Re: IPL of SLES11 .ins file in Hercules yields immediate disabled wait state
On Wed, 15 Apr 2009 09:55:08 -0400
David Boyes dbo...@sinenomine.net wrote:
Rather than testing for specific model numbers, why don't you test for
specific capabilities that you need/want? That way you get a exception that
you can handle and actually issue a useful message or load a specific PSW
(similar to the way things work on other OSes), rather than just dying in a
cryptic way.
How about this:
Subject: [PATCH] use facility list for cpu type safety check
From: Martin Schwidefsky schwidef...@de.ibm.com
Signed-off-by: Martin Schwidefsky schwidef...@de.ibm.com
---
arch/s390/include/asm/lowcore.h |1
arch/s390/kernel/head.S | 49 +++-
2 files changed, 35 insertions(+), 15 deletions(-)
diff -urpN linux-2.6/arch/s390/include/asm/lowcore.h
linux-2.6-patched/arch/s390/include/asm/lowcore.h
--- linux-2.6/arch/s390/include/asm/lowcore.h 2009-04-17 09:37:40.0
+0200
+++ linux-2.6-patched/arch/s390/include/asm/lowcore.h 2009-04-17
12:14:06.0 +0200
@@ -30,6 +30,7 @@
#define __LC_SUBCHANNEL_NR 0x00ba
#define __LC_IO_INT_PARM 0x00bc
#define __LC_IO_INT_WORD 0x00c0
+#define __LC_STFL_FAC_LIST 0x00c8
#define __LC_MCCK_CODE 0x00e8
#define __LC_DUMP_REIPL0x0e00
diff -urpN linux-2.6/arch/s390/kernel/head.S
linux-2.6-patched/arch/s390/kernel/head.S
--- linux-2.6/arch/s390/kernel/head.S 2009-04-17 09:37:40.0 +0200
+++ linux-2.6-patched/arch/s390/kernel/head.S 2009-04-17 12:14:06.0
+0200
@@ -478,27 +478,46 @@ startup:basr %r13,0 # get base
mvc __LC_LAST_UPDATE_TIMER(8),6f-.LPG0(%r13)
mvc __LC_EXIT_TIMER(8),5f-.LPG0(%r13)
#ifndef CONFIG_MARCH_G5
- # check processor version against MARCH_{G5,Z900,Z990,Z9_109,Z10}
- stidp __LC_CPUID # store cpuid
- lhi %r0,(3f-2f) / 2
- la %r1,2f-.LPG0(%r13)
-0: clc __LC_CPUID+4(2),0(%r1)
- jne 3f
- lpsw1f-.LPG0(13)# machine type not good enough, crash
+ # check capabilities against MARCH_{G5,Z900,Z990,Z9_109,Z10}
+ xc __LC_STFL_FAC_LIST(8),__LC_STFL_FAC_LIST
+ stfl__LC_STFL_FAC_LIST # store facility list
+ tm __LC_STFL_FAC_LIST,0x01 # stfle available ?
+ jz 0f
+ la %r0,0
+ stfle __LC_STFL_FAC_LIST # store facility list extended
+0: l %r0,__LC_STFL_FAC_LIST
+ n %r0,2f+8-.LPG0(%r13)
+ cl %r0,2f+8-.LPG0(%r13)
+ jne 1f
+ l %r0,__LC_STFL_FAC_LIST
+ n %r0,2f+12-.LPG0(%r13)
+ cl %r0,2f+12-.LPG0(%r13)
+ je 3f
+1: lpsw2f-.LPG0(13)# machine type not good enough, crash
.align 16
-1: .long 0x000a,0x
-2:
+2: .long 0x000a,0x8bad
+#if defined(CONFIG_64BIT)
#if defined(CONFIG_MARCH_Z10)
- .short 0x9672, 0x2064, 0x2066, 0x2084, 0x2086, 0x2094, 0x2096
+ .long 0xc100efe3, 0xf068
#elif defined(CONFIG_MARCH_Z9_109)
- .short 0x9672, 0x2064, 0x2066, 0x2084, 0x2086
+ .long 0xc100efc3, 0x
#elif defined(CONFIG_MARCH_Z990)
- .short 0x9672, 0x2064, 0x2066
+ .long 0xc0002000, 0x
#elif defined(CONFIG_MARCH_Z900)
- .short 0x9672
+ .long 0xc000, 0x
#endif
-3: la %r1,2(%r1)
- brct%r0,0b
+#else
+#if defined(CONFIG_MARCH_Z10)
+ .long 0x8100c880, 0x
+#elif defined(CONFIG_MARCH_Z9_109)
+ .long 0x8100c880, 0x
+#elif defined(CONFIG_MARCH_Z990)
+ .long 0x80002000, 0x
+#elif defined(CONFIG_MARCH_Z900)
+ .long 0x8000, 0x
+#endif
+#endif
+3:
#endif
l %r13,4f-.LPG0(%r13)
--
blue skies,
Martin.
Reality continues to ruin my life. - Calvin.
--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Does Novell have an ombudsman for their bugzilla?
J. L. Turriff wrote: On Thursday 16 April 2009 01:31:31 John Summerfield wrote: Mark Post wrote: For the benefit of those listening in let's first state that what is being discussed here is openSUSE, not SLES with a support contract. So, the rules are different to start with. Similarly, Fedora is run by a lot of volunteers (plus Red Hat employees). I imagine it would help if you can reproduce the problem in the supported product. I understand SLES can readily be downloaded for evaluation (and nothing prevents your evaluating it forever, though the support does time out), and I've seen SLED (the desktop version) on magazine DVDs. RH/Fedora have a problem that a package, such as dhcpd, in Fedora is not considered the same as even the same release of dhcpd in RHEL. I think their system (the same bugzilla database is used for RHEL and Fedora) needs to be able to detect and flag all relevant in some way, so that the official support person at RH for dhcpd in RHEL finds out when there is a problem in the Fedora version. Whether SUSE/openSUSE have an analogous problem, I don't know. John, This is an issue with YaST2 and Sax2 themselves, not third-party packages. I didn't think I said differently. -- Cheers John -- spambait 1...@coco.merseine.nu z1...@coco.merseine.nu -- Advice http://webfoot.com/advice/email.top.php http://www.catb.org/~esr/faqs/smart-questions.html http://support.microsoft.com/kb/555375 You cannot reply off-list:-) -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: vswitch for everyone
Harder, Pieter wrote: That would be my desire as well, but IBM says it is what it is for security reasons. I agree with them. Paranoia maybe, but better safe than sorry. More likely EALS certification related. Harold Grovesteen -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: IPL of SLES11 .ins file in Hercules yields immediate disabled wait state
Looks OK to me, other than it doesn¹t have docs to describe the error codes. Fix that and I¹ll gladly sign off on it. 8-) On 4/17/09 6:22 AM, Martin Schwidefsky schwidef...@de.ibm.com wrote: Subject: [PATCH] use facility list for cpu type safety check From: Martin Schwidefsky schwidef...@de.ibm.com Signed-off-by: Martin Schwidefsky schwidef...@de.ibm.com [snip] -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: vswitch for everyone
On Friday, 04/17/2009 at 08:54 EDT, Harold Grovesteen h.grovst...@tx.rr.com wrote: Harder, Pieter wrote: That would be my desire as well, but IBM says it is what it is for security reasons. I agree with them. Paranoia maybe, but better safe than sorry. More likely EALS certification related. No, it has nothing to do with certification. In the evaluated configuration, RACF is present and is protecting all Guest LANs and VSWITCHes. When an ESM is active, even unrestricted Guest LANs are under ESM control. If you want everyone to freely access a virtual network, you must explicitly say so. [Note: The z/VM EAL 4+ common critieria certification only applies to the evaluated configuration. No claims are made for other configurations.] My background in both security and networking has shaped my support for explicit authorization. In my world view: - [SET] VMLAN TRANSIENT 0 would be the default, preventing class G users from using DEFINE LAN. If you want class G users to define LANs, then I recommend explicitly saying so in SYSTEM CONFIG (VMLAN statement) - just in case the default for transient Guest LANs changes from unlimited to zero. - A DEFINE LAN would actually result in a disconnected VSWITCH under the covers so that VLAN rules are enforced. If you do not use an ESM, then I recommend VMLAN TRANSIENT 0. If you do have an ESM, then I recommend a rule (e.g. RACF generic profile **) that defines the default access as denied. Alan Altmark z/VM Development IBM Endicott -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: IPL of SLES11 .ins file in Hercules yields immediate disabled wait state
Martin Schwidefsky wrote: #if defined(CONFIG_MARCH_Z10) - .short 0x9672, 0x2064, 0x2066, 0x2084, 0x2086, 0x2094, 0x2096 + .long 0xc100efe3, 0xf068 Does the linux kernel (with CONFIG_MARCH_Z10) really need all the z10 facilities ? (especially some of those are simply hints - like bit 19) --Ivan -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 smime.p7s Description: S/MIME Cryptographic Signature
z/VM and z/Linux Performance Monitoring
We are setting up an SLES 10 SP2 Linux environment running under z/VM 5.4. We have not determined what performance monitoring tool to use yet. What tools are other shops using for performance monitoring? Thanks. Gene Nelson Federated Insurance Company 121 E. Park Square Owatonna, MN 55060 (507) 455-5200 ext. 5706 This e-mail and its attachments are intended only for the use of the addressee(s) and may contain privileged, confidential or proprietary information. If you are not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, displaying, copying, or use of this information is strictly prohibited. If you have received this communication in error, please inform the sender immediately and delete and destroy any record of this message. Thank you. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: IPL of SLES11 .ins file in Hercules yields immediate disabled wait state
On Fri, 17 Apr 2009 15:41:49 +0200 Ivan Warren i...@vmfacility.fr wrote: Martin Schwidefsky wrote: #if defined(CONFIG_MARCH_Z10) - .short 0x9672, 0x2064, 0x2066, 0x2084, 0x2086, 0x2094, 0x2096 + .long 0xc100efe3, 0xf068 Does the linux kernel (with CONFIG_MARCH_Z10) really need all the z10 facilities ? (especially some of those are simply hints - like bit 19) Bit 19 is 0x1000 in the first stfl word and is not set, no? The logic I've used for the capability bits: 1) the bits the kernel really needs, e.g. the z/Architecture bit for a 64 bit kernel 2) the bits for facilities that can be used in user space and therefore in theory could be generated by the compiler, e.g. by __builtin_xyz I did not include: 1) bits for facilities that can only be used by the kernel and are currently unused, e.g. the ASN-and-LX reused facility. 2) hint bits, e.g. about the performance of long-displacement or DFP -- blue skies, Martin. Reality continues to ruin my life. - Calvin. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: z/VM and z/Linux Performance Monitoring
ESALPS from Velocity Software comes highly recommended. It is in use by a large number of z/VM and Linux for System z installations. Rich Smrcina 414-491-6001 Nelson wrote: We are setting up an SLES 10 SP2 Linux environment running under z/VM 5.4. We have not determined what performance monitoring tool to use yet. What tools are other shops using for performance monitoring? Thanks. Gene Nelson Federated Insurance Company 121 E. Park Square Owatonna, MN 55060 (507) 455-5200 ext. 5706 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: IPL of SLES11 .ins file in Hercules yields immediate disabled wait state
John Summerfield wrote: Andrew Avramenko wrote: Daniel, SLES 11 doesn't support old hardware, just only z9 and z10. I'm not familiar with Hercules, but may be that is the problem. I have experience with installation SLES 11 on z9 under VM 5.3 and everything was fine. I the Hercules folk pride themselves on supporting the latest incantations of S/360, right up to current. Actually, Hercules does not support System/360 architecture. It does support System/370 Basic Control mode which is very close to System/360, but not identical. And yes, the very latest capabilities of System/370 is supported as defined by the IBM System/370 Principles of Operation, manual GA22-7000-10 published in September 1987 and still available from IBM publications. I ordered my copy last year. And, yes, the intervening architectual enhancements are also supported to the z/Architecture PoO published last fall. And we are looking at the implications of the one published in February of this year. Of course, Hercules has actual users of all of these architectures, so it does make sense that all of them are supported. So, I guess this post proves your point, John, we are proud of that. The Linux kernel developers are not in anyway attempting to restrict where Linux can run. It is making the boot code sensitive to the compiler and options used to create the kernel. Those settings influence instructions selected for the generated code. Rather than an obscure abend occurring someplace because of a hardware capabilities/compiler option conflict, the boot logic is trying to detect that up front. This is standard defensive programming. While historically there has been slightly less adherence to backward compatibility for control programs than application programs on IBM mainframes. For example, backward compatibility was lost for control programs when the subchannel subsystem was introduced in the 370-XA architecture. The domain of gcc is application programs, meaning, non-privileged instructions in mainframe architectural terms. And, on an IBM mainframe, application program backward compatibility has been absolute. The Linux kernel's use of privileged instructions in in-line assembly raises the question of backward compatibility for the a control program. A separate question from the gcc compiler and options settings addressed by this boot logic. The gcc compiler and option detection is also separate from the decisions of a distributor such as Novell or RedHat or Debian. For the user, there are both positive and negative implications of those decisions. The beauty of open source, is, if you don't like those decisions or absolutely can't live with them, you have options. And, while these changes don't actually enable such decisions by a distributor, a distributor could change compiler and option settings at will, they do attempt to aid a Linux user early detection. And of course, this becomes a potential differentiator of distributors. Just as the Hercules developers are sensitive to the users of Hercules, kernel developers also have to be sensitive to their users. For a kernel developer, this is not just the users of Linux but also the distributors of Linux. Harold Grovesteen -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: z/VM and z/Linux Performance Monitoring
We use Performance Toolkit for z/VM (which is shipped with the z/VM Product) and OmegamonXE for z/VM. Tivoli Enterprise Portal and Tivoli Enterprise Manger have hooks to OmegamonXE for z/VM Thanks, Detro From: Richard Smrcina rsmrc...@wi.rr.com To: LINUX-390@VM.MARIST.EDU Date: 04/17/09 09:19 AM Subject: Re: z/VM and z/Linux Performance Monitoring ESALPS from Velocity Software comes highly recommended. It is in use by a large number of z/VM and Linux for System z installations. Rich Smrcina 414-491-6001 Nelson wrote: We are setting up an SLES 10 SP2 Linux environment running under z/VM 5.4. We have not determined what performance monitoring tool to use yet. What tools are other shops using for performance monitoring? Thanks. Gene Nelson Federated Insurance Company 121 E. Park Square Owatonna, MN 55060 (507) 455-5200 ext. 5706 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 image/gif
Re: vswitch for everyone
Alan Altmark wrote: On Friday, 04/17/2009 at 08:54 EDT, Harold Grovesteen h.grovst...@tx.rr.com wrote: Harder, Pieter wrote: That would be my desire as well, but IBM says it is what it is for security reasons. I agree with them. Paranoia maybe, but better safe than sorry. More likely EALS certification related. No, it has nothing to do with certification. In the evaluated configuration, RACF is present and is protecting all Guest LANs and VSWITCHes. When an ESM is active, even unrestricted Guest LANs are under ESM control. If you want everyone to freely access a virtual network, you must explicitly say so. [Note: The z/VM EAL 4+ common critieria certification only applies to the evaluated configuration. No claims are made for other configurations.] Does that configuration assume an ESM? I'm new to security being thrown into it by PCI at my organization. My background in both security and networking has shaped my support for explicit authorization. In my world view: - [SET] VMLAN TRANSIENT 0 would be the default, preventing class G users from using DEFINE LAN. If you want class G users to define LANs, then I recommend explicitly saying so in SYSTEM CONFIG (VMLAN statement) - just in case the default for transient Guest LANs changes from unlimited to zero. - A DEFINE LAN would actually result in a disconnected VSWITCH under the covers so that VLAN rules are enforced. If you do not use an ESM, then I recommend VMLAN TRANSIENT 0. If you do have an ESM, then I recommend a rule (e.g. RACF generic profile **) that defines the default access as denied. Alan Altmark z/VM Development IBM Endicott -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: z/VM and z/Linux Performance Monitoring
same here From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Gary Detro Sent: Friday, April 17, 2009 10:44 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: z/VM and z/Linux Performance Monitoring We use Performance Toolkit for z/VM (which is shipped with the z/VM Product) and OmegamonXE for z/VM. Tivoli Enterprise Portal and Tivoli Enterprise Manger have hooks to OmegamonXE for z/VM Thanks, Detro [cid:image001.gif@01C9BF4B.BDBDBA30] From: Richard Smrcina rsmrc...@wi.rr.com To: LINUX-390@VM.MARIST.EDU Date: 04/17/09 09:19 AM Subject: Re: z/VM and z/Linux Performance Monitoring ESALPS from Velocity Software comes highly recommended. It is in use by a large number of z/VM and Linux for System z installations. Rich Smrcina 414-491-6001 Nelson wrote: We are setting up an SLES 10 SP2 Linux environment running under z/VM 5.4. We have not determined what performance monitoring tool to use yet. What tools are other shops using for performance monitoring? Thanks. Gene Nelson Federated Insurance Company 121 E. Park Square Owatonna, MN 55060 (507) 455-5200 ext. 5706 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 inline: image001.gif
Re: z/VM and z/Linux Performance Monitoring
Nelson wrote: We are setting up an SLES 10 SP2 Linux environment running under z/VM 5.4. We have not determined what performance monitoring tool to use yet. What tools are other shops using for performance monitoring? Thanks. I have both ESALPS and VM PTK. I prefer ESALPS for Linux related stuff. It's integration between Linux and z/VM data is better than most. I keep PTK for CP related stuff. Velocity is a small shop and simply can't keep up with the latest and greatest at the prices IBM is charging for PTK (in effect subsidizing PTK). And of course with Velocity you get access to some real good performance specialists thrown in for the same price. Best regards, Pieter Harder pieter.har...@brabantwater.nl tel +31-73-6837133 / +31-6-47272537 Brabant Water N.V. Postbus 1068 5200 BC 's-Hertogenbosch http://www.brabantwater.nl Handelsregister: 16005077 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: z/VM and z/Linux Performance Monitoring
Hi Gene, We use Velocity software's product for this...fantastic support. We couple this with MXG on the z/OS side to process the records. Regards, Bob -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Nelson, Gene C. Sent: Friday, April 17, 2009 9:49 AM To: LINUX-390@VM.MARIST.EDU Subject: z/VM and z/Linux Performance Monitoring We are setting up an SLES 10 SP2 Linux environment running under z/VM 5.4. We have not determined what performance monitoring tool to use yet. What tools are other shops using for performance monitoring? Thanks. Gene Nelson Federated Insurance Company 121 E. Park Square Owatonna, MN 55060 (507) 455-5200 ext. 5706 This e-mail and its attachments are intended only for the use of the addressee(s) and may contain privileged, confidential or proprietary information. If you are not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, displaying, copying, or use of this information is strictly prohibited. If you have received this communication in error, please inform the sender immediately and delete and destroy any record of this message. Thank you. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: z/VM and z/Linux Performance Monitoring
Have you also thought about Capacity planning, chargeback/accounting, and operational alerts? Performance monitoring of z/VM and Linux is only one small part of performance management. And also look for availability of performance education. Nelson, Gene C. wrote: We are setting up an SLES 10 SP2 Linux environment running under z/VM 5.4. We have not determined what performance monitoring tool to use yet. What tools are other shops using for performance monitoring? Thanks. Gene Nelson Federated Insurance Company 121 E. Park Square Owatonna, MN 55060 (507) 455-5200 ext. 5706 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 begin:vcard fn:Barton Robinson n:Robinson;Barton adr;dom:;;PO 391209;Mountain View;CA;94039-1209 email;internet:bar...@velocitysoftware.com title:Sr. Architect tel;work:650-964-8867 x-mozilla-html:FALSE url:VelocitySoftware.com version:2.1 end:vcard
