openvmm: add new package by benhillis · Pull Request #18444 · microsoft/azurelinux

Ben Hillis (benhillis) · 2026-08-14T20:16:35Z

Merge Checklist

Summary

Adds a package for OpenVMM, a modular, cross-platform virtual machine monitor written in Rust. Ships the openvmm host binary.

Important

Draft: this does not build on Azure Linux 3.0 yet. OpenVMM requires rust 1.95 and the distribution ships 1.90. A toolchain bump is in motion, and this is ready to move out of draft once it lands.

Built offline from the upstream release: the tag archive plus the vendor archive uploaded as a release asset.

Change Log

Add openvmm 0.1.0

Does this affect the toolchain?

NO

Test Methodology

Built in an mcr.microsoft.com/azurelinux/base/core:3.0 container from the published assets, supplying a 1.95 toolchain in place of the distribution's. Produces openvmm-0.1.0-1.azl3.x86_64.rpm, which installs with tdnf and reports openvmm 0.1.0.

A toolkit build has not been run, as it cannot pass until the toolchain lands.

azure-pipelines · 2026-08-14T20:16:44Z

Azure Pipelines: There may be pipelines that require an authorized user to comment /azp run to run.

Ben Hillis (benhillis) · 2026-08-14T20:27:54Z

I believe the SPECS check failures are because I have not uploaded the release artifacts to the spec store, jslobodzian was going to point me to instructions on how to do that.

Saul Paredes (Redent0r) · 2026-08-15T00:40:04Z

I believe the SPECS check failures are because I have not uploaded the release artifacts to the spec store, jslobodzian was going to point me to instructions on how to do that.

Here are the instructions https://dev.azure.com/mariner-org/mariner/_wiki/wikis/mariner.wiki/1284/Source-Tar-Publishing , but I would leave that as the last step before merging (in case there's a need to amend the release sources)

Copilot

Pull request overview

Adds OpenVMM 0.1.0 as an x86_64 package, pending the Rust 1.95 toolchain.

Changes:

Builds OpenVMM offline from vendored Rust sources.
Adds source integrity and component metadata.
Registers MIT licensing metadata.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
`SPECS/openvmm/openvmm.spec`	Defines the OpenVMM RPM build and installation.
`SPECS/openvmm/openvmm.signatures.json`	Records source hashes.
`LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md`	Adds OpenVMM to the license map.
`LICENSES-AND-NOTICES/SPECS/data/licenses.json`	Registers OpenVMM licensing data.
`cgmanifest.json`	Adds OpenVMM component metadata.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Saul Paredes (Redent0r)

LGTM, this needs to wait for #18631

azure-pipelines · 2026-08-21T23:34:48Z

Azure Pipelines: There may be pipelines that require an authorized user to comment /azp run to run.

Ben Hillis (benhillis) · 2026-08-21T23:34:50Z

The RPM build jobs are expected to fail on the toolchain until #17759 is merged.

Ben Hillis (benhillis) · 2026-08-21T23:36:02Z

/azp run

azure-pipelines · 2026-08-21T23:36:09Z

Commenter does not have sufficient privileges for PR 18444 in repo microsoft/azurelinux

Saul Paredes (Redent0r) · 2026-08-24T15:13:32Z

#18511 was merged but we still need to wait for it to be cherry-picked to 3.0-dev #18558. Then we can rebase and test in a pipeline

Saul Paredes (Redent0r) · 2026-09-01T15:30:54Z

LGTM, this needs to wait for #18511

The rust upgrade just went in #18631 Ben Hillis (@benhillis) can you rebase this branch on top of latest 3.0-dev? this will allow us to build the openvmm package in our pipelines

OpenVMM is a modular, cross-platform virtual machine monitor written in Rust. This package ships the OpenVMM host binary, which runs virtual machines on Linux via KVM or the Microsoft Hypervisor. Source0 is the archive GitHub generates for the openvmm-v<version> tag. Upstream publishes a single release asset, openvmm-<version>-vendor.tar.gz, containing the vendored crate sources and the cargo_config source replacement written by cargo vendor, so the package builds offline. The package requires rust >= 1.95, which Azure Linux 3.0 does not ship yet, so it does not build until the distribution toolchain advances. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

The release profile sets debug = true, so suppressing debug_package left the symbols out of any package. Drop the override so RPM produces the debuginfo package. Run the unit tests for the pure-logic crates in the binary's dependency closure. 1053 tests, no virtualization required. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 50ad1e94-a714-4445-bf61-acec0dec4d22

Ben Hillis (benhillis) · 2026-09-01T16:31:38Z

Saul Paredes (@Redent0r) Rebased onto 3.0-dev now that #18631 has landed, so rust is at 1.96.1 on the target branch.

Two asks:

Could you kick off the pipeline run you mentioned? /azp run comes back with "Commenter does not have sufficient privileges" for me.
Could you either update the SPECS file for me or show me how to do it? I'd like to understand how to do this when we update versions.

Saul Paredes (Redent0r) · 2026-09-01T17:06:07Z

Saul Paredes (Saul Paredes (@Redent0r)) Rebased onto 3.0-dev now that #18631 has landed, so rust is at 1.96.1 on the target branch and this package's BuildRequires: rust >= 1.95.0 is satisfiable. The only conflict was the Microsoft row in LICENSES-MAP.md — upstream had added rust-bootstrap while this PR adds openvmm; both are kept.

Two asks:

Could you kick off the pipeline run you mentioned? /azp run comes back with "Commenter does not have sufficient privileges" for me.

Source Signature Check (SPECS) will stay red until the sources are mirrored — srpmpacker 404s on both openvmm-0.1.0.tar.gz and openvmm-0.1.0-vendor.tar.gz in azurelinuxsrcstorage. Both are publicly downloadable from the upstream release (the URLs in Source0/Source1 return 200). I asked about the upload process a couple of weeks ago but never got pointed at the instructions — could you either point me at them or loop in whoever owns that?

Addressing second point since we need that to kick off the build. Tarballs uploaded in:

The pipeline above just needs the tarballs to be uploaded somehwere that is publically accesible. In this case this is https://github.com/microsoft/openvmm/releases/tag/openvmm-v0.1.0. I retriggered the signature check and is passing now

Saul Paredes (Redent0r) · 2026-09-01T17:09:34Z

Now that tarballs are uploaded, I kicked off the buddy build https://dev.azure.com/mariner-org/mariner/_build/results?buildId=1195079&view=results (I'm not sure if /azp run does the same or if it's just for 4.0. I'm used to triggering the buddy build pipeline manually)

Copilot

🔵 Needs a closer look

The new VMM package has not yet completed a full toolkit build against the distribution toolchain.

Review details

Files reviewed: 5/5 changed files
Comments generated: 0 new
Review effort level: Balanced

Saul Paredes (Redent0r) · 2026-09-01T21:21:48Z

🔵 Needs a closer look

The new VMM package has not yet completed a full toolkit build against the distribution toolchain.

Review details

it did https://dev.azure.com/mariner-org/mariner/_build/results?buildId=1195079&view=results and it built as expected

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Saul Paredes (Redent0r) · 2026-09-02T17:04:54Z

new build to test aarch64 https://dev.azure.com/mariner-org/mariner/_build/results?buildId=1195659&view=results

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

microsoft-github-policy-service Bot added Packaging 3.0-dev PRs Destined for AzureLinux 3.0 labels Aug 14, 2026

Ben Hillis (benhillis) force-pushed the users/benhill/openvmm-rpm branch from 9a46288 to 65e07dd Compare August 14, 2026 20:30

Saul Paredes (Redent0r) requested a balanced review from Copilot August 17, 2026 17:47

Copilot started reviewing on behalf of Saul Paredes (Redent0r) August 17, 2026 17:49 View session

Copilot AI reviewed Aug 17, 2026

View reviewed changes

Comment thread SPECS/openvmm/openvmm.spec Outdated

Comment thread SPECS/openvmm/openvmm.spec Outdated

Saul Paredes (Redent0r) reviewed Aug 17, 2026

View reviewed changes

Saul Paredes (Redent0r) reviewed Aug 19, 2026

View reviewed changes

Comment thread SPECS/openvmm/openvmm.spec Outdated

Aurélien Bombo (sprt) reviewed Aug 19, 2026

View reviewed changes

Comment thread SPECS/openvmm/openvmm.spec

Ben Hillis (benhillis) commented Aug 21, 2026

View reviewed changes

Comment thread SPECS/openvmm/openvmm.spec

Ben Hillis (benhillis) marked this pull request as ready for review August 21, 2026 23:34

Ben Hillis (benhillis) requested a review from a team as a code owner August 21, 2026 23:34

Ben Hillis (benhillis) and others added 2 commits September 1, 2026 15:50

Ben Hillis (benhillis) force-pushed the users/benhill/openvmm-rpm branch from 1e14dc2 to 302a664 Compare September 1, 2026 16:31

Ben Hillis (benhillis) requested a balanced review from Copilot September 1, 2026 21:03

Copilot started reviewing on behalf of Ben Hillis (benhillis) September 1, 2026 21:04 View session

Copilot AI reviewed Sep 1, 2026

View reviewed changes

openvmm: build for aarch64

2ce2182

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Saul Paredes (Redent0r) approved these changes Sep 2, 2026

View reviewed changes

John Starks (jstarks) reviewed Sep 2, 2026

View reviewed changes

Comment thread SPECS/openvmm/openvmm.spec Outdated

openvmm: clarify %check comment

5d30066

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

jslobodzian approved these changes Sep 2, 2026

View reviewed changes

Saul Paredes (Redent0r) merged commit 18ef07d into microsoft:3.0-dev Sep 2, 2026
17 checks passed

Uh oh!

Conversation

Ben Hillis (benhillis) commented Aug 14, 2026 • edited by Redent0r Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Checklist

Summary

Change Log

Does this affect the toolchain?

Test Methodology

Uh oh!

azure-pipelines Bot commented Aug 14, 2026

Uh oh!

Ben Hillis (benhillis) commented Aug 14, 2026

Uh oh!

Saul Paredes (Redent0r) commented Aug 15, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Saul Paredes (Redent0r) left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

azure-pipelines Bot commented Aug 21, 2026

Uh oh!

Ben Hillis (benhillis) commented Aug 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Ben Hillis (benhillis) commented Aug 21, 2026

Uh oh!

azure-pipelines Bot commented Aug 21, 2026

Uh oh!

Saul Paredes (Redent0r) commented Aug 24, 2026

Uh oh!

Saul Paredes (Redent0r) commented Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Ben Hillis (benhillis) commented Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Saul Paredes (Redent0r) commented Sep 1, 2026

Uh oh!

Saul Paredes (Redent0r) commented Sep 1, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🔵 Needs a closer look

Uh oh!

Saul Paredes (Redent0r) commented Sep 1, 2026

🔵 Needs a closer look

Uh oh!

Saul Paredes (Redent0r) commented Sep 2, 2026

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Ben Hillis (benhillis) commented Aug 14, 2026 •

edited by Redent0r

Loading

Saul Paredes (Redent0r) left a comment •

edited

Loading

Ben Hillis (benhillis) commented Aug 21, 2026 •

edited

Loading

Saul Paredes (Redent0r) commented Sep 1, 2026 •

edited

Loading

Ben Hillis (benhillis) commented Sep 1, 2026 •

edited

Loading