qemu_conf.c 43.4 KB
Newer Older
D
Daniel P. Berrange 已提交
1
/*
2
 * qemu_conf.c: QEMU configuration management
D
Daniel P. Berrange 已提交
3
 *
4
 * Copyright (C) 2006-2014 Red Hat, Inc.
D
Daniel P. Berrange 已提交
5 6 7 8 9 10 11 12 13 14 15 16 17
 * Copyright (C) 2006 Daniel P. Berrange
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
18
 * License along with this library.  If not, see
O
Osier Yang 已提交
19
 * <http://www.gnu.org/licenses/>.
D
Daniel P. Berrange 已提交
20 21 22 23
 *
 * Author: Daniel P. Berrange <berrange@redhat.com>
 */

24
#include <config.h>
25

D
Daniel P. Berrange 已提交
26 27 28 29
#include <string.h>
#include <limits.h>
#include <sys/types.h>
#include <sys/stat.h>
30
#include <stdlib.h>
D
Daniel P. Berrange 已提交
31 32 33
#include <unistd.h>
#include <errno.h>
#include <fcntl.h>
34
#include <sys/wait.h>
35
#include <arpa/inet.h>
D
Daniel P. Berrange 已提交
36

37
#include "virerror.h"
38
#include "qemu_conf.h"
39
#include "qemu_command.h"
40
#include "qemu_capabilities.h"
41
#include "viruuid.h"
42
#include "virbuffer.h"
43
#include "virconf.h"
44
#include "viralloc.h"
45
#include "datatypes.h"
46
#include "virxml.h"
47
#include "nodeinfo.h"
48
#include "virlog.h"
49
#include "cpu/cpu.h"
50
#include "domain_nwfilter.h"
E
Eric Blake 已提交
51
#include "virfile.h"
52
#include "virstring.h"
53
#include "viratomic.h"
54
#include "storage_conf.h"
55
#include "configmake.h"
56

57 58
#define VIR_FROM_THIS VIR_FROM_QEMU

59 60
VIR_LOG_INIT("qemu.qemu_conf");

61 62 63 64 65
static virClassPtr virQEMUDriverConfigClass;
static void virQEMUDriverConfigDispose(void *obj);

static int virQEMUConfigOnceInit(void)
{
66 67 68 69
    virQEMUDriverConfigClass = virClassNew(virClassForObject(),
                                           "virQEMUDriverConfig",
                                           sizeof(virQEMUDriverConfig),
                                           virQEMUDriverConfigDispose);
70

71
    if (!virQEMUDriverConfigClass)
72 73 74
        return -1;
    else
        return 0;
75 76 77 78 79
}

VIR_ONCE_GLOBAL_INIT(virQEMUConfig)


80 81
static void
qemuDriverLock(virQEMUDriverPtr driver)
82 83 84
{
    virMutexLock(&driver->lock);
}
85 86
static void
qemuDriverUnlock(virQEMUDriverPtr driver)
87 88 89 90
{
    virMutexUnlock(&driver->lock);
}

91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108
void qemuDomainCmdlineDefFree(qemuDomainCmdlineDefPtr def)
{
    size_t i;

    if (!def)
        return;

    for (i = 0; i < def->num_args; i++)
        VIR_FREE(def->args[i]);
    for (i = 0; i < def->num_env; i++) {
        VIR_FREE(def->env_name[i]);
        VIR_FREE(def->env_value[i]);
    }
    VIR_FREE(def->args);
    VIR_FREE(def->env_name);
    VIR_FREE(def->env_value);
    VIR_FREE(def);
}
109

110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151

static int ATTRIBUTE_UNUSED
virQEMUDriverConfigLoaderNVRAMParse(virQEMUDriverConfigPtr cfg,
                                    const char *list)
{
    int ret = -1;
    char **token;
    size_t i, j;

    if (!(token = virStringSplit(list, ":", 0)))
        goto cleanup;

    for (i = 0; token[i]; i += 2) {
        if (!token[i] || !token[i + 1] ||
            STREQ(token[i], "") || STREQ(token[i + 1], "")) {
            virReportError(VIR_ERR_INTERNAL_ERROR,
                           _("Invalid --with-loader-nvram list: %s"),
                           list);
            goto cleanup;
        }
    }

    if (i) {
        if (VIR_ALLOC_N(cfg->loader, i / 2) < 0 ||
            VIR_ALLOC_N(cfg->nvram, i / 2) < 0)
            goto cleanup;
        cfg->nloader = i / 2;

        for (j = 0; j < i / 2; j++) {
            if (VIR_STRDUP(cfg->loader[j], token[2 * j]) < 0 ||
                VIR_STRDUP(cfg->nvram[j], token[2 * j + 1]) < 0)
                goto cleanup;
        }
    }

    ret = 0;
 cleanup:
    virStringFreeList(token);
    return ret;
}


152 153 154 155
#define VIR_QEMU_OVMF_LOADER_PATH "/usr/share/OVMF/OVMF_CODE.fd"
#define VIR_QEMU_OVMF_NVRAM_PATH "/usr/share/OVMF/OVMF_VARS.fd"
#define VIR_QEMU_AAVMF_LOADER_PATH "/usr/share/AAVMF/AAVMF_CODE.fd"
#define VIR_QEMU_AAVMF_NVRAM_PATH "/usr/share/AAVMF/AAVMF_VARS.fd"
156

157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175
virQEMUDriverConfigPtr virQEMUDriverConfigNew(bool privileged)
{
    virQEMUDriverConfigPtr cfg;

    if (virQEMUConfigInitialize() < 0)
        return NULL;

    if (!(cfg = virObjectNew(virQEMUDriverConfigClass)))
        return NULL;

    cfg->privileged = privileged;
    cfg->uri = privileged ? "qemu:///system" : "qemu:///session";

    if (privileged) {
        if (virGetUserID(QEMU_USER, &cfg->user) < 0)
            goto error;
        if (virGetGroupID(QEMU_GROUP, &cfg->group) < 0)
            goto error;
    } else {
176 177
        cfg->user = (uid_t)-1;
        cfg->group = (gid_t)-1;
178 179 180
    }
    cfg->dynamicOwnership = privileged;

181
    cfg->cgroupControllers = -1; /* -1 == auto-detect */
182 183 184 185

    if (privileged) {
        if (virAsprintf(&cfg->logDir,
                        "%s/log/libvirt/qemu", LOCALSTATEDIR) < 0)
186
            goto error;
187

188 189
        if (VIR_STRDUP(cfg->configBaseDir, SYSCONFDIR "/libvirt") < 0)
            goto error;
D
Daniel P. Berrange 已提交
190

