]. Therefore, introduce a new target build-ovmf-cvm

[pve-devel] Storage plugin questions

2025-03-18 Thread Max Schettler via pve-devel
--- Begin Message --- Hi, I'm working on an Proxmox storage plugin. I have a few questions possibilities and specific semantics: - is it possible to integrate with the webinterface, to allow creation of a custom storage provider from there, instead of the CLI? - when an image is deleted, are

[pve-devel] [PATCH pve-firewall 1/1] partial fix #6226: macros: add LDAP_UDP macro

2025-03-18 Thread Stefan Hanreich
Add LDAP_UDP macro to the firewall to support LDAP implementations that use UDP as well, such as Windows AD [1] [1] https://learn.microsoft.com/de-de/troubleshoot/windows-server/active-directory/config-firewall-for-ad-domains-and-trusts Signed-off-by: Stefan Hanreich --- src/PVE/Firewall.pm |

Re: [pve-devel] [PATCH many 00/14] fix #5180: migrate conntrack state on live migration

2025-03-18 Thread DERUMIER, Alexandre via pve-devel
--- Begin Message --- Hi Christoph, this look really great ! I have an old bugzilla related https://bugzilla.proxmox.com/show_bug.cgi?id=2451 where we could finally enabled nf_conntrack_tcp_loose=0 with this patch serie Message initial De: Christoph Heiss Répondre à: Proxmox

Re: [pve-devel] Proposal For Podman Container Support

2025-03-18 Thread Thomas Lamprecht
Hi Raven King, I want to say thanks up-front for trying to improve on of our open source projects and reaching out upfront for doing so, highly appreciated. Am 13.03.25 um 19:03 schrieb Raven King: > This is my first time writing to this mailing list. I have never > contributed to proxmox but I

Re: [pve-devel] About PVE Backup Integration Guide

2025-03-18 Thread Prashant Patil via pve-devel
--- Begin Message --- We have tried the steps mentioned here to create copy-before-write snapshot - https://www.mail-archive.com/qemu-devel@nongnu.org/msg876056.html However, one of the commands 'blockdev-replace' fails with below error: {"error": {"class": "CommandNotFound", "desc": "The command

[pve-devel] [RFC PATCH manager] WIP: api: implement node-independent bulk actions

2025-03-18 Thread Dominik Csapak
To achieve this, we start a worker task and use our generic api client to start the tasks on the relevant nodes. The client always points to 'localhost' so we let the pveproxy worry about the proxying etc. We reuse some logic from the startall/stopall/etc. calls, like getting the ordered guest inf

Re: [pve-devel] [RFC PATCH manager] WIP: api: implement node-independent bulk actions

2025-03-18 Thread Stefan Hanreich
This would be really interesting for applying the SDN configuration as well, where I'm currently calling the existing bulk-call. Really like the design with the start / check callbacks, that should make this quite flexible. On 3/18/25 11:39, Dominik Csapak wrote: > To achieve this, we start a work