feat: add software TPM support to libvirtd

.kres.yaml

@@ -110,7 +110,7 @@ spec:
       - name: EXTENSIONS_IMAGE_REF
         defaultValue: $(REGISTRY_AND_USERNAME)/extensions:$(TAG)
       - name: PKGS
-        defaultValue: v1.15.0-alpha.0-37-g6868000
+        defaultValue: v1.15.0-alpha.0-39-ga2b57ee
       - name: PKGS_PREFIX
         defaultValue: ghcr.io/siderolabs
       - name: TOOLS

Pkgfile

@@ -1,23 +1,23 @@
-# syntax = ghcr.io/siderolabs/bldr:v0.6.3
+# syntax = ghcr.io/siderolabs/bldr:v0.6.4
 
 format: v1alpha2
 
 vars:
   CONTAINERD_VERSION: v2.3.5 # update this when updating PKGS version tag in Makefile
   LINUX_FIRMWARE_VERSION: "20260916" # update this when updating PKGS version tag in Makefile
   DRBD_DRIVER_VERSION: 9.3.4 # update this when updating PKGS version tag in Makefile
-  PX_FUSE_DRIVER_VERSION: 8b52ef67d261369cbc93f132db299e5dcf64ad7c # update this when updating PKGS version tag in Makefile
+  PX_FUSE_DRIVER_VERSION: 89758677301c91c9667559bb0a6b553f61ab17c1 # update this when updating PKGS version tag in Makefile
   ZFS_DRIVER_VERSION: 2.4.4 # update this when updating PKGS version tag in Makefile
   ZFS_TOOLS_SHA256: 2a3c70d55a37cc71618a95a60e81ad66530201eb118d37741dc92efcf848c8b1
   ZFS_TOOLS_SHA512: 8be81dedc0c0ec38728248151a33b8cbc78b042bc27a913279009bd735faa6149ad5b4a2db5811d25f4a03820dd398e14f59a4aec07f6bd4bc39405190c4e4ad
   UTIL_LINUX_VERSION: 2.42.2 # update this when updating TOOLS in Makefile
   UTIL_LINUX_SHA256: 03a05d3adf9602ef128f2da05b84b3205ce60c351e5737c0370f74000679ce8a
   UTIL_LINUX_SHA512: 7415add0be2930654e322830808dde03ff6d511bd357f0679e6b6287a13ca79fe58ce4ac05edef86b76fb381b3a36ca2da9d3c31b5dc0a1d889c203156a57277
-  ENA_VERSION: 2.17.2 # update this when updating PKGS version tag in Makefile
-  TENSTORRENT_VERSION: 2.10.0 # update this when updating PKGS version tag in Makefile
+  ENA_VERSION: 2.17.3 # update this when updating PKGS version tag in Makefile
+  TENSTORRENT_VERSION: 2.11.0 # update this when updating PKGS version tag in Makefile
   HAILORT_VERSION: 4.24.0 # update this when updating PKGS version tag in Makefile
   MELLANOX_MSFTFLINT_VERSION: 4.34.1-4 # update this when updating PKGS version tag in Makefile
-  XDMA_VERSION: 8721136 # update this when updating PKGS version tag in Makefile
+  XDMA_VERSION: b846609 # update this when updating PKGS version tag in Makefile
 
   # renovate: datasource=git-tags extractVersion=^libtiprc-(?<version>.*)$ depName=git://git.linux-nfs.org/projects/steved/libtirpc.git
   LIBTIRPC_VERSION: 1-3-6

