71566407-af62-4e37-9e87-5d67388e004d

Committed 24 Jun 2026 07:30PM UTC coverage: 71.962% (-0.007%) from 71.969%

Build # 71566407-af62-4e37-9e87-5d67388e004d

Build Type

push

prow

Committed by

web-flow

Commit Message

Merge pull request #18032 from 0xFelix/oci-export-phase2

Add OCI export support for VirtualMachineTemplates

Coverage Stats

432 of 589 new or added lines in 10 files covered. (73.34%)

669 existing lines in 8 files now uncovered.

81649 of 113462 relevant lines covered (71.96%)

468.97 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

71.78

/pkg/virt-handler/vm.go

/*
 * This file is part of the KubeVirt project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * Copyright The KubeVirt Authors.
 *
 */

package virthandler

import (
        "bytes"
        "context"
        "encoding/json"
        goerror "errors"
        "fmt"
        "os"
        "path/filepath"
        "regexp"
        "sort"
        "strings"
        "time"

        "github.com/opencontainers/cgroups"
        "libvirt.org/go/libvirtxml"

        k8sv1 "k8s.io/api/core/v1"
        "k8s.io/apimachinery/pkg/api/equality"
        "k8s.io/apimachinery/pkg/api/resource"
        metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
        "k8s.io/apimachinery/pkg/util/errors"
        "k8s.io/apimachinery/pkg/util/wait"
        "k8s.io/client-go/tools/cache"
        "k8s.io/client-go/tools/record"
        "k8s.io/client-go/util/workqueue"

        backupv1 "kubevirt.io/api/backup/v1alpha1"
        v1 "kubevirt.io/api/core/v1"
        "kubevirt.io/client-go/kubecli"
        "kubevirt.io/client-go/log"

        "kubevirt.io/kubevirt/pkg/config"
        "kubevirt.io/kubevirt/pkg/controller"
        "kubevirt.io/kubevirt/pkg/executor"
        hostdisk "kubevirt.io/kubevirt/pkg/host-disk"
        hotplugdisk "kubevirt.io/kubevirt/pkg/hotplug-disk"
        "kubevirt.io/kubevirt/pkg/hypervisor"
        metrics "kubevirt.io/kubevirt/pkg/monitoring/metrics/common/vmisync"
        vhmetrics "kubevirt.io/kubevirt/pkg/monitoring/metrics/virt-handler"
        "kubevirt.io/kubevirt/pkg/network/domainspec"
        neterrors "kubevirt.io/kubevirt/pkg/network/errors"
        netsetup "kubevirt.io/kubevirt/pkg/network/setup"
        netvmispec "kubevirt.io/kubevirt/pkg/network/vmispec"

        pluginv1alpha1 "kubevirt.io/api/plugin/v1alpha1"

        "kubevirt.io/kubevirt/pkg/safepath"
        "kubevirt.io/kubevirt/pkg/storage/reservation"
        storagetypes "kubevirt.io/kubevirt/pkg/storage/types"
        "kubevirt.io/kubevirt/pkg/util"
        "kubevirt.io/kubevirt/pkg/util/migrations"
        virtconfig "kubevirt.io/kubevirt/pkg/virt-config"
        "kubevirt.io/kubevirt/pkg/virt-config/featuregate"
        "kubevirt.io/kubevirt/pkg/virt-controller/watch/topology"
        virtcache "kubevirt.io/kubevirt/pkg/virt-handler/cache"
        "kubevirt.io/kubevirt/pkg/virt-handler/cgroup"
        cmdclient "kubevirt.io/kubevirt/pkg/virt-handler/cmd-client"
        containerdisk "kubevirt.io/kubevirt/pkg/virt-handler/container-disk"
        deviceManager "kubevirt.io/kubevirt/pkg/virt-handler/device-manager"
        "kubevirt.io/kubevirt/pkg/virt-handler/heartbeat"
        hotplugvolume "kubevirt.io/kubevirt/pkg/virt-handler/hotplug-disk"
        "kubevirt.io/kubevirt/pkg/virt-handler/isolation"
        launcherclients "kubevirt.io/kubevirt/pkg/virt-handler/launcher-clients"
        migrationproxy "kubevirt.io/kubevirt/pkg/virt-handler/migration-proxy"
        multipathmonitor "kubevirt.io/kubevirt/pkg/virt-handler/multipath-monitor"
        "kubevirt.io/kubevirt/pkg/virt-handler/plugins"
        "kubevirt.io/kubevirt/pkg/virt-handler/selinux"
        "kubevirt.io/kubevirt/pkg/virt-launcher/virtwrap/api"
)

type netstat interface {
        UpdateStatus(vmi *v1.VirtualMachineInstance, domain *api.Domain) error
        Teardown(vmi *v1.VirtualMachineInstance)
}

type downwardMetricsManager interface {
        Run(stopCh chan struct{})
        StartServer(vmi *v1.VirtualMachineInstance, pid int) error
        StopServer(vmi *v1.VirtualMachineInstance)
}

type VirtualMachineController struct {
        *BaseController
        capabilities             *libvirtxml.Caps
        clientset                kubecli.KubevirtClient
        containerDiskMounter     containerdisk.Mounter
        downwardMetricsManager   downwardMetricsManager
        hotplugVolumeMounter     hotplugvolume.VolumeMounter
        hostCpuModel             string
        ioErrorRetryManager      *FailRetryManager
        pluginExecutor           plugins.NodeHookExecutor
        deviceManagerController  *deviceManager.DeviceController
        heartBeat                *heartbeat.HeartBeat
        heartBeatInterval        time.Duration
        netConf                  netconf
        sriovHotplugExecutorPool *executor.RateLimitedExecutorPool
        vmiExpectations          *controller.UIDTrackingControllerExpectations
        vmiGlobalStore           cache.Store
        multipathSocketMonitor   *multipathmonitor.MultipathSocketMonitor
        cbtHandler               *CBTHandler
}

var getCgroupManager = func(vmi *v1.VirtualMachineInstance, host string, hypervisorNodeInfo hypervisor.HypervisorNodeInformation, allowEmulation bool) (cgroup.Manager, error) {
        return cgroup.NewManagerFromVM(vmi, host, hypervisorNodeInfo.GetHypervisorDevice(), allowEmulation)
}

func NewVirtualMachineController(
        recorder record.EventRecorder,
        clientset kubecli.KubevirtClient,
        nodeStore cache.Store,
        host string,
        virtPrivateDir string,
        kubeletPodsDir string,
        launcherClients launcherclients.LauncherClientsManager,
        vmiInformer cache.SharedIndexInformer,
        vmiGlobalStore cache.Store,
        domainInformer cache.SharedInformer,
        maxDevices int,
        clusterConfig *virtconfig.ClusterConfig,
        podIsolationDetector isolation.PodIsolationDetector,
        migrationProxy migrationproxy.ProxyManager,
        downwardMetricsManager downwardMetricsManager,
        capabilities *libvirtxml.Caps,
        hostCpuModel string,
        netConf netconf,
        netStat netstat,
        cbtHandler *CBTHandler,
        pluginStore cache.Store,
        pluginExecutor plugins.NodeHookExecutor,
) (*VirtualMachineController, error) {

        queue := workqueue.NewTypedRateLimitingQueueWithConfig[string](
                workqueue.DefaultTypedControllerRateLimiter[string](),
                workqueue.TypedRateLimitingQueueConfig[string]{Name: "virt-handler-vm"},
        )
        logger := log.Log.With("controller", "vm")

        hypervisorName := clusterConfig.GetHypervisor().Name

        baseCtrl, err := NewBaseController(
                logger,
                host,
                recorder,
                clientset,
                queue,
                vmiInformer,
                domainInformer,
                clusterConfig,
                podIsolationDetector,
                launcherClients,
                migrationProxy,
                "/proc/%d/root/var/run",
                netStat,
                hypervisor.NewHypervisorNodeInformation(hypervisorName),
                hypervisor.GetVirtRuntime(podIsolationDetector, hypervisorName),
                pluginStore,
        )
        if err != nil {
                return nil, err
        }

        containerDiskState := filepath.Join(virtPrivateDir, "container-disk-mount-state")
        if err := os.MkdirAll(containerDiskState, 0700); err != nil {
                return nil, err
        }

        hotplugState := filepath.Join(virtPrivateDir, "hotplug-volume-mount-state")
        if err := os.MkdirAll(hotplugState, 0700); err != nil {
                return nil, err
        }

        c := &VirtualMachineController{
                BaseController:           baseCtrl,
                capabilities:             capabilities,
                clientset:                clientset,
                containerDiskMounter:     containerdisk.NewMounter(podIsolationDetector, containerDiskState, clusterConfig),
                downwardMetricsManager:   downwardMetricsManager,
                hotplugVolumeMounter:     hotplugvolume.NewVolumeMounter(hotplugState, kubeletPodsDir, host),
                hostCpuModel:             hostCpuModel,
                ioErrorRetryManager:      NewFailRetryManager("io-error-retry", 10*time.Second, 3*time.Minute, 30*time.Second),
                heartBeatInterval:        1 * time.Minute,
                netConf:                  netConf,
                sriovHotplugExecutorPool: executor.NewRateLimitedExecutorPool(executor.NewExponentialLimitedBackoffCreator()),
                vmiExpectations:          controller.NewUIDTrackingControllerExpectations(controller.NewControllerExpectations()),
                vmiGlobalStore:           vmiGlobalStore,
                multipathSocketMonitor:   multipathmonitor.NewMultipathSocketMonitor(),
                cbtHandler:               cbtHandler,
                pluginExecutor:           pluginExecutor,
        }

        _, err = vmiInformer.AddEventHandler(cache.ResourceEventHandlerFuncs{
                AddFunc:    c.addDeleteFunc,
                DeleteFunc: c.addDeleteFunc,
                UpdateFunc: c.updateFunc,
        })
        if err != nil {
                return nil, err
        }

        _, err = domainInformer.AddEventHandler(cache.ResourceEventHandlerFuncs{
                AddFunc:    c.addDomainFunc,
                DeleteFunc: c.deleteDomainFunc,
                UpdateFunc: c.updateDomainFunc,
        })
        if err != nil {
                return nil, err
        }

        permissions := "rw"
        if cgroups.IsCgroup2UnifiedMode() {
                // Need 'rwm' permissions otherwise ebpf filtering program attached by runc
                // will deny probing the device file with 'access' syscall. That in turn
                // will lead to virtqemud failure on VM startup.
                // This has been fixed upstream:
                //   https://github.com/opencontainers/runc/pull/2796
                // but the workaround is still needed to support previous versions without
                // the patch.
                permissions = "rwm"
        }

        c.deviceManagerController = deviceManager.NewDeviceController(
                c.host,
                maxDevices,
                permissions,
                deviceManager.PermanentHostDevicePlugins(c.hypervisorNodeInfo.GetHypervisorDevice(), maxDevices, permissions),
                clusterConfig,
                nodeStore)
        c.heartBeat = heartbeat.NewHeartBeat(clientset.CoreV1(), c.deviceManagerController, clusterConfig, host)

        return c, nil
}

func (c *VirtualMachineController) Run(threadiness int, stopCh chan struct{}) {
        defer c.queue.ShutDown()
        c.logger.Info("Starting virt-handler vms controller.")

        go c.deviceManagerController.Run(stopCh)

        go c.downwardMetricsManager.Run(stopCh)

        cache.WaitForCacheSync(stopCh, c.hasSynced)

        // queue keys for previous Domains on the host that no longer exist
        // in the cache. This ensures we perform local cleanup of deleted VMs.
        for _, domain := range c.domainStore.List() {
                d := domain.(*api.Domain)
                vmiRef := v1.NewVMIReferenceWithUUID(
                        d.ObjectMeta.Namespace,
                        d.ObjectMeta.Name,
                        d.Spec.Metadata.KubeVirt.UID)

                key := controller.VirtualMachineInstanceKey(vmiRef)

                _, exists, _ := c.vmiStore.GetByKey(key)
                if !exists {
                        c.queue.Add(key)
                }
        }
        c.multipathSocketMonitor.Run()

        heartBeatDone := c.heartBeat.Run(c.heartBeatInterval, stopCh)

        go c.ioErrorRetryManager.Run(stopCh)

        // Start the actual work
        for i := 0; i < threadiness; i++ {
                go wait.Until(c.runWorker, time.Second, stopCh)
        }

