public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/fedora-release] f45: presets: Enable read-only/admin sockets for all virt services
@ 2026-08-10  9:36 Andrea Bolognani
  0 siblings, 0 replies; only message in thread
From: Andrea Bolognani @ 2026-08-10  9:36 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/fedora-release
            Branch : f45
            Commit : 7d7876a650b15928b42f340bd970109f4449c4f3
            Author : Andrea Bolognani <abologna@redhat.com>
            Date   : 2023-10-04T18:22:26+02:00
            Stats  : +20/-2 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/fedora-release/c/7d7876a650b15928b42f340bd970109f4449c4f3?branch=f45

            Log:
            presets: Enable read-only/admin sockets for all virt services

Currently only the main socket gets enabled by default for
secondary drivers and support services, but in reality any
socket can be used to trigger socket activation so we want them
all to be enabled by default.

Note that libvirt commit

  commit 826931e95a38af8322f8ad069dc89117c6404a00
  Author: Andrea Bolognani <abologna@redhat.com>
  Date:   Mon Sep 25 17:24:34 2023 +0200

    systemd: Add Also between sockets

    This results in all sockets for a service being enabled when a
    single one of them is.

    The -tcp and -tls sockets are intentionally excluded, because
    enabling them should require explicit action on the
    administrator's part; moreover, disabling them should not result
    in the local sockets being disabled too.

    Signed-off-by: Andrea Bolognani <abologna@redhat.com>
    Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>

  v9.8.0-32-g826931e95a

which will be part of the upcoming libvirt 9.9.0 release (due in
November 2023) will cause secondary sockets for a service to be
enabled when the main socket is, so once again this change simply
aligns the Fedora presets with the behavior that users will
actually see on their systems.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>

---
diff --git a/90-default.preset b/90-default.preset
index dc325f5..0d9276b 100644
--- a/90-default.preset
+++ b/90-default.preset
@@ -84,21 +84,39 @@ enable virtlxcd-ro.socket
 enable virtlxcd-admin.socket
 
 # Compatibility with libvirtd sockets for old clients (socket activated
-# only when required)
+# only when required). Note that the -tcp and -tls sockets are kept disabled
+# by default, as they require additional configuration before they can work
 enable virtproxyd.socket
+enable virtproxyd-ro.socket
+enable virtproxyd-admin.socket
 
 # Secondary drivers providing supporting functionality to main virtualization
 # drivers (socket activated only when required)
 enable virtinterfaced.socket
+enable virtinterfaced-ro.socket
+enable virtinterfaced-admin.socket
 enable virtnetworkd.socket
+enable virtnetworkd-ro.socket
+enable virtnetworkd-admin.socket
 enable virtnodedevd.socket
+enable virtnodedevd-ro.socket
+enable virtnodedevd-admin.socket
 enable virtnwfilterd.socket
+enable virtnwfilterd-ro.socket
+enable virtnwfilterd-admin.socket
 enable virtsecretd.socket
+enable virtsecretd-ro.socket
+enable virtsecretd-admin.socket
 enable virtstoraged.socket
+enable virtstoraged-ro.socket
+enable virtstoraged-admin.socket
 
-# Non-driver support services (socket activated only when required)
+# Non-driver support services (socket activated only when required, no
+# read-only socket)
 enable virtlogd.socket
+enable virtlogd-admin.socket
 enable virtlockd.socket
+enable virtlockd-admin.socket
 
 # https://fedoraproject.org/w/index.php?title=Starting_services_by_default&oldid=377748
 enable xinetd.service

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-08-10  9:36 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-10  9:36 [rpms/fedora-release] f45: presets: Enable read-only/admin sockets for all virt services Andrea Bolognani

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox