October 2015 - openSUSE Virtual - openSUSE Mailing Lists

[opensuse-virtual] pvgrub2-boot of Opensuse Xen DomU -- possible? documentation? example?
by PGNet Dev 05 Nov '15

05 Nov '15

I'd recently attempted to boot an Opensuse DomU, on Opensuse Dom0, switching to pvgrub2 rather than pygrub as the bootloader mechanism. Failed at it, and asked at the Xen ML "pvgrub2 launch of Xen 4.5.1 DomU just drops to grub2 prompt ?" http://xen.markmail.org/thread/dmugrhbg6rv4vzn7 Before proceeding to hunt-n-peck my way through figuring this out, Is DomU on current Opensuse+Xen, in my case, rpm -qa | egrep "kernel-xen-4|^xen-4|grub2-x" | sort grub2-x86_64-efi-2.02~beta2-20.10.1.x86_64 grub2-x86_64-xen-2.02~beta2-20.10.1.x86_64 kernel-xen-4.2.5-2.1.g0491388.x86_64 xen-4.5.1_13-391.1.x86_64 pvgrub2-bootable? If YES, is there any clear *documentation*, ideally with an example? -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-virtual+owner(a)opensuse.org

4 13

[opensuse-virtual] status/plans for direct0boot (not chainload) of Xen Dom0 on UEFI hardware?
by PGNet Dev 30 Oct '15

30 Oct '15

I run an Opensuse 13.2 Xen server. Currently, the following are installed & active in Dom0. rpm -qa | grep -i xen | sort grub2-x86_64-xen-2.02~beta2-20.10.1.x86_64 kernel-xen-4.2.5-1.1.g27d2719.x86_64 xen-4.5.1_10-390.1.x86_64 xen-libs-4.5.1_10-390.1.x86_64 xen-tools-4.5.1_10-390.1.x86_64 The server mobo is UEFI capable. It's configured to boot Dom0 from UEFI via still-necessary chainload tree /boot/efi/ /boot/efi/ └── EFI ├── opensuse │ └── grubx64.efi └── XEN ├── initrd-xen ├── vmlinuz-xen ├── xen.cfg └── xen.efi etc Works fine. IIUC, (1) Xen 4.6 is arriving soon (2) Kernel 4.3+ is arriving soon (3) Opensuse's moving from patched kernel-xen to pvops-integrated kernel for Dom0/DomU Will any of that^^ progress result in DIRECT-booting of Opensuse Dom0 on EUFI hardware, removing the necessity to chainload? -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-virtual+owner(a)opensuse.org

2 5

[opensuse-virtual] Xen Critical vulnerability CVE-2015-7835 unpatched in Opensuse/Xen packages?
by PGNet Dev 29 Oct '15

29 Oct '15

I run latest Xen from d.o.o's Virtualization/openSUSE_13.2 repo rpm -qa | grep -i ^xen | sort xen-4.5.1_10-390.1.x86_64 xen-libs-4.5.1_10-390.1.x86_64 xen-tools-4.5.1_10-390.1.x86_64 Xen's now made public it's latest critical advisory http://arstechnica.com/security/2015/10/xen-patches-7-year-old-bug-that-sha… "Xen patches 7-year-old bug that shattered hypervisor security. Critical vulnerability allowed some guests to access underlying operating system." http://xenbits.xen.org/xsa/advisory-148.html Advisory XSA-148 Public release 2015-10-29 11:59 ... CVE(s) CVE-2015-7835 Title x86: Uncontrolled creation of large page mappings by PV guests The advisory instructs patching to resolve RESOLUTION ========== Applying the appropriate attached patch resolves this issue. xsa148.patch xen-unstable, Xen 4.6.x xsa148-4.5.patch Xen 4.5.x xsa148-4.4.patch Xen 4.4.x, Xen 4.3.x Checking installed Xen's changelog rpm -q --changelog xen | egrep "CVE-2015-7835|xsa148" (empty) it's not been applied. Or, afaict from obs, even submitted. Where's this security patch in the package tree? -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-virtual+owner(a)opensuse.org

1 0