virt

virt@lists.centos.org

1608 discussions

Centos 7 Kernel 3.10.0-693.11.6.el7.x86_64 does not boot PV
by Caribe Schreiber 09 Jan '18

09 Jan '18

I thought I'd chime in and say that I'm seeing the same kernel-plus boot failure that Shaun Reitan reported earlier. Is there likely to be another build 3.10 kernel build coming down the pipeline that might fix this issue? Here's the output of my failed PV domU boot: [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 3.10.0-693.11.6.el7.centos.plus.x86_64 ( builder(a)kbuilder.dev.centos.org) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-16) (GCC) ) #1 SMP Thu Jan 4 14:27:13 UTC 2018 [ 0.000000] Command line: root=/dev/xvda1 root=/dev/xvda1 [ 0.000000] ACPI in unprivileged domain disabled [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] Xen: [mem 0x0000000000000000-0x000000000009ffff] usable [ 0.000000] Xen: [mem 0x00000000000a0000-0x00000000000fffff] reserved [ 0.000000] Xen: [mem 0x0000000000100000-0x00000000ffffffff] usable [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] DMI not present or invalid. [ 0.000000] e820: last_pfn = 0x100000 max_arch_pfn = 0x400000000 [ 0.000000] RAMDISK: [mem 0x0243e000-0x034befff] [ 0.000000] NUMA turned off [ 0.000000] Faking a node at [mem 0x0000000000000000-0x00000000ffffffff] [ 0.000000] NODE_DATA(0) allocated [mem 0xff802000-0xff828fff] [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x00001000-0x00ffffff] [ 0.000000] DMA32 [mem 0x01000000-0xffffffff] [ 0.000000] Normal empty [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00001000-0x0009ffff] [ 0.000000] node 0: [mem 0x00100000-0xffffffff] [ 0.000000] Initmem setup node 0 [mem 0x00001000-0xffffffff] [ 0.000000] SFI: Simple Firmware Interface v0.81 http://simplefirmware.org [ 0.000000] No local APIC present [ 0.000000] APIC: disable apic facility [ 0.000000] APIC: switched to apic NOOP [ 0.000000] smpboot: Allowing 4 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000fffff] [ 0.000000] e820: cannot find a gap in the 32bit address range [ 0.000000] e820: PCI devices with unassigned 32bit BARs may break! [ 0.000000] e820: [mem 0x100100000-0x1004fffff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on Xen [ 0.000000] Xen version: 4.7.2 (preserve-AD) [ 0.000000] setup_percpu: NR_CPUS:5120 nr_cpumask_bits:4 nr_cpu_ids:4 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 35 pages/cpu @ffff8800ff200000 s104600 r8192 d30568 u524288 [ 0.000000] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes) [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 1032074 [ 0.000000] Policy zone: DMA32 [ 0.000000] Kernel command line: root=/dev/xvda1 root=/dev/xvda1 [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] x86/fpu: xstate_offset[2]: 0240, xstate_sizes[2]: 0100 [ 0.000000] xsave: enabled xstate_bv 0x7, cntxt size 0x340 using standard form [ 0.000000] Memory: 2194120k/4194304k available (6984k kernel code, 388k absent, 116588k reserved, 4581k data, 1800k init) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] x86/pti: Xen PV detected, disabling PTI protection [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=5120 to nr_cpu_ids=4. [ 0.000000] NR_IRQS:327936 nr_irqs:48 0 [ 0.000000] Console: colour dummy device 80x25 [ 0.000000] console [tty0] enabled [ 0.000000] console [hvc0] enabled [ 0.000000] allocated 16777216 bytes of page_cgroup [ 0.000000] please try 'cgroup_disable=memory' option if you don't want memory cgroups [ 0.000000] installing Xen timer for CPU 0 [ 0.000000] tsc: Fast TSC calibration failed [ 0.000000] tsc: Unable to calibrate against PIT [ 0.000000] tsc: No reference (HPET/PMTIMER) available [ 0.000000] tsc: Detected 2394.058 MHz processor [ 0.002000] Calibrating delay loop (skipped), value calculated using timer frequency.. 4788.11 BogoMIPS (lpj=2394058) [ 0.002000] pid_max: default: 32768 minimum: 301 [ 0.002000] Security Framework initialized [ 0.002000] SELinux: Initializing. [ 0.002000] Yama: becoming mindful. [ 0.002714] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.004757] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes) [ 0.005495] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes) [ 0.005532] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes) [ 0.006056] Initializing cgroup subsys memory [ 0.006092] Initializing cgroup subsys devices [ 0.006104] Initializing cgroup subsys freezer [ 0.006116] Initializing cgroup subsys net_cls [ 0.006127] Initializing cgroup subsys blkio [ 0.006137] Initializing cgroup subsys perf_event [ 0.006149] Initializing cgroup subsys hugetlb [ 0.006160] Initializing cgroup subsys pids [ 0.006170] Initializing cgroup subsys net_prio [ 0.006302] ENERGY_PERF_BIAS: Set to 'normal', was 'performance' [ 0.006318] ENERGY_PERF_BIAS: View and update with x86_energy_perf_policy(8) [ 0.006331] FEATURE SPEC_CTRL Not Present [ 0.006339] FEATURE IBPB_SUPPORT Not Present [ 0.006351] CPU: Physical Processor ID: 0 [ 0.006362] CPU: Processor Core ID: 0 [ 0.006373] mce: CPU supports 2 MCE banks [ 0.006418] Last level iTLB entries: 4KB 512, 2MB 0, 4MB 0 [ 0.006429] Last level dTLB entries: 4KB 512, 2MB 32, 4MB 32 [ 0.006439] tlb_flushall_shift: 6 [ 0.060801] ftrace: allocating 26850 entries in 105 pages [ 0.074135] cpu 0 spinlock event irq 17 [ 0.074155] smpboot: Max logical packages: 1 [ 0.074216] Performance Events: unsupported p6 CPU model 45 no PMU driver, software events only. [ 0.076817] NMI watchdog: disabled (cpu0): hardware events not enabled [ 0.076834] NMI watchdog: Shutting down hard lockup detector on all cpus [ 0.076970] installing Xen timer for CPU 1 [ 0.077000] cpu 1 spinlock event irq 24 [ 0.077200] SMP alternatives: switching to SMP code [ 0.002000] [Firmware Bug]: CPU1: APIC id mismatch. Firmware: ffff APIC: 0 [ 0.119896] installing Xen timer for CPU 2 [ 0.119935] cpu 2 spinlock event irq 31 [ 0.002000] [Firmware Bug]: CPU2: APIC id mismatch. Firmware: ffff APIC: 0 [ 0.120440] installing Xen timer for CPU 3 [ 0.120477] cpu 3 spinlock event irq 38 [ 0.002000] [Firmware Bug]: CPU3: APIC id mismatch. Firmware: ffff APIC: 0 [ 0.120937] Brought up 4 CPUs [ 0.145051] node 0 initialised, 470802 pages in 24ms [ 0.146162] devtmpfs: initialized [ 0.152152] EVM: security.selinux [ 0.152168] EVM: security.ima [ 0.152176] EVM: security.capability [ 0.154191] atomic64 test passed for x86-64 platform with CX8 and with SSE [ 0.154214] pinctrl core: initialized pinctrl subsystem [ 0.154337] xen:grant_table: Grant tables using version 2 layout [ 0.154393] Grant table initialized [ 0.174361] RTC time: 165:165:165, date: 165/165/65 [ 0.174560] NET: Registered protocol family 16 [ 0.175213] random: fast init done [ 0.177033] PCI: setting up Xen PCI frontend stub [ 0.182179] ACPI: Interpreter disabled. [ 0.183029] xen:balloon: Initialising balloon driver [ 0.187043] xen_balloon: Initialising balloon driver [ 0.187130] vgaarb: loaded [ 0.187131] SCSI subsystem initialized [ 0.187244] usbcore: registered new interface driver usbfs [ 0.187291] usbcore: registered new interface driver hub [ 0.188102] usbcore: registered new device driver usb [ 0.188102] dmi: Firmware registration failed. [ 0.188140] PCI: System does not support PCI [ 0.188156] PCI: System does not support PCI [ 0.188156] NetLabel: Initializing [ 0.188156] NetLabel: domain hash size = 128 [ 0.188156] NetLabel: protocols = UNLABELED CIPSOv4 [ 0.188156] NetLabel: unlabeled traffic allowed by default [ 0.188156] amd_nb: Cannot enumerate AMD northbridges [ 0.189005] Switched to clocksource xen [ 0.199769] pnp: PnP ACPI: disabled [ 0.205228] NET: Registered protocol family 2 [ 0.205683] TCP established hash table entries: 32768 (order: 6, 262144 bytes) [ 0.205963] TCP bind hash table entries: 32768 (order: 7, 524288 bytes) [ 0.206141] TCP: Hash tables configured (established 32768 bind 32768) [ 0.206207] TCP: reno registered [ 0.206240] UDP hash table entries: 2048 (order: 4, 65536 bytes) [ 0.206294] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes) [ 0.206415] NET: Registered protocol family 1 [ 0.206530] Unpacking initramfs... [ 0.586747] Freeing initrd memory: 16900k freed [ 0.592244] RAPL PMU: API unit is 2^-32 Joules, 3 fixed counters, 163840 ms ovfl timer [ 0.592262] RAPL PMU: hw unit of domain pp0-core 2^-16 Joules [ 0.592269] RAPL PMU: hw unit of domain package 2^-16 Joules [ 0.592275] RAPL PMU: hw unit of domain dram 2^-16 Joules [ 0.592423] platform rtc_cmos: registered platform RTC device (no PNP device found) [ 0.594065] sha1_ssse3: Using AVX optimized SHA-1 implementation [ 0.594310] sha256_ssse3: Using AVX optimized SHA-256 implementation [ 0.595043] futex hash table entries: 1024 (order: 4, 65536 bytes) [ 0.595075] Initialise system trusted keyring [ 0.595117] audit: initializing netlink socket (disabled) [ 0.595156] type=2000 audit(1515443217.801:1): initialized [ 0.620696] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 0.621772] zpool: loaded [ 0.621785] zbud: loaded [ 0.621995] VFS: Disk quotas dquot_6.5.2 [ 0.622063] Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 0.622291] msgmni has been set to 7996 [ 0.622380] Key type big_key registered [ 0.623722] NET: Registered protocol family 38 [ 0.623739] Key type asymmetric registered [ 0.623750] Asymmetric key parser 'x509' registered [ 0.623802] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) [ 0.623881] io scheduler noop registered [ 0.623893] io scheduler deadline registered (default) [ 0.623959] io scheduler cfq registered [ 0.624098] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 0.624115] pciehp: PCI Express Hot Plug Controller Driver version: 0.4 [ 0.624923] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 0.625877] Non-volatile memory driver v1.3 [ 0.625979] Linux agpgart interface v0.103 [ 0.626195] crash memory driver: version 1.1 [ 0.626308] rdac: device handler registered [ 0.626459] hp_sw: device handler registered [ 0.626475] emc: device handler registered [ 0.626486] alua: device handler registered [ 0.626558] libphy: Fixed MDIO Bus: probed [ 0.626669] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 0.626690] ehci-pci: EHCI PCI platform driver [ 0.626714] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 0.626731] ohci-pci: OHCI PCI platform driver [ 0.626753] uhci_hcd: USB Universal Host Controller Interface driver [ 0.626845] usbcore: registered new interface driver usbserial [ 0.626866] usbcore: registered new interface driver usbserial_generic [ 0.626886] usbserial: USB Serial support registered for generic [ 0.626930] i8042: PNP: No PS/2 controller found. Probing ports directly. [ 1.644938] i8042: No controller found [ 1.645173] mousedev: PS/2 mouse device common for all mice [ 1.705613] rtc_cmos rtc_cmos: rtc core: registered rtc_cmos as rtc0 [ 1.705744] rtc_cmos: probe of rtc_cmos failed with error -38 [ 1.705823] dmi-sysfs: dmi entry is absent. [ 1.705849] hidraw: raw HID events driver (C) Jiri Kosina [ 1.705993] usbcore: registered new interface driver usbhid [ 1.706020] usbhid: USB HID core driver [ 1.706055] drop_monitor: Initializing network drop monitor service [ 1.706132] TCP: cubic registered [ 1.706142] Initializing XFRM netlink socket [ 1.706246] NET: Registered protocol family 10 [ 1.706578] NET: Registered protocol family 17 [ 1.706803] microcode: CPU0 sig=0x206d7, pf=0x1, revision=0x710 [ 1.706837] microcode: CPU1 sig=0x206d7, pf=0x1, revision=0x710 [ 1.706858] microcode: CPU2 sig=0x206d7, pf=0x1, revision=0x710 [ 1.706884] microcode: CPU3 sig=0x206d7, pf=0x1, revision=0x710 [ 1.707034] microcode: Microcode Update Driver: v2.01 < tigran(a)aivazian.fsnet.co.uk>, Peter Oruba [ 1.707334] Loading compiled-in X.509 certificates [ 1.707368] Loaded X.509 cert 'CentOS Linux kpatch signing key: ea0413152cde1d98ebdca3fe6f0230904c9ef717' [ 1.707391] Loaded X.509 cert 'CentOS Linux Driver update signing key: 7f421ee0ab69461574bb358861dbe77762a4201b' [ 1.707980] Loaded X.509 cert 'CentOS Linux kernel signing key: 2bade9ee54e382c6692955a95011589b663d6aef' [ 1.708025] registered taskstats version 1 [ 1.710526] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: ffffffff816bc62d [ 1.710526] [ 1.710543] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 3.10.0-693.11.6.el7.centos.plus.x86_64 #1 [ 1.710551] Call Trace: [ 1.710561] [<ffffffff816b6e74>] dump_stack+0x19/0x1b [ 1.710569] [<ffffffff816b0d37>] panic+0xe8/0x20d [ 1.710576] [<ffffffff816bc62d>] ? __schedule+0x95d/0x9b0 [ 1.710584] [<ffffffff810ca4d0>] ? switched_to_idle+0x10/0x10 [ 1.710590] [<ffffffff810891bb>] __stack_chk_fail+0x1b/0x20 [ 1.710596] [<ffffffff816bc62d>] __schedule+0x95d/0x9b0 [ 1.710603] [<ffffffff816c4801>] ? __do_page_fault+0x171/0x450 [ 1.710611] [<ffffffff816c4b15>] ? do_page_fault+0x35/0x90 [ 1.710617] [<ffffffff816c08f8>] ? page_fault+0x28/0x30 [ 1.710623] [<ffffffff816c0dda>] ? error_exit+0x2a/0x60 [ 1.710630] [<ffffffff816c053a>] ? retint_swapgs+0x5/0x6

1 0

CentOS-virt - Kernel Side-Channel Attacks
by rikske＠deds.nl 08 Jan '18

08 Jan '18

Please patch the CentOS-virt Kernel to fix the Kernel Side-Channel Attacks vulnerabilities. The latest CentOS-virt kernel was released in November, as seen below. kernel-4.9.63-29.el7.x86_64.rpm 2017-11-21 13:30 https://access.redhat.com/security/vulnerabilities/speculativeexecution http://mirror.centos.org/centos/7/virt/x86_64/xen/

6 5

Centos 6 2.6.32-696.18.7.el6.x86_64 does not boot in Xen PV mode
by Sarah Newman 06 Jan '18

06 Jan '18

Problems start before any of the kaiser code executes, though it could still be related to CONFIG_KAISER since that has effects beyond kaiser.c. --- (early) Initializing cgroup subsys cpuset (early) Initializing cgroup subsys cpu (early) Linux version 2.6.32-696.18.7.el6.x86_64 (mockbuild(a)c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-18) (GCC) ) #1 SMP Thu Jan 4 17:31:22 UTC 2018 (early) Command line: ro console=hvc0 rootflags=barrier=0 crashkernel=auto SYSFONT=latarcyrheb-sun16 LANG=en_US.UTF-8 KEYTABLE=us earlyprintk=xen (early) KERNEL supported cpus: (early) Intel GenuineIntel (early) AMD AuthenticAMD (early) Centaur CentaurHauls (early) 1 multicall(s) failed: cpu 0 (early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1 (early) Call Trace: (early) [<ffffffff81004843>] ? xen_mc_flush+0x1c3/0x250 (early) [<ffffffff81006b9e>] ? xen_extend_mmu_update+0xde/0x1b0 (early) [<ffffffff81006fcd>] ? xen_set_pmd_hyper+0x9d/0xc0 (early) [<ffffffff81c5e8ac>] ? early_ioremap_init+0x98/0x133 (early) [<ffffffff81c45221>] ? setup_arch+0x40/0xca6 (early) [<ffffffff8107e0ee>] ? vprintk_default+0xe/0x10 (early) [<ffffffff8154b0cd>] ? printk+0x4f/0x52 (early) [<ffffffff81c3fdda>] ? start_kernel+0xdc/0x43b (early) [<ffffffff81c47eb0>] ? reserve_early+0x30/0x39 (early) [<ffffffff81c3f33a>] ? x86_64_start_reservations+0x125/0x129 (early) [<ffffffff81c4309c>] ? xen_start_kernel+0x4fe/0x505 (early) ------------[ cut here ]------------ (early) WARNING: at arch/x86/xen/multicalls.c:182 xen_mc_flush+0x21f/0x250() (Not tainted) (early) Modules linked in: (early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1 (early) Call Trace: (early) [<ffffffff8107ce81>] ? warn_slowpath_common+0x91/0xe0 (early) [<ffffffff8100762f>] ? __raw_callee_save_xen_restore_fl+0x11/0x1e (early) [<ffffffff8107ceea>] ? warn_slowpath_null+0x1a/0x20 (early) [<ffffffff8100489f>] ? xen_mc_flush+0x21f/0x250 (early) [<ffffffff81006b9e>] ? xen_extend_mmu_update+0xde/0x1b0 (early) [<ffffffff81006b9e>] ? xen_extend_mmu_update+0xde/0x1b0 (early) [<ffffffff81006fcd>] ? xen_set_pmd_hyper+0x9d/0xc0 (early) [<ffffffff81c5e8ac>] ? early_ioremap_init+0x98/0x133 (early) [<ffffffff81c45221>] ? setup_arch+0x40/0xca6 (early) [<ffffffff8107e0ee>] ? vprintk_default+0xe/0x10 (early) [<ffffffff8154b0cd>] ? printk+0x4f/0x52 (early) [<ffffffff81c3fdda>] ? start_kernel+0xdc/0x43b (early) [<ffffffff81c47eb0>] ? reserve_early+0x30/0x39 (early) [<ffffffff81c3f33a>] ? x86_64_start_reservations+0x125/0x129 (early) [<ffffffff81c4309c>] ? xen_start_kernel+0x4fe/0x505 (early) ---[ end trace a7919e7f17c0a725 ]--- (early) ACPI in unprivileged domain disabled (early) released 0 pages of unused memory (early) BIOS-provided physical RAM map: (early) Xen: 0000000000000000 - 00000000000a0000 (usable) (early) Xen: 00000000000a0000 - 0000000000100000 (reserved) (early) Xen: 0000000000100000 - 0000000020000000 (usable) (early) bootconsole [xenboot0] enabled

