about summary refs log tree commit diff
path: root/pkgs/applications/virtualization
Commit message (Collapse)AuthorAge
* virtualisation-xen: Fix xendomains startupMichał Pałka2017-04-27
| | | | | * Revert to using bash, not sh for the xendomains script to avoid syntax error * Rewrite /bin/ls to ls in the xendomains script
* OVMF: get version number from edk2Bjørn Forsman2017-04-23
| | | | | | | OVMF is built from edk2 sources so that's where its version number comes from (logically). The edk2 version number is 2014-12-10, so this change only ensures the version numbers won't drift apart in the future. (There is no hash change.)
* qemu: 2.8.1 -> 2.9.0Volth2017-04-23
|
* Merge pull request #24549 from volth/qemu-2.8.1Michael Raskin2017-04-23
|\ | | | | qemu: 2.8.0 -> 2.8.1
| * qemu: 2.8.0 -> 2.8.1Volth2017-04-02
| |
* | Merge pull request #24632 from NeQuissimus/docker_17_04Tim Steinbach2017-04-05
|\ \ | | | | | | docker-edge: init at 17.04
| * | docker-edge: init at 17.04Tim Steinbach2017-04-05
| | |
* | | docker-distribution: 2.5.1 -> 2.6.0Tim Steinbach2017-04-04
|/ /
* / docker: 17.03.0 -> 17.03.1Tim Steinbach2017-04-04
|/
* libvirt packages: fix & clean up dependenciesFranz Pletz2017-03-28
|
* virtualbox: a more maintenance-free way of patching refs to ↵Kosyrev Serge2017-03-28
| | | | dlopen()-affected dependencies
* virtualbox: wrap with Qt dependenciesNikolay Amiantov2017-03-28
| | | | | Fixes GTK file open dialogs. Also make sure that linked applications really exist, and update their list.
* virt-manager: needs file for building translationsFranz Pletz2017-03-25
|
* virt-manager: 1.4.0 -> 1.4.1 (#24149)volth2017-03-21
|
* virtualbox: 5.1.14 -> 5.1.18Robin Gloster2017-03-20
|
* Merge pull request #23624 from volth/virt-viewer-5.0Michael Raskin2017-03-18
|\ | | | | virt-viewer: 2.0 -> 5.0
| * virt-viewer: 2.0 -> 5.0Volth2017-03-14
| |
* | virtmanager-qt: 0.39.60 -> 0.42.67Peter Hoeg2017-03-18
| |
* | Merge pull request #23872 from NeQuissimus/docker_17_03_0Tim Steinbach2017-03-17
|\ \ | | | | | | docker: 1.13.1 -> 17.03.0-ce
| * | docker: 1.13.1 -> 17.03.0-ceTim Steinbach2017-03-14
| |/
* / xhyve: update and fix to use our Hypervisor frameworkDan Peebles2017-03-14
|/ | | | | | (this is a cherry-picked version of f3b65f67d98a2e67c739d4b76b3340eda1dd06f4, which got reverted because it depended on my 10.11 frameworks, which were flawed)
* runc: use removeReferencesToJoachim Fasting2017-03-11
|
* docker: use removeReferencesToJoachim Fasting2017-03-11
|
* containerd: use removeReferencesToJoachim Fasting2017-03-11
|
* qemu_test: Rebase force-uid0-on-9p.patchaszlig2017-03-11
| | | | | | | | | | | | | | This reverts commit 3a4e2376e444fd7664102af00a34c65b47e271ec. The reverted commit caused the fix for CVE-2016-9602 not to be applied for qemu_test because it conflicts with the force-uid0-on-9p.patch. So with the rebase of the patch on top of the changes of the CVE-2016-9602.patch, both patches no longer conflict with each other. I've tested this with the "misc" NixOS test and it succeeds. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* qemu_test: don't apply patch for CVE-2016-9602Franz Pletz2017-03-11
| | | | | Both patches are conflicting. Keeping the vulnerability unpatched in qemu binaries used for nixos test is tolerable.
* qemu: fetch vnc bugfix patch from debianFranz Pletz2017-03-11
| | | | This version of the patch applies cleanly to the 2.8.0 release.
* qemu: add patches for multiple CVEsFranz Pletz2017-03-11
| | | | | | | | | | | | | | | | | | New upstream patch function and patches for fixing a bug in the patch for CVE-2017-5667 and the following security issues: * CVE-2016-7907 * CVE-2016-9602 * CVE-2016-10155 * CVE-2017-2620 * CVE-2017-2630 * CVE-2017-5525 * CVE-2017-5526 * CVE-2017-5579 * CVE-2017-5856 * CVE-2017-5857 * CVE-2017-5987 * CVE-2017-6058
* virtmanager-qt: init at 0.39.60Peter Hoeg2017-03-10
|
* xen: rewrite build expression to be more modular, support upstream qemu and ↵Jan Malakhovski2017-03-05
| | | | | | | | | | | seabios Also: * provides a bunch of build options * documents build options config in longDescription * provides a bunch of predefined packages and documents them some more * sources' hashes stay the same
* qemu: add xen supportJan Malakhovski2017-03-05
|
* qemu: separate usbredirSupport option out of spiceSupport optionJan Malakhovski2017-03-05
|
* lkl: Broken on i686Tuomas Tynkkynen2017-03-02
| | | | http://hydra.nixos.org/build/49534265
* virtualbox: fix buildAlexey Shmalko2017-02-28
| | | | | | | The issue was caused by upgrading `qt` from `qt56` to `qt57`, which now requires C++11. For more info, see https://github.com/NixOS/nixpkgs/issues/23257.
* qemu: apply patches for multiple CVEsFranz Pletz2017-02-25
| | | | | | | | | | | | | | | | Fixes: * CVE-2017-2615 * CVE-2017-5667 * CVE-2017-5898 * CVE-2017-5931 * CVE-2017-5973 We are vulnerable to even more CVEs but those are either not severe like memory leaks in obscure situations or upstream hasn't acknowledged the patch yet. cc #23072
* Merge branch 'master' into stagingVladimír Čunát2017-02-22
|\
| * xen: patch for XSAs: 197, 199, 207, 208, 209Graham Christensen2017-02-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | XSA-197 Issue Description: > The compiler can emit optimizations in qemu which can lead to double > fetch vulnerabilities. Specifically data on the rings shared > between qemu and the hypervisor (which the guest under control can > obtain mappings of) can be fetched twice (during which time the > guest can alter the contents) possibly leading to arbitrary code > execution in qemu. More: https://xenbits.xen.org/xsa/advisory-197.html XSA-199 Issue Description: > The code in qemu which implements ioport read/write looks up the > specified ioport address in a dispatch table. The argument to the > dispatch function is a uint32_t, and is used without a range check, > even though the table has entries for only 2^16 ioports. > > When qemu is used as a standalone emulator, ioport accesses are > generated only from cpu instructions emulated by qemu, and are > therefore necessarily 16-bit, so there is no vulnerability. > > When qemu is used as a device model within Xen, io requests are > generated by the hypervisor and read by qemu from a shared ring. The > entries in this ring use a common structure, including a 64-bit > address field, for various accesses, including ioport addresses. > > Xen will write only 16-bit address ioport accesses. However, > depending on the Xen and qemu version, the ring may be writeable by > the guest. If so, the guest can generate out-of-range ioport > accesses, resulting in wild pointer accesses within qemu. More: https://xenbits.xen.org/xsa/advisory-199.html XSA-207 Issue Description: > Certain internal state is set up, during domain construction, in > preparation for possible pass-through device assignment. On ARM and > AMD V-i hardware this setup includes memory allocation. On guest > teardown, cleanup was erroneously only performed when the guest > actually had a pass-through device assigned. More: https://xenbits.xen.org/xsa/advisory-207.html XSA-209 Issue Description: > When doing bitblt copy backwards, qemu should negate the blit width. > This avoids an oob access before the start of video memory. More: https://xenbits.xen.org/xsa/advisory-208.html XSA-208 Issue Description: > In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine > cirrus_bitblt_cputovideo fails to check wethehr the specified memory > region is safe. More: https://xenbits.xen.org/xsa/advisory-209.html
| * rkt: 1.24.0 -> 1.25.0Tim Steinbach2017-02-21
| |
* | open-vm-tools: fixup build with glibc-2.25Vladimír Čunát2017-02-22
| |
* | xen: fixup build with glibc-2.25Vladimír Čunát2017-02-21
|/
* Merge pull request #22745 from vdemeester/docker_1_13_1Benjamin Staffin2017-02-14
|\ | | | | docker: 1.13.0 -> 1.13.1
| * docker: 1.13.0 -> 1.13.1Vincent Demeester2017-02-13
| | | | | | | | Signed-off-by: Vincent Demeester <vincent@sbr.pm>
* | Merging against upstream masterParnell Springmeyer2017-02-13
|\|
| * virtualbox: force xorg-server-1.18 for nowVladimír Čunát2017-02-12
| | | | | | | | This is getting a little hacky, but hopefully it won't break anything.
| * open-vm-tools: 10.0.7 -> 10.1.0Tuomas Tynkkynen2017-02-10
| | | | | | | | Also add an option to disable all the X11 stuff.
| * aqemu: init at 0.9.2Christoph Hrdinka2017-02-10
| |
| * ecs-agent: init at 1.14.0Dan Peebles2017-02-10
| |
| * rkt: 1.23.0 -> 1.24.0Tim Steinbach2017-02-05
| |
| * virt-top: init at 1.0.8 (#21536)volth2017-02-04
| |
| * virtualbox: remove upstream-info.json as it is no longer usedPascal Bach2017-02-02
| | | | | | | | We keep the script as it might be useful in the future.
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-07-25 17:13:54 +0000