lxd-4.13-bp153.2.10

- Don't use SecureBoot OVMF blobs, they don't work with LXD.
- Add backport of <https://github.com/lxc/lxd/pull/8700> to fix LXD VMs on
  openSUSE. boo#1181549
  + boo1181549-0001-vm-qemu-configure-spice-using-spice-parameter.patch

- Update to LXD 4.13. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-13-has-been-released/10737
  boo#1184580
  + Support for instance filters in "lxc list"
  + NVIDIA MIG support for containers
  + System wide configuration in /etc/lxd
  + Project resource usage
  + Snapshot schedule aliases (cron-like @... aliases)
  + images.default_architecture for multi-architecture setups
  + New description column in "lxc {project,profile,storage} list"
  + Reworked handling of default action in network ACLs
  + "lxc stop --console"
  + More auto-generated REST-API documentation

- Move OVMF symlinks to /usr/share, /opt is not allowed in SUSE
  packages.

- Update to LXD 4.12. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-12-has-been-released/10424
  boo#1183111
  + Initial Network ACLs support (OVN-only)
  + Project restricted certificates
  + Server configuration options now supported at the project level
  + Configuration option for Ceph features
  * Projects now supported by lxd init --dump and --preseed
  * Initial auto-generated REST-API documentation
  + VM: Stateful stop and stateful snapshots for virtual machines
- Updated packaging to support VMs, though note that LXD's usage of QEMU causes
  issues with QEMU 5.2 on openSUSE (because of how we package it). See
  <https://github.com/lxc/lxd/issues/8416> for more details. bsc#1181549
- Prefix all binaries with lxd- if they don't start with "lx[cd]". This is to
  avoid having cases like lxd-generate where there's a binary in /usr/bin that
  has a super-generic name.

- Update to LXD 4.11. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-11-has-been-released/10135
  boo#1181825
  + Bulk instance state change API
  + GVRP support for dynamic vlan configuration
  + Server-side instance storage pool migration
  + Volume usage API
  + VM: SR-IOV GPU Support
  + VM: PCI Device Type
  + VM: ISO images now exposed as cdrom

- Update to LXD 4.10. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-10-has-been-released/9894
  boo#1180772
  + VLAN information in network state
  + Proxy device support for VMs (NAT only)
  + Bridge port isolation
  + New sub-commands for image properties
  + Multi-queue networking in VMs

- Update to LXD 4.9. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-9-has-been-released/9673
  boo#1179972
  + Mediated GPU devices for Virtual Machines
  + IOMMU groups for PCI devices
  + QEMU version in server environment information
  * Improved lifecycle events
  + "user." keys allowed on all objects
  + usb_address and pci_address properties in USB/network resources
  + ipv4.dhcp and ipv6.dhcp on OVN networks
  + ovn.ingress_mode on physical networks
  + ipv4.routes.anycast and ipv6.routes.anycast on physical networks
  + limits.instances project option
  + zstd compression for images and backups

- Update to LXD 4.8. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-8-has-been-released/9458
  boo#1178759
  + vTPM support
  + VirtioFS support for virtual machines
  + Full CGroup2 support
  + rebase mode for zfs.clone_copy
  + --reuse option in lxc snapshot and lxc storage volume snapshot
  * restarted lifecycle event
  * Improved logging of user requests

- Update to LXD 4.7. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-7-has-been-released/9213
  boo#1177825
  + Backup (export/import) of custom storage volumes
  + Import of instances with alternative name
  + Virtual machine memory shrinking (and re-grow)
  + USB device passthrough for virtual machines
  + Configurable rsync compression in migration
  + Restrict available uplinks for project networks
  + Add new physical managed network type
  + Support for external routed addresses/subnets on OVN

- Update to LXD 4.6. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-6-has-been-released/8981
  boo#1176737
  + Networks in projects
  + AppArmor profiles for qemu
  - Removal of custom sqlite fork.

- Update to LXD 4.5. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-5-has-been-released/8824
  boo#1175910
  + Initial support for OVN virtual networks
  + Initial bpf syscall interception
  * Support for native terminal device allocation
  * VGA console now working on Windows
  * Improved handling of remote storage pools
  * forkdns and forkproxy now running under AppArmor confinement
  + lxc move now let?s you select a cluster target too

- Update to LXD 4.4. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-4-has-been-released/8574
  boo#1174789
  + VGA console for virtual machines
  + Clustering failure domains
  + /dev/lxd API in virtual machines
  + Graceful daemon shutdown
  + macvlan and sriov managed network types
  + Disk usage limits in projects
  + AppAmor confinement for dnsmasq
  + GPU mediated devices in resources API
  + --console option in lxc launch

- Update to LXD 4.3. The full upstream changelog is available from:
  https://discuss.linuxcontainers.org/t/lxd-4-3-has-been-released/8303
  boo#1173608
  + Block custom storage volumes
  + VM: Initial work for graphical console
  * VM: Rework of PCIe layout
  + VM: GPU passthrough
  * Direct console attach on lxc start and lxc restart
  * Isolated CPUs reporting in resources API