Broken!
[ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 3.10.0-693.11.6.el7.x86_64 (builder@kbuilder.dev.centos.org) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-16) (GCC) ) #1 SMP Thu Jan 4 01:06:37 UTC 2018 [ 0.000000] Command line: root=/dev/xvda ro crashkernel=auto rhgb [ 0.000000] ACPI in unprivileged domain disabled [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] Xen: [mem 0x0000000000000000-0x000000000009ffff] usable [ 0.000000] Xen: [mem 0x00000000000a0000-0x00000000000fffff] reserved [ 0.000000] Xen: [mem 0x0000000000100000-0x00000001007fffff] usable [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] DMI not present or invalid. [ 0.000000] e820: last_pfn = 0x100800 max_arch_pfn = 0x400000000 [ 0.000000] e820: last_pfn = 0x100000 max_arch_pfn = 0x400000000 [ 0.000000] RAMDISK: [mem 0x02423000-0x02e8dfff] [ 0.000000] NUMA turned off [ 0.000000] Faking a node at [mem 0x0000000000000000-0x00000001007fffff] [ 0.000000] NODE_DATA(0) allocated [mem 0xff7fb000-0xff821fff] [ 0.000000] Reserving 161MB of memory at 720MB for crashkernel (System RAM: 4103MB) [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x00001000-0x00ffffff] [ 0.000000] DMA32 [mem 0x01000000-0xffffffff] [ 0.000000] Normal [mem 0x100000000-0x1007fffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00001000-0x0009ffff] [ 0.000000] node 0: [mem 0x00100000-0x1007fffff] [ 0.000000] Initmem setup node 0 [mem 0x00001000-0x1007fffff] [ 0.000000] SFI: Simple Firmware Interface v0.81 http://simplefirmware.org [ 0.000000] No local APIC present [ 0.000000] APIC: disable apic facility [ 0.000000] APIC: switched to apic NOOP [ 0.000000] smpboot: Allowing 4 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000fffff] [ 0.000000] e820: cannot find a gap in the 32bit address range [ 0.000000] e820: PCI devices with unassigned 32bit BARs may break! [ 0.000000] e820: [mem 0x100900000-0x100cfffff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on Xen [ 0.000000] Xen version: 4.4.4-30.el6 (preserve-AD) [ 0.000000] setup_percpu: NR_CPUS:5120 nr_cpumask_bits:4 nr_cpu_ids:4 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 35 pages/cpu @ffff8800ff400000 s104536 r8192 d30632 u524288 [ 0.000000] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes) [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 1034090 [ 0.000000] Policy zone: Normal [ 0.000000] Kernel command line: root=/dev/xvda ro crashkernel=auto rhgb [ 0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes) [ 0.000000] Memory: 3916620k/4202496k available (6916k kernel code, 388k absent, 285488k reserved, 4551k data, 1800k init) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] x86/pti: Xen PV detected, disabling PTI protection [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=5120 to nr_cpu_ids=4. [ 0.000000] NR_IRQS:327936 nr_irqs:48 0 [ 0.000000] Console: colour dummy device 80x25 [ 0.000000] console [tty0] enabled [ 0.000000] console [hvc0] enabled [ 0.000000] allocated 17301504 bytes of page_cgroup [ 0.000000] please try 'cgroup_disable=memory' option if you don't want memory cgroups [ 0.000000] installing Xen timer for CPU 0 [ 0.000000] tsc: Fast TSC calibration using PIT [ 0.000000] tsc: Detected 2000.135 MHz processor [ 0.002000] Calibrating delay loop (skipped), value calculated using timer frequency.. 4000.23 BogoMIPS (lpj=2000116) [ 0.002000] pid_max: default: 32768 minimum: 301 [ 0.002000] Security Framework initialized [ 0.002000] SELinux: Initializing. [ 0.002000] Yama: becoming mindful. [ 0.002410] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes) [ 0.004872] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes) [ 0.006027] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes) [ 0.006063] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes) [ 0.006562] Initializing cgroup subsys memory [ 0.006594] Initializing cgroup subsys devices [ 0.006604] Initializing cgroup subsys freezer [ 0.006613] Initializing cgroup subsys net_cls [ 0.006621] Initializing cgroup subsys blkio [ 0.006630] Initializing cgroup subsys perf_event [ 0.006639] Initializing cgroup subsys hugetlb [ 0.006648] Initializing cgroup subsys pids [ 0.006655] Initializing cgroup subsys net_prio [ 0.006747] FEATURE SPEC_CTRL Not Present [ 0.006755] FEATURE IBPB_SUPPORT Not Present [ 0.006764] CPU: Physical Processor ID: 0 [ 0.006770] CPU: Processor Core ID: 0 [ 0.006783] Last level iTLB entries: 4KB 128, 2MB 4, 4MB 4 [ 0.006790] Last level dTLB entries: 4KB 256, 2MB 0, 4MB 32 [ 0.006797] tlb_flushall_shift: -1 [ 0.043464] ftrace: allocating 26616 entries in 104 pages [ 0.051172] cpu 0 spinlock event irq 17 [ 0.051211] smpboot: Max logical packages: 2 [ 0.051265] Performance Events: unsupported p6 CPU model 15 no PMU driver, software events only. [ 0.053927] NMI watchdog: disabled (cpu0): hardware events not enabled [ 0.053938] NMI watchdog: Shutting down hard lockup detector on all cpus [ 0.054083] installing Xen timer for CPU 1 [ 0.054104] cpu 1 spinlock event irq 24 [ 0.054161] SMP alternatives: switching to SMP code [ 0.002000] [Firmware Bug]: CPU1: APIC id mismatch. Firmware: ffff APIC: 1 [ 0.087130] installing Xen timer for CPU 2 [ 0.087158] cpu 2 spinlock event irq 31 [ 0.002000] [Firmware Bug]: CPU2: APIC id mismatch. Firmware: ffff APIC: 1 [ 0.087527] installing Xen timer for CPU 3 [ 0.087554] cpu 3 spinlock event irq 38 [ 0.002000] [Firmware Bug]: CPU3: APIC id mismatch. Firmware: ffff APIC: 1 [ 0.087723] Brought up 4 CPUs [ 0.088128] devtmpfs: initialized [ 0.097568] EVM: security.selinux [ 0.097576] EVM: security.ima [ 0.097582] EVM: security.capability [ 0.099417] atomic64 test passed for x86-64 platform with CX8 and with SSE [ 0.099440] pinctrl core: initialized pinctrl subsystem [ 0.099538] xen:grant_table: Grant tables using version 2 layout [ 0.099569] Grant table initialized [ 0.119476] RTC time: 165:165:165, date: 165/165/65 [ 0.119675] NET: Registered protocol family 16 [ 0.121015] PCI: setting up Xen PCI frontend stub [ 0.127086] ACPI: Interpreter disabled. [ 0.127121] xen:balloon: Initialising balloon driver [ 0.129017] random: fast init done [ 0.130054] xen_balloon: Initialising balloon driver [ 0.131072] vgaarb: loaded [ 0.131195] SCSI subsystem initialized [ 0.131195] usbcore: registered new interface driver usbfs [ 0.131195] usbcore: registered new interface driver hub [ 0.131195] usbcore: registered new device driver usb [ 0.131195] dmi: Firmware registration failed. [ 0.167027] PCI: System does not support PCI [ 0.167037] PCI: System does not support PCI [ 0.167215] NetLabel: Initializing [ 0.167224] NetLabel: domain hash size = 128 [ 0.167230] NetLabel: protocols = UNLABELED CIPSOv4 [ 0.167257] NetLabel: unlabeled traffic allowed by default [ 0.167295] amd_nb: Cannot enumerate AMD northbridges [ 0.167550] Switched to clocksource xen [ 0.178088] pnp: PnP ACPI: disabled [ 0.183638] NET: Registered protocol family 2 [ 0.184098] TCP established hash table entries: 32768 (order: 6, 262144 bytes) [ 0.184361] TCP bind hash table entries: 32768 (order: 7, 524288 bytes) [ 0.184596] TCP: Hash tables configured (established 32768 bind 32768) [ 0.184668] TCP: reno registered [ 0.184700] UDP hash table entries: 2048 (order: 4, 65536 bytes) [ 0.184758] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes) [ 0.184881] NET: Registered protocol family 1 [ 0.184995] Unpacking initramfs... [ 0.413365] Freeing initrd memory: 10668k freed [ 0.419848] platform rtc_cmos: registered platform RTC device (no PNP device found) [ 0.420928] sha1_ssse3: Using SSSE3 optimized SHA-1 implementation [ 0.421192] sha256_ssse3: Using SSSE3 optimized SHA-256 implementation [ 0.421874] futex hash table entries: 1024 (order: 4, 65536 bytes) [ 0.421934] Initialise system trusted keyring [ 0.421977] audit: initializing netlink socket (disabled) [ 0.422030] type=2000 audit(1515201065.163:1): initialized [ 0.455969] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 0.457842] zpool: loaded [ 0.457855] zbud: loaded [ 0.458117] VFS: Disk quotas dquot_6.5.2 [ 0.458176] Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 0.458464] msgmni has been set to 7670 [ 0.458549] Key type big_key registered [ 0.461029] NET: Registered protocol family 38 [ 0.461048] Key type asymmetric registered [ 0.461057] Asymmetric key parser 'x509' registered [ 0.461108] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) [ 0.461283] io scheduler noop registered [ 0.461297] io scheduler deadline registered (default) [ 0.461362] io scheduler cfq registered [ 0.461522] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 0.461542] pciehp: PCI Express Hot Plug Controller Driver version: 0.4 [ 0.462648] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 0.463550] Non-volatile memory driver v1.3 [ 0.463641] Linux agpgart interface v0.103 [ 0.463792] crash memory driver: version 1.1 [ 0.463898] rdac: device handler registered [ 0.464087] hp_sw: device handler registered [ 0.464099] emc: device handler registered [ 0.464109] alua: device handler registered [ 0.464189] libphy: Fixed MDIO Bus: probed [ 0.464329] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 0.464345] ehci-pci: EHCI PCI platform driver [ 0.464366] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 0.464379] ohci-pci: OHCI PCI platform driver [ 0.464396] uhci_hcd: USB Universal Host Controller Interface driver [ 0.464474] usbcore: registered new interface driver usbserial [ 0.464494] usbcore: registered new interface driver usbserial_generic [ 0.464510] usbserial: USB Serial support registered for generic [ 0.464544] i8042: PNP: No PS/2 controller found. Probing ports directly. [ 1.495394] i8042: No controller found [ 1.495593] mousedev: PS/2 mouse device common for all mice [ 1.556097] rtc_cmos rtc_cmos: rtc core: registered rtc_cmos as rtc0 [ 1.556211] rtc_cmos: probe of rtc_cmos failed with error -38 [ 1.556300] dmi-sysfs: dmi entry is absent. [ 1.556343] hidraw: raw HID events driver (C) Jiri Kosina [ 1.556508] usbcore: registered new interface driver usbhid [ 1.556520] usbhid: USB HID core driver [ 1.556575] drop_monitor: Initializing network drop monitor service [ 1.556688] TCP: cubic registered [ 1.556703] Initializing XFRM netlink socket [ 1.556865] NET: Registered protocol family 10 [ 1.557258] NET: Registered protocol family 17 [ 1.557280] mce: Unable to init device /dev/mcelog (rc: -5) [ 1.557403] microcode: CPU0 sig=0x6f6, pf=0x4, revision=0xcd [ 1.557421] microcode: CPU1 sig=0x6f6, pf=0x4, revision=0xcd [ 1.557453] microcode: CPU2 sig=0x6f6, pf=0x4, revision=0xcd [ 1.557484] microcode: CPU3 sig=0x6f6, pf=0x4, revision=0xcd [ 1.557635] microcode: Microcode Update Driver: v2.01 tigran@aivazian.fsnet.co.uk, Peter Oruba [ 1.558075] Loading compiled-in X.509 certificates [ 1.558128] Loaded X.509 cert 'CentOS Linux kpatch signing key: ea0413152cde1d98ebdca3fe6f0230904c9ef717' [ 1.558159] Loaded X.509 cert 'CentOS Linux Driver update signing key: 7f421ee0ab69461574bb358861dbe77762a4201b' [ 1.559033] Loaded X.509 cert 'CentOS Linux kernel signing key: 2cbc9870546343ca3ae120c2bceb984401955962' [ 1.559080] registered taskstats version 1 [ 1.561924] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: ffffffff816ab65d [ 1.561924] [ 1.561953] CPU: 3 PID: 0 Comm: swapper/3 Not tainted 3.10.0-693.11.6.el7.x86_64 #1 [ 1.561966] Call Trace: [ 1.561982] [<ffffffff816a5ea1>] dump_stack+0x19/0x1b [ 1.561996] [<ffffffff8169fd64>] panic+0xe8/0x20d [ 1.562009] [<ffffffff816ab65d>] ? __schedule+0x95d/0x9b0 [ 1.562009] [<ffffffff810ca4d0>] ? switched_to_idle+0x10/0x10 [ 1.562009] [<ffffffff810891bb>] __stack_chk_fail+0x1b/0x20 [ 1.562009] [<ffffffff816ab65d>] __schedule+0x95d/0x9b0 [ 1.562009] [<ffffffff816b3801>] ? __do_page_fault+0x171/0x450 [ 1.562009] [<ffffffff816b3b15>] ? do_page_fault+0x35/0x90 [ 1.562009] [<ffffffff816af8f8>] ? page_fault+0x28/0x30 [ 1.562009] [<ffffffff816afdda>] ? error_exit+0x2a/0x60 [ 1.562009] [<ffffffff816af53a>] ? retint_swapgs+0x5/0x6
-- Shaun Reitan NDCHost.com
On 01/06/2018 03:16 AM, Dmitry Melekhov wrote:
The same problem with latest centos 6 kernel,i.e. with meltdown fix.
I can't see console output, because I have it on "cloud" provider hosting :-)
06.01.2018 05:13, Shaun Reitan пишет:
Broken!
For those of you looking for a PV enabled client Kernel for CentOS Linux 7 DomU VMs, you can use our Experimental kernel from here:
http://mirror.centos.org/altarch/7/experimental/x86_64/
There is a repo file at the BOTTOM of this wiki page that you can use to enable the experimental repo:
https://wiki.centos.org/SpecialInterestGroup/AltArch/i386
That experimental repo file will work for x86_64 or i386 installs and the latest released kernel (kernel-4.9.75-204.el7.centos). This kernel has the CONFIG_PAGE_TABLE_ISOLATION=y security fixes (used to be CONFIG_KAISER .. and still is in the Red Hat released kernels).
You could also use the Dom0 kernels from the Xen repo as DomU kernels for your PV VMs if you want. Currently the 4.9.75 Xen kernels are in the testing repo and waiting for tests to release.
Thanks, Johnny Hughes
While installing the experemental kernel on a CentOS 7 PV the following happened. After a reboot of the PV the kernel looks to be installed but there is no option for booting it in grub. I attempted to run yum reinstall kernel-4.9.75-204.el7.centos.x86_64 and it installed fine but still no entry in grub. No initramfs existed and I found kernel-modules did not install properly so I then ran yum reinstall kernel-modules and received a ton of errors that looked like the following..
depmod: ERROR: failed to load symbols from /lib/modules/4.9.75-204.el7.centos.x86_64/kernel/drivers/misc/sgi-xp/xpc.ko.xz: Exec format error
after which a initramfs does exist however on reboot still no option for the new kernel.
[root@CC0A2543 ~]# [ 587.145018] ------------[ cut here ]------------ [ 587.145018] kernel BUG at arch/x86/kernel/paravirt.c:244! [ 587.145018] invalid opcode: 0000 [#1] SMP [ 587.145018] Modules linked in: xen_netfront coretemp pcspkr ip_tables ext4 mbcache jbd2 xen_blkfront [ 587.145018] CPU: 0 PID: 2126 Comm: dracut Not tainted 3.10.0-123.4.4.el7.x86_64 #1 [ 587.145018] task: ffff880002da5b00 ti: ffff8800f6088000 task.ti: ffff8800f6088000 [ 587.145018] RIP: e030:[<ffffffff815da23b>] [<ffffffff815da23b>] enter_lazy.part.0+0x4/0x6 [ 587.145018] RSP: e02b:ffff8800ff403ab0 EFLAGS: 00010002 [ 587.145018] RAX: 0000000000000001 RBX: ffff8800f8ad4040 RCX: 00003ffffffff000 [ 587.145018] RDX: ffff880000000040 RSI: ffff880000000000 RDI: 00000005a52cc067 [ 587.145018] RBP: ffff8800ff403ab0 R08: ffff8800ff403b78 R09: ffffffff81362409 [ 587.145018] R10: ffff8800fa001e00 R11: ffff880000000000 R12: ffffc90000609000 [ 587.145018] R13: ffffc90000608000 R14: 0000000000000000 R15: ffffffff8100a6b0 [ 587.145018] FS: 00007f14b0680740(0000) GS:ffff8800ff400000(0000) knlGS:0000000000000000 [ 587.145018] CS: e033 DS: 0000 ES: 0000 CR0: 000000008005003b [ 587.145018] CR2: 00007f14b0473000 CR3: 00000000f6099000 CR4: 0000000000002660 [ 587.145018] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 587.145018] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 587.145018] Stack: [ 587.145018] ffff8800ff403ac0 ffffffff81046bc7 ffff8800ff403b60 ffffffff8116d8d6 [ 587.145018] ffffc90000608fff ffffc90000609000 ffffffff818cec90 ffffc90000608fff [ 587.145018] ffffc90000609000 ffff8800fa04d000 0000000000000004 ffffc90000608fff [ 587.145018] Call Trace: [ 587.145018] <IRQ> [ 587.145018] [<ffffffff81046bc7>] paravirt_enter_lazy_mmu+0x27/0x30 [ 587.145018] [<ffffffff8116d8d6>] apply_to_page_range+0x266/0x440 [ 587.145018] [<ffffffff8100a7fb>] arch_gnttab_map_status+0x3b/0x70 [ 587.145018] [<ffffffff81362486>] gnttab_map_frames_v2+0xd6/0x150 [ 587.145018] [<ffffffff813625a1>] gnttab_map+0xa1/0x140 [ 587.145018] [<ffffffff81362740>] get_free_entries+0x100/0x2e0 [ 587.145018] [<ffffffff813629e5>] gnttab_alloc_grant_references+0x15/0x30 [ 587.145018] [<ffffffffa0000cc3>] do_blkif_request+0x683/0x850 [xen_blkfront] [ 587.145018] [<ffffffff812906c3>] __blk_run_queue+0x33/0x40 [ 587.145018] [<ffffffff812906f9>] blk_start_queue+0x29/0x40 [ 587.145018] [<ffffffffa0000eb1>] kick_pending_request_queues+0x21/0x30 [xen_blkfront] [ 587.145018] [<ffffffffa0001487>] blkif_interrupt+0x5c7/0x670 [xen_blkfront] [ 587.145018] [<ffffffff810f735e>] handle_irq_event_percpu+0x3e/0x1e0 [ 587.145018] [<ffffffff810f753d>] handle_irq_event+0x3d/0x60 [ 587.145018] [<ffffffff810fa1c7>] handle_edge_irq+0x77/0x130 [ 587.145018] [<ffffffff81363527>] __xen_evtchn_do_upcall+0x227/0x350 [ 587.145018] [<ffffffff813656db>] xen_evtchn_do_upcall+0x2b/0x50 [ 587.145018] [<ffffffff815f3f7e>] xen_do_hypervisor_callback+0x1e/0x30 [ 587.145018] <EOI> [ 587.145018] [<ffffffff812b8419>] ? free_cpumask_var+0x9/0x10 [ 587.145018] [<ffffffff81169618>] ? unmap_page_range+0x5f8/0x860 [ 587.145018] [<ffffffff81169901>] ? unmap_single_vma+0x81/0xf0 [ 587.145018] [<ffffffff8116a9c9>] ? unmap_vmas+0x49/0x90 [ 587.145018] [<ffffffff8117367c>] ? exit_mmap+0xac/0x1a0 [ 587.145018] [<ffffffff8105b187>] ? mmput+0x67/0xf0 [ 587.145018] [<ffffffff811b6c32>] ? flush_old_exec+0x422/0x880 [ 587.145018] [<ffffffff812069cc>] ? load_elf_binary+0x33c/0xde0 [ 587.145018] [<ffffffff81272b13>] ? ima_get_action+0x23/0x30 [ 587.145018] [<ffffffff8127217e>] ? process_measurement+0x8e/0x250 [ 587.145018] [<ffffffff81272639>] ? ima_bprm_check+0x49/0x50 [ 587.145018] [<ffffffff81206690>] ? load_elf_library+0x230/0x230 [ 587.145018] [<ffffffff811b6355>] ? search_binary_handler+0xf5/0x310 [ 587.145018] [<ffffffff811b78e9>] ? do_execve_common.isra.22+0x559/0x650 [ 587.145018] [<ffffffff811b7c76>] ? SyS_execve+0x36/0x50 [ 587.145018] [<ffffffff815f2b89>] ? stub_execve+0x69/0xa0 [ 587.145018] Code: 8d 55 f0 48 8d 4d f4 e8 b4 8e a2 ff 66 90 48 8b 55 f8 65 48 33 14 25 28 00 00 00 8b 45 e8 74 05 e8 ab 3a a8 ff c9 c3 55 48 89 e5 <0f> 0b 66 66 66 66 90 55 48 89 e5 0f 0b 55 48 89 e5 0f 0b 66 66 [ 587.145018] RIP [<ffffffff815da23b>] enter_lazy.part.0+0x4/0x6 [ 587.145018] RSP <ffff8800ff403ab0> [ 587.145018] ---[ end trace 8566ed161f106c20 ]--- [ 587.145018] Kernel panic - not syncing: Fatal exception in interrupt
-- Shaun Reitan NDCHost.com
------ Original Message ------ From: "Johnny Hughes" johnny@centos.org To: centos-virt@centos.org Sent: 2018-01-06 05:34:22 AM Subject: Re: [CentOS-virt] Centos 7 Kernel 3.10.0-693.11.6.el7.x86_64 does not boot PV
On 01/06/2018 03:16 AM, Dmitry Melekhov wrote:
The same problem with latest centos 6 kernel,i.e. with meltdown fix.
I can't see console output, because I have it on "cloud" provider hosting :-)
06.01.2018 05:13, Shaun Reitan пишет:
Broken!
For those of you looking for a PV enabled client Kernel for CentOS Linux 7 DomU VMs, you can use our Experimental kernel from here:
http://mirror.centos.org/altarch/7/experimental/x86_64/
There is a repo file at the BOTTOM of this wiki page that you can use to enable the experimental repo:
https://wiki.centos.org/SpecialInterestGroup/AltArch/i386
That experimental repo file will work for x86_64 or i386 installs and the latest released kernel (kernel-4.9.75-204.el7.centos). This kernel has the CONFIG_PAGE_TABLE_ISOLATION=y security fixes (used to be CONFIG_KAISER .. and still is in the Red Hat released kernels).
You could also use the Dom0 kernels from the Xen repo as DomU kernels for your PV VMs if you want. Currently the 4.9.75 Xen kernels are in the testing repo and waiting for tests to release.
Thanks, Johnny Hughes
On 01/08/2018 02:10 PM, Shaun Reitan wrote:
While installing the experemental kernel on a CentOS 7 PV the following happened. After a reboot of the PV the kernel looks to be installed but there is no option for booting it in grub. I attempted to run yum reinstall kernel-4.9.75-204.el7.centos.x86_64 and it installed fine but still no entry in grub. No initramfs existed and I found kernel-modules did not install properly so I then ran yum reinstall kernel-modules and received a ton of errors that looked like the following..
depmod: ERROR: failed to load symbols from /lib/modules/4.9.75-204.el7.centos.x86_64/kernel/drivers/misc/sgi-xp/xpc.ko.xz: Exec format error
after which a initramfs does exist however on reboot still no option for the new kernel.
Installed and works fine for me.
Very odd.
from my Dom0 machine: [root@xendom0 ~]# uname -a Linux xendom0 4.9.75-29.el7.x86_64 #1 SMP Fri Jan 5 19:42:28 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
From my DomU CentOS-7 PV VM: Linux x7-x8664-pv 4.9.75-204.el7.centos.x86_64 #1 SMP Fri Jan 5 17:51:39 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
My CentOS-7 PV config: [root@xendom0 ~]# cat /etc/xen/config.d/c7-x8664.pv.cfg bootloader= "/usr/lib/xen/bin/pygrub" name = "c7-x8664.pv" memory = 4096 vcpus = 2 vif = [ 'mac=00:16:3E:29:00:02,bridge=xenbr0' ] disk = [ 'phy:/dev/cl/c7-x8664-pv,xvda,rw' ] vfb = [ 'type=vnc,vncdisplay=1,vncpasswd=supersecret' ]
[root@CC0A2543 ~]# [ 587.145018] ------------[ cut here ]------------ [ 587.145018] kernel BUG at arch/x86/kernel/paravirt.c:244! [ 587.145018] invalid opcode: 0000 [#1] SMP [ 587.145018] Modules linked in: xen_netfront coretemp pcspkr ip_tables ext4 mbcache jbd2 xen_blkfront [ 587.145018] CPU: 0 PID: 2126 Comm: dracut Not tainted 3.10.0-123.4.4.el7.x86_64 #1 [ 587.145018] task: ffff880002da5b00 ti: ffff8800f6088000 task.ti: ffff8800f6088000 [ 587.145018] RIP: e030:[<ffffffff815da23b>] [<ffffffff815da23b>] enter_lazy.part.0+0x4/0x6 [ 587.145018] RSP: e02b:ffff8800ff403ab0 EFLAGS: 00010002 [ 587.145018] RAX: 0000000000000001 RBX: ffff8800f8ad4040 RCX: 00003ffffffff000 [ 587.145018] RDX: ffff880000000040 RSI: ffff880000000000 RDI: 00000005a52cc067 [ 587.145018] RBP: ffff8800ff403ab0 R08: ffff8800ff403b78 R09: ffffffff81362409 [ 587.145018] R10: ffff8800fa001e00 R11: ffff880000000000 R12: ffffc90000609000 [ 587.145018] R13: ffffc90000608000 R14: 0000000000000000 R15: ffffffff8100a6b0 [ 587.145018] FS: 00007f14b0680740(0000) GS:ffff8800ff400000(0000) knlGS:0000000000000000 [ 587.145018] CS: e033 DS: 0000 ES: 0000 CR0: 000000008005003b [ 587.145018] CR2: 00007f14b0473000 CR3: 00000000f6099000 CR4: 0000000000002660 [ 587.145018] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 587.145018] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 587.145018] Stack: [ 587.145018] ffff8800ff403ac0 ffffffff81046bc7 ffff8800ff403b60 ffffffff8116d8d6 [ 587.145018] ffffc90000608fff ffffc90000609000 ffffffff818cec90 ffffc90000608fff [ 587.145018] ffffc90000609000 ffff8800fa04d000 0000000000000004 ffffc90000608fff [ 587.145018] Call Trace: [ 587.145018] <IRQ> [ 587.145018] [<ffffffff81046bc7>] paravirt_enter_lazy_mmu+0x27/0x30 [ 587.145018] [<ffffffff8116d8d6>] apply_to_page_range+0x266/0x440 [ 587.145018] [<ffffffff8100a7fb>] arch_gnttab_map_status+0x3b/0x70 [ 587.145018] [<ffffffff81362486>] gnttab_map_frames_v2+0xd6/0x150 [ 587.145018] [<ffffffff813625a1>] gnttab_map+0xa1/0x140 [ 587.145018] [<ffffffff81362740>] get_free_entries+0x100/0x2e0 [ 587.145018] [<ffffffff813629e5>] gnttab_alloc_grant_references+0x15/0x30 [ 587.145018] [<ffffffffa0000cc3>] do_blkif_request+0x683/0x850 [xen_blkfront] [ 587.145018] [<ffffffff812906c3>] __blk_run_queue+0x33/0x40 [ 587.145018] [<ffffffff812906f9>] blk_start_queue+0x29/0x40 [ 587.145018] [<ffffffffa0000eb1>] kick_pending_request_queues+0x21/0x30 [xen_blkfront] [ 587.145018] [<ffffffffa0001487>] blkif_interrupt+0x5c7/0x670 [xen_blkfront] [ 587.145018] [<ffffffff810f735e>] handle_irq_event_percpu+0x3e/0x1e0 [ 587.145018] [<ffffffff810f753d>] handle_irq_event+0x3d/0x60 [ 587.145018] [<ffffffff810fa1c7>] handle_edge_irq+0x77/0x130 [ 587.145018] [<ffffffff81363527>] __xen_evtchn_do_upcall+0x227/0x350 [ 587.145018] [<ffffffff813656db>] xen_evtchn_do_upcall+0x2b/0x50 [ 587.145018] [<ffffffff815f3f7e>] xen_do_hypervisor_callback+0x1e/0x30 [ 587.145018] <EOI> [ 587.145018] [<ffffffff812b8419>] ? free_cpumask_var+0x9/0x10 [ 587.145018] [<ffffffff81169618>] ? unmap_page_range+0x5f8/0x860 [ 587.145018] [<ffffffff81169901>] ? unmap_single_vma+0x81/0xf0 [ 587.145018] [<ffffffff8116a9c9>] ? unmap_vmas+0x49/0x90 [ 587.145018] [<ffffffff8117367c>] ? exit_mmap+0xac/0x1a0 [ 587.145018] [<ffffffff8105b187>] ? mmput+0x67/0xf0 [ 587.145018] [<ffffffff811b6c32>] ? flush_old_exec+0x422/0x880 [ 587.145018] [<ffffffff812069cc>] ? load_elf_binary+0x33c/0xde0 [ 587.145018] [<ffffffff81272b13>] ? ima_get_action+0x23/0x30 [ 587.145018] [<ffffffff8127217e>] ? process_measurement+0x8e/0x250 [ 587.145018] [<ffffffff81272639>] ? ima_bprm_check+0x49/0x50 [ 587.145018] [<ffffffff81206690>] ? load_elf_library+0x230/0x230 [ 587.145018] [<ffffffff811b6355>] ? search_binary_handler+0xf5/0x310 [ 587.145018] [<ffffffff811b78e9>] ? do_execve_common.isra.22+0x559/0x650 [ 587.145018] [<ffffffff811b7c76>] ? SyS_execve+0x36/0x50 [ 587.145018] [<ffffffff815f2b89>] ? stub_execve+0x69/0xa0 [ 587.145018] Code: 8d 55 f0 48 8d 4d f4 e8 b4 8e a2 ff 66 90 48 8b 55 f8 65 48 33 14 25 28 00 00 00 8b 45 e8 74 05 e8 ab 3a a8 ff c9 c3 55 48 89 e5 <0f> 0b 66 66 66 66 90 55 48 89 e5 0f 0b 55 48 89 e5 0f 0b 66 66 [ 587.145018] RIP [<ffffffff815da23b>] enter_lazy.part.0+0x4/0x6 [ 587.145018] RSP <ffff8800ff403ab0> [ 587.145018] ---[ end trace 8566ed161f106c20 ]--- [ 587.145018] Kernel panic - not syncing: Fatal exception in interrupt
-- Shaun Reitan NDCHost.com
------ Original Message ------ From: "Johnny Hughes" <johnny@centos.org mailto:johnny@centos.org> To: centos-virt@centos.org mailto:centos-virt@centos.org Sent: 2018-01-06 05:34:22 AM Subject: Re: [CentOS-virt] Centos 7 Kernel 3.10.0-693.11.6.el7.x86_64 does not boot PV
On 01/06/2018 03:16 AM, Dmitry Melekhov wrote:
The same problem with latest centos 6 kernel,i.e. with meltdown fix. I can't see console output, because I have it on "cloud" provider hosting :-) 06.01.2018 05:13, Shaun Reitan пишет:
Broken!