191 192
        if (virAsprintf(&cfg->stateDir,
                      "%s/run/libvirt/qemu", LOCALSTATEDIR) < 0)
193
            goto error;
194 195 196

        if (virAsprintf(&cfg->libDir,
                      "%s/lib/libvirt/qemu", LOCALSTATEDIR) < 0)
197
            goto error;
198 199 200

        if (virAsprintf(&cfg->cacheDir,
                      "%s/cache/libvirt/qemu", LOCALSTATEDIR) < 0)
201
            goto error;
202 203
        if (virAsprintf(&cfg->saveDir,
                      "%s/lib/libvirt/qemu/save", LOCALSTATEDIR) < 0)
204
            goto error;
205 206
        if (virAsprintf(&cfg->snapshotDir,
                        "%s/lib/libvirt/qemu/snapshot", LOCALSTATEDIR) < 0)
207
            goto error;
208 209
        if (virAsprintf(&cfg->autoDumpPath,
                        "%s/lib/libvirt/qemu/dump", LOCALSTATEDIR) < 0)
210
            goto error;
211 212 213 214 215 216 217 218 219 220 221
    } else {
        char *rundir;
        char *cachedir;

        cachedir = virGetUserCacheDirectory();
        if (!cachedir)
            goto error;

        if (virAsprintf(&cfg->logDir,
                        "%s/qemu/log", cachedir) < 0) {
            VIR_FREE(cachedir);
222
            goto error;
223 224 225
        }
        if (virAsprintf(&cfg->cacheDir, "%s/qemu/cache", cachedir) < 0) {
            VIR_FREE(cachedir);
226
            goto error;
227 228
        }
        VIR_FREE(cachedir);
229

230 231 232 233 234
        rundir = virGetUserRuntimeDirectory();
        if (!rundir)
            goto error;
        if (virAsprintf(&cfg->stateDir, "%s/qemu/run", rundir) < 0) {
            VIR_FREE(rundir);
235
            goto error;
236 237 238 239 240 241 242
        }
        VIR_FREE(rundir);

        if (!(cfg->configBaseDir = virGetUserConfigDirectory()))
            goto error;

        if (virAsprintf(&cfg->libDir, "%s/qemu/lib", cfg->configBaseDir) < 0)
243
            goto error;
244
        if (virAsprintf(&cfg->saveDir, "%s/qemu/save", cfg->configBaseDir) < 0)
245
            goto error;
246
        if (virAsprintf(&cfg->snapshotDir, "%s/qemu/snapshot", cfg->configBaseDir) < 0)
247
            goto error;
248
        if (virAsprintf(&cfg->autoDumpPath, "%s/qemu/dump", cfg->configBaseDir) < 0)
249
            goto error;
250 251 252
    }

    if (virAsprintf(&cfg->configDir, "%s/qemu", cfg->configBaseDir) < 0)
253
        goto error;
254
    if (virAsprintf(&cfg->autostartDir, "%s/qemu/autostart", cfg->configBaseDir) < 0)
255
        goto error;
256 257


258 259
    if (VIR_STRDUP(cfg->vncListen, "127.0.0.1") < 0)
        goto error;
260

261 262
    if (VIR_STRDUP(cfg->vncTLSx509certdir, SYSCONFDIR "/pki/libvirt-vnc") < 0)
        goto error;
D
Daniel P. Berrange 已提交
263

264 265
    if (VIR_STRDUP(cfg->spiceListen, "127.0.0.1") < 0)
        goto error;
266

E
Eric Blake 已提交
267 268
    if (VIR_STRDUP(cfg->spiceTLSx509certdir,
                   SYSCONFDIR "/pki/libvirt-spice") < 0)
269
        goto error;
270

271 272 273
    cfg->remotePortMin = QEMU_REMOTE_PORT_MIN;
    cfg->remotePortMax = QEMU_REMOTE_PORT_MAX;

274 275 276
    cfg->webSocketPortMin = QEMU_WEBSOCKET_PORT_MIN;
    cfg->webSocketPortMax = QEMU_WEBSOCKET_PORT_MAX;

277 278 279
    cfg->migrationPortMin = QEMU_MIGRATION_PORT_MIN;
    cfg->migrationPortMax = QEMU_MIGRATION_PORT_MAX;

280
    /* For privileged driver, try and find hugetlbfs mounts automatically.
281
     * Non-privileged driver requires admin to create a dir for the
282
     * user, chown it, and then let user configure it manually. */
283
    if (privileged &&
284 285 286 287
        virFileFindHugeTLBFS(&cfg->hugetlbfs, &cfg->nhugetlbfs) < 0) {
        /* This however is not implemented on all platforms. */
        virErrorPtr err = virGetLastError();
        if (err && err->code != VIR_ERR_NO_SUPPORT)
288
            goto error;
289
    }
290

291 292
    if (VIR_STRDUP(cfg->bridgeHelperName, "/usr/libexec/qemu-bridge-helper") < 0)
        goto error;
293

294 295 296 297 298 299 300 301 302
    cfg->clearEmulatorCapabilities = true;

    cfg->securityDefaultConfined = true;
    cfg->securityRequireConfined = false;

    cfg->keepAliveInterval = 5;
    cfg->keepAliveCount = 5;
    cfg->seccompSandbox = -1;

303 304
    cfg->logTimestamp = true;

305 306 307 308 309 310
#ifdef DEFAULT_LOADER_NVRAM
    if (virQEMUDriverConfigLoaderNVRAMParse(cfg, DEFAULT_LOADER_NVRAM) < 0)
        goto error;

#else

311 312
    if (VIR_ALLOC_N(cfg->loader, 2) < 0 ||
        VIR_ALLOC_N(cfg->nvram, 2) < 0)
313
        goto error;
314
    cfg->nloader = 2;
315

316 317 318 319
    if (VIR_STRDUP(cfg->loader[0], VIR_QEMU_AAVMF_LOADER_PATH) < 0 ||
        VIR_STRDUP(cfg->nvram[0], VIR_QEMU_AAVMF_NVRAM_PATH) < 0  ||
        VIR_STRDUP(cfg->loader[1], VIR_QEMU_OVMF_LOADER_PATH) < 0 ||
        VIR_STRDUP(cfg->nvram[1], VIR_QEMU_OVMF_NVRAM_PATH) < 0)
320
        goto error;
321
#endif
322

323 324
    return cfg;

325
 error:
326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356
    virObjectUnref(cfg);
    return NULL;
}


static void virQEMUDriverConfigDispose(void *obj)
{
    virQEMUDriverConfigPtr cfg = obj;


    virStringFreeList(cfg->cgroupDeviceACL);

    VIR_FREE(cfg->configBaseDir);
    VIR_FREE(cfg->configDir);
    VIR_FREE(cfg->autostartDir);
    VIR_FREE(cfg->logDir);
    VIR_FREE(cfg->stateDir);

    VIR_FREE(cfg->libDir);
    VIR_FREE(cfg->cacheDir);
    VIR_FREE(cfg->saveDir);
    VIR_FREE(cfg->snapshotDir);

    VIR_FREE(cfg->vncTLSx509certdir);
    VIR_FREE(cfg->vncListen);
    VIR_FREE(cfg->vncPassword);
    VIR_FREE(cfg->vncSASLdir);

    VIR_FREE(cfg->spiceTLSx509certdir);
    VIR_FREE(cfg->spiceListen);
    VIR_FREE(cfg->spicePassword);
357
    VIR_FREE(cfg->spiceSASLdir);
358

359 360 361 362 363
    while (cfg->nhugetlbfs) {
        cfg->nhugetlbfs--;
        VIR_FREE(cfg->hugetlbfs[cfg->nhugetlbfs].mnt_dir);
    }
    VIR_FREE(cfg->hugetlbfs);
364
    VIR_FREE(cfg->bridgeHelperName);
365 366 367 368 369 370 371 372

    VIR_FREE(cfg->saveImageFormat);
    VIR_FREE(cfg->dumpImageFormat);
    VIR_FREE(cfg->autoDumpPath);

    virStringFreeList(cfg->securityDriverNames);

    VIR_FREE(cfg->lockManagerName);
373 374 375 376 377 378 379 380

    while (cfg->nloader) {
        VIR_FREE(cfg->loader[cfg->nloader - 1]);
        VIR_FREE(cfg->nvram[cfg->nloader - 1]);
        cfg->nloader--;
    }
    VIR_FREE(cfg->loader);
    VIR_FREE(cfg->nvram);
381 382
}

383

384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403
static int
virQEMUDriverConfigHugeTLBFSInit(virHugeTLBFSPtr hugetlbfs,
                                 const char *path,
                                 bool deflt)
{
    int ret = -1;

    if (VIR_STRDUP(hugetlbfs->mnt_dir, path) < 0)
        goto cleanup;

    if (virFileGetHugepageSize(path, &hugetlbfs->size) < 0)
        goto cleanup;

    hugetlbfs->deflt = deflt;
    ret = 0;
 cleanup:
    return ret;
}


404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440
static int
virQEMUDriverConfigNVRAMParse(const char *str,
                              char **loader,
                              char **nvram)
{
    int ret = -1;
    char **token;

    if (!(token = virStringSplit(str, ":", 0)))
        goto cleanup;

    if (token[0]) {
        virSkipSpaces((const char **) &token[0]);
        if (token[1])
            virSkipSpaces((const char **) &token[1]);
    }

    /* Exactly two tokens are expected */
    if (!token[0] || !token[1] || token[2] ||
        STREQ(token[0], "") || STREQ(token[1], "")) {
        virReportError(VIR_ERR_CONF_SYNTAX,
                       _("Invalid nvram format: '%s'"),
                       str);
        goto cleanup;
    }

    if (VIR_STRDUP(*loader, token[0]) < 0 ||
        VIR_STRDUP(*nvram, token[1]) < 0)
        goto cleanup;

    ret = 0;
 cleanup:
    virStringFreeList(token);
    return ret;
}


441 442 443 444 445 446
int virQEMUDriverConfigLoadFile(virQEMUDriverConfigPtr cfg,
                                const char *filename)
{
    virConfPtr conf = NULL;
    virConfValuePtr p;
    int ret = -1;
447
    size_t i;
448

D
Daniel P. Berrange 已提交
449 450 451
    /* Just check the file is readable before opening it, otherwise
     * libvirt emits an error.
     */
452
    if (access(filename, R_OK) == -1) {
453
        VIR_INFO("Could not read qemu config file %s", filename);
454
        return 0;
455
    }
D
Daniel P. Berrange 已提交
456

457 458
    if (!(conf = virConfReadFile(filename, 0)))
        goto cleanup;
D
Daniel P. Berrange 已提交
459

M
Michal Privoznik 已提交
460
#define CHECK_TYPE(name, typ)                         \
461 462 463 464
    if (p && p->type != (typ)) {                      \
        virReportError(VIR_ERR_INTERNAL_ERROR,        \
                       "%s: %s: expected type " #typ, \
                       filename, (name));             \
465
        goto cleanup;                                 \
466 467
    }

468 469 470 471 472 473 474 475 476 477 478 479 480 481 482
#define CHECK_TYPE_ALT(name, type1, type2)                      \
    if (p && (p->type != (type1) && p->type != (type2))) {      \
        virReportError(VIR_ERR_INTERNAL_ERROR,                  \
                       "%s: %s: expected type " #type1,         \
                       filename, (name));                       \
        goto cleanup;                                           \
    }

#define GET_VALUE_LONG(NAME, VAR)                               \
    p = virConfGetValue(conf, NAME);                            \
    CHECK_TYPE_ALT(NAME, VIR_CONF_LONG, VIR_CONF_ULONG);        \
    if (p)                                                      \
        VAR = p->l;

#define GET_VALUE_ULONG(NAME, VAR)    \
483
    p = virConfGetValue(conf, NAME);  \
484
    CHECK_TYPE(NAME, VIR_CONF_ULONG); \
485 486 487
    if (p)                            \
        VAR = p->l;

488 489
#define GET_VALUE_BOOL(NAME, VAR)     \
    p = virConfGetValue(conf, NAME);  \
490
    CHECK_TYPE(NAME, VIR_CONF_ULONG); \
491 492 493
    if (p)                            \
        VAR = p->l != 0;

494 495 496 497 498
#define GET_VALUE_STR(NAME, VAR)           \
    p = virConfGetValue(conf, NAME);       \
    CHECK_TYPE(NAME, VIR_CONF_STRING);     \
    if (p && p->str) {                     \
        VIR_FREE(VAR);                     \
499 500
        if (VIR_STRDUP(VAR, p->str) < 0)   \
            goto cleanup;                  \
501 502
    }

503 504 505 506 507 508 509 510 511
    GET_VALUE_BOOL("vnc_auto_unix_socket", cfg->vncAutoUnixSocket);
    GET_VALUE_BOOL("vnc_tls", cfg->vncTLS);
    GET_VALUE_BOOL("vnc_tls_x509_verify", cfg->vncTLSx509verify);
    GET_VALUE_STR("vnc_tls_x509_cert_dir", cfg->vncTLSx509certdir);
    GET_VALUE_STR("vnc_listen", cfg->vncListen);
    GET_VALUE_STR("vnc_password", cfg->vncPassword);
    GET_VALUE_BOOL("vnc_sasl", cfg->vncSASL);
    GET_VALUE_STR("vnc_sasl_dir", cfg->vncSASLdir);
    GET_VALUE_BOOL("vnc_allow_host_audio", cfg->vncAllowHostAudio);
512
    GET_VALUE_BOOL("nographics_allow_host_audio", cfg->nogfxAllowHostAudio);
513

514
    p = virConfGetValue(conf, "security_driver");
515
    if (p && p->type == VIR_CONF_LIST) {
516
        size_t len, j;
517 518
        virConfValuePtr pp;

J
Ján Tomko 已提交
519
        /* Calc length and check items */
520 521
        for (len = 0, pp = p->list; pp; len++, pp = pp->next) {
            if (pp->type != VIR_CONF_STRING) {
522 523 524
                virReportError(VIR_ERR_CONF_SYNTAX, "%s",
                               _("security_driver must be a list of strings"));
                goto cleanup;
525 526 527
            }
        }

528
        if (VIR_ALLOC_N(cfg->securityDriverNames, len + 1) < 0)
529
            goto cleanup;
530 531

        for (i = 0, pp = p->list; pp; i++, pp = pp->next) {
532 533 534 535 536 537 538
            for (j = 0; j < i; j++) {
                if (STREQ(pp->str, cfg->securityDriverNames[j])) {
                    virReportError(VIR_ERR_CONF_SYNTAX,
                                   _("Duplicate security driver %s"), pp->str);
                    goto cleanup;
                }
            }
539 540
            if (VIR_STRDUP(cfg->securityDriverNames[i], pp->str) < 0)
                goto cleanup;
541
        }
542
        cfg->securityDriverNames[len] = NULL;
543
    } else {
544
        CHECK_TYPE("security_driver", VIR_CONF_STRING);
545
        if (p && p->str) {
546
            if (VIR_ALLOC_N(cfg->securityDriverNames, 2) < 0)
547
                goto cleanup;
548 549
            if (VIR_STRDUP(cfg->securityDriverNames[0], p->str) < 0)
                goto cleanup;
550

