]> git.proxmox.com Git - qemu.git/blame - ui/spice-core.c
qcow2: lock on prealloc
[qemu.git] / ui / spice-core.c
CommitLineData
29b0040b
GH
1/*
2 * Copyright (C) 2010 Red Hat, Inc.
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License as
6 * published by the Free Software Foundation; either version 2 or
7 * (at your option) version 3 of the License.
8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, see <http://www.gnu.org/licenses/>.
16 */
17
18#include <spice.h>
19#include <spice-experimental.h>
20
6f8c63fb 21#include <netdb.h>
d0638b18 22#include "sysemu.h"
6f8c63fb 23
29b0040b
GH
24#include "qemu-common.h"
25#include "qemu-spice.h"
f9ab6091 26#include "qemu-thread.h"
29b0040b
GH
27#include "qemu-timer.h"
28#include "qemu-queue.h"
c448e855 29#include "qemu-x509.h"
6f8c63fb 30#include "qemu_socket.h"
d1f29646 31#include "qmp-commands.h"
6f8c63fb
GH
32#include "qint.h"
33#include "qbool.h"
34#include "qstring.h"
35#include "qjson.h"
e866e239
GH
36#include "notify.h"
37#include "migration.h"
29b0040b 38#include "monitor.h"
e866e239 39#include "hw/hw.h"
29b0040b
GH
40
41/* core bits */
42
43static SpiceServer *spice_server;
e866e239 44static Notifier migration_state;
6f8c63fb 45static const char *auth = "spice";
7572150c
GH
46static char *auth_passwd;
47static time_t auth_expires = TIME_MAX;
29b0040b
GH
48int using_spice = 0;
49
f9ab6091 50static QemuThread me;
22b626e2 51
29b0040b
GH
52struct SpiceTimer {
53 QEMUTimer *timer;
54 QTAILQ_ENTRY(SpiceTimer) next;
55};
56static QTAILQ_HEAD(, SpiceTimer) timers = QTAILQ_HEAD_INITIALIZER(timers);
57
58static SpiceTimer *timer_add(SpiceTimerFunc func, void *opaque)
59{
60 SpiceTimer *timer;
61
7267c094 62 timer = g_malloc0(sizeof(*timer));
7bd427d8 63 timer->timer = qemu_new_timer_ms(rt_clock, func, opaque);
29b0040b
GH
64 QTAILQ_INSERT_TAIL(&timers, timer, next);
65 return timer;
66}
67
68static void timer_start(SpiceTimer *timer, uint32_t ms)
69{
7bd427d8 70 qemu_mod_timer(timer->timer, qemu_get_clock_ms(rt_clock) + ms);
29b0040b
GH
71}
72
73static void timer_cancel(SpiceTimer *timer)
74{
75 qemu_del_timer(timer->timer);
76}
77
78static void timer_remove(SpiceTimer *timer)
79{
80 qemu_del_timer(timer->timer);
81 qemu_free_timer(timer->timer);
82 QTAILQ_REMOVE(&timers, timer, next);
7267c094 83 g_free(timer);
29b0040b
GH
84}
85
86struct SpiceWatch {
87 int fd;
88 int event_mask;
89 SpiceWatchFunc func;
90 void *opaque;
91 QTAILQ_ENTRY(SpiceWatch) next;
92};
93static QTAILQ_HEAD(, SpiceWatch) watches = QTAILQ_HEAD_INITIALIZER(watches);
94
95static void watch_read(void *opaque)
96{
97 SpiceWatch *watch = opaque;
98 watch->func(watch->fd, SPICE_WATCH_EVENT_READ, watch->opaque);
99}
100
101static void watch_write(void *opaque)
102{
103 SpiceWatch *watch = opaque;
104 watch->func(watch->fd, SPICE_WATCH_EVENT_WRITE, watch->opaque);
105}
106
107static void watch_update_mask(SpiceWatch *watch, int event_mask)
108{
109 IOHandler *on_read = NULL;
110 IOHandler *on_write = NULL;
111
112 watch->event_mask = event_mask;
113 if (watch->event_mask & SPICE_WATCH_EVENT_READ) {
114 on_read = watch_read;
115 }
116 if (watch->event_mask & SPICE_WATCH_EVENT_WRITE) {
3d6d306c 117 on_write = watch_write;
29b0040b
GH
118 }
119 qemu_set_fd_handler(watch->fd, on_read, on_write, watch);
120}
121
122static SpiceWatch *watch_add(int fd, int event_mask, SpiceWatchFunc func, void *opaque)
123{
124 SpiceWatch *watch;
125
7267c094 126 watch = g_malloc0(sizeof(*watch));
29b0040b
GH
127 watch->fd = fd;
128 watch->func = func;
129 watch->opaque = opaque;
130 QTAILQ_INSERT_TAIL(&watches, watch, next);
131
132 watch_update_mask(watch, event_mask);
133 return watch;
134}
135
136static void watch_remove(SpiceWatch *watch)
137{
08cc67f3 138 qemu_set_fd_handler(watch->fd, NULL, NULL, NULL);
29b0040b 139 QTAILQ_REMOVE(&watches, watch, next);
7267c094 140 g_free(watch);
29b0040b
GH
141}
142
cb42a870
GH
143typedef struct ChannelList ChannelList;
144struct ChannelList {
145 SpiceChannelEventInfo *info;
146 QTAILQ_ENTRY(ChannelList) link;
147};
148static QTAILQ_HEAD(, ChannelList) channel_list = QTAILQ_HEAD_INITIALIZER(channel_list);
149
150static void channel_list_add(SpiceChannelEventInfo *info)
151{
152 ChannelList *item;
153
7267c094 154 item = g_malloc0(sizeof(*item));
cb42a870
GH
155 item->info = info;
156 QTAILQ_INSERT_TAIL(&channel_list, item, link);
157}
158
159static void channel_list_del(SpiceChannelEventInfo *info)
160{
161 ChannelList *item;
162
163 QTAILQ_FOREACH(item, &channel_list, link) {
164 if (item->info != info) {
165 continue;
166 }
167 QTAILQ_REMOVE(&channel_list, item, link);
7267c094 168 g_free(item);
cb42a870
GH
169 return;
170 }
171}
172
6f8c63fb
GH
173static void add_addr_info(QDict *dict, struct sockaddr *addr, int len)
174{
175 char host[NI_MAXHOST], port[NI_MAXSERV];
176 const char *family;
177
178 getnameinfo(addr, len, host, sizeof(host), port, sizeof(port),
179 NI_NUMERICHOST | NI_NUMERICSERV);
180 family = inet_strfamily(addr->sa_family);
181
182 qdict_put(dict, "host", qstring_from_str(host));
183 qdict_put(dict, "port", qstring_from_str(port));
184 qdict_put(dict, "family", qstring_from_str(family));
185}
186
187static void add_channel_info(QDict *dict, SpiceChannelEventInfo *info)
188{
189 int tls = info->flags & SPICE_CHANNEL_EVENT_FLAG_TLS;
190
191 qdict_put(dict, "connection-id", qint_from_int(info->connection_id));
192 qdict_put(dict, "channel-type", qint_from_int(info->type));
193 qdict_put(dict, "channel-id", qint_from_int(info->id));
194 qdict_put(dict, "tls", qbool_from_int(tls));
195}
196
197static void channel_event(int event, SpiceChannelEventInfo *info)
198{
199 static const int qevent[] = {
200 [ SPICE_CHANNEL_EVENT_CONNECTED ] = QEVENT_SPICE_CONNECTED,
201 [ SPICE_CHANNEL_EVENT_INITIALIZED ] = QEVENT_SPICE_INITIALIZED,
202 [ SPICE_CHANNEL_EVENT_DISCONNECTED ] = QEVENT_SPICE_DISCONNECTED,
203 };
204 QDict *server, *client;
205 QObject *data;
206
22b626e2
GH
207 /*
208 * Spice server might have called us from spice worker thread
209 * context (happens on display channel disconnects). Spice should
210 * not do that. It isn't that easy to fix it in spice and even
211 * when it is fixed we still should cover the already released
212 * spice versions. So detect that we've been called from another
213 * thread and grab the iothread lock if so before calling qemu
214 * functions.
215 */
f9ab6091 216 bool need_lock = !qemu_thread_is_self(&me);
22b626e2
GH
217 if (need_lock) {
218 qemu_mutex_lock_iothread();
219 }
220
6f8c63fb 221 client = qdict_new();
6f8c63fb 222 server = qdict_new();
faa98223
YH
223
224#ifdef SPICE_CHANNEL_EVENT_FLAG_ADDR_EXT
225 if (info->flags & SPICE_CHANNEL_EVENT_FLAG_ADDR_EXT) {
226 add_addr_info(client, (struct sockaddr *)&info->paddr_ext,
227 info->plen_ext);
228 add_addr_info(server, (struct sockaddr *)&info->laddr_ext,
229 info->llen_ext);
230 } else {
339a475f
CF
231 error_report("spice: %s, extended address is expected",
232 __func__);
faa98223
YH
233#endif
234 add_addr_info(client, &info->paddr, info->plen);
235 add_addr_info(server, &info->laddr, info->llen);
236#ifdef SPICE_CHANNEL_EVENT_FLAG_ADDR_EXT
237 }
238#endif
6f8c63fb
GH
239
240 if (event == SPICE_CHANNEL_EVENT_INITIALIZED) {
241 qdict_put(server, "auth", qstring_from_str(auth));
242 add_channel_info(client, info);
cb42a870
GH
243 channel_list_add(info);
244 }
245 if (event == SPICE_CHANNEL_EVENT_DISCONNECTED) {
246 channel_list_del(info);
6f8c63fb
GH
247 }
248
249 data = qobject_from_jsonf("{ 'client': %p, 'server': %p }",
250 QOBJECT(client), QOBJECT(server));
251 monitor_protocol_event(qevent[event], data);
252 qobject_decref(data);
22b626e2
GH
253
254 if (need_lock) {
255 qemu_mutex_unlock_iothread();
256 }
6f8c63fb
GH
257}
258
29b0040b
GH
259static SpiceCoreInterface core_interface = {
260 .base.type = SPICE_INTERFACE_CORE,
261 .base.description = "qemu core services",
262 .base.major_version = SPICE_INTERFACE_CORE_MAJOR,
263 .base.minor_version = SPICE_INTERFACE_CORE_MINOR,
264
265 .timer_add = timer_add,
266 .timer_start = timer_start,
267 .timer_cancel = timer_cancel,
268 .timer_remove = timer_remove,
269
270 .watch_add = watch_add,
271 .watch_update_mask = watch_update_mask,
272 .watch_remove = watch_remove,
6f8c63fb 273
6f8c63fb 274 .channel_event = channel_event,
29b0040b
GH
275};
276
026f773f
YH
277#ifdef SPICE_INTERFACE_MIGRATION
278typedef struct SpiceMigration {
279 SpiceMigrateInstance sin;
280 struct {
281 MonitorCompletion *cb;
282 void *opaque;
283 } connect_complete;
284} SpiceMigration;
285
286static void migrate_connect_complete_cb(SpiceMigrateInstance *sin);
287
288static const SpiceMigrateInterface migrate_interface = {
289 .base.type = SPICE_INTERFACE_MIGRATION,
290 .base.description = "migration",
291 .base.major_version = SPICE_INTERFACE_MIGRATION_MAJOR,
292 .base.minor_version = SPICE_INTERFACE_MIGRATION_MINOR,
293 .migrate_connect_complete = migrate_connect_complete_cb,
294 .migrate_end_complete = NULL,
295};
296
297static SpiceMigration spice_migrate;
298
299static void migrate_connect_complete_cb(SpiceMigrateInstance *sin)
300{
301 SpiceMigration *sm = container_of(sin, SpiceMigration, sin);
302 if (sm->connect_complete.cb) {
303 sm->connect_complete.cb(sm->connect_complete.opaque, NULL);
304 }
305 sm->connect_complete.cb = NULL;
306}
307#endif
308
9f04e09e
YH
309/* config string parsing */
310
311static int name2enum(const char *string, const char *table[], int entries)
312{
313 int i;
314
315 if (string) {
316 for (i = 0; i < entries; i++) {
317 if (!table[i]) {
318 continue;
319 }
320 if (strcmp(string, table[i]) != 0) {
321 continue;
322 }
323 return i;
324 }
325 }
326 return -1;
327}
328
329static int parse_name(const char *string, const char *optname,
330 const char *table[], int entries)
331{
332 int value = name2enum(string, table, entries);
333
334 if (value != -1) {
335 return value;
336 }
339a475f 337 error_report("spice: invalid %s: %s", optname, string);
9f04e09e
YH
338 exit(1);
339}
340
84a23f25
GH
341static const char *stream_video_names[] = {
342 [ SPICE_STREAM_VIDEO_OFF ] = "off",
343 [ SPICE_STREAM_VIDEO_ALL ] = "all",
344 [ SPICE_STREAM_VIDEO_FILTER ] = "filter",
345};
346#define parse_stream_video(_name) \
347 name2enum(_name, stream_video_names, ARRAY_SIZE(stream_video_names))
348
9f04e09e
YH
349static const char *compression_names[] = {
350 [ SPICE_IMAGE_COMPRESS_OFF ] = "off",
351 [ SPICE_IMAGE_COMPRESS_AUTO_GLZ ] = "auto_glz",
352 [ SPICE_IMAGE_COMPRESS_AUTO_LZ ] = "auto_lz",
353 [ SPICE_IMAGE_COMPRESS_QUIC ] = "quic",
354 [ SPICE_IMAGE_COMPRESS_GLZ ] = "glz",
355 [ SPICE_IMAGE_COMPRESS_LZ ] = "lz",
356};
357#define parse_compression(_name) \
358 parse_name(_name, "image compression", \
359 compression_names, ARRAY_SIZE(compression_names))
360
361static const char *wan_compression_names[] = {
362 [ SPICE_WAN_COMPRESSION_AUTO ] = "auto",
363 [ SPICE_WAN_COMPRESSION_NEVER ] = "never",
364 [ SPICE_WAN_COMPRESSION_ALWAYS ] = "always",
365};
366#define parse_wan_compression(_name) \
367 parse_name(_name, "wan compression", \
368 wan_compression_names, ARRAY_SIZE(wan_compression_names))
369
29b0040b
GH
370/* functions for the rest of qemu */
371
d1f29646 372static SpiceChannelList *qmp_query_spice_channels(void)
cb42a870 373{
d1f29646
LC
374 SpiceChannelList *cur_item = NULL, *head = NULL;
375 ChannelList *item;
cb42a870 376
d1f29646
LC
377 QTAILQ_FOREACH(item, &channel_list, link) {
378 SpiceChannelList *chan;
379 char host[NI_MAXHOST], port[NI_MAXSERV];
faa98223
YH
380 struct sockaddr *paddr;
381 socklen_t plen;
d1f29646
LC
382
383 chan = g_malloc0(sizeof(*chan));
384 chan->value = g_malloc0(sizeof(*chan->value));
385
faa98223
YH
386#ifdef SPICE_CHANNEL_EVENT_FLAG_ADDR_EXT
387 if (item->info->flags & SPICE_CHANNEL_EVENT_FLAG_ADDR_EXT) {
388 paddr = (struct sockaddr *)&item->info->paddr_ext;
389 plen = item->info->plen_ext;
390 } else {
391#endif
392 paddr = &item->info->paddr;
393 plen = item->info->plen;
394#ifdef SPICE_CHANNEL_EVENT_FLAG_ADDR_EXT
395 }
396#endif
397
398 getnameinfo(paddr, plen,
d1f29646
LC
399 host, sizeof(host), port, sizeof(port),
400 NI_NUMERICHOST | NI_NUMERICSERV);
401 chan->value->host = g_strdup(host);
402 chan->value->port = g_strdup(port);
faa98223 403 chan->value->family = g_strdup(inet_strfamily(paddr->sa_family));
d1f29646
LC
404
405 chan->value->connection_id = item->info->connection_id;
406 chan->value->channel_type = item->info->type;
407 chan->value->channel_id = item->info->id;
