> From: Natanael Copa <ncopa_at_alpinelinux.org> > Date: Wed, 30 May 2012 21:45:37 +0200> > On Wed, 30 May 2012 23:25:53 +0530 > "V.Krishn" <vkrishn4_at_gmail.com> wrote: > > > On Tuesday, May 29, 2012 08:39:56 PM Natanael Copa wrote: > > > On Sun, 27 May 2012 09:00:47 -0700 > > > > > > Nathan Angelacos <nangel_at_alpinelinux.org> wrote: > > > > * Booting the 64bit kernel reports: > > > > can only boot x86 32 PAE kernels, not xen-3.0-x86_64 > > > > Error 13: Invalid or unsupported executable format > > > > > > I built a kernel dedicated for virtual guests. One of the goals is > > > to make it as small as possible. I have no idea if it even boots at > > > this point but feedback is welcome. > > > > > > I'd like it to include drivers for qemu/kvm, xen, vmware, virtualbox > > > and hyper-v guests. > > > > > > It is in edge/testing and is named linux-virt-grsec. > > > > > > > Can we see a bootable iso in edge/releases or a wiki help page on how > > to create one. It would be great to have a lighter iso suited for > > virtual guests. I could test using kvm and install/test pmreader on > > it. (http://insteps.net/pr/a/pmwiki/Apps/PmReader-help-v1-1) > > I built one for testing > http://dev.alpinelinux.org/~ncopa/alpine/alpine-virt/
Hi,
I've tried the alpine-virt-120531-x86.iso as a PV guest under
Xen (32 and 64 bit Centos 5 and 64 bit Fedora 17), and it appears
to run up against this bug:
https://bugzilla.redhat.com/show_bug.cgi?id=829016#c4
Namely "unable to handle kernel paging request" in atomic64_read_cx8
Looks like a patch is going in for upstream:
http://lists.xen.org/archives/html/xen-devel/2012-06/msg00486.html
But for current Alpine, if it's not too much trouble, could you guys
generate a kernel/iso with CONFIG_TRANSPARENT_HUGEPAGE=n
Thanks,
-dean takemori
---
Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org
Help: alpine-devel+help@lists.alpinelinux.org
---
Re: [alpine-devel] Notes on Alpine 2.4.2 in Amazon EC2
On Fri, 29 Jun 2012 23:38:44 -1000
Dean Takemori <deant@hawaii.rr.com> wrote:
> > From: Natanael Copa <ncopa_at_alpinelinux.org> > > Date: Wed, 30 May 2012 21:45:37 +0200> > > > On Wed, 30 May 2012 23:25:53 +0530 > > "V.Krishn" <vkrishn4_at_gmail.com> wrote: > > > > > On Tuesday, May 29, 2012 08:39:56 PM Natanael Copa wrote: > > > > On Sun, 27 May 2012 09:00:47 -0700 > > > > > > > > Nathan Angelacos <nangel_at_alpinelinux.org> wrote: > > > > > * Booting the 64bit kernel reports: > > > > > can only boot x86 32 PAE kernels, not xen-3.0-x86_64 > > > > > Error 13: Invalid or unsupported executable format > > > > > > > > I built a kernel dedicated for virtual guests. One of the goals> > > > is to make it as small as possible. I have no idea if it even> > > > boots at this point but feedback is welcome. > > > > > > > > I'd like it to include drivers for qemu/kvm, xen, vmware,> > > > virtualbox and hyper-v guests. > > > > > > > > It is in edge/testing and is named linux-virt-grsec. > > > > > > > > > > Can we see a bootable iso in edge/releases or a wiki help page on> > > how to create one. It would be great to have a lighter iso suited> > > for virtual guests. I could test using kvm and install/test> > > pmreader on it.> > > (http://insteps.net/pr/a/pmwiki/Apps/PmReader-help-v1-1) > > > > I built one for testing > > http://dev.alpinelinux.org/~ncopa/alpine/alpine-virt/> > Hi,> > I've tried the alpine-virt-120531-x86.iso as a PV guest under > Xen (32 and 64 bit Centos 5 and 64 bit Fedora 17), and it appears> to run up against this bug:> > https://bugzilla.redhat.com/show_bug.cgi?id=829016#c4
Great! I never got the x86 PV guest working but never found out why.
Thanks!
> Namely "unable to handle kernel paging request" in atomic64_read_cx8> > Looks like a patch is going in for upstream:> > http://lists.xen.org/archives/html/xen-devel/2012-06/msg00486.html> > But for current Alpine, if it's not too much trouble, could you guys > generate a kernel/iso with CONFIG_TRANSPARENT_HUGEPAGE=n
I think I would prefer apply that patch if it works.
Could we test the patch first? I can apply it to the linux-virt-grsec
first, create a new alpine-virt iso and if successful try it on the
default kernel too.
Thanks!
> Thanks,> > -dean takemori> > > ---> Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org> Help: alpine-devel+help@lists.alpinelinux.org> --->
---
Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org
Help: alpine-devel+help@lists.alpinelinux.org
---
Re: [alpine-devel] Notes on Alpine 2.4.2 in Amazon EC2
On Fri, 29 Jun 2012 23:38:44 -1000
Dean Takemori <deant@hawaii.rr.com> wrote:
> > From: Natanael Copa <ncopa_at_alpinelinux.org> > > Date: Wed, 30 May 2012 21:45:37 +0200> > > > On Wed, 30 May 2012 23:25:53 +0530 > > "V.Krishn" <vkrishn4_at_gmail.com> wrote: > > > > > On Tuesday, May 29, 2012 08:39:56 PM Natanael Copa wrote: > > > > On Sun, 27 May 2012 09:00:47 -0700 > > > > > > > > Nathan Angelacos <nangel_at_alpinelinux.org> wrote: > > > > > * Booting the 64bit kernel reports: > > > > > can only boot x86 32 PAE kernels, not xen-3.0-x86_64 > > > > > Error 13: Invalid or unsupported executable format > > > > > > > > I built a kernel dedicated for virtual guests. One of the goals> > > > is to make it as small as possible. I have no idea if it even> > > > boots at this point but feedback is welcome. > > > > > > > > I'd like it to include drivers for qemu/kvm, xen, vmware,> > > > virtualbox and hyper-v guests. > > > > > > > > It is in edge/testing and is named linux-virt-grsec. > > > > > > > > > > Can we see a bootable iso in edge/releases or a wiki help page on> > > how to create one. It would be great to have a lighter iso suited> > > for virtual guests. I could test using kvm and install/test> > > pmreader on it.> > > (http://insteps.net/pr/a/pmwiki/Apps/PmReader-help-v1-1) > > > > I built one for testing > > http://dev.alpinelinux.org/~ncopa/alpine/alpine-virt/> > Hi,> > I've tried the alpine-virt-120531-x86.iso as a PV guest under > Xen (32 and 64 bit Centos 5 and 64 bit Fedora 17), and it appears> to run up against this bug:> > https://bugzilla.redhat.com/show_bug.cgi?id=829016#c4> > Namely "unable to handle kernel paging request" in atomic64_read_cx8> > Looks like a patch is going in for upstream:> > http://lists.xen.org/archives/html/xen-devel/2012-06/msg00486.html
Seems like that patch is fixing an issue introduced by a patch that we
don't use at all so it does not apply.
> But for current Alpine, if it's not too much trouble, could you guys > generate a kernel/iso with CONFIG_TRANSPARENT_HUGEPAGE=n
Yeah, I think this is what we need to do for now.
-nc
> > Thanks,> > -dean takemori> > > ---> Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org> Help: alpine-devel+help@lists.alpinelinux.org> --->
---
Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org
Help: alpine-devel+help@lists.alpinelinux.org
---
Re: [alpine-devel] Notes on Alpine 2.4.2 in Amazon EC2
On Jul 1, 2012, at 9:27 PM, Natanael Copa wrote:
> On Fri, 29 Jun 2012 23:38:44 -1000> Dean Takemori <deant@hawaii.rr.com> wrote:> Seems like that patch is fixing an issue introduced by a patch that we> don't use at all so it does not apply.> >> But for current Alpine, if it's not too much trouble, could you guys >> generate a kernel/iso with CONFIG_TRANSPARENT_HUGEPAGE=n> > Yeah, I think this is what we need to do for now.
I just tried the current edge/testing linux-virt-grsec kernel.
It boots just fine under VirtualBox-4.1.18 and KVM (64 bit Fedora 17 host)
But under Xen (64 bit Fedora 17 host), it stops at
* Mounting boot media failed.
initramfs emergency recovery shell launched. Type 'exit' to continue boot
sh: can't access tty; job control turned off
/ #
I have not had the time to investigate further.
-dean takemori
---
Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org
Help: alpine-devel+help@lists.alpinelinux.org
---
Re: [alpine-devel] Notes on Alpine 2.4.2 in Amazon EC2
I'm not going to mention how many re-configure/compile cycles I tried, but I was
unable to generate a 3.3.8 + grsecurity kernel that worked as a Paravirtualized
guest under Xen. I suspect that version of the grsecurity patch either has a bug
or trips one in somewhere in the kernel or toolchain.
I have been able to create a 3.4.5 + grsecurity kernel that boots as PV domU under
Xen. It also boots under VirtualBox and KVM.
Attached is the APKBUILD and kernelconfig that I used; Note that the kernelconfig
attached has grsec's RBAC turned on as that's my intended usage for Alpine.
-dean takemori
Re: [alpine-devel] Notes on Alpine 2.4.2 in Amazon EC2
On Wed, 18 Jul 2012 22:36:54 -0400
<deant@hawaii.rr.com> wrote:
> I'm not going to mention how many re-configure/compile cycles I> tried, but I was unable to generate a 3.3.8 + grsecurity kernel that> worked as a Paravirtualized guest under Xen. I suspect that version> of the grsecurity patch either has a bug or trips one in somewhere in> the kernel or toolchain.
Thats what i suspect too. Got the x86_64 running though.
> I have been able to create a 3.4.5 + grsecurity kernel that boots as> PV domU under Xen. It also boots under VirtualBox and KVM.
Very nice!
> Attached is the APKBUILD and kernelconfig that I used; Note that the> kernelconfig attached has grsec's RBAC turned on as that's my> intended usage for Alpine.
Will have a look at it when I get a chance.
Thank you very much for sharing!
> -dean takemori
-nc
---
Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org
Help: alpine-devel+help@lists.alpinelinux.org
---
Re: [alpine-devel] Notes on Alpine 2.4.2 in Amazon EC2
On Wed, 18 Jul 2012 22:36:54 -0400
<deant@hawaii.rr.com> wrote:
> > I'm not going to mention how many re-configure/compile cycles I> tried, but I was unable to generate a 3.3.8 + grsecurity kernel that> worked as a Paravirtualized guest under Xen. I suspect that version> of the grsecurity patch either has a bug or trips one in somewhere in> the kernel or toolchain.> > I have been able to create a 3.4.5 + grsecurity kernel that boots as> PV domU under Xen. It also boots under VirtualBox and KVM.> > Attached is the APKBUILD and kernelconfig that I used; Note that the> kernelconfig attached has grsec's RBAC turned on as that's my> intended usage for Alpine.
I have only one comment to this: Excellent work!
Applied, using you as author. Thanks!
-nc
---
Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org
Help: alpine-devel+help@lists.alpinelinux.org
---