# changelog

author: Jan Safranek <jsafrane@redhat.com> 0.36-4
changelog:
  - Fix libcgroup.so link to the right soname (#599367)
  - Fix segmentation fault in cgget tool (#601071)
  - Fix lscgroup commandline parsing (#601095)


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Jan Safranek <jsafrane@redhat.com> 0.37-2.el6
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Kir Kolyshkin <kir@openvz.org> 1.10-1
changelog:
  - New functionality:
  --  Added check for and repair of sparse images
  --  ploop check: long options support
  --  ploop check: add --raw, --repair-sparse
  --  ploop-check: add -b BLOCKSIZE argument
  --  ploop-check: accept DiskDescriptor.xml argument
  --  ploop umount -d: allow to specify partition device (#2788)
  --  mount.ploop: implement -v and -f options, as per mount(8)
  --  umount.ploop: add -n option (ignored)
  --  mount.ploop: add -s (ignored) and -* (reported as error)
  --  Added ploop info -s
  --  ploop init: use v2 format by default
  --  ploop init: create ext4 by default
  - Fixes:
  --  ploop_get_devs(): fix snprintf usage
  --  ploop_global_lock(): create lockdir if not exist (#2767)
  --  ploop_grow_delta_offline(): Fix uninitialized struct
  --  ploop_ioff_to_sec(): fix for v2
  --  lib/ploop.h: include sys/syscall.h (Debian #728173)
  --  umount.ploop: fixed (#2788)
  --  get_image_param(): added online (from sysfs) and offline (from image) cases
  --  make_fs(): turn off periodic fs checks (#2769)
  --  ploop_store_diskdescriptor(): check rename()
  --  ploop_store_diskdescriptor(): don't return -1
  --  resize_gpt_partition(): check fsync()
  --  ploop_balloon_change_size(): don't pass -1 to close()
  --  ploop_grow_image(): fix an error check
  --  Don't ignore chmod() failures
  --  print_output(): fix output
  --  make_fs(): fix max_online_resize type overflow
  --  do_umount(): fix diagnostic lsof verbose level
  --  plooptool_stat(): close file descriptors
  --  ploop convert -f: do not return SYSEXIT_PLOOPFMT
  --  ploop check: fix exit codes
  --  make_fs(): create ext4 fs with 128M journal
  - Improvements:
  --  Support RHEL5/e4fsutils (tune4fs, dumpe4fs) (#2812)
  --  do_lock(): open file in read/write mode (#2730)
  --  ploop_send: use ioctl_device for PLOOP_IOC_SYNC
  --  use access() not stat() where possible
  --  umount.ploop: improve mtab handling
  --  mount.ploop: use case in option parsing
  --  {mount,umount}.ploop: don't hardcore ploop path
  --  ploop-check.c: rename uppercased functions
  --  ploop snapshot-list usage: fit to 80 cols
  --  fsck: use fsck.ext4 not e2fsck (#2812)
  --  check_size(): limit max ploop size to 16T
  --  ploop_resize_image(): fail if umount failed
  --  print_output(): improve output
  --  ploop_mount(): fix/improve error message
  --  dumpe2fs(): don't hardcode path to dumpe2fs
  --  print_output(): use our own default PATH
  --  do_umount(): refactor and improve
  --  do_umount(): eliminate extra 'lsof' call on EBUSY
  --  do_umount(): don't call lsof again if not found
  --  print_output(): check return from pclose()
  --  print_output(): return exit code from command
  --  Fix some wrongly used exit codes
  --  Remove unused exit codes
  - Documentation:
  --  ploop(8): document check, balloon discard, info, list, copy commands
  --  ploop(8): describe exit codes
  --  ploop(8): better resize description
  --  ploop(8): fix ploop umount -d description
  --  ploop(8): fix ploop mount -d description
  --  ploop(8): improve convert description
  --  ploop(8): add missing OPTIONS section
  --  ploop(8): make IMAGE FORMATS a subheader
  --  ploop(8): other small fixes and improvements
  --  ploop usage: improve
  --  ploop usage: update ploop check synopsys
  --  ploop init: fix/improve usage
  --  ploop usage: fix mount/umount/resize
  - Build system:
  --  ploop.spec: require -lib of the same release
  --  ploop.spec: require lsof and findutils
  --  Makefile.inc: add -Wformat-security
  --  Makefile.inc: proper LIBDIR for Debian case
  --  Makefile.inc: add CPPFLAGS to CFLAGS
  --  Makefile.inc: prepend, not append, debug CFLAGS
  --  tools/Makefile: simplify SOURCES define
  --  setver.sh: introduce build id
  --  setver.sh: use getopt
  --  Remove stand-alone binaries: ploop-check, ploop-grow, ploop-merge, ploop-stat, ploop-copy
  --  Makefile: add Coverity generation logic


author: Kir Kolyshkin <kir@openvz.org> 1.11-1
changelog:
  - New functionality and important changes:
  -- support for 4K sector size (including GPT conversion)
  -- ploop replace
  -- temp snapshots support (ploop tsnapshot, ploop_create_temporary_snapshot())
  -- ploop copy: implement fdatasync before freeze (improves CT frozen time)
  -- New DiskDescriptor.xml read API (ploop_*_dd())
  -- Obsolete *_diskdescriptor() calls
  -- Obsolete ploop_get_base_delta_uuid()
  -- ploop_log(): implement subsecond timestamps (with verbosity >= 4)
  -- add ploop_is_mounted()
  -- ploop snapshot-list: add snapshot mode (-s)
  -- ploop check dd.xml: add -u UUID option
  -- ploop mount: remove -u base feature
  -- ploop tool: add -v option to set verbosity
  - Fixes:
  -- skip max fs size check on snapshot delta creation
  -- ploop_resize_image: resize up to end of device
  -- ploop_delete_top_delta(): fix wrt top_guid
  -- ploop_read_diskdescriptor(): fix get_basedir() len argument
  -- check_and_repair_sparse: handle EOF properly (#2897)
  -- ploop_resize_image: add missing gpt size sync
  -- ploop snapshot-merge/delete: deny snapshot deleting if mounted (#2887)
  -- grow_lower_delta(): fix a memory leak
  -- ploop check: fix -b option parsing
  -- get_partition_device_name(): fix chmod argument
  -- fix alignment on GPT partition resize
  -- fix GPT partition alignment on ploop init
  - Improvements:
  -- ploop_resize_image: enhanced inflate balloon to max size logic
  -- tools: add {} to specified UUID if necessary
  -- check_and_repair_sparse(): log filefrag output
  -- print_sys_block_ploop(): speed up
  -- ploop check: try to repair non-top deltas if they can be opened r/w
  -- e2fsck: return fsck exit code to caller
  -- make_fs(): add -i to mkfs
  -- fsync_safe(): use SYSEXIT_FSYNC
  -- Fix uuid strings size, use define
  - Documentation:
  -- ploop snapshot-list: fix and update usage
  -- ploop copy: fix usage
  -- ploop(8): document snapshot-list -s option
  -- ploop(8): document ploop replace
  - Build system:
  -- Makefile.inc: fix dpkg-architecture handling (#2877)
  -- Makefile: add ability to add local rules
  -- gensym.sh: better usage and error diag
  -- gensym.sh: add run mode


author: Kir Kolyshkin <kir@openvz.org> 1.12-1
changelog:
  - New functionality:
  -- ploop copy: implement two-way protocol
  -- ploop copy send: implement async read/send
  -- ploop copy send: add profiling
  -- delete_snapshot(): handle snapshots with multiple refs
  -- tune_fs(): use EXT4_IOC_SET_RSV_BLOCKS if available
  -- Introduce ploop_get_max_size()
  -- Introduce ploop_copy_{send,receive}, obsoleting ploop_{send,receive}
  -- Introduce ploop_create_dd()
  -- ploop info: add -d to show ploop device
  -- ploop_check(): open image RO, reopen RW later
  -- check_and_repair_sparse(): reopen image rw if needed
  - Fixes:
  -- ploop copy: fix open_mount_point err handling
  -- ploop copy: improve fd checks
  -- ploop_store_diskdescriptor: fsync DiskDescriptor.xml upon writing
  -- ploop_resize_image(): handle get_mount_dir() error
  -- ploop_resize_image: auto-mount fs
  -- do_delete_snapshot: fix wrt temp snapshot uuid
  -- ploop_switch_snapshot_ex(): don't return 0 if guid_old is bad
  -- do_delete_snapshot: deny delete top delta in case parent snapshot is temp
  -- merge_temporary_snapshots: fix infinite loop
  -- ploop_switch_snapshot_ex: fixed case with PLOOP_SNAP_SKIP_TOPDELTA_CREATE
  -- ploop_delete_snapshot: fix for temp snapshot
  -- create_snapshot: clear stale top delta inuse flag
  -- e2fsck: make it quiet


author: Kir Kolyshkin <kir@openvz.org> 1.12.1-1
changelog:
  - Fixes:
  -- ploop copy send: fix a race that could result in image corruption
  -- resize: fix resize working on an older (pre 042stab092.1) kernel
  - Improvements:
  -- ploop mount: warn if host filesystem uses data=writeback (#3030)
  -- snapshot-switch: don't show ENOENT remove error
  -- ploop_is_large_disk_supported(): check ploop module first


author: Kir Kolyshkin <kir@openvz.org> 1.12.2-1
changelog:
  - Fixes:
  -- ploop balloon discard: fix wrt 042stab10x kernel (#3156)
  -- ploop_merge_snapshot_by_guid: fix offline merge with raw base image
  -- reread_part(): repeat ioctl if EBUSY (#3081)
  - Improvements:
  -- check_mount_restrictions(): check for all images
  -- ploop check dd.xml: lock dd
  -- ploop check dd.xml: skip check if ploop is used
  -- check_deltas(): read-only check for non-top deltas


author: Kir Kolyshkin <kir@openvz.org> 1.13-1
changelog:
  - New functionality:
  -- snapshot-merge: add -n, merge to new delta ability
  -- Logging to PLOOP_LOG_FILE (if variable is defined during compilation)
  -- ploop restore-descriptor: create dd.xml by image (single image only)
  -- ploop replace: add -k, --keep-name to keep the replaced delta file name
  -- ploop replace: implement offline replace
  -- snapshot-delete: introduce specific SYSEXIT_NOSNAP error
  -- Alternative (incompatible) implementation of ploop copy (C and Python API)
  - Fixes:
  -- ploop_replace_image(): fix wrt level
  -- ploop grow: update size in DiskDescriptor.xml after growing
  -- normalize_image_name(): fix for a corner case
  -- ploop_replace_image(): always unlock dd.xml
  -- {mount,umount}.ploop: fixes for filenames with spaces, tabs etc.
  -- umount.ploop: fix mtab removal (#3164)
  -- umount.ploop: fix for file names with a semicolon
  -- scripts/mount.ploop: don't hardcode paths to modprobe and readlink
  -- ploop_umount(): don't return -1, use SYSEXIT_*
  -- ploop_merge_snapshot_by_guid(): fix error message, don't print (null)
  -- ploop tsnapshot(): fix usage
  -- grow_lower_delta(): fix a memory leak
  -- ploop_merge_snapshot_by_guid(): fix error message
  -- check_snapshot_mount(): add is_device_inuse() check
  - Improvements:
  -- print_sys_block_ploop(): print less info
  -- Remove delta_fops abstraction layer
  -- ploop merge: obsolete/disable form with DD.xml (use snapshot-merge)
  -- ploop snapshot-merge: fix/improve message about merged deltas
  -- find_level_by_delta(): rework/improve
  -- ploop_switch_snapshot(): rm non-const cast
  -- local_delta_open(): make first arg const
  -- [style] ploop_replace_image: reuse oldfile var
  -- merge_image(): document the function
  -- ploop_di_merge_image(): remove last argument
  -- Rename get_child_by_uuid() to find_child_by_guid()
  -- ploop_merge_snapshot_by_guid(): untangle MERGE_WITH_{PARENT,CHILD} mess
  -- ploop_merge_snapshot_by_guid: fix ending message
  -- Rework check_snapshot_mount()
  -- ploop_di_merge_image: fix error messages
  -- ploop_merge_snapshot_by_guid(): fix error message
  - Documentation:
  -- ploop tool: usage formatting fixes
  -- ploop(8): expand description of snapshot-merge
  -- ploop(8): describe replace -k, --keep-name option
  -- ploop(8): describe restore-descriptor command
  -- ploop(8): describe snapshot-merge -n option
  - Build system:
  -- ploop.spec: no perms for symlink
  -- Makefile.inc: add VERSION and RELEASE vars to specify package version
  -- setver.sh: modify to use VERSION/RELEASE from Makefile.inc
  -- setver.sh: add -o, --oldpackage flag


author: Kir Kolyshkin <kir@openvz.org> 1.13.2-1
changelog:
  - Fix online top delta merge/delete (#3215)
  - Fix messages and use-after-free in ploop_merge_snapshot_by_guid()
  - ploop(8): document SYSEXIT_NOSNAP
  - ploop.spec: complete 1.13 changelog


author: Kir Kolyshkin <kir@openvz.org> 1.14-1
changelog:
  - New functionality:
  -- ploop init: add --nolazy
  -- ploop snapshot-merge: add -U
  -- ploop_create_param: add flags, define NOLAZY flag
  -- do_ioctl(): run lsof on EBUSY
  -- Add pkg-config support
  - Fixes:
  -- Fix restore-descriptor for raw images
  -- ploop_get_top_delta_fname(): use ploop_lock(), return SYSEXIT_*
  -- Fix POWER compilation
  -- ploop_create_image(): do not return -1, use SYSEXIT_* code
  -- ploop snapshot-switch: fix SIGSEGV parsing cmdline
  -- is_xml_fname(): fix a potential SIGSEGV
  - Improvements:
  -- do_ioctl(): implement exponential wait time
  -- mount.ploop: check if mtab is not symlink
  -- ploop_replace_image: use mkstemp() not mktemp()
  -- print_sys_block_ploop(): more compact output
  -- ploop_umount_image(): simplify unlock on return
  -- make_fs(): don't hardcode argv index
  -- read_diskdescriptor(): remove
  -- tools/Makefile: fix LDLIBS to avoid overlinking
  - Documentation:
  -- ploop(8): document --nolazy flag for ploop init
  -- ploop(8): document -U for ploop snapshot-merge
  -- include/libploop.h: document mount and snapshot switch params
  - Build system:
  -- Makefiles: move -lpthread to the proper place
  -- ploop.spec: fix a date in %changelog
  -- ploop.spec: no %attr for symlink


author: Kir Kolyshkin <kir@openvz.org> 1.15-1
changelog:
  - New functionality:
  -- ploop defragmentation support using e4defrag2
  -- mount_image: return SYSEXIT_NOSNAP error
  -- Add ploop_get_base_delta_fname()
  -- Allow to create image > 16TB (without filesystem inside)
  - Fixes:
  -- Fix resizing image mounted inside mnt namespace
  -- ploop_get_devs: fix NULL pointer dereference
  -- copy_delta(): avoid double-free
  -- fix infinite loop in ploop balloon discard
  -- Fix compile with gcc-5.3.0
  -- ploop_mount_fs: don't mount ro when finding balloon inode
  -- Remove temp mount point after ploop resize
  -- Repair DiskDescriptot.xml on process PLOOP_MNTN_MERGE stage
  - Improvements:
  -- make_fs(): drop lazy_journal_init
  -- scripts/umount.ploop: rm unused var
  -- do_delete_snapshot(): don't use PLOOP_MERGE_WITH_CHILD
  -- ploop_merge_snapshot_by_guid(): remove merge_mode
  -- balloon.c: no need to include libgen.h
  -- defrag_complete: fix a typo
  -- defrag_complete(): report errors
  -- defrag_complete(): check for cmdline
  -- defrag_complete(): report stale pidfile
  -- gensym.sh: busybox sed compatibility
  -- musl (Alpine Linux) compile fixes
  -- mount_image(): kill flags argument
  -- do_mntn_merge(): fix the check for same file
  -- find_image_idx_by_file: get_basedir() only if needed
  -- discard/defrag: take into account image size change caused by defrag
  - Documentation:
  -- ploop balloon discard: document --defrag
  -- ploop(8): document --defrag
  - Build system:
  -- setver.sh: fix a typo


author: Kir Kolyshkin <kir@openvz.org> - 4.6.1-1
changelog:
  - Fixes:
  -- vzctl set: require swap to be set for VSwap
  -- fill_vswap_ub(): fix a potential segfault
  -- ndsend: clear reserved2 field (#2804)
  -- vzubc: fix to work in old mawk (#2793)
  -- vzlist: fix bogus CTIDs in list (#2830)
  -- vzctl start: don't fail if VE_ROOT does not exist (#2807)


author: Kir Kolyshkin <kir@openvz.org> - 4.7-1
changelog:
  - New functionality and important changes:
  -- Disable conntrack for VE0 by default (#2755)
  -- vzctl set --diskspace: add --offline-resize (#2281)
  -- vzctl create: use ploop by default
  -- vzctl create, vzctl convert: honor diskinodes for ploop (#2898)
  -- vzctl create: add --diskinodes
  -- vzctl set: new option --netfilter to replace --iptables
  -- vzmigrate: support for copying CT dump file
  -- vzmigrate: introduce/use vzfsync for ploop (to shorten CT freeze time)
  -- bash-completion: CTIDs on ploop for compact
  -- vzctl create: honor MOUNT_OPTS
  -- vzctl console: add set_console dist script (#2865)
  -- vzctl snapshot-switch: add --skip_arpdetect option
  -- vzctl snapshot-switch: add --skip-resume, --skip-config
  -- vzctl set --diskinodes, DISKINODES: allow suffixes (KMG)
  -- vzpid: new option "-p" to show in-container PID(s)
  -- etc/vz.conf: add SKIP_ARPDETECT example
  -- etc/vz.conf: use ploop by default
  -- etc/vz.conf: use vswap config by default
  -- etc/vz.conf: merge IP6TABLES to IPTABLES_MODULES
  - Fixes:
  -- vzctl destroy: fix locking (#2814)
  -- debian-add_ip.sh: setup loopback device at least (#2859)
  -- vzctl start --wait: fix for non-standard Debian 7
  -- postcreate.sh: add Fedora 20+
  -- postcreate.sh: set file caps for suse 13.1+
  -- vzmigrate: fix ploop for diff VE_PRIVATE case (#2875)
  -- vzmigrate: hide ploop getdev output
  -- vzctl status, snapshot-list: don't mess with stdout even when verbose
  -- vzlist: don't spoil output with ploop messages
  -- logger.c: fix wrt ploop logging
  -- etc/network/if-up.d/vzifup-post: fix for Debian Wheezy (#2914)
  -- hooks_ct.c: bind-mount root to itself (fix for kernel v3.11+)
  -- hooks_ct: mount /proc and /sys before umounting old root
  -- bash_completion: replace exit with return
  -- bash_completion.d: add --quiet to vzctl
  -- vzmigrate: call vzctl status with --quiet
  -- vzcptcheck: fix program name in usage
  - Improvements:
  -- add_reach_runlevel_mark(): improve error messages
  -- set(): don't ignore fail from fill_vswap_ub()
  -- vzctl restore: warn in CPT_SET_LOCKFD2 not supported
  -- config.c: add SKIP_ARPDETECT to ignored list
  -- vzmigrate: lock CT locally
  -- vzmigrate --live: check for running CT earlier
  -- destroy_dump(): don't log "Removing" if no dump
  -- etc/conf/*sample: tune DISKINODES for ploop diskspace/diskinodes ratio
  -- etc/conf/ve-unlimited.conf-sample: remove
  -- hooks_ct: remove non-working devpts mount
  -- hooks_ct: mount devtmpfs in CT
  -- ct_chroot(): do not change a set of CT0's mounts
  -- parse_netif_str(): improve NETIF= param parsing
  -- setup_hardlink_dir(): show error if mkdir() failed
  - Documentation:
  -- vzctl(8): document MAX_VEID (#2784)
  -- vzctl --help: fix convert synopsys
  - Build system:
  -- setver.sh: rework buildid
  -- setver.sh: make it work on fresh git source
  -- autogen.sh, setver.sh: fix build from screwed git repo
  -- vzctl.spec: require bridge-utils (as we use brctl)


author: Kir Kolyshkin <kir@openvz.org> - 4.7.2-1
changelog:
  - vzlist: don't complain about missing ploop-lib (#2952)
  - setup_console: don't execute on older kernels (#2961)
  - clean_hardlink_dir(): note unlink/rmdir errors
  - vzctl(8): fix a typo


author: Kir Kolyshkin <kir@openvz.org> - 4.8-1
changelog:
  - New functionality and important changes:
  -- vzctl set: add NUMA --nodemask (sponsored by FastVPS)
  -- vzmigrate: speed up by using se ploop copy with feedback if available
  -- vzmigrate: speed up by reusing ssh connection
  -- init.d/vz: show CT stop status
  -- init.d/vz: implement parallel CT start (#2954, #2084)
  -- init.d/vz, vz.conf: use/expose VE_PARALLEL
  -- vzctl start,restore: add --skip-remount
  -- vzctl snapshot-switch: add --must-restore
  -- vzmigrate: ability to run ploop copy with timestamps
  - Fixes:
  -- vzctl.spec: disable VE0 conntracks only if unused (#2755)
  -- vzmigrate: fix for --snapshot (#2907)
  -- vzmigrate: don't run vzfsync if there is no need (#3055)
  -- vzmigrate: undo_lock if check_cpt_props failed
  -- vzmigrate: don't exit 1 on success
  -- vzlist: fix showing DISABLED (#3029)
  -- vzlist: fix cpulimit rounding (#3063)
  -- redhat-set_hostname.sh: fix for F15+/RHEL7 (#3051)
  -- vzctl compact: use built-in PATH (#2990)
  -- postcreate.sh: fix caps for suexec
  - Improvements:
  -- debian-add_ip.sh: support for Ubuntu 14.04
  -- postcreate.sh: add RHEL7/CentOS7 support
  -- vzctl create --diskinodes: check for max ploop size
  -- vzctl set --ostemplate: require --save (#2909)
  -- vzmigrate: don't specify default cipher
  -- vzmigrate: use getopt for option parsing
  -- vzmigrate: detect "can't lock CT" error
  -- vzmigrate: don't use rsync --delete-excluded
  -- cpumask: allow for up to 4096 CPUs
  -- vz_setcpu(): don't ignore errors from set_cpu*
  -- fixed a few memory leaks and non-closed fds reported by Coverity
  -- compare_osrelease(): fix for 3.x kernels
  -- parse_{chkpnt,restore}_opt: don't print error twice
  -- parse*opt(): add/improve extra args check
  -- vzctl create: improve "no ploop" error message
  - Documentation:
  -- vznnc(8): add
  -- vzctl --help: fix iolimit
  -- vzctl(8): document set --ostemplate (#2909)
  -- vzctl(8): add --nodemask, --must-restore, --skip-remount
  -- vzctl(8): improve --netfilter
  -- vz.conf(5): document VE_PARALLEL
  -- vzmigrate(8), vzmigrate --help: document --ssh-mux
  - Build system:
  -- setver.sh: check for ./configure to run autogen
  -- setver.sh: abort if autogen.sh/configure fails


author: Kir Kolyshkin <kir@openvz.org> - 4.9-1
changelog:
  - New functionality and important changes:
  -- vzmigrate: check CPU caps for suspended CT
  -- suse-{add,del}_ip.sh: support for IP mask
  -- vz.conf: allow list of interfaces in NEIGHBOUR_DEVS (#1289, #3192)
  -- Introduce funtoo-set_hostname (#3097)
  -- vz-postinstall: add a way to disable stock distro kernels from repos
  -- vzctl set --devnodes|--devices: made cumulative, fix
  -- vzctl set --devnodes: remove devices from CT
  -- vzctl start/resume: load kernel modules needed for CT
  -- vzctl create: disallow VE_PRIVATE be a mount point (#3166)
  -- vzevent: try to run a script for all known events
  -- vzctl restore|resume: add --skip-fsck
  - Fixes:
  -- redhat-add_ip.sh: support for Fedora 21 and RHEL/CentOS 7.1 (#3169)
  -- vzctl snapshot-delete: ignore ploop 'no guid found'
  -- suse-add_ip.sh: fix for venet routing in SUSE 13.2
  -- osrelease.conf: add suse 13.2
  -- vzctl chkpnt: workaround for ENOSPC
  -- ct_enter(): enter mnt namespace last (#3038)
  -- vzmigrate: fix for vzfsync if VE_PRIVATE differs (#3170)
  -- init.d/vz-gentoo: fix a typo
  -- vzctl.spec: fix iptables checking for RHEL5 (#2755)
  -- vzmigrate: use DUMPDIR for CT dump (#3054)
  -- vzmigrate: don't hardcode /vz/lock, use LOCKDIR (#2976)
  -- vzmigrate: use C locale (#3049)
  -- vzlist: fix cpuunits rounding (#3120)
  -- snapshot-switch --must-restore: fix restoring config
  -- fs_create: lock private
  -- vps_create: minor fixes to cleanup logic
  -- make_dir_mode(): ignore EEXIST from mkdir()
  -- vzlist -j: output valid JSON for no CTs
  -- init.d/vz-redhat: fix exit codes according to LSB (#3195)
  - Improvements:
  -- vzmigrate: random ports for ploop copy (#3052)
  -- vzctl start: close extra fds later (#3091)
  -- vzctl start: mkdir /proc in CT if needed (#3091)
  -- vzctl create: fix an error message
  -- vzctl.spec: require recent RHEL6 kernel (#3094)
  -- init.d/vz*: load pio_kaio
  -- suse-add_ip.sh: fix a warning
  -- suse-del_ip.sh: remove venet routes
  -- init.d/vz-redhat: fix a bashism (#3148)
  -- vzctl delete: do rm config/dump even if failed to rm VE_PRIVATE
  -- dists/scripts/{funtoo,gentoo}*: remove env var doc
  -- debian-add_ip.sh: silent an error
  -- vzeventd: ignore non-existent event scripts
  - Documentation:
  -- vzeventd(8): document new behavior
  -- vzcptcheck(8): describe caps check w/o CTID
  -- vz.conf(5): describe new NEIGHBOUR_DEV syntax


author: Kir Kolyshkin <kir@openvz.org> - 4.9.1-1
changelog:
  - create_hardlink_dir(): fix wrong owner/perms case (#3222)
  - vzctl.spec: drop the "Conflicts: vzkernel" (#3219)


author: Kir Kolyshkin <kir@openvz.org> - 4.9.2-1
changelog:
  - store_devnodes: fix NULL deref (#3228)
  - vps-create.sh: use stat -f instead of df
  - vzctl.spec: require attr package


author: Kir Kolyshkin <kir@openvz.org> - 4.9.3-1
changelog:
  - set_console.sh: ubuntu 15.04 systemd console support
  - vzoversell: handle unlimited RAM CTs
  - vzctl umount: fix exit code if CT is running
  - vz.conf, vps-net_add: add FORCE_ROUTE to change existing route to CT


author: Kir Kolyshkin <kir@openvz.org> - 4.10-1
changelog:
  - postcreate.sh: support for Debian 8/Ubuntu 15.04+ xattrs
  - vzctl create: add pigz support (if available)
  - vzlist: add netfilter, capability output fields
  - compilation fixes for Alpine Linux / musl libc
  - vzctl destroy: handle the semi-mounted ploop
  - vzubc: allow for more than 999%


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.24.1.el6]
changelog:
  - [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
  - [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
  - [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
  - [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
  - [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
  - [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.25.1.el6]
changelog:
  - [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
  - [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
  - [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
  - [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
  - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.26.1.el6]
changelog:
  - [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
  - [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
  - [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.27.1.el6]
changelog:
  - [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.28.1.el6]
changelog:
  - [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
  - [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
  - [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
  - [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
  - [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
  - [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
  - [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
  - [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.29.1.el6]
changelog:
  - [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
  - [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
  - binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.30.1.el6]
changelog:
  - [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
  - [netdrv] bonding: don't set slave->link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
  - [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.30.2.el6]
changelog:
  - x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}


author: Dmitry Mishin <dim-at-openvz.org> 3.0.9-1
changelog:
  - added README and NEWS files
  - deleted debian directory (requested by debian package maintainers)
  - fixed compilation on ppc64 platform.


author: Andy Shevchenko <andriy@asplinux.com.ua> - 3.0.9-1
changelog:
  - fixed according to Fedora Packaging Guidelines:
    - use dist tag
    - removed Vendor tag
    - added URL tag
    - use full url for source
    - changed BuildRoot tag


author: Kir Kolyshkin <kir@openvz.org> - 3.1-1
changelog:
  - New functionality:
  - * vzdqdump, vzdqload: add -F to dump/load first level quotas
  - Fixes:
  - * Make ext4 delalloc work with vzquota (#2035)
  - * fix quota init fail then run from deleted directory
  - * fix building with fresh toolchain (#1357 etc.)
  - * skip quota file locking on 'vzquota show' action
  - * fix to work with more than 1 TB quotas
  - * correct exit code in case quota file does not exist
  - * minor code style fixes
  - * whitespace cleanups
  - Improvements:
  - * quota on: more info on failed quota on with EEXIST
  - * quota off: enable detailed info on fail by default
  - * quota off: add processing EIO
  - * man/*: assorted fixes and formatting improvements
  - * man/vzquota: minor improvements (#2310)
  - * vzdqdump, vzdqload: fix typo in usage
  - * Makefile: Don't strip executable, respect LDFLAGS (#1191)


author: Kir Kolyshkin <kir@openvz.org> - 0.2.1-1
changelog:
  - fixed compatibility with older (as of RHEL5/4) userspace
  - stricter checks for scripts permission and ownership


author: Kir Kolyshkin <kir@openvz.org> - 0.3.1-1
changelog:
  - add options --help, --view, --enable, --disable and --status
  - add vzstats(8) man page
  - add lsbrelease script
  - improve vzlist script to work with older vzctl releases
  - add proxy discovery code
  - add bash_completion script


author: Kir Kolyshkin <kir@openvz.org> - 0.4-1
changelog:
  - added top-ps script
  - fix vzversion-arch for openvz kernel names (#2596)
  - make sure sbin paths are in PATH before running scripts
  - exit with error if run inside CT
  - increased curl timeout from 3s to 10s
  - vzstats.spec: run trigger in background
  - Makefile: support for configurable paths (see Makefile.paths)
  - Makefile: substitute version from spec to script
  - Makefile: add install-all target, use it from spec


author: Kir Kolyshkin <kir@openvz.org> - 0.5-1
changelog:
  - enabled SSL when sending reports to stats.openvz.org
  - removed lspci script
  - bin/top-ps: add --quiet to vzctl exec
  - increased curl timeout to 30s


author: Kir Kolyshkin <kir@openvz.org> - 0.5.3-1
changelog:
  - vzstats.conf should not be executable (#2758)
  - Scripts shall start with hash-bang (#2757)
  - added pstorage packages


