Package: src:linux Version: 4.19.132-1 Severity: important Dear Maintainer,
When a new virtual machine is created using Debian Cloud image (debian-10-openstack-amd64.qcow2) it ships with linux-image-cloud-amd64. On the one hand, this looks nice as it deactivates many useless kernel modules, but on the other hand, our Proxmox host (using KVM) is not able to send a shutdown signal. When removing linux-image-cloud-amd64 (and linux-image-4.19.0-10-cloud-amd64) and installing linux-image-amd64, then Proxmox can shut down the virtual machine. This seems to be quite an annoying bug as it forces the user to remove a cloud-optimized kernel to be able to shut down virtual machines from the host. I expected that the Debian Cloud-optimized kernel works well with Proxmox, and it is not the case. -- Package-specific info: ** Version: Linux version 4.19.0-10-cloud-amd64 (debian-kernel@lists.debian.org) (gcc version 8.3.0 (Debian 8.3.0-6)) #1 SMP Debian 4.19.132-1 (2020-07-24) ** Command line: BOOT_IMAGE=/boot/vmlinuz-4.19.0-10-cloud-amd64 root=UUID=42338e15-f98e-4b67-a46a-ea8f4a4225af ro nosplash text biosdevname=0 net.ifnames=0 console=tty0 console=ttyS0,115200 earlyprintk=ttyS0,115200 consoleblank=0 systemd.show_status=true ** Not tainted ** Kernel log: [ 1.380168] NET: Registered protocol family 17 [ 1.382207] mpls_gso: MPLS GSO support [ 1.383914] sched_clock: Marking stable (1361387673, 20661333)->(1382940204, -891198) [ 1.387713] registered taskstats version 1 [ 1.389518] Loading compiled-in X.509 certificates [ 1.482539] Loaded X.509 cert 'Debian Secure Boot CA: 6ccece7e4c6c0d1f6149f3dd27dfcc5cbb419ea1' [ 1.486021] Loaded X.509 cert 'Debian Secure Boot Signer 2020: 00b55eb3b9' [ 1.488780] AppArmor: AppArmor sha1 policy hashing enabled [ 1.491830] rtc_cmos 00:00: setting system clock to 2020-08-16 19:35:09 UTC (1597606509) [ 1.499376] Freeing unused kernel image memory: 1472K [ 1.517096] Write protecting the kernel read-only data: 16384k [ 1.522820] Freeing unused kernel image memory: 2028K [ 1.525762] Freeing unused kernel image memory: 1340K [ 1.528269] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1.531018] x86/mm: Checking user space page tables [ 1.533133] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1.535686] Run /init as init process [ 1.745256] SCSI subsystem initialized [ 1.763647] libata version 3.00 loaded. [ 1.767305] ata_piix 0000:00:01.1: version 2.13 [ 1.770999] scsi host0: ata_piix [ 1.772101] scsi host1: ata_piix [ 1.772923] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xe100 irq 14 [ 1.774285] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xe108 irq 15 [ 1.783433] PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 1.808934] PCI Interrupt Link [LNKA] enabled at IRQ 10 [ 1.834355] PCI Interrupt Link [LNKD] enabled at IRQ 11 [ 1.860095] PCI Interrupt Link [LNKB] enabled at IRQ 10 [ 1.896526] scsi host2: Virtio SCSI HBA [ 1.899003] scsi 2:0:0:0: Direct-Access QEMU QEMU HARDDISK 2.5+ PQ: 0 ANSI: 5 [ 1.901025] scsi 2:0:0:1: Direct-Access QEMU QEMU HARDDISK 2.5+ PQ: 0 ANSI: 5 [ 1.917925] random: fast init done [ 1.933879] ata1.01: NODEV after polling detection [ 1.934252] ata1.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 [ 1.936621] scsi 0:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 [ 1.946146] sd 2:0:0:0: Power-on or device reset occurred [ 1.947729] sd 2:0:0:1: Power-on or device reset occurred [ 1.949614] sd 2:0:0:0: [sda] 10485760 512-byte logical blocks: (5.37 GB/5.00 GiB) [ 1.951235] sd 2:0:0:0: [sda] Write Protect is off [ 1.951238] sd 2:0:0:1: [sdb] 33554432 512-byte logical blocks: (17.2 GB/16.0 GiB) [ 1.952231] sd 2:0:0:0: [sda] Mode Sense: 63 00 00 08 [ 1.953834] sd 2:0:0:1: [sdb] Write Protect is off [ 1.954824] sd 2:0:0:1: [sdb] Mode Sense: 63 00 00 08 [ 1.954897] sd 2:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 1.956723] sd 2:0:0:1: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 1.961032] sr 0:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray [ 1.961759] sda: sda1 [ 1.962809] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 1.964743] sdb: sdb1 [ 1.964971] sr 0:0:0:0: Attached scsi CD-ROM sr0 [ 1.969214] sd 2:0:0:0: [sda] Attached SCSI disk [ 1.970485] sd 2:0:0:1: [sdb] Attached SCSI disk [ 2.158540] cryptd: max_cpu_qlen set to 1000 [ 2.335065] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: (null) [ 2.574347] systemd[1]: Inserted module 'autofs4' [ 2.608224] systemd[1]: systemd 241 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 +IDN -PCRE2 default-hierarchy=hybrid) [ 2.616291] systemd[1]: Detected virtualization kvm. [ 2.621792] systemd[1]: Detected architecture x86-64. [ 2.638075] systemd[1]: Set hostname to <gitlab-ci>. [ 3.038350] systemd[1]: Configuration file /etc/systemd/system/home.mount is marked executable. Please remove executable permission bits. Proceeding anyway. [ 3.157689] random: systemd: uninitialized urandom read (16 bytes read) [ 3.163919] random: systemd: uninitialized urandom read (16 bytes read) [ 3.170377] systemd[1]: Created slice User and Session Slice. [ 3.174941] random: systemd: uninitialized urandom read (16 bytes read) [ 3.177827] systemd[1]: Started Dispatch Password Requests to Console Directory Watch. [ 3.186023] systemd[1]: Created slice system-systemd\x2dfsck.slice. [ 3.191573] systemd[1]: Reached target Slices. [ 3.196440] systemd[1]: Listening on Journal Socket (/dev/log). [ 3.321375] RPC: Registered named UNIX socket transport module. [ 3.323771] RPC: Registered udp transport module. [ 3.323772] RPC: Registered tcp transport module. [ 3.323773] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 3.362680] EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro [ 3.605299] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 [ 3.611024] ACPI: Power Button [PWRF] [ 3.671125] sd 2:0:0:0: Attached scsi generic sg0 type 0 [ 3.677360] sd 2:0:0:1: Attached scsi generic sg1 type 0 [ 3.694677] sr 0:0:0:0: Attached scsi generic sg2 type 5 [ 4.044993] EXT4-fs (sdb1): mounted filesystem with ordered data mode. Opts: (null) [ 4.097961] systemd-journald[184]: Received request to flush runtime journal from PID 1 [ 4.164068] audit: type=1400 audit(1597606512.168:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=272 comm="apparmor_parser" [ 4.173100] audit: type=1400 audit(1597606512.168:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" pid=272 comm="apparmor_parser" [ 4.181138] audit: type=1400 audit(1597606512.180:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/man" pid=273 comm="apparmor_parser" [ 4.187161] audit: type=1400 audit(1597606512.180:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_filter" pid=273 comm="apparmor_parser" [ 4.193751] audit: type=1400 audit(1597606512.180:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_groff" pid=273 comm="apparmor_parser" [ 4.210891] audit: type=1400 audit(1597606512.212:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ntpd" pid=271 comm="apparmor_parser" [ 4.284863] random: crng init done [ 4.286568] random: 7 urandom warning(s) missed due to ratelimiting [ 5.817635] ISO 9660 Extensions: RRIP_1991A [ 68.943118] FS-Cache: Loaded [ 69.001631] FS-Cache: Netfs 'nfs' registered for caching [ 69.010574] Key type dns_resolver registered [ 69.052346] NFS: Registering the id_resolver key type [ 69.055977] Key type id_resolver registered [ 69.055979] Key type id_legacy registered [ 69.666354] audit: type=1400 audit(1597606577.672:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="docker-default" pid=589 comm="apparmor_parser" [ 69.993207] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. [ 70.003900] Bridge firewalling registered [ 70.339148] Initializing XFRM netlink socket [ 70.603315] IPv6: ADDRCONF(NETDEV_UP): docker0: link is not ready ** Model information sys_vendor: QEMU product_name: Standard PC (i440FX + PIIX, 1996) product_version: pc-i440fx-5.0 chassis_vendor: QEMU chassis_version: pc-i440fx-5.0 bios_vendor: SeaBIOS bios_version: rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org ** Loaded modules: xt_conntrack ipt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo nft_counter xt_addrtype nft_compat nft_chain_nat_ipv4 nf_nat_ipv4 nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c nf_tables nfnetlink br_netfilter bridge stp llc rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs overlay lockd grace fscache isofs evdev serio_raw virtio_balloon virtio_console sg button qemu_fw_cfg sunrpc ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic fscrypto ecb crypto_simd cryptd glue_helper aes_x86_64 sr_mod cdrom sd_mod ata_generic virtio_scsi virtio_net net_failover failover ata_piix libata scsi_mod virtio_pci virtio_ring virtio ** Network interface configuration: # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). # The loopback network interface auto lo iface lo inet loopback # The normal eth0 allow-hotplug eth0 iface eth0 inet dhcp # Additional interfaces, just in case we're using # multiple networks allow-hotplug eth1 iface eth1 inet dhcp allow-hotplug eth2 iface eth2 inet dhcp # Set this one last, so that cloud-init or user can # override defaults. source /etc/network/interfaces.d/* ** Network status: *** IP interfaces and addresses: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 02:00:00:01:06:10 brd ff:ff:ff:ff:ff:ff inet 172.16.10.106/24 brd 172.16.10.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::ff:fe01:610/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 02:00:00:01:06:03 brd ff:ff:ff:ff:ff:ff inet 172.16.3.106/24 brd 172.16.3.255 scope global eth1 valid_lft forever preferred_lft forever inet6 fe80::ff:fe01:603/64 scope link valid_lft forever preferred_lft forever 4: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default link/ether 02:42:23:93:40:06 brd ff:ff:ff:ff:ff:ff inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0 valid_lft forever preferred_lft forever *** Device statistics: Inter-| Receive | Transmit face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed eth0: 303476 1013 0 0 0 0 0 0 103634 689 0 0 0 0 0 0 eth1: 23753 46 0 0 0 0 0 0 10545 69 0 0 0 0 0 0 docker0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 lo: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 *** Protocol statistics: Ip: Forwarding: 1 1042 total packets received 0 forwarded 0 incoming packets discarded 771 incoming packets delivered 709 requests sent out Icmp: 3 ICMP messages received 0 input ICMP message failed ICMP input histogram: destination unreachable: 3 0 ICMP messages sent 0 ICMP messages failed ICMP output histogram: IcmpMsg: InType3: 3 Tcp: 10 active connection openings 1 passive connection openings 0 failed connection attempts 0 connection resets received 7 connections established 758 segments received 696 segments sent out 0 segments retransmitted 0 bad segments received 8 resets sent Udp: 10 packets received 0 packets to unknown port received 0 packet receive errors 13 packets sent 0 receive buffer errors 0 send buffer errors UdpLite: TcpExt: 26 delayed acks sent 295 packet headers predicted 18 acknowledgments not containing data payload received 373 predicted acknowledgments 3 connections reset due to unexpected data 1 connections reset due to early user close TCPRcvCoalesce: 44 TCPOrigDataSent: 546 TCPKeepAlive: 3 TCPDelivered: 552 IpExt: InOctets: 311611 OutOctets: 97819 InNoECTPkts: 1042 ** PCI devices: not available ** USB devices: not available -- System Information: Debian Release: 10.5 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-10-cloud-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages linux-image-4.19.0-10-cloud-amd64 depends on: ii initramfs-tools [linux-initramfs-tool] 0.133+deb10u1 ii kmod 26-1 ii linux-base 4.6 Versions of packages linux-image-4.19.0-10-cloud-amd64 recommends: ii apparmor 2.13.2-10 ii firmware-linux-free 3.4 Versions of packages linux-image-4.19.0-10-cloud-amd64 suggests: pn debian-kernel-handbook <none> ii grub-pc 2.02+dfsg1-20+deb10u2 pn linux-doc-4.19 <none> Versions of packages linux-image-4.19.0-10-cloud-amd64 is related to: pn firmware-amd-graphics <none> pn firmware-atheros <none> pn firmware-bnx2 <none> pn firmware-bnx2x <none> pn firmware-brcm80211 <none> pn firmware-cavium <none> pn firmware-intel-sound <none> pn firmware-intelwimax <none> pn firmware-ipw2x00 <none> pn firmware-ivtv <none> pn firmware-iwlwifi <none> pn firmware-libertas <none> pn firmware-linux-nonfree <none> pn firmware-misc-nonfree <none> pn firmware-myricom <none> pn firmware-netxen <none> pn firmware-qlogic <none> pn firmware-realtek <none> pn firmware-samsung <none> pn firmware-siano <none> pn firmware-ti-connectivity <none> pn xen-hypervisor <none> -- no debconf information