From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:57445) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1SQ1Zt-0000xE-7Q for qemu-devel@nongnu.org; Thu, 03 May 2012 15:20:38 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1SQ1Zr-000250-Bx for qemu-devel@nongnu.org; Thu, 03 May 2012 15:20:36 -0400 Received: from e7.ny.us.ibm.com ([32.97.182.137]:51808) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1SQ1Zr-00023L-83 for qemu-devel@nongnu.org; Thu, 03 May 2012 15:20:35 -0400 Received: from /spool/local by e7.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Thu, 3 May 2012 15:20:29 -0400 Received: from d01relay03.pok.ibm.com (d01relay03.pok.ibm.com [9.56.227.235]) by d01dlp01.pok.ibm.com (Postfix) with ESMTP id 8839D38C8070 for ; Thu, 3 May 2012 15:19:53 -0400 (EDT) Received: from d01av03.pok.ibm.com (d01av03.pok.ibm.com [9.56.224.217]) by d01relay03.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id q43JJrjB098042 for ; Thu, 3 May 2012 15:19:53 -0400 Received: from d01av03.pok.ibm.com (loopback [127.0.0.1]) by d01av03.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id q43JJrGc018420 for ; Thu, 3 May 2012 16:19:53 -0300 Message-ID: <4FA2DA58.8010501@us.ibm.com> Date: Thu, 03 May 2012 14:19:52 -0500 From: Anthony Liguori MIME-Version: 1.0 References: <1335886307-27586-1-git-send-email-stefanha@linux.vnet.ibm.com> <4FA046C6.5080909@us.ibm.com> <4FA0EE41.6090303@redhat.com> <20120502085324.GC13336@redhat.com> <4FA10236.1080000@redhat.com> In-Reply-To: <4FA10236.1080000@redhat.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [libvirt] [RFC 0/5] block: File descriptor passing using -open-hook-fd List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Kevin Wolf Cc: libvir-list@redhat.com, Stefan Hajnoczi , qemu-devel@nongnu.org On 05/02/2012 04:45 AM, Kevin Wolf wrote: > Am 02.05.2012 10:53, schrieb Daniel P. Berrange: >> I would much prefer to see us be able to pass FDs in directly alongside >> the disk config as we do for netdev TAP/etc, and for QEMU / kernel to be >> fixed so that you do not need to re-open FDs on the fly. > > I agree, and this is what -blockdev would give us. > > Part of why I don't like the RFC (apart from RPCing the management tool > being just wrong) is that once again it's trying to take shortcuts and > only provide a hack for the urgent need instead of doing it properly and > implementing -blockdev. The proper way to address this problem is *not* -blockdev. -blockdev is another short cut. The proper way to solve this problem is to add extended attribute to SELinux. Another proper solution is for libvirt to launch guests with different UIDs and use DAC to prevent guests from opening files. > I suspect that if we take something half-baked > like this, we will keep being unhappy with the situation in the block > layer, but it won't hurt enough any more to actually spend effort on it, > so that we'll go another five years with it. Wanting to refactor the block layer is great. I am fully in support of it. But holding practical features hostage is not reasonable. There is nothing intrinsically cleaner about using -blockdev fd=X verses using an RPC like this. -blockdev has a lot of nice characteristics but solving this problem is not one of them. Regards, Anthony Liguori > Kevin >