Bump patchset: v51 -> v52#153

Merged

phip1611 merged 178 commits into

cyberus-technology:gardenlinux-next-v52-basefrom

phip1611:gardenlinux-next-v52

May 20, 2026

Commits on May 20, 2026

vmm: Revert "vmm: create memfd for private mappings"

rbradford
authored and
phip1611
committed
vm-migration: be explicit about commands
phip1611
committed
vmm: migration: better observe and log invalid states
phip1611
committed
vmm: Don't store the snapshot on the DeviceManager

rbradford
authored and
phip1611
committed
vmm: remove redundant SocketStream overrides

amphi
authored and
phip1611
committed
vmm: remove AsRawFd trait for SocketStream

amphi
authored and
phip1611
committed
vm-migration: client-side of a TLS connection

amphi
authored and
phip1611
committed
vm-migration: server-side of a TLS connection

amphi
authored and
phip1611
committed
vmm: add TLS streams to migration transport

amphi
authored and
phip1611
committed
vmm: accept migration connections over TLS

amphi
authored and
phip1611
committed
vmm: tighten migration URL validation

amphi
authored and
phip1611
committed
vmm: add TLS API option to send migration call

amphi
authored and
phip1611
committed
vmm: add TLS API option to receive migration call

amphi
authored and
phip1611
committed
vmm: encrypt migration data with TLS if configured

amphi
authored and
phip1611
committed
docs: document live migration TLS encryption

amphi
authored and
phip1611
committed
docs: update README for gardenlinux Cloud Hypervisor
phip1611
committed
misc: adjust AGENTS.md for our fork
phip1611
committed
ci: enforce SAP commit style
phip1611
committed
ci: remove irrelevant CI for this fork
phip1611
committed
build: flake: init
phip1611
committed
build: nix: add commit to version info

arctic-alpaca
authored and
phip1611
committed
build: ci/nix: build cloud-hypervisor
phip1611
committed
build: cargo: add optimized-dev profile
phip1611
committed
build: cargo: don't strip binary
phip1611
committed
main: print build version and date on startup
phip1611
committed
vmm: cpu: improve timeout handling in wait_until_signal_acknowledged()
phip1611
committed
vmm: increase logging level of precopy from debug -> info
phip1611
committed
vmm: pci: rename pci_device_id -> bdf_device
phip1611
committed
main: restore absolute timestamp behavior in logger
phip1611
committed
misc: live-migration with virtio-net devices with network fds
phip1611
committed
vmm: properly unset immediate_exit on -EINTR
phip1611
committed
vmm: vcpu: optimize lock usage
phip1611
committed
vmm: prerequisites for accessing KVM_RUN in the vCPU loop
phip1611
committed
vmm: fix kicking vCPU out of KVM_RUN from signal handler
phip1611
committed
vmm: temporarily make "resize" API call fail fast
phip1611
committed
vm-migration: mTLS -> TLS (make upstream compatible with our fork)
phip1611
committed
vmm: add vCPU throttling (auto-converge) for pre-copy
phip1611
committed
vmm: console: add tcp option

hertrste
authored and
phip1611
committed
vmm: serial: add Tcp enum entry

hertrste
authored and
phip1611
committed
vmm: serial: rename CloneUnixStream -> CloneStream

hertrste
authored and
phip1611
committed
vmm: serial: add serial tcp implementation

hertrste
authored and
phip1611
committed
vmm: serial: implement writer combiner

hertrste
authored and
phip1611
committed
vmm: config: allow additional file when mode TCP

hertrste
authored and
phip1611
committed
vmm: serial: additional log to file

hertrste
authored and
phip1611
committed
vmm: serial_manager: use TypeId trait for key type in FanoutWriter

hertrste
authored and
phip1611
committed
vmm: api: receive_migration can get a tcp_serial_url

hertrste
authored and
phip1611
committed
arch: x86_64: refactor SMBIOS helpers

Coffeeri
authored and
phip1611
committed
vmm: plumb legacy SMBIOS config

Coffeeri
authored and
phip1611
committed
vmm: platform: add structured SMBIOS config

Coffeeri
authored and
phip1611
committed
vmm: deprecate legacy SMBIOS keys in API and CLI

Coffeeri
authored and
phip1611
committed
arch: smbios: add tests for table serialization

Coffeeri
authored and
phip1611
committed
vmm: Allow to modify host numa settings

scholzp
authored and
phip1611
committed
vmm: migration: prepare EventFd for async migration events
phip1611
committed
vmm: migration: handle in dedicated thread (make async)
phip1611
committed
vmm: better VM ownership handling in context of live migration
phip1611
committed
vmm: api: temporarily make VmSendMigration call blocking again
phip1611
committed
vmm: migration: fix missing resume() VM after failed live migration
phip1611
committed
vmm: migration: limit to running VMs only
phip1611
committed
vm-migration: prepare progress types for new API endpoint
phip1611
committed
vmm: add migration-progress API endpoint
phip1611
committed
vmm: add migration-progress HTTP endpoint
phip1611
committed
vmm: actually populate migration progress
phip1611
committed
ch-remote: add `migration-progress` command
phip1611
committed
vmm: migration: switch to non-blocking SendMigration call
phip1611
committed
ch-remote: wait for migration to finish by querying migration progress
phip1611
committed
vmm: api: less verbose log
phip1611
committed
devices: stop reset loops when vCPUs are paused

Coffeeri
authored and
phip1611
committed
devices: cmos: simplify pause/kill wait flags

Coffeeri
authored and
phip1611
committed
vmm: set timeouts on sockets used for live migrations

amphi
authored and
phip1611
committed
vmm: make aborted migrations return errors

amphi
authored and
phip1611
committed
vm-migration: send periodic keep alive messages during live migration

amphi
authored and
phip1611
committed
vmm: return error if the migration sender never connects

amphi
authored and
phip1611
committed
vmm: add context to MigrateSend-Error

amphi
authored and
phip1611
committed
vmm: return error if prefaulting fails

amphi
authored and
phip1611
committed
vmm: migration receiver: report error when migration is aborted

amphi
authored and
phip1611
committed
vmm: add context to MigrateReceive-Error

amphi
authored and
phip1611
committed
vmm: add post-migration event to VmSnapshot

Coffeeri
authored and
phip1611
committed
vmm: postpone reset/exit during migration

Coffeeri
authored and
phip1611
committed
vmm: migration: switch downtime on postponed event

Coffeeri
authored and
phip1611
committed
vmm: streamline migration failure cleanup
phip1611
committed
vmm: api: add VmCancelMigration action
phip1611
committed
vmm: http api: add VmCancelMigration action
phip1611
committed
vmm: migration: add handle wrapper for MigrationWorker
phip1611
committed
vmm: add try_resume_vm() helper
phip1611
committed
vmm: migration: actually support cancellation
phip1611
committed
vmm: migration: early cancellation (add more checks)
phip1611
committed
vmm: migration cancellation: integrate into TCP threads
phip1611
committed
ch-remote: add cancel-migration
phip1611
committed
vmm: migration: properly print error chain on failure
phip1611
committed
vmm: defer guest exit during migration

Coffeeri
authored and
phip1611
committed
vmm: reduce API event verbosity
phip1611
committed
vmm: keep virtio activation alive in migration

Coffeeri
authored and
phip1611
committed
vm-migration: speed up volatile read and write

amphi
authored and
phip1611
committed
vm-migration: Add AsFd for KeepAliveStream

amphi
authored and
phip1611
committed
vmm: differentiate timeouts by reader/writer, not sender/receiver

amphi
authored and
phip1611
committed
vm-migration: move keep alive handling into the protocol

amphi
authored and
phip1611
committed
vm-migration: add KeepAlive status to response

amphi
authored and
phip1611
committed
vm-migration: make KeepAliveStream work for sender and receiver

amphi
authored and
phip1611
committed
vmm: always use KeepAliveStream for main connection

amphi
authored and
phip1611
committed
vmm: Use KeepAliveStream also for receiver

amphi
authored and
phip1611
committed
vmm: migration: longer accept timeout for receiver
phip1611
committed
vmm: migration: improve error message on timeout
phip1611
committed
vm-migration: fix UB in network parsing

arctic-alpaca
authored and
phip1611
committed
vm-migration: stop sending abandon after error response

amphi
authored and
phip1611
committed
vmm: add mechanism for post-migration announcements

amphi
authored and
phip1611
committed
vmm: add internal post-migration announce action

amphi
authored and
phip1611
committed
vmm: api: add API call for post migration announcements

amphi
authored and
phip1611
committed
net_util: refactor ctrl queue parsing

amphi
authored and
phip1611
committed
virtio-devices: net: refactor constructor state

amphi
authored and
phip1611
committed
virtio-devices: net: report link up in config status

amphi
authored and
phip1611
committed
virtio-devices: net: support guest announce after migration

amphi
authored and
phip1611
committed
virtio-devices: net: add guest announce tests

amphi
authored and
phip1611
committed
virtio-devices: net: fix guest announce compatibility

amphi
authored and
phip1611
committed
virtio-devices: net: restore pending announce notifications

amphi
authored and
phip1611
committed
virtio-devices: net: invalidate stale announce retries

amphi
authored and
phip1611
committed
vmm: Enable AMX states prior to checking CPUID compatibility

olivereanderson
authored and
phip1611
committed
arch: Initial data structures for describing CPUID parameters

olivereanderson
authored and
phip1611
committed
hypervisor: Implement common traits for HypervisorType and CpuVendor

olivereanderson
authored and
phip1611
committed
arch: CpuProfile data structures

olivereanderson
authored and
phip1611
committed
misc: Make CPU profile part of various configs

olivereanderson
authored and
phip1611
committed
arch: Apply CPU profile (if any) when generating common CPUID

olivereanderson
authored and
phip1611
committed
arch: Include Skylake and Sapphire rapids CPU profiles

olivereanderson
authored and
phip1611
committed
arch: CPUID definitions data structures

olivereanderson
authored and
phip1611
committed
arch: Intel CPUID definitions

olivereanderson
authored and
phip1611
committed
arch: KVM CPUID definitions

olivereanderson
authored and
phip1611
committed
arch: Improve CPUID incompatibility logging

olivereanderson
authored and
phip1611
committed
arch: CPU profile generation CLI

olivereanderson
authored and
phip1611
committed
arch: Change numeric serialization for CPU profiles

olivereanderson
authored and
phip1611
committed
arch: Passthrough policies for mutable CPUID fields

olivereanderson
authored and
phip1611
committed
arch: Update CPU profiles (passthrough mutable fields)

olivereanderson
authored and
phip1611
committed
arch: Regenerate CPU profiles after updating the serialization format

olivereanderson
authored and
phip1611
committed
misc: move MSR retrieval to Hypervisor trait (KVM)
phip1611
committed
hypervisor: Add get_msr_based_features method

olivereanderson
authored and
phip1611
committed
hypervisor: Add get_msr_index_list method to the hypervisor trait

olivereanderson
authored and
phip1611
committed
misc: Don't expose MSR buffer directly through the hypervisor

olivereanderson
authored and
phip1611
committed
hypervisor: msr_filter method on Vm trait

olivereanderson
authored and
phip1611
committed
arch: Disable UINTR state components

olivereanderson
authored and
phip1611
committed
arch: Disable CET in CPUID for CPU profiles

olivereanderson
authored and
phip1611
committed
arch: Change CPU profile policy for MCA

olivereanderson
authored and
phip1611
committed
arch: Change CPUID profile policy for WAITPKG

olivereanderson
authored and
phip1611
committed
arch: More Inherit for CPUID leaf 0x7.EDX

olivereanderson
authored and
phip1611
committed
arch: Disable PKU and OSPKE for non-host CPU profiles

olivereanderson
authored and
phip1611
committed
arch: Change CPU profile generation tool

olivereanderson
authored and
phip1611
committed
arch: Lookup methods on CPUID definitions

olivereanderson
authored and
phip1611
committed
arch: Add data structures for MSR definitions

olivereanderson
authored and
phip1611
committed
arch: INTEL MSR-based feature definitions

olivereanderson
authored and
phip1611
committed
arch: I32_ARCH_CAPABILITIES changes according to PR review

olivereanderson
authored and
phip1611
committed
arch: Change policies for CR4_FIXED_I

olivereanderson
authored and
phip1611
committed
arch: MSR compatibility checks

olivereanderson
authored and
phip1611
committed
arch: Stricter MSR compatibility checks for IA32_ARCH_CAPABILITIES

olivereanderson
authored and
phip1611
committed
arch: Add a list of all Intel architectural MSRS

olivereanderson
authored and
phip1611
committed
arch: Address architectural msrs review

olivereanderson
authored and
phip1611
committed
arch: Include a list of non-architectural MSRs

olivereanderson
authored and
phip1611
committed
arch: Add lists of KVM MSRS

olivereanderson
authored and
phip1611
committed
arch: Add a list of HyperV MSRs

olivereanderson
authored and
phip1611
committed
arch: Add required MSR update functionality

olivereanderson
authored and
phip1611
committed
arch: Deny MSR functionality

olivereanderson
authored and
phip1611
committed
vmm: Apply MSR adjustments according to CPU profile (if any)

olivereanderson
authored and
phip1611
committed
arch: Make the CPU profile generation tool MSR aware

olivereanderson
authored and
phip1611
committed
arch: Use MSR aware profiles

olivereanderson
authored and
phip1611
committed
arch: Inherit policy for MCA

olivereanderson
authored and
phip1611
committed
arch: Permit IA32_MCG_CAP and IA32_MCG_STATUS

olivereanderson
authored and
phip1611
committed
arch: Regenerate CPU profiles

olivereanderson
authored and
phip1611
committed
arch: FORDIB IA32_U_CET and IA32_S_CET in CPU Profiles

olivereanderson
authored and
phip1611
committed
arch: Disable HDC state components for CPU profiles

olivereanderson
authored and
phip1611
committed
arch: Disable LBR state components

olivereanderson
authored and
phip1611
committed
arch: Disable HWP state components

olivereanderson
authored and
phip1611
committed
arch: Disable PT state components

olivereanderson
authored and
phip1611
committed
arch: Disable PASID state components

olivereanderson
authored and
phip1611
committed
arch: Disable VM_ENTRY_HARDWARE_EXCEPTIONS for CPU profiles

olivereanderson
authored and
phip1611
committed
arch: Forbid IA32_XSS for non-host CPU profiles

olivereanderson
authored and
phip1611
committed
arch: Clear LBR related bits in the VM-Exit and VM-Entry CTL MSRs

olivereanderson
authored and
phip1611
committed
docs: CPU Profile generation

olivereanderson
authored and
phip1611
committed
build: flate2 Workspace dependency

olivereanderson
authored and
phip1611
committed
arch: Code generation for CPU profiles

olivereanderson
authored and
phip1611
committed
arch: Update cpu_profile.rs to include code generation from build.rs

olivereanderson
authored and
phip1611
committed
docs: Update CPU profile generation developer documentation

olivereanderson
authored and
phip1611
committed
arch: Deserialize CPU profiles in kebab-case

olivereanderson
authored and
phip1611
committed