virt

virt@lists.centos.org

2 participants
1613 discussions

Re: [CentOS-virt] Status of reverted Linux patch "tty: Fix ldisc crash on reopened tty", Linux 4.9 kernel frequent crashes
by Pasi Kärkkäinen 01 Sep '17

01 Sep '17

On Thu, Aug 31, 2017 at 03:22:05PM +1000, Michael Neuling wrote: > On Thu, 2017-08-31 at 06:36 +0200, Greg Kroah-Hartman wrote: > > On Wed, Aug 30, 2017 at 11:10:14PM +0300, Pasi Kärkkäinen wrote: > > > Hello everyone, > > > > > > Recently Nathan March reported on centos-virt list he's getting frequent > > > Linux kernel crashes with Linux 4.9 LTS kernel because of the missing patch > > > "tty: Fix ldisc crash on reopened tty". > > > > Crashes with "normal" operation, or crashes when running a fuzzer or > > other type of program? > > For me it crashed on boot. > Nathan said he's getting the crashes at runtime, randomly, but often. > > > > > The patch was already merged upstream here: > > > https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?i > > > d=71472fa9c52b1da27663c275d416d8654b905f05 > > > > > > but then reverted here: > > > https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?i > > > d=896d81fefe5d1919537db2c2150ab6384e4a6610 > > > > > > Nathan confirmed if he applies the patch from > > > 71472fa9c52b1da27663c275d416d8654b905f05 to his Linux 4.9 LTS kernel the > > > bug/problem goes away, so the patch (or similar fix) is still needed, at > > > least for 4.9 LTS kernel. > > > > > > > > > Mikulas reported he's able to trigger the same crash on Linux 4.10: > > > https://www.spinics.net/lists/kernel/msg2440637.html > > > https://lists.gt.net/linux/kernel/2664604?search_string=ldisc%20reopened;#26 > > > 64604 > > > > > > Michael Neuling reported he's able to trigger the bug on PowerPC: > > > https://lkml.org/lkml/2017/3/10/1582 > > > > > > > > > So now the question is.. is anyone currently working on getting this patch > > > fixed and applied upstream? I think one of the problems earlier was being > > > able to reliable reproduce the crash.. Nathan says he's able to reproduce it > > > many times per week on his environment on x86_64. > > > > I don't know of anyone working on it, want to do it yourself? > > I'm not anymore. We found it was only triggered on a bogus CONFIG option > combination. Once we removed that, it no longer happened. > > The underlying bug was still there though. > Yep.. and the bug seems to trigger at runtime. > Mikey -- Pasi

1 0

Major stability problems with xen 4.6.6
by Nathan March 29 Aug '17

29 Aug '17

Hi, I'm seeing numerous crashes on the xen 4.6.6-1 / 4.6.6-2 releases, on both the 4.9.34-29 and 4.9.39-29 kernels. I've attached a txt with two different servers outputs. Xen-028: This crashed this morning while running 4.6.6-1 and 4.9.39-29 Xen-001: This crashed shortly after being upgraded to 4.6.6-2 and 4.9.34-29 Both are on different hardware platforms, and have had a long history of being stable until these upgrades. It sounds potentially related to https://kernel.googlesource.com/pub/scm/linux/kernel/git/tiwai/sound-unstabl e/+/9ce119f318ba1a07c29149301f1544b6c4bea52a%5E%21/ but I've confirmed this patch is in the above kernels. Any suggestions / thoughts? Cheers, Nathan

2 4

4.6.6-2, with XSAs 226, 227, 228, and 230, in centos-virt-testing
by George Dunlap 23 Aug '17

23 Aug '17

I've built Xen 4.6.6 with the XSAs released last week, and tagged it so that it shows up in centos-virt-testing. Please test it and let me know if you have any problems. Thanks, -George

