[libvirt] [PATCH v2 0/5] RFC: grant KVM guests retain arbitrary capabilities

Taku Izumi izumi.taku at jp.fujitsu.com
Thu Dec 22 06:49:22 UTC 2011

Hi Daniel-san and all,

This patchset adds an option for KVM guests to retain arbitrary capabilities.
The first version is here:

According to Daniel-san's comment, I changed my patch like the following:

v1 -> v2
 - introduce "process" and "cap" elements in the capability XML
 - change XML element name of domain XML likewise
; process capabilities host supports are found in the capability XML.
# virsh capabilities

      <cap name='chown'/>
      <cap name='dac_override'/>
      <cap name='dac_read_search'/>
      <cap name='fowner'/>
; VM can retain cap_sys_rawio capability
# virsh edit VM
    <cap name='sys_rawio'/>
  <clock offset='utc'/>

# virsh start VM
# cat /proc/<VM's PID>/status
CapInh: 0000000000000000
CapPrm: fffffffc00020000
CapEff: fffffffc00020000
CapBnd: fffffffc00020000

  *[PATCH v2 1/5] conf: add XML schema for capability XML
  *[PATCH v2 2/5] conf: add XML schema for domain XML
  *[PATCH v2 3/5] util: add functions to keep capabilities
  *[PATCH v2 4/5] util: extend virExecWithHook()
  *[PATCH v2 5/5] qemu: make qemu processes to retain capabilities

Best regards,
Taku Izumi

More information about the libvir-list mailing list