Discussion:
[PVE-User] 4.15 based test kernel for PVE 5.x available
Fabian Grünbichler
2018-03-12 13:14:29 UTC
Permalink
a pve-kernel-4.15 meta package depending on a preview build based on
Ubuntu Bionic's 4.15 kernel is available on pvetest. it is provided as
opt-in package in order to catch potential regressions and hardware
incompatibilities early on, and allow testing on a wide range of systems
before the default kernel series gets switched over to 4.15 and support
for our 4.13 based kernel is phased out at some point in the future.

in order to try it out on your test systems, configure the pvetest
repository and run

apt update
apt install pve-kernel-4.15

the pve-kernel-4.15 meta package will keep the preview kernel updated,
just like the pve-kernel-4.13 meta package (recently pulled out of the
proxmox-ve package) does for the stable 4.13 based kernel.

also on pvetest, you will find a pve-headers-4.15 header meta package in
case you need them for third-party module building, a linux-tools-4.15
package with compatible perf, as well as an updated pve-firmware package
with the latest blobs.

notable changes besides the major kernel update include the removal of
out-of-tree Intel NIC modules, which are not (yet) compatible with 4.15
kernels. this removal be re-evaluated at some later point before the
final switch to 4.15 as new stable kernel in PVE 5.

there are no plans to support both 4.13 and 4.15 in the long term - once
the testing phase of 4.15 is over 4.15 will become the new default
kernel and 4.13 will receive no updates anymore.

happy testing and looking forward to feedback!
Alexandre DERUMIER
2018-03-12 18:43:09 UTC
Permalink
Hi,

Is retpoline support enabled like ubuntu build ? (builded with recent gcc ?)


----- Mail original -----
De: "Fabian Grünbichler" <***@proxmox.com>
À: "proxmoxve" <pve-***@pve.proxmox.com>
Envoyé: Lundi 12 Mars 2018 14:14:29
Objet: [PVE-User] 4.15 based test kernel for PVE 5.x available

a pve-kernel-4.15 meta package depending on a preview build based on
Ubuntu Bionic's 4.15 kernel is available on pvetest. it is provided as
opt-in package in order to catch potential regressions and hardware
incompatibilities early on, and allow testing on a wide range of systems
before the default kernel series gets switched over to 4.15 and support
for our 4.13 based kernel is phased out at some point in the future.

in order to try it out on your test systems, configure the pvetest
repository and run

apt update
apt install pve-kernel-4.15

the pve-kernel-4.15 meta package will keep the preview kernel updated,
just like the pve-kernel-4.13 meta package (recently pulled out of the
proxmox-ve package) does for the stable 4.13 based kernel.

also on pvetest, you will find a pve-headers-4.15 header meta package in
case you need them for third-party module building, a linux-tools-4.15
package with compatible perf, as well as an updated pve-firmware package
with the latest blobs.

notable changes besides the major kernel update include the removal of
out-of-tree Intel NIC modules, which are not (yet) compatible with 4.15
kernels. this removal be re-evaluated at some later point before the
final switch to 4.15 as new stable kernel in PVE 5.

there are no plans to support both 4.13 and 4.15 in the long term - once
the testing phase of 4.15 is over 4.15 will become the new default
kernel and 4.13 will receive no updates anymore.

happy testing and looking forward to feedback!

_______________________________________________
pve-user mailing list
pve-***@pve.proxmox.com
https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
Fabian Grünbichler
2018-03-12 19:08:57 UTC
Permalink
Post by Alexandre DERUMIER
Hi,
Is retpoline support enabled like ubuntu build ? (builded with recent gcc ?)
yes, it has KPTI for v3/Meltdown, full RETPOLINE for v2, and masking of
pointers passed from user space via array_index_mask_nospec for v1.

it does not include the originally embargoed IBRS/IBPB patch set used by
RH/Suse/Canonical in the first waves of mitigation. some parts of that
might still get included if/when they get applied upstream. passing
SPEC_CTRL/IBRS/IBPB through to VM guests should work as before (if
supported by the CPU/µcode).
Alexandre DERUMIER
2018-03-13 07:27:57 UTC
Permalink
Post by Alexandre DERUMIER
Post by Fabian Grünbichler
yes, it has KPTI for v3/Meltdown, full RETPOLINE for v2, and masking of
pointers passed from user space via array_index_mask_nospec for v1.
it does not include the originally embargoed IBRS/IBPB patch set used by
RH/Suse/Canonical in the first waves of mitigation. some parts of that
might still get included if/when they get applied upstream. passing
SPEC_CTRL/IBRS/IBPB through to VM guests should work as before (if
supported by the CPU/µcode).
Great ! Congrat to all proxmox team !


----- Mail original -----
De: "Fabian Grünbichler" <***@proxmox.com>
À: "proxmoxve" <pve-***@pve.proxmox.com>
Envoyé: Lundi 12 Mars 2018 20:08:57
Objet: Re: [PVE-User] 4.15 based test kernel for PVE 5.x available
Post by Alexandre DERUMIER
Hi,
Is retpoline support enabled like ubuntu build ? (builded with recent gcc ?)
yes, it has KPTI for v3/Meltdown, full RETPOLINE for v2, and masking of
pointers passed from user space via array_index_mask_nospec for v1.

it does not include the originally embargoed IBRS/IBPB patch set used by
RH/Suse/Canonical in the first waves of mitigation. some parts of that
might still get included if/when they get applied upstream. passing
SPEC_CTRL/IBRS/IBPB through to VM guests should work as before (if
supported by the CPU/µcode).

_______________________________________________
pve-user mailing list
pve-***@pve.proxmox.com
https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user

Loading...