Re: [PVE-User] CVE-2013-2224 - 2.6.32+ IP_RETOPTS Buffer Poisoning DoS

2013-07-01 Thread Alexandre DERUMIER
>>I've just tested this vuln and confirmed it works on my Proxmox 2.3 , 
>>my node completely crashed. 

Thanks for the report, it's fixed in 

http://openvz.org/Download/kernel/rhel6/042stab078.27 

We need to update proxmox kernel as soon as possible. (Dietmar is on the road 
for 2 weeks,so it'll take a little time)


- Mail original - 

De: "Hien Phan"  
À: pve-user@pve.proxmox.com 
Envoyé: Lundi 1 Juillet 2013 16:36:56 
Objet: [PVE-User] CVE-2013-2224 - 2.6.32+ IP_RETOPTS Buffer Poisoning DoS 

Hello, 

I've just tested this vuln and confirmed it works on my Proxmox 2.3 , 
my node completely crashed. 

-- 
Best regards, 
Phan Quoc Hien 
___ 
pve-user mailing list 
pve-user@pve.proxmox.com 
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user 
___
pve-user mailing list
pve-user@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user


Re: [PVE-User] about 2.3 to 3.0 upgrade

2013-07-01 Thread Alexandre DERUMIER
>> Well you can simply tar /etc/pve directory just in case. 


backup /var/lib/pve-cluster,  /etc/pve is mounted from it (this is an sqlite 
database).

mixing 2.3 and 3.0 should work, nothing too much different in cluster protocol, 
and live migration works from 2.3 to 3.0.

(But this to migrate all nodes to 3.0 as soon as possible)


- Mail original - 

De: "Lex Rivera"  
À: pve-user@pve.proxmox.com 
Envoyé: Lundi 1 Juillet 2013 22:43:21 
Objet: Re: [PVE-User] about 2.3 to 3.0 upgrade 


Yep, config folder is shared and AFAIK format of config files hasn't changed. 
Well you can simply tar /etc/pve directory just in case. 


Reinstall and reconnect probably will do, but there may be problems with SSH 
keys since reinstalled node will get new one, i does not know how proxmox 
handles this case. 

I have both 2.3 and 3.0 nodes in my cluster. No problems detected, everything 
works (including live migration), but still this is unsupported. 


On Mon, Jul 1, 2013, at 11:16 AM, Fábio Rabelo wrote: 












Ho to all ... 


And thanks in advance for any help .. 


I have a running 5 node pve 2.3 cluster . 


To upgrade to 3.0, the how-to advises to make a backup of all config beforehand 
. 


But, in a cluster, all config files are replicated in all nodes, correct ? 


So, if something goes wrong in upgrade, all I need to do is reinstall that node 
from scratch and reconnect to the running cluster ... 


Am I wright ??? 


And. if something indeed goes wrong, I can install PVE 3.0 and reconnect to 
running 2.3 cluster, or I MUST reinstall 2.3 ? 


Just looking for best practices  




Fábio Rabelo 

___ 

pve-user mailing list 

pve-user@pve.proxmox.com 

http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user 



___ 
pve-user mailing list 
pve-user@pve.proxmox.com 
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user 
___
pve-user mailing list
pve-user@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user


Re: [PVE-User] about 2.3 to 3.0 upgrade

2013-07-01 Thread Lex Rivera
Yep, config folder is shared and AFAIK format of config files hasn't
changed. Well you can simply tar /etc/pve directory just in case.



Reinstall and reconnect probably will do, but there may be problems
with SSH keys since reinstalled node will get new one, i does not know
how proxmox handles this case.



I have both 2.3 and 3.0 nodes in my cluster. No problems detected,
everything works (including live migration), but still this is
unsupported.





On Mon, Jul 1, 2013, at 11:16 AM, Fábio Rabelo wrote:

Ho to all ...

And thanks in advance for any help ..

I have a running 5 node pve 2.3 cluster .

To upgrade to 3.0, the how-to advises to make a backup of all config
beforehand .

But, in a cluster, all config files are replicated in all nodes,
correct ?

So, if something goes wrong in upgrade, all I need to do is reinstall
that node from scratch and reconnect to the running cluster ...

Am I wright ???

And. if something indeed goes wrong, I can install PVE 3.0 and
reconnect to running 2.3 cluster, or I MUST reinstall 2.3 ?

Just looking for best practices 



Fábio Rabelo

___

pve-user mailing list

[1]pve-user@pve.proxmox.com

[2]http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user

References

1. mailto:pve-user@pve.proxmox.com
2. http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
___
pve-user mailing list
pve-user@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user


[PVE-User] about 2.3 to 3.0 upgrade

2013-07-01 Thread Fábio Rabelo
Ho to all ...

And thanks in advance for any help ..

I have a running 5 node pve 2.3 cluster .

To upgrade to 3.0, the how-to advises to make a backup of all config
beforehand .

But, in a cluster, all config files are replicated in all nodes, correct ?

So, if something goes wrong in upgrade, all I need to do is reinstall that
node from scratch and reconnect to the running cluster ...

Am I wright ???

And. if something indeed goes wrong, I can install PVE 3.0 and reconnect to
running 2.3 cluster, or I MUST reinstall 2.3 ?

Just looking for best practices 


Fábio Rabelo
___
pve-user mailing list
pve-user@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user


[PVE-User] CVE-2013-2224 - 2.6.32+ IP_RETOPTS Buffer Poisoning DoS

2013-07-01 Thread Hien Phan
Hello,

I've just tested this vuln and confirmed it works on my Proxmox 2.3 ,
my node completely crashed.

--
Best regards,
Phan Quoc Hien
___
pve-user mailing list
pve-user@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user