1 0

Xen packages with XSA-226+?
by Nathan March 21 Aug '17

21 Aug '17

Hi, It's been almost a week now since XSA-226 through XSA-230 were released and just wondering when updated packages are expected to be posted? https://cbs.centos.org/koji/packageinfo?packageID=88 has nothing for the past month. Thanks! - Nathan

1 0

Copying CentOS AMIs for EBS encryption
by Andrew Hodgson 08 Aug '17

08 Aug '17

Hi, I am trying to copy the latest CentOS image to my own AWS account so that I can enable EBS volume encryption. It currently looks like the option when sharing the image is not enabled to allow direct copying of the snapshots, and I am wondering if this could be looked at? I can start an instance with this AMI, then create a new snapshot for the purpose of enabling EBS volume encryption, but I want to keep the image as clean as possible, and am worried if I run the image then some scripts will get ran that will customise the image with keys etc. If there is a better way to do this then happy to discuss. Thanks, Andrew.

2 2

Unsubscribe
by David Arnold 05 Aug '17

05 Aug '17

> On Aug 5, 2017, at 6:00 AM, centos-virt-request(a)centos.org wrote: > > Send CentOS-virt mailing list submissions to > centos-virt(a)centos.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.centos.org/mailman/listinfo/centos-virt > or, via email, send a message with subject or body 'help' to > centos-virt-request(a)centos.org > > You can reach the person managing the list at > centos-virt-owner(a)centos.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of CentOS-virt digest..." > > > Today's Topics: > > 1. Re: Copying CentOS AMIs for EBS encryption (Andrew Hodgson) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 4 Aug 2017 21:11:24 +0000 > From: Andrew Hodgson <andrew(a)hodgsonfamily.org> > To: "centos-virt(a)lists.centos.org" <centos-virt(a)lists.centos.org> > Subject: Re: [CentOS-virt] Copying CentOS AMIs for EBS encryption > Message-ID: > <AM5PR0802MB25463D4E82490F0F84C6E8C9C5B60(a)AM5PR0802MB2546.eurprd08.prod.outlook.com> > > Content-Type: text/plain; charset="us-ascii" > > I, > > Just wondering if anyone was able to look at this option with the current images or could share some tips on copying the image to another AWS account so we can use EBS encryption on the volume without tainting the image too much? > > Thanks. > Andrew. > > -----Original Message----- > From: Andrew Hodgson > Sent: 27 July 2017 15:09 > To: centos-virt(a)lists.centos.org > Subject: Copying CentOS AMIs for EBS encryption > > Hi, > > I am trying to copy the latest CentOS image to my own AWS account so that I can enable EBS volume encryption. It currently looks like the option when sharing the image is not enabled to allow direct copying of the snapshots, and I am wondering if this could be looked at? I can start an instance with this AMI, then create a new snapshot for the purpose of enabling EBS volume encryption, but I want to keep the image as clean as possible, and am worried if I run the image then some scripts will get ran that will customise the image with keys etc. > > If there is a better way to do this then happy to discuss. > > Thanks, > Andrew. > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > CentOS-virt mailing list > CentOS-virt(a)centos.org > https://lists.centos.org/mailman/listinfo/centos-virt > > > ------------------------------ > > End of CentOS-virt Digest, Vol 120, Issue 1 > *******************************************

1 0

AWS EC2 - CentOS 6 + 7 AMIs for new g3.* instance types?
by Stephan Koledin 27 Jul '17

27 Jul '17

Hello- Does anyone one this list maintain the official CentOS 6 + 7 AMIs in AWS? If so, could you please enable those images for use with the new g3.* instance types? If this list is the wrong place for this request, please point me in the right direction. Thanks! -Stephan

