November 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1216472] VMs with secure boot do not start (assertion in edk2)
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216472 https://bugzilla.suse.com/show_bug.cgi?id=1216472#c6 Vasily Ulyanov <vasily.ulyanov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(vasily.ulyanov@su | |se.com) | --- Comment #6 from Vasily Ulyanov <vasily.ulyanov(a)suse.com> --- (In reply to Joey Lee from comment #5) > (In reply to Vasily Ulyanov from comment #4) > > Created attachment 870566 [details] > > Domain xml > > May I know your libvirt version? I got a problem when I tested ms-ovmf > image. I filed another issue bsc#1216789. Libvirt is from the Virtualization project in OBS. Should be the latest one: qemu@testvmi:/> rpm -qa | grep libvirt- system-group-libvirt-20170617-25.2.noarch libvirt-libs-9.8.0-Virt.1699.1088.7.x86_64 libvirt-daemon-log-9.8.0-Virt.1699.1088.7.x86_64 libvirt-client-9.8.0-Virt.1699.1088.7.x86_64 libvirt-daemon-common-9.8.0-Virt.1699.1088.7.x86_64 libvirt-daemon-driver-qemu-9.8.0-Virt.1699.1088.7.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216472] VMs with secure boot do not start (assertion in edk2)
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216472 https://bugzilla.suse.com/show_bug.cgi?id=1216472#c5 Joey Lee <jlee(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(vasily.ulyanov@su | |se.com) --- Comment #5 from Joey Lee <jlee(a)suse.com> --- (In reply to Vasily Ulyanov from comment #4) > Created attachment 870566 [details] > Domain xml May I know your libvirt version? I got a problem when I tested ms-ovmf image. I filed another issue bsc#1216789. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216787] New: [Build 548.2] AppARmor many upgrade tests fail on AVC denials
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216787 Bug ID: 1216787 Summary: [Build 548.2] AppARmor many upgrade tests fail on AVC denials Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://openqa.opensuse.org/tests/3691976/modules/prep are_system_for_update_tests/steps/15 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta(a)cboltz.de Reporter: lubos.kocman(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation many of our upgrade tests failed on following AVC denials in AppArmor full log https://paste.opensuse.org/pastes/09c5eebd91df # wait_serial expected: "SCRIPT_FINISHEDOSm16-\\d+-" # Result: OSm16 type=AVC msg=audit(1698766514.856:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="php-fpm" pid=639 comm="apparmor_parser" type=AVC msg=audit(1698766514.884:12): apparmor="STATUS" operation="profile_load" profile="unconfined" name="samba-bgqd" pid=641 comm="apparmor_parser" type=SYSCALL msg=audit(1698766514.884:12): arch=c000003e syscall=1 success=yes exit=42097 a0=8 a1=5651a69e3bf0 a2=a471 a3=0 items=0 ppid=617 pid=641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" subj=unconfined key=(null) type=PROCTITLE msg=audit(1698766514.884:12): proctitle=2F7362696E2F61707061726D6F725F706172736572002D2D7265706C616365002D2D002F6574632F61707061726D6F722E64 type=AVC msg=audit(1698766514.912:13): apparmor="STATUS" operation="profile_load" profile="unconfined" name="samba-dcerpcd" pid=642 comm="apparmor_parser" type=SYSCALL msg=audit(1698766514.912:13): arch=c000003e syscall=1 success=yes exit=43027 a0=8 a1=5651a694e370 a2=a813 a3=0 items=0 ppid=617 pid=642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" subj=unconfined key=(null) type=PROCTITLE msg=audit(1698766514.912:13): proctitle=2F7362696E2F61707061726D6F725F706172736572002D2D7265706C616365002D2D002F6574632F61707061726D6F722E64 type=AVC msg=audit(1698766514.940:14): apparmor="STATUS" operation="profile_load" profile="unconfined" name="samba-rpcd" pid=643 comm="apparmor_parser" type=SYSCALL msg=audit(1698766514.940:14): arch=c000003e syscall=1 success=yes exit=41505 a0=8 a1=5651a6989e80 a2=a221 a3=0 items=0 ppid=617 pid=643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" subj=unconfined key=(null) type=PROCTITLE msg=audit(1698766514.940:14): proctitle=2F7362696E2F61707061726D6F725F706172736572002D2D7265706C616365002D2D002F6574632F61707061726D6F722E64 openQA test in scenario opensuse-15.6-NET-x86_64-kde@64bit-2G fails in [prepare_system_for_update_tests](https://openqa.opensuse.org/tests/3691976/… ## Test suite description TIMEOUT_SCALE property is added to avoid sporadic shutdown fails in kde@USBboot_64 scenario. Added by : oorlov; Related ticket: poo#37000 ## Reproducible Fails since (at least) Build [545.1](https://openqa.opensuse.org/tests/3670617) ## Expected result Last good: [538.1](https://openqa.opensuse.org/tests/3640584) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1215633] gvfs-udisks2-volume-monitor crashes, causing delays in applications
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1215633 https://bugzilla.suse.com/show_bug.cgi?id=1215633#c14 --- Comment #14 from Alynx Zhou <alynx.zhou(a)suse.com> --- > (gimp:5307): GLib-GIO-CRITICAL **: 05:37:00.899: file ../gio/gfileinfo.c: line 1633 (g_file_info_get_is_hidden): should not be reached > > (gimp:5307): GLib-GIO-CRITICAL **: 05:37:00.899: GFileInfo created without standard::is-backup > > (gimp:5307): GLib-GIO-CRITICAL **: 05:37:00.899: file ../gio/gfileinfo.c: line 1655 (g_file_info_get_is_backup): should not be reached > > (gimp:5307): GLib-GIO-CRITICAL **: 05:37:00.899: GFileInfo created without standard::is-hidden I also got those but I think they are harmless currently. Did you have some special mount points? Like google drive or other, maybe that is the reason of the crash. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216472] VMs with secure boot do not start (assertion in edk2)
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216472 https://bugzilla.suse.com/show_bug.cgi?id=1216472#c4 --- Comment #4 from Vasily Ulyanov <vasily.ulyanov(a)suse.com> --- Created attachment 870566 --> https://bugzilla.suse.com/attachment.cgi?id=870566&action=edit Domain xml -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216472] VMs with secure boot do not start (assertion in edk2)
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216472 https://bugzilla.suse.com/show_bug.cgi?id=1216472#c3 Vasily Ulyanov <vasily.ulyanov(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(vasily.ulyanov@su | |se.com) | --- Comment #3 from Vasily Ulyanov <vasily.ulyanov(a)suse.com> --- (In reply to Joey Lee from comment #1) > > I can not reproduce this issue on my local machine with qemu-ovmf + secure > boot. > > My code/vars are: > > <loader readonly='yes' secure='no' > type='pflash'>/usr/share/qemu/ovmf-x86_64-code.bin</loader> > <nvram > template='/usr/share/qemu/ovmf-x86_64-vars.bin'>/var/lib/libvirt/qemu/nvram/ > opensuseTW_VARS.fd</nvram> I guess with `secure='no'` the VM will run **without** Secure Boot, right? This works fine for me as well. The issue is observed when `secure='yes'` and `ovmf-x86_64-smm-ms-code.bin` is used. I will grab the full domxml from the test run and attach it here. > Do you know where are OVMF_CODE.secboot.fd and OVMF_VARS.secboot.fd from? Those are just symlinks to `/usr/share/qemu/ovmf-x86_64-smm-ms-code.bin` and `/usr/share/qemu/ovmf-x86_64-smm-ms-vars.bin`: qemu@testvmi:/> ls -la /usr/share/OVMF/OVMF_CODE.secboot.fd lrwxrwxrwx 1 root root 35 Nov 1 01:52 /usr/share/OVMF/OVMF_CODE.secboot.fd -> ../qemu/ovmf-x86_64-smm-ms-code.bin qemu@testvmi:/> qemu@testvmi:/> ls -la /usr/share/OVMF/OVMF_VARS.secboot.fd lrwxrwxrwx 1 root root 35 Nov 1 01:52 /usr/share/OVMF/OVMF_VARS.secboot.fd -> ../qemu/ovmf-x86_64-smm-ms-vars.bin qemu@testvmi:/> qemu@testvmi:/> rpm -qa | grep ovmf qemu-ovmf-x86_64-202308-Virt.1699.256.44.noarc -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216472] VMs with secure boot do not start (assertion in edk2)
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216472 https://bugzilla.suse.com/show_bug.cgi?id=1216472#c2 Joey Lee <jlee(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(vasily.ulyanov@su | |se.com) CC| |vasily.ulyanov(a)suse.com --- Comment #2 from Joey Lee <jlee(a)suse.com> --- (In reply to Vasily Ulyanov from comment #0) > Created attachment 870374 [details] > VMI startup log Base on the above log, looks that the VM used OVMF_CODE.secboot.fd and OVMF_VARS.secboot.fd as EFI firmware: {"component":"virt-launcher","level":"info","msg":"\t\t<loader readonly=\"yes\" secure=\"yes\" type=\"pflash\">/usr/share/OVMF/OVMF_CODE.secboot.fd</loader>","subcomponent":"libvirt","timestamp":"2023-10-19T17:30:50.321164Z"} {"component":"virt-launcher","level":"info","msg":"\t\t<nvram template=\"/usr/share/OVMF/OVMF_VARS.secboot.fd\">/tmp/default_testvmi</nvram>","subcomponent":"libvirt","timestamp":"2023-10-19T17:30:50.321177Z"} But those files are not from qemu-ovmf-x86_64 RPM. Hi Vasily, Do you know where are OVMF_CODE.secboot.fd and OVMF_VARS.secboot.fd from? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216472] VMs with secure boot do not start (assertion in edk2)
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216472 https://bugzilla.suse.com/show_bug.cgi?id=1216472#c1 --- Comment #1 from Joey Lee <jlee(a)suse.com> --- Hi Vasily, (In reply to Vasily Ulyanov from comment #0) > Created attachment 87 0374 [details] > VMI startup log > > One of the KubeVirt tests that runs a VM with Secure Boot fails. The debug > logs show an assertion in edk2: > > ASSERT > /home/abuild/rpmbuild/BUILD/edk2-edk2-stable202308/UefiCpuPkg/Library/ > BaseXApicX2ApicLib/BaseXApicX2ApicLib.c(1478): (Index != 0) || (LevelType == > 0x01) > > Tested with ovmf build from the Virtualization project: > qemu-ovmf-x86_64-202308-Virt.1699.256.29.noarch I can not reproduce this issue on my local machine with qemu-ovmf + secure boot. My code/vars are: <loader readonly='yes' secure='no' type='pflash'>/usr/share/qemu/ovmf-x86_64-code.bin</loader> <nvram template='/usr/share/qemu/ovmf-x86_64-vars.bin'>/var/lib/libvirt/qemu/nvram/opensuseTW_VARS.fd</nvram> -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216239] mcomix 2.1.0 doesn't launch, it's fixed upstream in mcomix 2.3.0 but old version is still in tumbleweed main repository
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216239 https://bugzilla.suse.com/show_bug.cgi?id=1216239#c2 Giacomo Comes <comes(a)naic.edu> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #2 from Giacomo Comes <comes(a)naic.edu> --- mcomix 2.3.0 is available now in tumbleweed. Closing. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1216786] After a reboot, Tumbleweed loses two HUBs
by bugzilla_noreply＠suse.com 01 Nov '23

01 Nov '23

https://bugzilla.suse.com/show_bug.cgi?id=1216786 https://bugzilla.suse.com/show_bug.cgi?id=1216786#c4 Santiago Zarate <santiago.zarate(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |santiago.zarate(a)suse.com --- Comment #4 from Santiago Zarate <santiago.zarate(a)suse.com> --- Hi Ritva, is this a laptop or a desktop? if its a laptop, do you notice a difference when starting the computer with power connected vs disconnected? -- You are receiving this mail because: You are on the CC list for the bug.

1 0