README.md

@@ -109,7 +109,7 @@ tiers based on support level:
 
 | Name | Tier | Image | Version | Description |
 | ---- | ---- | ----- | ------- | ----------- |
-| [amazon-ena](drivers/amazon-ena) | :green_square: core | [ghcr.io/siderolabs/amazon-ena](https://github.com/siderolabs/extensions/pkgs/container/amazon-ena) | `2.17.2-VERSION` |  This system extension provides Amazon ENA kernel modules built against a specific Talos version. ENA is a networking interface designed to make good use of modern CPU features and system architectures. |
+| [amazon-ena](drivers/amazon-ena) | :green_square: core | [ghcr.io/siderolabs/amazon-ena](https://github.com/siderolabs/extensions/pkgs/container/amazon-ena) | `2.17.3-VERSION` |  This system extension provides Amazon ENA kernel modules built against a specific Talos version. ENA is a networking interface designed to make good use of modern CPU features and system architectures. |
 | [chelsio-drivers](drivers/chelsio) | :yellow_square: extra | [ghcr.io/siderolabs/chelsio-drivers](https://github.com/siderolabs/extensions/pkgs/container/chelsio-drivers) | `VERSION` |  This system extension provides Chelsio network drivers. |
 | [gasket-driver](drivers/gasket) | :yellow_square: extra | [ghcr.io/siderolabs/gasket-driver](https://github.com/siderolabs/extensions/pkgs/container/gasket-driver) | `5815ee3-VERSION` |  This system extension provides google gasket driver kernel modules built against a specific Talos version. This driver is required for PCIe and M.2 Google Coral accelerators. There are 2 kernel modules ("gasket" and "apex") required to enable this driver. |
 | [gpio-pinctrl](drivers/gpio-pinctrl) | :yellow_square: extra | [ghcr.io/siderolabs/gpio-pinctrl](https://github.com/siderolabs/extensions/pkgs/container/gpio-pinctrl) | `VERSION` |  Intel Apollo Lake GPIO/Pinctrl drivers. Provides pinctrl-intel and pinctrl-broxton kernel modules for GPIO access on Intel Apollo Lake platforms (INT3452 ACPI device). |
@@ -118,14 +118,14 @@ tiers based on support level:
 | [joydev](drivers/joydev) | :yellow_square: extra | [ghcr.io/siderolabs/joydev](https://github.com/siderolabs/extensions/pkgs/container/joydev) | `VERSION` |  This system extension provides the joydev kernel module built against a specific Talos version. This kernel module provides the Linux joystick interface (/dev/input/js*) for the Gamepad API. It is required for game streaming software like Sunshine to expose gamepad input to applications that use the legacy joystick API or the browser Gamepad API via evdev-to-joydev translation. |
 | [mei](drivers/mei) | :green_square: core | [ghcr.io/siderolabs/mei](https://github.com/siderolabs/extensions/pkgs/container/mei) | `VERSION` |  This system extension provides Intel Management Engine drivers kernel modules built against a specific Talos version. This driver enables the Intel Management Engine, a prerequisite for Intel Arc discrete GPUs. |
 | [mellanox-mstflint](drivers/mellanox-mstflint) | :white_large_square: contrib | [ghcr.io/siderolabs/mellanox-mstflint](https://github.com/siderolabs/extensions/pkgs/container/mellanox-mstflint) | `4.34.1-4-VERSION` |  This system extension provides mstflint. |
-| [tenstorrent](drivers/tenstorrent) | :yellow_square: extra | [ghcr.io/siderolabs/tenstorrent](https://github.com/siderolabs/extensions/pkgs/container/tenstorrent) | `2.10.0` |  Driver for Tenstorrent AI processing hardware |
+| [tenstorrent](drivers/tenstorrent) | :yellow_square: extra | [ghcr.io/siderolabs/tenstorrent](https://github.com/siderolabs/extensions/pkgs/container/tenstorrent) | `2.11.0` |  Driver for Tenstorrent AI processing hardware |
 | [thunderbolt](drivers/thunderbolt) | :yellow_square: extra | [ghcr.io/siderolabs/thunderbolt](https://github.com/siderolabs/extensions/pkgs/container/thunderbolt) | `VERSION` |  This system extension provides Thunderbolt/USB4 drivers kernel modules built against a specific Talos version. It enables support for Thunderbolt/USB4 devices, including those used for networking. WARNING: This extension automatically authorizes all Thunderbolt devices during system boot, which poses potential security risks. Use at your own discretion. |
 | [uhid](drivers/uhid) | :yellow_square: extra | [ghcr.io/siderolabs/uhid](https://github.com/siderolabs/extensions/pkgs/container/uhid) | `VERSION` |  This system extension provides the uhid kernel module built against a specific Talos version. This kernel module provides user-space HID device support. Applications can create virtual HID devices (such as gamepads and controllers) via /dev/uhid, which is required for game streaming software like Sunshine to emulate gamepad input from Moonlight clients. |
 | [uinput](drivers/uinput) | :yellow_square: extra | [ghcr.io/siderolabs/uinput](https://github.com/siderolabs/extensions/pkgs/container/uinput) | `VERSION` |  This system extension provides the uinput kernel module built against a specific Talos version. This kernel module makes it possible to emulate input devices from userspace. By writing to /dev/uinput (or /dev/input/uinput) device, a process can create a virtual input device with specific capabilities. Once this virtual device is created, the process can send events through it, that will be delivered to userspace and in-kernel consumers. |
 | [usb-audio-drivers](drivers/usb-audio-drivers) | :white_large_square: contrib | [ghcr.io/siderolabs/usb-audio-drivers](https://github.com/siderolabs/extensions/pkgs/container/usb-audio-drivers) | `VERSION` |  This system extension provides ALSA USB Audio kernel modules built against a specific Talos version. This enables USB audio interfaces (class-compliant sound cards, headsets, DACs) on Talos Linux. |
 | [usb-modem-drivers](drivers/usb-modem) | :yellow_square: extra | [ghcr.io/siderolabs/usb-modem-drivers](https://github.com/siderolabs/extensions/pkgs/container/usb-modem-drivers) | `VERSION` |  This system extension provides USB modem drivers kernel modules built against a specific Talos version. This driver is required for USB modems to function. This extension includes all the drivers needed to operate any USB modem under Linux, but your device might not require all of them. Read your device's docs to learn which drivers you need, or just enable them all as a starting point. |
 | [v4l-uvc-drivers](drivers/v4l-uvc) | :yellow_square: extra | [ghcr.io/siderolabs/v4l-uvc-drivers](https://github.com/siderolabs/extensions/pkgs/container/v4l-uvc-drivers) | `VERSION` |  This system extension provides the Video4Linux kernel modules required for USB Video Class devices built against a specific Talos version. This driver enables Video4Linux devices such as webcams. |
-| [xdma-driver](drivers/xdma-driver) | :yellow_square: extra | [ghcr.io/siderolabs/xdma-driver](https://github.com/siderolabs/extensions/pkgs/container/xdma-driver) | `8721136-VERSION` |  Xilinx DMA Driver |
+| [xdma-driver](drivers/xdma-driver) | :yellow_square: extra | [ghcr.io/siderolabs/xdma-driver](https://github.com/siderolabs/extensions/pkgs/container/xdma-driver) | `b846609-VERSION` |  Xilinx DMA Driver |
 
 ### Digital Video Broadcasting (DVB)
 
@@ -170,7 +170,7 @@ tiers based on support level:
 | [nfs-utils](storage/nfs-utils) | :white_large_square: contrib | [ghcr.io/siderolabs/nfs-utils](https://github.com/siderolabs/extensions/pkgs/container/nfs-utils) | `v0.1.1` |  This system extension provides rpcbind and rpc.statd for NFSv3 file locking support.  rpcbind is a server that converts RPC program numbers into universal addresses. rpc.statd is the NSM (Network Status Monitor) service daemon that notifies NFS peers of restarts.  These services are required for NFSv3 mounts with file locking support. |
 | [nfsd](storage/nfsd) | :yellow_square: extra | [ghcr.io/siderolabs/nfsd](https://github.com/siderolabs/extensions/pkgs/container/nfsd) | `VERSION` |  This system extension provides kernel module driver for NFSD built against a specific Talos version. |
 | [nfsrahead](storage/nfsrahead) | :white_large_square: contrib | [ghcr.io/siderolabs/nfsrahead](https://github.com/siderolabs/extensions/pkgs/container/nfsrahead) | `2.8.4` |  This system extension provides nfsrahead, a tool to configure the readahead for NFS mounts. |
-| [px-fuse](storage/px-fuse) | :yellow_square: extra | [ghcr.io/siderolabs/px-fuse](https://github.com/siderolabs/extensions/pkgs/container/px-fuse) | `8b52ef67d261369cbc93f132db299e5dcf64ad7c-VERSION` |  This system extension provides kernel module driver for Portworx px-fuse built against a specific Talos version. |
+| [px-fuse](storage/px-fuse) | :yellow_square: extra | [ghcr.io/siderolabs/px-fuse](https://github.com/siderolabs/extensions/pkgs/container/px-fuse) | `89758677301c91c9667559bb0a6b553f61ab17c1-VERSION` |  This system extension provides kernel module driver for Portworx px-fuse built against a specific Talos version. |
 | [trident-iscsi-tools](storage/trident-iscsi-tools) | :white_large_square: contrib | [ghcr.io/siderolabs/trident-iscsi-tools](https://github.com/siderolabs/extensions/pkgs/container/trident-iscsi-tools) | `v0.0.1` |  This system extension provides the tools and binaries used by the NetApp Trident CSI for iSCSI. It contains lsscsi, ls, free, pgrep, cat and dd. |
 | [zfs](storage/zfs) | :yellow_square: extra | [ghcr.io/siderolabs/zfs](https://github.com/siderolabs/extensions/pkgs/container/zfs) | `2.4.4-VERSION` |  This system extension provides the ZFS kernel module, the ZFS utilities, and a service to import all ZFS pools on start and unmount all pools on stop. |
 

hypervisors/libvirtd/json-glib/pkg.yaml

@@ -0,0 +1,41 @@
+name: json-glib
+variant: scratch
+shell: /bin/bash
+dependencies:
+  - stage: base
+  - stage: glib
+steps:
+  - sources:
+      - url: https://download.gnome.org/sources/json-glib/{{ regexReplaceAll "\\.[0-9]+$" .JSON_GLIB_VERSION "" }}/json-glib-{{ .JSON_GLIB_VERSION }}.tar.xz
+        destination: json-glib.tar.xz
+        sha256: "{{ .JSON_GLIB_SHA256 }}"
+        sha512: "{{ .JSON_GLIB_SHA512 }}"
+    prepare:
+      - |
+        tar -xf json-glib.tar.xz --strip-components=1
+        meson setup build \
+          --prefix=/usr/local \
+          --libdir=/usr/local/lib \
+          --buildtype=plain \
+          --wrap-mode=nodownload \
+          -Dintrospection=disabled \
+          -Ddocumentation=disabled \
+          -Dtests=false \
+          -Dconformance=false \
+          -Dinstalled_tests=false \
+          -Dnls=disabled
+    build:
+      - |
+        meson compile -C build
+    install:
+      - |
+        DESTDIR=/rootfs meson install --no-rebuild -C build
+    sbom:
+      outputPath: /rootfs/usr/local/share/spdx/json-glib.spdx.json
+      version: {{ .JSON_GLIB_VERSION }}
+      # No JSON-GLib CPE was found in Grype or the NVD dictionary.
+      licenses:
+        - LGPL-2.1-or-later
+finalize:
+  - from: /rootfs
+    to: /

hypervisors/libvirtd/json-glib/vars.yaml

@@ -0,0 +1,5 @@
+INTERNAL_PACKAGE: true
+# renovate: datasource=git-tags depName=https://gitlab.gnome.org/GNOME/json-glib.git
+JSON_GLIB_VERSION: 1.10.8
+JSON_GLIB_SHA256: 55c5c141a564245b8f8fbe7698663c87a45a7333c2a2c56f06f811ab73b212dd
+JSON_GLIB_SHA512: f4ba8660b586a4e738803e4dbfdfcd34fa7ceba9189e7bf3f2b50e21f4d4886f99535ceb3453c89b1d1ae8d96bf4168a135b73b7e1a2dbc46b19e9b710ad56a1