From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:33953) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YJ31e-0003GS-6r for qemu-devel@nongnu.org; Wed, 04 Feb 2015 11:42:03 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1YJ31a-0001ER-Vc for qemu-devel@nongnu.org; Wed, 04 Feb 2015 11:42:02 -0500 Received: from mx1.redhat.com ([209.132.183.28]:51464) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YJ31a-0001EL-Oy for qemu-devel@nongnu.org; Wed, 04 Feb 2015 11:41:58 -0500 Date: Wed, 4 Feb 2015 16:41:51 +0000 From: "Daniel P. Berrange" Message-ID: <20150204164151.GD3032@redhat.com> References: <20150204113229.GN3032@redhat.com> <54D213E0.8090408@redhat.com> <20150204130041.GQ3032@redhat.com> <87egq5kcqh.fsf@blackfin.pond.sub.org> <87mw4thc0v.fsf@blackfin.pond.sub.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <87mw4thc0v.fsf@blackfin.pond.sub.org> Subject: Re: [Qemu-devel] RFC: Universal encryption on QEMU I/O channels Reply-To: "Daniel P. Berrange" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Markus Armbruster Cc: Peter Maydell , QEMU Developers , Paolo Bonzini On Wed, Feb 04, 2015 at 05:33:36PM +0100, Markus Armbruster wrote: > Peter Maydell writes: > > > On 4 February 2015 at 13:49, Markus Armbruster wrote: > >> Remind me: what GLib version are we targeting, and why? > > > > Our current minimum is 2.12 (or 2.20 in Windows specific code), > > and the reason is RHEL5/Centos 5. > > Any idea when we can move on? > > Don't get me started on the wisdom of developing or deploying upstream > QEMU on RHEL-*5*. If we want to make use of GIO, we would need 2.28 at a bare minimum. This is present in RHEL-6 vintage onwards. Unfortunately, if we want to make use of GIO with TLS, then we would realistically need to have 2.38, since the changelog shows there are some pretty major bugs in the TLS impl in earlier versions. eg you could not read and write to a TLS socket at the same time prior to 2.38 [1] :-( So that version of GIO, with the glib-networking addon to provide TLS, would mean only running on RHEL-7, which feels like it is so new it would likely be a showstopper. Regards, Daniel [1] https://git.gnome.org/browse/glib-networking/tree/NEWS#n325 -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|