devel

devel@lists.centos.org

10 participants
4617 discussions

[Centos6.5][Spectre]variant 2 not getting fixed
by Akshar Kanak 11 Jan '18

11 Jan '18

Dear team My Guest os (CentOS 6.5 ,kernel version 2.6.32-696.18.7.el6.x86_64) is running in ESXI server (VMware ESXi 5.5.0 build-6480324, patch ESXi550-201709001.zip was applied ) . I installed all the packages mention in https://lists.centos.org/ pipermail/centos-announce/2018-January/ The list of installed packages are -> kernel-debug-devel-2.6.32-696.18.7.el6.i686 kernel-2.6.32-696.18.7.el6.x86_64 kernel-doc-2.6.32-696.18.7.el6.noarch kernel-debug-2.6.32-696.18.7.el6.x86_64 kernel-devel-2.6.32-696.18.7.el6.x86_64 kernel-debug-devel-2.6.32-696.18.7.el6.x86_64 libreport-plugin-kerneloops-2.0.9-19.el6.centos.x86_64 abrt-addon-kerneloops-2.0.8-21.el6.centos.x86_64 dracut-kernel-004-409.el6_8.2.noarch kernel-headers-2.6.32-696.18.7.el6.x86_64 kernel-firmware-2.6.32-696.18.7.el6.noarch kernel-abi-whitelists-2.6.32-696.18.7.el6.noarch dracut-004-409.el6_8.2.noarch dracut-kernel-004-409.el6_8.2.noarch elfutils-libs-0.164-2.el6.x86_64 elfutils-0.164-2.el6.x86_64 elfutils-libelf-devel-0.164-2.el6.x86_64 elfutils-libelf-0.164-2.el6.x86_64 elfutils-devel-0.164-2.el6.x86_64 microcode_ctl-1.17-25.2.el6_9.x86_64 python-perf-2.6.32-696.18.7.el6.x86_64 perf-2.6.32-696.18.7.el6.x86_64 *But /sys/kernel/debug/x86/ibrs_enabled is still set to 0 and if I execute "echo 2 > /sys/kernel/debug/x86/ibrs_enabled"* * then we are getting the error "bash: echo: write error: No such device" .* * The content of /sys/kernel/debug/x86/ibpb_enabled is also 0 and echo 1 > /sys/kernel/debug/x86/ibpb_enabled throws the* * error "bash: echo: write error: No such device" .* I used a tool https://raw.githubusercontent.com/speed47/spectre-meltdown- checker/master/spectre-meltdown-checker.sh to detect if meltdown and spectre got fixed . Spectre Variant 1 and Meltdown got fixed but not Variant 2 . "CVE-2017-5715 [branch target injection] aka 'Spectre Variant 2' * Mitigation 1 * Hardware (CPU microcode) support for mitigation: YES * Kernel support for IBRS: YES * IBRS enabled for Kernel space: NO * IBRS enabled for User space: NO * Mitigation 2 * Kernel compiled with retpoline option: NO * Kernel compiled with a retpoline-aware compiler: NO > STATUS: VULNERABLE (IBRS hardware + kernel support OR kernel with retpoline are needed to mitigate the vulnerability)" Thanks in advance Thanks and regards AKSHAR

2 1

CentOS PaaS SIG meeting (2018-01-10)
by Troy Dawson 10 Jan '18

10 Jan '18

Hello, It's time for our weekly PaaS SIG sync-up meeting Time: 1700 UTC - Wedensdays (date -d "1700 UTC") Date: Today Wedensday, 10 January 2018 Where: IRC- Freenode - #centos-devel Agenda: - OpenShift Current Status -- rpms -- Automated rpm building and Automated testing -- Multi-arch -- Documentation -- Images and Image building -- minishift / kompose / kedge - Open Floor Minutes from last meeting: https://www.centos.org/minutes/2018/January/centos-devel.2018-01-03-17.00.h…

1 0

[CVE-2017-5715] qemu-kvm-ev-2.9.0-16.el7_4.13.1 is now available for testing
by Sandro Bonazzola 04 Jan '18

04 Jan '18

Hi, qemu-kvm-ev-2.9.0-16.el7_4.13.1 <https://cbs.centos.org/koji/buildinfo?buildID=21119> is now available for testing. I'm testing it right now in oVirt CI, if nothing shows up, I'll tag it for release in a few hours. Here's the changelog: * Thu Jan 04 2018 Sandro Bonazzola <sbonazzo(a)redhat.com> - ev-2.9.0-16.el7_4.13.1 - Removing RH branding from package name * Thu Dec 14 2017 Miroslav Rezanina <mrezanin(a)redhat.com> - rhev-2.9.0-16.el7_4.13 - Fix CVE-2017-5715 * Thu Nov 16 2017 Miroslav Rezanina <mrezanin(a)redhat.com> - rhev-2.9.0-16.el7_4.12 - kvm-util-async-use-atomic_mb_set-in-qemu_bh_cancel.patch [bz#1513362] - Resolves: bz#1513362 (QEMU's AIO subsystem gets stuck inhibiting all I/O operations on virtio-blk-pci devices [rhel-7.4.z]) -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 1

CentOS 6 patches for Spectre and Meltdown
by Paul Graydon 04 Jan '18

04 Jan '18

Hi, I see from centos-announce that the patches for CentOS 7 have rolled out, do we have a rough ETA on the CentOS 6 patches? From the looks of the security vulnerability mailing lists it looks like RedHat released the patches for 6 around the same time. I'll confess I'm a little rusty on the nomenclature RedHat uses, and the security advisory for 6 specifically references "Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support." I'm not entirely clear what "Advanced Update Support" means about the availability of patches. Does that have any impact on the patches rolling out to CentOS? Paul

2 1

[Infra] - planned outage : All services
by Fabian Arrotin 04 Jan '18

04 Jan '18

Due to important security updates that we need to apply within the whole CentOS infra, please be aware that some nodes/services will be unresponsive during that maintenance window. As it targets both CentOS 6 and CentOS 7, we'll probably apply those updates ASAP but we'll not notify for each impacted service, so this announce will cover all impacted services during the next hours/days. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

1 0

CentOS PaaS SIG meeting (2018-01-23)
by Troy Dawson 03 Jan '18

03 Jan '18

Hello, It's time for our weekly PaaS SIG sync-up meeting Time: 1700 UTC - Wedensdays (date -d "1700 UTC") Date: Today Wedensday, 03 January 2018 Where: IRC- Freenode - #centos-devel Agenda: - OpenShift Current Status -- rpms -- Automated rpm building and Automated testing -- Multi-arch -- Documentation -- Images and Image building -- minishift / kompose / kedge - Open Floor Minutes from last meeting: https://www.centos.org/minutes/2017/December/centos-devel.2017-12-20-17.00.…

1 0

EPEL and pyOpenSSL
by Tony Breeds 22 Dec '17

22 Dec '17

Hi all, I admit that I'm not sure if this is an EPEL, CentOS or RDO problem. I had to pick a place to start and this is it ;P I've done afresh CentOS 7 install on both x86_64 and ppc64le. After adding the EPEL and epel-testing repos I do yum, install -y rdopkg and I get words to the effect of: <snip> Error: Package: python2-rdopkg-0.45.0-4.el7.noarch (epel) Requires: pyOpenSSL >= 16.2.0 Installing: pyOpenSSL-0.13.1-3.el7.ppc64le (base) pyOpenSSL = 0.13.1-3.el7 <snip> I can pretty easily get past this with: yum localinstall http://cbs.centos.org/kojifiles/packages/pyOpenSSL/16.2.0/3.el7/noarch/pyth… but I suspect that it means I'm missing smething simple. Is the another repo I need to enable when using EPEL? Yours Tony.

4 4

[opstools] How to support fluentd with ruby24?
by Rich Megginson 21 Dec '17

21 Dec '17

We need to use the ruby24 SCL. That means ovirt and rdo will have a dependency on ruby24 SCL, which also means the fluentd systemd service will need to know how to run the service using the scl, unless ovirt and rdo are ready to run fluentd containerized, in which case it is as simple as using the centos ruby24 scl base image, which is what openshift is doing: https://github.com/openshift/origin-aggregated-logging/blob/master/fluentd/… ruby24 will be needed at build time for some packages as well as at runtime. https://www.centos.org/minutes/2017/December/centos-devel.2017-12-13-18.04.…

2 10

CentOS PaaS SIG meeting (2017-12-20)
by Troy Dawson 20 Dec '17

20 Dec '17

Hello, It's time for our weekly PaaS SIG sync-up meeting Time: 1700 UTC - Wedensdays (date -d "1700 UTC") Date: Today Wedensday, 20 December 2017 Where: IRC- Freenode - #centos-devel Agenda: - OpenShift Current Status -- rpms -- Automated rpm building and Automated testing -- Multi-arch -- Documentation -- Images and Image building -- minishift / kompose / kedge - Open Floor -- There will be no meeting next week (12-27-2017) -- Next meeting will in two weeks (01-03-2018) Minutes from last meeting: https://www.centos.org/minutes/2017/December/centos-devel.2017-12-13-17.00.…

1 0

Virt repos for altarch architectures
by Tony Breeds 20 Dec '17

20 Dec '17

Hi All, Firstly I admit I could easily have missed something. I'm looking for the altarch (in my case ppc64le) repos that matches http://mirror.centos.org/centos/7/virt/x86_64/kvm-common/ I kinda assumed it'd be at http://mirror.centos.org/altarch/7/ I haven't checked all the packages but the few I did check in CBS have been build for altarch Any pointers accepted Yours Tony.

2 3

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel