|
| 1 | +--- |
| 2 | +title: "Cloud Hypervisor v41.0 Released!" |
| 3 | +date: 2024-08-16T12:17:19Z |
| 4 | +draft: false |
| 5 | +contributors: [Cloud Hypervisor Team] |
| 6 | +--- |
| 7 | +This release has been tracked in our [roadmap |
| 8 | +project](https://github.com/orgs/cloud-hypervisor/projects/6) as iteration |
| 9 | +v41.0. The following user visible changes have been made: |
| 10 | + |
| 11 | +### Experimental "Pvmemcontrol" Support |
| 12 | + |
| 13 | +VMM support has been added for this experimental functionality (requires |
| 14 | +currently out of tree Linux kernel patches) to allow guests to control its |
| 15 | +physical memory properties to allow optimisations and security features. |
| 16 | +(#6318, #6467) |
| 17 | + |
| 18 | +### Sandboxing With Landlock Support |
| 19 | + |
| 20 | +Support for restricting the VMM process using the Linux kernel "Landlock" API |
| 21 | +has been added - this can be used to restrict the files (and the read/write |
| 22 | +permissions) that the VMM process can access. This adds another layer of |
| 23 | +security alongside the existing sycall filters (`seccomp`) - this can be |
| 24 | +enabled with `--landlock` and [fully documentated](docs/landlock.md). (#5170) |
| 25 | + |
| 26 | +### Notable Performance Improvements |
| 27 | + |
| 28 | +* Reduced heap allocations in `virtio-net` via the use of a cache of `Iovec` |
| 29 | + structures (#6636) |
| 30 | +* Notification suppression ("`EVENT_IDX`") support has been added to |
| 31 | + `virtio-block` giving a 60% improvement in single queue block throughput and |
| 32 | + IOPs performance (#6580) |
| 33 | +* Correct size used for `status` field in `virtio-block` state (#6586) |
| 34 | + |
| 35 | +### Notable Bug Fixes |
| 36 | + |
| 37 | +* Avoid panic on out-of-bounds PCI MSI-X access (#6657) |
| 38 | +* Fix undefined behaviour on AArch64 leading to wrong optimisation on KVM API |
| 39 | + access (#6647) |
| 40 | +* Rust v1.80.0 added use of `fcntl` syscall on debug assertions so this is now |
| 41 | + included in the virtio-device seccomp filters for tests that use this (#6648) |
| 42 | +* Short reads are now handled correctly in the `virtio-vsock` device (#6621) |
| 43 | +* Fix undefined behaviour on TTY ioctl leading to wrong optimisation (#6568) |
| 44 | + |
| 45 | +### Contributors |
| 46 | + |
| 47 | +Many thanks to everyone who has contributed to our release: |
| 48 | + |
| 49 | + |
| 50 | + |
| 51 | +* Changyuan Lyu <[email protected]> |
| 52 | + |
| 53 | +* Julian Stecklina < [email protected]> |
| 54 | +* Muminul Islam <[email protected]> |
| 55 | +* Nuno Das Neves <[email protected]> |
| 56 | +* Praveen K Paladugu <[email protected]> |
| 57 | +* Rob Bradford <[email protected]> |
| 58 | + |
| 59 | + |
| 60 | + |
| 61 | + |
| 62 | + |
| 63 | +### Download |
| 64 | + See the <a href="https://github.com/cloud-hypervisor/cloud-hypervisor/releases/tag/v41.0">GitHub Release</a> for the release assets. |
0 commit comments