408 chan->value->tls = item->info->flags & SPICE_CHANNEL_EVENT_FLAG_TLS;
409
410 /* XXX: waiting for the qapi to support GSList */
411 if (!cur_item) {
412 head = cur_item = chan;
413 } else {
414 cur_item->next = chan;
415 cur_item = chan;
416 }
cb42a870
GH
417 }
418
d1f29646 419 return head;
cb42a870
GH
420}
421
d1f29646 422SpiceInfo *qmp_query_spice(Error **errp)
cb42a870
GH
423{
424 QemuOpts *opts = QTAILQ_FIRST(&qemu_spice_opts.head);
cb42a870 425 int port, tls_port;
d1f29646
LC
426 const char *addr;
427 SpiceInfo *info;
8df0c7e8 428 char version_string[20]; /* 12 = |255.255.255\0| is the max */
cb42a870 429
d1f29646
LC
430 info = g_malloc0(sizeof(*info));
431
3bb781f3 432 if (!spice_server || !opts) {
d1f29646
LC
433 info->enabled = false;
434 return info;
cb42a870
GH
435 }
436
d1f29646
LC
437 info->enabled = true;
438
cb42a870
GH
439 addr = qemu_opt_get(opts, "addr");
440 port = qemu_opt_get_number(opts, "port", 0);
441 tls_port = qemu_opt_get_number(opts, "tls-port", 0);
cb42a870 442
d1f29646
LC
443 info->has_auth = true;
444 info->auth = g_strdup(auth);
445
446 info->has_host = true;
447 info->host = g_strdup(addr ? addr : "0.0.0.0");
448
449 info->has_compiled_version = true;
8df0c7e8
AL
450 snprintf(version_string, sizeof(version_string), "%d.%d.%d",
451 (SPICE_SERVER_VERSION & 0xff0000) >> 16,
452 (SPICE_SERVER_VERSION & 0xff00) >> 8,
453 SPICE_SERVER_VERSION & 0xff);
d1f29646
LC
454 info->compiled_version = g_strdup(version_string);
455
cb42a870 456 if (port) {
d1f29646
LC
457 info->has_port = true;
458 info->port = port;
cb42a870
GH
459 }
460 if (tls_port) {
d1f29646
LC
461 info->has_tls_port = true;
462 info->tls_port = tls_port;
cb42a870
GH
463 }
464
d1f29646
LC
465 /* for compatibility with the original command */
466 info->has_channels = true;
467 info->channels = qmp_query_spice_channels();
468
469 return info;
cb42a870
GH
470}
471
9e8dd451 472static void migration_state_notifier(Notifier *notifier, void *data)
e866e239 473{
7073693b 474 MigrationState *s = data;
e866e239 475
026f773f
YH
476 if (migration_is_active(s)) {
477#ifdef SPICE_INTERFACE_MIGRATION
478 spice_server_migrate_start(spice_server);
479#endif
480 } else if (migration_has_finished(s)) {
026f773f 481#ifndef SPICE_INTERFACE_MIGRATION
e866e239 482 spice_server_migrate_switch(spice_server);
026f773f
YH
483#else
484 spice_server_migrate_end(spice_server, true);
485 } else if (migration_has_failed(s)) {
486 spice_server_migrate_end(spice_server, false);
e866e239
GH
487#endif
488 }
489}
490
491int qemu_spice_migrate_info(const char *hostname, int port, int tls_port,
edc5cb1a
YH
492 const char *subject,
493 MonitorCompletion *cb, void *opaque)
e866e239 494{
edc5cb1a 495 int ret;
026f773f
YH
496#ifdef SPICE_INTERFACE_MIGRATION
497 spice_migrate.connect_complete.cb = cb;
498 spice_migrate.connect_complete.opaque = opaque;
499 ret = spice_server_migrate_connect(spice_server, hostname,
500 port, tls_port, subject);
501#else
edc5cb1a
YH
502 ret = spice_server_migrate_info(spice_server, hostname,
503 port, tls_port, subject);
504 cb(opaque, NULL);
026f773f 505#endif
edc5cb1a 506 return ret;
e866e239
GH
507}
508
17b6dea0
GH
509static int add_channel(const char *name, const char *value, void *opaque)
510{
511 int security = 0;
512 int rc;
513
514 if (strcmp(name, "tls-channel") == 0) {
35c63329
CF
515 int *tls_port = opaque;
516 if (!*tls_port) {
517 error_report("spice: tried to setup tls-channel"
518 " without specifying a TLS port");
519 exit(1);
520 }
17b6dea0
GH
521 security = SPICE_CHANNEL_SECURITY_SSL;
522 }
523 if (strcmp(name, "plaintext-channel") == 0) {
524 security = SPICE_CHANNEL_SECURITY_NONE;
525 }
526 if (security == 0) {
527 return 0;
528 }
529 if (strcmp(value, "default") == 0) {
530 rc = spice_server_set_channel_security(spice_server, NULL, security);
531 } else {
532 rc = spice_server_set_channel_security(spice_server, value, security);
533 }
534 if (rc != 0) {
339a475f 535 error_report("spice: failed to set channel security for %s", value);
17b6dea0
GH
536 exit(1);
537 }
538 return 0;
539}
540
29b0040b
GH
541void qemu_spice_init(void)
542{
543 QemuOpts *opts = QTAILQ_FIRST(&qemu_spice_opts.head);
333b0eeb 544 const char *password, *str, *x509_dir, *addr,
c448e855
GH
545 *x509_key_password = NULL,
546 *x509_dh_file = NULL,
547 *tls_ciphers = NULL;
548 char *x509_key_file = NULL,
549 *x509_cert_file = NULL,
550 *x509_cacert_file = NULL;
f61d6960 551 int port, tls_port, len, addr_flags;
9f04e09e
YH
552 spice_image_compression_t compression;
553 spice_wan_compression_t wan_compr;
29b0040b 554
f9ab6091 555 qemu_thread_get_self(&me);
22b626e2 556
ad1be899 557 if (!opts) {
29b0040b
GH
558 return;
559 }
560 port = qemu_opt_get_number(opts, "port", 0);
c448e855
GH
561 tls_port = qemu_opt_get_number(opts, "tls-port", 0);
562 if (!port && !tls_port) {
339a475f 563 error_report("neither port nor tls-port specified for spice");
df9cb669
GH
564 exit(1);
565 }
566 if (port < 0 || port > 65535) {
339a475f 567 error_report("spice port is out of range");
df9cb669
GH
568 exit(1);
569 }
570 if (tls_port < 0 || tls_port > 65535) {
339a475f 571 error_report("spice tls-port is out of range");
df9cb669 572 exit(1);
29b0040b
GH
573 }
574 password = qemu_opt_get(opts, "password");
575
c448e855
GH
576 if (tls_port) {
577 x509_dir = qemu_opt_get(opts, "x509-dir");
578 if (NULL == x509_dir) {
579 x509_dir = ".";
580 }
581 len = strlen(x509_dir) + 32;
582
583 str = qemu_opt_get(opts, "x509-key-file");
584 if (str) {
7267c094 585 x509_key_file = g_strdup(str);
c448e855 586 } else {
7267c094 587 x509_key_file = g_malloc(len);
c448e855
GH
588 snprintf(x509_key_file, len, "%s/%s", x509_dir, X509_SERVER_KEY_FILE);
589 }
590
591 str = qemu_opt_get(opts, "x509-cert-file");
592 if (str) {
7267c094 593 x509_cert_file = g_strdup(str);
c448e855 594 } else {
7267c094 595 x509_cert_file = g_malloc(len);
c448e855
GH
596 snprintf(x509_cert_file, len, "%s/%s", x509_dir, X509_SERVER_CERT_FILE);
597 }
598
599 str = qemu_opt_get(opts, "x509-cacert-file");
600 if (str) {
7267c094 601 x509_cacert_file = g_strdup(str);
c448e855 602 } else {
7267c094 603 x509_cacert_file = g_malloc(len);
c448e855
GH
604 snprintf(x509_cacert_file, len, "%s/%s", x509_dir, X509_CA_CERT_FILE);
605 }
606
607 x509_key_password = qemu_opt_get(opts, "x509-key-password");
608 x509_dh_file = qemu_opt_get(opts, "x509-dh-file");
609 tls_ciphers = qemu_opt_get(opts, "tls-ciphers");
610 }
611
333b0eeb
GH
612 addr = qemu_opt_get(opts, "addr");
613 addr_flags = 0;
614 if (qemu_opt_get_bool(opts, "ipv4", 0)) {
615 addr_flags |= SPICE_ADDR_FLAG_IPV4_ONLY;
616 } else if (qemu_opt_get_bool(opts, "ipv6", 0)) {
617 addr_flags |= SPICE_ADDR_FLAG_IPV6_ONLY;
618 }
619
29b0040b 620 spice_server = spice_server_new();
333b0eeb 621 spice_server_set_addr(spice_server, addr ? addr : "", addr_flags);
c448e855
GH
622 if (port) {
623 spice_server_set_port(spice_server, port);
624 }
625 if (tls_port) {
626 spice_server_set_tls(spice_server, tls_port,
627 x509_cacert_file,
628 x509_cert_file,
629 x509_key_file,
630 x509_key_password,
631 x509_dh_file,
632 tls_ciphers);
633 }
29b0040b
GH
634 if (password) {
635 spice_server_set_ticket(spice_server, password, 0, 0, 0);
636 }
48b3ed0a
MAL
637 if (qemu_opt_get_bool(opts, "sasl", 0)) {
638#if SPICE_SERVER_VERSION >= 0x000900 /* 0.9.0 */
639 if (spice_server_set_sasl_appname(spice_server, "qemu") == -1 ||
640 spice_server_set_sasl(spice_server, 1) == -1) {
339a475f 641 error_report("spice: failed to enable sasl");
48b3ed0a
MAL
642 exit(1);
643 }
644#else
339a475f 645 error_report("spice: sasl is not available (spice >= 0.9 required)");
48b3ed0a
MAL
646 exit(1);
647#endif
648 }
29b0040b 649 if (qemu_opt_get_bool(opts, "disable-ticketing", 0)) {
6f8c63fb 650 auth = "none";
29b0040b
GH
651 spice_server_set_noauth(spice_server);
652 }
653
d4970b07
HG
654 if (qemu_opt_get_bool(opts, "disable-copy-paste", 0)) {
655 spice_server_set_agent_copypaste(spice_server, false);
656 }
d4970b07 657
9f04e09e
YH
658 compression = SPICE_IMAGE_COMPRESS_AUTO_GLZ;
659 str = qemu_opt_get(opts, "image-compression");
660 if (str) {
661 compression = parse_compression(str);
662 }
663 spice_server_set_image_compression(spice_server, compression);
664
665 wan_compr = SPICE_WAN_COMPRESSION_AUTO;
666 str = qemu_opt_get(opts, "jpeg-wan-compression");
667 if (str) {
668 wan_compr = parse_wan_compression(str);
669 }
670 spice_server_set_jpeg_compression(spice_server, wan_compr);
671
672 wan_compr = SPICE_WAN_COMPRESSION_AUTO;
673 str = qemu_opt_get(opts, "zlib-glz-wan-compression");
674 if (str) {
675 wan_compr = parse_wan_compression(str);
676 }
677 spice_server_set_zlib_glz_compression(spice_server, wan_compr);
29b0040b 678
84a23f25
GH
679 str = qemu_opt_get(opts, "streaming-video");
680 if (str) {
f61d6960 681 int streaming_video = parse_stream_video(str);
84a23f25
GH
682 spice_server_set_streaming_video(spice_server, streaming_video);
683 }
684
685 spice_server_set_agent_mouse
686 (spice_server, qemu_opt_get_bool(opts, "agent-mouse", 1));
687 spice_server_set_playback_compression
688 (spice_server, qemu_opt_get_bool(opts, "playback-compression", 1));
