John Yani

Or at least backport the RNG device without which it's impossible to use libvirt efficiently.

First of all, I think I need to start libvirt plugin, right? But it looks like it isn't available for some reason: ``` infrakit plugin start INFO[10-11|04:02:06] config module=cli/plugin url=...

After trying to set a breakpoint it says `No source file named pkg/run/v0/libvirt/libvirt.go.` So it means it isn't imported anywhere, right? So I went to see where all providers are...

So, this is how I build infrakit with libvirt provider: ``` sudo apt-get install libvirt-dev GO_BUILD_TAGS="libvirt builtin providers" make build/infrakit ``` And it works: ``` $ infrakit plugin start libvirt...

It was quite hard to find. To provide libvirt URIs we use this: https://github.com/docker/infrakit/blob/a10d75ee2d0a8992edf415630a47b0633b04b0b0/pkg/run/v0/libvirt/libvirt.go#L26 For example: ``` $ export INFRAKIT_LIBVIRT_URIS=default=qemu+ssh://server/system $ infrakit plugin start libvirt ``` To start instances the...

It looks like linuxkit can generate those files. Installed linuxkit like this: ``` wget https://github.com/linuxkit/linuxkit/releases/download/v0.6/linuxkit-linux-amd64 -O ~/bin/linuxkit chmod +x ~/bin/linuxkit ``` Running it like this ``` linuxkit build --format kernel+initrd...

Not sure I understand. `remoteboot` looks like a PXE server. How does it help? Currently I'm struggling to find steps needed to provision kvm instances according to some yaml file....

BTW VNC instead of video device working fine (problem 6): ``` Graphics: - Type: "vnc" AutoPort: "yes" Port: -1 Listen: "127.0.0.1" Listeners: - Type: "address" Address: "127.0.0.1" ```

Ok, the problem with RNG is that vendored copy isn't updated for more than a year: https://github.com/libvirt/libvirt-go-xml/commit/7ea44658ebbc28b44d53372502137ecd60caa975

Please also add the `dynamic-split-include-domains` as a way to configure those, as described in https://github.com/dlenski/vpn-slice/issues/68 It is a Cisco ASA custom attribute which appears to be similar to Globalprotect's `include-split-tunneling-domain`