Re: [CentOS-virt] Centos 6 2.6.32-696.18.7.el6.x86_64 does not boot in Xen PV mode

2018-01-05 Thread Sarah Newman
On 01/05/2018 05:26 PM, Shaun Reitan wrote:
> I can confirm the issue with 2.6.32-696.18.7.el6.x86_64, but mine looks 
> alittle different... Maybe because i'm using pvgrub.
> 
> = Init TPM Front 
> Tpmfront:Error Unable to read device/vtpm/0/backend-id during tpmfront 
> initialization! error = ENOENT
> Tpmfront:Info Shutting down tpmfront
> close blk: backend=/local/domain/0/backend/vbd/14/51712 node=device/vbd/51712
> close blk: backend=/local/domain/0/backend/vbd/14/51728 node=device/vbd/51728
> [root@devhost1]#
> 
> -- 
> Shaun Reitan
> NDCHost.com

You need to add earlyprintk=xen.

___
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Centos 6 2.6.32-696.18.7.el6.x86_64 does not boot in Xen PV mode

2018-01-05 Thread Shaun Reitan
I can confirm the issue with 2.6.32-696.18.7.el6.x86_64, but mine looks 
alittle different... Maybe because i'm using pvgrub.


= Init TPM Front 
Tpmfront:Error Unable to read device/vtpm/0/backend-id during tpmfront 
initialization! error = ENOENT

Tpmfront:Info Shutting down tpmfront
close blk: backend=/local/domain/0/backend/vbd/14/51712 
node=device/vbd/51712
close blk: backend=/local/domain/0/backend/vbd/14/51728 
node=device/vbd/51728

[root@devhost1]#

--
Shaun Reitan
NDCHost.com

-- Original Message --
From: "Sarah Newman" 
To: "Discussion about the virtualization on CentOS" 


Sent: 2018-01-05 12:39:21 AM
Subject: [CentOS-virt] Centos 6 2.6.32-696.18.7.el6.x86_64 does not boot 
in Xen PV mode


Problems start before any of the kaiser code executes, though it could 
still be related to CONFIG_KAISER since that has effects beyond 
kaiser.c.


---
(early) Initializing cgroup subsys cpuset
(early) Initializing cgroup subsys cpu
(early) Linux version 2.6.32-696.18.7.el6.x86_64 
(mockbu...@c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 
4.4.7-18) (GCC) ) #1 SMP Thu

Jan 4 17:31:22 UTC 2018
(early) Command line: ro console=hvc0 rootflags=barrier=0 
crashkernel=auto SYSFONT=latarcyrheb-sun16 LANG=en_US.UTF-8 KEYTABLE=us 
earlyprintk=xen

(early) KERNEL supported cpus:
(early)   Intel GenuineIntel
(early)   AMD AuthenticAMD
(early)   Centaur CentaurHauls
(early) 1 multicall(s) failed: cpu 0
(early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1
(early) Call Trace:
(early)  [] ? xen_mc_flush+0x1c3/0x250
(early)  [] ? xen_extend_mmu_update+0xde/0x1b0
(early)  [] ? xen_set_pmd_hyper+0x9d/0xc0
(early)  [] ? early_ioremap_init+0x98/0x133
(early)  [] ? setup_arch+0x40/0xca6
(early)  [] ? vprintk_default+0xe/0x10
(early)  [] ? printk+0x4f/0x52
(early)  [] ? start_kernel+0xdc/0x43b
(early)  [] ? reserve_early+0x30/0x39
(early)  [] ? x86_64_start_reservations+0x125/0x129
(early)  [] ? xen_start_kernel+0x4fe/0x505
(early) [ cut here ]
(early) WARNING: at arch/x86/xen/multicalls.c:182 
xen_mc_flush+0x21f/0x250() (Not tainted)

(early) Modules linked in:
(early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1
(early) Call Trace:
(early)  [] ? warn_slowpath_common+0x91/0xe0
(early)  [] ? 
__raw_callee_save_xen_restore_fl+0x11/0x1e

(early)  [] ? warn_slowpath_null+0x1a/0x20
(early)  [] ? xen_mc_flush+0x21f/0x250
(early)  [] ? xen_extend_mmu_update+0xde/0x1b0
(early)  [] ? xen_extend_mmu_update+0xde/0x1b0
(early)  [] ? xen_set_pmd_hyper+0x9d/0xc0
(early)  [] ? early_ioremap_init+0x98/0x133
(early)  [] ? setup_arch+0x40/0xca6
(early)  [] ? vprintk_default+0xe/0x10
(early)  [] ? printk+0x4f/0x52
(early)  [] ? start_kernel+0xdc/0x43b
(early)  [] ? reserve_early+0x30/0x39
(early)  [] ? x86_64_start_reservations+0x125/0x129
(early)  [] ? xen_start_kernel+0x4fe/0x505
(early) ---[ end trace a7919e7f17c0a725 ]---
(early) ACPI in unprivileged domain disabled
(early) released 0 pages of unused memory
(early) BIOS-provided physical RAM map:
(early)  Xen:  - 000a (usable)
(early)  Xen: 000a - 0010 (reserved)
(early)  Xen: 0010 - 2000 (usable)
(early) bootconsole [xenboot0] enabled
___
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt


___
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt


[CentOS-virt] Centos 7 Kernel 3.10.0-693.11.6.el7.x86_64 does not boot PV

2018-01-05 Thread Shaun Reitan

Broken!

[0.00] Initializing cgroup subsys cpuset
[0.00] Initializing cgroup subsys cpu
[0.00] Initializing cgroup subsys cpuacct
[0.00] Linux version 3.10.0-693.11.6.el7.x86_64 
(buil...@kbuilder.dev.centos.org) (gcc version 4.8.5 20150623 (Red Hat 
4.8.5-16) (GCC) ) #1 SMP Thu Jan 4 01:06:37 UTC 2018

[0.00] Command line: root=/dev/xvda ro crashkernel=auto rhgb
[0.00] ACPI in unprivileged domain disabled
[0.00] e820: BIOS-provided physical RAM map:
[0.00] Xen: [mem 0x-0x0009] usable
[0.00] Xen: [mem 0x000a-0x000f] reserved
[0.00] Xen: [mem 0x0010-0x0001007f] usable
[0.00] NX (Execute Disable) protection: active
[0.00] DMI not present or invalid.
[0.00] e820: last_pfn = 0x100800 max_arch_pfn = 0x4
[0.00] e820: last_pfn = 0x10 max_arch_pfn = 0x4
[0.00] RAMDISK: [mem 0x02423000-0x02e8dfff]
[0.00] NUMA turned off
[0.00] Faking a node at [mem 
0x-0x0001007f]

[0.00] NODE_DATA(0) allocated [mem 0xff7fb000-0xff821fff]
[0.00] Reserving 161MB of memory at 720MB for crashkernel 
(System RAM: 4103MB)

[0.00] Zone ranges:
[0.00]   DMA  [mem 0x1000-0x00ff]
[0.00]   DMA32[mem 0x0100-0x]
[0.00]   Normal   [mem 0x1-0x1007f]
[0.00] Movable zone start for each node
[0.00] Early memory node ranges
[0.00]   node   0: [mem 0x1000-0x0009]
[0.00]   node   0: [mem 0x0010-0x1007f]
[0.00] Initmem setup node 0 [mem 0x1000-0x1007f]
[0.00] SFI: Simple Firmware Interface v0.81 
http://simplefirmware.org

[0.00] No local APIC present
[0.00] APIC: disable apic facility
[0.00] APIC: switched to apic NOOP
[0.00] smpboot: Allowing 4 CPUs, 0 hotplug CPUs
[0.00] PM: Registered nosave memory: [mem 0x000a-0x000f]
[0.00] e820: cannot find a gap in the 32bit address range
[0.00] e820: PCI devices with unassigned 32bit BARs may break!
[0.00] e820: [mem 0x10090-0x100cf] available for PCI 
devices

[0.00] Booting paravirtualized kernel on Xen
[0.00] Xen version: 4.4.4-30.el6 (preserve-AD)
[0.00] setup_percpu: NR_CPUS:5120 nr_cpumask_bits:4 nr_cpu_ids:4 
nr_node_ids:1
[0.00] PERCPU: Embedded 35 pages/cpu @8800ff40 s104536 
r8192 d30632 u524288
[0.00] PV qspinlock hash table entries: 256 (order: 0, 4096 
bytes)
[0.00] Built 1 zonelists in Node order, mobility grouping on.  
Total pages: 1034090

[0.00] Policy zone: Normal
[0.00] Kernel command line: root=/dev/xvda ro crashkernel=auto 
rhgb

[0.00] PID hash table entries: 4096 (order: 3, 32768 bytes)
[0.00] Memory: 3916620k/4202496k available (6916k kernel code, 
388k absent, 285488k reserved, 4551k data, 1800k init)
[0.00] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, 
Nodes=1

[0.00] x86/pti: Xen PV detected, disabling PTI protection
[0.00] Hierarchical RCU implementation.
[0.00]  RCU restricting CPUs from NR_CPUS=5120 to nr_cpu_ids=4.
[0.00] NR_IRQS:327936 nr_irqs:48 0
[0.00] Console: colour dummy device 80x25
[0.00] console [tty0] enabled
[0.00] console [hvc0] enabled
[0.00] allocated 17301504 bytes of page_cgroup
[0.00] please try 'cgroup_disable=memory' option if you don't 
want memory cgroups

[0.00] installing Xen timer for CPU 0
[0.00] tsc: Fast TSC calibration using PIT
[0.00] tsc: Detected 2000.135 MHz processor
[0.002000] Calibrating delay loop (skipped), value calculated using 
timer frequency.. 4000.23 BogoMIPS (lpj=2000116)

[0.002000] pid_max: default: 32768 minimum: 301
[0.002000] Security Framework initialized
[0.002000] SELinux:  Initializing.
[0.002000] Yama: becoming mindful.
[0.002410] Dentry cache hash table entries: 524288 (order: 10, 
4194304 bytes)
[0.004872] Inode-cache hash table entries: 262144 (order: 9, 2097152 
bytes)
[0.006027] Mount-cache hash table entries: 8192 (order: 4, 65536 
bytes)
[0.006063] Mountpoint-cache hash table entries: 8192 (order: 4, 
65536 bytes)

[0.006562] Initializing cgroup subsys memory
[0.006594] Initializing cgroup subsys devices
[0.006604] Initializing cgroup subsys freezer
[0.006613] Initializing cgroup subsys net_cls
[0.006621] Initializing cgroup subsys blkio
[0.006630] Initializing cgroup subsys perf_event
[0.006639] Initializing cgroup subsys hugetlb
[0.006648] Initializing cgroup subsys pids
[0.006655] Initializing cgroup subsys net_prio
[0.006747] FEATURE SPEC_CTRL Not Present
[0.006755] FEATURE IBPB_SUPPORT Not Present
[0.006764] CPU: Physical Processor ID: 0
[0.006770] 

Re: [CentOS-virt] Centos 6 2.6.32-696.18.7.el6.x86_64 does not boot in Xen PV mode

2018-01-05 Thread Ricardo J. Barberis
Forgot to post my domU config (xm/xend format):

import os, re
arch = os.uname()[4]
if re.search('64', arch):
arch_libdir = 'lib64'
else:
arch_libdir = 'lib'

name = 'domU'
bootloader = '/usr/bin/pygrub'
extra = '(hd0,0)/grub/menu.lst'
maxmem = 4096
memory = 1024
vcpus=2

vif = [ 'mac=00:16:3E:AA:BB:CC, bridge=brXXX, vifname=domU.0', 
'mac=AA:00:00:AA:BB:CC, bridge=brYYY, vifname=domU.1' ]
disk = [ 'tap2:aio:/dev/VolGroup/Volume,xvda,w', 
'tap2:aio:/dev/VolGroup/Volume-b,xvdb,w' ]

on_poweroff = 'destroy'
on_reboot   = 'destroy'
on_crash= 'preserve'

device_model = '/usr/' + arch_libdir + '/xen/bin/qemu-dm'
boot='cd'
vfb = [ 'type=vnc, vnclisten=0.0.0.0, vncpasswd=RR, vncdisplay=NN' ]
nographic=0
stdvga=0
serial='pty'
monitor=0
localtime=0
usb=1
usbdevice='tablet'


El Viernes 05/01/2018 a las 18:05, Ricardo J. Barberis escribió:
> A CentOS 6.9 domU with kernel 2.6.32-696.18.7.el6.x86_64 also fails to boot
> on a CentOS 6.9 dom0 with kernel 4.9.63-29.el6.x86_64 and xen
> 4.4.4-34.el6.x86_64
>
> Xen logs lines like these (among others):
>
> /var/log/xen/xend.log:[2018-01-05 17:55:45 2357] WARNING (XendDomainInfo:583) 
> Could not unpause blktap disk: ('unpause', '-p11520', '-m4') failed (5632  )
>
> /var/log/messages:Jan  5 17:55:45 xvm16n00 tapdisk[11520]: 
> tap-err:tapdisk_vbd_resume: resume request for unpaused vbd 
> aio:/dev/VolGroup/Volume
>
>
> Xenctx for vCPU 0 says:
>
> [root@dom0 ~] # /usr/lib64/xen/bin/xenctx -s
> System.map-2.6.32-696.18.7.el6.x86_64 13 0 rip: 812b7872
> __memcpy_fromio+0x12
> flags: 1202 i nz
> rsp: 81a03e00
> rax:    rcx: 0004   rdx: 0010
> rbx: ff40   rsi: ff40   rdi: 81a03e68
> rbp: 81a03e48r8: r9: 7ff0
> r10:    r11:    r12: 81a03e58
> r13: ff40   r14: ff41   r15: 81a03e68
>  cs: e033ss: e02bds: es: 
>  fs:  @ 
>  gs:  @ 81c25000/
> Code (instr addr 812b7872)
> 00 00 00 55 48 89 e5 e8 57 e8 29 00 89 d2 48 89 d1 48 c1 e9 02  a5 f6
> c2 02 74 02 66 a5 f6 c2
>
> Stack:
>  0004   812b7872
>  0001e030 00010002 81a03e48 e02b
>  812b7869 81a03eb8 81c80153 
>   81a03e98 81c872a0 
>
> Call Trace:
>   [] __memcpy_fromio+0x12  <--
>   [] __memcpy_fromio+0x12
>   [] __memcpy_fromio+0x9
>   [] dmi_scan_machine+0x139
>   [] setup_arch+0x424
>   [] vprintk_default+0xe
>   [] printk+0x4f
>   [] start_kernel+0xdc
>   [] x86_64_start_reservations+0x125
>   [] xen_start_kernel+0x4fe
>
>
> And my domU has similar boot messages as Sarah Newman's:
>
> (early) Initializing cgroup subsys cpuset
> (early) Initializing cgroup subsys cpu
> (early) Linux version 2.6.32-696.18.7.el6.x86_64 
> (mockbu...@c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 
> 4.4.7-18) (GCC) ) #1 SMP Thu Jan 4 17:31:22 UTC 2018
> (early) Command line: ro root=/dev/xvda3 rd_NO_LUKS rd_NO_LVM rd_NO_MD 
> SYSFONT=latarcyrheb-sun16 crashkernel=auto LANG=en_US.UTF-8 KEYBOARDTYPE=pc 
> KEYTABLE=us rd_NO_DM 
earlyprintk=xen (hd0,0)/grub/menu.lst 
> (early) KERNEL supported cpus:
> (early)   Intel GenuineIntel
> (early)   AMD AuthenticAMD
> (early)   Centaur CentaurHauls
> (early) 1 multicall(s) failed: cpu 0
> (early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1
> (early) Call Trace:
> (early)  [] ? xen_mc_flush+0x1c3/0x250
> (early)  [] ? xen_extend_mmu_update+0xde/0x1b0
> (early)  [] ? xen_set_pmd_hyper+0x9d/0xc0
> (early)  [] ? early_ioremap_init+0x98/0x133
> (early)  [] ? setup_arch+0x40/0xca6
> (early)  [] ? vprintk_default+0xe/0x10
> (early)  [] ? printk+0x4f/0x52
> (early)  [] ? start_kernel+0xdc/0x43b
> (early)  [] ? reserve_early+0x30/0x39
> (early)  [] ? x86_64_start_reservations+0x125/0x129
> (early)  [] ? xen_start_kernel+0x4fe/0x505
> (early) [ cut here ]
> (early) WARNING: at arch/x86/xen/multicalls.c:182 xen_mc_flush+0x21f/0x250() 
> (Not tainted)
> (early) Modules linked in: 
> (early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1
> (early) Call Trace:
> (early)  [] ? warn_slowpath_common+0x91/0xe0
> (early)  [] ? __raw_callee_save_xen_restore_fl+0x11/0x1e
> (early)  [] ? warn_slowpath_null+0x1a/0x20
> (early)  [] ? xen_mc_flush+0x21f/0x250
> (early)  [] ? xen_extend_mmu_update+0xde/0x1b0
> (early)  [] ? xen_extend_mmu_update+0xde/0x1b0
> (early)  [] ? xen_set_pmd_hyper+0x9d/0xc0
> (early)  [] ? early_ioremap_init+0x98/0x133
> (early)  [] ? setup_arch+0x40/0xca6
> (early)  [] ? vprintk_default+0xe/0x10
> (early)  [] ? printk+0x4f/0x52
> (early)  [] ? start_kernel+0xdc/0x43b
> (early)  [] ? reserve_early+0x30/0x39
> (early)  [] ? x86_64_start_reservations+0x125/0x129

Re: [CentOS-virt] Centos 6 2.6.32-696.18.7.el6.x86_64 does not boot in Xen PV mode

2018-01-05 Thread Ricardo J. Barberis
A CentOS 6.9 domU with kernel 2.6.32-696.18.7.el6.x86_64 also fails to boot on
a CentOS 6.9 dom0 with kernel 4.9.63-29.el6.x86_64 and xen 4.4.4-34.el6.x86_64

Xen logs lines like these (among others):

/var/log/xen/xend.log:[2018-01-05 17:55:45 2357] WARNING (XendDomainInfo:583) 
Could not unpause blktap disk: ('unpause', '-p11520', '-m4') failed (5632  )

/var/log/messages:Jan  5 17:55:45 xvm16n00 tapdisk[11520]: 
tap-err:tapdisk_vbd_resume: resume request for unpaused vbd 
aio:/dev/VolGroup/Volume


Xenctx for vCPU 0 says:

[root@dom0 ~] # /usr/lib64/xen/bin/xenctx -s 
System.map-2.6.32-696.18.7.el6.x86_64 13 0
rip: 812b7872 __memcpy_fromio+0x12 
flags: 1202 i nz
rsp: 81a03e00
rax:    rcx: 0004   rdx: 0010
rbx: ff40   rsi: ff40   rdi: 81a03e68
rbp: 81a03e48r8: r9: 7ff0
r10:    r11:    r12: 81a03e58
r13: ff40   r14: ff41   r15: 81a03e68
 cs: e033ss: e02bds: es: 
 fs:  @ 
 gs:  @ 81c25000/
Code (instr addr 812b7872)
00 00 00 55 48 89 e5 e8 57 e8 29 00 89 d2 48 89 d1 48 c1 e9 02  a5 f6 c2 02 
74 02 66 a5 f6 c2 

Stack:
 0004   812b7872
 0001e030 00010002 81a03e48 e02b
 812b7869 81a03eb8 81c80153 
  81a03e98 81c872a0 

Call Trace:
  [] __memcpy_fromio+0x12  <--
  [] __memcpy_fromio+0x12 
  [] __memcpy_fromio+0x9 
  [] dmi_scan_machine+0x139 
  [] setup_arch+0x424 
  [] vprintk_default+0xe 
  [] printk+0x4f 
  [] start_kernel+0xdc 
  [] x86_64_start_reservations+0x125 
  [] xen_start_kernel+0x4fe 


And my domU has similar boot messages as Sarah Newman's:

(early) Initializing cgroup subsys cpuset
(early) Initializing cgroup subsys cpu
(early) Linux version 2.6.32-696.18.7.el6.x86_64 
(mockbu...@c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-18) 
(GCC) ) #1 SMP Thu Jan 4 17:31:22 UTC 2018
(early) Command line: ro root=/dev/xvda3 rd_NO_LUKS rd_NO_LVM rd_NO_MD 
SYSFONT=latarcyrheb-sun16 crashkernel=auto LANG=en_US.UTF-8 KEYBOARDTYPE=pc 
KEYTABLE=us rd_NO_DM 
earlyprintk=xen (hd0,0)/grub/menu.lst
(early) KERNEL supported cpus:
(early)   Intel GenuineIntel
(early)   AMD AuthenticAMD
(early)   Centaur CentaurHauls
(early) 1 multicall(s) failed: cpu 0
(early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1
(early) Call Trace:
(early)  [] ? xen_mc_flush+0x1c3/0x250
(early)  [] ? xen_extend_mmu_update+0xde/0x1b0
(early)  [] ? xen_set_pmd_hyper+0x9d/0xc0
(early)  [] ? early_ioremap_init+0x98/0x133
(early)  [] ? setup_arch+0x40/0xca6
(early)  [] ? vprintk_default+0xe/0x10
(early)  [] ? printk+0x4f/0x52
(early)  [] ? start_kernel+0xdc/0x43b
(early)  [] ? reserve_early+0x30/0x39
(early)  [] ? x86_64_start_reservations+0x125/0x129
(early)  [] ? xen_start_kernel+0x4fe/0x505
(early) [ cut here ]
(early) WARNING: at arch/x86/xen/multicalls.c:182 xen_mc_flush+0x21f/0x250() 
(Not tainted)
(early) Modules linked in:
(early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1
(early) Call Trace:
(early)  [] ? warn_slowpath_common+0x91/0xe0
(early)  [] ? __raw_callee_save_xen_restore_fl+0x11/0x1e
(early)  [] ? warn_slowpath_null+0x1a/0x20
(early)  [] ? xen_mc_flush+0x21f/0x250
(early)  [] ? xen_extend_mmu_update+0xde/0x1b0
(early)  [] ? xen_extend_mmu_update+0xde/0x1b0
(early)  [] ? xen_set_pmd_hyper+0x9d/0xc0
(early)  [] ? early_ioremap_init+0x98/0x133
(early)  [] ? setup_arch+0x40/0xca6
(early)  [] ? vprintk_default+0xe/0x10
(early)  [] ? printk+0x4f/0x52
(early)  [] ? start_kernel+0xdc/0x43b
(early)  [] ? reserve_early+0x30/0x39
(early)  [] ? x86_64_start_reservations+0x125/0x129
(early)  [] ? xen_start_kernel+0x4fe/0x505
(early) ---[ end trace a7919e7f17c0a725 ]---
(early) ACPI in unprivileged domain disabled
(early) released 0 pages of unused memory
(early) BIOS-provided physical RAM map:
(early)  Xen:  - 000a (usable)
(early)  Xen: 000a - 0010 (reserved)
(early)  Xen: 0010 - 0001 (usable)
(early) bootconsole [xenboot0] enabled


El Viernes 05/01/2018 a las 05:39, Sarah Newman escribió:
> Problems start before any of the kaiser code executes, though it could
> still be related to CONFIG_KAISER since that has effects beyond kaiser.c.
>
> ---
> (early) Initializing cgroup subsys cpuset
> (early) Initializing cgroup subsys cpu
> (early) Linux version 2.6.32-696.18.7.el6.x86_64 
> (mockbu...@c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 
> 4.4.7-18) (GCC) ) #1 SMP Thu Jan 4 17:31:22 UTC 2018
> (early) Command line: ro console=hvc0 rootflags=barrier=0 crashkernel=auto 
> SYSFONT=latarcyrheb-sun16 LANG=en_US.UTF

Re: [CentOS-virt] CentOS-virt - Kernel Side-Channel Attacks

2018-01-05 Thread George Dunlap
On Thu, Jan 4, 2018 at 7:12 PM, Sarah Newman  wrote:
> On 01/04/2018 10:49 AM, Akemi Yagi wrote:
>> On Thu, Jan 4, 2018 at 9:51 AM,  wrote:
>>
>>> Please patch the CentOS-virt Kernel to fix the
>>> Kernel Side-Channel Attacks vulnerabilities.
>>>
>>> The latest CentOS-virt kernel was released in November, as seen below.
>>>
>>> kernel-4.9.63-29.el7.x86_64.rpm 2017-11-21 13:30
>>>
>>> https://access.redhat.com/security/vulnerabilities/speculativeexecution
>>> http://mirror.centos.org/centos/7/virt/x86_64/xen/
>>>
>>
>> As far as I can see, the patches for
>> KAISER (Kernel Address
>> Isolation to have Side-channels Efficiently Removed) will appear in
>> kernel 4.9.75. Looks like it will be released soon upstream (kernel.org).
>>
>
> To my best knowledge KAISER doesn't matter for Xen Dom0's given they run in 
> PV mode, and KAISER isn't enabled for PV guests.

But it will be important if anyone is running the CentOS kernel in
their HVM domUs (as guest kernels can be attacked using SP3 by guest
user space without the KPTI patches).

I'm sure Johnny will get to it as soon as he has the opportunity.

 -George
___
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt


[CentOS-virt] Centos 6 2.6.32-696.18.7.el6.x86_64 does not boot in Xen PV mode

2018-01-05 Thread Sarah Newman
Problems start before any of the kaiser code executes, though it could still be 
related to CONFIG_KAISER since that has effects beyond kaiser.c.

---
(early) Initializing cgroup subsys cpuset
(early) Initializing cgroup subsys cpu
(early) Linux version 2.6.32-696.18.7.el6.x86_64 
(mockbu...@c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-18) 
(GCC) ) #1 SMP Thu
Jan 4 17:31:22 UTC 2018
(early) Command line: ro console=hvc0 rootflags=barrier=0 crashkernel=auto 
SYSFONT=latarcyrheb-sun16 LANG=en_US.UTF-8 KEYTABLE=us earlyprintk=xen
(early) KERNEL supported cpus:
(early)   Intel GenuineIntel
(early)   AMD AuthenticAMD
(early)   Centaur CentaurHauls
(early) 1 multicall(s) failed: cpu 0
(early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1
(early) Call Trace:
(early)  [] ? xen_mc_flush+0x1c3/0x250
(early)  [] ? xen_extend_mmu_update+0xde/0x1b0
(early)  [] ? xen_set_pmd_hyper+0x9d/0xc0
(early)  [] ? early_ioremap_init+0x98/0x133
(early)  [] ? setup_arch+0x40/0xca6
(early)  [] ? vprintk_default+0xe/0x10
(early)  [] ? printk+0x4f/0x52
(early)  [] ? start_kernel+0xdc/0x43b
(early)  [] ? reserve_early+0x30/0x39
(early)  [] ? x86_64_start_reservations+0x125/0x129
(early)  [] ? xen_start_kernel+0x4fe/0x505
(early) [ cut here ]
(early) WARNING: at arch/x86/xen/multicalls.c:182 xen_mc_flush+0x21f/0x250() 
(Not tainted)
(early) Modules linked in:
(early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1
(early) Call Trace:
(early)  [] ? warn_slowpath_common+0x91/0xe0
(early)  [] ? __raw_callee_save_xen_restore_fl+0x11/0x1e
(early)  [] ? warn_slowpath_null+0x1a/0x20
(early)  [] ? xen_mc_flush+0x21f/0x250
(early)  [] ? xen_extend_mmu_update+0xde/0x1b0
(early)  [] ? xen_extend_mmu_update+0xde/0x1b0
(early)  [] ? xen_set_pmd_hyper+0x9d/0xc0
(early)  [] ? early_ioremap_init+0x98/0x133
(early)  [] ? setup_arch+0x40/0xca6
(early)  [] ? vprintk_default+0xe/0x10
(early)  [] ? printk+0x4f/0x52
(early)  [] ? start_kernel+0xdc/0x43b
(early)  [] ? reserve_early+0x30/0x39
(early)  [] ? x86_64_start_reservations+0x125/0x129
(early)  [] ? xen_start_kernel+0x4fe/0x505
(early) ---[ end trace a7919e7f17c0a725 ]---
(early) ACPI in unprivileged domain disabled
(early) released 0 pages of unused memory
(early) BIOS-provided physical RAM map:
(early)  Xen:  - 000a (usable)
(early)  Xen: 000a - 0010 (reserved)
(early)  Xen: 0010 - 2000 (usable)
(early) bootconsole [xenboot0] enabled
___
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt