OK Guys and Gals, We have just kicked off a build of the 4.9.34-29 xen kernel on the Community Build Service for both EL6 and EL7. This kernel has some important things in it. 1. It has a patch for the stack guard issue (CVE-2017-1000364). Also the patch for Xen Security fix XSA-216. See these upstream changelogs for ALL kernel commits from 4.9.31 to 4.9.34: https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.32 https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.33 https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.34 2. It has a fix for the xen-netback rate limit queues (http://www.spinics.net/lists/netdev/msg441578.html) (Thanks very much to Kevin Stange and Jean-Louis Dupond for finding a fix for this issue) 3. It now contains debuginfo files (thanks to Sarah Newman for this amazing addition!). ==================== The kernels are currently building, it will likely take 4 to 6 hours for them to make their way to the applicable testing repos: CentOS-7: https://buildlogs.centos.org/centos/7/virt/x86_64/xen-46/ or CentOS-6: https://buildlogs.centos.org/centos/6/virt/x86_64/xen-44/ https://buildlogs.centos.org/centos/6/virt/x86_64/xen-46/ ==================== If you actually need the debuginfo files, they will be here (also in 4 or so hours): CentOS-7: http://cbs.centos.org/repos/virt7-xen-common-testing/x86_64/debug/ CentOS-6: http://cbs.centos.org/repos/virt6-xen-common-testing/x86_64/debug/ ==================== Let's do some real testing of these and see if we can solve the issues people are having .. this should already solve server and the debuginfo files should help solve others. I think Kevin and Jean-Louis also know how to solve the Windows BSOD when run on a Xen 4.9.x dom0 server .. they can comment here. Hopefully whoever maintains the newer Windows drivers will fix the ACPI / APIC issues and no work around will be necessary soon(ish). I also want to personally (and publicly) thank Kevin, Jean-Louis, and Sarah for the substantial work and the community collaboration. This is EXACTLY what we need for the Virt SIG .. people solving problems and doing github pull requests so we can, together as a group, get these projects working much better. If someone else wants to help us with the Kernel .. or Xen .. here are our github branches: https://github.com/CentOS-virt7/xen-kernel https://github.com/CentOS-virt7/xen Fork them .. work on them .. talk to us on #centos-virt in freenode or on this mailing list .. then once we are all happy, you can submit a pull request and we'll get your issues fixed. Thanks, Johnny Hughes -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: OpenPGP digital signature URL: <http://lists.centos.org/pipermail/centos-virt/attachments/20170627/e3a5c243/attachment-0002.sig>
Giuseppe Tanzilli - Serverplan
2017-Jun-30 16:03 UTC
[CentOS-virt] 4.9.34-29 EL6 and EL7 kernels
Hi, I tried this new kernel on out xen testbed with centos 6 and iscsi over qlog 57810 is not working, tried replacing drivers from manufacturer but does not work either. tried 4.9.23 from repo and is not working finally the old 4.9.13-22.el6.x86_64 is the only one from 4.9.x taht is working with hw iscsi on this cards. I will be happy to help debug the issue and get a latest kernel working with iscsi . thanks, Giuseppe On 27/06/2017 16:40, Johnny Hughes wrote:> OK Guys and Gals, > > We have just kicked off a build of the 4.9.34-29 xen kernel on the > Community Build Service for both EL6 and EL7. > > This kernel has some important things in it. > > 1. It has a patch for the stack guard issue (CVE-2017-1000364). Also > the patch for Xen Security fix XSA-216. > > See these upstream changelogs for ALL kernel commits from 4.9.31 to 4.9.34: > > https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.32 > https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.33 > https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.34 > > 2. It has a fix for the xen-netback rate limit queues > (http://www.spinics.net/lists/netdev/msg441578.html) (Thanks very much > to Kevin Stange and Jean-Louis Dupond for finding a fix for this issue) > > 3. It now contains debuginfo files (thanks to Sarah Newman for this > amazing addition!). > > ====================> > The kernels are currently building, it will likely take 4 to 6 hours for > them to make their way to the applicable testing repos: > > CentOS-7: > https://buildlogs.centos.org/centos/7/virt/x86_64/xen-46/ > > or > > CentOS-6: > https://buildlogs.centos.org/centos/6/virt/x86_64/xen-44/ > https://buildlogs.centos.org/centos/6/virt/x86_64/xen-46/ > > ====================> > If you actually need the debuginfo files, they will be here (also in 4 > or so hours): > > CentOS-7: > http://cbs.centos.org/repos/virt7-xen-common-testing/x86_64/debug/ > > CentOS-6: > http://cbs.centos.org/repos/virt6-xen-common-testing/x86_64/debug/ > > ====================> > Let's do some real testing of these and see if we can solve the issues > people are having .. this should already solve server and the debuginfo > files should help solve others. > > I think Kevin and Jean-Louis also know how to solve the Windows BSOD > when run on a Xen 4.9.x dom0 server .. they can comment here. Hopefully > whoever maintains the newer Windows drivers will fix the ACPI / APIC > issues and no work around will be necessary soon(ish). > > I also want to personally (and publicly) thank Kevin, Jean-Louis, and > Sarah for the substantial work and the community collaboration. This is > EXACTLY what we need for the Virt SIG .. people solving problems and > doing github pull requests so we can, together as a group, get these > projects working much better. > > If someone else wants to help us with the Kernel .. or Xen .. here are > our github branches: > > https://github.com/CentOS-virt7/xen-kernel > > https://github.com/CentOS-virt7/xen > > Fork them .. work on them .. talk to us on #centos-virt in freenode or > on this mailing list .. then once we are all happy, you can submit a > pull request and we'll get your issues fixed. > > Thanks, > Johnny Hughes > > > > > _______________________________________________ > CentOS-virt mailing list > CentOS-virt at centos.org > https://lists.centos.org/mailman/listinfo/centos-virt-- -------------------------------------------------- Giuseppe Tanzilli Serverplan -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos-virt/attachments/20170630/ba3397c1/attachment-0002.html>
OK, thanks to Giuseppe's troubleshooting and help, I think we have gotten this iscsi issue fixed. There is now a new kernel-4.9.37-29.el7 (and el6) kernel in the testing repo. Please test this kernel and provide feedback so we can release it. The only change is to turn off: CONFIG_IO_STRICT_DEVMEM (and of course the upgrade to 4.9.37). Thanks, Johnny Hughes On 06/30/2017 11:03 AM, Giuseppe Tanzilli - Serverplan wrote:> Hi, > I tried this new kernel on out xen testbed with centos 6 and iscsi over > qlog 57810 is not working, > tried replacing drivers from manufacturer but does not work either. > > tried 4.9.23 from repo and is not working > > finally the old 4.9.13-22.el6.x86_64 is the only one from 4.9.x taht is > working with hw iscsi on this cards. > > I will be happy to help debug the issue and get a latest kernel working > with iscsi . > > thanks, > Giuseppe > > > On 27/06/2017 16:40, Johnny Hughes wrote: >> OK Guys and Gals, >> >> We have just kicked off a build of the 4.9.34-29 xen kernel on the >> Community Build Service for both EL6 and EL7. >> >> This kernel has some important things in it. >> >> 1. It has a patch for the stack guard issue (CVE-2017-1000364). Also >> the patch for Xen Security fix XSA-216. >> >> See these upstream changelogs for ALL kernel commits from 4.9.31 to 4.9.34: >> >> https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.32 >> https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.33 >> https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.34 >> >> 2. It has a fix for the xen-netback rate limit queues >> (http://www.spinics.net/lists/netdev/msg441578.html) (Thanks very much >> to Kevin Stange and Jean-Louis Dupond for finding a fix for this issue) >> >> 3. It now contains debuginfo files (thanks to Sarah Newman for this >> amazing addition!). >> >> ====================>> >> The kernels are currently building, it will likely take 4 to 6 hours for >> them to make their way to the applicable testing repos: >> >> CentOS-7: >> https://buildlogs.centos.org/centos/7/virt/x86_64/xen-46/ >> >> or >> >> CentOS-6: >> https://buildlogs.centos.org/centos/6/virt/x86_64/xen-44/ >> https://buildlogs.centos.org/centos/6/virt/x86_64/xen-46/ >> >> ====================>> >> If you actually need the debuginfo files, they will be here (also in 4 >> or so hours): >> >> CentOS-7: >> http://cbs.centos.org/repos/virt7-xen-common-testing/x86_64/debug/ >> >> CentOS-6: >> http://cbs.centos.org/repos/virt6-xen-common-testing/x86_64/debug/ >> >> ====================>> >> Let's do some real testing of these and see if we can solve the issues >> people are having .. this should already solve server and the debuginfo >> files should help solve others. >> >> I think Kevin and Jean-Louis also know how to solve the Windows BSOD >> when run on a Xen 4.9.x dom0 server .. they can comment here. Hopefully >> whoever maintains the newer Windows drivers will fix the ACPI / APIC >> issues and no work around will be necessary soon(ish). >> >> I also want to personally (and publicly) thank Kevin, Jean-Louis, and >> Sarah for the substantial work and the community collaboration. This is >> EXACTLY what we need for the Virt SIG .. people solving problems and >> doing github pull requests so we can, together as a group, get these >> projects working much better. >> >> If someone else wants to help us with the Kernel .. or Xen .. here are >> our github branches: >> >> https://github.com/CentOS-virt7/xen-kernel >> >> https://github.com/CentOS-virt7/xen >> >> Fork them .. work on them .. talk to us on #centos-virt in freenode or >> on this mailing list .. then once we are all happy, you can submit a >> pull request and we'll get your issues fixed. >> >> Thanks, >> Johnny Hughes >> >> >> >> >> _______________________________________________ >> CentOS-virt mailing list >> CentOS-virt at centos.org >> https://lists.centos.org/mailman/listinfo/centos-virt > > > -- > -------------------------------------------------- > Giuseppe Tanzilli > Serverplan > > > > _______________________________________________ > CentOS-virt mailing list > CentOS-virt at centos.org > https://lists.centos.org/mailman/listinfo/centos-virt >-------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: OpenPGP digital signature URL: <http://lists.centos.org/pipermail/centos-virt/attachments/20170713/a247d14b/attachment-0002.sig>