The Xen Project hypervisor is an open-source type-1 or baremetal hypervisor,
which makes it possible to run many instances of an operating system or indeed
different operating systems in parallel on a single machine (or host). The Xen
Project hypervisor is the only type-1 hypervisor that is available as open
source. It is used as the basis for a number of different commercial and open
source applications, such as: server virtualization, Infrastructure as a Service
(IaaS), desktop virtualization, security applications, embedded and hardware
appliances
Please add the following entries in order to boot the xen kernel
In /etc/sysctl.conf:
vm.max_wired=-1
Or if running FreeBSD 13 or newer:
vm.max_user_wired=-1
In /etc/ttys:
xc0 "/usr/libexec/getty Pc" xterm onifconsole secure
In /boot/loader.conf for a dom0 with 2G memory and 4 vcpus:
xen_kernel="/boot/xen"
xen_cmdline="dom0_mem=2048M dom0_max_vcpus=4 dom0=pvh com1=115200,8n1 guest_loglvl=all loglvl=all"
Add to the above xen_cmdline in order to activate the serial console:
console=vga,com1
Note that you will have to enable multicons on FreeBSD if you want to get
output on both the serial and the VGA consoles. The following should be added
to /boot/loader.conf in that case:
boot_multicons="YES"
boot_serial="YES"
console="comconsole,vidconsole"
{emulators,sysutils}/xen-{kernel,tools}: update to 4.21
Update to latest stable version. Fetch QEMU from the release tarball,
building from git is getting more and more complex, and we don't usually
have a delta of patches on top of QEMU that would dissaper if using git.
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)
{sysutils,emulators}/xen-{tools,kernel}: update to latest stable hash
Update the kernel and tools packages and also include a fix for a clang code
generation bug.
Sponsored by: Cloud Software Group
Approved by: bapt (implicit)
{emulators,sysutils}/xen-{kernel,tools}: update to 4.17.2
Also take the opportunity to switch to fetching the sources from the GitHub
mirror based on commit hash. This makes it easier to update the port when
security fixes or relevant bugfixes are backported to the stable branches,
instead of manually having to cherry pick the changes and add them as patches.
Long term we should look into building emulators/qemu with Xen support so that
the xen-tools package doesn't need to carry its own version of QEMU.
Approved by: bapt (implicit)
{emulators,sysutils}/xen-{kernel,tools}: update to 4.17
While there also update SeaBIOS to 1.16.1.
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
{emulators,sysutils}/xen-{kernel,tools}: update to 4.16.0
Add fixes for XSA-{395,398} and backport clang retpoline support from
unstable.
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)
emulators/xen-kernel: import fix for cache attributes
Import fixes for cache attributes of grant and foreign maps on Intel.
This should result in an I/O performance improvement when using
FreeBSD as a dom0 on Intel hardware.
Approved by: bapt (implicit)
{emulators,sysutils}/xen-{kernel,tools}: update to 4.15.0
Also add support for using UEFI firmware in guests.
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)
emulators/xen-kernel: fix EFI calling convention
Xen builds using clang where not using the correct calling convention
for EFI services, backport an upstream patch to fix it.
Approved by: bapt (implicit)
emulators/xen-kernel: improve package message
Use onifconsole for the Xen console, so that when booting bare metal
there are no annoying messages about a console being off. Also note
the usage of vm.max_user_wired instead of vm.max_wired on FreeBSD >
13. Finally expand a little bit on how to get a working serial and VGA
consoles simultaneously.
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)
xen-{kernel/tools}: switch back to LLVM toolchain
Backport upstream fixes to correctly build Xen using LLVM 8
toolchain.
Note the fixes are not strictly needed for xen-tools since the Xen
shim build is only ever supposed to be booted using the PVH entry
point (and not the multiboot entry points). Yet given LLD8 erratic
behaviour with orphan section placement I think it's best to ensure
proper section placement for the shim also.
Sponsored by: Citrix Systems R&D
Reviewed by: mat
Differential revision: https://reviews.freebsd.org/D20816
emulators/xen-kernel: use binutils to workaround LLD 8 bug
LLD 8 changed the behaviour regarding the placement of orphaned
sections, which produces a non-bootable Xen kernel:
https://bugs.llvm.org/show_bug.cgi?id=42327
Switch to GNU LD (and NM) until this is resolved.
Sponsored by: Citrix Systems R&D
Reviewed by: mat
Differential revision: https://reviews.freebsd.org/D20706
emulators/xen-kernel: backport fixes and apply XSAs
Backport a couple of fixes critical for PVH dom0 and
fixes for XSA-{284,287,290,292-294}.