3 4

[CVE-2017-5715] qemu-kvm-ev-2.9.0-16.el7_4.13.1 is now available for testing
by Sandro Bonazzola 04 Jan '18

04 Jan '18

Hi, qemu-kvm-ev-2.9.0-16.el7_4.13.1 <https://cbs.centos.org/koji/buildinfo?buildID=21119> is now available for testing. I'm testing it right now in oVirt CI, if nothing shows up, I'll tag it for release in a few hours. Here's the changelog: * Thu Jan 04 2018 Sandro Bonazzola <sbonazzo(a)redhat.com> - ev-2.9.0-16.el7_4.13.1 - Removing RH branding from package name * Thu Dec 14 2017 Miroslav Rezanina <mrezanin(a)redhat.com> - rhev-2.9.0-16.el7_4.13 - Fix CVE-2017-5715 * Thu Nov 16 2017 Miroslav Rezanina <mrezanin(a)redhat.com> - rhev-2.9.0-16.el7_4.12 - kvm-util-async-use-atomic_mb_set-in-qemu_bh_cancel.patch [bz#1513362] - Resolves: bz#1513362 (QEMU's AIO subsystem gets stuck inhibiting all I/O operations on virtio-blk-pci devices [rhel-7.4.z]) -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 1

spice server and GSSAPI
by Ranbir 30 Dec '17

30 Dec '17

Hello, Does anyone have spice server for KVM Linux guests working with GSSAPI authentication? I've been trying for a while and I simply can't get it to work. I don't know what I'm doing wrong. I wouldn't be surprised if I've misunderstood something. I followed this guide: https://www.freeipa.org/page/Libvirt_with_VNC_Consoles Yes, the above is for VNC consoles. I just adapted that write up for spice. When I try to connect to a console from either virt-manager or with virt-viewer, I'm prompted to enter a password (though I shouldn't be). When I type in my freeipa domain password, it gets rejected. libvirtd with Kerberos and GSSAPI is working perfectly. I can use virt-manager from my Fedora 26 desktop with the below URI: qemu+tcp://ranbir@kvmhost01/system virt-manager connects, I get a list of all the running KVMs and I can work with them like I would if I was running virt-manager over ssh with X forwarding. The only that doesn't work is viewing the consoles. Details: - my host is a fully updated CentOS 7 system - libvirtd is set to listen for tcp connections - I added the service spice/kvmhost01.theinside.rnr - I created a keytab for the above and put it on kvmhost01 in /etc/qemu-kvm/krb5.tab - the above file has owner:group set to qemu:root with perms 600 - I have the following in /etc/sasl2/qemu-kvm.conf mech_list: gssapi keytab: /etc/qemu-kvm/krb5.tab - I have the following in /etc/libvirt/qemu.conf spice_listen = "0.0.0.0" spice_tls = 0 spice_sasl = 1 spice_sasl_dir = "/etc/sasl2/" - the first time I try to view a console, I get the kerberos tickets I expect to: Ticket cache: KEYRING:persistent:625400004:krb_ccache_7rtJmh8 Default principal: ranbir(a)THEINSIDE.RNR Valid starting Expires Service principal 2017-12-29 18:37:45 2017-12-30 18:01:40 spice/kvmhost01.theinside.rnr(a)THEINSIDE.RNR 2017-12-29 18:37:40 2017-12-30 18:01:40 libvirt/kvmhost01.theinside.rnr(a)THEINSIDE.RNR 2017-12-29 18:01:40 2017-12-30 18:01:40 krbtgt/THEINSIDE.RNR(a)THEINSIDE.RNR I'm surprised there isn't more info available about this online. That's why I'm now here asking for assistance. Does anyone have any suggestions/advice? Thanks in advance! -- Ranbir

1 1

Xen PV DomU running Kernel 4.14.5-1.el7.elrepo.x86_64: xl -v vcpu-set <domU> <val> triggers domU kernel WARNING, then domU becomes unresponsive
by Adi Pircalabu 20 Dec '17

20 Dec '17

Has anyone seen this recently? I couldn't replicate it on: - CentOS 6 running kernel-2.6.32-696.16.1.el6.x86_64, kernel-lt-4.4.105-1.el6.elrepo.x86_64 - CentOS 7 running 4.9.67-1.el7.centos.x86_64 But I can replicate it consistently running "xl -v vcpu-set <domU> <val>" on: - CentOS 6 running 4.14.5-1.el6.elrepo.x86_64 - CentOS 7 running 4.14.5-1.el7.elrepo.x86_64 dom0 versions tested with similar results in the domU: - 4.6.6-6.el7 on kernel 4.9.63-29.el7.x86_64 - 4.6.3-15.el6 on kernel 4.9.37-29.el6.x86_64 Noticed behaviour: - These commands stall: top ls -l /var/tmp ls -l /tmp - Stuck in D state on the CentOS 7 domU: root 5 0.0 0.0 0 0 ? D 11:20 0:00 [kworker/u8:0] root 316 0.0 0.0 0 0 ? D 11:20 0:00 [jbd2/xvda1-8] root 1145 0.0 0.2 116636 4776 ? Ds 11:20 0:00 -bash root 1289 0.0 0.1 25852 2420 ? Ds 11:35 0:00 /usr/bin/systemd-tmpfiles --clean root 1290 0.0 0.1 125248 2696 pts/1 D+ 11:44 0:00 ls --color=auto -l /tmp/ root 1293 0.0 0.1 125248 2568 pts/2 D+ 11:44 0:00 ls --color=auto -l /var/tmp root 1296 0.0 0.2 116636 4908 pts/3 Ds+ 11:44 0:00 -bash root 1358 0.0 0.1 125248 2612 pts/4 D+ 11:47 0:00 ls --color=auto -l /var/tmp At a first glance it appears the issue is in 4.14.5 kernel. Stack traces follow: -----CentOS 6 kernel-ml-4.14.5-1.el6.elrepo.x86_64 start here----- ------------[ cut here ]------------ WARNING: CPU: 4 PID: 60 at block/blk-mq.c:1144 __blk_mq_run_hw_queue+0x9e/0xc0 Modules linked in: intel_cstate(-) ipt_REJECT nf_reject_ipv4 nf_conntrack_ipv4 nf_defrag_ipv4 xt_multiport iptable_filter ip_tables ip6t_REJECT nf_reject_ipv6 nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack libcrc32c ip6table_filter ip6_tables dm_mod dax xen_netfront crc32_pclmul crct10dif_pclmul ghash_clmulni_intel crc32c_intel pcbc aesni_intel glue_helper crypto_simd cryptd aes_x86_64 coretemp hwmon x86_pkg_temp_thermal sb_edac intel_rapl_perf pcspkr ext4 jbd2 mbcache xen_blkfront CPU: 4 PID: 60 Comm: kworker/4:1H Not tainted 4.14.5-1.el6.elrepo.x86_64 #1 Workqueue: kblockd blk_mq_run_work_fn task: ffff8802711a2780 task.stack: ffffc90041af4000 RIP: e030:__blk_mq_run_hw_queue+0x9e/0xc0 RSP: e02b:ffffc90041af7c48 EFLAGS: 00010202 RAX: 0000000000000001 RBX: ffff88027117fa80 RCX: 0000000000000001 RDX: ffff88026b053ee0 RSI: ffff88027351bca0 RDI: ffff88026b072800 RBP: ffffc90041af7c68 R08: ffffc90041af7eb8 R09: ffff8802711a2810 R10: 0000000000007ff0 R11: 0000000000000001 R12: ffff88026b072800 R13: ffffe8ffffd04d00 R14: 0000000000000000 R15: ffffe8ffffd04d05 FS: 00002b7b7c89b700(0000) GS:ffff880273500000(0000) knlGS:0000000000000000 CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 000000026d953000 CR4: 0000000000042660 Call Trace: blk_mq_run_work_fn+0x31/0x40 process_one_work+0x174/0x440 ? xen_mc_flush+0xad/0x1b0 ? schedule+0x3a/0xa0 worker_thread+0x6b/0x410 ? default_wake_function+0x12/0x20 ? __wake_up_common+0x84/0x130 ? maybe_create_worker+0x120/0x120 ? schedule+0x3a/0xa0 ? _raw_spin_unlock_irqrestore+0x16/0x20 ? maybe_create_worker+0x120/0x120 kthread+0x111/0x150 ? __kthread_init_worker+0x40/0x40 ret_from_fork+0x25/0x30 Code: 89 df e8 06 2f d9 ff 4c 89 e7 41 89 c5 e8 0b 6e 00 00 44 89 ee 48 89 df e8 20 2f d9 ff 48 8b 5d e8 4c 8b 65 f0 4c 8b 6d f8 c9 c3 <0f> ff eb aa 4c 89 e7 e8 e6 6d 00 00 48 8b 5d e8 4c 8b 65 f0 4c ---[ end trace fe2aaf4e723042fd ]--- -----CentOS 6 kernel-ml-4.14.5-1.el6.elrepo.x86_64 end here----- -----CentOS 7 kernel-ml-4.14.5-1.el7.elrepo.x86_64 start here----- [ 116.528885] ------------[ cut here ]------------ [ 116.528894] WARNING: CPU: 3 PID: 38 at block/blk-mq.c:1144 __blk_mq_run_hw_queue+0x89/0xa0 [ 116.528898] Modules linked in: intel_cstate(-) ip_set_hash_ip ip_set nfnetlink x86_pkg_temp_thermal coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc aesni_intel crypto_simd glue_helper cryptd intel_rapl_perf pcspkr nfsd auth_rpcgss nfs_acl lockd grace sunrpc ip_tables ext4 mbcache jbd2 xen_netfront xen_blkfront crc32c_intel [ 116.528919] CPU: 3 PID: 38 Comm: kworker/3:1H Not tainted 4.14.5-1.el7.elrepo.x86_64 #1 [ 116.529007] Code: 00 e8 7c c5 45 00 4c 89 e7 e8 14 4b d7 ff 48 89 df 41 89 c5 e8 19 66 00 00 44 89 ee 4c 89 e7 e8 2e 4b d7 ff 5b 41 5c 41 5d 5d c3 <0f> ff eb b4 48 89 df e8 fb 65 00 00 5b 41 5c 41 5d 5d c3 0f ff [ 116.529034] ---[ end trace a7814e3ec9a330c6 ]--- [ 147.424117] ------------[ cut here ]------------ [ 147.424150] WARNING: CPU: 2 PID: 24 at block/blk-mq.c:1144 __blk_mq_run_hw_queue+0x89/0xa0 [ 147.424160] Modules linked in: ip_set_hash_ip ip_set nfnetlink x86_pkg_temp_thermal coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc aesni_intel crypto_simd glue_helper cryptd intel_rapl_perf pcspkr nfsd auth_rpcgss nfs_acl lockd grace sunrpc ip_tables ext4 mbcache jbd2 xen_netfront xen_blkfront crc32c_intel [ 147.424222] CPU: 2 PID: 24 Comm: kworker/2:0H Tainted: G W 4.14.5-1.el7.elrepo.x86_64 #1 [ 147.424238] Workqueue: kblockd blk_mq_run_work_fn [ 147.424247] task: ffff88007c539840 task.stack: ffffc900403e4000 [ 147.424259] RIP: e030:__blk_mq_run_hw_queue+0x89/0xa0 [ 147.424270] RSP: e02b:ffffc900403e7e30 EFLAGS: 00010202 [ 147.424279] RAX: 0000000000000001 RBX: ffff880003b83800 RCX: ffff88007d11bca0 [ 147.424288] RDX: ffff88007c656c88 RSI: 00000000000000a0 RDI: ffff880003b83800 [ 147.424298] RBP: ffffc900403e7e48 R08: 0000000000000000 R09: 0000000000000000 [ 147.424309] R10: 0000000000007ff0 R11: 00000000000074e5 R12: ffff88007c436900 [ 147.424319] R13: ffff88007d11bc80 R14: ffff88007d121b00 R15: ffff880003b83848 [ 147.424340] FS: 0000000000000000(0000) GS:ffff88007d100000(0000) knlGS:ffff88007d100000 [ 147.424350] CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.424359] CR2: 00007f504f19a700 CR3: 0000000079bed000 CR4: 0000000000042660 [ 147.424370] Call Trace: [ 147.424384] blk_mq_run_work_fn+0x2c/0x30 [ 147.424400] process_one_work+0x149/0x360 [ 147.424411] worker_thread+0x4d/0x3e0 [ 147.424421] kthread+0x109/0x140 [ 147.424432] ? rescuer_thread+0x380/0x380 [ 147.424441] ? kthread_park+0x60/0x60 [ 147.424455] ret_from_fork+0x25/0x30 [ 147.424463] Code: 00 e8 7c c5 45 00 4c 89 e7 e8 14 4b d7 ff 48 89 df 41 89 c5 e8 19 66 00 00 44 89 ee 4c 89 e7 e8 2e 4b d7 ff 5b 41 5c 41 5d 5d c3 <0f> ff eb b4 48 89 df e8 fb 65 00 00 5b 41 5c 41 5d 5d c3 0f ff [ 147.424554] ---[ end trace a7814e3ec9a330c7 ]--- -----CentOS 7 kernel-ml-4.14.5-1.el7.elrepo.x86_64 end here----- -- Adi Pircalabu

4 7

Proposal to CANCEL: 2017-12-26 Virt SIG meeting
by Sandro Bonazzola 19 Dec '17

19 Dec '17

Hi folks, I'm proposing to cancel the Virt SIG meeting on December 26th due to Holidays. If you're aware of anything important we have to discuss next week, please do reply to this mail. Thanks! -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

2 1

katello-agent is available for testing in CentOS Virt SIG
by Sandro Bonazzola 15 Dec '17

15 Dec '17

Hi, for those willing to use katello for monitoring oVirt hosts upgrade status, we added katello-agent to CentOS Virt SIG testing repo. If no negative feedback is provided, I'll tag it for release on December 20th. In order to install it: # yum install centos-release-ovirt41 # yum-config-manager --enable centos-ovirt41-testing --save # yum install katello-agent Note that oly the agent/client part has been included in Virt SIG, in order to install foreman with katello plugin follow katello website instructions. For more info about katello: https://www.theforeman.org/plugins/katello/ Thanks, -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 0

Xen 4.6.6-8 in virt-testing
by George Dunlap 13 Dec '17

13 Dec '17

Xen 4.6.6-8 has been tagged in virt-testing. It contains XSAs 248-251, as well as an additional fix to XSA 240. Please test it if you get a chance and report any bugs; I'll probably push it to mirrors tomorrow if I don't hear anything. Peace, -George

2 2

ANNOUNCE: Upstream libvirt{, -python} releases built for CentOS
by Jiri Denemark 12 Dec '17

12 Dec '17

Hi all, Apparently some folks use CentOS for developing and/or testing software on top of libvirt (e.g., oVirt), which may be a bit troublesome since the version of libvirt released with CentOS is usually quite old compared to upstream. Using the downstream releases of libvirt for developing new features can introduce several months of delay, which may not be acceptable. So to make the development easier for folks who want to stick with CentOS I started to built upstream libvirt releases for Virt-SIG. The builds are not just a result of "make rpm", they are proper rebased versions of the released CentOS builds. In other words, all required downstream changes are ported to the new libvirt release. Regular CentOS builds essentially use one of these rebased builds as a base. You can expect both libvirt and libvirt-python CentOS builds within a few days after they are released upstream, unless I'm on vacation or CBS is not cooperating. The official repository for these build is http://mirror.centos.org/centos-7/7/virt/x86_64/libvirt-latest/ If you want packages for other architectures (there's no virt directory in http://mirror.centos.org/altarch/7/), you can use https://buildlogs.centos.org/centos/7/virt/$basearch/libvirt-latest/ or specifically https://buildlogs.centos.org/centos/7/virt/ppc64le/libvirt-latest/ https://buildlogs.centos.org/centos/7/virt/aarch64/libvirt-latest/ https://buildlogs.centos.org/centos/7/virt/x86_64/libvirt-latest/ Happy hacking. Jirka

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

virt