551
            cfg->securityDriverNames[1] = NULL;
552
        }
553 554
    }

555 556
    GET_VALUE_BOOL("security_default_confined", cfg->securityDefaultConfined);
    GET_VALUE_BOOL("security_require_confined", cfg->securityRequireConfined);
557

558 559
    GET_VALUE_BOOL("spice_tls", cfg->spiceTLS);
    GET_VALUE_STR("spice_tls_x509_cert_dir", cfg->spiceTLSx509certdir);
560 561
    GET_VALUE_BOOL("spice_sasl", cfg->spiceSASL);
    GET_VALUE_STR("spice_sasl_dir", cfg->spiceSASLdir);
562 563
    GET_VALUE_STR("spice_listen", cfg->spiceListen);
    GET_VALUE_STR("spice_password", cfg->spicePassword);
564 565


566
    GET_VALUE_ULONG("remote_websocket_port_min", cfg->webSocketPortMin);
567 568 569 570 571 572 573 574 575 576 577
    if (cfg->webSocketPortMin < QEMU_WEBSOCKET_PORT_MIN) {
        /* if the port is too low, we can't get the display name
         * to tell to vnc (usually subtract 5700, e.g. localhost:1
         * for port 5701) */
        virReportError(VIR_ERR_INTERNAL_ERROR,
                       _("%s: remote_websocket_port_min: port must be greater "
                         "than or equal to %d"),
                        filename, QEMU_WEBSOCKET_PORT_MIN);
        goto cleanup;
    }

578
    GET_VALUE_ULONG("remote_websocket_port_max", cfg->webSocketPortMax);
579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594
    if (cfg->webSocketPortMax > QEMU_WEBSOCKET_PORT_MAX ||
        cfg->webSocketPortMax < cfg->webSocketPortMin) {
        virReportError(VIR_ERR_INTERNAL_ERROR,
                        _("%s: remote_websocket_port_max: port must be between "
                          "the minimal port and %d"),
                       filename, QEMU_WEBSOCKET_PORT_MAX);
        goto cleanup;
    }

    if (cfg->webSocketPortMin > cfg->webSocketPortMax) {
        virReportError(VIR_ERR_INTERNAL_ERROR,
                        _("%s: remote_websocket_port_min: min port must not be "
                          "greater than max port"), filename);
        goto cleanup;
    }

595
    GET_VALUE_ULONG("remote_display_port_min", cfg->remotePortMin);
596
    if (cfg->remotePortMin < QEMU_REMOTE_PORT_MIN) {
597 598 599 600 601 602 603
        /* if the port is too low, we can't get the display name
         * to tell to vnc (usually subtract 5900, e.g. localhost:1
         * for port 5901) */
        virReportError(VIR_ERR_INTERNAL_ERROR,
                       _("%s: remote_display_port_min: port must be greater "
                         "than or equal to %d"),
                        filename, QEMU_REMOTE_PORT_MIN);
604
        goto cleanup;
605 606
    }

607
    GET_VALUE_ULONG("remote_display_port_max", cfg->remotePortMax);
608 609
    if (cfg->remotePortMax > QEMU_REMOTE_PORT_MAX ||
        cfg->remotePortMax < cfg->remotePortMin) {
610 611 612 613
        virReportError(VIR_ERR_INTERNAL_ERROR,
                        _("%s: remote_display_port_max: port must be between "
                          "the minimal port and %d"),
                       filename, QEMU_REMOTE_PORT_MAX);
614
        goto cleanup;
615 616
    }

617
    if (cfg->remotePortMin > cfg->remotePortMax) {
618
        virReportError(VIR_ERR_INTERNAL_ERROR,
619 620
                        _("%s: remote_display_port_min: min port must not be "
                          "greater than max port"), filename);
621
        goto cleanup;
622 623
    }

624
    GET_VALUE_ULONG("migration_port_min", cfg->migrationPortMin);
625 626 627 628 629 630 631
    if (cfg->migrationPortMin <= 0) {
        virReportError(VIR_ERR_INTERNAL_ERROR,
                       _("%s: migration_port_min: port must be greater than 0"),
                        filename);
        goto cleanup;
    }

632
    GET_VALUE_ULONG("migration_port_max", cfg->migrationPortMax);
633 634 635 636 637 638 639 640 641
    if (cfg->migrationPortMax > 65535 ||
        cfg->migrationPortMax < cfg->migrationPortMin) {
        virReportError(VIR_ERR_INTERNAL_ERROR,
                        _("%s: migration_port_max: port must be between "
                          "the minimal port %d and 65535"),
                       filename, cfg->migrationPortMin);
        goto cleanup;
    }

642 643
    p = virConfGetValue(conf, "user");
    CHECK_TYPE("user", VIR_CONF_STRING);
644 645
    if (p && p->str &&
        virGetUserID(p->str, &cfg->user) < 0)
646
        goto cleanup;
647

648 649
    p = virConfGetValue(conf, "group");
    CHECK_TYPE("group", VIR_CONF_STRING);
650 651
    if (p && p->str &&
        virGetGroupID(p->str, &cfg->group) < 0)
652
        goto cleanup;
653

654
    GET_VALUE_BOOL("dynamic_ownership", cfg->dynamicOwnership);
655

656 657
    p = virConfGetValue(conf, "cgroup_controllers");
    CHECK_TYPE("cgroup_controllers", VIR_CONF_LIST);
658
    if (p) {
659
        cfg->cgroupControllers = 0;
660 661 662 663
        virConfValuePtr pp;
        for (i = 0, pp = p->list; pp; ++i, pp = pp->next) {
            int ctl;
            if (pp->type != VIR_CONF_STRING) {
664 665 666 667
                virReportError(VIR_ERR_CONF_SYNTAX, "%s",
                               _("cgroup_controllers must be a "
                                 "list of strings"));
                goto cleanup;
668
            }
669 670 671 672 673

            if ((ctl = virCgroupControllerTypeFromString(pp->str)) < 0) {
                virReportError(VIR_ERR_CONF_SYNTAX,
                               _("Unknown cgroup controller '%s'"), pp->str);
                goto cleanup;
674
            }
675
            cfg->cgroupControllers |= (1 << ctl);
676 677 678
        }
    }

679 680
    p = virConfGetValue(conf, "cgroup_device_acl");
    CHECK_TYPE("cgroup_device_acl", VIR_CONF_LIST);
681 682 683 684 685
    if (p) {
        int len = 0;
        virConfValuePtr pp;
        for (pp = p->list; pp; pp = pp->next)
            len++;
686
        if (VIR_ALLOC_N(cfg->cgroupDeviceACL, 1+len) < 0)
687
            goto cleanup;
688

689 690
        for (i = 0, pp = p->list; pp; ++i, pp = pp->next) {
            if (pp->type != VIR_CONF_STRING) {
691 692 693 694
                virReportError(VIR_ERR_CONF_SYNTAX, "%s",
                               _("cgroup_device_acl must be a "
                                 "list of strings"));
                goto cleanup;
695
            }
696 697
            if (VIR_STRDUP(cfg->cgroupDeviceACL[i], pp->str) < 0)
                goto cleanup;
698
        }
699
        cfg->cgroupDeviceACL[i] = NULL;
700 701
    }

702 703
    GET_VALUE_STR("save_image_format", cfg->saveImageFormat);
    GET_VALUE_STR("dump_image_format", cfg->dumpImageFormat);
704 705
    GET_VALUE_STR("snapshot_image_format", cfg->snapshotImageFormat);

706 707 708
    GET_VALUE_STR("auto_dump_path", cfg->autoDumpPath);
    GET_VALUE_BOOL("auto_dump_bypass_cache", cfg->autoDumpBypassCache);
    GET_VALUE_BOOL("auto_start_bypass_cache", cfg->autoStartBypassCache);
709

710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762
    /* Some crazy backcompat. Back in the old days, this was just a pure
     * string. We must continue supporting it. These days however, this may be
     * an array of strings. */
    p = virConfGetValue(conf, "hugetlbfs_mount");
    if (p) {
        /* There already might be something autodetected. Avoid leaking it. */
        while (cfg->nhugetlbfs) {
            cfg->nhugetlbfs--;
            VIR_FREE(cfg->hugetlbfs[cfg->nhugetlbfs].mnt_dir);
        }
        VIR_FREE(cfg->hugetlbfs);

        if (p->type == VIR_CONF_LIST) {
            size_t len = 0;
            virConfValuePtr pp = p->list;

            /* Calc length and check items */
            while (pp) {
                if (pp->type != VIR_CONF_STRING) {
                    virReportError(VIR_ERR_CONF_SYNTAX, "%s",
                                   _("hugetlbfs_mount must be a list of strings"));
                    goto cleanup;
                }
                len++;
                pp = pp->next;
            }

            if (len && VIR_ALLOC_N(cfg->hugetlbfs, len) < 0)
                goto cleanup;
            cfg->nhugetlbfs = len;

            pp = p->list;
            len = 0;
            while (pp) {
                if (virQEMUDriverConfigHugeTLBFSInit(&cfg->hugetlbfs[len],
                                                     pp->str, !len) < 0)
                    goto cleanup;
                len++;
                pp = pp->next;
            }
        } else {
            CHECK_TYPE("hugetlbfs_mount", VIR_CONF_STRING);
            if (STRNEQ(p->str, "")) {
                if (VIR_ALLOC_N(cfg->hugetlbfs, 1) < 0)
                    goto cleanup;
                cfg->nhugetlbfs = 1;
                if (virQEMUDriverConfigHugeTLBFSInit(&cfg->hugetlbfs[0],
                                                     p->str, true) < 0)
                    goto cleanup;
            }
        }
    }

763
    GET_VALUE_STR("bridge_helper", cfg->bridgeHelperName);
764

765 766 767 768 769 770
    GET_VALUE_BOOL("mac_filter", cfg->macFilter);

    GET_VALUE_BOOL("relaxed_acs_check", cfg->relaxedACS);
    GET_VALUE_BOOL("clear_emulator_capabilities", cfg->clearEmulatorCapabilities);
    GET_VALUE_BOOL("allow_disk_format_probing", cfg->allowDiskFormatProbing);
    GET_VALUE_BOOL("set_process_name", cfg->setProcessName);
771 772
    GET_VALUE_ULONG("max_processes", cfg->maxProcesses);
    GET_VALUE_ULONG("max_files", cfg->maxFiles);
773

774 775
    GET_VALUE_STR("lock_manager", cfg->lockManagerName);

776
    GET_VALUE_ULONG("max_queued", cfg->maxQueuedJobs);
777 778

    GET_VALUE_LONG("keepalive_interval", cfg->keepAliveInterval);
779
    GET_VALUE_ULONG("keepalive_count", cfg->keepAliveCount);
780 781

    GET_VALUE_LONG("seccomp_sandbox", cfg->seccompSandbox);
782

783
    GET_VALUE_STR("migration_host", cfg->migrateHost);
784 785 786 787 788 789 790 791 792 793 794
    virStringStripIPv6Brackets(cfg->migrateHost);
    if (cfg->migrateHost &&
        (STRPREFIX(cfg->migrateHost, "localhost") ||
         virSocketAddrIsNumericLocalhost(cfg->migrateHost))) {
        virReportError(VIR_ERR_CONF_SYNTAX,
                       _("migration_host must not be the address of"
                         " the local machine: %s"),
                       cfg->migrateHost);
        goto cleanup;
    }

795
    GET_VALUE_STR("migration_address", cfg->migrationAddress);
796 797 798 799 800 801 802 803 804 805
    virStringStripIPv6Brackets(cfg->migrationAddress);
    if (cfg->migrationAddress &&
        (STRPREFIX(cfg->migrationAddress, "localhost") ||
         virSocketAddrIsNumericLocalhost(cfg->migrationAddress))) {
        virReportError(VIR_ERR_CONF_SYNTAX,
                       _("migration_address must not be the address of"
                         " the local machine: %s"),
                       cfg->migrationAddress);
        goto cleanup;
    }
806

807 808
    GET_VALUE_BOOL("log_timestamp", cfg->logTimestamp);

809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845
    if ((p = virConfGetValue(conf, "nvram"))) {
        size_t len;
        virConfValuePtr pp;

        CHECK_TYPE("nvram", VIR_CONF_LIST);

        while (cfg->nloader) {
            VIR_FREE(cfg->loader[cfg->nloader - 1]);
            VIR_FREE(cfg->nvram[cfg->nloader - 1]);
            cfg->nloader--;
        }
        VIR_FREE(cfg->loader);
        VIR_FREE(cfg->nvram);

        /* Calc length and check items */
        for (len = 0, pp = p->list; pp; len++, pp = pp->next) {
            if (pp->type != VIR_CONF_STRING) {
                virReportError(VIR_ERR_CONF_SYNTAX, "%s",
                               _("nvram must be a list of strings"));
                goto cleanup;
            }
        }

        if (len &&
            (VIR_ALLOC_N(cfg->loader, len) < 0 ||
             VIR_ALLOC_N(cfg->nvram, len) < 0))
            goto cleanup;
        cfg->nloader = len;

        for (i = 0, pp = p->list; pp; i++, pp = pp->next) {
            if (virQEMUDriverConfigNVRAMParse(pp->str,
                                              &cfg->loader[i],
                                              &cfg->nvram[i]) < 0)
                goto cleanup;
        }
    }

846 847
    ret = 0;

848
 cleanup:
849
    virConfFree(conf);
850
    return ret;
D
Daniel P. Berrange 已提交
851
}
852
#undef GET_VALUE_LONG
853 854
#undef GET_VALUE_ULONG
#undef GET_VALUE_BOOL
855
#undef GET_VALUE_STR
856

857 858
virQEMUDriverConfigPtr virQEMUDriverGetConfig(virQEMUDriverPtr driver)
{
859 860 861 862 863
    virQEMUDriverConfigPtr conf;
    qemuDriverLock(driver);
    conf = virObjectRef(driver->config);
    qemuDriverUnlock(driver);
    return conf;
864 865
}

866
virDomainXMLOptionPtr
867
virQEMUDriverCreateXMLConf(virQEMUDriverPtr driver)
868
{
869
    virQEMUDriverDomainDefParserConfig.priv = driver;
870
    return virDomainXMLOptionNew(&virQEMUDriverDomainDefParserConfig,
871 872
                                 &virQEMUDriverPrivateDataCallbacks,
                                 &virQEMUDriverDomainXMLNamespace);
873 874
}

875 876 877

virCapsPtr virQEMUDriverCreateCapabilities(virQEMUDriverPtr driver)
{
878
    size_t i, j;
879 880 881
    virCapsPtr caps;
    virSecurityManagerPtr *sec_managers = NULL;
    /* Security driver data */
882
    const char *doi, *model, *lbl, *type;
883
    virQEMUDriverConfigPtr cfg = virQEMUDriverGetConfig(driver);
884 885
    const int virtTypes[] = {VIR_DOMAIN_VIRT_KVM,
                             VIR_DOMAIN_VIRT_QEMU,};
886 887

    /* Basic host arch / guest machine capabilities */
888
    if (!(caps = virQEMUCapsInit(driver->qemuCapsCache)))
889
        goto error;
890 891 892 893

    if (virGetHostUUID(caps->host.host_uuid)) {
        virReportError(VIR_ERR_INTERNAL_ERROR,
                       "%s", _("cannot get the host uuid"));
894
        goto error;
895 896 897
    }

    /* access sec drivers and create a sec model for each one */
898 899
    if (!(sec_managers = virSecurityManagerGetNested(driver->securityManager)))
        goto error;
900 901 902 903 904 905 906

    /* calculate length */
    for (i = 0; sec_managers[i]; i++)
        ;
    caps->host.nsecModels = i;

    if (VIR_ALLOC_N(caps->host.secModels, caps->host.nsecModels) < 0)
907
        goto error;
908 909

    for (i = 0; sec_managers[i]; i++) {
910
        virCapsHostSecModelPtr sm = &caps->host.secModels[i];
911 912
        doi = virSecurityManagerGetDOI(sec_managers[i]);
        model = virSecurityManagerGetModel(sec_managers[i]);
913 914
        if (VIR_STRDUP(sm->model, model) < 0 ||
            VIR_STRDUP(sm->doi, doi) < 0)
915
            goto error;
916 917 918 919 920 921 922 923 924

        for (j = 0; j < ARRAY_CARDINALITY(virtTypes); j++) {
            lbl = virSecurityManagerGetBaseLabel(sec_managers[i], virtTypes[j]);
            type = virDomainVirtTypeToString(virtTypes[j]);
            if (lbl &&
                virCapabilitiesHostSecModelAddBaseLabel(sm, type, lbl) < 0)
                goto error;
        }

925 926 927 928 929 930 931 932
        VIR_DEBUG("Initialized caps for security driver \"%s\" with "
                  "DOI \"%s\"", model, doi);
    }
    VIR_FREE(sec_managers);

    virObjectUnref(cfg);
    return caps;

933
 error:
934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954
    VIR_FREE(sec_managers);
    virObjectUnref(caps);
    virObjectUnref(cfg);
    return NULL;
}


/**
 * virQEMUDriverGetCapabilities:
 *
 * Get a reference to the virCapsPtr instance for the
 * driver. If @refresh is true, the capabilities will be
 * rebuilt first
 *
 * The caller must release the reference with virObjetUnref
 *
 * Returns: a reference to a virCapsPtr instance or NULL
 */
virCapsPtr virQEMUDriverGetCapabilities(virQEMUDriverPtr driver,
                                        bool refresh)
{
955
    virCapsPtr ret = NULL;
956 957 958 959 960
    if (refresh) {
        virCapsPtr caps = NULL;
        if ((caps = virQEMUDriverCreateCapabilities(driver)) == NULL)
            return NULL;

961
        qemuDriverLock(driver);
962 963
        virObjectUnref(driver->caps);
        driver->caps = caps;
964 965
    } else {
        qemuDriverLock(driver);
966 967
    }

968 969 970
    ret = virObjectRef(driver->caps);
    qemuDriverUnlock(driver);
    return ret;
971 972
}

973
struct _qemuSharedDeviceEntry {
974 975 976 977
    size_t ref;
    char **domains; /* array of domain names */
};

978
/* Construct the hash key for sharedDevices as "major:minor" */
979
char *
980
qemuGetSharedDeviceKey(const char *device_path)
981 982 983 984 985
{
    int maj, min;
    char *key = NULL;
    int rc;

986
    if ((rc = virGetDeviceID(device_path, &maj, &min)) < 0) {
987 988
        virReportSystemError(-rc,
                             _("Unable to get minor number of device '%s'"),
989
                             device_path);
990 991 992
        return NULL;
    }

993
    if (virAsprintf(&key, "%d:%d", maj, min) < 0)
994 995 996 997 998
        return NULL;

    return key;
}

999
/* Check if a shared device's setting conflicts with the conf
1000 1001
 * used by other domain(s). Currently only checks the sgio
 * setting. Note that this should only be called for disk with
1002
 * block source if the device type is disk.
1003 1004 1005 1006
 *
 * Returns 0 if no conflicts, otherwise returns -1.
 */
static int
1007 1008
qemuCheckSharedDisk(virHashTablePtr sharedDevices,
                    virDomainDiskDefPtr disk)
1009 1010 1011
{
    char *sysfs_path = NULL;
    char *key = NULL;
1012
    int val;
1013
    int ret = -1;
1014

1015
    if (disk->device != VIR_DOMAIN_DISK_DEVICE_LUN)
1016 1017
        return 0;

1018
    if (!(sysfs_path = virGetUnprivSGIOSysfsPath(disk->src->path, NULL)))
1019 1020
        goto cleanup;

1021 1022 1023
    /* It can't be conflict if unpriv_sgio is not supported by kernel. */
    if (!virFileExists(sysfs_path)) {
        ret = 0;
1024 1025 1026
        goto cleanup;
    }

1027
    if (!(key = qemuGetSharedDeviceKey(disk->src->path)))
1028 1029
        goto cleanup;

1030 1031 1032
    /* It can't be conflict if no other domain is sharing it. */
    if (!(virHashLookup(sharedDevices, key))) {
        ret = 0;
1033 1034 1035
        goto cleanup;
    }

1036
    if (virGetDeviceUnprivSGIO(disk->src->path, NULL, &val) < 0)
1037 1038
        goto cleanup;

1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057
    if (!((val == 0 &&
           (disk->sgio == VIR_DOMAIN_DEVICE_SGIO_FILTERED ||
            disk->sgio == VIR_DOMAIN_DEVICE_SGIO_DEFAULT)) ||
          (val == 1 &&
           disk->sgio == VIR_DOMAIN_DEVICE_SGIO_UNFILTERED))) {

        if (virDomainDiskGetType(disk) == VIR_STORAGE_TYPE_VOLUME) {
            virReportError(VIR_ERR_OPERATION_INVALID,
                           _("sgio of shared disk 'pool=%s' 'volume=%s' conflicts "
                             "with other active domains"),
                           disk->src->srcpool->pool,
                           disk->src->srcpool->volume);
        } else {
            virReportError(VIR_ERR_OPERATION_INVALID,
                           _("sgio of shared disk '%s' conflicts with other "
                             "active domains"), disk->src->path);
        }

        goto cleanup;
1058 1059
    }

1060 1061
    ret = 0;

1062
 cleanup:
1063 1064 1065 1066
    VIR_FREE(sysfs_path);
    VIR_FREE(key);
    return ret;
}
1067

1068

1069
bool
1070 1071 1072
qemuSharedDeviceEntryDomainExists(qemuSharedDeviceEntryPtr entry,
                                  const char *name,
                                  int *idx)
1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087
{
    size_t i;

    for (i = 0; i < entry->ref; i++) {
        if (STREQ(entry->domains[i], name)) {
            if (idx)
                *idx = i;
            return true;
        }
    }

    return false;
}

void
1088
qemuSharedDeviceEntryFree(void *payload, const void *name ATTRIBUTE_UNUSED)
1089
{
1090
    qemuSharedDeviceEntryPtr entry = payload;
1091 1092
    size_t i;

1093 1094 1095
    if (!entry)
        return;

1096
    for (i = 0; i < entry->ref; i++)
1097 1098 1099 1100 1101
        VIR_FREE(entry->domains[i]);
    VIR_FREE(entry->domains);
    VIR_FREE(entry);
}

1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113

static int
qemuSharedDeviceEntryInsert(virQEMUDriverPtr driver,
                            const char *key,
                            const char *name)
{
    qemuSharedDeviceEntry *entry = NULL;

    if ((entry = virHashLookup(driver->sharedDevices, key))) {
        /* Nothing to do if the shared scsi host device is already
         * recorded in the table.
         */
J
Ján Tomko 已提交
1114 1115 1116 1117 1118 1119 1120
        if (!qemuSharedDeviceEntryDomainExists(entry, name, NULL)) {
            if (VIR_EXPAND_N(entry->domains, entry->ref, 1) < 0 ||
                VIR_STRDUP(entry->domains[entry->ref - 1], name) < 0) {
                /* entry is owned by the hash table here */
                entry = NULL;
                goto error;
            }
1121 1122 1123 1124 1125
        }
    } else {
        if (VIR_ALLOC(entry) < 0 ||
            VIR_ALLOC_N(entry->domains, 1) < 0 ||
            VIR_STRDUP(entry->domains[0], name) < 0)
J
Ján Tomko 已提交
1126
            goto error;
1127 1128 1129 1130

        entry->ref = 1;

        if (virHashAddEntry(driver->sharedDevices, key, entry))
J
Ján Tomko 已提交
1131
            goto error;
1132 1133
    }

J
Ján Tomko 已提交
1134
    return 0;
1135

J
Ján Tomko 已提交
1136
 error:
1137
    qemuSharedDeviceEntryFree(entry, NULL);
J
Ján Tomko 已提交
1138
    return -1;
1139 1140
}

1141 1142

/* qemuAddSharedDisk:
1143
 * @driver: Pointer to qemu driver struct
1144
 * @src: disk source
1145 1146 1147
 * @name: The domain name
 *
 * Increase ref count and add the domain name into the list which
1148
 * records all the domains that use the shared device if the entry
1149
 * already exists, otherwise add a new entry.
1150
 */
1151 1152 1153 1154
static int
qemuAddSharedDisk(virQEMUDriverPtr driver,
                  virDomainDiskDefPtr disk,
                  const char *name)
1155 1156
{
    char *key = NULL;
1157
    int ret = -1;
1158

1159 1160
    if (!disk->src->shared || !virDomainDiskSourceIsBlockType(disk->src))
        return 0;
1161

1162
    qemuDriverLock(driver);
1163

1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181
    if (qemuCheckSharedDisk(driver->sharedDevices, disk) < 0)
        goto cleanup;

    if (!(key = qemuGetSharedDeviceKey(virDomainDiskGetSource(disk))))
        goto cleanup;

    if (qemuSharedDeviceEntryInsert(driver, key, name) < 0)
        goto cleanup;

    ret = 0;

 cleanup:
    qemuDriverUnlock(driver);
    VIR_FREE(key);
    return ret;
}


1182 1183
static char *
qemuGetSharedHostdevKey(virDomainHostdevDefPtr hostdev)
1184 1185 1186 1187 1188 1189
{
    virDomainHostdevSubsysSCSIPtr scsisrc = &hostdev->source.subsys.u.scsi;
    virDomainHostdevSubsysSCSIHostPtr scsihostsrc = &scsisrc->u.host;
    char *dev_name = NULL;
    char *dev_path = NULL;
    char *key = NULL;
1190

1191 1192 1193 1194 1195 1196
    if (!(dev_name = virSCSIDeviceGetDevName(NULL,
                                             scsihostsrc->adapter,
                                             scsihostsrc->bus,
                                             scsihostsrc->target,
                                             scsihostsrc->unit)))
        goto cleanup;
1197

1198 1199
    if (virAsprintf(&dev_path, "/dev/%s", dev_name) < 0)
        goto cleanup;
1200

1201 1202
    if (!(key = qemuGetSharedDeviceKey(dev_path)))
        goto cleanup;
1203

1204
 cleanup:
1205 1206
    VIR_FREE(dev_name);
    VIR_FREE(dev_path);
1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220

    return key;
}

static int
qemuAddSharedHostdev(virQEMUDriverPtr driver,
                     virDomainHostdevDefPtr hostdev,
                     const char *name)
{
    char *key = NULL;
    int ret = -1;

    if (!hostdev->shareable ||
        !(hostdev->mode == VIR_DOMAIN_HOSTDEV_MODE_SUBSYS &&
1221 1222
          hostdev->source.subsys.type == VIR_DOMAIN_HOSTDEV_SUBSYS_TYPE_SCSI &&
          hostdev->source.subsys.u.scsi.protocol != VIR_DOMAIN_HOSTDEV_SCSI_PROTOCOL_TYPE_ISCSI))
1223 1224 1225 1226 1227 1228 1229 1230 1231
        return 0;

    if (!(key = qemuGetSharedHostdevKey(hostdev)))
        return -1;

    qemuDriverLock(driver);
    ret = qemuSharedDeviceEntryInsert(driver, key, name);
    qemuDriverUnlock(driver);

1232
    VIR_FREE(key);
1233
    return ret;
1234 1235
}

1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260

static int
qemuSharedDeviceEntryRemove(virQEMUDriverPtr driver,
                            const char *key,
                            const char *name)
{
    qemuSharedDeviceEntryPtr entry = NULL;
    int idx;

    if (!(entry = virHashLookup(driver->sharedDevices, key)))
        return -1;

    /* Nothing to do if the shared disk is not recored in the table. */
    if (!qemuSharedDeviceEntryDomainExists(entry, name, &idx))
        return 0;

    if (entry->ref != 1)
        VIR_DELETE_ELEMENT(entry->domains, idx, entry->ref);
    else
        ignore_value(virHashRemoveEntry(driver->sharedDevices, key));

    return 0;
}


1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286
/* qemuAddSharedDevice:
 * @driver: Pointer to qemu driver struct
 * @dev: The device def
 * @name: The domain name
 *
 * Increase ref count and add the domain name into the list which
 * records all the domains that use the shared device if the entry
 * already exists, otherwise add a new entry.
 */
int
qemuAddSharedDevice(virQEMUDriverPtr driver,
                    virDomainDeviceDefPtr dev,
                    const char *name)
{
    /* Currently the only conflicts we have to care about for
     * the shared disk and shared host device is "sgio" setting,
     * which is only valid for block disk and scsi host device.
     */
    if (dev->type == VIR_DOMAIN_DEVICE_DISK)
        return qemuAddSharedDisk(driver, dev->data.disk, name);
    else if (dev->type == VIR_DOMAIN_DEVICE_HOSTDEV)
        return qemuAddSharedHostdev(driver, dev->data.hostdev, name);
    else
        return 0;
}

