news: add note about new virt-ssh-helper binary

[libvirt PATCH] news: add note about new virt-ssh-helper binary

Posted by Daniel P. Berrangé 3 years, 6 months ago

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
---
 NEWS.rst | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/NEWS.rst b/NEWS.rst
index e992fbe471..13d2ff1d2f 100644
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -32,6 +32,19 @@ v6.8.0 (unreleased)
     can now be passed using the ``passwd`` attribute on
     the ``<graphics>`` element.
 
+  * remote: ``virt-ssh-helper`` replaces ``nc`` for SSH tunnelling
+
+    Libvirt now provides a ``virt-ssh-helper`` binary on the server
+    side. The libvirt remote client will use this binary for setting
+    up an SSH tunnelled connection to hosts. If not present, it will
+    transparently fallback to the traditional ``nc`` tunnel. The new
+    binary makes it possible for libvirt to transparently connect
+    across hosts even if libvirt is built with a different installation
+    prefix on the client vs server. It also enables remote access to
+    the unprivileged per-user libvirt daemons(eg using a URI such as
+    ``qemu+ssh://hostname/session``. The only requirement is that
+    ``virt-ssh-helper`` is present in $PATH of the remote host.
+
 * **Improvements**
 
   * qemu: Allow migration over UNIX sockets
-- 
2.26.2

Re: [libvirt PATCH] news: add note about new virt-ssh-helper binary

Posted by Andrea Bolognani 3 years, 6 months ago

On Thu, 2020-09-24 at 16:00 +0100, Daniel P. Berrangé wrote:
> +  * remote: ``virt-ssh-helper`` replaces ``nc`` for SSH tunnelling
> +
> +    Libvirt now provides a ``virt-ssh-helper`` binary on the server
> +    side. The libvirt remote client will use this binary for setting
> +    up an SSH tunnelled connection to hosts. If not present, it will
> +    transparently fallback to the traditional ``nc`` tunnel. The new
> +    binary makes it possible for libvirt to transparently connect
> +    across hosts even if libvirt is built with a different installation
> +    prefix on the client vs server. It also enables remote access to
> +    the unprivileged per-user libvirt daemons(eg using a URI such as

s/daemons(eg/daemons (eg./

> +    ``qemu+ssh://hostname/session``. The only requirement is that

s/session``/session``)/

> +    ``virt-ssh-helper`` is present in $PATH of the remote host.

s/$PATH/``$PATH``/

With these nits addressed,

  Reviewed-by: Andrea Bolognani <abologna@redhat.com>

and safe for freeze.

-- 
Andrea Bolognani / Red Hat / Virtualization