From 5896dd943dfa4dea0db8a5c48d065400a24b5a95 Mon Sep 17 00:00:00 2001
From: Frank Brehm <frank@brehm-online.com>
Date: Fri, 18 Nov 2022 00:29:36 +0100
Subject: [PATCH] saving uncommitted changes in /etc prior to apt run

---
 .etckeeper                                    |   3 +
 ...bvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c |  11 +
 ...7676f318-2b9a-4d6f-9762-bbae648d6b8c.files |  12 ++
 hosts                                         |   5 +-
 libvirt/qemu/rocky9.xml                       | 188 ++++++++++++++++++
 5 files changed, 217 insertions(+), 2 deletions(-)
 create mode 100644 apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c
 create mode 100644 apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files
 create mode 100644 libvirt/qemu/rocky9.xml

diff --git a/.etckeeper b/.etckeeper
index b7ccf74..454e653 100755
--- a/.etckeeper
+++ b/.etckeeper
@@ -415,6 +415,8 @@ maybe chmod 0644 'apparmor.d/libvirt/TEMPLATE.lxc'
 maybe chmod 0644 'apparmor.d/libvirt/TEMPLATE.qemu'
 maybe chmod 0644 'apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a'
 maybe chmod 0644 'apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files'
+maybe chmod 0644 'apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c'
+maybe chmod 0644 'apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files'
 maybe chmod 0644 'apparmor.d/lightdm-guest-session'
 maybe chmod 0755 'apparmor.d/local'
 maybe chmod 0644 'apparmor.d/local/README'
@@ -2458,6 +2460,7 @@ maybe chmod 0600 'libvirt/qemu/centos-stream9.xml'
 maybe chmod 0755 'libvirt/qemu/networks'
 maybe chmod 0755 'libvirt/qemu/networks/autostart'
 maybe chmod 0600 'libvirt/qemu/networks/default.xml'
+maybe chmod 0600 'libvirt/qemu/rocky9.xml'
 maybe chmod 0700 'libvirt/secrets'
 maybe chmod 0755 'libvirt/storage'
 maybe chmod 0755 'libvirt/storage/autostart'
diff --git a/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c b/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c
new file mode 100644
index 0000000..764e9e2
--- /dev/null
+++ b/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c
@@ -0,0 +1,11 @@
+#
+# This profile is for the domain whose UUID matches this file.
+#
+
+#include <tunables/global>
+
+profile libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c flags=(attach_disconnected) {
+  #include <abstractions/libvirt-qemu>
+  #include <libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files>
+
+}
diff --git a/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files b/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files
new file mode 100644
index 0000000..8b9c4e7
--- /dev/null
+++ b/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files
@@ -0,0 +1,12 @@
+# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
+  "/var/log/libvirt/**/rocky9.log" w,
+  "/var/lib/libvirt/qemu/domain-rocky9/monitor.sock" rw,
+  "/var/lib/libvirt/qemu/domain-3-rocky9/*" rw,
+  "/run/libvirt/**/rocky9.pid" rwk,
+  "/run/libvirt/**/*.tunnelmigrate.dest.rocky9" rw,
+  "/var/lib/images/rocky9.qcow2" rwk,
+  "/dev/vhost-net" rw,
+  "/var/lib/libvirt/qemu/domain-3-rocky9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/channel/target/domain-3-rocky9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/domain-3-rocky9/master-key.aes" rwk,
+  "/dev/net/tun" rwk,
diff --git a/hosts b/hosts
index 4ea6674..63da44c 100644
--- a/hosts
+++ b/hosts
@@ -12,7 +12,8 @@ ff02::2 ip6-allrouters
 
 # 10.12.11.2	bruni
 10.12.11.63	nadja
-10.12.11.65	hp-color-laserjet.brehm-online.com hp-color-laserjet
+10.12.11.65	hp-color-laserjet.brehm-online.com	hp-color-laserjet
 186.2.163.124	bs.to
-10.12.11.109	centos9
+10.12.11.109	centos9.brehm-online.com		centos9
+10.12.11.117	rocky9.brehm-online.com			rocky9
 
diff --git a/libvirt/qemu/rocky9.xml b/libvirt/qemu/rocky9.xml
new file mode 100644
index 0000000..650eeae
--- /dev/null
+++ b/libvirt/qemu/rocky9.xml
@@ -0,0 +1,188 @@
+<!--
+WARNING: THIS IS AN AUTO-GENERATED FILE. CHANGES TO IT ARE LIKELY TO BE
+OVERWRITTEN AND LOST. Changes to this xml configuration should be made using:
+  virsh edit rocky9
+or other application using the libvirt API.
+-->
+
+<domain type='kvm'>
+  <name>rocky9</name>
+  <uuid>7676f318-2b9a-4d6f-9762-bbae648d6b8c</uuid>
+  <metadata>
+    <libosinfo:libosinfo xmlns:libosinfo="http://libosinfo.org/xmlns/libvirt/domain/1.0">
+      <libosinfo:os id="http://rockylinux.org/rocky/9-unknown"/>
+    </libosinfo:libosinfo>
+  </metadata>
+  <memory unit='KiB'>2097152</memory>
+  <currentMemory unit='KiB'>2097152</currentMemory>
+  <vcpu placement='static'>2</vcpu>
+  <os>
+    <type arch='x86_64' machine='pc-q35-6.2'>hvm</type>
+    <boot dev='hd'/>
+  </os>
+  <features>
+    <acpi/>
+    <apic/>
+    <vmport state='off'/>
+  </features>
+  <cpu mode='host-passthrough' check='none' migratable='on'/>
+  <clock offset='utc'>
+    <timer name='rtc' tickpolicy='catchup'/>
+    <timer name='pit' tickpolicy='delay'/>
+    <timer name='hpet' present='no'/>
+  </clock>
+  <on_poweroff>destroy</on_poweroff>
+  <on_reboot>restart</on_reboot>
+  <on_crash>destroy</on_crash>
+  <pm>
+    <suspend-to-mem enabled='no'/>
+    <suspend-to-disk enabled='no'/>
+  </pm>
+  <devices>
+    <emulator>/usr/bin/qemu-system-x86_64</emulator>
+    <disk type='file' device='disk'>
+      <driver name='qemu' type='qcow2' discard='unmap'/>
+      <source file='/var/lib/images/rocky9.qcow2'/>
+      <target dev='vda' bus='virtio'/>
+      <address type='pci' domain='0x0000' bus='0x04' slot='0x00' function='0x0'/>
+    </disk>
+    <disk type='file' device='cdrom'>
+      <driver name='qemu' type='raw'/>
+      <target dev='sda' bus='sata'/>
+      <readonly/>
+      <address type='drive' controller='0' bus='0' target='0' unit='0'/>
+    </disk>
+    <controller type='usb' index='0' model='qemu-xhci' ports='15'>
+      <address type='pci' domain='0x0000' bus='0x02' slot='0x00' function='0x0'/>
+    </controller>
+    <controller type='pci' index='0' model='pcie-root'/>
+    <controller type='pci' index='1' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='1' port='0x10'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0' multifunction='on'/>
+    </controller>
+    <controller type='pci' index='2' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='2' port='0x11'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x1'/>
+    </controller>
+    <controller type='pci' index='3' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='3' port='0x12'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x2'/>
+    </controller>
+    <controller type='pci' index='4' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='4' port='0x13'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x3'/>
+    </controller>
+    <controller type='pci' index='5' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='5' port='0x14'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x4'/>
+    </controller>
+    <controller type='pci' index='6' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='6' port='0x15'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x5'/>
+    </controller>
+    <controller type='pci' index='7' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='7' port='0x16'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x6'/>
+    </controller>
+    <controller type='pci' index='8' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='8' port='0x17'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x7'/>
+    </controller>
+    <controller type='pci' index='9' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='9' port='0x18'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0' multifunction='on'/>
+    </controller>
+    <controller type='pci' index='10' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='10' port='0x19'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x1'/>
+    </controller>
+    <controller type='pci' index='11' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='11' port='0x1a'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x2'/>
+    </controller>
+    <controller type='pci' index='12' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='12' port='0x1b'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x3'/>
+    </controller>
+    <controller type='pci' index='13' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='13' port='0x1c'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x4'/>
+    </controller>
+    <controller type='pci' index='14' model='pcie-root-port'>
+      <model name='pcie-root-port'/>
+      <target chassis='14' port='0x1d'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x5'/>
+    </controller>
+    <controller type='sata' index='0'>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x1f' function='0x2'/>
+    </controller>
+    <controller type='virtio-serial' index='0'>
+      <address type='pci' domain='0x0000' bus='0x03' slot='0x00' function='0x0'/>
+    </controller>
+    <interface type='bridge'>
+      <mac address='52:54:00:9c:b4:1b'/>
+      <source bridge='br0'/>
+      <model type='virtio'/>
+      <address type='pci' domain='0x0000' bus='0x01' slot='0x00' function='0x0'/>
+    </interface>
+    <serial type='pty'>
+      <target type='isa-serial' port='0'>
+        <model name='isa-serial'/>
+      </target>
+    </serial>
+    <console type='pty'>
+      <target type='serial' port='0'/>
+    </console>
+    <channel type='unix'>
+      <target type='virtio' name='org.qemu.guest_agent.0'/>
+      <address type='virtio-serial' controller='0' bus='0' port='1'/>
+    </channel>
+    <channel type='spicevmc'>
+      <target type='virtio' name='com.redhat.spice.0'/>
+      <address type='virtio-serial' controller='0' bus='0' port='2'/>
+    </channel>
+    <input type='tablet' bus='usb'>
+      <address type='usb' bus='0' port='1'/>
+    </input>
+    <input type='mouse' bus='ps2'/>
+    <input type='keyboard' bus='ps2'/>
+    <graphics type='spice' autoport='yes'>
+      <listen type='address'/>
+      <image compression='off'/>
+    </graphics>
+    <sound model='ich9'>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x1b' function='0x0'/>
+    </sound>
+    <audio id='1' type='spice'/>
+    <video>
+      <model type='virtio' heads='1' primary='yes'/>
+      <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x0'/>
+    </video>
+    <redirdev bus='usb' type='spicevmc'>
+      <address type='usb' bus='0' port='2'/>
+    </redirdev>
+    <redirdev bus='usb' type='spicevmc'>
+      <address type='usb' bus='0' port='3'/>
+    </redirdev>
+    <memballoon model='virtio'>
+      <address type='pci' domain='0x0000' bus='0x05' slot='0x00' function='0x0'/>
+    </memballoon>
+    <rng model='virtio'>
+      <backend model='random'>/dev/urandom</backend>
+      <address type='pci' domain='0x0000' bus='0x06' slot='0x00' function='0x0'/>
+    </rng>
+  </devices>
+</domain>
-- 
2.39.5