        <-heartBeatDone
        <-stopCh
        c.multipathSocketMonitor.Close()
        c.logger.Info("Stopping virt-handler vms controller.")
}

func (c *VirtualMachineController) runWorker() {
        for c.Execute() {
        }
}

func (c *VirtualMachineController) Execute() bool {
        key, quit := c.queue.Get()
        if quit {
                return false
        }
        defer c.queue.Done(key)
        if err := c.execute(key); err != nil {
                c.logger.Reason(err).Infof("re-enqueuing VirtualMachineInstance %v", key)
                c.queue.AddRateLimited(key)
        } else {
                c.logger.V(4).Infof("processed VirtualMachineInstance %v", key)
                c.queue.Forget(key)
        }
        return true
}

func (c *VirtualMachineController) execute(key string) error {
        vmi, vmiExists, err := c.getVMIFromCache(key)
        if err != nil {
                return err
        }

        if !vmiExists {
                // the vmiInformer probably has to catch up to the domainInformer
                // which already sees the vmi, so let's fetch it from the global
                // vmi informer to make sure the vmi has actually been deleted
                c.logger.V(4).Infof("fetching vmi for key %v from the global informer", key)
                obj, exists, err := c.vmiGlobalStore.GetByKey(key)
                if err != nil {
                        return err
                }
                if exists {
                        vmi = obj.(*v1.VirtualMachineInstance)
                }
                vmiExists = exists
        }

        if !vmiExists {
                c.vmiExpectations.DeleteExpectations(key)
        } else if !c.vmiExpectations.SatisfiedExpectations(key) {
                return nil
        }

        domain, domainExists, domainCachedUID, err := c.getDomainFromCache(key)
        if err != nil {
                return err
        }
        c.logger.Object(vmi).V(4).Infof("domain exists %v", domainExists)

        if !vmiExists && string(domainCachedUID) != "" {
                // it's possible to discover the UID from cache even if the domain
                // doesn't technically exist anymore
                vmi.UID = domainCachedUID
                c.logger.Object(vmi).Infof("Using cached UID for vmi found in domain cache")
        }

        // As a last effort, if the UID still can't be determined attempt
        // to retrieve it from the ghost record
        if string(vmi.UID) == "" {
                uid := virtcache.GhostRecordGlobalStore.LastKnownUID(key)
                if uid != "" {
                        c.logger.Object(vmi).V(3).Infof("ghost record cache provided %s as UID", uid)
                        vmi.UID = uid
                }
        }

        if vmiExists && domainExists && domain.Spec.Metadata.KubeVirt.UID != vmi.UID {
                oldVMI := v1.NewVMIReferenceFromNameWithNS(vmi.Namespace, vmi.Name)
                oldVMI.UID = domain.Spec.Metadata.KubeVirt.UID
                expired, initialized, err := c.launcherClients.IsLauncherClientUnresponsive(oldVMI)
                if err != nil {
                        return err
                }
                // If we found an outdated domain which is also not alive anymore, clean up
                if !initialized {
                        c.queue.AddAfter(controller.VirtualMachineInstanceKey(vmi), time.Second*1)
                        return nil
                } else if expired {
                        c.logger.Object(oldVMI).Infof("Detected stale vmi %s that still needs cleanup before new vmi %s with identical name/namespace can be processed", oldVMI.UID, vmi.UID)
                        err = c.processVmCleanup(oldVMI)
                        if err != nil {
                                return err
                        }
                        // Make sure we re-enqueue the key to ensure this new VMI is processed
                        // after the stale domain is removed
                        c.queue.AddAfter(controller.VirtualMachineInstanceKey(vmi), time.Second*5)
                }

                return nil
        }

        if domainExists &&
                (domainMigrated(domain) || domain.DeletionTimestamp != nil) {
                c.logger.Object(vmi).V(4).Info("detected orphan vmi")
                return c.deleteVM(vmi)
        }

        if migrations.IsMigrating(vmi) && (vmi.Status.Phase == v1.Failed) {
                c.logger.V(1).Infof("cleaning up VMI key %v as migration is in progress and the vmi is failed", key)
                err = c.processVmCleanup(vmi)
                if err != nil {
                        return err
                }
        }

        if vmi.DeletionTimestamp == nil && isMigrationInProgress(vmi, domain) {
                c.logger.V(4).Infof("ignoring key %v as migration is in progress", key)
                return nil
        }

        if vmiExists && !c.isVMIOwnedByNode(vmi) {
                c.logger.Object(vmi).V(4).Info("ignoring vmi as it is not owned by this node")
                return nil
        }

        if vmiExists && vmi.IsMigrationSource() {
                c.logger.Object(vmi).V(4).Info("ignoring vmi as it is a migration source")
                return nil
        }

        err = c.sync(key,
                vmi.DeepCopy(),
                vmiExists,
                domain,
                domainExists)
        _, localExists, _ := c.getVMIFromCache(key)
        if !localExists {
                metrics.ResetVMISync(key)
        }
        return err

}

type vmiIrrecoverableError struct {
        msg string
}

func (e *vmiIrrecoverableError) Error() string { return e.msg }

func formatIrrecoverableErrorMessage(domain *api.Domain) string {
        msg := "unknown reason"
        if domainPausedFailedPostCopy(domain) {
                msg = "VMI is irrecoverable due to failed post-copy migration"
        }
        return msg
}

func domainPausedFailedPostCopy(domain *api.Domain) bool {
        return domain != nil && domain.Status.Status == api.Paused && domain.Status.Reason == api.ReasonPausedPostcopyFailed
}

// teardownNetwork performs network cache cleanup for a specific VMI.
func (c *VirtualMachineController) teardownNetwork(vmi *v1.VirtualMachineInstance) {
        if string(vmi.UID) == "" {
                return
        }
        if err := c.netConf.Teardown(vmi); err != nil {
                c.logger.Reason(err).Errorf("failed to delete VMI Network cache files: %s", err.Error())
        }
        c.netStat.Teardown(vmi)
}

func canUpdateToMounted(currentPhase v1.VolumePhase) bool {
        return currentPhase == v1.VolumeBound || currentPhase == v1.VolumePending || currentPhase == v1.HotplugVolumeAttachedToNode
}

func canUpdateToUnmounted(currentPhase v1.VolumePhase) bool {
        return currentPhase == v1.VolumeReady || currentPhase == v1.HotplugVolumeMounted || currentPhase == v1.HotplugVolumeAttachedToNode
}

func (c *VirtualMachineController) generateEventsForVolumeStatusChange(vmi *v1.VirtualMachineInstance, newStatusMap map[string]v1.VolumeStatus) {
        newStatusMapCopy := make(map[string]v1.VolumeStatus)
        for k, v := range newStatusMap {
                newStatusMapCopy[k] = v
        }
        for _, oldStatus := range vmi.Status.VolumeStatus {
                newStatus, ok := newStatusMap[oldStatus.Name]
                if !ok {
                        // status got removed
                        c.recorder.Event(vmi, k8sv1.EventTypeNormal, VolumeUnplugged, fmt.Sprintf("Volume %s has been unplugged", oldStatus.Name))
                        continue
                }
                if newStatus.Phase != oldStatus.Phase {
                        c.recorder.Event(vmi, k8sv1.EventTypeNormal, newStatus.Reason, newStatus.Message)
                }
                delete(newStatusMapCopy, newStatus.Name)
        }
        // Send events for any new statuses.
        for _, v := range newStatusMapCopy {
                c.recorder.Event(vmi, k8sv1.EventTypeNormal, v.Reason, v.Message)
        }
}

func (c *VirtualMachineController) updateHotplugVolumeStatus(vmi *v1.VirtualMachineInstance, volumeStatus v1.VolumeStatus, specVolumeMap map[string]struct{}) (v1.VolumeStatus, bool) {
        needsRefresh := false
        if volumeStatus.Target == "" {
                needsRefresh = true
                mounted, err := c.hotplugVolumeMounter.IsMounted(vmi, volumeStatus.Name, volumeStatus.HotplugVolume.AttachPodUID)
                if err != nil {
                        c.logger.Object(vmi).Errorf("error occurred while checking if volume is mounted: %v", err)
                }
                if mounted {
                        if _, ok := specVolumeMap[volumeStatus.Name]; ok && canUpdateToMounted(volumeStatus.Phase) {
                                log.DefaultLogger().Infof("Marking volume %s as mounted in pod, it can now be attached", volumeStatus.Name)
                                // mounted, and still in spec, and in phase we can change, update status to mounted.
                                volumeStatus.Phase = v1.HotplugVolumeMounted
                                volumeStatus.Message = fmt.Sprintf("Volume %s has been mounted in virt-launcher pod", volumeStatus.Name)
                                volumeStatus.Reason = VolumeMountedToPodReason
                        }
                } else {
                        // Not mounted, check if the volume is in the spec, if not update status
                        if _, ok := specVolumeMap[volumeStatus.Name]; !ok && canUpdateToUnmounted(volumeStatus.Phase) {
                                log.DefaultLogger().Infof("Marking volume %s as unmounted from pod, it can now be detached", volumeStatus.Name)
                                // Not mounted.
                                volumeStatus.Phase = v1.HotplugVolumeUnMounted
                                volumeStatus.Message = fmt.Sprintf("Volume %s has been unmounted from virt-launcher pod", volumeStatus.Name)
                                volumeStatus.Reason = VolumeUnMountedFromPodReason
                        }
                }
        } else {
                // Successfully attached to VM.
                volumeStatus.Phase = v1.VolumeReady
                volumeStatus.Message = fmt.Sprintf("Successfully attach hotplugged volume %s to VM", volumeStatus.Name)
                volumeStatus.Reason = VolumeReadyReason
        }
        return volumeStatus, needsRefresh
}

func needToComputeChecksums(vmi *v1.VirtualMachineInstance) bool {
        containerDisks := map[string]*v1.Volume{}
        for _, volume := range vmi.Spec.Volumes {
                if volume.VolumeSource.ContainerDisk != nil {
                        containerDisks[volume.Name] = &volume
                }
        }

        for i := range vmi.Status.VolumeStatus {
                _, isContainerDisk := containerDisks[vmi.Status.VolumeStatus[i].Name]
                if !isContainerDisk {
                        continue
                }

                if vmi.Status.VolumeStatus[i].ContainerDiskVolume == nil ||
                        vmi.Status.VolumeStatus[i].ContainerDiskVolume.Checksum == 0 {
                        return true
                }
        }

        if util.HasKernelBootContainerImage(vmi) {
                if vmi.Status.KernelBootStatus == nil {
                        return true
                }

                kernelBootContainer := vmi.Spec.Domain.Firmware.KernelBoot.Container

                if kernelBootContainer.KernelPath != "" &&
                        (vmi.Status.KernelBootStatus.KernelInfo == nil ||
                                vmi.Status.KernelBootStatus.KernelInfo.Checksum == 0) {
                        return true

                }

                if kernelBootContainer.InitrdPath != "" &&
                        (vmi.Status.KernelBootStatus.InitrdInfo == nil ||
                                vmi.Status.KernelBootStatus.InitrdInfo.Checksum == 0) {
                        return true

                }
        }

        return false
}

// updateChecksumInfo is kept for compatibility with older virt-handlers
// that validate checksum calculations in vmi.status. This validation was
// removed in PR #14021, but we had to keep the checksum calculations for upgrades.
// Once we're sure old handlers won't interrupt upgrades, this can be removed.
func (c *VirtualMachineController) updateChecksumInfo(vmi *v1.VirtualMachineInstance, syncError error) error {
        // If the imageVolume feature gate is enabled, upgrade support isn't required,
        // and we can skip the checksum calculation. By the time the feature gate is GA,
        // the checksum calculation should be removed.
        if syncError != nil || vmi.DeletionTimestamp != nil || !needToComputeChecksums(vmi) || c.clusterConfig.ImageVolumeEnabled() {
                return nil
        }

        diskChecksums, err := c.containerDiskMounter.ComputeChecksums(vmi)
        if goerror.Is(err, containerdisk.ErrDiskContainerGone) {
                c.logger.Errorf("cannot compute checksums as containerdisk/kernelboot containers seem to have been terminated")
                return nil
        }
        if err != nil {
                return err
        }

        // containerdisks
        for i := range vmi.Status.VolumeStatus {
                checksum, exists := diskChecksums.ContainerDiskChecksums[vmi.Status.VolumeStatus[i].Name]
                if !exists {
                        // not a containerdisk
                        continue
                }

                vmi.Status.VolumeStatus[i].ContainerDiskVolume = &v1.ContainerDiskInfo{
                        Checksum: checksum,
                }
        }

        // kernelboot
        if util.HasKernelBootContainerImage(vmi) {
                vmi.Status.KernelBootStatus = &v1.KernelBootStatus{}

                if diskChecksums.KernelBootChecksum.Kernel != nil {
                        vmi.Status.KernelBootStatus.KernelInfo = &v1.KernelInfo{
                                Checksum: *diskChecksums.KernelBootChecksum.Kernel,
                        }
                }

                if diskChecksums.KernelBootChecksum.Initrd != nil {
                        vmi.Status.KernelBootStatus.InitrdInfo = &v1.InitrdInfo{
                                Checksum: *diskChecksums.KernelBootChecksum.Initrd,
                        }
                }
        }

        return nil
}

func (c *VirtualMachineController) updateVolumeStatusesFromDomain(vmi *v1.VirtualMachineInstance, domain *api.Domain) bool {
        // The return value is only used by unit tests
        hasHotplug := false

        if len(vmi.Status.VolumeStatus) == 0 {
                return false
        }

        diskDeviceMap := make(map[string]string)
        if domain != nil {
                for _, disk := range domain.Spec.Devices.Disks {
                        // don't care about empty cdroms
                        if disk.Source.File != "" || disk.Source.Dev != "" {
                                diskDeviceMap[disk.Alias.GetName()] = disk.Target.Device
                        }
                }
        }
        specVolumeMap := make(map[string]struct{})
        for _, volume := range vmi.Spec.Volumes {
                specVolumeMap[volume.Name] = struct{}{}
        }
        for _, utilityVolume := range vmi.Spec.UtilityVolumes {
                specVolumeMap[utilityVolume.Name] = struct{}{}
        }
        newStatusMap := make(map[string]v1.VolumeStatus)
        var newStatuses []v1.VolumeStatus
        needsRefresh := false
        for _, volumeStatus := range vmi.Status.VolumeStatus {
                tmpNeedsRefresh := false
                // relying on the fact that target will be "" if not in the map
                // see updateHotplugVolumeStatus
                volumeStatus.Target = diskDeviceMap[volumeStatus.Name]
                if volumeStatus.HotplugVolume != nil {
                        hasHotplug = true
                        volumeStatus, tmpNeedsRefresh = c.updateHotplugVolumeStatus(vmi, volumeStatus, specVolumeMap)
                        needsRefresh = needsRefresh || tmpNeedsRefresh
                }
                if volumeStatus.MemoryDumpVolume != nil {
                        volumeStatus, tmpNeedsRefresh = c.updateMemoryDumpInfo(vmi, volumeStatus, domain)
                        needsRefresh = needsRefresh || tmpNeedsRefresh
                }
                newStatuses = append(newStatuses, volumeStatus)
                newStatusMap[volumeStatus.Name] = volumeStatus
        }
        sort.SliceStable(newStatuses, func(i, j int) bool {
                return strings.Compare(newStatuses[i].Name, newStatuses[j].Name) == -1
        })
        if needsRefresh {
                c.queue.AddAfter(controller.VirtualMachineInstanceKey(vmi), time.Second)
        }
        c.generateEventsForVolumeStatusChange(vmi, newStatusMap)
        vmi.Status.VolumeStatus = newStatuses

        return hasHotplug
}

func (c *VirtualMachineController) updateGuestInfoFromDomain(vmi *v1.VirtualMachineInstance, domain *api.Domain) {

        if domain == nil || domain.Status.OSInfo.Name == "" || vmi.Status.GuestOSInfo.Name == domain.Status.OSInfo.Name {
                return
        }

        vmi.Status.GuestOSInfo.Name = domain.Status.OSInfo.Name
        vmi.Status.GuestOSInfo.Version = domain.Status.OSInfo.Version
        vmi.Status.GuestOSInfo.KernelRelease = domain.Status.OSInfo.KernelRelease
        vmi.Status.GuestOSInfo.PrettyName = domain.Status.OSInfo.PrettyName
        vmi.Status.GuestOSInfo.VersionID = domain.Status.OSInfo.VersionId
        vmi.Status.GuestOSInfo.KernelVersion = domain.Status.OSInfo.KernelVersion
        vmi.Status.GuestOSInfo.Machine = domain.Status.OSInfo.Machine
        vmi.Status.GuestOSInfo.ID = domain.Status.OSInfo.Id
}

func (c *VirtualMachineController) updateAccessCredentialConditions(vmi *v1.VirtualMachineInstance, domain *api.Domain, condManager *controller.VirtualMachineInstanceConditionManager) {

        if domain == nil || domain.Spec.Metadata.KubeVirt.AccessCredential == nil {
                return
        }

        message := domain.Spec.Metadata.KubeVirt.AccessCredential.Message
        status := k8sv1.ConditionFalse
        if domain.Spec.Metadata.KubeVirt.AccessCredential.Succeeded {
                status = k8sv1.ConditionTrue
        }

        add := false
        condition := condManager.GetCondition(vmi, v1.VirtualMachineInstanceAccessCredentialsSynchronized)
        if condition == nil {
                add = true
        } else if condition.Status != status || condition.Message != message {
                // if not as expected, remove, then add.
                condManager.RemoveCondition(vmi, v1.VirtualMachineInstanceAccessCredentialsSynchronized)
                add = true
        }
        if add {
                newCondition := v1.VirtualMachineInstanceCondition{
                        Type:               v1.VirtualMachineInstanceAccessCredentialsSynchronized,
                        LastTransitionTime: metav1.Now(),
                        Status:             status,
                        Message:            message,
                }
                vmi.Status.Conditions = append(vmi.Status.Conditions, newCondition)
                if status == k8sv1.ConditionTrue {
                        eventMessage := "Access credentials sync successful."
                        if message != "" {
                                eventMessage = fmt.Sprintf("Access credentials sync successful: %s", message)
                        }
                        c.recorder.Event(vmi, k8sv1.EventTypeNormal, v1.AccessCredentialsSyncSuccess.String(), eventMessage)
                } else {
                        c.recorder.Event(vmi, k8sv1.EventTypeWarning, v1.AccessCredentialsSyncFailed.String(),
                                fmt.Sprintf("Access credentials sync failed: %s", message),
                        )
                }
        }
}

func (c *VirtualMachineController) updateLiveMigrationConditions(vmi *v1.VirtualMachineInstance, condManager *controller.VirtualMachineInstanceConditionManager) {
        // Calculate whether the VM is migratable
        liveMigrationCondition, isBlockMigration := c.calculateLiveMigrationCondition(vmi)
        if !condManager.HasCondition(vmi, v1.VirtualMachineInstanceIsMigratable) {
                vmi.Status.Conditions = append(vmi.Status.Conditions, *liveMigrationCondition)
        } else {
                cond := condManager.GetCondition(vmi, v1.VirtualMachineInstanceIsMigratable)
                if !equality.Semantic.DeepEqual(cond, liveMigrationCondition) {
                        condManager.RemoveCondition(vmi, v1.VirtualMachineInstanceIsMigratable)
                        vmi.Status.Conditions = append(vmi.Status.Conditions, *liveMigrationCondition)
                }
        }
        // Set VMI Migration Method
        if isBlockMigration {
                vmi.Status.MigrationMethod = v1.BlockMigration
        } else {
                vmi.Status.MigrationMethod = v1.LiveMigration
        }
        storageLiveMigCond := c.calculateLiveStorageMigrationCondition(vmi)
        condManager.UpdateCondition(vmi, storageLiveMigCond)
        evictable := migrations.VMIMigratableOnEviction(c.clusterConfig, vmi)
        if evictable && liveMigrationCondition.Status == k8sv1.ConditionFalse {
                c.recorder.Eventf(vmi, k8sv1.EventTypeWarning, v1.Migrated.String(), "EvictionStrategy is set but vmi is not migratable; %s", liveMigrationCondition.Message)
        }
}

func guestAgentConnected(domain *api.Domain) bool {
        if domain != nil {
                for _, channel := range domain.Spec.Devices.Channels {
                        if channel.Target != nil && channel.Target.Name == "org.qemu.guest_agent.0" &&
                                channel.Target.State == "connected" {
                                return true
                        }
                }
        }
        return false
}

func (c *VirtualMachineController) updateGuestAgentConditions(vmi *v1.VirtualMachineInstance, channelConnected bool, condManager *controller.VirtualMachineInstanceConditionManager) error {

        // Update the condition when GA is connected
        switch {
        case channelConnected && !condManager.HasCondition(vmi, v1.VirtualMachineInstanceAgentConnected):
                agentCondition := v1.VirtualMachineInstanceCondition{
                        Type:          v1.VirtualMachineInstanceAgentConnected,
                        LastProbeTime: metav1.Now(),
                        Status:        k8sv1.ConditionTrue,
                }
                vmi.Status.Conditions = append(vmi.Status.Conditions, agentCondition)
        case !channelConnected:
                condManager.RemoveCondition(vmi, v1.VirtualMachineInstanceAgentConnected)
        }

        if condManager.HasCondition(vmi, v1.VirtualMachineInstanceAgentConnected) {
                client, err := c.launcherClients.GetLauncherClient(vmi)
                if err != nil {
                        return err
                }

                guestInfo, err := client.GetGuestInfo()
                if err != nil {
                        return err
                }

                var supported = false
                var reason = ""

                // For current versions, virt-launcher's supported commands will always contain data.
                // For backwards compatibility: during upgrade from a previous version of KubeVirt,
                // virt-launcher might not provide any supported commands. If the list of supported
                // commands is empty, fall back to previous behavior.
                if len(guestInfo.SupportedCommands) > 0 {
                        supported, reason = isGuestAgentSupported(vmi, guestInfo.SupportedCommands)
                        c.logger.V(3).Object(vmi).Info(reason)
                } else {
                        for _, version := range c.clusterConfig.GetSupportedAgentVersions() {
                                supported = supported || regexp.MustCompile(version).MatchString(guestInfo.GAVersion)
                        }
                        if !supported {
                                reason = fmt.Sprintf("Guest agent version '%s' is not supported", guestInfo.GAVersion)
                        }
                }

                if !supported {
                        if !condManager.HasCondition(vmi, v1.VirtualMachineInstanceUnsupportedAgent) {
                                agentCondition := v1.VirtualMachineInstanceCondition{
                                        Type:          v1.VirtualMachineInstanceUnsupportedAgent,
                                        LastProbeTime: metav1.Now(),
                                        Status:        k8sv1.ConditionTrue,
                                        Reason:        reason,
                                }
                                vmi.Status.Conditions = append(vmi.Status.Conditions, agentCondition)
                        }
                } else {
                        condManager.RemoveCondition(vmi, v1.VirtualMachineInstanceUnsupportedAgent)
                }

        }
        return nil
}

func (c *VirtualMachineController) updatePausedConditions(vmi *v1.VirtualMachineInstance, domain *api.Domain, condManager *controller.VirtualMachineInstanceConditionManager) {

        // Update paused condition in case VMI was paused / unpaused
        if domain != nil && domain.Status.Status == api.Paused {
                if !condManager.HasCondition(vmi, v1.VirtualMachineInstancePaused) {
                        c.calculatePausedCondition(vmi, domain.Status.Reason)
                }
        } else if condManager.HasCondition(vmi, v1.VirtualMachineInstancePaused) {
                c.logger.Object(vmi).V(3).Info("Removing paused condition")
                condManager.RemoveCondition(vmi, v1.VirtualMachineInstancePaused)
        }
}

func dumpTargetFile(vmiName, volName string) string {
        targetFileName := fmt.Sprintf("%s-%s-%s.memory.dump", vmiName, volName, time.Now().Format("20060102-150405"))
        return targetFileName
}

func (c *VirtualMachineController) updateMemoryDumpInfo(vmi *v1.VirtualMachineInstance, volumeStatus v1.VolumeStatus, domain *api.Domain) (v1.VolumeStatus, bool) {
        needsRefresh := false
        switch volumeStatus.Phase {
        case v1.HotplugVolumeMounted:
                needsRefresh = true
                c.logger.Object(vmi).V(3).Infof("Memory dump volume %s attached, marking it in progress", volumeStatus.Name)
                volumeStatus.Phase = v1.MemoryDumpVolumeInProgress
                volumeStatus.Message = fmt.Sprintf("Memory dump Volume %s is attached, getting memory dump", volumeStatus.Name)
                volumeStatus.Reason = VolumeMountedToPodReason
                volumeStatus.MemoryDumpVolume.TargetFileName = dumpTargetFile(vmi.Name, volumeStatus.Name)
        case v1.MemoryDumpVolumeInProgress:
                var memoryDumpMetadata *api.MemoryDumpMetadata
                if domain != nil {
                        memoryDumpMetadata = domain.Spec.Metadata.KubeVirt.MemoryDump
                }
                if memoryDumpMetadata == nil || memoryDumpMetadata.FileName != volumeStatus.MemoryDumpVolume.TargetFileName {
                        // memory dump wasnt triggered yet
                        return volumeStatus, needsRefresh
                }
                needsRefresh = true
                if memoryDumpMetadata.StartTimestamp != nil {
                        volumeStatus.MemoryDumpVolume.StartTimestamp = memoryDumpMetadata.StartTimestamp
                }
                if memoryDumpMetadata.EndTimestamp != nil && memoryDumpMetadata.Failed {
                        c.logger.Object(vmi).Errorf("Memory dump to pvc %s failed: %v", volumeStatus.Name, memoryDumpMetadata.FailureReason)
                        volumeStatus.Message = fmt.Sprintf("Memory dump to pvc %s failed: %v", volumeStatus.Name, memoryDumpMetadata.FailureReason)
                        volumeStatus.Phase = v1.MemoryDumpVolumeFailed
                        volumeStatus.MemoryDumpVolume.EndTimestamp = memoryDumpMetadata.EndTimestamp
                } else if memoryDumpMetadata.Completed {
                        c.logger.Object(vmi).V(3).Infof("Marking memory dump to volume %s has completed", volumeStatus.Name)
                        volumeStatus.Phase = v1.MemoryDumpVolumeCompleted
                        volumeStatus.Message = fmt.Sprintf("Memory dump to Volume %s has completed successfully", volumeStatus.Name)
                        volumeStatus.Reason = VolumeReadyReason
                        volumeStatus.MemoryDumpVolume.EndTimestamp = memoryDumpMetadata.EndTimestamp
                }
        }

        return volumeStatus, needsRefresh
}

func (c *VirtualMachineController) updateFSFreezeStatus(vmi *v1.VirtualMachineInstance, domain *api.Domain) {

        if domain == nil || domain.Status.FSFreezeStatus.Status == "" {
                return
        }

        if domain.Status.FSFreezeStatus.Status == api.FSThawed {
                vmi.Status.FSFreezeStatus = ""
        } else {
                vmi.Status.FSFreezeStatus = domain.Status.FSFreezeStatus.Status
        }

}

func IsoGuestVolumePath(namespace, name string, volume *v1.Volume) string {
        const basepath = "/var/run"
        switch {
        case volume.CloudInitNoCloud != nil:
                return filepath.Join(basepath, "kubevirt-ephemeral-disks", "cloud-init-data", namespace, name, "noCloud.iso")
        case volume.CloudInitConfigDrive != nil:
                return filepath.Join(basepath, "kubevirt-ephemeral-disks", "cloud-init-data", namespace, name, "configdrive.iso")
        case volume.ConfigMap != nil:
                return config.GetConfigMapDiskPath(volume.Name)
        case volume.DownwardAPI != nil:
                return config.GetDownwardAPIDiskPath(volume.Name)
        case volume.Secret != nil:
                return config.GetSecretDiskPath(volume.Name)
        case volume.ServiceAccount != nil:
                return config.GetServiceAccountDiskPath()
        case volume.Sysprep != nil:
                return config.GetSysprepDiskPath(volume.Name)
        default:
                return ""
        }
}

func (c *VirtualMachineController) updateIsoSizeStatus(vmi *v1.VirtualMachineInstance) {
        var podUID string
        if vmi.Status.Phase != v1.Running {
                return
        }

        for k, v := range vmi.Status.ActivePods {
                if v == vmi.Status.NodeName {
                        podUID = string(k)
                        break
                }
        }
        if podUID == "" {
                log.DefaultLogger().Warningf("failed to find pod UID for VMI %s", vmi.Name)
                return
        }

        volumes := make(map[string]v1.Volume)
        for _, volume := range vmi.Spec.Volumes {
                volumes[volume.Name] = volume
        }

        for _, disk := range vmi.Spec.Domain.Devices.Disks {
                volume, ok := volumes[disk.Name]
                if !ok {
                        log.DefaultLogger().Warningf("No matching volume with name %s found", disk.Name)
                        continue
                }

                volPath := IsoGuestVolumePath(vmi.Namespace, vmi.Name, &volume)
                if volPath == "" {
                        continue
                }

                res, err := c.podIsolationDetector.Detect(vmi)
                if err != nil {
                        log.DefaultLogger().Reason(err).Warningf("failed to detect VMI %s", vmi.Name)
                        continue
                }

                rootPath, err := res.MountRoot()
                if err != nil {
                        log.DefaultLogger().Reason(err).Warningf("failed to detect VMI %s", vmi.Name)
                        continue
                }

                safeVolPath, err := rootPath.AppendAndResolveWithRelativeRoot(volPath)
                if err != nil {
                        log.DefaultLogger().Warningf("failed to determine file size for volume %s", volPath)
                        continue
                }
                fileInfo, err := safepath.StatAtNoFollow(safeVolPath)
                if err != nil {
                        log.DefaultLogger().Warningf("failed to determine file size for volume %s", volPath)
                        continue
                }

                for i := range vmi.Status.VolumeStatus {
                        if vmi.Status.VolumeStatus[i].Name == volume.Name {
                                vmi.Status.VolumeStatus[i].Size = fileInfo.Size()
                                continue
                        }
                }
        }
}

func (c *VirtualMachineController) updateSELinuxContext(vmi *v1.VirtualMachineInstance) error {
        _, present, err := selinux.NewSELinux()
        if err != nil {
                return err
        }
        if present {
                context, err := selinux.GetVirtLauncherContext(vmi)
                if err != nil {
                        return err
                }
                vmi.Status.SelinuxContext = context
        } else {
                vmi.Status.SelinuxContext = "none"
        }

        return nil
}

func (c *VirtualMachineController) updateMemoryInfo(vmi *v1.VirtualMachineInstance, domain *api.Domain) error {
        if domain == nil || vmi == nil || domain.Spec.CurrentMemory == nil {
                return nil
        }
        if vmi.Status.Memory == nil {
                vmi.Status.Memory = &v1.MemoryStatus{}
        }
        currentGuest := parseLibvirtQuantity(int64(domain.Spec.CurrentMemory.Value), domain.Spec.CurrentMemory.Unit)
        vmi.Status.Memory.GuestCurrent = currentGuest
        return nil
}

func (c *VirtualMachineController) updateVMIStatusFromDomain(vmi *v1.VirtualMachineInstance, domain *api.Domain) error {
        c.updateIsoSizeStatus(vmi)
        err := c.updateSELinuxContext(vmi)
        if err != nil {
                c.logger.Reason(err).Errorf("couldn't find the SELinux context for %s", vmi.Name)
        }
        c.updateGuestInfoFromDomain(vmi, domain)
        c.updateVolumeStatusesFromDomain(vmi, domain)
        c.updateFSFreezeStatus(vmi, domain)
        c.updateBackupStatus(vmi, domain)
        c.updateMachineType(vmi, domain)
        if err = c.updateMemoryInfo(vmi, domain); err != nil {
                return err
        }
        if err = c.cbtHandler.HandleChangedBlockTracking(vmi, domain); err != nil {
                return err
        }
        err = c.netStat.UpdateStatus(vmi, domain)
        return err
}

func (c *VirtualMachineController) updateVMIConditions(vmi *v1.VirtualMachineInstance, domain *api.Domain, condManager *controller.VirtualMachineInstanceConditionManager) error {
        c.updateAccessCredentialConditions(vmi, domain, condManager)
        c.updateLiveMigrationConditions(vmi, condManager)
        err := c.updateGuestAgentConditions(vmi, guestAgentConnected(domain), condManager)
        if err != nil {
                return err
        }
        c.updatePausedConditions(vmi, domain, condManager)

        return nil
}

func (c *VirtualMachineController) updateVMIStatus(oldStatus *v1.VirtualMachineInstanceStatus, vmi *v1.VirtualMachineInstance, domain *api.Domain, syncError error) (err error) {
        condManager := controller.NewVirtualMachineInstanceConditionManager()

        // Don't update the VirtualMachineInstance if it is already in a final state
        if vmi.IsFinal() {
                return nil
        }

        // Update VMI status fields based on what is reported on the domain
        err = c.updateVMIStatusFromDomain(vmi, domain)
        if err != nil {
                return err
        }

        // Calculate the new VirtualMachineInstance state based on what libvirt reported
        err = c.setVmPhaseForStatusReason(domain, vmi)
        if err != nil {
                return err
        }

        // Update conditions on VMI Status
        err = c.updateVMIConditions(vmi, domain, condManager)
        if err != nil {
                return err
        }

        // Store containerdisks and kernelboot checksums
        if err := c.updateChecksumInfo(vmi, syncError); err != nil {
                return err
        }

        // Handle sync error
        c.handleSyncError(vmi, condManager, syncError)

        controller.SetVMIPhaseTransitionTimestamp(oldStatus, &vmi.Status)

        // Only issue vmi update if status has changed
        if !equality.Semantic.DeepEqual(*oldStatus, vmi.Status) {
                key := controller.VirtualMachineInstanceKey(vmi)
                c.vmiExpectations.SetExpectations(key, 1, 0)
                _, err := c.clientset.VirtualMachineInstance(vmi.ObjectMeta.Namespace).Update(context.Background(), vmi, metav1.UpdateOptions{})
                if err != nil {
                        c.vmiExpectations.SetExpectations(key, 0, 0)
                        return err
                }
                metrics.VMISynced(vmi.Namespace, vmi.Name)
        }

        // Record an event on the VMI when the VMI's phase changes
        if oldStatus.Phase != vmi.Status.Phase {
                c.recordPhaseChangeEvent(vmi)

                if c.pluginExecutor != nil && vmi.Status.Phase == v1.Running && !vmi.IsMigrationTarget() {
                        if err := c.pluginExecutor.CallNodeHooks(pluginv1alpha1.NodeHookPostVMStart, vmi, c.host); err != nil {
                                return err
                        }
                }
        }

        return nil
}

type virtLauncherCriticalSecurebootError struct {
        msg string
}

func (e *virtLauncherCriticalSecurebootError) Error() string { return e.msg }

func (c *VirtualMachineController) handleSyncError(vmi *v1.VirtualMachineInstance, condManager *controller.VirtualMachineInstanceConditionManager, syncError error) {
        var criticalNetErr *neterrors.CriticalNetworkError
        if goerror.As(syncError, &criticalNetErr) {
                c.logger.Errorf("virt-launcher crashed due to a network error. Updating VMI %s status to Failed", vmi.Name)
                vmi.Status.Phase = v1.Failed
        }
        if _, ok := syncError.(*virtLauncherCriticalSecurebootError); ok {
                c.logger.Errorf("virt-launcher does not support the Secure Boot setting. Updating VMI %s status to Failed", vmi.Name)
                vmi.Status.Phase = v1.Failed
        }

        if _, ok := syncError.(*vmiIrrecoverableError); ok {
                c.logger.Errorf("virt-launcher reached an irrecoverable error. Updating VMI %s status to Failed", vmi.Name)
                vmi.Status.Phase = v1.Failed
        }
        condManager.CheckFailure(vmi, syncError, "Synchronizing with the Domain failed.")
}

func (c *VirtualMachineController) recordPhaseChangeEvent(vmi *v1.VirtualMachineInstance) {
        switch vmi.Status.Phase {
        case v1.Running:
                c.recorder.Event(vmi, k8sv1.EventTypeNormal, v1.Started.String(), VMIStarted)
        case v1.Succeeded:
                c.recorder.Event(vmi, k8sv1.EventTypeNormal, v1.Stopped.String(), VMIShutdown)
        case v1.Failed:
                c.recorder.Event(vmi, k8sv1.EventTypeWarning, v1.Stopped.String(), VMICrashed)
        }
}

func (c *VirtualMachineController) calculatePausedCondition(vmi *v1.VirtualMachineInstance, reason api.StateChangeReason) {
        now := metav1.NewTime(time.Now())
        switch reason {
        case api.ReasonPausedMigration:
                if !isVMIPausedDuringMigration(vmi) || !c.isMigrationSource(vmi) {
                        c.logger.Object(vmi).V(3).Infof("Domain is paused after migration by qemu, no condition needed")
                        return
                }
                c.logger.Object(vmi).V(3).Info("Adding paused by migration monitor condition")
                vmi.Status.Conditions = append(vmi.Status.Conditions, v1.VirtualMachineInstanceCondition{
                        Type:               v1.VirtualMachineInstancePaused,
                        Status:             k8sv1.ConditionTrue,
                        LastProbeTime:      now,
                        LastTransitionTime: now,
                        Reason:             "PausedByMigrationMonitor",
                        Message:            "VMI was paused by the migration monitor",
                })
        case api.ReasonPausedUser:
                c.logger.Object(vmi).V(3).Info("Adding paused condition")
                vmi.Status.Conditions = append(vmi.Status.Conditions, v1.VirtualMachineInstanceCondition{
                        Type:               v1.VirtualMachineInstancePaused,
                        Status:             k8sv1.ConditionTrue,
                        LastProbeTime:      now,
                        LastTransitionTime: now,
                        Reason:             "PausedByUser",
                        Message:            "VMI was paused by user",
                })
        case api.ReasonPausedIOError:
                c.logger.Object(vmi).V(3).Info("Adding paused condition")
                vmi.Status.Conditions = append(vmi.Status.Conditions, v1.VirtualMachineInstanceCondition{
                        Type:               v1.VirtualMachineInstancePaused,
                        Status:             k8sv1.ConditionTrue,
                        LastProbeTime:      now,
                        LastTransitionTime: now,
                        Reason:             "PausedIOError",
                        Message:            "VMI was paused, low-level IO error detected",
                })
        default:
                c.logger.Object(vmi).V(3).Infof("Domain is paused for unknown reason, %s", reason)
        }
}

func newNonMigratableCondition(msg string, reason string) *v1.VirtualMachineInstanceCondition {
        return &v1.VirtualMachineInstanceCondition{
                Type:    v1.VirtualMachineInstanceIsMigratable,
                Status:  k8sv1.ConditionFalse,
                Message: msg,
                Reason:  reason,
        }
}

func (c *VirtualMachineController) calculateLiveMigrationCondition(vmi *v1.VirtualMachineInstance) (*v1.VirtualMachineInstanceCondition, bool) {
        isBlockMigration, blockErr := c.checkVolumesForMigration(vmi)

        err := c.checkNetworkInterfacesForMigration(vmi)
        if err != nil {
                return newNonMigratableCondition(err.Error(), v1.VirtualMachineInstanceReasonInterfaceNotMigratable), isBlockMigration
        }

        if err := c.isHostModelMigratable(vmi); err != nil {
                return newNonMigratableCondition(err.Error(), v1.VirtualMachineInstanceReasonCPUModeNotMigratable), isBlockMigration
        }

        reason, ok := vmiContainsNonMigratablePCIHostDevices(vmi, c.clusterConfig)
        if ok {
                return newNonMigratableCondition(reason, v1.VirtualMachineInstanceReasonHostDeviceNotMigratable), isBlockMigration
        }

        if util.IsSEVVMI(vmi) {
                return newNonMigratableCondition("VMI uses SEV", v1.VirtualMachineInstanceReasonSEVNotMigratable), isBlockMigration
        } else if util.IsTDXVMI(vmi) {
                return newNonMigratableCondition("VMI uses TDX", v1.VirtualMachineInstanceReasonTDXNotMigratable), isBlockMigration
        }

        if util.IsSecureExecutionVMI(vmi) {
                return newNonMigratableCondition("VMI uses Secure Execution", v1.VirtualMachineInstanceReasonSecureExecutionNotMigratable), isBlockMigration
        }

        if tscRequirement := topology.GetTscFrequencyRequirement(vmi); !topology.AreTSCFrequencyTopologyHintsDefined(vmi) && tscRequirement.Type == topology.RequiredForMigration {
                return newNonMigratableCondition(tscRequirement.Reason, v1.VirtualMachineInstanceReasonNoTSCFrequencyMigratable), isBlockMigration
        }

        if vmiFeatures := vmi.Spec.Domain.Features; vmiFeatures != nil && vmiFeatures.HypervPassthrough != nil && *vmiFeatures.HypervPassthrough.Enabled {
                return newNonMigratableCondition("VMI uses hyperv passthrough", v1.VirtualMachineInstanceReasonHypervPassthroughNotMigratable), isBlockMigration
        }

        if blockErr != nil {
                return newNonMigratableCondition(blockErr.Error(), v1.VirtualMachineInstanceReasonDisksNotMigratable), isBlockMigration
        }

        return &v1.VirtualMachineInstanceCondition{
                Type:   v1.VirtualMachineInstanceIsMigratable,
                Status: k8sv1.ConditionTrue,
        }, isBlockMigration
}

func isMdevGPU(gpu v1.GPU, config *v1.KubeVirtConfiguration) bool {
        if config.PermittedHostDevices == nil {
                return false
        }
        for _, mdev := range config.PermittedHostDevices.MediatedDevices {
                if mdev.ResourceName == gpu.DeviceName {
                        return true
                }
        }
        return false
}

func vmiContainsNonMigratablePCIHostDevices(vmi *v1.VirtualMachineInstance, config *virtconfig.ClusterConfig) (string, bool) {

        if len(vmi.Spec.Domain.Devices.HostDevices) > 0 {
                return "VMI specifies non-migratable generic PCI host device", true
        }

        if len(vmi.Spec.Domain.Devices.GPUs) > 1 {
                return "VMI specifies too many GPUs", true
        }

        if len(vmi.Spec.Domain.Devices.GPUs) == 1 && !config.VGPULiveMigrationEnabled() {
                return "VMI specifies a GPU but feature gate " + featuregate.VGPULiveMigration + " is not enabled", true
        }

        if len(vmi.Spec.Domain.Devices.GPUs) == 1 && !isMdevGPU(vmi.Spec.Domain.Devices.GPUs[0], config.GetConfig()) {
                return "VMI specifies non-migratable GPU device", true
        }

        return "", false
}

type multipleNonMigratableCondition struct {
        reasons []string
        msgs    []string
}

func newMultipleNonMigratableCondition() *multipleNonMigratableCondition {
        return &multipleNonMigratableCondition{}
}

func (cond *multipleNonMigratableCondition) addNonMigratableCondition(reason, msg string) {
        cond.reasons = append(cond.reasons, reason)
        cond.msgs = append(cond.msgs, msg)
}

func (cond *multipleNonMigratableCondition) String() string {
        var buffer bytes.Buffer
        for i, c := range cond.reasons {
                if i > 0 {
                        buffer.WriteString(", ")
                }
                buffer.WriteString(fmt.Sprintf("%s: %s", c, cond.msgs[i]))
        }
        return buffer.String()
}

func (cond *multipleNonMigratableCondition) generateStorageLiveMigrationCondition() *v1.VirtualMachineInstanceCondition {
        switch len(cond.reasons) {
        case 0:
                return &v1.VirtualMachineInstanceCondition{
                        Type:   v1.VirtualMachineInstanceIsStorageLiveMigratable,
                        Status: k8sv1.ConditionTrue,
                }
        default:
                return &v1.VirtualMachineInstanceCondition{
                        Type:    v1.VirtualMachineInstanceIsStorageLiveMigratable,
                        Status:  k8sv1.ConditionFalse,
                        Message: cond.String(),
                        Reason:  v1.VirtualMachineInstanceReasonNotMigratable,
                }
        }
}

func (c *VirtualMachineController) calculateLiveStorageMigrationCondition(vmi *v1.VirtualMachineInstance) *v1.VirtualMachineInstanceCondition {
        multiCond := newMultipleNonMigratableCondition()

        if err := c.checkNetworkInterfacesForMigration(vmi); err != nil {
                multiCond.addNonMigratableCondition(v1.VirtualMachineInstanceReasonInterfaceNotMigratable, err.Error())
        }

        if err := c.isHostModelMigratable(vmi); err != nil {
                multiCond.addNonMigratableCondition(v1.VirtualMachineInstanceReasonCPUModeNotMigratable, err.Error())
        }

        reason, ok := vmiContainsNonMigratablePCIHostDevices(vmi, c.clusterConfig)
        if ok {
                multiCond.addNonMigratableCondition(v1.VirtualMachineInstanceReasonHostDeviceNotMigratable, reason)
        }

        if util.IsSEVVMI(vmi) {
                multiCond.addNonMigratableCondition(v1.VirtualMachineInstanceReasonSEVNotMigratable, "VMI uses SEV")
        } else if util.IsTDXVMI(vmi) {
                multiCond.addNonMigratableCondition(v1.VirtualMachineInstanceReasonTDXNotMigratable, "VMI uses TDX")
        }

        if reservation.HasVMIPersistentReservation(vmi) {
                multiCond.addNonMigratableCondition(v1.VirtualMachineInstanceReasonPRNotMigratable, "VMI uses SCSI persistent reservation")
        }

        if tscRequirement := topology.GetTscFrequencyRequirement(vmi); !topology.AreTSCFrequencyTopologyHintsDefined(vmi) && tscRequirement.Type == topology.RequiredForMigration {
                multiCond.addNonMigratableCondition(v1.VirtualMachineInstanceReasonNoTSCFrequencyMigratable, tscRequirement.Reason)
        }

        if vmiFeatures := vmi.Spec.Domain.Features; vmiFeatures != nil && vmiFeatures.HypervPassthrough != nil && *vmiFeatures.HypervPassthrough.Enabled {
                multiCond.addNonMigratableCondition(v1.VirtualMachineInstanceReasonHypervPassthroughNotMigratable, "VMI uses hyperv passthrough")
        }

        return multiCond.generateStorageLiveMigrationCondition()
}

func (c *VirtualMachineController) deleteVM(vmi *v1.VirtualMachineInstance) error {
        err := c.processVmDelete(vmi)
        if err != nil {
                return err
        }
        // we can perform the cleanup immediately after
        // the successful delete here because we don't have
        // to report the deletion results on the VMI status
        // in this case.
        err = c.processVmCleanup(vmi)
        if err != nil {
                return err
        }

        return nil
}

// Determine if gracefulShutdown has been triggered by virt-launcher
func (c *VirtualMachineController) hasGracefulShutdownTrigger(domain *api.Domain) bool {
        if domain == nil {
                return false
        }
        gracePeriod := domain.Spec.Metadata.KubeVirt.GracePeriod

        return gracePeriod != nil &&
                gracePeriod.MarkedForGracefulShutdown != nil &&
                *gracePeriod.MarkedForGracefulShutdown
}

func (c *VirtualMachineController) sync(key string,
        vmi *v1.VirtualMachineInstance,
        vmiExists bool,
        domain *api.Domain,
        domainExists bool) error {

        oldStatus := vmi.Status.DeepCopy()
        oldSpec := vmi.Spec.DeepCopy()

        // set to true when domain needs to be shutdown.
        shouldShutdown := false
        // set to true when domain needs to be removed from libvirt.
        shouldDelete := false
        // set to true when VirtualMachineInstance is active or about to become active.
        shouldUpdate := false
        // set to true when unrecoverable domain needs to be destroyed non-gracefully.
        forceShutdownIrrecoverable := false

        c.logger.V(3).Infof("Processing event %v", key)

        if vmiExists && domainExists {
                c.logger.Object(vmi).Infof("VMI is in phase: %v | Domain status: %v, reason: %v", vmi.Status.Phase, domain.Status.Status, domain.Status.Reason)
        } else if vmiExists {
                c.logger.Object(vmi).Infof("VMI is in phase: %v | Domain does not exist", vmi.Status.Phase)
        } else if domainExists {
                vmiRef := v1.NewVMIReferenceWithUUID(domain.ObjectMeta.Namespace, domain.ObjectMeta.Name, domain.Spec.Metadata.KubeVirt.UID)
                c.logger.Object(vmiRef).Infof("VMI does not exist | Domain status: %v, reason: %v", domain.Status.Status, domain.Status.Reason)
        } else {
                c.logger.Info("VMI does not exist | Domain does not exist")
        }

        domainAlive := domainExists &&
                domain.Status.Status != api.Shutoff &&
                domain.Status.Status != api.Crashed &&
                domain.Status.Status != ""

        forceShutdownIrrecoverable = domainExists && domainPausedFailedPostCopy(domain)

        gracefulShutdown := c.hasGracefulShutdownTrigger(domain)
        if gracefulShutdown && vmi.IsRunning() {
                if domainAlive {
                        c.logger.Object(vmi).V(3).Info("Shutting down due to graceful shutdown signal.")
                        shouldShutdown = true
                } else {
                        shouldDelete = true
                }
        }

        // Determine removal of VirtualMachineInstance from cache should result in deletion.
        if !vmiExists {
                if domainAlive {
                        // The VirtualMachineInstance is deleted on the cluster, and domain is alive,
                        // then shut down the domain.
                        c.logger.Object(vmi).V(3).Info("Shutting down domain for deleted VirtualMachineInstance object.")
                        shouldShutdown = true
                } else {
                        // The VirtualMachineInstance is deleted on the cluster, and domain is not alive
                        // then delete the domain.
                        c.logger.Object(vmi).V(3).Info("Deleting domain for deleted VirtualMachineInstance object.")
                        shouldDelete = true
                }
        }

        // Determine if VirtualMachineInstance is being deleted.
        if vmiExists && vmi.ObjectMeta.DeletionTimestamp != nil {
                if domainAlive {
                        c.logger.Object(vmi).V(3).Info("Shutting down domain for VirtualMachineInstance with deletion timestamp.")
                        shouldShutdown = true
                } else {
                        c.logger.Object(vmi).V(3).Info("Deleting domain for VirtualMachineInstance with deletion timestamp.")
                        shouldDelete = true
                }
        }

        // Determine if domain needs to be deleted as a result of VirtualMachineInstance
        // shutting down naturally (guest internal invoked shutdown)
        if vmiExists && vmi.IsFinal() {
                c.logger.Object(vmi).V(3).Info("Removing domain and ephemeral data for finalized vmi.")
                shouldDelete = true
        }

        if !domainAlive && domainExists && !vmi.IsFinal() {
                c.logger.Object(vmi).V(3).Info("Deleting inactive domain for vmi.")
                shouldDelete = true
        }

        // Determine if an active (or about to be active) VirtualMachineInstance should be updated.
        if vmiExists && !vmi.IsFinal() {
                // requiring the phase of the domain and VirtualMachineInstance to be in sync is an
                // optimization that prevents unnecessary re-processing VMIs during the start flow.
                phase, err := c.calculateVmPhaseForStatusReason(domain, vmi)
                if err != nil {
                        return err
                }
                if vmi.Status.Phase == phase {
                        shouldUpdate = true
                }

                if shouldDelay, delay := c.ioErrorRetryManager.ShouldDelay(string(vmi.UID), func() bool {
                        return isIOError(shouldUpdate, domainExists, domain)
                }); shouldDelay {
                        shouldUpdate = false
                        c.logger.Object(vmi).Infof("Delay vm update for %f seconds", delay.Seconds())
                        c.queue.AddAfter(key, delay)
                }
        }

        if c.pluginExecutor != nil && vmiExists && vmi.IsFinal() && !domainAlive {
                if err := c.pluginExecutor.CallNodeHooks(pluginv1alpha1.NodeHookPostVMStop, vmi, c.host); err != nil {
                        return err
                }
        }

        var syncErr error

        // Process the VirtualMachineInstance update in this order.
        // * Shutdown and Deletion due to VirtualMachineInstance deletion, process stopping, graceful shutdown trigger, etc...
        // * Cleanup of already shutdown and Deleted VMIs
        // * Update due to spec change and initial start flow.
        switch {
        case shouldShutdown:
                c.logger.Object(vmi).V(3).Info("Processing shutdown.")
                syncErr = c.processVmShutdown(vmi, domain)
        case forceShutdownIrrecoverable:
                msg := formatIrrecoverableErrorMessage(domain)
                c.logger.Object(vmi).V(3).Infof("Processing a destruction of an irrecoverable domain - %s.", msg)
                syncErr = c.processVmDestroy(vmi, domain)
                if syncErr == nil {
                        syncErr = &vmiIrrecoverableError{msg}
                }
        case shouldDelete:
                c.logger.Object(vmi).V(3).Info("Processing deletion.")
                syncErr = c.deleteVM(vmi)
        case shouldUpdate:
                c.logger.Object(vmi).V(3).Info("Processing vmi update")
                syncErr = c.processVmUpdate(vmi, domain)
        default:
                c.logger.Object(vmi).V(3).Info("No update processing required")
        }
        if syncErr != nil && !vmi.IsFinal() {
                c.recorder.Event(vmi, k8sv1.EventTypeWarning, v1.SyncFailed.String(), syncErr.Error())