4 4

kernel-4.9.37-29.el7 (and el6)
by Johnny Hughes 24 Jul '17

24 Jul '17

Are the testing kernels (kernel-4.9.37-29.el7 and kernel-4.9.37-29.el6, with the one config file change) working for everyone: (turn off: CONFIG_IO_STRICT_DEVMEM) If we don't hear any negative comments by Wednesday July 19th, 2017 then we are going to push those to updates as they solve iscsi issues with some hardware and don't seem to impact anything else based on limited testing. BTW .. to test, edit the xen repo config file in /etc/yum.repos.d/ and turn on the testing repository .. or yum --enablerepo=centos-virt-xen-testing upgrade kernel* Thanks, Johnny Hughes

6 18

OVS+DPDK Problem
by Daniel Petrescu 20 Jul '17

20 Jul '17

Hi All, First time mailing here. I have installed on a CentOS 7.0 KVM (with DPDK and OVS) one Deep Packet Inspection VM. I have one channel and some virtual traffic generator. The traffic is lost between dpdk vhostuser and the DPI VM. The setup is attached. Any suggestions or ideas? Regarding the OVS+DPDK configuration, the following configuration is already made: - SELINUX is disabled - QEMU 2.9.0 was downloaded from sources - All Linux packages were updated for QEMU 2.9.0 - DPDK source was downloaded - Paths were set - epel repo was installed - DPDK 16.11 was installed - OVS 2.7.0 was installed with DPDK option - Hugepages VM is set - NICs are configured for DPDK - Permissions are set for DPDK Regarding the OVS+DPDK startup steps, the following configuration is in place: B. OVS+DPDK startup and configuration 1. Set and verify the memory hugepages mount -t hugetlbfs nodev /mnt/huge echo 64 > /sys/devices/system/node/node0/hugepages/hugepages- 1048576kB/nr_hugepages 2. Setting the driver permissions modprobe vfio-pci /usr/bin/chmod a+x /dev/vfio /usr/bin/chmod 0666 /dev/vfio/* 3. Configure the PATHS to DPDK and OVS database cd dpdk-stable-16.11.1/ export DPDK_DIR=$PWD export PATH=$PATH:/usr/local/share/openvswitch/scripts export DB_SOCK=/usr/local/var/run/openvswitch/db.sock 4. Re-initializing OVS rm /usr/local/etc/openvswitch/conf.db mkdir -p /usr/local/etc/openvswitch mkdir -p /usr/local/var/run/openvswitch ovsdb-tool create /usr/local/etc/openvswitch/conf.db /usr/local/share/openvswitch/vswitch.ovsschema 5. Starting OVS + DPDK ovsdb-server --remote=punix:/usr/local/var/run/openvswitch/db.sock --remote=db:Open_vSwitch,Open_vSwitch,manager_options --pidfile --detach ovs-vsctl --no-wait set Open_vSwitch . other_config:dpdk-init=true ovs-vsctl --no-wait set Open_vSwitch . other_config:dpdk-socket-mem=" 1024,1024" ovs-ctl --no-ovsdb-server --db-sock="$DB_SOCK" start 6. Cheking driver mapping for NICs driverctl -v list-devices | grep -i net $DPDK_DIR/tools/dpdk-devbind.py --status 7. Adding OVS+DPDK bridge and ports ovs-vsctl add-br ch1int_dpdk -- set bridge ch1int_dpdk datapath_type=netdev ovs-vsctl add-br ch1ext_dpdk -- set bridge ch1ext_dpdk datapath_type=netdev ovs-vsctl add-port ch1int_dpdk nic810 -- set Interface nic810 type=dpdk options:dpdk-devargs=0000:81:00.0 ovs-vsctl add-port ch1ext_dpdk nic811 -- set Interface nic811 type=dpdk options:dpdk-devargs=0000:81:00.1 8. Adding OVS (no DPDK) bridge and ports ovs-vsctl add-br br0 ovs-vsctl add-port br0 myportnameone 9. Adding VM ports to OVS (or OVS+DPDK) bridge #<interface type='bridge'> # <mac address='52:54:00:cb:57:af'/> # <source bridge='br0'/> # <virtualport type='openvswitch'/> # ... #</interface> 10. Adding dpdkvhostuser to the ovs switch - these are used for the socket created between the VM and the OVS bridge ovs-vsctl add-port ch1int_dpdk ch1int_dvhu -- set Interface ch1int_dvhu type=dpdkvhostuser ovs-vsctl add-port ch1ext_dpdk ch1ext_dvhu -- set Interface ch1ext_dvhu type=dpdkvhostuser 11. DPI deployment virt-install --connect qemu:///system --name=DPI --memory=16384 --vcpus=16 --os-type=linux --os-variant=virtio26 --disk path=/path/image.qcow2,format=qcow2,bus=virtio,cache=none --network bridge=admin,model=e1000 --nographics --noautoconsole --import 12. Adding vhostuser ports to guest VM - for this the XML file for the virtual machine found at etc/libvirt/qemu/<VM_name>.xml was edited <interface type='vhostuser'> <mac address='52:54:00:2f:e8:de'/> <source type='unix' path='/usr/local/var/run/openvswitch/ch1int_dvhu' mode='client'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x07' function='0x0'/> </interface> <interface type='vhostuser'> <mac address='52:54:00:b9:40:d0'/> <source type='unix' path='/usr/local/var/run/openvswitch/ch1ext_dvhu' mode='client'/> <model type='virtio'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x08' function='0x0'/> </interface> Thanks, Daniel

1 0

4.9.34-29 EL6 and EL7 kernels
by Johnny Hughes 13 Jul '17

13 Jul '17

OK Guys and Gals, We have just kicked off a build of the 4.9.34-29 xen kernel on the Community Build Service for both EL6 and EL7. This kernel has some important things in it. 1. It has a patch for the stack guard issue (CVE-2017-1000364). Also the patch for Xen Security fix XSA-216. See these upstream changelogs for ALL kernel commits from 4.9.31 to 4.9.34: https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.32 https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.33 https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.34 2. It has a fix for the xen-netback rate limit queues (http://www.spinics.net/lists/netdev/msg441578.html) (Thanks very much to Kevin Stange and Jean-Louis Dupond for finding a fix for this issue) 3. It now contains debuginfo files (thanks to Sarah Newman for this amazing addition!). ===================== The kernels are currently building, it will likely take 4 to 6 hours for them to make their way to the applicable testing repos: CentOS-7: https://buildlogs.centos.org/centos/7/virt/x86_64/xen-46/ or CentOS-6: https://buildlogs.centos.org/centos/6/virt/x86_64/xen-44/ https://buildlogs.centos.org/centos/6/virt/x86_64/xen-46/ ===================== If you actually need the debuginfo files, they will be here (also in 4 or so hours): CentOS-7: http://cbs.centos.org/repos/virt7-xen-common-testing/x86_64/debug/ CentOS-6: http://cbs.centos.org/repos/virt6-xen-common-testing/x86_64/debug/ ===================== Let's do some real testing of these and see if we can solve the issues people are having .. this should already solve server and the debuginfo files should help solve others. I think Kevin and Jean-Louis also know how to solve the Windows BSOD when run on a Xen 4.9.x dom0 server .. they can comment here. Hopefully whoever maintains the newer Windows drivers will fix the ACPI / APIC issues and no work around will be necessary soon(ish). I also want to personally (and publicly) thank Kevin, Jean-Louis, and Sarah for the substantial work and the community collaboration. This is EXACTLY what we need for the Virt SIG .. people solving problems and doing github pull requests so we can, together as a group, get these projects working much better. If someone else wants to help us with the Kernel .. or Xen .. here are our github branches: https://github.com/CentOS-virt7/xen-kernel https://github.com/CentOS-virt7/xen Fork them .. work on them .. talk to us on #centos-virt in freenode or on this mailing list .. then once we are all happy, you can submit a pull request and we'll get your issues fixed. Thanks, Johnny Hughes

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

virt