Tags

Tags give the ability to mark specific points in history as being important

  • v0.1.1

    protected
    d644eb7b · test: restore the 10 minute connect timeout; a rejected login still hangs ·
    Release: fleeting-plugin-libvirt v0.1.1 
    fleeting-plugin-libvirt v0.1.1

Tests and documentation; no change to plugin behaviour or configuration.

- Ships fleeting's provider integration test (`integration.TestProvisioning`). It is skipped unless `FLEETING_LIBVIRT_BASE_VOLUME` is set; run it with `just integration` (see CONTRIBUTING.md). A failed run removes the instances it left under the name prefix.
- README: the docker-autoscaler executor needs a docker CLI in the guest image (`podman-docker` on a podman guest).
- SECURITY.md and README: VF `spoofchk` stops MAC spoofing only; ARP and IP protection needs a libvirt network interface with `nwfilter`.
- Releases are now also published on the GitHub mirror.

Install: `registry.gitlab.com/dunn.dev/fleeting-plugin-libvirt:0.1.1` (aliases `0.1`, `0`, `latest`).

Verify:

```
cosign verify \
  --certificate-identity-regexp '^https://gitlab\.com/dunn\.dev/fleeting-plugin-libvirt//\.gitlab-ci\.yml@refs/tags/.+$' \
  --certificate-oidc-issuer https://gitlab.com \
  registry.gitlab.com/dunn.dev/fleeting-plugin-libvirt:0.1.1
```

Before 1.0, a minor release (0.2) may rename, remove or change a `plugin_config` key; a patch release (0.1.x) never does. Each break is listed in that release's notes with the change to make.

  • v0.1.0

    protected
    7ac8024b · docs: a guest's DHCP server can deny a sibling service, not divert it ·
    Release: fleeting-plugin-libvirt v0.1.0 
    fleeting-plugin-libvirt v0.1.0

First release. A fleeting plugin that runs each instance as a transient libvirt VM on a qcow2 overlay of one base volume, for GitLab Runner's autoscaler and forgehand.

- One VM per instance, removed by libvirt when it stops; volumes deleted with it.
- UEFI and Secure Boot, a vTPM (`tpm`), and PCI passthrough from a pool of `vfio-pci` devices (`pci_devices`). Nested KVM works with no key.
- Opt-in `nwfilter` and `nwfilter_parameters` to attach a libvirt nwfilter such as `clean-traffic`; see Guest network in the README.
- Local unix socket only; remote libvirt transports are refused.

Install: `registry.gitlab.com/dunn.dev/fleeting-plugin-libvirt:0.1.0` (aliases `0.1`, `0`, `latest`).

Verify:

```
cosign verify \
  --certificate-identity-regexp '^https://gitlab\.com/dunn\.dev/fleeting-plugin-libvirt//\.gitlab-ci\.yml@refs/tags/.+$' \
  --certificate-oidc-issuer https://gitlab.com \
  registry.gitlab.com/dunn.dev/fleeting-plugin-libvirt:0.1.0
```

Before 1.0, a minor release (0.2) may rename, remove or change a `plugin_config` key; a patch release (0.1.x) never does. Each break is listed in that release's notes with the change to make.