Go to file
Bruce Ashfield f0401f5870 xen-tools: update to RELEASE-4.20.1-tip
Bumping xen to version RELEASE-4.20.1-40-gae992e68d3, which comprises the following commits:

    ae992e68d3 CI: Create initrd fragments explicitly as root
    d7e55a4139 Arm: adjust locking in p2m_get_page_from_gfn()
    1230b94f1c Arm: foreign page handling in p2m_get_page_from_gfn()
    665a641471 x86/viridian: protect concurrent modification of the reference TSC page
    c5ecaf0200 x86/viridian: avoid NULL pointer dereference in viridian_synic_deliver_timer_msg()
    5f83f721fb x86/viridian: avoid NULL pointer dereference in update_reference_tsc()
    c59a69ae9e x86/gen-cpuid: Fix debugging for cycle detection
    24fef7a86f x86/gen-cpuid: correct cycle detection
    eb1dc440b2 xen/efi: Fix crash with initial empty EFI options
    9eb436c461 hvmloader: fix SMBIOS table length checks
    68f5ecf690 tools: add sizeof_field and endof_field macros
    1541866d47 x86/suspend: unconditionally raise a timer softirq on resume
    96b7183a02 x86/mce: Adjustments to intel_init_ppin()
    a98591e217 x86/iommu: setup MMCFG ahead of IOMMU
    cb827d8317 x86/hvm/ioreq: Fix condition in hvm_alloc_legacy_ioreq_gfn()
    e2590544d5 x86/mkelf32: pad load segment to 2Mb boundary
    16dae1e1cf efi: Call FreePages() only if needed
    67fcd2d2e5 x86/hpet: do local APIC EOI after interrupt processing
    ea5025554e xenalyze: correct symbol name length fscanf() specifier
    7cda6b6509 tools/xl: don't crash on NULL command line
    4072b0b24c xen/arinc653: fix delay in the start of major frame
    ec5752e154 xen/credit2: factor in previous active unit's credit in csched2_runtime()
    2fd3628fa6 x86/svm: Always flush TLB using TLB_CTRL_FLUSH_ALL
    f1f2ac1a63 x86/alternatives: serialize after (self-)modifying code
    69568ab306 x86/S3: don't lose previously collected CPU data (AMD extra)
    73eaac394c x86/idle: Fix the C6 eoi_errata[] list to include NEHALEM_EX
    c7f876c993 x86/ept: batch PML p2m type-changes into single locked region
    c75f3aea50 x86/ept: move vmx_domain_flush_pml_buffers() to p2m-ept.c
    a586e3865a x86/S3: don't lose previously collected CPU data
    36a83978c5 x86/SMP: guard socket_cpumask[] access in cpu_smpboot_free()
    758879c019 x86emul: adjust BSF/BSR/LZCNT/TZCNT behavior as to EFLAGS
    60186d6f5f x86/mwait-idle: add Clearwater Forest SoC support
    76281c34cd x86/mwait-idle: add Granite Rapids Xeon D support
    1345e24869 x86/mwait-idle: add Granite Rapids Xeon support
    a634a48b48 x86/mwait-idle: add Sierra Forest SoC support
    a4dd64ea81 x86/mwait-idle: add Grand Ridge SoC support
    733dd65888 x86/mwait-idle: Add Meteorlake support
    53939e22c2 x86/mwait-idle: add Emerald Rapids Xeon support
    6d0b94a461 x86/mwait-idle: Add AlderLake-N support
    faf408249c update Xen version to 4.20.2-pre
    08f043965a update Xen version to 4.20.1
    4f0dc6c643 x86/idle: undo use of MONITOR/MWAIT mnemonics
    138d403e07 x86/spec-ctrl: Mitigate Transitive Scheduler Attacks
    05b991100e x86/idle: Rearrange VERW and MONITOR in mwait_idle_with_hints()
    be1e30b45d x86/ucode: Digests for TSA microcode
    67dda84795 x86/cpu-policy: Infrastructure for CPUID leaf 0x80000021.ecx
    88c8875c9d x86/cpu-policy: Rearrange guest_common_*_feature_adjustments()
    349c70a391 x86/idle: Fix buggy "x86/mwait-idle: enable interrupts before C1 on Xeons"
    13d09b2f12 x86/idle: Implement a new MWAIT IPI-elision algorithm
    1a51c6252a xen/softirq: Rework arch_skip_send_event_check() into arch_set_softirq()
    3f11eda311 x86/idle: Convert force_mwait_ipi_wakeup to X86_BUG_MONITOR
    d6727b7e25 x86/idle: Drop incorrect smp_mb() in mwait_idle_with_hints()
    f5dd06f9b1 x86/idle: Remove broken MWAIT implementation
    60522d4040 x86/cpu-policy: Simplify logic in guest_common_default_feature_adjustments()
    b6436bb005 Revert part of "x86/mwait-idle: disable IBRS during long idle"
    8869f66d29 x86/idle: Remove MFENCEs for CLFLUSH_MONITOR
    fa254938f0 x86/idle: Move monitor()/mwait() wrappers into cpu-idle.c
    0c70d44453 x86/cpu-policy: Fix handling of leaf 0x80000021
    703e42cd87 xen/build: pass -fzero-init-padding-bits=all to gcc15
    74e66f34f9 libxc/PM: Retry get_pxstat if data is incomplete
    f448bc1074 libxc/PM: Ensure pxstat buffers are correctly sized
    9e1309b0f0 x86/emul: Fix extable registration in invoke_stub()
    2f80f3071a xenalyze: Add 2 missed VCPUOPs in vcpu_op_str
    fd64f59cc7 cpufreq: Avoid potential buffer overrun and leak
    110bc6ef1a x86/pmstat: Check size of PMSTAT_get_pxstat buffers
    0cd774e8c2 tools/libxl: Only access legacy altp2m on HVM
    60f6137190 x86/pv: Fix breakpoint reporting
    ed3bf0a89b x86/vmx: Fix VMEntry failure on ADL/SPR with shadow guests
    5919917921 x86/vpci: fix handling of BAR overlaps with non-hole regions
    a60e953080 x86/pv: fix emulation of wb{,no}invd to flush all pCPU caches
    ddec00769c x86/emul: Fix emulation of RDSEED with older toolchains
    612cfd7215 x86/IRQ: constrain creator-domain-ID assertion
    ee150f56fc x86/pv: fix MMUEXT_FLUSH_CACHE to flush all pCPU caches
    f938c08494 x86/spec-ctrl: Support Intel's new PB-OPT
    b1eeea44cd cpufreq: don't leave stale statistics pointer
    68506161ef x86emul: avoid UB shifts in FLDENV/FRSTOR handling
    d58800f13d xen/link: Include .debug_str_offsets in DWARF2_DEBUG_SECTIONS
    45056fe5c5 x86/spec-ctrl: Synthesise ITS_NO to guests on unaffected hardware
    b9e8204ab1 x86/thunk: Build Xen with Return Thunks
    cda26aed40 x86/stubs: Introduce place_ret() to abstract away raw 0xc3's
    c6a2b5e9d0 x86/thunk: (Mis)align the RETs in clear_bhb_loops() to mitigate ITS
    f81f44393f x86/thunk: (Mis)align __x86_indirect_thunk_* to mitigate ITS
    5992d3ab9f x86/guest: Remove use of the Xen hypercall_page
    cf81888012 x86/alternative: Support replacements when a feature is not present
    47d911f69e CI: Build with --prefix=/usr rather than setting LD_LIBRARY_PATH
    690655a511 CI: Include microcode for x86 hardware jobs
    0258350a63 CI: save toolstack artifact as cpio.gz
    69a629b462 CI: Switch to new argo artefact
    1532272067 CI: remove now unused alpine-3.18-arm64-rootfs job and its container
    7f26cba32c CI: avoid repacking initrd as part of the test job
    20212a32e9 CI: Rename intermediate artefacts in qemu-* scripts
    fd7218e3f4 CI: write whole etc/issue for domU initrd
    16b30e0827 CI: switch qubes runners to use console.exp
    563af5983b CI: fix waiting for final test message
    17bad6958a CI: wait for Xen to start before waiting for test to complete
    a70222e30c CI: Drop stale test-artifacts/alpine/3.18.dockerfile
    18d59a6056 CI: Update ARM64 tests from Linux 6.6.74 to 6.6.86
    e9978d089a CI: Update x86 tests from Linux 6.1.19 to 6.6.56
    87ab3ad445 CI: adjust resolving network interface into PCI device
    052e7f57ec CI: wait for the network interface in PCI passthrough tests
    23f7c8341c CI: consistently use DOCKER_CMD in makefiles
    78317ae331 CI: increase verbosity of starting a domain
    17c6958bb4 CI: include domU kernel messages in the console output log
    d747ca04b4 CI: enable XHCI console in Xen debug build on Alpine
    0ab5bedcfd CI: prevent grub unpacking initramfs
    a30bb23e9a ci: add Intel KabyLake HW runner
    d6a11ac363 ci: create boot.ipxe for legacy boot
    59be07b2d3 automation/eclair: Reduce verbosity of ECLAIR logs.
    2b430f8685 automation: add tools/tests jobs on the AMD Zen3+ runner too
    56899974ca automation: allow selecting individual jobs via CI variables
    b0a94e392c automation: add jobs running tests from tools/tests/*
    f2603e2b1d automation: skip building domU if there is no test defined for it
    d4e5f8c627 automation: upgrade arm32 kernel from bullseye to bookworm
    56badca5d8 automation: upgrade Linux kernel for arm64 tests to 6.6.74
    35cb38b222 x86: constrain sub-page access length in mmio_ro_emulated_write()
    f1e8b37f50 xen: remove -N from the linker command line
    a05e4817f9 x86/intel: workaround several MONITOR/MWAIT errata
    fc07876bea x86/EFI: correct mkreloc header (field) reading
    7d9bbb8ba8 compat/memory: avoid UB shifts in XENMEM_exchange handling
    23a02992ed x86emul: also clip repetition count for STOS
    ade8230830 x86/HVM: update repeat count upon nested lin->phys failure
    dee15facf8 x86/mm: account for the offset when performing subpage r/o MMIO access
    6b399ed19f xen/rangeset: fix incorrect subtraction
    f1dd955988 include: sort $(wildcard ...) results
    f01a09d0b1 x86emul/test: drop check for AVX512-4FMAPS
    1a8df8282c xen: x86: irq: initialize irq desc in create_irq()
    2bd2c08a0f x86/cpu: Validate CPUID leaf 0x2 EDX output
    e0d9137ae7 xen: vm_event: do not do vm_event_op for an invalid domain
    5b5a11c6c8 sched/null: avoid another crash after failed domU creation
    da24dccf53 x86/MTRR: hook mtrr_bp_restore() back up
    ad82c8c7b6 x86/ucode: Extend AMD digest checks to cover Zen5 CPUs
    ad569a4bd7 x86/ucode: Perform extra SHA2 checks on AMD Fam17h/19h microcode
    41d65b3114 xen/lib: Introduce SHA2-256
    95d726d28b tools/libxl: do not use `-c -E` compiler options together
    c413eff3c5 automation/eclair: Remove bespoke service B.UNEVALEFF
    e071b23394 CI: Add yet another HW runner
    dd81219b84 automation/cirrus-ci: add smoke tests for the FreeBSD builds
    fdbb32a9a9 automation/cirrus-ci: store XTF and Xen build artifacts
    e6816c3758 automation/cirrus-ci: build XTF
    cfa5bc6f0a automation/cirrus-ci: use matrix keyword to generate per-version build tasks
    81189d7116 automation/console.exp: do not assume expect is always at /usr/bin/
    0b37231312 automation/cirrus-ci: store Xen Kconfig before doing a build
    44407a9d92 automation/cirrus-ci: update FreeBSD to 13.5
    0a84ef2731 automation/cirrus-ci: add timestamps
    8f94c1ec72 automation/cirrus-ci: store xen/.config as an artifact
    2599ee0b60 CirrusCI: Use shallow clone
    3ccbe66d30 xen/percpu: don't initialize percpu on resume
    b1bbf20a93 x86/P2M: synchronize fast and slow paths of p2m_get_page_from_gfn()
    64f9c54daa ARM/vgic: Fix out-of-bounds accesses in vgic_mmio_write_sgir()
    ad063b08b1 tools/ocaml: Fix oxenstored build warning
    a2cf6f9d52 Arm/domctl: correct XEN_DOMCTL_vuart_op error return value
    52c99f4b43 x86/pmstat: correct get_cpufreq_para()'s error return value
    108fcc6a73 x86/PVH: account for module command line length
    f14c523da1 x86/emul: Emulate %cr8 accesses
    990a3d8710 x86/emul: Rearrange the logic in hvmemul_{read,write}_cr()
    a1f8f1e681 x86/PVH: expose OEMx ACPI tables to Dom0
    fcbd016bd2 xenpm: sanitize allocations in show_cpufreq_para_by_cpuid()
    92afeb2961 x86/boot: Simplify the expression for extra allocation space
    859e2c4f84 xen/compiler: Fix the position of the visibility pragma
    de440d0407 x86/vga: fix mapping of the VGA text buffer
    da36efa852 x86/xlat: fix UB pointer arithmetic in COMPAT_ARG_XLAT_VIRT_BASE
    fbb06cfa73 x86/shadow: fix UB pointer arithmetic in sh_mfn_is_a_page_table()
    8c788b41d7 x86/mkelf32: account for offset when detecting note segment placement
    c607822b5a x86/setup: correct off-by-1 in module mapping
    c1badde601 xen/arinc653: call xfree() with local IRQ enabled
    97f064d9ab x86/mm: Fix IS_ALIGNED() check in IS_LnE_ALIGNED()
    408935872a x86/ioremap: prevent additions against the NULL pointer
    b29984df38 libxl: avoid infinite loop in libxl__remove_directory()
    80cbb29612 xen/sched: fix arinc653 to not use variables across cpupools
    f2ddbeb9dd tools/libxl: Skip missing PCI GSIs
    1ddf72bbdf tools/ctrl: Silence missing GSI in xc_pcidev_get_gsi()
    94928e415f x86/hvm: check return code of hvm_pi_update_irte when binding
    74b40fe105 x86/vmx: fix posted interrupts usage of msi_desc->msg field
    f581b36608 x86/msr: expose MSR_FAM10H_MMIO_CONF_BASE on AMD
    4a480e7a14 x86/vlapic: Fix handling of writes to APIC_ESR
    70038e8c09 tools/xl: fix channel configuration setting
    bc3006b9fe x86/dom0: be less restrictive with the Interrupt Address Range
    a1a5bd40b5 x86/iommu: account for IOMEM caps when populating dom0 IOMMU page-tables
    1d8d5753b7 x86/dom0: correctly set the maximum ->iomem_caps bound for PVH
    b5ade8ef26 x86/dom0: attempt to fixup p2m page-faults for PVH dom0
    48f013199a x86/emul: dump unhandled memory accesses for PVH dom0
    9d465658b4 update Xen version to 4.20.1-pre
    3ad5d648cd Update to Xen 4.20

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-09-17 13:22:47 -04:00
classes image-oci-unmoci: preserve file modes 2025-01-17 19:17:10 +00:00
conf runc: start removing 'opencontainers' reference 2025-07-07 11:42:27 -04:00
docs podman: Add support for rootless mode 2022-07-15 17:11:58 -04:00
dynamic-layers kernel: drop 6.6 support 2025-02-11 23:19:51 +00:00
files fs-perms-nagios.txt: add perms conf file 2018-09-06 12:45:17 -04:00
lib/oeqa/runtime/cases xtf: add testimage integration to run XTF test cases in OEQA 2021-09-02 16:36:23 -04:00
recipes-containers cri-o: correct SRC_URI and HOMEPAGE 2025-09-03 21:38:36 -04:00
recipes-core packagegroup-container: fix do_package_wrte_rpm issue in multilib build 2025-07-16 14:48:19 -04:00
recipes-demo demo: adapt to UNPACKDIR changes 2025-06-25 22:56:41 -04:00
recipes-devtools grpc-go 1.59.0+git: Ignore CVE-2024-7246 2025-09-03 21:40:45 -04:00
recipes-extended xen-tools: update to RELEASE-4.20.1-tip 2025-09-17 13:22:47 -04:00
recipes-graphics/xorg-xserver global: overrides syntax conversion 2021-08-02 17:17:53 -04:00
recipes-kernel kernel: add 6.16 support 2025-09-09 14:38:35 -04:00
recipes-networking openvswitch: small ptest fix adapt to UNPACKDIR changes 2025-07-20 22:36:08 -04:00
scripts scripts: wic plugin bootimg-biosxen drop helper to reuse bootimg_pcbios 2025-07-31 13:34:50 -04:00
wic xen: use bzImage for boot (instead of vmlinux) 2024-03-21 23:15:13 +00:00
.gitignore buildah: add seccomp and ipv6 to REQUIRED_DISTRO_FEATURES 2023-04-12 13:10:11 -04:00
COPYING.MIT Initial meta-xen layer documentation. 2012-06-21 15:51:11 -06:00
MAINTAINERS MAINTAINERS: add xtf and the raspberry pi dynamic layer for Xen 2021-12-16 21:45:00 -05:00
meta-virt-roadmap.txt docs: roadmap: add missing workflow items 2019-10-28 11:56:10 -04:00
README.md doc: Fix typo in README 2025-09-03 21:10:03 -04:00
SECURITY.md docs: add SECURITY.md and rename README.md 2023-11-06 16:21:12 +00:00

