Rebased to libvirt-7.9.0 (rhbz#2012802)
The rebase also fixes the following bugs:

Rebased to libvirt-7.8.0 (rhbz#2012802)
The rebase also fixes the following bugs:

Resolves: bz#2000225
8.6)

security: fix SELinux label generation logic (CVE-2021-3631)
storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath (CVE-2021-3667)

network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1942805)
network: force re-creation of iptables private chains on firewalld restart (rhbz#1942805)
hostdev: Update mdev pointer reference after checking device type (rhbz#1940449)
hostdev: mdev: Lookup mdevs by sysfs path rather than mdev struct (rhbz#1940449)
qemu_firmware: don't error out for unknown firmware features (rhbz#1961562)
docs: improve description of secure attribute for loader element (rhbz#1929357)
conf: introduce virDomainDefParseBootInitOptions (rhbz#1929357)
conf: introduce virDomainDefParseBootKernelOptions (rhbz#1929357)
conf: introduce virDomainDefParseBootFirmwareOptions (rhbz#1929357)
conf: introduce virDomainDefParseBootLoaderOptions (rhbz#1929357)
conf: introduce virDomainDefParseBootAcpiOptions (rhbz#1929357)
conf: use switch in virDomainDefParseBootOptions (rhbz#1929357)
conf: introduce support for firmware auto-selection feature filtering (rhbz#1929357)
qemu: implement support for firmware auto-selection feature filtering (rhbz#1929357)
domain_conf: Don't leak def->os.firmwareFeatures (rhbz#1929357)
conf: remove duplicated firmware type attribute (rhbz#1929357)

vircgroupv2: properly detect placement of running VM (rhbz#1798463)
virsystemd: export virSystemdHasMachined (rhbz#1798463)
virsystemd: introduce virSystemdGetMachineByPID (rhbz#1798463)
virsystemd: introduce virSystemdGetMachineUnitByPID (rhbz#1798463)
vircgroup: use DBus call to systemd for some APIs (rhbz#1798463)
vircgroupv1: refactor virCgroupV1DetectPlacement (rhbz#1798463)
vircgroupv2: move task into cgroup before enabling controllers (rhbz#1798463)
vircgroup: introduce virCgroupV1Exists and virCgroupV2Exists (rhbz#1798463)
vircgroup: introduce nested cgroup to properly work with systemd (rhbz#1798463)
tests: add cgroup nested tests (rhbz#1798463)
vircgroup: correctly free nested virCgroupPtr (rhbz#1798463)
qemu: Add virtio related options to vsock (rhbz#1931548)
domain_validate: use defines for cpu period and quota limits (rhbz#1798463)
docs: use proper cpu quota value in our documentation (rhbz#1798463)
vircgroup: enforce range limit for cpu.shares (rhbz#1798463)
cgroup: use virCgroupSetCpuShares instead of virCgroupSetupCpuShares (rhbz#1798463)
cpumap: Add support for ibrs CPU feature (rhbz#1926864)
cpumap: Add support for svme-addr-check CPU feature (rhbz#1926864)
cpu_map: Add EPYC-Milan x86 CPU model (rhbz#1926864)
cpu_map: Install x86_EPYC-Milan.xml (rhbz#1926864)
cpu_map: Fix spelling of svme-addr-chk feature (rhbz#1926864)

qemu: move cgroup cpu period and quota defines to vircgroup.h (rhbz#1915733)
vircgroupv1: use defines for cpu period and quota limits (rhbz#1915733)
vircgroupv2: use defines for cpu period and quota limits (rhbz#1915733)
vircgroup: fix cpu quota maximum limit (rhbz#1915733)
util: add virNetDevGetPhysPortName (rhbz#1918708)
util: avoid manual VIR_FREE of a g_autofree pointer in virPCIGetName() (rhbz#1918708)
util: Add phys_port_name support on virPCIGetNetName (rhbz#1918708)

cpu_map: Fix Icelake Server model number (rhbz#1537734)
cputestdata: Add test data for Snowridge (rhbz#1537734)
cpu_map: Add support for fsrm CPU feature (rhbz#1537734)
cpu_map: Add support for core-capability CPU feature (rhbz#1537734)
cpu_map: Add support for split-lock-detect CPU feature (rhbz#1537734)
cpu_map: Define and enable Snowridge model (rhbz#1537734)
util: fix typo in VIR_MOCK_WRAP_RET_ARGS() (rhbz#1607929)
util/tests: enable locking on iptables/ebtables commandlines in unit tests (rhbz#1607929)
util/tests: enable locking on iptables/ebtables commandlines by default (rhbz#1607929)
tests: fix iptables test case commandline options in virfirewalltest.c (rhbz#1607929)
network: be more verbose about the reason for a firewall reload (rhbz#1607929)
util: always check for ebtables/iptables binaries, even when using firewalld (rhbz#1607929)
util: synchronize with firewalld before we start calling iptables directly (rhbz#1607929)
util: call iptables directly rather than via firewalld (rhbz#1607929)
util: virhostcpu: Fail when fetching CPU Stats for invalid cpu (rhbz#1915183)

util: replace macvtap name reservation bitmap with a simple counter (rhbz#1874304)
util: assign tap device names using a monotonically increasing integer (rhbz#1874304)
util: virNetDevTapCreate: initialize fd to -1 (rhbz#1874304)

conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1872610)
qemu: format 'ramfb' attribute for mediated devices (rhbz#1876297)

cpu_map: Add missing x86 features in 0x7 CPUID leaf (rhbz#1861506)
cpu_map: Add missing x86 features in 0x80000008 CPUID leaf (rhbz#1861506)
cpu_map: Add missing AMD SVM features (rhbz#1861506)
Add testdata for AMD EPYC 7502 (rhbz#1861506)
cpu_map: Defined and enable EPYC-Rome model (rhbz#1861506)
cpu_map: Remove monitor feature from EPYC-Rome (rhbz#1861506)
tests: qemuxml2argv: Use existing machine type for 'numatune-distances' case (rhbz#1749518)
qemuxml2xmltest: Add "numatune-distance" test case (rhbz#1749518)
conf: Move and rename virDomainParseScaledValue() (rhbz#1749518)
numa_conf: Drop CPU from name of two functions (rhbz#1749518)
qemu_command: Rename qemuBuildNumaArgStr() (rhbz#1749518)
qemuBuildMachineCommandLine: Drop needless check (rhbz#1749518)
numa_conf: Make virDomainNumaSetNodeCpumask() return void (rhbz#1749518)
Allow NUMA nodes without vCPUs (rhbz#1749518)
conf: Parse and format HMAT (rhbz#1749518)
conf: Validate NUMA HMAT configuration (rhbz#1749518)
numa: expose HMAT APIs (rhbz#1749518)
qemu: Introduce QEMU_CAPS_NUMA_HMAT capability (rhbz#1749518)
qemu: Build HMAT command line (rhbz#1749518)
qemuBuildNumaCommandLine: Fix @masterInitiator check (rhbz#1749518)
numa_conf: Properly check for caches in virDomainNumaDefValidate() (rhbz#1749518)
RNG: Allow interleaving of /domain/cpu/numa/cell children (rhbz#1749518)

qemu: substitute missing model name for host-passthrough (rhbz#1850680)
rpc: gendispatch: handle empty flags (CVE-2020-25637)
rpc: add support for filtering @acls by uint params (CVE-2020-25637)
rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
qemu: Fix domfsinfo for non-PCI device information from guest agent (rhbz#1858771)
virDomainNetFindIdx: add support for CCW addresses (rhbz#1837495)
check for NULL before calling g_regex_unref (rhbz#1861176)
virhostcpu.c: fix 'die_id' parsing for Power hosts (rhbz#1876742)
qemuFirmwareFillDomain: Fill NVRAM template on migration too (rhbz#1880418)
node_device: refactor udevProcessCCW (rhbz#1853289, rhbz#1865932)
node_device: detect CSS devices (rhbz#1853289, rhbz#1865932)
virsh: nodedev: ability to filter CSS capabilities (rhbz#1853289, rhbz#1865932)
node_device: detect DASD devices (rhbz#1853289, rhbz#1865932)
udevProcessCSS: Check if def->driver is non-NULL (rhbz#1853289, rhbz#1865932)

virdevmapper: Don't cache device-mapper major (rhbz#1860421)
virdevmapper: Handle kernel without device-mapper support (rhbz#1860421)
virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1860421)

src: assume sys/sysmacros.h always exists on Linux (rhbz#1860421)
virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1860421)
virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1860421)
virdevmapper: Don't use libdevmapper to obtain dependencies (CVE-2020-14339, rhbz#1860421)
virDevMapperGetTargets: Don't ignore EBADF (rhbz#1860421)

qemu: blockjob: Don't base bitmap handling of active-layer block commit on QEMU_CAPS_BLOCKDEV_REOPEN (rhbz#1857779)
qemu: blockjob: Actually delete temporary bitmap on failed active commit (rhbz#1857779)
qemu: block: Remove 'active-write' bitmap even if there are no bitmaps to merge (rhbz#1857779)
qemuDomainBlockPivot: Rename 'actions' to 'bitmapactions' (rhbz#1857779)
qemuDomainBlockPivot: Ignore failures of creating active layer bitmap (rhbz#1857779)

Upgrade components in virt:rhel module:stream for RHEL-8.3 release (rhbz#1828317)
conf: Don't format http cookies unless VIR_DOMAIN_DEF_FORMAT_SECURE is used (CVE-2020-14301)
util: Introduce a parser for kernel cmdline arguments (rhbz#1848997)
qemu: Check if s390 secure guest support is enabled (rhbz#1848997)
qemu: Check if AMD secure guest support is enabled (rhbz#1848997)
tools: Secure guest check on s390 in virt-host-validate (rhbz#1848997)
tools: Secure guest check for AMD in virt-host-validate (rhbz#1848997)
docs: Update AMD launch secure description (rhbz#1848997)
docs: Describe protected virtualization guest setup (rhbz#1848997)