1287

1288
int
1289 1290 1291
qemuRemoveSharedDisk(virQEMUDriverPtr driver,
                     virDomainDiskDefPtr disk,
                     const char *name)
1292 1293
{
    char *key = NULL;
1294
    int ret = -1;
1295

1296 1297
    if (!disk->src->shared || !virDomainDiskSourceIsBlockType(disk->src))
        return 0;
1298

1299
    qemuDriverLock(driver);
1300

1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320
    if (!(key = qemuGetSharedDeviceKey(virDomainDiskGetSource(disk))))
        goto cleanup;

    if (qemuSharedDeviceEntryRemove(driver, key, name) < 0)
        goto cleanup;

    ret = 0;
 cleanup:
    qemuDriverUnlock(driver);
    VIR_FREE(key);
    return ret;
}


static int
qemuRemoveSharedHostdev(virQEMUDriverPtr driver,
                        virDomainHostdevDefPtr hostdev,
                        const char *name)
{
    char *key = NULL;
1321
    int ret;
1322 1323 1324

    if (!hostdev->shareable ||
        !(hostdev->mode == VIR_DOMAIN_HOSTDEV_MODE_SUBSYS &&
1325 1326
          hostdev->source.subsys.type == VIR_DOMAIN_HOSTDEV_SUBSYS_TYPE_SCSI &&
          hostdev->source.subsys.u.scsi.protocol != VIR_DOMAIN_HOSTDEV_SCSI_PROTOCOL_TYPE_ISCSI))
1327 1328
        return 0;

1329 1330
    if (!(key = qemuGetSharedHostdevKey(hostdev)))
        return -1;
1331

1332 1333
    qemuDriverLock(driver);
    ret = qemuSharedDeviceEntryRemove(driver, key, name);
1334
    qemuDriverUnlock(driver);
1335

1336
    VIR_FREE(key);
1337
    return ret;
1338
}
1339

1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363

/* qemuRemoveSharedDevice:
 * @driver: Pointer to qemu driver struct
 * @device: The device def
 * @name: The domain name
 *
 * Decrease ref count and remove the domain name from the list which
 * records all the domains that use the shared device if ref is not
 * 1, otherwise remove the entry.
 */
int
qemuRemoveSharedDevice(virQEMUDriverPtr driver,
                       virDomainDeviceDefPtr dev,
                       const char *name)
{
    if (dev->type == VIR_DOMAIN_DEVICE_DISK)
        return qemuRemoveSharedDisk(driver, dev->data.disk, name);
    else if (dev->type == VIR_DOMAIN_DEVICE_HOSTDEV)
        return qemuRemoveSharedHostdev(driver, dev->data.hostdev, name);
    else
        return 0;
}


1364
int
1365
qemuSetUnprivSGIO(virDomainDeviceDefPtr dev)
1366
{
1367 1368
    virDomainDiskDefPtr disk = NULL;
    virDomainHostdevDefPtr hostdev = NULL;
1369
    char *sysfs_path = NULL;
1370
    const char *path = NULL;
1371 1372 1373 1374 1375 1376
    int val = -1;
    int ret = 0;

    /* "sgio" is only valid for block disk; cdrom
     * and floopy disk can have empty source.
     */
1377 1378 1379
    if (dev->type == VIR_DOMAIN_DEVICE_DISK) {
        disk = dev->data.disk;

1380
        if (disk->device != VIR_DOMAIN_DISK_DEVICE_LUN ||
1381
            !virDomainDiskSourceIsBlockType(disk->src))
1382 1383
            return 0;

1384
        path = virDomainDiskGetSource(disk);
1385 1386 1387 1388
    } else if (dev->type == VIR_DOMAIN_DEVICE_HOSTDEV) {
        hostdev = dev->data.hostdev;


1389 1390 1391 1392 1393 1394 1395 1396
        if (hostdev->mode == VIR_DOMAIN_HOSTDEV_MODE_SUBSYS &&
            hostdev->source.subsys.type ==
            VIR_DOMAIN_HOSTDEV_SUBSYS_TYPE_SCSI &&
            hostdev->source.subsys.u.scsi.sgio) {
            virReportError(VIR_ERR_INTERNAL_ERROR, "%s",
                           _("'sgio' is not supported for SCSI "
                             "generic device yet "));
            ret = -1;
1397
            goto cleanup;
1398
        }
1399

1400
        return 0;
1401
    } else {
1402
        return 0;
1403
    }
1404

1405 1406 1407 1408 1409
    sysfs_path = virGetUnprivSGIOSysfsPath(path, NULL);
    if (sysfs_path == NULL) {
        ret = -1;
        goto cleanup;
    }
1410 1411

    /* By default, filter the SG_IO commands, i.e. set unpriv_sgio to 0.  */
1412
    val = (disk->sgio == VIR_DOMAIN_DEVICE_SGIO_UNFILTERED);
1413 1414 1415 1416 1417 1418

    /* Do not do anything if unpriv_sgio is not supported by the kernel and the
     * whitelist is enabled.  But if requesting unfiltered access, always call
     * virSetDeviceUnprivSGIO, to report an error for unsupported unpriv_sgio.
     */
    if ((virFileExists(sysfs_path) || val == 1) &&
1419
        virSetDeviceUnprivSGIO(path, NULL, val) < 0)
1420 1421
        ret = -1;

1422
 cleanup:
1423 1424 1425
    VIR_FREE(sysfs_path);
    return ret;
}
1426

1427 1428 1429 1430
int qemuDriverAllocateID(virQEMUDriverPtr driver)
{
    return virAtomicIntInc(&driver->nextvmid);
}
1431

1432 1433 1434 1435 1436

int
qemuTranslateSnapshotDiskSourcePool(virConnectPtr conn ATTRIBUTE_UNUSED,
                                    virDomainSnapshotDiskDefPtr def)
{
1437
    if (def->src->type != VIR_STORAGE_TYPE_VOLUME)
1438 1439 1440 1441 1442 1443
        return 0;

    virReportError(VIR_ERR_INTERNAL_ERROR, "%s",
                   _("Snapshots are not yet supported with 'pool' volumes"));
    return -1;
}
1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470

char *
qemuGetHugepagePath(virHugeTLBFSPtr hugepage)
{
    char *ret;

    if (virAsprintf(&ret, "%s/libvirt/qemu", hugepage->mnt_dir) < 0)
        return NULL;

    return ret;
}

char *
qemuGetDefaultHugepath(virHugeTLBFSPtr hugetlbfs,
                       size_t nhugetlbfs)
{
    size_t i;

    for (i = 0; i < nhugetlbfs; i++)
        if (hugetlbfs[i].deflt)
            break;

    if (i == nhugetlbfs)
        i = 0;

    return qemuGetHugepagePath(&hugetlbfs[i]);
}