meta-virtualization

This layer provides support for building Xen, KVM, Libvirt, and associated packages necessary for constructing OE-based virtualized solutions.

The bbappend files for some recipes (e.g. linux-yocto) in this layer need to have 'virtualization' in DISTRO_FEATURES to have effect. To enable them, add in configuration file the following line.

DISTRO_FEATURES:append = " virtualization"

If meta-virtualization is included, but virtualization is not enabled as a distro feature a warning is printed at parse time:

You have included the meta-virtualization layer, but
'virtualization' has not been enabled in your DISTRO_FEATURES. Some bbappend files
may not take effect. See the meta-virtualization README for details on enabling
virtualization support.

If you know what you are doing, this warning can be disabled by setting the following variable in your configuration:

SKIP_META_VIRT_SANITY_CHECK = 1

Depending on your use case, there are other distro features in meta-virtualization that may also be enabled:

  • xen: enables xen functionality in various packages (kernel, libvirt, etc)
  • kvm: enables KVM configurations in the kernel and autoloads modules
  • k8s: enables kubernetes configurations in the kernel, tools and configuration
  • aufs: enables aufs support in docker and linux-yocto
  • x11: enable xen and libvirt functionality related to x11
  • selinux: enables functionality in libvirt and lxc
  • systemd: enable systemd services and unit files (for recipes for support)
  • sysvinit: enable sysvinit scripts (for recipes with support)
  • seccomp: enable seccomp support for packages that have the capability.

Dependencies

This layer depends on:

URI: git://github.com/openembedded/openembedded-core.git branch: master revision: HEAD prio: default

URI: git://github.com/openembedded/meta-openembedded.git branch: master revision: HEAD layers: meta-oe meta-networking meta-filesystems meta-python

Required for Xen XSM policy: URI: git://git.yoctoproject.org/meta-selinux branch: master revision: HEAD prio: default

Required for Ceph: URI: git://git.yoctoproject.org/meta-cloud-services branch: master revision: HEAD prio: default

Required for cri-o: URI: git://git.yoctoproject.org/meta-selinux branch: master revision: HEAD prio: default

Community / Collaboration

Repository: https://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/ Mailing list: https://lists.yoctoproject.org/g/meta-virtualization IRC: libera.chat #meta-virt channel

Maintenance

Send pull requests, patches, comments or questions to meta-virtualization@lists.yoctoproject.org

Maintainer: Bruce Ashfield bruce.ashfield@gmail.com see MAINTAINERS for more specific information

When sending single patches, please using something like: $ git send-email -1 -M --to meta-virtualization@lists.yoctoproject.org --subject-prefix='meta-virtualization][PATCH'

License

All metadata is MIT licensed unless otherwise stated. Source code included in tree for individual recipes is under the LICENSE stated in each recipe (.bb file) unless otherwise stated.