Sponsored-by: Citrix Systems R&D
Reviewed by: bapt
Differential revision: https://reviews.freebsd.org/D19413
xen-kernel & xen-tools: fix ignore message
To mention 12.0 or any newer release, instead of just mentioning
HEAD.
Sponsored by: Citrix Systems R&D
Reviewed by: bapt
Differential revision: https://reviews.freebsd.org/D19387
emulators/xen-kernel411 & sysutils/xen-tools411: drop version number from port
Actually perform the rename of the directories missing in r494039.
Sponsored by: Citrix Systems R&D
Reviewed by: bapt
Differential revision: https://reviews.freebsd.org/D19284
xen: rename to xen47
Preparatory change in order to import a newer Xen version while
keeping the previous one.
Reviewed by: bapt
Sponsored by: Citrix Systems R&D
Differential Revision: https://reviews.freebsd.org/D16416
xen-kernel: fix build with clang 6 and apply pending XSA patches
This includes a band-aid for running 64bit PV guests without
compromising the whole system.
Commit the makefile diff left behind in r459786.
MFH: 2018Q1
Sponsored by: Citrix Systems R&D
xen-kernel: fix build with clang 6 and apply pending XSA patches
This includes a band-aid for running 64bit PV guests without
compromising the whole system.
MFH: 2018Q1
Sponsored by: Citrix Systems R&D
xen-kernel: apply XSA-{226,227,228,230}
This is CVE-2017-12135, CVE-2017-12137, CVE-2017-12136 and
CVE-2017-12855.
MFH: 2017Q3
Approved by: lwshu
Sponsored by: Citrix Systems R&D
xen: update to 4.7.1
Xen 4.7.1 contains the following XSAs: 184, 185, 186, 187, 188 and 190 which
where missing in the previous package. Additionally XSAs 191, 192, 193, 194,
195, 197 and 198 are also applied.
Approved by: bapt
Sponsored by: Citrix Systems R&D
xen-kernel: update post install message
Expand the post install instructions to mention the need to add
hw.pci.mcfg=0 to /boot/loader.conf, or else FreeBSD is not going to be able
to boot as Dom0.
Approved by: bapt
Sponsored by: Citrix Systems R&D
xen: update to Xen 4.7-rc4
Now both the xen-kernel and xen-tools packages are compiled with clang from
base.
xen-kernel however needs to use binutils due to some limitations in the
current elftc.
Approved by: bapt
Sponsored by: Citrix Systems R&D
xen: update port and apply security fixes
* Apply the following Xen security fixes (XSAs): 167, 168, 170.
* Update SeaBIOS version to 1.8.2, and apply build fix so it builds with
ELF toolchain objcopy [0].
* Perform the backport of two functional changes to the Xen kernel in order
to improve PVH Dom0 hardware support [1].
Security: CVE-2016-1570
Security: CVE-2016-1571
Security: CVE-2016-2271
Sponsored by: Citrix Systems R&D
Requested by: Gustau Perez <gperez@entel.upc.edu> [1]
PR: 207170 [0]
Approved by: bapt
Differential revision: https://reviews.freebsd.org/D5420
xen: apply XSAs
Apply the following XSAs: 148, 149, 150, 151, 152 and 153. More information
about the content of each XSA can be found at: http://xenbits.xen.org/xsa/
Sponsored by: Citrix Systems R&D
Reviewed by: bapt
Differential revision: https://reviews.freebsd.org/D4049
xen: update to 4.5.1
Update xen-kernel to 4.5.1 and add patches to allow live migration, save and
restore. Remove qemu-traditional patches (FreeBSD doesn't support
qemu-traditional) and add XSA-142.
Approved by: bapt
Differential revision: https://reviews.freebsd.org/D3854
Sponsored by: Citrix Systems R&D
Move Xen Kernel menuitem to Boot Options submenu. Prevent conflict with
upcoming Boot Environment menu. The Xen Kernel is dynamically appended
after the last menuitem in the Boot Options submenu. If xen_kernel is not
defined in loader.conf(5) the Xen Kernel menuitem displays "N/A" versus
"On"/"off". While here, fix-up the pkg-message (make capitalization of
"in" vs. "In" consistent; make use of trailing ":" consistent; move a
comment out of the way of file contents, etc.).
Differential Revision: https://reviews.freebsd.org/D2717
Reviewed by: allanjude, bapt
Approved by: bapt