689
35c63329 690 qemu_opt_foreach(opts, add_channel, &tls_port, 0);
17b6dea0 691
d0638b18
MAL
692#if SPICE_SERVER_VERSION >= 0x000a02 /* 0.10.2 */
693 spice_server_set_name(spice_server, qemu_name);
694 spice_server_set_uuid(spice_server, qemu_uuid);
695#endif
696
fba810f1 697 if (0 != spice_server_init(spice_server, &core_interface)) {
339a475f 698 error_report("failed to initialize spice server");
fba810f1
GH
699 exit(1);
700 };
29b0040b 701 using_spice = 1;
864401c2 702
e866e239
GH
703 migration_state.notify = migration_state_notifier;
704 add_migration_state_change_notifier(&migration_state);
026f773f
YH
705#ifdef SPICE_INTERFACE_MIGRATION
706 spice_migrate.sin.base.sif = &migrate_interface.base;
707 spice_migrate.connect_complete.cb = NULL;
708 qemu_spice_add_interface(&spice_migrate.sin.base);
709#endif
e866e239 710
864401c2 711 qemu_spice_input_init();
3e313753 712 qemu_spice_audio_init();
c448e855 713
7267c094
AL
714 g_free(x509_key_file);
715 g_free(x509_cert_file);
716 g_free(x509_cacert_file);
29b0040b
GH
717}
718
719int qemu_spice_add_interface(SpiceBaseInstance *sin)
720{
a19cbfb3
GH
721 if (!spice_server) {
722 if (QTAILQ_FIRST(&qemu_spice_opts.head) != NULL) {
339a475f 723 error_report("Oops: spice configured but not active");
a19cbfb3
GH
724 exit(1);
725 }
726 /*
727 * Create a spice server instance.
728 * It does *not* listen on the network.
729 * It handles QXL local rendering only.
730 *
731 * With a command line like '-vnc :0 -vga qxl' you'll end up here.
732 */
733 spice_server = spice_server_new();
734 spice_server_init(spice_server, &core_interface);
735 }
29b0040b
GH
736 return spice_server_add_interface(spice_server, sin);
737}
738
7572150c
GH
739static int qemu_spice_set_ticket(bool fail_if_conn, bool disconnect_if_conn)
740{
741 time_t lifetime, now = time(NULL);
742 char *passwd;
743
744 if (now < auth_expires) {
745 passwd = auth_passwd;
746 lifetime = (auth_expires - now);
747 if (lifetime > INT_MAX) {
748 lifetime = INT_MAX;
749 }
750 } else {
751 passwd = NULL;
752 lifetime = 1;
753 }
754 return spice_server_set_ticket(spice_server, passwd, lifetime,
755 fail_if_conn, disconnect_if_conn);
756}
757
758int qemu_spice_set_passwd(const char *passwd,
759 bool fail_if_conn, bool disconnect_if_conn)
760{
761 free(auth_passwd);
762 auth_passwd = strdup(passwd);
763 return qemu_spice_set_ticket(fail_if_conn, disconnect_if_conn);
764}
765
766int qemu_spice_set_pw_expire(time_t expires)
767{
768 auth_expires = expires;
769 return qemu_spice_set_ticket(false, false);
770}
771
f1f5f407
DB
772int qemu_spice_display_add_client(int csock, int skipauth, int tls)
773{
774#if SPICE_SERVER_VERSION >= 0x000a01
775 if (tls) {
776 return spice_server_add_ssl_client(spice_server, csock, skipauth);
777 } else {
778 return spice_server_add_client(spice_server, csock, skipauth);
779 }
780#else
781 return -1;
782#endif
783}
784
29b0040b
GH
785static void spice_register_config(void)
786{
787 qemu_add_opts(&qemu_spice_opts);
788}
789machine_init(spice_register_config);