For those of you looking for a PV enabled client Kernel for CentOS Linux 7 DomU VMs, you can use our Experimental kernel from here: http://mirror.centos.org/altarch/7/experimental/x86_64/ There is a repo file at the BOTTOM of this wiki page that you can use to enable the experimental repo: https://wiki.centos.org/SpecialInterestGroup/AltArch/i386 That experimental repo file will work for x86_64 or i386 installs and the latest released kernel (kernel-4.9.75-204.el7.centos). This kernel has the CONFIG_PAGE_TABLE_ISOLATION=y security fixes (used to be CONFIG_KAISER .. and still is in the Red Hat released kernels). You could also use the Dom0 kernels from the Xen repo as DomU kernels for your PV VMs if you want. Currently the 4.9.75 Xen kernels are in the testing repo and waiting for tests to release. Thanks, Johnny Hughes
CentOS-virt mailing list CentOS-virt@centos.org https://lists.centos.org/mailman/listinfo/centos-virt
Weird, Just did a new PV deploy of CentOS 7 and upgraded the kernel and it worked fine this time.
-- Shaun Reitan NDCHost.com
------ Original Message ------ From: "Johnny Hughes" johnny@centos.org To: centos-virt@centos.org Sent: 2018-01-09 07:33:26 AM Subject: Re: [CentOS-virt] Centos 7 Kernel 3.10.0-693.11.6.el7.x86_64 does not boot PV
On 01/08/2018 02:10 PM, Shaun Reitan wrote:
While installing the experemental kernel on a CentOS 7 PV the following happened. After a reboot of the PV the kernel looks to be installed but there is no option for booting it in grub. I attempted to run yum reinstall kernel-4.9.75-204.el7.centos.x86_64 and it installed fine but still no entry in grub. No initramfs existed and I found kernel-modules did not install properly so I then ran yum reinstall kernel-modules and received a ton of errors that looked like the following..
depmod: ERROR: failed to load symbols from /lib/modules/4.9.75-204.el7.centos.x86_64/kernel/drivers/misc/sgi-xp/xpc.ko.xz: Exec format error
after which a initramfs does exist however on reboot still no option for the new kernel.
Installed and works fine for me.
Very odd.
from my Dom0 machine: [root@xendom0 ~]# uname -a Linux xendom0 4.9.75-29.el7.x86_64 #1 SMP Fri Jan 5 19:42:28 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
From my DomU CentOS-7 PV VM: Linux x7-x8664-pv 4.9.75-204.el7.centos.x86_64 #1 SMP Fri Jan 5 17:51:39 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
My CentOS-7 PV config: [root@xendom0 ~]# cat /etc/xen/config.d/c7-x8664.pv.cfg bootloader= "/usr/lib/xen/bin/pygrub" name = "c7-x8664.pv" memory = 4096 vcpus = 2 vif = [ 'mac=00:16:3E:29:00:02,bridge=xenbr0' ] disk = [ 'phy:/dev/cl/c7-x8664-pv,xvda,rw' ] vfb = [ 'type=vnc,vncdisplay=1,vncpasswd=supersecret' ]
[root@CC0A2543 ~]# [ 587.145018] ------------[ cut here ]------------ [ 587.145018] kernel BUG at arch/x86/kernel/paravirt.c:244! [ 587.145018] invalid opcode: 0000 [#1] SMP [ 587.145018] Modules linked in: xen_netfront coretemp pcspkr ip_tables ext4 mbcache jbd2 xen_blkfront [ 587.145018] CPU: 0 PID: 2126 Comm: dracut Not tainted 3.10.0-123.4.4.el7.x86_64 #1 [ 587.145018] task: ffff880002da5b00 ti: ffff8800f6088000 task.ti: ffff8800f6088000 [ 587.145018] RIP: e030:[<ffffffff815da23b>] [<ffffffff815da23b>] enter_lazy.part.0+0x4/0x6 [ 587.145018] RSP: e02b:ffff8800ff403ab0 EFLAGS: 00010002 [ 587.145018] RAX: 0000000000000001 RBX: ffff8800f8ad4040 RCX: 00003ffffffff000 [ 587.145018] RDX: ffff880000000040 RSI: ffff880000000000 RDI: 00000005a52cc067 [ 587.145018] RBP: ffff8800ff403ab0 R08: ffff8800ff403b78 R09: ffffffff81362409 [ 587.145018] R10: ffff8800fa001e00 R11: ffff880000000000 R12: ffffc90000609000 [ 587.145018] R13: ffffc90000608000 R14: 0000000000000000 R15: ffffffff8100a6b0 [ 587.145018] FS: 00007f14b0680740(0000) GS:ffff8800ff400000(0000) knlGS:0000000000000000 [ 587.145018] CS: e033 DS: 0000 ES: 0000 CR0: 000000008005003b [ 587.145018] CR2: 00007f14b0473000 CR3: 00000000f6099000 CR4: 0000000000002660 [ 587.145018] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 587.145018] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 587.145018] Stack: [ 587.145018] ffff8800ff403ac0 ffffffff81046bc7 ffff8800ff403b60 ffffffff8116d8d6 [ 587.145018] ffffc90000608fff ffffc90000609000 ffffffff818cec90 ffffc90000608fff [ 587.145018] ffffc90000609000 ffff8800fa04d000 0000000000000004 ffffc90000608fff [ 587.145018] Call Trace: [ 587.145018] <IRQ> [ 587.145018] [<ffffffff81046bc7>] paravirt_enter_lazy_mmu+0x27/0x30 [ 587.145018] [<ffffffff8116d8d6>] apply_to_page_range+0x266/0x440 [ 587.145018] [<ffffffff8100a7fb>] arch_gnttab_map_status+0x3b/0x70 [ 587.145018] [<ffffffff81362486>] gnttab_map_frames_v2+0xd6/0x150 [ 587.145018] [<ffffffff813625a1>] gnttab_map+0xa1/0x140 [ 587.145018] [<ffffffff81362740>] get_free_entries+0x100/0x2e0 [ 587.145018] [<ffffffff813629e5>] gnttab_alloc_grant_references+0x15/0x30 [ 587.145018] [<ffffffffa0000cc3>] do_blkif_request+0x683/0x850 [xen_blkfront] [ 587.145018] [<ffffffff812906c3>] __blk_run_queue+0x33/0x40 [ 587.145018] [<ffffffff812906f9>] blk_start_queue+0x29/0x40 [ 587.145018] [<ffffffffa0000eb1>] kick_pending_request_queues+0x21/0x30 [xen_blkfront] [ 587.145018] [<ffffffffa0001487>] blkif_interrupt+0x5c7/0x670 [xen_blkfront] [ 587.145018] [<ffffffff810f735e>] handle_irq_event_percpu+0x3e/0x1e0 [ 587.145018] [<ffffffff810f753d>] handle_irq_event+0x3d/0x60 [ 587.145018] [<ffffffff810fa1c7>] handle_edge_irq+0x77/0x130 [ 587.145018] [<ffffffff81363527>] __xen_evtchn_do_upcall+0x227/0x350 [ 587.145018] [<ffffffff813656db>] xen_evtchn_do_upcall+0x2b/0x50 [ 587.145018] [<ffffffff815f3f7e>] xen_do_hypervisor_callback+0x1e/0x30 [ 587.145018] <EOI> [ 587.145018] [<ffffffff812b8419>] ? free_cpumask_var+0x9/0x10 [ 587.145018] [<ffffffff81169618>] ? unmap_page_range+0x5f8/0x860 [ 587.145018] [<ffffffff81169901>] ? unmap_single_vma+0x81/0xf0 [ 587.145018] [<ffffffff8116a9c9>] ? unmap_vmas+0x49/0x90 [ 587.145018] [<ffffffff8117367c>] ? exit_mmap+0xac/0x1a0 [ 587.145018] [<ffffffff8105b187>] ? mmput+0x67/0xf0 [ 587.145018] [<ffffffff811b6c32>] ? flush_old_exec+0x422/0x880 [ 587.145018] [<ffffffff812069cc>] ? load_elf_binary+0x33c/0xde0 [ 587.145018] [<ffffffff81272b13>] ? ima_get_action+0x23/0x30 [ 587.145018] [<ffffffff8127217e>] ? process_measurement+0x8e/0x250 [ 587.145018] [<ffffffff81272639>] ? ima_bprm_check+0x49/0x50 [ 587.145018] [<ffffffff81206690>] ? load_elf_library+0x230/0x230 [ 587.145018] [<ffffffff811b6355>] ? search_binary_handler+0xf5/0x310 [ 587.145018] [<ffffffff811b78e9>] ? do_execve_common.isra.22+0x559/0x650 [ 587.145018] [<ffffffff811b7c76>] ? SyS_execve+0x36/0x50 [ 587.145018] [<ffffffff815f2b89>] ? stub_execve+0x69/0xa0 [ 587.145018] Code: 8d 55 f0 48 8d 4d f4 e8 b4 8e a2 ff 66 90 48 8b 55 f8 65 48 33 14 25 28 00 00 00 8b 45 e8 74 05 e8 ab 3a a8 ff c9 c3 55 48 89 e5 <0f> 0b 66 66 66 66 90 55 48 89 e5 0f 0b 55 48 89 e5 0f 0b 66 66 [ 587.145018] RIP [<ffffffff815da23b>] enter_lazy.part.0+0x4/0x6 [ 587.145018] RSP <ffff8800ff403ab0> [ 587.145018] ---[ end trace 8566ed161f106c20 ]--- [ 587.145018] Kernel panic - not syncing: Fatal exception in interrupt
-- Shaun Reitan NDCHost.com
------ Original Message ------ From: "Johnny Hughes" <johnny@centos.org mailto:johnny@centos.org> To: centos-virt@centos.org mailto:centos-virt@centos.org Sent: 2018-01-06 05:34:22 AM Subject: Re: [CentOS-virt] Centos 7 Kernel 3.10.0-693.11.6.el7.x86_64 does not boot PV
On 01/06/2018 03:16 AM, Dmitry Melekhov wrote:
The same problem with latest centos 6 kernel,i.e. with meltdown fix.
I can't see console output, because I have it on "cloud" provider hosting :-)
06.01.2018 05:13, Shaun Reitan пишет:
Broken!
For those of you looking for a PV enabled client Kernel for CentOS Linux 7 DomU VMs, you can use our Experimental kernel from here:
http://mirror.centos.org/altarch/7/experimental/x86_64/
There is a repo file at the BOTTOM of this wiki page that you can use to enable the experimental repo:
https://wiki.centos.org/SpecialInterestGroup/AltArch/i386
That experimental repo file will work for x86_64 or i386 installs and the latest released kernel (kernel-4.9.75-204.el7.centos). This kernel has the CONFIG_PAGE_TABLE_ISOLATION=y security fixes (used to be CONFIG_KAISER .. and still is in the Red Hat released kernels).
You could also use the Dom0 kernels from the Xen repo as DomU kernels for your PV VMs if you want. Currently the 4.9.75 Xen kernels are in the testing repo and waiting for tests to release.
Thanks, Johnny Hughes
CentOS-virt mailing list CentOS-virt@centos.org https://lists.centos.org/mailman/listinfo/centos-virt
-
Dmitry Melekhov -
Johnny Hughes -
Shaun Reitan