# changelog

author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 25.6.0-1.7
changelog:
  - Fix another deadlock in xenopsd
  - Prevent xapi concurrent calls during migration from indirectly make each other fail


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.6.0-1.8
changelog:
  - Fix several RRD issues and make the plugins more robust:
    - Cap Derive values within a certain range without making them NaN
    - Use a computed delay time for RRD loop to prevent gaps in metrics collection
    - Avoid duplicating datasources on plugin restore
    - Protect against a resource leak in the plugins
    - Avoid running out of mmap-ed pages in xcp-rrdd-cpu for large numbers of domains
    - Prevent exceptions from escaping and introducing gaps into metrics collection
    - Avoid missing metrics from new and destroyed domains


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 25.6.0-1.10
changelog:
  - Cherry-pick 83a48882655d "xenopsd: set xen-platform-pci-bar-uc key in xenstore",
    commit is upsteam in 25.26.0.


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.6.0-1.11
changelog:
  - Packaging changes associated with the "xenopsd: set xen-platform-pci-bar-uc key"
    improvement to allow for custom user xenopsd configuration


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.27.0-2.1
changelog:
  - Update to upstream 25.27.0-2
  - Drop 0003-xcp-ng-disable-cancellable-sleep.patch, alternative fix merged upstream
  - Drop 0004-xcp-ng-add-debug-info-in-observer.patch, merged upstream
  - Rename 0005-xcp-ng-fix-IPv6-import.patch to 0003-xcp-ng-fix-IPv6-import.patch
  - Rename 0006-xcp-ng-open-close-openflow-port.patch to 0004-xcp-ng-open-close-openflow-port.patch
  - Rename 0007-xcp-ng-update-db-tunnel-protocol-from-other-config.patch to
    0005-xcp-ng-update-db-tunnel-protocol-from-other-config.patch
  - Drop 0008-CA-408126-rrd-Do-not-lose-ds_min-max-when-adding-to-.patch, merged upstream
  - Drop 0009-CA-408126-follow-up-Fix-negative-ds_min-and-RRD-valu.patch, merged upstream
  - Drop 0010-CA-408841-rrd-don-t-update-rrds-when-ds_update-is-ca.patch, merged upstream
  - Drop 0011-Check-that-there-are-no-changes-during-SR.scan.patch, merged upstream
  - Drop 0012-xapi_guest_agent-Update-xenstore-keys-for-Windows-PV.patch, merged upstream
  - Drop 0013-xapi_xenops-Try-to-avoid-a-race-during-suspend.patch, merged upstream
  - Drop 0014-CA-409510-Make-xenopsd-nested-Parallel-atoms-explici.patch, merged upstream
  - Drop 0015-CA-409510-Give-a-warning-if-atoms-nested-incorrectly.patch, merged upstream
  - Drop 0016-CA-410782-Add-receive_memory_queues-for-VM_receive_m.patch, merged upstream
  - Drop 0017-CA-411319-Concurrent-VM.assert_can_migrate-failure.patch, merged upstream
  - Drop 0018-CA-409488-prevent-Xenctrl-exceptions-from-escaping-o.patch, merged upstream
  - Drop 0019-CA-409489-prevent-running-out-of-pages-with-lots-of-.patch, merged upstream
  - Drop 0020-rrd_file_writer-protect-against-resource-leak.patch, merged upstream
  - Drop 0021-Raise-log-level-for-rrd-thread-monitor.patch, merged upstream
  - Drop 0022-CA-410001-Check-rrdi.rrd-to-avoid-ds-duplicate.patch, merged upstream
  - Drop 0023-CA-409482-Using-computed-delay-for-RRD-loop.patch, merged upstream
  - Drop 0024-CA-411679-Runstate-metrics-return-data-over-100.patch, merged upstream
  - Drop 0025-xcp-rrdd-change-the-code-responsible-for-filtering-o.patch, merged upstream
  - Drop 0026-rrdd-Avoid-missing-aggregation-of-metrics-from-newly.patch, merged upstream
  - Drop 0027-CA-407370-Use-remote.conf-for-customer-rsyslog-forwa.patch, merged upstream
  - Drop 0028-xenopsd-set-xen-platform-pci-bar-uc-key-in-xenstore.patch, merged upstream
  - Drop XSA-474 backport to 25.6.0 (0029-prepare-make-StringPool-share-safer.patch and
    0030-Simplify-UTF-8-decoding.patch), replace with the upstream backport to 25.27.0
  - *** Upstream changelog ***
    * Tue Sep 02 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.27.0-2
    - CA-411297/XSA-474: XAPI UTF8

    * Wed Jul 23 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.27.0-1
    - CP-54332 Update host/pool datamodel to support SSH auto mode
    - CP-53721 Implement SSH set auto mode API for Dom0 SSH control
    - CP-53724 Add xe CLI commands for setting and querying Dom0 SSH auto mode
    - CP-54382 Set Different Auto-Mode Default Values for XS8 and XS9
    - CP-54382 Reconfigure Auto mode when pool join and pool eject
    - CA-412854 Fix ssh_expiry drift after XAPI restart
    - CA-413328 Enable auto-mode when XAPI failed for a extend period that exceeds the timeout duration
    - CA-413319: Ensure console timeout file exists when timeout is configured
    - CA-413424: Enhance xe help output
    - xapi_sr_operations: Report more useful info when raising other_operation_in_progress error
    - xapi_cluster_helpers: Correctly report other_operation_in_progress error
    - xapi_vm_lifecycle: Correctly report other_operation_in_progress error
    - qcow-stream-tool: Add a minimal CLI wrapper for Qcow_stream
    - {export,import}_raw_vdi: add qcow as supported format
    - export_raw_vdi: Add support for differential QCOW2 export with base
    - CP-52334 MVD - add -d option to mock driver-tool
    - xapi_vbd_helpers: Fix operation reporting when raising other_operation_in_progress
    - xapi_vdi: Report more useful information when raising other_operation_in_progress
    - xapi_{vif,vusb}_helpers: Report more useful information when raising other_operation_in_progress
    - message_forwarding: Report more info when raising other_operation_in_progress
    - xapi_pool_helpers: Report more info when raising other_operation_in_progress error
    - xapi_pif: Report more info when raising other_operation_in_progress error
    - xapi_vm_appliance_lifecycle: Report more info when raising other_operation_in_progress error
    - xapi_vbd: Report more useful info when raising other_operation_in_progress error
    - xapi_host_helpers: Report more useful info when raising other_operation_in_progress error
    - xapi/helpers: Fix handling of other_operation_in_progress delays
    - idl/datamodel_errors: Add operation_{type,ref} to other_operation_in_progress
    - Adjust tests after other_operation_in_progress refactoring
    - CA-412420: Set vdi-type When Create snapshot on SMAPIv3 SR
    - [doc] add documentation about tracing
    - CP-54480 Update release number for ssh_auto_mode
    - CA-413587: Checking feature for old FreeBSD driver

    * Wed Jul 16 2025 Rob Hoes <rob.hoes@citrix.com> - 25.26.0-1
    - xenopsd: set xen-platform-pci-bar-uc key in xenstore
    - CP-308455 VM.sysprep add timeout parameter
    - CP-308455 VM.sysprep wait for shutdown
    - CP-308455 VM.sysprep update documentation
    - CP-308455 VM.sysprep wait for "action" key to disappear
    - CA-413713: Change bash-completion shortcut
    - Replace `List.fold_left (||) false (List.map f lst)` with `List.exists f lst`
    - CP-308875: set Xen PCI MMIO BAR to WB
    - Add message argument to LICENSE_CHECKOUT_ERROR

    * Sun Jul 13 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.25.0-1
    - CA-393417: Drop device controller of cgroup v1 and fix USB passthrough for XS9
    - xapi-stdext-threads: calibrate ratio for delay times
    - Downgrade unknown SM.feature errors to warnings
    - CP-308455 VM.sysprep use watch to detect sysprep running
    - datamodel_lifecycle: automatic update
    - CA-413412: Fail to designate new master
    - XSI-1954: Only block pool join for clustering on non-management VLAN

    * Sun Jul 06 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.24.0-1
    - CA-410965: Modify default ref of console
    - Design proposal for supported image formats (v3)
    - CA-411477: Fix SM API version check failure
    - CP-54207: Move VBD_attach outside of VM migrate downtime
    - xenopsd/xc: upstream more NUMA changes
    - idl: Remove unused vm_lacks_feature_* errors
    - python: Add qcow2-to-stdout.py script
    - Move collection of memory metrics from xcp-rrdd to rrdp-squeezed
    - Move common retry_econnrefused function to xcp_client
    - CA-412636: hostname changed to localhost with static IP and reboot
    - Add mlis for observer_helpers and observer_skeleton
    - CP-308455 Toolstack VM.sysprep API
    - `xapi_vm_lifecycle`: Improve feature handling, avoid crashes
    - CA-413304: Restore VBD.unplug function to keep old functionality

    * Wed Jun 25 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.23.0-1
    - Improve the xapi_observer debug logs by adding more context
    - Reduce code duplication by using a common Observer Interface
    - CA-409431: Use an Observer forwarder for xapi-storage-script
    - xapi: Move cpu_info keys to xapi-consts from xapi_globs to be used across modules
    - Improve xapi-cli-server
    - Improve `xe-cli` completion
    - xapi/helpers: Note that get_localhost can fail while the database is starting up
    - xapi_host: missing UEFI certificates warrant a warning, not an error
    - CA-412164: XSI-1901: uid-info does not support `:` in gecos
    - CP-47063: Instrument message-switch functions
    - CA-412313: DT spans not exported on host evacuation (XAPI shutdown)
    - xenopsd: Allow to override the default NUMA placement
    - Fix `message-switch` opam metadata
    - opam: generate xapi-log with dune
    - xapi-log: remove circular dependency on tests
    - datamodel_lifecycle: automatic update
    - CA-412146 Filter out VF when scan
    - Update datamodel_host
    - Update XE_SR_ERRORCODES from SM
    - CP-308253: `Task.destroy` spans should no longer be orphaned
    - CP-308392: Create specialized functions
    - xapi-idl: Clean up xenops-related interfaces
    - xapi_xenops: Remove unnecessary Helpers.get_localhost call
    - xapi_xenops: Split update_vm internals into a separate function
    - CA-408552: Improve bootstrom performance by save db ops
    - xenops_server_plugin: Refer to the type alias instead of its definition
    - xapi-idl/updates: Make filterfn in inject_barrier only look at keys
    - xapi_xenops: Refactor update_vm_internal
    - CP-308253: Instrument `Consumers` Spans in `Message-switch`.
    - CP-50001: Add instrumentation to `xapi_xenops.ml`
    - CA-406770: Improve error message
    - xenopsd: Remove data/updated from the list of watched paths
    - xapi_xenops: Simplify update_* functions
    - CP-308201: make unimplemented function more obvious

    * Thu Jun 12 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 25.22.0-2
    - Bump release and rebuild

    * Wed Jun 11 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 25.22.0-1
    - xcp-rrdd: change the code responsible for filtering out paused domains
    - Update datamodel_lifecycle (25.21.0)
    - CA-410085: Improving clearing cgroup after vfork
    - Adapt code to new mirage-crypto (CP-308222)
    - CP-308252 add VM.call_host_plugin
    - xapi-client: Add Tasks.wait_for_all_with_callback
    - xapi_host: Parallelize host evacuation even more
    - github: keep scheduled yangtze's runs working
    - rrdd: Avoid missing aggregation of metrics from newly destroyed domains
    - xapi-aux: remove cstruct usage from networking_info
    - xapi-cli-server: Expose evacuate-batch-size parameter in the CLI
    - [maintenance]: add forkexecd C objects to .gitignore
    - unixext: Add a raise_with_preserved_backtrace function
    - xapi_vgpu_type: Don't pollute the logs with non-critical errors
    - networkd: Add ENOENT to the list of expected errors in Sysfs.read_one_line
    - xenguestHelper: Don't dump errors on End_of_file

    * Tue Jun 10 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-4
    - Bump release and rebuild

    * Mon Jun 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-3
    - Bump release and rebuild

    * Fri Jun 06 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-2
    - Bump release and rebuild

    * Fri Jun 06 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-1
    - CP-53477 Update host/pool datamodel to support SSH status query and configure
    - CP-53802: Restore SSH service to default state in pool eject
    - CP-53711: Apply SSH settings in joiner before update_non_vm_metadata
    - CP-53723 Implement Console timeout configure API for Dom0 SSH control
    - CP-53478: Implement SSH enabeld timeout API for Dom0 SSH control
    - CP-53725 Create SSH-related xe CLI for Dom0 SSH control
    - CP-54138: Sync SSH status during XAPI startup
    - CP-308049: rrdview tool
    - CA-410948 Avoid rasie full Exception when disable/enable ssh failed
    - CA-409949 CA-408048 XSI-1912 remove unabailable SM plugin by ref
    - xapi-types: remove dev errors when adding features
    - xenctrlext: add function to set the hard-affinity for vcpus
    - xenopsd: pass the hard-affinity map to pre_build
    - xenopsd: do not send hard affinities to xenguest when not needed
    - xenopsd: set the hard affinities directly when set by the user
    - xenopsd: expose a best-effort mode that set the hard affinity mask (CP-54234)
    - xapi: use hard-pinning with best-effort as an experimental feature (CP-54234)
    - CA-411679: Runstate metrics return data over 100%
    - Modify doc mistakes
    - CONTRIBUTING: add some initial guidelines
    - Removed PowerShell 5.x build due to the retirement of windows-2019.
    - Add file-upload support to xe host-call-plugin
    - CP-53475 Update release number to latest tag
    - XSI-1918: Host can not join pool after enable external auth
    - xapi_vif: Guarantee the device parameter is an unsigned decimal integer
    - xapi-idl: Avoid printing cli output when testing
    - xapi-storage-script: avoid output when running python tests
    - CA-411766: Detach VBDs right after VM Halted
    - datamodel_lifecycle: automatic update

    * Fri May 23 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 25.20.0-2
    - Bump release and rebuild

    * Fri May 23 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.20.0-1
    - CA-409949 CA-408048 remove unavailable SM types at startup
    - CP-307933: database: do not marshal/unmarshal every time
    - CP-307865 Support SHA-512 Certificates for XenServer Hosts
    - gencert testing: use human-readable errors for validation
    - CA-409510: xenopsd operations time out due to deadlock
    - CA-411122: do not call set-iscsi-initiator with an empty string for IQN
    - CA-410782: Add receive_memory_queues for VM_receive_memory operations
    - xapi: Cleanup unused functions
    - CP-308075 document changing paths for SM plugins in XS9
    - CP-53642: change default NUMA placement policy to best-effort
    - CP-54275: Add a blocklist mechanism to avoid incorrect/old repo config.
    - CP-307922: Implement SMAPIv3 outbound migration
    - CA-409482: Using computed delay for RRD loop
    - CA-411319: Concurrent `VM.assert_can_migrate` failure

    * Thu May 15 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.19.0-1
    - [maintenance]: bool is a keyword in newer C versions, cannot be a parameter
    - CP-307947: cleanup database interface
    - Mux mirror failure check for SXM
    - Bring back DATA.MIRROR.list and DATA.MIRROR.stat
    - Add more debugging to storage_smapiv1_migrate
    - CP-307958: database: small lock and RPC tweaks + benchmarks
    - CA-408492: Keep backwards compatibility for SMAPIv2

    * Fri May 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.18.0-1
    - CP-52880: [XSI-1763]: Xapi_vdi.update_allowed_operations is slow
    - Add additional tracing to VBD plug/unplug
    - CP-53554: Split plug xenopsd atomic into attach/activate
    - CP-53555: Split unplug atomic into deactivate/detach
    - Move update_snapshot_info_dest to storage_mux
    - Refactor Storage_smapiv1.find_vdi
    - Use the new scan2
    - Add new interface for mirror operation in SMAPIv3
    - Add more states for SXM
    - Remove receive_start(2) from storage_migrate
    - Change how receive_start2 is called
    - Add qcow2 as supported format by xcp-rrdd-iostat
    - CA-404946: NBD: increase timeout to match iSCSI timeout and use persistent connections
    - Update datamodel_lifecycle
    - [maintenance]: reformat dune files in sdk-gen
    - build: avoid race condition on install
    - [maintenance]: drop sexprpp
    - XAPI website link updated in README
    - xapi-log/test: Package the cram test in xapi-log
    - CA-409710: Modify the default backup parameters
    - xenopsd: Don't balloon down memory on same-host migration
    - CA-410001: Check rrdi.rrd to avoid ds duplicate
    - xapi_xenops: Avoid a race during suspend
    - CP-54828: RBAC: Avoid raising exception on happy path
    - CP-54827: Optimize pool object
    - CP-54826: Mutex.execute: avoid costly backtrace formatting in finally
    - CA-403867: Block pool join if IP not configured on cluster network

    * Thu Apr 24 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.17.0-1
    - xe-reset-networking: Avoid truncating IPv6 addresses
    - networkd: simplify parsing of config
    - networkd: read IPv6 entries in the firstboot management config file
    - xapi: Log exceptions in check_network_reset
    - CA-408230: Enable destroy op for HA statefile VDI after HA is disabled
    - CP-52131/CP-53474: Reorder operations during pci_add
    - xapi_guest_agent: Update xenstore keys for Windows PV drivers versions
    - tests: Add Windows PV driver version parsing test to test_guest_agent
    - Explicitly define failures for SXM
    - Define the utility function for choosing the backend
    - Move the copying function to storage_smapiv1_migrate
    - Move MigrateRemote before MigrateLocal
    - Move `find_local_vdi` utility function
    - Split Storage_migrate.start
    - Remove duplicate Storage_migrate.stop impl
    - Implement send_start for SMAPIv1
    - doc: Add sxm mux design
    - doc: Add an overview of SXM
    - doc: Add error handling of SXM
    - CA-409628: Do not lose the original backtrace in log_backtrace
    - Update cluster-stack-version lifecycle
    - CP-54034: Expose `expected_votes` in Cluster object

    * Tue Apr 15 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.16.0-1
    - CP-54072: Create template for storage_smapi{v1,v3}_migrate
    - CA-401023: Remove smapi observer config if smapi is set as experimental
    - xapi_message: Implement proper expression handling in get_all_records_where
    - CP-54026: option to control VM-internal shutdown behaviour under HA
    - CP-53951: Drop SSL and Lwt dependency from XAPI
    - quicktest: Add a test verifying Message.get_all_records_where filtering
    - CI: allow XAPI linking with Lwt for now
    - Check that there are no changes during SR.scan
    - CA-408843: XSI-1852: Set encryption type of machine account
    - CP-52745: Add `ThreadLocalStorage` in `Threadext`
    - CA-409488: prevent Xenctrl exceptions from escaping on VM boot/shutdown races
    - CA-409489: prevent running out of pages with lots of domains
    - rrd_file_writer: protect against resource leak
    - Raise log level for rrd thread monitor
    - xapi-aux: Add function to return all management ip addresses
    - gencert: Allow adding more than one IP as the certificate subject
    - network_server: add gateway and dns options to DHCP6
    - opam: update xapi-storage-cli metadata

    * Fri Apr 11 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.15.0-3
    - Bump release and rebuild

    * Tue Apr 08 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.15.0-2
    - Bump release and rebuild

    * Tue Apr 08 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.15.0-1
    - CP-53313: Add field services in VM_guest_metrics
    - CP-53314: Read and watch <domain>/data/service in xenstore to DB
    - Define SR_CACHING capability
    - CP-52365 fix up driver-tool invocations
    - CA-408339: Respect xenopsd's NUMA-placement-policy default
    - Use records when accumulating events
    - Remove mutable last_generation from Xapi_event
    - Factor out event reification
    - Use record type for individual event entries
    - xenctrlext: do not truncate the amount of memory in claims to 32 bits
    - CA-407177: Fix swtpm's use of SHA1 on XS9
    - forkexecd: do not tie vfork_helper to the forkexec package
    - opam: add missing dependencies to packages
    - Simplify code by using get_trace_context
    - CA-404460: Expose Stunnel_verify_error for mismatched or corrupted certificate, and expose ssl_verify_error during update syncing
    - CA-408550: XSI-1834: Host netbios name should be added to local
    - CP-54020: Refactor sxm and storage_mux code
    - CA-408500: Remove ListFile with Xapi_stdext_unix.Unixext
    - CP-53472: Create parent for add_module spans
    - xapi-stdext-threads, test: use stable testing interface
    - CA-408841 rrd: don't update rrds when ds_update is called with an empty datasource array
    - Remove xapi-stdext-date
    - CP-50836: Add VM_migrate_downtime and request_shutdown spans
    - opam: move all opam files to the opam subdir
    - numa: add test binary that prints changes in free memory and domain lifetime
    - CP-53658: adapt claim_pages to new version with numa node parameter
    - xenctrl: Don't use numa_node in domain_claim_pages calls
    - xenopsd: log_reraise doesn't ignore the result
    - CP-54065, xenopsd: use domain_claim_pages on a single node, if possible
    - xenopsd/xc: Do not try to allocate pages to a particular NUMA node
    - xapi_vm_migrate: Avoid duplicate, overly-strict CBT check on VDIs
    - Update datamodel lifecycle VM_guest_metrics.services
    - CA-408048 add library to represent version strings
    - CA-408048 remove SM plugins from DB if unavailable

    * Tue Mar 18 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.14.0-1
    - IH-533: Remove usage of forkexecd daemon to execute processes
    - Add opam local switch in gitignore
    - xenopsd: start vncterm for PVH guests

    * Mon Mar 17 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.13.0-1
    - CP-48824: Increase xenopsd worker-pool-size to 25
    - CP-52074: Add systemctl enable and disable API
    - CP-53161: Pass `baggage` back into `xapi` from `smapi`.
    - CA-405864: Drop usage of init.d functions
    - doc: Update xapi storage layer code links
    - CA-405864: Fix shellcheck warnings
    - CP-53827, xenopsd: claim pages for domain on pre_build phase
    - CI: fix compile_commands.json caching
    - Resolve build failure in message_forwarding.ml
    - CP-48676: Reuse pool sessions on slave logins.
    - xapi-stdext-date: replace all usages to use clock instead
    - CA-408126 follow-up: Fix negative ds_min and RRD values in historical archives

    * Wed Mar 12 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.12.0-1
    - Revert "CA-403851 stop management server in Pool.eject ()"

    * Tue Mar 11 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.11.0-1
    - Design proposal for supported image formats
    - (docs) Describe the flows of setting NUMA node affinity in Xen by Xenopsd
    - CA-407687/XSI-1834: get_subject_information_from_identifier should
    - CA-408126 - rrd: Do not lose ds_min/max when adding to the RRD
    - Change Ocaml version in readme
    - CA-403851 stop management server in Pool.eject ()

    * Fri Mar 07 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.10.0-1
    - CA-407328: Change vm parameter names of SXM calls
    - CP-53708: Expose the existing PCI vendor/device IDs
    - CP-53444: For XenServer 9, remove python dnf plugins
    - XSI-1821: Add pre-condition for host.emergency_reenable_tls_verification
    - CP-50934: fix qemu cgroups to be compatible with cgroupv2
    - opam: move stunnel metadata to dune-project
    - stdext: replace all ignore_type with annotated ignores
    - xapi_vdi_helpers: actually write raw vdi when possible
    - CA-399631: Increase the max size of xcp-rrdd-plugins for bug-tool
    - CP-53779: Guard all `Tgroup` library call behind `tgroups-enabaled`
    - CI: add a codechecker workflow
    - [maintenance] xa_auth.h: avoid using reserved macro names
    - unixpwd.c: fix error path file descriptor leak
    - [maintenance] syslog_stubs.c: avoid using reserved identifier names
    - [maintenance] blkgetsize64: avoid warning about uninit value
    - CP-53747 document PEM/Certificate relation
    - c_stubs: use 'new' acquire and release runtime functions
    - Hoist value access outside section without lock
    - CA-407370: Use remote.conf for customer rsyslog forwarding rules
    - Revert: Refactor Xapi_event #6306

    * Mon Mar 03 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.9.0-2
    - Bump release and rebuild

    * Thu Feb 27 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.9.0-1
    - Design proposal to support import/export of Qcow2 VDI
    - message_forwarding: Change call_slave_... functions to reduce repetition
    - Revert "CA-403867: Block pool join if IP not configured on cluster network"

    * Wed Feb 26 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.8.0-1
    - CP-52744: Thread `TraceContext` as json inside debug_info
    - Use records when accumulating events
    - Remove mutable last_generation from Xapi_event
    - Use record type for individual event entries
    - CA-403867: Block pool join if IP not configured on cluster network
    - CA-403744: Implement other_config operations
    - CP-45795: Decompress compressed trace files without Forkexecd
    - CP-53362: Rename hcp_nss to nss_override_id
    - CP-52365 adjust interface to dmv-utils
    - CA-407033: Call `receive_finalize2` synchronously
    - Add internal links to XenAPI reference
    - CA-405643: Update DNF to DNF5
    - Add filter_by to Dm_api
    - Use Cmdliner for gen_api_main.exe
    - CA-407322 - libs/rrd: Keep lastupdate XML field as int, XenCenter relies on it

    * Mon Feb 24 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.7.0-2
    - Bump release and rebuild

    * Tue Feb 18 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.7.0-1
    - CP-51393: Datamodel: update Repository for syncing from a remote pool (#6049)
    - CP-51835: Keep the HTTP /repository handler enabled
    - CP-50789: Enable verified rpc to external host
    - CP-51836: Restrict/check binary_url of remote_pool repository
    - CP-51391: Implement handling for /repository/enabled
    - CP-51988: Fix functions not work for remote_pool repo
    - CP-50787 CP-51347: Support pool.sync_updates from remote_pool repo
    - CP-52245: Temp disable repo_gpgcheck when syncing from remote_pool repo
    - Revert "CP-52245: Temp disable repo_gpgcheck when syncing from remote_pool repo"
    - python3: Add previously unused API classes to Python stubs used during testing
    - CA-404660: Refine repository enabling error message
    - doc: walkthroughs/VM.start: Update the xenguest chapter (domain build)
    - debug traces for is_component_enabled
    - CP-53470 Additional spans in & around the pause section in VM.migrate
    - Hugo docs: Support dark themes: Invert images to match the theme
    - README: Submission: Add DCO, issues & remove the disabled xen-api list
    - docs/xenopsd: List the child pages using the children shortcode
    - CA-405820 guard /etc/init.d/functions in xe-toolstack-restart
    - Simplify cases of may_be_side_effecting
    - Drop count_mandatory_message_parameters
    - message-switch/unix: simplify the scheduler
    - docs: Add dedicated walk-throughs for VM.build and xenguest
    - xenopsd docs: Add Walk-through descriptions, show them on the index page
    - python3: Resurrect metrics.py helper script
    - python3: Resurrect a metricsgraph.py helper script
    - CA-406403: Do not return HTTP 500 when Accept header can't be parsed
    - Replace startswith and endswith with stdlib calls
    - Domain.build docs: Improve notes on node_affinity, move to new page
    - (docs) VM.migrate.md: Rephrase and simplify, improve readability

    * Wed Feb 12 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.6.0-2
    - Bump release and rebuild


author: Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.5
changelog:
  - CP-46162: Backport patches for building qemu with rawhide(xs9) toolchain
    - Do not ignore malloc value
    - Fix the null pointer errors in configure
    - Fix -Werror=maybe-uninitialized build failure
    - Fix net/eth.c compile errors
    - Compile with -Wno-array-bounds
    - Remove -no-pie linker flag


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.8
changelog:
  - Disable capstone and fdt explicitly
  - CP-42792: Backport a patch to avoid unncessary buffered ioreq polling


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.9
changelog:
  - CA-391031: Reinstate rate limiting of RTC_CHANGE events
  - CA-391069: Avoid livelock due to buffered ioreqs


author: Yann Dirson <yann.dirson@vates.tech> - 4.2.1-5.2.12.1
changelog:
  - Sync with xs8 4.2.1-5.2.12, no code change, only rebuild against libjemalloc.so.2:
    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.12
    - CP-46112: Rebuild after new version of jemalloc

    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.11
    - CP-46112: Rebuild with new version of jemalloc


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.2.1-5.2.14.1
changelog:
  - Sync with 4.2.1-5.2.14
  - Remove 0001-nvme-Don-t-check-NSID-in-NVME_VOLATILE_WRITE_CACHE.patch in favor of XenServer's fix
  - *** Upstream changelog ***
    * Wed Oct 15 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.14
    - CA-418876: Fix NVMe namespace indexing

    * Thu Oct 02 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.13
    - CA-417654: Fix NVME bug which causes WS2025 install failures


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-10
changelog:
  - Sync to latest upstream master: v7.30.0 + 10 commits
  - Dropped patches merged upstream and rebased the rest
  - Add support for RHEL 9 and derivatives in install.sh


author: Gael Duperrey <gduperrey@vates.fr> - 8.2.0-11
changelog:
  - Switch RPMs to systemd by default and provide legacy RPMs for chkconfig.
  - Merge separate -xenstore RPMs back into xe-guest-utilities RPMs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-12
changelog:
  - Update release to match that of the RPM in XCP-ng 8.2, since this is what
    also defines the suffix of the version of the xe-guest-utilities packages
    in the ISO.


author: Gael Duperrey <gduperrey@vates.tech> - 8.3-14
changelog:
  - Remove noise from patches using git-format-patch options
  - Add patch to remove the invitation to reboot after install of the tools
  - Add patch to support RHEL 10 and derivatives in install.sh


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-26
changelog:
  - Don't require the empty kernel-livepatch and xen-livepatch packages
  - Ensure rsyslog and systemd are installed in xcp-ng-release-config's %post


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-27
changelog:
  - Loosely sync with xenserver-release-8.4.0-11
  - *** Upstream changelog ***
  - * Tue Jun 18 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.4.0-11
  - - CP-47026: Move mcelog config changes to mcelog.spec


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-28
changelog:
  - Update repo files for CentOS and EPEL
  - Point at repo.vates.tech for CentOS since mirrorlist.centos.org was cut
  - Add "(EOL)" to repo descriptions for EOL repos
  - Drop unused repos


author: Lucas Ravagnier <lucas.ravagnier@vates.tech> - 8.3.0-29
changelog:
  - Add 0001-fix-curl-resolve-TLS-issue-caused-by-restrictive-con.patch
  - This adds a cipher to '.curlrc' to fix a TLS Handshake Error with xoa.io


author: Yann Dirson <yann.dirson@vates.tech> - 8.3.0-30
changelog:
  - Sync with xenserver-release-8.4.0-14:
    - 0001-Sync-vm.slice-with-xenserver-release-v8.4.0-12.tar.g.patch
    - 0002-Sync-systemd-presets-with-xenserver-release-v8.4.0-1.patch
    - Pull xcp-python-libs-compat (dropped from xapi deps between
      4.19 and 4.39)
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 8.4.0-14
    - CA-403415: Install xcp-python-libs-compat for XS8
    * Fri Oct 04 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.4.0-13
    - Enable new RRDD plugins
    * Fri Sep 20 2024 Mark Syms <mark.syms@cloud.com> - 8.4.0-12
    - CA-399511: Change systemd dependencies for vm.slice


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-31
changelog:
  - Rebuild for updated branding-xcp-ng
  - Loosely sync with xenserver-release-8.4.0-15 (no real change, just a merge point)
    * Thu Jan 23 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.4.0-15
    - CP-53338: Rebuild to pick up branding changes to 8.4


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 8.3.0-32
changelog:
  - Fix patches that weren't properly generated and included in the specfile:
    - 0002-Sync-vm.slice-with-xenserver-release-v8.4.0-12.tar.g.patch
    - 0003-Sync-systemd-presets-with-xenserver-release-v8.4.0-1.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.17.5-13.1
changelog:
  - Sync with 4.17.5-13
  - Remove xen-4.17.5-x86-intel-Fix-PERF_GLOBAL-fixup-when-virtualised.patch included in XS
  - *** Upstream changelog ***
    * Thu May  8 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-13
    - Fix for XSA-469 CVE-2024-28956
    * Mon Apr 28 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-12
    - Work around Ice Lake erratum ICX143, which manifests as a hang on boot
    - Fix crash on boot when perf counters are unavailable
    * Wed Mar 26 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-11
    - Add xenguest support for the platform:mmio_hole_size attribute
    - Identify which domain watchdog fired


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-14.1
changelog:
  - Sync with 4.17.5-14
  - Remove xsa470-4.17.patch included in XS release
  - *** Upstream changelog ***
    * Fri Jun 13 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-14
    - Fix for XSA-470 CVE-2025-27465
    - Fix booting on servers with RAM above the 16T boundary
    - Fix possible watchdog timeout caused by unnecessary cache flushing


author: Teddy Astie <teddy.astie@vates.tech> - 4.17.5-15.1
changelog:
  - Sync with 4.17.5-15
  - *** Upstream changelog ***
    * Fri Jul  4 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-15
    - Fix for XSA-471 CVE-2024-36350 CVE-2024-36357
    - Perform provenance checks on AMD microcode blobs


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 4.17.5-15.2
changelog:
  - Backport 22650d605462 "x86/hvmloader: select xen platform pci MMIO BAR UC or WB MTRR
    cache attributes"
  - Backport fd06f8700769 "tools/golang: update auto-generated libxl based types"


author: Yann Sionneau <yann.sionneau@vates.tech> - 4.17.5-18.1
changelog:
  - Sync with 4.17.5-18
  - Drop 0001-x86-hvmloader-select-xen-platform-pci-MMIO-BAR-UC-or.patch, applied upstream
  - *** Upstream changelog ***
    * Tue Aug  5 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-18
    - Domain runstate extentions for more RRDs
    - Mwait-idle updates for Intel Alder Lake thru Granite Rapids platforms

    * Wed Jul 23 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-17
    - Fix bad interaction of cache attribute relax with vGPU

    * Tue Jul 22 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-16
    - Relax cache attributes for Xen Platform PCI device BAR
    - Optimize flushing of Intel PML buffer


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.5-20.1
changelog:
  - Sync with 4.17.5-20
  - Use xsa472-[123].patch provided by XenServer
  - *** Upstream changelog ***
    * Mon Sep 01 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-20
    - Fix for XSA-472 CVE-2025-27466 CVE-2025-58142 CVE-2025-58143

    * Thu Aug 28 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-19
    - Add support for 4 or more socket Intel Granite Rapids systems
    - Fix usage of PCI devices on segments other than 0


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-21.1
changelog:
  - Sync with 4.17.5-21
  - Removed XSA-475 patches now included in 4.17.5-21
  - *** Upstream changelog ***
    * Thu Oct 09 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-21
    - Fix for XSA-475 CVE-2025-58147 CVE-2025-58148
    - Use superpages where possible on migrate/resume
    - Populate CPUID 0x1.edx features early for self-snoop detection


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.3.0-3.1
changelog:
  - Rebase on CH 8.3 Preview
  - Re-add xha-10.1.0-support-drbd.XCP-ng.patch patch to support DRBD devices


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.5.0-1.1
changelog:
  - Update to 10.5.0-1
  - Drop xha-10.3.0-support-ipv6.XCP-ng.patch, merged upstream
  - *** Upstream changelog ***
  - * Wed May 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.5.0-1
  - - lib: ensure the correct maximum amount of hosts
  - * Tue Apr 18 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.4.0-1
  - - CP-41049: Safely remove /proc/xen from dom0
  - - feat(heartbeat): support IPv6


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 25.0.0-1.1
changelog:
  - Update to 25.0.0-1
  - *** Upstream changelog ***
    * Fri Jan 10 2025 Rob Hoes <rob.hoes@citrix.com> - 25.0.0-1
    - CA-403139: Set scheduler policy and priority thread
    - CA-403683: Configurable syslog printing


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 25.1.0-1.1
changelog:
  - Update to 25.1.0-1
  - Sync patches and robustify access to NBD paths using O_SYNC
  - *** Upstream changelog ***
    * Thu Mar 06 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 25.1.0-1
    - CA-407106: Fix various static analyzer warnings
    - CA-404658: Separate heartbeat send and receive threads
    - CA-407313: Replace HA spinlock with rwlock
    - CA-407256: Call to xha-lc is a no-op
    - CA-406953: Fix pointer truncation in hypercall arguments and undefined behaviour
    * Thu Jan 30 2025 Alex Brett <alex.brett@cloud.com> - 25.0.1-1
    - CA-405454: Fix xha when using cgroup v2


author: Gael Duperrey <gduperrey@vates.tech> - 25.2.0-1.1
changelog:
  - Update to 25.2.0-1
  - *** Upstream changelog ***
    * Tue Sep 02 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.2.0-1
    - CP-53906: Print host index in query_liveset
    - fix xha logging typos in sm.c
    - ci: Add missing package
    - CA-404344: update service to systemd command


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.14-2.1
changelog:
  - Update to 10.1.14-2
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 10.1.14-2
  - - CP-43942: Remove Portable SR feature


author: Benjamin Reis <benjamin.reis@vates.tech> - 11.0.2-1.1
changelog:
  - Update to 11.0.2-1
  - Redo xsconsole-11.0.2-support-ipv6.XCP-ng.patch (now contains xsconsole-10.1.14-ipv6-autoconf.XCP-ng.patch)
  - Drop xsconsole-10.1.14-display-vlan.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Mar 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.2-1
  - - CA-369899: Add NTP config control for DHCP|Default|Manual|None options
  - - CA-389475: Update the timezone when it changes
  - * Thu Feb 29 2024 Mark Syms <mark.syms@citrix.com> - 11.0.1-1
  - - CA-389275: return insrtype if no translation
  - * Thu Feb 29 2024 Fei Su<fei.su@cloud.com> - 11.0.0-2
  - - CP-48192 Requires glibc-langpack-en to fix the locale.Error on xs9
  - * Mon Feb 05 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.0-1
  - - CP-44690: Upgrade to python 3


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.6-1.1
changelog:
  - Sync with 11.0.6-1
  - *** Upstream changelog ***
  - * Fri Jun 07 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.6-1
  - - CA-388527: Fix 'timed out' when creating an ISCSI SR
  - * Thu May 16 2024 Lin Liu <Lin.Liu01@cloud.com> - 11.0.3-1
  - - CA-357771: Remove obsolete strings: StorageLink(CVSM/cslg) leftovers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.8-1.1
changelog:
  - Sync with 11.0.8-1
  - *** Upstream changelog ***
    * Tue Jul 23 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.8-1
    - CA-390512: Improved xenapi error handling
    * Tue Jul 23 2024 Alex Brett <alex.brett@cloud.com> - 11.0.7-1
    - CP-49228: Reintroduce Portable SR feature


author: David Morel <david.morel@vates.tech> - 11.0.8-1.2
changelog:
  - Backport fix to sync network reset trigger file with current XAPI
  - Backport fix for IPv6 truncated in pool.conf on network reset


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 11.0.9.1-1.1
changelog:
  - Sync with 11.0.9.1-1
  - Drop xsconsole-11.0.8-sync-network-reset-trigger-file.patch
  - Drop xsconsole-11.0.8-do-not-truncate-ipv6-in-pool-config-on-reset.patch
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 11.0.9.1-1
    - CP-309227: Enable xsconsole to support control SSH and ssh-auto-mode
    * Thu Aug 1 2024 Lin Liu <Lin.Liu01@cloud.com> - 11.0.9-1
    - CA-395025: Local command shell login failed on XS9


