* SEV refactoring (David) * Hyper-V initial support (Jon) * i386 TCG fixes (x87 and SSE, Joseph) * vmport cleanup and improvements (Philippe, Liran) * Use-after-free with vCPU hot-unplug (Nengyuan) * run-coverity-scan improvements (myself) * Record/replay fixes (Pavel) * -machine kernel_irqchip=split improvements for INTx (Peter) * Code cleanups (Philippe) * Crash and security fixes (PJP) * HVF cleanups (Roman) -----BEGIN PGP SIGNATURE----- iQFIBAABCAAyFiEE8TM4V0tmI4mGbHaCv/vSX3jHroMFAl7jpdAUHHBib256aW5p QHJlZGhhdC5jb20ACgkQv/vSX3jHroMfjwf/X7+0euuE9dwKFKDDMmIi+4lRWnq7 gSOyE1BYSfDIUXRIukf64konXe0VpiotNYlyEaYnnQjkMdGm5E9iXKF+LgEwXj/t NSGkfj5J3VeWRG4JJp642CSN/aZWO8uzkenld3myCnu6TicuN351tDJchiFwAk9f wsXtgLKd67zE8MLVt8AP0rNTbzMHttPXnPaOXDCuwjMHNvMEKnC93UeOeM0M4H5s 3Dl2HvsNWZ2SzUG9mAbWp0bWWuoIb+Ep9//87HWANvb7Z8jratRws18i6tYt1sPx 8zOnUS87sVnh1CQlXBDd9fEcqBUVgR9pAlqaaYavNhFp5eC31euvpDU8Iw== =F4sU -----END PGP SIGNATURE----- Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into staging * Miscellaneous fixes and feature enablement (many) * SEV refactoring (David) * Hyper-V initial support (Jon) * i386 TCG fixes (x87 and SSE, Joseph) * vmport cleanup and improvements (Philippe, Liran) * Use-after-free with vCPU hot-unplug (Nengyuan) * run-coverity-scan improvements (myself) * Record/replay fixes (Pavel) * -machine kernel_irqchip=split improvements for INTx (Peter) * Code cleanups (Philippe) * Crash and security fixes (PJP) * HVF cleanups (Roman) # gpg: Signature made Fri 12 Jun 2020 16:57:04 BST # gpg: using RSA key F13338574B662389866C7682BFFBD25F78C7AE83 # gpg: issuer "pbonzini@redhat.com" # gpg: Good signature from "Paolo Bonzini <bonzini@gnu.org>" [full] # gpg: aka "Paolo Bonzini <pbonzini@redhat.com>" [full] # Primary key fingerprint: 46F5 9FBD 57D6 12E7 BFD4 E2F7 7E15 100C CD36 69B1 # Subkey fingerprint: F133 3857 4B66 2389 866C 7682 BFFB D25F 78C7 AE83 * remotes/bonzini/tags/for-upstream: (116 commits) target/i386: Remove obsolete TODO file stubs: move Xen stubs to accel/ replay: fix replay shutdown for console mode exec/cpu-common: Move MUSB specific typedefs to 'hw/usb/hcd-musb.h' hw/usb: Move device-specific declarations to new 'hcd-musb.h' header exec/memory: Remove unused MemoryRegionMmio type checkpatch: reversed logic with acpi test checks target/i386: sev: Unify SEVState and SevGuestState target/i386: sev: Remove redundant handle field target/i386: sev: Remove redundant policy field target/i386: sev: Remove redundant cbitpos and reduced_phys_bits fields target/i386: sev: Partial cleanup to sev_state global target/i386: sev: Embed SEVState in SevGuestState target/i386: sev: Rename QSevGuestInfo target/i386: sev: Move local structure definitions into .c file target/i386: sev: Remove unused QSevGuestInfoClass xen: fix build without pci passthrough i386: hvf: Drop HVFX86EmulatorState i386: hvf: Move mmio_buf into CPUX86State i386: hvf: Move lazy_flags into CPUX86State ... Signed-off-by: Peter Maydell <peter.maydell@linaro.org> # Conflicts: # hw/i386/acpi-build.c
131 lines
3 KiB
Docker
131 lines
3 KiB
Docker
# syntax=docker/dockerfile:1.0.0-experimental
|
|
#
|
|
# Docker setup for running the "Coverity Scan" tools over the source
|
|
# tree and uploading them to the website, as per
|
|
# https://scan.coverity.com/projects/qemu/builds/new
|
|
# We do this on a fixed config (currently Fedora 30 with a known
|
|
# set of dependencies and a configure command that enables a specific
|
|
# set of options) so that random changes don't result in our accidentally
|
|
# dropping some files from the scan.
|
|
#
|
|
# We don't build on top of the fedora.docker file because we don't
|
|
# want to accidentally change or break the scan config when that
|
|
# is updated.
|
|
|
|
# The work of actually doing the build is handled by the
|
|
# run-coverity-scan script.
|
|
|
|
FROM fedora:30
|
|
ENV PACKAGES \
|
|
alsa-lib-devel \
|
|
bc \
|
|
brlapi-devel \
|
|
bzip2 \
|
|
bzip2-devel \
|
|
ccache \
|
|
clang \
|
|
curl \
|
|
cyrus-sasl-devel \
|
|
dbus-daemon \
|
|
device-mapper-multipath-devel \
|
|
findutils \
|
|
gcc \
|
|
gcc-c++ \
|
|
gettext \
|
|
git \
|
|
glib2-devel \
|
|
glusterfs-api-devel \
|
|
gnutls-devel \
|
|
gtk3-devel \
|
|
hostname \
|
|
libaio-devel \
|
|
libasan \
|
|
libattr-devel \
|
|
libblockdev-mpath-devel \
|
|
libcap-devel \
|
|
libcap-ng-devel \
|
|
libcurl-devel \
|
|
libepoxy-devel \
|
|
libfdt-devel \
|
|
libgbm-devel \
|
|
libiscsi-devel \
|
|
libjpeg-devel \
|
|
libpmem-devel \
|
|
libnfs-devel \
|
|
libpng-devel \
|
|
librbd-devel \
|
|
libseccomp-devel \
|
|
libssh-devel \
|
|
libubsan \
|
|
libudev-devel \
|
|
libusbx-devel \
|
|
libxml2-devel \
|
|
libzstd-devel \
|
|
llvm \
|
|
lzo-devel \
|
|
make \
|
|
mingw32-bzip2 \
|
|
mingw32-curl \
|
|
mingw32-glib2 \
|
|
mingw32-gmp \
|
|
mingw32-gnutls \
|
|
mingw32-gtk3 \
|
|
mingw32-libjpeg-turbo \
|
|
mingw32-libpng \
|
|
mingw32-libtasn1 \
|
|
mingw32-nettle \
|
|
mingw32-nsis \
|
|
mingw32-pixman \
|
|
mingw32-pkg-config \
|
|
mingw32-SDL2 \
|
|
mingw64-bzip2 \
|
|
mingw64-curl \
|
|
mingw64-glib2 \
|
|
mingw64-gmp \
|
|
mingw64-gnutls \
|
|
mingw64-gtk3 \
|
|
mingw64-libjpeg-turbo \
|
|
mingw64-libpng \
|
|
mingw64-libtasn1 \
|
|
mingw64-nettle \
|
|
mingw64-pixman \
|
|
mingw64-pkg-config \
|
|
mingw64-SDL2 \
|
|
ncurses-devel \
|
|
nettle-devel \
|
|
nss-devel \
|
|
numactl-devel \
|
|
perl \
|
|
perl-Test-Harness \
|
|
pixman-devel \
|
|
pulseaudio-libs-devel \
|
|
python3 \
|
|
python3-sphinx \
|
|
PyYAML \
|
|
rdma-core-devel \
|
|
SDL2-devel \
|
|
snappy-devel \
|
|
sparse \
|
|
spice-server-devel \
|
|
systemd-devel \
|
|
systemtap-sdt-devel \
|
|
tar \
|
|
texinfo \
|
|
usbredir-devel \
|
|
virglrenderer-devel \
|
|
vte291-devel \
|
|
wget \
|
|
which \
|
|
xen-devel \
|
|
xfsprogs-devel \
|
|
zlib-devel
|
|
ENV QEMU_CONFIGURE_OPTS --python=/usr/bin/python3
|
|
|
|
RUN dnf install -y $PACKAGES
|
|
RUN rpm -q $PACKAGES | sort > /packages.txt
|
|
ENV PATH $PATH:/usr/libexec/python3-sphinx/
|
|
ENV COVERITY_TOOL_BASE=/coverity-tools
|
|
COPY coverity_tool.tgz coverity_tool.tgz
|
|
RUN mkdir -p /coverity-tools/coverity_tool && cd /coverity-tools/coverity_tool && tar xf /coverity_tool.tgz
|
|
COPY run-coverity-scan run-coverity-scan
|