[opensuse-support] Tumbleweed kernel 5.x: kdump can't be loaded
Hi *, starting with kernel 5.x on my Tumbleweed machines kdump can't be loaded any longer with "kexec_load failed: Permission denied". Excerpt from my journal: ------------------------< snip snip snip >----------------------------- load.sh[1742]: kexec_file_load failed: Permission denied kernel: ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall. load.sh[1742]: kexec_load failed: Permission denied load.sh[1742]: entry = 0x4ade9c730 flags = 0x3e0001 load.sh[1742]: nr_segments = 8 load.sh[1742]: segment[0].buf = 0x1e207e0 load.sh[1742]: segment[0].bufsz = 0x70 load.sh[1742]: segment[0].mem = 0x4a2000000 load.sh[1742]: segment[0].memsz = 0x1000 load.sh[1742]: segment[1].buf = 0x1e28820 load.sh[1742]: segment[1].bufsz = 0x168 load.sh[1742]: segment[1].mem = 0x4a2001000 load.sh[1742]: segment[1].memsz = 0x1000 load.sh[1742]: segment[2].buf = 0x7f22cc853010 load.sh[1742]: segment[2].bufsz = 0x1252c74 load.sh[1742]: segment[2].mem = 0x4aadad000 load.sh[1742]: segment[2].memsz = 0x1253000 load.sh[1742]: segment[3].buf = 0x7f22cdaaa410 load.sh[1742]: segment[3].bufsz = 0x7cdae0 load.sh[1742]: segment[3].mem = 0x4ac000000 load.sh[1742]: segment[3].memsz = 0x1e4d000 load.sh[1742]: segment[4].buf = 0x1e1a420 load.sh[1742]: segment[4].bufsz = 0x457c load.sh[1742]: segment[4].mem = 0x4ade97000 load.sh[1742]: segment[4].memsz = 0x5000 load.sh[1742]: segment[5].buf = 0x1e13070 load.sh[1742]: segment[5].bufsz = 0x70e0 load.sh[1742]: segment[5].mem = 0x4ade9c000 load.sh[1742]: segment[5].memsz = 0x9000 load.sh[1742]: segment[6].buf = 0x1e11f80 load.sh[1742]: segment[6].bufsz = 0xc00 load.sh[1742]: segment[6].mem = 0x4adea5000 load.sh[1742]: segment[6].memsz = 0x4000 load.sh[1742]: segment[7].buf = 0x7f22cc7fb010 load.sh[1742]: segment[7].bufsz = 0x57000 load.sh[1742]: segment[7].mem = 0x4adea9000 load.sh[1742]: segment[7].memsz = 0x57000 kdump[24916]: FAILED to load kdump kernel: /sbin/kexec -p /boot/vmlinuz-5.0.2-1-default --append="quiet no_console_suspend consoleblank=0 systemd.log_target=kmsg log_buf_len=1M printk.devkmsg=on elevator=deadline sysrq=yes reset_devices acpi_no_memhotplug cgroup_disable=memory nokaslr numa=off irqpoll nr_cpus=1 root=kdump rootflags=bind rd.udev.children-max=8 disable_cpu_apicid=0 panic=1" --initrd=/boot/initrd-5.0.2-1-default-kdump , Result: kexec_load failed: Permission denied entry = 0x4ade9c730 flags = 0x3e0001 nr_segments = 8 segment[0].buf = 0x1e207e0 segment[0].bufsz = 0x70 segment[0].mem = 0x4a2000000 segment[0].memsz = 0x1000 segment[1].buf = 0x1e28820 segment[1].bufsz = 0x168 segment[1].mem = 0x4a2001000 segment[1].memsz = 0x1000 segment[2].buf = 0x7f22cc853010 segment[2].bufsz = 0x1252c74 segment[2].mem = 0x4aadad000 segment[2].memsz = 0x1253000 segment[3].buf = 0x7f22cdaaa410 segment[3].bufsz = 0x7cdae0 segment[3].mem = 0x4ac000000 segment[3].memsz = 0x1e4d000 segment[4].buf = 0x1e1a420 systemd[1]: kdump.service: Main process exited, code=exited, status=255/EXCEPTION systemd[1]: kdump.service: Failed with result 'exit-code'. systemd[1]: Failed to start Load kdump kernel and initrd. ------------------------< snip snip snip >----------------------------- Any idea what to do to get kdump back? TIA. Bye. Michael. -- Michael Hirmke -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
On 19. 03. 19, 20:08, Michael Hirmke wrote:
Hi *,
starting with kernel 5.x on my Tumbleweed machines kdump can't be loaded any longer with "kexec_load failed: Permission denied".
Excerpt from my journal: ------------------------< snip snip snip >----------------------------- load.sh[1742]: kexec_file_load failed: Permission denied kernel: ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall.
ima is Integrity Measurement Architecture and I bet it prevents the kdump image to load. It seems that you TPM chip is supported only since 5.x. COuld you upload dmesg somewhere? BTW kdump works for me on 5.0 as well as it used to on 4.x.
load.sh[1742]: kexec_load failed: Permission denied load.sh[1742]: entry = 0x4ade9c730 flags = 0x3e0001 load.sh[1742]: nr_segments = 8 load.sh[1742]: segment[0].buf = 0x1e207e0 load.sh[1742]: segment[0].bufsz = 0x70 load.sh[1742]: segment[0].mem = 0x4a2000000 load.sh[1742]: segment[0].memsz = 0x1000 load.sh[1742]: segment[1].buf = 0x1e28820 load.sh[1742]: segment[1].bufsz = 0x168 load.sh[1742]: segment[1].mem = 0x4a2001000 load.sh[1742]: segment[1].memsz = 0x1000 load.sh[1742]: segment[2].buf = 0x7f22cc853010 load.sh[1742]: segment[2].bufsz = 0x1252c74 load.sh[1742]: segment[2].mem = 0x4aadad000 load.sh[1742]: segment[2].memsz = 0x1253000 load.sh[1742]: segment[3].buf = 0x7f22cdaaa410 load.sh[1742]: segment[3].bufsz = 0x7cdae0 load.sh[1742]: segment[3].mem = 0x4ac000000 load.sh[1742]: segment[3].memsz = 0x1e4d000 load.sh[1742]: segment[4].buf = 0x1e1a420 load.sh[1742]: segment[4].bufsz = 0x457c load.sh[1742]: segment[4].mem = 0x4ade97000 load.sh[1742]: segment[4].memsz = 0x5000 load.sh[1742]: segment[5].buf = 0x1e13070 load.sh[1742]: segment[5].bufsz = 0x70e0 load.sh[1742]: segment[5].mem = 0x4ade9c000 load.sh[1742]: segment[5].memsz = 0x9000 load.sh[1742]: segment[6].buf = 0x1e11f80 load.sh[1742]: segment[6].bufsz = 0xc00 load.sh[1742]: segment[6].mem = 0x4adea5000 load.sh[1742]: segment[6].memsz = 0x4000 load.sh[1742]: segment[7].buf = 0x7f22cc7fb010 load.sh[1742]: segment[7].bufsz = 0x57000 load.sh[1742]: segment[7].mem = 0x4adea9000 load.sh[1742]: segment[7].memsz = 0x57000 kdump[24916]: FAILED to load kdump kernel: /sbin/kexec -p /boot/vmlinuz-5.0.2-1-default --append="quiet no_console_suspend consoleblank=0 systemd.log_target=kmsg log_buf_len=1M printk.devkmsg=on elevator=deadline sysrq=yes reset_devices acpi_no_memhotplug cgroup_disable=memory nokaslr numa=off irqpoll nr_cpus=1 root=kdump rootflags=bind rd.udev.children-max=8 disable_cpu_apicid=0 panic=1" --initrd=/boot/initrd-5.0.2-1-default-kdump , Result: kexec_load failed: Permission denied entry = 0x4ade9c730 flags = 0x3e0001 nr_segments = 8 segment[0].buf = 0x1e207e0 segment[0].bufsz = 0x70 segment[0].mem = 0x4a2000000 segment[0].memsz = 0x1000 segment[1].buf = 0x1e28820 segment[1].bufsz = 0x168 segment[1].mem = 0x4a2001000 segment[1].memsz = 0x1000 segment[2].buf = 0x7f22cc853010 segment[2].bufsz = 0x1252c74 segment[2].mem = 0x4aadad000 segment[2].memsz = 0x1253000 segment[3].buf = 0x7f22cdaaa410 segment[3].bufsz = 0x7cdae0 segment[3].mem = 0x4ac000000 segment[3].memsz = 0x1e4d000 segment[4].buf = 0x1e1a420 systemd[1]: kdump.service: Main process exited, code=exited, status=255/EXCEPTION systemd[1]: kdump.service: Failed with result 'exit-code'. systemd[1]: Failed to start Load kdump kernel and initrd. ------------------------< snip snip snip >-----------------------------
Any idea what to do to get kdump back?
TIA.
Bye. Michael.
-- js suse labs -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
On 20. 03. 19, 10:57, Jiri Slaby wrote:
On 19. 03. 19, 20:08, Michael Hirmke wrote:
Hi *,
starting with kernel 5.x on my Tumbleweed machines kdump can't be loaded any longer with "kexec_load failed: Permission denied".
Excerpt from my journal: ------------------------< snip snip snip >----------------------------- load.sh[1742]: kexec_file_load failed: Permission denied kernel: ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall.
ima is Integrity Measurement Architecture and I bet it prevents the kdump image to load. It seems that you TPM chip is supported only since 5.x. COuld you upload dmesg somewhere?
This very looks like the outcome of this change: +CONFIG_IMA_ARCH_POLICY=y -CONFIG_IMA_APPRAISE_BOOTPARAM=y Does the kernel from (when it builds): https://build.opensuse.org/project/monitor/home:jirislaby:stable-ima work any better? thanks, -- js suse labs -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
Hi Jiri,
On 19. 03. 19, 20:08, Michael Hirmke wrote:
Hi *,
starting with kernel 5.x on my Tumbleweed machines kdump can't be loaded any longer with "kexec_load failed: Permission denied".
Excerpt from my journal: ------------------------< snip snip snip >----------------------------- load.sh[1742]: kexec_file_load failed: Permission denied kernel: ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall.
ima is Integrity Measurement Architecture and I bet it prevents the kdump image to load. It seems that you TPM chip is supported only since 5.x. COuld you upload dmesg somewhere?
I can, what do you need besides the excerpt from my last mail. Do you have a preferred location? I can send it by mail, too. [...]
-- js suse labs
-- Michael Hirmke -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
Hi Jiri,
On 20. 03. 19, 10:57, Jiri Slaby wrote:
On 19. 03. 19, 20:08, Michael Hirmke wrote:
Hi *,
starting with kernel 5.x on my Tumbleweed machines kdump can't be loaded any longer with "kexec_load failed: Permission denied".
Excerpt from my journal: ------------------------< snip snip snip >----------------------------- load.sh[1742]: kexec_file_load failed: Permission denied kernel: ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall.
ima is Integrity Measurement Architecture and I bet it prevents the kdump image to load. It seems that you TPM chip is supported only since 5.x. COuld you upload dmesg somewhere?
This very looks like the outcome of this change: +CONFIG_IMA_ARCH_POLICY=y -CONFIG_IMA_APPRAISE_BOOTPARAM=y
Does the kernel from (when it builds): https://build.opensuse.org/project/monitor/home:jirislaby:stable-ima
work any better?
I can't add your repo here: [Kernel_jiri|https://build.opensuse.org/project/monitor/home:jirislaby:stable-ima] Valid metadata not found at specified URL Am I doing somtehing wrong?
thanks, -- js
Thx and bye. Michael. -- Michael Hirmke -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
On 20. 03. 19, 12:50, Michael Hirmke wrote:
Hi Jiri,
On 19. 03. 19, 20:08, Michael Hirmke wrote:
Hi *,
starting with kernel 5.x on my Tumbleweed machines kdump can't be loaded any longer with "kexec_load failed: Permission denied".
Excerpt from my journal: ------------------------< snip snip snip >----------------------------- load.sh[1742]: kexec_file_load failed: Permission denied kernel: ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall.
ima is Integrity Measurement Architecture and I bet it prevents the kdump image to load. It seems that you TPM chip is supported only since 5.x. COuld you upload dmesg somewhere?
I can, what do you need besides the excerpt from my last mail. Do you have a preferred location? I can send it by mail, too.
The issue should be fixed with the next update. So no need to do anything else except trying the next kernel :). thanks, -- js suse labs -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
Hi Jiri, [...]
ima is Integrity Measurement Architecture and I bet it prevents the kdump image to load. It seems that you TPM chip is supported only since 5.x. COuld you upload dmesg somewhere?
I can, what do you need besides the excerpt from my last mail. Do you have a preferred location? I can send it by mail, too.
The issue should be fixed with the next update. So no need to do anything else except trying the next kernel :).
ok :)
thanks,
Thank *you*!
js suse labs
Bye. Michael. -- Michael Hirmke -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
Hi Jiri,
On 20. 03. 19, 12:50, Michael Hirmke wrote:
Hi Jiri,
On 19. 03. 19, 20:08, Michael Hirmke wrote:
Hi *,
starting with kernel 5.x on my Tumbleweed machines kdump can't be loaded any longer with "kexec_load failed: Permission denied".
Excerpt from my journal: ------------------------< snip snip snip >----------------------------- load.sh[1742]: kexec_file_load failed: Permission denied kernel: ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall.
ima is Integrity Measurement Architecture and I bet it prevents the kdump image to load. It seems that you TPM chip is supported only since 5.x. COuld you upload dmesg somewhere?
I can, what do you need besides the excerpt from my last mail. Do you have a preferred location? I can send it by mail, too.
The issue should be fixed with the next update. So no need to do anything else except trying the next kernel :).
works as expected with kernel 5.0.3!
thanks,
Thx again!
-- js suse labs
Bye. Michael. -- Michael Hirmke -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
participants (2)
-
Jiri Slaby -
mh＠mike.franken.de