                // `syncErr` will be propagated anyway, and it will be logged in `re-enqueueing`
                // so there is no need to log it twice in hot path without increased verbosity.
                c.logger.Object(vmi).Reason(syncErr).Error("Synchronizing the VirtualMachineInstance failed.")
        }

        // Update the VirtualMachineInstance status, if the VirtualMachineInstance exists
        if vmiExists {
                vmi.Spec = *oldSpec
                if err := c.updateVMIStatus(oldStatus, vmi, domain, syncErr); err != nil {
                        c.logger.Object(vmi).Reason(err).Error("Updating the VirtualMachineInstance status failed.")
                        return err
                }
        }

        if syncErr != nil {
                return syncErr
        }

        c.logger.Object(vmi).V(3).Info("Synchronization loop succeeded.")
        return nil

}

func (c *VirtualMachineController) processVmCleanup(vmi *v1.VirtualMachineInstance) error {
        vmiId := string(vmi.UID)

        c.logger.Object(vmi).Infof("Performing final local cleanup for vmi with uid %s", vmiId)

        c.migrationProxy.StopTargetListener(vmiId)
        c.migrationProxy.StopSourceListener(vmiId)

        c.downwardMetricsManager.StopServer(vmi)

        // Unmount container disks and clean up remaining files
        if err := c.containerDiskMounter.Unmount(vmi); err != nil {
                return err
        }

        // UnmountAll does the cleanup on the "best effort" basis: it is
        // safe to pass a nil cgroupManager.
        cgroupManager, _ := getCgroupManager(vmi, c.host, c.hypervisorNodeInfo, c.clusterConfig.AllowEmulation())
        if err := c.hotplugVolumeMounter.UnmountAll(vmi, cgroupManager); err != nil {
                return err
        }

        c.teardownNetwork(vmi)

        c.sriovHotplugExecutorPool.Delete(vmi.UID)

        // Watch dog file and command client must be the last things removed here
        c.launcherClients.CloseLauncherClient(vmi)

        // Remove the domain from cache in the event that we're performing
        // a final cleanup and never received the "DELETE" event. This is
        // possible if the VMI pod goes away before we receive the final domain
        // "DELETE"
        domain := api.NewDomainReferenceFromName(vmi.Namespace, vmi.Name)
        c.logger.Object(domain).Infof("Removing domain from cache during final cleanup")
        return c.domainStore.Delete(domain)
}

func (c *VirtualMachineController) processVmDestroy(vmi *v1.VirtualMachineInstance, domain *api.Domain) error {
        if c.pluginExecutor != nil {
                if err := c.pluginExecutor.CallNodeHooks(pluginv1alpha1.NodeHookPreVMStop, vmi, c.host); err != nil {
                        return err
                }
        }

        tryGracefully := false
        return c.helperVmShutdown(vmi, domain, tryGracefully)
}

func (c *VirtualMachineController) processVmShutdown(vmi *v1.VirtualMachineInstance, domain *api.Domain) error {
        if c.pluginExecutor != nil {
                if err := c.pluginExecutor.CallNodeHooks(pluginv1alpha1.NodeHookPreVMStop, vmi, c.host); err != nil {
                        return err
                }
        }

        tryGracefully := true
        return c.helperVmShutdown(vmi, domain, tryGracefully)
}

const firstGracefulShutdownAttempt = -1

// Determines if a domain's grace period has expired during shutdown.
// If the grace period has started but not expired, timeLeft represents
// the time in seconds left until the period expires.
// If the grace period has not started, timeLeft will be set to -1.
func (c *VirtualMachineController) hasGracePeriodExpired(terminationGracePeriod *int64, dom *api.Domain) (bool, int64) {
        var hasExpired bool
        var timeLeft int64

        gracePeriod := int64(0)
        if terminationGracePeriod != nil {
                gracePeriod = *terminationGracePeriod
        } else if dom != nil && dom.Spec.Metadata.KubeVirt.GracePeriod != nil {
                gracePeriod = dom.Spec.Metadata.KubeVirt.GracePeriod.DeletionGracePeriodSeconds
        }

        // If gracePeriod == 0, then there will be no startTime set, deletion
        // should occur immediately during shutdown.
        if gracePeriod == 0 {
                hasExpired = true
                return hasExpired, timeLeft
        }

        startTime := int64(0)
        if dom != nil && dom.Spec.Metadata.KubeVirt.GracePeriod != nil && dom.Spec.Metadata.KubeVirt.GracePeriod.DeletionTimestamp != nil {
                startTime = dom.Spec.Metadata.KubeVirt.GracePeriod.DeletionTimestamp.UTC().Unix()
        }

        if startTime == 0 {
                // If gracePeriod > 0, then the shutdown signal needs to be sent
                // and the gracePeriod start time needs to be set.
                timeLeft = firstGracefulShutdownAttempt
                return hasExpired, timeLeft
        }

        now := time.Now().UTC().Unix()
        diff := now - startTime

        if diff >= gracePeriod {
                hasExpired = true
                return hasExpired, timeLeft
        }

        timeLeft = gracePeriod - diff
        if timeLeft < 1 {
                timeLeft = 1
        }
        return hasExpired, timeLeft
}

func (c *VirtualMachineController) helperVmShutdown(vmi *v1.VirtualMachineInstance, domain *api.Domain, tryGracefully bool) error {

        // Only attempt to shutdown/destroy if we still have a connection established with the pod.
        client, err := c.launcherClients.GetVerifiedLauncherClient(vmi)
        if err != nil {
                return err
        }

        if domainHasGracePeriod(domain) && tryGracefully {
                if expired, timeLeft := c.hasGracePeriodExpired(vmi.Spec.TerminationGracePeriodSeconds, domain); !expired {
                        return c.handleVMIShutdown(vmi, domain, client, timeLeft)
                }
                c.logger.Object(vmi).Infof("Grace period expired, killing deleted VirtualMachineInstance %s", vmi.GetObjectMeta().GetName())
        } else {
                c.logger.Object(vmi).Infof("Graceful shutdown not set, killing deleted VirtualMachineInstance %s", vmi.GetObjectMeta().GetName())
        }

        err = client.KillVirtualMachine(vmi)
        if err != nil && !cmdclient.IsDisconnected(err) {
                // Only report err if it wasn't the result of a disconnect.
                //
                // Both virt-launcher and virt-handler are trying to destroy
                // the VirtualMachineInstance at the same time. It's possible the client may get
                // disconnected during the kill request, which shouldn't be
                // considered an error.
                return err
        }

        c.recorder.Event(vmi, k8sv1.EventTypeNormal, v1.Deleted.String(), VMIStopping)

        return nil
}

func (c *VirtualMachineController) handleVMIShutdown(vmi *v1.VirtualMachineInstance, domain *api.Domain, client cmdclient.LauncherClient, timeLeft int64) error {
        if domain.Status.Status != api.Shutdown {
                return c.shutdownVMI(vmi, client, timeLeft)
        }
        c.logger.V(4).Object(vmi).Infof("%s is already shutting down.", vmi.GetObjectMeta().GetName())
        return nil
}

func (c *VirtualMachineController) shutdownVMI(vmi *v1.VirtualMachineInstance, client cmdclient.LauncherClient, timeLeft int64) error {
        err := client.ShutdownVirtualMachine(vmi)
        if err != nil && !cmdclient.IsDisconnected(err) {
                // Only report err if it wasn't the result of a disconnect.
                //
                // Both virt-launcher and virt-handler are trying to destroy
                // the VirtualMachineInstance at the same time. It's possible the client may get
                // disconnected during the kill request, which shouldn't be
                // considered an error.
                return err
        }

        c.logger.Object(vmi).Infof("Signaled graceful shutdown for %s", vmi.GetObjectMeta().GetName())

        // Only create a VMIGracefulShutdown event for the first attempt as we can
        // easily hit the default burst limit of 25 for the
        // EventSourceObjectSpamFilter when gracefully shutting down VMIs with a
        // large TerminationGracePeriodSeconds value set. Hitting this limit can
        // result in the eventual VMIShutdown event being dropped.
        if timeLeft == firstGracefulShutdownAttempt {
                c.recorder.Event(vmi, k8sv1.EventTypeNormal, v1.ShuttingDown.String(), VMIGracefulShutdown)
        }

        // Make sure that we don't hot-loop in case we send the first domain notification
        if timeLeft == firstGracefulShutdownAttempt {
                timeLeft = 5
                if vmi.Spec.TerminationGracePeriodSeconds != nil && *vmi.Spec.TerminationGracePeriodSeconds < timeLeft {
                        timeLeft = *vmi.Spec.TerminationGracePeriodSeconds
                }
        }
        // In case we have a long grace period, we want to resend the graceful shutdown every 5 seconds
        // That's important since a booting OS can miss ACPI signals
        if timeLeft > 5 {
                timeLeft = 5
        }

        // pending graceful shutdown.
        c.queue.AddAfter(controller.VirtualMachineInstanceKey(vmi), time.Duration(timeLeft)*time.Second)
        return nil
}

func (c *VirtualMachineController) processVmDelete(vmi *v1.VirtualMachineInstance) error {

        // Only attempt to shutdown/destroy if we still have a connection established with the pod.
        // Always clear the cached client afterward so that a stale entry from a
        // dying launcher cannot poison the cache for subsequent controllers.
        defer c.launcherClients.CloseLauncherClient(vmi)
        client, err := c.launcherClients.GetVerifiedLauncherClient(vmi)

        // If the pod has been torn down, we know the VirtualMachineInstance is down.
        if err == nil {

                c.logger.Object(vmi).Infof("Signaled deletion for %s", vmi.GetObjectMeta().GetName())

                // pending deletion.
                c.recorder.Event(vmi, k8sv1.EventTypeNormal, v1.Deleted.String(), VMISignalDeletion)

                err = client.DeleteDomain(vmi)
                if err != nil && !cmdclient.IsDisconnected(err) {
                        // Only report err if it wasn't the result of a disconnect.
                        //
                        // Both virt-launcher and virt-handler are trying to destroy
                        // the VirtualMachineInstance at the same time. It's possible the client may get
                        // disconnected during the kill request, which shouldn't be
                        // considered an error.
                        return err
                }
        }

        return nil

}

func (c *VirtualMachineController) isVMIOwnedByNode(vmi *v1.VirtualMachineInstance) bool {
        nodeName, ok := vmi.Labels[v1.NodeNameLabel]

        if ok && nodeName != "" && nodeName == c.host {
                return true
        }

        return vmi.Status.NodeName != "" && vmi.Status.NodeName == c.host
}

func (c *VirtualMachineController) checkNetworkInterfacesForMigration(vmi *v1.VirtualMachineInstance) error {
        return netvmispec.VerifyVMIMigratable(vmi, c.clusterConfig.GetNetworkBindings())
}

func isReadOnlyDisk(disk *v1.Disk) bool {
        isReadOnlyCDRom := disk.CDRom != nil && (disk.CDRom.ReadOnly == nil || *disk.CDRom.ReadOnly)

        return isReadOnlyCDRom
}

func (c *VirtualMachineController) checkVolumesForMigration(vmi *v1.VirtualMachineInstance) (blockMigrate bool, err error) {
        volumeStatusMap := make(map[string]v1.VolumeStatus)

        for _, volumeStatus := range vmi.Status.VolumeStatus {
                volumeStatusMap[volumeStatus.Name] = volumeStatus
        }

        if len(vmi.Status.MigratedVolumes) > 0 {
                blockMigrate = true
        }

        filesystems := storagetypes.GetFilesystemsFromVolumes(vmi)

        // Check if all VMI volumes can be shared between the source and the destination
        // of a live migration. blockMigrate will be returned as false, only if all volumes
        // are shared and the VMI has no local disks
        // Some combinations of disks makes the VMI no suitable for live migration.
        // A relevant error will be returned in this case.
        for _, volume := range vmi.Spec.Volumes {
                volSrc := volume.VolumeSource
                if volSrc.PersistentVolumeClaim != nil || volSrc.DataVolume != nil {
                        var claimName string
                        if volSrc.PersistentVolumeClaim != nil {
                                claimName = volSrc.PersistentVolumeClaim.ClaimName
                        } else {
                                claimName = volSrc.DataVolume.Name
                        }

                        volumeStatus, ok := volumeStatusMap[volume.Name]

                        if !ok || volumeStatus.PersistentVolumeClaimInfo == nil {
                                return true, fmt.Errorf("cannot migrate VMI: Unable to determine if PVC %v is shared, live migration requires that all PVCs must be shared (using ReadWriteMany access mode)", claimName)
                        } else if !storagetypes.HasSharedAccessMode(volumeStatus.PersistentVolumeClaimInfo.AccessModes) && !storagetypes.IsMigratedVolume(volumeStatus.Name, vmi) {
                                return true, fmt.Errorf("cannot migrate VMI: PVC %v is not shared, live migration requires that all PVCs must be shared (using ReadWriteMany access mode)", claimName)
                        }

