search for: invisiblethingslab

Do not set ''bridge'' parameter - let vif-bridge script to do autodetection. Actually ''network-bridge'' never creates xenbr0 interface by default, so defaulting bridge to xenbr0 is senseless. Signed-off-by: Marek Marczykowski <marmarek@invisiblethingslab.com> --- tools/libxl/libxl.c | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/tools/libxl/libxl.c b/tools/libxl/libxl.c index 6bb9c24..03fd35a 100644 --- a/tools/libxl/libxl.c +++ b/tools/libxl/libxl.c @@ -2811,10 +2811,6 @@ int libxl__device_nic_setdefault(libxl__...

...this the framebuffer region might still be reserved even after drm_fb_helper_remove_conflicting_pci_framebuffers() returned. Don't consider pci_request_region() failure for the framebuffer region as fatal error to workaround this issue. Reported-by: Marek Marczykowski-G?recki <marmarek at invisiblethingslab.com> Signed-off-by: Gerd Hoffmann <kraxel at redhat.com> --- drivers/gpu/drm/bochs/bochs_hw.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/drivers/gpu/drm/bochs/bochs_hw.c b/drivers/gpu/drm/bochs/bochs_hw.c index b615b7dfdd9d..a387efa9e559 100644 --- a/drivers/gpu...

...this the framebuffer region might still be reserved even after drm_fb_helper_remove_conflicting_pci_framebuffers() returned. Don't consider pci_request_region() failure for the framebuffer region as fatal error to workaround this issue. Reported-by: Marek Marczykowski-G?recki <marmarek at invisiblethingslab.com> Signed-off-by: Gerd Hoffmann <kraxel at redhat.com> --- drivers/gpu/drm/bochs/bochs_hw.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/drivers/gpu/drm/bochs/bochs_hw.c b/drivers/gpu/drm/bochs/bochs_hw.c index b615b7dfdd9d..a387efa9e559 100644 --- a/drivers/gpu...

...xen > which will propose those updates? To whom will the security-team be > able to reach out if a xen update will warrant a DSA or potentially > still be fine to be updates via a bookworm point release? In practice in most cases it will be me (and in rare cases Simon Gaiser <simon at invisiblethingslab.com>). None of us are Debian Developers, but we have experience with maintaining deb packages, and obviously with Xen itself. -- Best Regards, Marek Marczykowski-G?recki Invisible Things Lab -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type:...

...----------------------------------------------- People who touched revisions under test: Daniel De Graaf <dgdegra@tycho.nsa.gov> Ian Campbell <ian.campbell@citrix.com> Julien Grall <julien.grall@linaro.org> Keir Fraser <keir@xen.org> Marek Marczykowski <marmarek@invisiblethingslab.com> Stefano Stabellini <stefano.stabellini@eu.citrix.com> ------------------------------------------------------------ jobs: build-amd64 pass build-armhf pass build-i386...

Hello, The topic is self-explanatory: how to ensure that a PV driver domain correctly prepares its PCI devices for S3 sleep? If I do "pm-suspend" in dom0, and the driver domain has active network interfaces, suspend hangs the system. Yes, in case of this particular machine, suspend works fine when there is no driver domain. It is possible to manually invoke scripts from

Hi, Header says: /* * Unmaps the @count pages starting at @start_address, which were mapped by a * call to xc_gntshr_share_*. Never logs. */ int xc_gntshr_munmap(xc_gntshr *xcg, void *start_address, uint32_t count); But implementation calls: static int linux_gntshr_munmap(xc_gntshr *xcg, xc_osdep_handle h, void *start_address, uint32_t count) { return

...caller So either the patch need to be backported to 4.1 and 4.2, or fixed by this one: - ------ libxl: Fix SEGV in network-attach When "device/vif" directory exists but is empty l!=NULL, but nb==0, so l[nb-1] is invalid. Add missing check. Signed-Off-by: Marek Marczykowski <marmarek@invisiblethingslab.com> diff --git a/tools/libxl/libxl.c b/tools/libxl/libxl.c index 5783cd2..9e06a7d 100644 - --- a/tools/libxl/libxl.c +++ b/tools/libxl/libxl.c @@ -2569,7 +2569,8 @@ void libxl__device_nic_add(libxl__egc *egc, uint32_t domid, goto out_free; } if (!(l = libxl__xs_d...

Hi, I''ve still have problems with ACPI(?) on Xen. After some system startup or resume CPU temperature goes high although all domUs (and dom0) are idle. On "good" system startup it is about 50-55C, on "bad" - above 67C (most time above 70C). I''ve noticed difference in C-states repored by Xen (attached files). On "bad" startups in addition suspend

...g_pci_framebuffers() returned. Out of curiosity: what's going wrong here? Best regards Thomas > > Don't consider pci_request_region() failure for the framebuffer > region as fatal error to workaround this issue. > > Reported-by: Marek Marczykowski-G?recki <marmarek at invisiblethingslab.com> > Signed-off-by: Gerd Hoffmann <kraxel at redhat.com> > --- > drivers/gpu/drm/bochs/bochs_hw.c | 3 +-- > 1 file changed, 1 insertion(+), 2 deletions(-) > > diff --git a/drivers/gpu/drm/bochs/bochs_hw.c b/drivers/gpu/drm/bochs/bochs_hw.c > index b615b7dfdd9d..a3...

Hi Santiago, On Tue, Apr 29, 2025 at 11:56:51PM -0300, Santiago Ruano Rinc?n wrote: > Hello all, > > (And sorry, I realise now that I should had put the security team and > Xen maintainers more in the loop at some point.) > > This is something that we had tried to do for Xen 4.14 > (https://bugs.debian.org/1053246), but we failed to find an external > party able to help.

...rg/1053246), but we failed to find an external party able to help. The full announcement can be found at https://www.freexian.com/blog/xen-4.17-lts/, and for completeness, you can have the main part of it here below: Freexian is pleased to announce a partnership with Invisible Things Lab (https://invisiblethingslab.com/) to extend the security support of the Xen type-1 hypervisor version 4.17. Three years after its initial release, Xen 4.17, the version available in Debian 12 "bookworm", will reach end-of-security-support status upstream on December 2025 (https://xenbits.xen.org/docs/unstable/suppor...

...us 1 Since there's nothing to be fixed, there should not be a warning. It's totally fine to skip xenstored, xenconsoled and qemu steps in this case, so just exit cleanly. Link: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922033 Reported-by: Marek Marczykowski-Górecki <marmarek at invisiblethingslab.com> Signed-off-by: Hans van Kranenburg <hans at knorrie.org> --- debian/xen-utils-common.xen.init | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/xen-utils-common.xen.init b/debian/xen-utils-common.xen.init index e16d263def..c082e3ad05 100644 --- a/debian/xen-u...

...ntoni <fabio.fantoni@heliman.it> Fantu <fantonifabio@tiscali.it> George Dunlap <george.dunlap@eu.citrix.com> Ian Campbell <ian.campbell@citrix.com> Ian Jackson <ian.jackson@eu.citrix.com> Jan Beulich <jbeulich@suse.com> Marek Marczykowski <marmarek@invisiblethingslab.com> Roger Pau Monne <roger.pau@entel.upc.edu> Stefano Stabellini <stefano.stabellini@eu.citrix.com> Tim Deegan <tim@xen.org> Wei Liu <wei.liu2@citrix.com> ------------------------------------------------------------ jobs: build-amd64...

Hello, I''ve hit known problem with dynamic memory management - memory fragmentation... This dynamic memory management basically does xl mem-set to balance memory. After some time of running system, xen memory is so fragmented that it is impossible to start new VM with PCI device. Sometimes it crashes during boot (no 64MB contiguous memory for SWIOTLB), or later - eg. iwlagn cannot

Hi, Following is a simple patch that is needed in nouveau to get accelerated X on a Xen dom0 pv_ops kernel. The kernel is jeremy's 2.6.31.6 as of 20100222. The whole gpu tree of nouveau (which is almost the mainline merge), was substituted into the kernel-tree. All components of X (mesa, Xorg-server-7.5, xf86-nouveau, libdrm) used of the same day. Patch: diff -Naur

Hi, Following is a simple patch that is needed in nouveau to get accelerated X on a Xen dom0 pv_ops kernel. The kernel is jeremy's 2.6.31.6 as of 20100222. The whole gpu tree of nouveau (which is almost the mainline merge), was substituted into the kernel-tree. All components of X (mesa, Xorg-server-7.5, xf86-nouveau, libdrm) used of the same day. Patch: diff -Naur

...cusx.e.dennis@intel.com> Marcus Folkesson <marcus.folkesson@gmail.com> Marcus Karlsson <mk@acc.umu.se> Marcus Meissner <meissner@suse.de> Marek Belisko <marek.belisko@open-nandra.com> Marek Lindner <lindner_marek@yahoo.de> Marek Marczykowski <marmarek@invisiblethingslab.com> Marek Olšák <maraeo@gmail.com> Marek Szyprowski <m.szyprowski@samsung.com> Marek Vasut <marek.vasut@gmail.com> Marek Vasut <marex@denx.de> Marina Makienko <makienko@ispras.ru> Mario Isidoro <Mario.Isidoro@tecmic.pt> Mario Limonciello <mar...

...cusx.e.dennis@intel.com> Marcus Folkesson <marcus.folkesson@gmail.com> Marcus Karlsson <mk@acc.umu.se> Marcus Meissner <meissner@suse.de> Marek Belisko <marek.belisko@open-nandra.com> Marek Lindner <lindner_marek@yahoo.de> Marek Marczykowski <marmarek@invisiblethingslab.com> Marek Olšák <maraeo@gmail.com> Marek Szyprowski <m.szyprowski@samsung.com> Marek Vasut <marek.vasut@gmail.com> Marek Vasut <marex@denx.de> Marina Makienko <makienko@ispras.ru> Mario Isidoro <Mario.Isidoro@tecmic.pt> Mario Limonciello <mar...

...cusx.e.dennis@intel.com> Marcus Folkesson <marcus.folkesson@gmail.com> Marcus Karlsson <mk@acc.umu.se> Marcus Meissner <meissner@suse.de> Marek Belisko <marek.belisko@open-nandra.com> Marek Lindner <lindner_marek@yahoo.de> Marek Marczykowski <marmarek@invisiblethingslab.com> Marek Olšák <maraeo@gmail.com> Marek Szyprowski <m.szyprowski@samsung.com> Marek Vasut <marek.vasut@gmail.com> Marek Vasut <marex@denx.de> Marina Makienko <makienko@ispras.ru> Mario Isidoro <Mario.Isidoro@tecmic.pt> Mario Limonciello <mar...