[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: XSA-351 causing Solaris-11 systems to panic during boot.


  • To: Cheyenne Wills <cheyenne.wills@xxxxxxxxx>
  • From: Roger Pau Monné <roger.pau@xxxxxxxxxx>
  • Date: Tue, 17 Nov 2020 11:50:39 +0100
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=citrix.com; dmarc=pass action=none header.from=citrix.com; dkim=pass header.d=citrix.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ubiuhm/ubfrsk0kdCcuBS9nyUq95olb7mUVepFOwJPo=; b=AQ7yQDiBLde+L+QvHzec4kTpbUcx571/KYHy6qNukOJIoMC3+h7Ygy0UN/t0zi9TmWBdnNwbMZrZmqeSohbLYOw0tLvFBpVGMcr2Pf0hLdMAE4+jjKWsWTd5FQSiGCRkKSYiu01JXwfUAVQMUSFFIEHSS1A58uE1BplkUjYxmFNMy0EC7+gRCNOZGFQDpXV+VDVBOIL3BbAjmbFxdwPtHFEH70x6ZCcf1OaAdzArXc6zem+UCzQdr0CYKEWO08395gIvk+A8W2g36LUX09y5AMoMO6HFOtS5UU1BkYC5LzvihNRnucyugnT1jdtw6zWY5Xhsql7VU5rmmVAqD36zvg==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=T9VDXH1Zj1T0k4TcTcQt7mLiKKtl+DnaA3afWT5JwoDmNp16lh/lqyVGsRCzCR73uFPS5VSNZQFV7Il7VuIgXABO9cXOiq5iH5hVceRf1D8lVuSV9tQOHKP3eq3hXSjXnT46x1H9cu1xj5s+SBAhgf+6tA7zCjImSGboWhEPA+9qH9TfNx5AQH6hlx6uakB+22Auku5muVuaHCGg2YI6xbF+Aref1i/i+Y0UxQuq3KaDV7xaEQV6dRH7DAFJLtkdDFU62avwVJeiRNLOR2KuddWirWotjQUXrGMByB14azjIDFbX8qaoms6v98M9r/EeGX1/aqqQX5d/wCKrgp1NNQ==
  • Authentication-results: esa4.hc3370-68.iphmx.com; dkim=pass (signature verified) header.i=@citrix.onmicrosoft.com
  • Cc: <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • Delivery-date: Tue, 17 Nov 2020 10:50:59 +0000
  • Ironport-sdr: FKjlv3YfwYSrQSW08yte8xOBAMsixhHcsyDowvcPWJu/Q/nqEwHf9mdtnv5r9Q0+G5AGN+oh37 GujbNScSqMfq8B1mUwIAzENtVbIwPhtfhV22Anzlp8lAxTsgylEzX0niV3EHqjOZEVg5r/CzW9 /VLIPXTIp/ZpFOuo9StMj3+/fp7Ro6Ey+bpy7MlNrc/mYZBReNCZoTKJ68IplgwAEiFrbEsw9K zyh9Uzd/2GGYD4pJevKB8DLpePmZ/01hM+cBVLsrWG3tSa2aHUunWb181dSKFFK5aNG+rsSiX5 tIo=
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On Mon, Nov 16, 2020 at 02:57:14PM -0700, Cheyenne Wills wrote:
> Running Xen with XSA-351 is causing Solaris 11 systems to panic during
> boot.  The panic screen is showing the failure to be coming from
> "unix:rdmsr".  The panic occurs with existing guests (booting off a disk)
> and the  booting from an install ISO image.
> 
> I discussed the problem with "andyhhp__" in the "#xen" IRC channel and he
> requested that I report it here.
> 
> This was failing on a Xen 4.13 and a Xen 4.14 system built via gentoo.
> 
> I understand that ultimately this is a bug in Solaris.  However it does
> impact existing guests that were functional before applying the XSA-351
> security patches.

I seem to have some issues getting the Solaris 11.4 ISO to boot, which I
think are unrelated to the MSR changes. I get what seems to be a panic
just after the Copyright message, but there's no reason printed at all
about the panic. The message just reads (transcript):

SunOS Release 5.11 Version 11.4.0.15.0 64-bit
Copyright (c) 1983, 2018, Oracle and/or it's affiliates. All right reserved.
System would not fast reboot because:
 newkernel not valid
 fastreboot_onpanic is not set
 ...

The config file I'm using is:

memory=1024
vcpus=4
name="solaris"

builder="hvm"

disk = [
  
'format=raw,vdev=hdc,access=ro,devtype=cdrom,target=/root/sol-11_4-text-x86.iso',
  'format=raw,vdev=hda,access=rw,target=/root/solaris.img',
]

vif = [
 'mac=00:16:3E:74:3d:88,bridge=bridge0',
]

vnc=1
vnclisten="0.0.0.0"

serial='pty'

on_crash="preserve"

Is there anything I'm missing?

Thanks, Roger.



 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.