Discuss October 2018

discuss@lists.centos.org

114 participants
72 discussions

L1TF in CentOS
by Patrick Rael 02 Oct '18

02 Oct '18

Hi, I've applied the latest kernel upticks of kernel and microcode_ctl for L1TF. Just rpm updates and rebooted, no further changes. kernel-2.6.32-754.3.5.el6.x86_64.rpm kernel-firmware-2.6.32-754.3.5.el6.noarch.rpm kernel-headers-2.6.32-754.3.5.el6.x86_64.rpm perf-2.6.32-754.3.5.el6.x86_64.rpm microcode_ctl-1.17-33.3.el6_10.x86_64.rpm L1TF has several mitigations. So far I can see that only this one is applied. # cat /sys/devices/system/cpu/vulnerabilities/l1tf Mitigation: PTE Inversion Is this the definitive check? I'm trying to confirm the L1Data Cache flush isn't enabled. It's ok if only this PTE Inversion is applied for me, I just need to be sure, because when I read this url from Redhat, it says 2 of the 3 mitigations are enabled by default, but I see only 1: https://access.redhat.com/security/vulnerabilities/L1TF "/All mitigations are enabled by default with the exception of disabling Hyper-Threading, which customers must take explicit manual steps to turn off./" Also, I haven't been able to find clarity on what mitigations need to be applied to VMs, which ones to VM servers, which to kvm instances and kvm servers, and if containers and container servers need any special treatment. Thanks! -->Pat

1 0

C7 and NVIDIA driver
by Alessandro Baggi 01 Oct '18

01 Oct '18

Hi all, I'm running C7 on i7 8700k/asus z370-a with an GTX1050. I noticed that there are several problems installing Nvidia proprietary driver. After one week of troubleshooting I got my solution. Hope that can help other user. I found this https://access.redhat.com/solutions/3438891 but I've not access to this content. In this content seems that the workaround is using lightdm and mask gdm. The case: I tried using proprietary driver from nvidia site and from elrepo. In all the case I got system that hungs during boot. In a first time I got message about a device probing (and some kernel trace about i915) and running systemd-analyze blame seems that udev-settle hungs for several minutes. Some suggested to disable udev-settle if you does not have LVM but this is not my case. After this error I got error with GDM (infinite hungs) so I tried lightdm that works blinking. So I switched to multi-user level, I got always udev-settle hung but running startx system works but with some strange behaviuour. Now I tried another solution. I installed kernel-lt, kernel-lt-devel and reinstalled NVIDIA driver. All works very well also reenabling graphical runlevel. best regards

4 7

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2018