                } else if volSrc.HostDisk != nil {
                        // Check if this is a translated PVC.
                        volumeStatus, ok := volumeStatusMap[volume.Name]
                        if ok && volumeStatus.PersistentVolumeClaimInfo != nil {
                                if !storagetypes.HasSharedAccessMode(volumeStatus.PersistentVolumeClaimInfo.AccessModes) && !storagetypes.IsMigratedVolume(volumeStatus.Name, vmi) {
                                        return true, fmt.Errorf("cannot migrate VMI: PVC %v is not shared, live migration requires that all PVCs must be shared (using ReadWriteMany access mode)", volumeStatus.PersistentVolumeClaimInfo.ClaimName)
                                } else {
                                        continue
                                }
                        }

                        shared := volSrc.HostDisk.Shared != nil && *volSrc.HostDisk.Shared
                        if !shared {
                                return true, fmt.Errorf("cannot migrate VMI with non-shared HostDisk")
                        }
                } else {
                        if _, ok := filesystems[volume.Name]; ok {
                                c.logger.Object(vmi).Infof("Volume %s is shared with virtiofs, allow live migration", volume.Name)
                                continue
                        }

                        isVolumeUsedByReadOnlyDisk := false
                        for _, disk := range vmi.Spec.Domain.Devices.Disks {
                                if isReadOnlyDisk(&disk) && disk.Name == volume.Name {
                                        isVolumeUsedByReadOnlyDisk = true
                                        break
                                }
                        }

                        if isVolumeUsedByReadOnlyDisk {
                                continue
                        }

                        if vmi.Status.MigrationMethod == "" || vmi.Status.MigrationMethod == v1.LiveMigration {
                                c.logger.Object(vmi).Infof("migration is block migration because of %s volume", volume.Name)
                        }
                        blockMigrate = true
                }
        }
        return
}

func isVMIPausedDuringMigration(vmi *v1.VirtualMachineInstance) bool {
        return vmi.Status.MigrationState != nil &&
                vmi.Status.MigrationState.Mode == v1.MigrationPaused &&
                !vmi.Status.MigrationState.Completed
}

func (c *VirtualMachineController) vmUpdateHelperDefault(vmi *v1.VirtualMachineInstance, domain *api.Domain) error {
        client, err := c.launcherClients.GetLauncherClient(vmi)
        if err != nil {
                return fmt.Errorf(unableCreateVirtLauncherConnectionFmt, err)
        }

        preallocatedVolumes := c.getPreallocatedVolumes(vmi)

        err = hostdisk.ReplacePVCByHostDisk(vmi)
        if err != nil {
                return err
        }

        cgroupManager, err := getCgroupManager(vmi, c.host, c.hypervisorNodeInfo, c.clusterConfig.AllowEmulation())
        if err != nil {
                return err
        }

        var errorTolerantFeaturesError []error
        readyToProceed, err := c.handleVMIState(vmi, cgroupManager, &errorTolerantFeaturesError)
        if err != nil {
                return err
        }

        if !readyToProceed {
                return nil
        }

        if c.pluginExecutor != nil && !vmi.IsRunning() {
                if err := c.pluginExecutor.CallNodeHooks(pluginv1alpha1.NodeHookPreVMStart, vmi, c.host); err != nil {
                        return err
                }
        }

        // Synchronize the VirtualMachineInstance state
        err = c.syncVirtualMachine(client, vmi, preallocatedVolumes)
        if err != nil {
                return err
        }

        if domain == nil {
                c.recorder.Event(vmi, k8sv1.EventTypeNormal, v1.Created.String(), VMIDefined)
        }

        // Post-sync housekeeping
        err = c.hypervisorRuntime.HandleHousekeeping(vmi, cgroupManager, domain)
        if err != nil {
                return err
        }

        if vmi.IsRunning() {
                // Umount any disks no longer mounted
                if err := c.hotplugVolumeMounter.Unmount(vmi, cgroupManager); err != nil {
                        return err
                }
        }

        return errors.NewAggregate(errorTolerantFeaturesError)
}

// handleVMIState: Decides whether to call handleRunningVMI or handleStartingVMI based on the VMI's state.
func (c *VirtualMachineController) handleVMIState(vmi *v1.VirtualMachineInstance, cgroupManager cgroup.Manager, errorTolerantFeaturesError *[]error) (bool, error) {
        if vmi.IsRunning() {
                return true, c.handleRunningVMI(vmi, cgroupManager, errorTolerantFeaturesError)
        } else if !vmi.IsFinal() {
                return c.handleStartingVMI(vmi, cgroupManager)
        }
        return true, nil
}

// handleRunningVMI contains the logic specifically for running VMs (hotplugging in running state, metrics, network updates)
func (c *VirtualMachineController) handleRunningVMI(vmi *v1.VirtualMachineInstance, cgroupManager cgroup.Manager, errorTolerantFeaturesError *[]error) error {
        if err := c.hotplugSriovInterfaces(vmi); err != nil {
                c.logger.Object(vmi).Error(err.Error())
        }

        if err := c.hotplugVolumeMounter.Mount(vmi, cgroupManager); err != nil {
                switch {
                case goerror.Is(err, hotplugvolume.ErrWaitingForHotplugMount):
                        c.logger.Object(vmi).V(4).Infof("waiting for hotplug volumes to be mounted: %v", err)
                        c.queue.AddAfter(controller.VirtualMachineInstanceKey(vmi), time.Second*1)
                case goerror.Is(err, os.ErrNotExist):
                        c.recorder.Event(vmi, k8sv1.EventTypeWarning, "HotplugFailed", err.Error())
                default:
                        return err
                }
        }

        if err := c.getMemoryDump(vmi); err != nil {
                return err
        }

        isolationRes, err := c.podIsolationDetector.Detect(vmi)
        if err != nil {
                return fmt.Errorf(failedDetectIsolationFmt, err)
        }

        if err := c.downwardMetricsManager.StartServer(vmi, isolationRes.Pid()); err != nil {
                return err
        }

        if err := c.setupNetwork(vmi, netsetup.FilterNetsForLiveUpdate(vmi), c.netConf); err != nil {
                c.recorder.Event(vmi, k8sv1.EventTypeWarning, "NicHotplug", err.Error())
                *errorTolerantFeaturesError = append(*errorTolerantFeaturesError, err)
        }

        return nil
}

// handleStartingVMI: Contains the logic for starting VMs (container disks, initial network setup, device ownership).
func (c *VirtualMachineController) handleStartingVMI(
        vmi *v1.VirtualMachineInstance,
        cgroupManager cgroup.Manager,
) (bool, error) {
        // give containerDisks some time to become ready before throwing errors on retries
        info := c.launcherClients.GetLauncherClientInfo(vmi)
        if ready, err := c.containerDiskMounter.ContainerDisksReady(vmi, info.NotInitializedSince); !ready {
                if err != nil {
                        return false, err
                }
                c.queue.AddAfter(controller.VirtualMachineInstanceKey(vmi), time.Second*1)
                return false, nil
        }

        var err error
        err = c.containerDiskMounter.MountAndVerify(vmi)
        if err != nil {
                return false, err
        }

        if err := c.hotplugVolumeMounter.Mount(vmi, cgroupManager); err != nil {
                switch {
                case goerror.Is(err, hotplugvolume.ErrWaitingForHotplugMount):
                        c.logger.Object(vmi).V(4).Infof("waiting for hotplug volumes to be mounted: %v", err)
                        c.queue.AddAfter(controller.VirtualMachineInstanceKey(vmi), time.Second*1)
                case goerror.Is(err, os.ErrNotExist):
                        c.recorder.Event(vmi, k8sv1.EventTypeWarning, "HotplugFailed", err.Error())
                default:
                        return false, err
                }
        }

        if !c.hotplugVolumesReady(vmi) {
                c.queue.AddAfter(controller.VirtualMachineInstanceKey(vmi), time.Second*1)
                return false, nil
        }

        if err := c.setupNetwork(vmi, netsetup.FilterNetsForVMStartup(vmi), c.netConf); err != nil {
                return false, fmt.Errorf("failed to configure vmi network: %w", err)
        }

        if err := c.setupDevicesOwnerships(vmi, c.recorder); err != nil {
                return false, err
        }

        if err := c.adjustResources(vmi); err != nil {
                return false, err
        }

        if c.shouldWaitForSEVAttestation(vmi) {
                return false, nil
        }

        return true, nil
}

func (c *VirtualMachineController) adjustResources(vmi *v1.VirtualMachineInstance) error {
        err := c.hypervisorRuntime.AdjustResources(vmi, c.clusterConfig.GetConfig())

        if err != nil {
                return fmt.Errorf("failed to adjust resources: %v", err)
        }
        return nil
}

func (c *VirtualMachineController) shouldWaitForSEVAttestation(vmi *v1.VirtualMachineInstance) bool {
        if util.IsSEVAttestationRequested(vmi) {
                sev := vmi.Spec.Domain.LaunchSecurity.SEV
                // Wait for the session parameters to be provided
                return sev.Session == "" || sev.DHCert == ""
        }
        return false
}

func (c *VirtualMachineController) syncVirtualMachine(client cmdclient.LauncherClient, vmi *v1.VirtualMachineInstance, preallocatedVolumes []string) error {
        smbios := c.clusterConfig.GetSMBIOS()
        period := c.clusterConfig.GetMemBalloonStatsPeriod()

        options := virtualMachineOptions(smbios, period, preallocatedVolumes, c.capabilities, c.clusterConfig)
        options.InterfaceDomainAttachment = domainspec.DomainAttachmentByInterfaceName(vmi.Spec.Domain.Devices.Interfaces, c.clusterConfig.GetNetworkBindings())
        pluginsJSON, err := c.serializePlugins()
        if err != nil {
                return err
        }
        options.PluginsJson = pluginsJSON

        err = client.SyncVirtualMachine(vmi, options)
        if err != nil {
                if strings.Contains(err.Error(), "EFI OVMF rom missing") {
                        return &virtLauncherCriticalSecurebootError{fmt.Sprintf("mismatch of Secure Boot setting and bootloaders: %v", err)}
                }
        }

        return err
}

func (c *VirtualMachineController) getPreallocatedVolumes(vmi *v1.VirtualMachineInstance) []string {
        var preallocatedVolumes []string
        for _, volumeStatus := range vmi.Status.VolumeStatus {
                if volumeStatus.PersistentVolumeClaimInfo != nil && volumeStatus.PersistentVolumeClaimInfo.Preallocated {
                        preallocatedVolumes = append(preallocatedVolumes, volumeStatus.Name)
                }
        }
        return preallocatedVolumes
}

func (c *VirtualMachineController) hotplugSriovInterfaces(vmi *v1.VirtualMachineInstance) error {
        sriovSpecInterfaces := netvmispec.FilterSRIOVInterfaces(vmi.Spec.Domain.Devices.Interfaces)

        sriovSpecIfacesNames := netvmispec.IndexInterfaceSpecByName(sriovSpecInterfaces)
        attachedSriovStatusIfaces := netvmispec.IndexInterfaceStatusByName(vmi.Status.Interfaces, func(iface v1.VirtualMachineInstanceNetworkInterface) bool {
                _, exist := sriovSpecIfacesNames[iface.Name]
                return exist && netvmispec.ContainsInfoSource(iface.InfoSource, netvmispec.InfoSourceDomain) &&
                        netvmispec.ContainsInfoSource(iface.InfoSource, netvmispec.InfoSourceMultusStatus)
        })

        desiredSriovMultusPluggedIfaces := netvmispec.IndexInterfaceStatusByName(vmi.Status.Interfaces, func(iface v1.VirtualMachineInstanceNetworkInterface) bool {
                _, exist := sriovSpecIfacesNames[iface.Name]
                return exist && netvmispec.ContainsInfoSource(iface.InfoSource, netvmispec.InfoSourceMultusStatus)
        })

        if len(desiredSriovMultusPluggedIfaces) == len(attachedSriovStatusIfaces) {
                c.sriovHotplugExecutorPool.Delete(vmi.UID)
                return nil
        }

        rateLimitedExecutor := c.sriovHotplugExecutorPool.LoadOrStore(vmi.UID)
        return rateLimitedExecutor.Exec(func() error {
                return c.hotplugSriovInterfacesCommand(vmi)
        })
}

func (c *VirtualMachineController) hotplugSriovInterfacesCommand(vmi *v1.VirtualMachineInstance) error {
        const errMsgPrefix = "failed to hot-plug SR-IOV interfaces"

        client, err := c.launcherClients.GetVerifiedLauncherClient(vmi)
        if err != nil {
                return fmt.Errorf("%s: %v", errMsgPrefix, err)
        }

        if err := c.hypervisorRuntime.AdjustResources(vmi, c.clusterConfig.GetConfig()); err != nil {
                c.recorder.Event(vmi, k8sv1.EventTypeWarning, err.Error(), err.Error())
                return fmt.Errorf("%s: %v", errMsgPrefix, err)
        }

        c.logger.V(3).Object(vmi).Info("sending hot-plug host-devices command")
        if err := client.HotplugHostDevices(vmi); err != nil {
                return fmt.Errorf("%s: %v", errMsgPrefix, err)
        }

        return nil
}

func memoryDumpPath(volumeStatus v1.VolumeStatus) string {
        target := hotplugdisk.GetVolumeMountDir(volumeStatus.Name)
        dumpPath := filepath.Join(target, volumeStatus.MemoryDumpVolume.TargetFileName)
        return dumpPath
}

func (c *VirtualMachineController) getMemoryDump(vmi *v1.VirtualMachineInstance) error {
        const errMsgPrefix = "failed to getting memory dump"

        for _, volumeStatus := range vmi.Status.VolumeStatus {
                if volumeStatus.MemoryDumpVolume == nil || volumeStatus.Phase != v1.MemoryDumpVolumeInProgress {
                        continue
                }
                client, err := c.launcherClients.GetVerifiedLauncherClient(vmi)
                if err != nil {
                        return fmt.Errorf("%s: %v", errMsgPrefix, err)
                }

                c.logger.V(3).Object(vmi).Info("sending memory dump command")
                err = client.VirtualMachineMemoryDump(vmi, memoryDumpPath(volumeStatus))
                if err != nil {
                        return fmt.Errorf("%s: %v", errMsgPrefix, err)
                }
        }

        return nil
}

func (c *VirtualMachineController) hotplugVolumesReady(vmi *v1.VirtualMachineInstance) bool {
        hasHotplugVolume := false
        for _, v := range vmi.Spec.Volumes {
                if storagetypes.IsHotplugVolume(&v) {
                        hasHotplugVolume = true
                        break
                }
        }
        if len(vmi.Spec.UtilityVolumes) > 0 {
                hasHotplugVolume = true
        }
        if !hasHotplugVolume {
                return true
        }
        if len(vmi.Status.VolumeStatus) == 0 {
                return false
        }
        for _, vs := range vmi.Status.VolumeStatus {
                if vs.HotplugVolume != nil && !(vs.Phase == v1.VolumeReady || vs.Phase == v1.HotplugVolumeMounted) {
                        // wait for volume to be mounted
                        return false
                }
        }
        return true
}

func (c *VirtualMachineController) processVmUpdate(vmi *v1.VirtualMachineInstance, domain *api.Domain) error {
        shouldReturn, err := c.checkLauncherClient(vmi)
        if shouldReturn {
                return err
        }

        return c.vmUpdateHelperDefault(vmi, domain)
}

func (c *VirtualMachineController) setVmPhaseForStatusReason(domain *api.Domain, vmi *v1.VirtualMachineInstance) error {
        phase, err := c.calculateVmPhaseForStatusReason(domain, vmi)
        if err != nil {
                return err
        }
        if phase == v1.Failed && vmi.Status.Phase != v1.Failed {
                panicInfo := c.getGuestPanicInfo(domain, vmi)
                if panicInfo != nil {
                        panicType := "unknown"
                        if panicInfo.Type != "" {
                                panicType = panicInfo.Type
                        }
                        bugcheckCode := panicInfo.Arg1
                        vhmetrics.IncGuestOSPanic(vmi.Namespace, vmi.Name, panicType, bugcheckCode)
                }
        }
        vmi.Status.Phase = phase
        return nil
}

func (c *VirtualMachineController) getGuestPanicInfo(domain *api.Domain, vmi *v1.VirtualMachineInstance) *api.GuestPanicInfo {
        if domain != nil {
                return domain.Status.GuestPanicInfo
        }
        obj, exists, err := c.domainStore.GetByKey(controller.VirtualMachineInstanceKey(vmi))
        if err != nil || !exists {
                return nil
        }
        if d, ok := obj.(*api.Domain); ok {
                return d.Status.GuestPanicInfo
        }
        return nil
}

func vmiHasTerminationGracePeriod(vmi *v1.VirtualMachineInstance) bool {
        // if not set we use the default graceperiod
        return vmi.Spec.TerminationGracePeriodSeconds == nil ||
                (vmi.Spec.TerminationGracePeriodSeconds != nil && *vmi.Spec.TerminationGracePeriodSeconds != 0)
}

func domainHasGracePeriod(domain *api.Domain) bool {
        return domain != nil &&
                domain.Spec.Metadata.KubeVirt.GracePeriod != nil &&
                domain.Spec.Metadata.KubeVirt.GracePeriod.DeletionGracePeriodSeconds != 0
}

func isACPIEnabled(vmi *v1.VirtualMachineInstance, domain *api.Domain) bool {
        return (vmiHasTerminationGracePeriod(vmi) || (vmi.Spec.TerminationGracePeriodSeconds == nil && domainHasGracePeriod(domain))) &&
                domain != nil &&
                domain.Spec.Features != nil &&
                domain.Spec.Features.ACPI != nil
}

func (c *VirtualMachineController) calculateVmPhaseForStatusReason(domain *api.Domain, vmi *v1.VirtualMachineInstance) (v1.VirtualMachineInstancePhase, error) {

        if domain == nil {
                if vmi.IsMigrationTarget() && vmi.Status.MigrationState != nil && vmi.Status.MigrationState.Failed {
                        return vmi.Status.Phase, nil
                }
                switch {
                case vmi.IsScheduled():
                        isUnresponsive, isInitialized, err := c.launcherClients.IsLauncherClientUnresponsive(vmi)

                        if err != nil {
                                return vmi.Status.Phase, err
                        }
                        if !isInitialized {
                                c.queue.AddAfter(controller.VirtualMachineInstanceKey(vmi), time.Second*1)
                                return vmi.Status.Phase, err
                        } else if isUnresponsive {
                                if vmi.IsMigrationTarget() {
                                        return v1.WaitingForSync, nil
                                }
                                // virt-launcher is gone and VirtualMachineInstance never transitioned
                                // from scheduled to Running.
                                return v1.Failed, nil
                        }
                        return v1.Scheduled, nil
                case !vmi.IsRunning() && !vmi.IsFinal():
                        return v1.Scheduled, nil
                case !vmi.IsFinal():
                        if vmi.IsMigrationTarget() {
                                return v1.WaitingForSync, nil
                        }
                        // That is unexpected. We should not be able to delete a VirtualMachineInstance before we stop it.
                        // However, if someone directly interacts with libvirt it is possible
                        return v1.Failed, nil
                }
        } else {
                switch domain.Status.Status {
                case api.Shutoff, api.Crashed:
                        switch domain.Status.Reason {
                        case api.ReasonCrashed, api.ReasonPanicked:
                                return v1.Failed, nil
                        case api.ReasonDestroyed:
                                if isACPIEnabled(vmi, domain) {
                                        // When ACPI is available, the domain was tried to be shutdown,
                                        // and destroyed means that the domain was destroyed after the graceperiod expired.
                                        // Without ACPI a destroyed domain is ok.
                                        return v1.Failed, nil
                                }
                                if vmi.Status.MigrationState != nil && vmi.Status.MigrationState.Failed && vmi.Status.MigrationState.Mode == v1.MigrationPostCopy {
                                        // A VMI that failed a post-copy migration should never succeed
                                        return v1.Failed, nil
                                }
                                return v1.Succeeded, nil
                        case api.ReasonShutdown, api.ReasonSaved, api.ReasonFromSnapshot:
                                return v1.Succeeded, nil
                        case api.ReasonMigrated:
                                // if the domain migrated, we no longer know the phase.
                                return vmi.Status.Phase, nil
                        }
                case api.Paused:
                        switch domain.Status.Reason {
                        case api.ReasonPausedPostcopyFailed:
                                return v1.Failed, nil
                        default:
                                return v1.Running, nil
                        }
                case api.Running, api.Blocked, api.PMSuspended:
                        return v1.Running, nil
                }
        }
        return vmi.Status.Phase, nil
}

func (c *VirtualMachineController) addDeleteFunc(obj interface{}) {
        key, err := controller.KeyFunc(obj)
        if err == nil {
                c.vmiExpectations.SetExpectations(key, 0, 0)
                c.queue.Add(key)
        }
}

func (c *VirtualMachineController) updateFunc(_, new interface{}) {
        key, err := controller.KeyFunc(new)
        if err == nil {
                c.vmiExpectations.SetExpectations(key, 0, 0)
                c.queue.Add(key)
        }
}

func (c *VirtualMachineController) addDomainFunc(obj interface{}) {
        key, err := controller.KeyFunc(obj)
        if err == nil {
                c.queue.Add(key)
        }
}
func (c *VirtualMachineController) deleteDomainFunc(obj interface{}) {
        domain, ok := obj.(*api.Domain)
        if !ok {
                tombstone, ok := obj.(cache.DeletedFinalStateUnknown)
                if !ok {
                        c.logger.Reason(fmt.Errorf("couldn't get object from tombstone %+v", obj)).Error("Failed to process delete notification")
                        return
                }
                domain, ok = tombstone.Obj.(*api.Domain)
                if !ok {
                        c.logger.Reason(fmt.Errorf("tombstone contained object that is not a domain %#v", obj)).Error("Failed to process delete notification")
                        return
                }
        }
        c.logger.V(3).Object(domain).Info("Domain deleted")
        key, err := controller.KeyFunc(obj)
        if err == nil {
                c.queue.Add(key)
        }
}
func (c *VirtualMachineController) updateDomainFunc(_, new interface{}) {
        key, err := controller.KeyFunc(new)
        if err == nil {
                c.queue.Add(key)
        }
}

func (c *VirtualMachineController) isHostModelMigratable(vmi *v1.VirtualMachineInstance) error {
        if cpu := vmi.Spec.Domain.CPU; cpu != nil && cpu.Model == v1.CPUModeHostModel {
                if c.hostCpuModel == "" {
                        err := fmt.Errorf("the node \"%s\" does not allow migration with host-model", vmi.Status.NodeName)
                        c.logger.Object(vmi).Errorf("%s", err.Error())
                        return err
                }
        }
        return nil
}

func isIOError(shouldUpdate, domainExists bool, domain *api.Domain) bool {
        return shouldUpdate && domainExists && domain.Status.Status == api.Paused && domain.Status.Reason == api.ReasonPausedIOError
}

func (c *VirtualMachineController) updateMachineType(vmi *v1.VirtualMachineInstance, domain *api.Domain) {
        if domain == nil || vmi == nil {
                return
        }
        if domain.Spec.OS.Type.Machine != "" {
                vmi.Status.Machine = &v1.Machine{Type: domain.Spec.OS.Type.Machine}
        }
}

func parseLibvirtQuantity(value int64, unit string) *resource.Quantity {
        switch unit {
        case "b", "bytes":
                return resource.NewQuantity(value, resource.BinarySI)
        case "KB":
                return resource.NewQuantity(value*1000, resource.DecimalSI)
        case "MB":
                return resource.NewQuantity(value*1000*1000, resource.DecimalSI)
        case "GB":
                return resource.NewQuantity(value*1000*1000*1000, resource.DecimalSI)
        case "TB":
                return resource.NewQuantity(value*1000*1000*1000*1000, resource.DecimalSI)
        case "k", "KiB":
                return resource.NewQuantity(value*1024, resource.BinarySI)
        case "M", "MiB":
                return resource.NewQuantity(value*1024*1024, resource.BinarySI)
        case "G", "GiB":
                return resource.NewQuantity(value*1024*1024*1024, resource.BinarySI)
        case "T", "TiB":
                return resource.NewQuantity(value*1024*1024*1024*1024, resource.BinarySI)
        }
        return nil
}

func (c *VirtualMachineController) updateBackupStatus(vmi *v1.VirtualMachineInstance, domain *api.Domain) {
        if domain == nil ||
                domain.Spec.Metadata.KubeVirt.Backup == nil ||
                vmi.Status.ChangedBlockTracking == nil ||
                vmi.Status.ChangedBlockTracking.BackupStatus == nil {
                return
        }
        backupMetadata := domain.Spec.Metadata.KubeVirt.Backup
        // Handle the case where a new backupStatus was initiated but
        // the backupMetadata wasnt reinitialized yet
        timestampMatch := backupMetadata.StartTimestamp.Equal(vmi.Status.ChangedBlockTracking.BackupStatus.StartTimestamp)
        if vmi.Status.ChangedBlockTracking.BackupStatus.BackupName != backupMetadata.Name || !timestampMatch {
                return
        }
        vmi.Status.ChangedBlockTracking.BackupStatus.Completed = backupMetadata.Completed
        vmi.Status.ChangedBlockTracking.BackupStatus.Failed = backupMetadata.Failed
        if backupMetadata.StartTimestamp != nil {
                vmi.Status.ChangedBlockTracking.BackupStatus.StartTimestamp = backupMetadata.StartTimestamp
        }
        if backupMetadata.EndTimestamp != nil {
                vmi.Status.ChangedBlockTracking.BackupStatus.EndTimestamp = backupMetadata.EndTimestamp
        }
        if backupMetadata.BackupMsg != "" {
                vmi.Status.ChangedBlockTracking.BackupStatus.BackupMsg = &backupMetadata.BackupMsg
        }
        if backupMetadata.CheckpointName != "" {
                vmi.Status.ChangedBlockTracking.BackupStatus.CheckpointName = &backupMetadata.CheckpointName
        }
        if backupMetadata.Volumes != "" {
                var volumes []backupv1.BackupVolumeInfo
                if err := json.Unmarshal([]byte(backupMetadata.Volumes), &volumes); err == nil && len(volumes) > 0 {
                        vmi.Status.ChangedBlockTracking.BackupStatus.Volumes = volumes
                }
        }
}

kubevirt / kubevirt / 71566407-af62-4e37-9e87-5d67388e004d

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous