View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0001127 | channel: kernel/el8 | --kernel--request-for-enhancement-- | public | 2021-08-19 18:09 | 2021-09-03 18:09 |
| Reporter | phunyguy | Assigned To | burakkucat | ||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | resolved | Resolution | fixed | ||
| Summary | 0001127: Kernel missing CONFIG_CRYPTO_FIPS=y | ||||
| Description | Hello, I am trying to use the oVirt playbooks to get some automation going for the hosted engine deployment. It's failing on checking for FIPS support, and failing completely because it's not even enabled in the kernel, which makes it not show up as on/off in /proc. This config option is enabled in Red Hat/CentOS stock kernels, but not enabled in ElRepo. My hope is that it can be included as a kernel config option. Thank you. | ||||
| Steps To Reproduce | # sysctl -n crypto.fips_enabled Outputs on Red Hat derivatives with stock kernel: 0 Outputs on Red Hat derivatives with ElRepo kernel-lt/kernel-ml: sysctl: cannot stat /proc/sys/crypto/fips_enabled: No such file or directory | ||||
| Tags | No tags attached. | ||||
| related to | 0001044 | closed | burakkucat | channel: kernel/el7 | set CONFIG_CRYPTO_FIPS=y in el7/el8 for kernel-lt |
|
|
Please see comments in related: https://elrepo.org/bugs/view.php?id=1044 |
|
|
CONFIG_CRYPTO_FIPS depends on MODULE_SIG: config MODULE_SIG bool "Module signature verification" select MODULE_SIG_FORMAT help Check modules for valid signatures upon load: the signature is simply appended to the module. For more information see <file:Documentation/admin-guide/module-signing.rst>. Note that this option adds the OpenSSL development packages as a kernel build dependency so that the signing tool can use its crypto library. You should enable this option if you wish to use either CONFIG_SECURITY_LOCKDOWN_LSM or lockdown functionality imposed via another LSM - otherwise unsigned modules will be loadable regardless of the lockdown policy. !!!WARNING!!! If you enable this option, you MUST make sure that the module DOES NOT get stripped after being signed. This includes the debuginfo strip done by some packagers (such as rpmbuild) and inclusion into an initramfs that wants the module size reduced. AFAICS, as elrepo do not sign the modules in our kernel builds, this is a non-starter. If we were enable it, I would expect the resulting kernel to fail to boot. |
|
|
Argh.... OK. Thanks anyway. |
|
|
@phunyguy If you would be willing to perform some real-world testing, I could try to build another test-kernel which _may_ or _may_ _not_ be sufficient for your usage case. The last time I looked at this configuration conundrum, the requester for the configuration change ignored everything and failed to assist. So, the offer is there, if you are prepared to assist. |
|
|
@burakkucat, I'll see what I can do. |
|
|
Which kernel package would be more convenient for you to test, -lt or -ml ? |
|
|
I was testing lt, but something like this in my opinion belongs on kernel-ml. |
|
|
Ack. It is now time for my evening meal (TZ=GMT0BST land), so I will try to get something built for you to test by tomorrow. |
|
|
Absolutely no rush on this. I was just looking for a solution that would allow me to progress with CentOS Stream, but CentOS classic 8 and Rocky Linux are working just fine with the kmods. (My hardware needs kmod-isci). This whole thing has been an adventure, trying to engineer a working ovirt solution on this aging hardware. I really liked the idea of a semi-rolling release, kernel included, which is why I was going the route of Stream+kernel-{lt,ml}. Just ran into that snag with an oVirt requirement. |
|
|
@phunyguy CentOS have a SIG now to provide kmod packages for Stream 8, so you should definitely put in a request for kmod-isci In fact, looks like they are already doing builds here: https://pagure.io/centos-sig-kmods/kmod-isci |
|
|
Well lookie there! I didn't even know that was a thing. Maybe all this is moot then. I'm still curious about this test kernel, but I won't make you do the work if you don't want to. |
|
|
I have built a testing version of the kernel-ml package set, for el8, with CONFIG_CRYPTO_FIPS=y. It is based on the linux-5.14-rc6 sources from upstream. The following packages are available -- bpftool-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm kernel-ml-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm kernel-ml-core-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm kernel-ml-devel-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm kernel-ml-doc-5.14.0-0.rc6.el8.elrepo.bcat.noarch.rpm kernel-ml-headers-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm kernel-ml-modules-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm kernel-ml-modules-extra-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm kernel-ml-tools-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm kernel-ml-tools-libs-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm kernel-ml-tools-libs-devel-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm perf-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm python3-perf-5.14.0-0.rc6.el8.elrepo.bcat.x86_64.rpm They may be downloaded from the following location -- https://elrepo.org/people/ajb/devel/kernel-ml/el8/x86_64/RPMS/ |
|
|
Thanks, I will test this very soon. I'm working on a new PXE boot setup at the moment, and once I get that working, I will install a fresh Stream 8 VM for it. I appreciate the time. |
|
|
Actually, I went ahead and just installed a VM manually. This set of packages installed and booted fine, and has the desired result. [root@localhost ~]# sysctl -n crypto.fips_enabled 0 [root@localhost ~]# uname -r 5.14.0-0.rc6.el8.elrepo.bcat.x86_64 |
|
|
Thank you for the successful report. I'll carry that configuration over to my next build, using the linux-5.14-rc7 sources once they have been released, later on Sunday. |
|
|
Great, thank you so much! |
|
|
The kernel-ml-5.14.0-0.rc7.el8.elrepo.bcat package set has now been built and uploaded to -- https://elrepo.org/people/ajb/devel/kernel-ml/el8/x86_64/RPMS/ Please give this new release candidate some testing and check your test system's /var/log/{dmesg,messages} files for any new errors or warnings. Assuming all goes well with the upstream testing and Linus receives positive feedback then I expect him to release the linux-5.14 sources a week today. That, in turn, will result in us releasing the kernel-ml-5.14.0-1.el8.elrepo package set with the CONFIG_CRYPTO_FIPS=y option. |
|
|
All seems well. Here's dmesg if you're curious. # dmesg [ 0.000000] Linux version 5.14.0-0.rc7.el8.elrepo.bcat.x86_64 (mockbuild@41013722077a4a4fbafe1ff1ed84090a) (gcc (GCC) 8.4.1 20200928 (Red Hat 8.4.1-1), GNU ld version 2.30-93.el8) #1 SMP Sun Aug 22 18:33:30 EDT 2021 [ 0.000000] Command line: BOOT_IMAGE=(hd0,msdos1)/vmlinuz-5.14.0-0.rc7.el8.elrepo.bcat.x86_64 root=/dev/mapper/cs-root ro crashkernel=auto resume=/dev/mapper/cs-swap rd.lvm.lv=cs/root rd.lvm.lv=cs/swap rhgb quiet [ 0.000000] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000] signal: max sigframe size: 1776 [ 0.000000] BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x00000000bffd9fff] usable [ 0.000000] BIOS-e820: [mem 0x00000000bffda000-0x00000000bfffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000013fffffff] usable [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.8 present. [ 0.000000] DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 0.000000] Hypervisor detected: KVM [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr ae401001, primary cpu clock [ 0.000004] kvm-clock: using sched offset of 243413383019267 cycles [ 0.000013] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.000021] tsc: Detected 2000.000 MHz processor [ 0.001178] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved [ 0.001183] e820: remove [mem 0x000a0000-0x000fffff] usable [ 0.001188] last_pfn = 0x140000 max_arch_pfn = 0x400000000 [ 0.001255] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.001279] last_pfn = 0xbffda max_arch_pfn = 0x400000000 [ 0.015066] found SMP MP-table at [mem 0x000f5a60-0x000f5a6f] [ 0.015178] Using GB pages for direct mapping [ 0.015492] RAMDISK: [mem 0x345ee000-0x362eefff] [ 0.015513] ACPI: Early table checksum verification disabled [ 0.015559] ACPI: RSDP 0x00000000000F5820 000014 (v00 BOCHS ) [ 0.015572] ACPI: RSDT 0x00000000BFFE151A 000038 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) [ 0.015591] ACPI: FACP 0x00000000BFFE12EC 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) [ 0.015603] ACPI: DSDT 0x00000000BFFDF040 0022AC (v01 BOCHS BXPCDSDT 00000001 BXPC 00000001) [ 0.015610] ACPI: FACS 0x00000000BFFDF000 000040 [ 0.015615] ACPI: APIC 0x00000000BFFE1360 000090 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) [ 0.015621] ACPI: SSDT 0x00000000BFFE13F0 0000CA (v01 BOCHS VMGENID 00000001 BXPC 00000001) [ 0.015626] ACPI: HPET 0x00000000BFFE14BA 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001) [ 0.015632] ACPI: WAET 0x00000000BFFE14F2 000028 (v01 BOCHS BXPCWAET 00000001 BXPC 00000001) [ 0.015636] ACPI: Reserving FACP table memory at [mem 0xbffe12ec-0xbffe135f] [ 0.015648] ACPI: Reserving DSDT table memory at [mem 0xbffdf040-0xbffe12eb] [ 0.015649] ACPI: Reserving FACS table memory at [mem 0xbffdf000-0xbffdf03f] [ 0.015650] ACPI: Reserving APIC table memory at [mem 0xbffe1360-0xbffe13ef] [ 0.015652] ACPI: Reserving SSDT table memory at [mem 0xbffe13f0-0xbffe14b9] [ 0.015653] ACPI: Reserving HPET table memory at [mem 0xbffe14ba-0xbffe14f1] [ 0.015654] ACPI: Reserving WAET table memory at [mem 0xbffe14f2-0xbffe1519] [ 0.016297] No NUMA configuration found [ 0.016308] Faking a node at [mem 0x0000000000000000-0x000000013fffffff] [ 0.016328] NODE_DATA(0) allocated [mem 0x13ffd4000-0x13fffdfff] [ 0.016808] crashkernel: memory value expected [ 0.016854] Zone ranges: [ 0.016860] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.016862] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.016864] Normal [mem 0x0000000100000000-0x000000013fffffff] [ 0.016868] Device empty [ 0.016870] Movable zone start for each node [ 0.016874] Early memory node ranges [ 0.016875] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.016877] node 0: [mem 0x0000000000100000-0x00000000bffd9fff] [ 0.016879] node 0: [mem 0x0000000100000000-0x000000013fffffff] [ 0.016885] Initmem setup node 0 [mem 0x0000000000001000-0x000000013fffffff] [ 0.016902] On node 0, zone DMA: 1 pages in unavailable ranges [ 0.016998] On node 0, zone DMA: 97 pages in unavailable ranges [ 0.034884] On node 0, zone Normal: 38 pages in unavailable ranges [ 0.036706] ACPI: PM-Timer IO Port: 0x608 [ 0.036741] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.036821] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.036832] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.036844] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.036852] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.036860] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.036862] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.036868] ACPI: Using ACPI (MADT) for SMP configuration information [ 0.036871] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 0.036879] TSC deadline timer available [ 0.036885] smpboot: Allowing 4 CPUs, 0 hotplug CPUs [ 0.036914] kvm-guest: KVM setup pv remote TLB flush [ 0.036919] kvm-guest: setup PV sched yield [ 0.036948] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.036951] PM: hibernation: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 0.036953] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.036954] PM: hibernation: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.036956] PM: hibernation: Registered nosave memory: [mem 0xbffda000-0xbfffffff] [ 0.036957] PM: hibernation: Registered nosave memory: [mem 0xc0000000-0xfeffbfff] [ 0.036958] PM: hibernation: Registered nosave memory: [mem 0xfeffc000-0xfeffffff] [ 0.036959] PM: hibernation: Registered nosave memory: [mem 0xff000000-0xfffbffff] [ 0.036961] PM: hibernation: Registered nosave memory: [mem 0xfffc0000-0xffffffff] [ 0.036963] [mem 0xc0000000-0xfeffbfff] available for PCI devices [ 0.036965] Booting paravirtualized kernel on KVM [ 0.036978] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns [ 0.043392] setup_percpu: NR_CPUS:8192 nr_cpumask_bits:4 nr_cpu_ids:4 nr_node_ids:1 [ 0.043994] percpu: Embedded 56 pages/cpu s192512 r8192 d28672 u524288 [ 0.044009] pcpu-alloc: s192512 r8192 d28672 u524288 alloc=1*2097152 [ 0.044015] pcpu-alloc: [0] 0 1 2 3 [ 0.044056] kvm-guest: stealtime: cpu 0, msr 13bc2e080 [ 0.044062] kvm-guest: PV spinlocks enabled [ 0.044065] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.044089] Built 1 zonelists, mobility grouping on. Total pages: 1031898 [ 0.044094] Policy zone: Normal [ 0.044096] Kernel command line: BOOT_IMAGE=(hd0,msdos1)/vmlinuz-5.14.0-0.rc7.el8.elrepo.bcat.x86_64 root=/dev/mapper/cs-root ro crashkernel=auto resume=/dev/mapper/cs-swap rd.lvm.lv=cs/root rd.lvm.lv=cs/swap rhgb quiet [ 0.044412] Unknown command line parameters: rhgb BOOT_IMAGE=(hd0,msdos1)/vmlinuz-5.14.0-0.rc7.el8.elrepo.bcat.x86_64 crashkernel=auto [ 0.045163] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) [ 0.045562] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) [ 0.045691] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.082735] Memory: 3141148K/4193760K available (12296K kernel code, 5841K rwdata, 4596K rodata, 2732K init, 5884K bss, 208428K reserved, 0K cma-reserved) [ 0.082856] random: get_random_u64 called from cache_random_seq_create+0x80/0x170 with crng_init=0 [ 0.083017] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.083041] Kernel/User page tables isolation: enabled [ 0.083082] ftrace: allocating 41062 entries in 161 pages [ 0.104236] ftrace: allocated 161 pages with 3 groups [ 0.104408] rcu: Hierarchical RCU implementation. [ 0.104418] rcu: RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=4. [ 0.104420] Rude variant of Tasks RCU enabled. [ 0.104421] Tracing variant of Tasks RCU enabled. [ 0.104422] rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. [ 0.104424] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 [ 0.110300] NR_IRQS: 524544, nr_irqs: 456, preallocated irqs: 16 [ 0.137596] Console: colour VGA+ 80x25 [ 0.137610] printk: console [tty0] enabled [ 0.137643] ACPI: Core revision 20210604 [ 0.137909] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns [ 0.138125] APIC: Switch to symmetric I/O mode setup [ 0.138612] x2apic enabled [ 0.139157] Switched APIC routing to physical x2apic. [ 0.139160] kvm-guest: setup PV IPIs [ 0.141147] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 0.141196] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x39a85c9bff6, max_idle_ns: 881590591483 ns [ 0.141218] Calibrating delay loop (skipped) preset value.. 4000.00 BogoMIPS (lpj=2000000) [ 0.141222] pid_max: default: 32768 minimum: 301 [ 0.141251] LSM: Security Framework initializing [ 0.141271] Yama: becoming mindful. [ 0.141281] SELinux: Initializing. [ 0.141368] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) [ 0.141381] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) [ 0.141886] x86/cpu: User Mode Instruction Prevention (UMIP) activated [ 0.141976] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 [ 0.141979] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 0.141985] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization [ 0.141988] Spectre V2 : Mitigation: Full generic retpoline [ 0.141989] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 0.141989] Spectre V2 : Enabling Restricted Speculation for firmware calls [ 0.141991] Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier [ 0.141993] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp [ 0.141996] MDS: Mitigation: Clear CPU buffers [ 0.147275] Freeing SMP alternatives memory: 36K [ 0.147444] smpboot: CPU0: Intel(R) Xeon(R) CPU E5-2640 v2 @ 2.00GHz (family: 0x6, model: 0x3e, stepping: 0x4) [ 0.147660] Performance Events: IvyBridge events, Intel PMU driver. [ 0.147700] ... version: 2 [ 0.147701] ... bit width: 48 [ 0.147702] ... generic registers: 4 [ 0.147703] ... value mask: 0000ffffffffffff [ 0.147704] ... max period: 000000007fffffff [ 0.147705] ... fixed-purpose events: 3 [ 0.147706] ... event mask: 000000070000000f [ 0.147963] rcu: Hierarchical SRCU implementation. [ 0.148565] smp: Bringing up secondary CPUs ... [ 0.148714] x86: Booting SMP configuration: [ 0.148716] .... node #0, CPUs: #1 [ 0.029709] kvm-clock: cpu 1, msr ae401041, secondary cpu clock [ 0.149145] kvm-guest: stealtime: cpu 1, msr 13bcae080 [ 0.149393] #2 [ 0.029709] kvm-clock: cpu 2, msr ae401081, secondary cpu clock [ 0.029709] smpboot: CPU 2 Converting physical 0 to logical die 1 [ 0.150241] kvm-guest: stealtime: cpu 2, msr 13bd2e080 [ 0.150376] #3 [ 0.029709] kvm-clock: cpu 3, msr ae4010c1, secondary cpu clock [ 0.150839] kvm-guest: stealtime: cpu 3, msr 13bdae080 [ 0.150839] smp: Brought up 1 node, 4 CPUs [ 0.150839] smpboot: Max logical packages: 2 [ 0.150839] smpboot: Total of 4 processors activated (16000.00 BogoMIPS) [ 0.153220] node 0 deferred pages initialised in 3ms [ 0.155487] devtmpfs: initialized [ 0.155487] x86/mm: Memory block size: 128MB [ 0.156361] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns [ 0.156368] futex hash table entries: 1024 (order: 4, 65536 bytes, linear) [ 0.156463] pinctrl core: initialized pinctrl subsystem [ 0.156915] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.157058] DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations [ 0.157066] DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations [ 0.157071] DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations [ 0.157071] audit: initializing netlink subsys (disabled) [ 0.157444] thermal_sys: Registered thermal governor 'fair_share' [ 0.157444] thermal_sys: Registered thermal governor 'bang_bang' [ 0.157444] thermal_sys: Registered thermal governor 'step_wise' [ 0.157444] thermal_sys: Registered thermal governor 'user_space' [ 0.157444] audit: type=2000 audit(1629725135.061:1): state=initialized audit_enabled=0 res=1 [ 0.157444] cpuidle: using governor menu [ 0.157483] ACPI: bus type PCI registered [ 0.157487] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 0.159312] PCI: Using configuration type 1 for base access [ 0.159433] core: PMU erratum BJ122, BV98, HSD29 workaround disabled, HT off [ 0.161223] Kprobes globally optimized [ 0.161327] HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages [ 0.161327] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages [ 0.207528] cryptd: max_cpu_qlen set to 1000 [ 0.209298] wait_for_initramfs() called before rootfs_initcalls [ 0.215284] ACPI: PRMT not present [ 0.215296] ACPI: Added _OSI(Module Device) [ 0.215298] ACPI: Added _OSI(Processor Device) [ 0.215300] ACPI: Added _OSI(3.0 _SCP Extensions) [ 0.215301] ACPI: Added _OSI(Processor Aggregator Device) [ 0.215302] ACPI: Added _OSI(Linux-Dell-Video) [ 0.215304] ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) [ 0.215305] ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) [ 0.216214] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 0.216437] ACPI: Interpreter enabled [ 0.216464] ACPI: PM: (supports S0 S3 S4 S5) [ 0.216466] ACPI: Using IOAPIC for interrupt routing [ 0.216481] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 0.216669] ACPI: Enabled 3 GPEs in block 00 to 0F [ 0.222223] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 0.222223] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] [ 0.222223] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 0.222223] acpiphp: Slot [3] registered [ 0.222223] acpiphp: Slot [4] registered [ 0.222223] acpiphp: Slot [5] registered [ 0.222223] acpiphp: Slot [6] registered [ 0.222223] acpiphp: Slot [7] registered [ 0.222223] acpiphp: Slot [8] registered [ 0.222223] acpiphp: Slot [9] registered [ 0.222223] acpiphp: Slot [10] registered [ 0.222223] acpiphp: Slot [11] registered [ 0.222223] acpiphp: Slot [12] registered [ 0.222223] acpiphp: Slot [13] registered [ 0.222223] acpiphp: Slot [14] registered [ 0.222223] acpiphp: Slot [15] registered [ 0.222223] acpiphp: Slot [16] registered [ 0.222231] acpiphp: Slot [17] registered [ 0.222281] acpiphp: Slot [18] registered [ 0.222308] acpiphp: Slot [19] registered [ 0.222348] acpiphp: Slot [20] registered [ 0.222374] acpiphp: Slot [21] registered [ 0.222416] acpiphp: Slot [22] registered [ 0.222442] acpiphp: Slot [23] registered [ 0.222469] acpiphp: Slot [24] registered [ 0.222495] acpiphp: Slot [25] registered [ 0.222522] acpiphp: Slot [26] registered [ 0.222551] acpiphp: Slot [27] registered [ 0.222578] acpiphp: Slot [28] registered [ 0.222605] acpiphp: Slot [29] registered [ 0.222668] PCI host bridge to bus 0000:00 [ 0.222671] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 0.222678] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 0.222680] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 0.222682] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 0.222684] pci_bus 0000:00: root bus resource [mem 0x140000000-0x1bfffffff window] [ 0.222686] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.222769] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 0.224223] pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 [ 0.224739] pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 [ 0.228223] pci 0000:00:01.1: reg 0x20: [io 0xe100-0xe10f] [ 0.229583] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] [ 0.229586] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] [ 0.229587] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] [ 0.229603] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] [ 0.230519] pci 0000:00:01.2: [8086:7020] type 00 class 0x0c0300 [ 0.233924] pci 0000:00:01.2: reg 0x20: [io 0xe0c0-0xe0df] [ 0.235791] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 [ 0.236642] pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI [ 0.236658] pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB [ 0.237022] pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 [ 0.237871] pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] [ 0.240050] pci 0000:00:02.0: reg 0x18: [mem 0xfea50000-0xfea50fff] [ 0.244261] pci 0000:00:02.0: reg 0x30: [mem 0xfea40000-0xfea4ffff pref] [ 0.245234] pci 0000:00:03.0: [1af4:1002] type 00 class 0x00ff00 [ 0.246220] pci 0000:00:03.0: reg 0x10: [io 0xe000-0xe03f] [ 0.250638] pci 0000:00:03.0: reg 0x20: [mem 0xfe400000-0xfe403fff 64bit pref] [ 0.252425] pci 0000:00:05.0: [1af4:1004] type 00 class 0x010000 [ 0.253879] pci 0000:00:05.0: reg 0x10: [io 0xe040-0xe07f] [ 0.255008] pci 0000:00:05.0: reg 0x14: [mem 0xfea51000-0xfea51fff] [ 0.258221] pci 0000:00:05.0: reg 0x20: [mem 0xfe404000-0xfe407fff 64bit pref] [ 0.262268] pci 0000:00:08.0: [1af4:1003] type 00 class 0x078000 [ 0.263234] pci 0000:00:08.0: reg 0x10: [io 0xe080-0xe0bf] [ 0.264221] pci 0000:00:08.0: reg 0x14: [mem 0xfea52000-0xfea52fff] [ 0.267221] pci 0000:00:08.0: reg 0x20: [mem 0xfe408000-0xfe40bfff 64bit pref] [ 0.270079] pci 0000:00:12.0: [1af4:1000] type 00 class 0x020000 [ 0.270757] pci 0000:00:12.0: reg 0x10: [io 0xe0e0-0xe0ff] [ 0.271689] pci 0000:00:12.0: reg 0x14: [mem 0xfea53000-0xfea53fff] [ 0.273797] pci 0000:00:12.0: reg 0x20: [mem 0xfe40c000-0xfe40ffff 64bit pref] [ 0.275004] pci 0000:00:12.0: reg 0x30: [mem 0xfea00000-0xfea3ffff pref] [ 0.276247] pci 0000:00:1e.0: [1b36:0001] type 01 class 0x060400 [ 0.278591] pci 0000:00:1e.0: reg 0x10: [mem 0xfea54000-0xfea540ff 64bit] [ 0.280641] pci 0000:00:1f.0: [1b36:0001] type 01 class 0x060400 [ 0.281684] pci 0000:00:1f.0: reg 0x10: [mem 0xfea55000-0xfea550ff 64bit] [ 0.283849] pci_bus 0000:01: extended config space not accessible [ 0.284251] acpiphp: Slot [0] registered [ 0.284287] acpiphp: Slot [1] registered [ 0.284315] acpiphp: Slot [2] registered [ 0.284353] acpiphp: Slot [3-2] registered [ 0.284390] acpiphp: Slot [4-2] registered [ 0.284422] acpiphp: Slot [5-2] registered [ 0.284453] acpiphp: Slot [6-2] registered [ 0.284498] acpiphp: Slot [7-2] registered [ 0.284529] acpiphp: Slot [8-2] registered [ 0.284572] acpiphp: Slot [9-2] registered [ 0.284606] acpiphp: Slot [10-2] registered [ 0.284636] acpiphp: Slot [11-2] registered [ 0.284665] acpiphp: Slot [12-2] registered [ 0.284694] acpiphp: Slot [13-2] registered [ 0.284723] acpiphp: Slot [14-2] registered [ 0.284752] acpiphp: Slot [15-2] registered [ 0.284786] acpiphp: Slot [16-2] registered [ 0.284820] acpiphp: Slot [17-2] registered [ 0.284850] acpiphp: Slot [18-2] registered [ 0.284880] acpiphp: Slot [19-2] registered [ 0.284909] acpiphp: Slot [20-2] registered [ 0.284937] acpiphp: Slot [21-2] registered [ 0.284966] acpiphp: Slot [22-2] registered [ 0.284999] acpiphp: Slot [23-2] registered [ 0.285029] acpiphp: Slot [24-2] registered [ 0.285057] acpiphp: Slot [25-2] registered [ 0.285101] acpiphp: Slot [26-2] registered [ 0.285131] acpiphp: Slot [27-2] registered [ 0.285176] acpiphp: Slot [28-2] registered [ 0.285212] acpiphp: Slot [29-2] registered [ 0.285232] acpiphp: Slot [30] registered [ 0.285260] acpiphp: Slot [31] registered [ 0.285710] pci 0000:00:1e.0: PCI bridge to [bus 01] [ 0.285743] pci 0000:00:1e.0: bridge window [io 0xd000-0xdfff] [ 0.285769] pci 0000:00:1e.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 0.285820] pci 0000:00:1e.0: bridge window [mem 0xfe200000-0xfe3fffff 64bit pref] [ 0.286483] pci_bus 0000:02: extended config space not accessible [ 0.286776] acpiphp: Slot [0-2] registered [ 0.286815] acpiphp: Slot [1-2] registered [ 0.286845] acpiphp: Slot [2-2] registered [ 0.286875] acpiphp: Slot [3-3] registered [ 0.286919] acpiphp: Slot [4-3] registered [ 0.287241] acpiphp: Slot [5-3] registered [ 0.287281] acpiphp: Slot [6-3] registered [ 0.287318] acpiphp: Slot [7-3] registered [ 0.287351] acpiphp: Slot [8-3] registered [ 0.287383] acpiphp: Slot [9-3] registered [ 0.287415] acpiphp: Slot [10-3] registered [ 0.287447] acpiphp: Slot [11-3] registered [ 0.287480] acpiphp: Slot [12-3] registered [ 0.287513] acpiphp: Slot [13-3] registered [ 0.287564] acpiphp: Slot [14-3] registered [ 0.287596] acpiphp: Slot [15-3] registered [ 0.287646] acpiphp: Slot [16-3] registered [ 0.287677] acpiphp: Slot [17-3] registered [ 0.287706] acpiphp: Slot [18-3] registered [ 0.287736] acpiphp: Slot [19-3] registered [ 0.287778] acpiphp: Slot [20-3] registered [ 0.287808] acpiphp: Slot [21-3] registered [ 0.287838] acpiphp: Slot [22-3] registered [ 0.287868] acpiphp: Slot [23-3] registered [ 0.287897] acpiphp: Slot [24-3] registered [ 0.287943] acpiphp: Slot [25-3] registered [ 0.287978] acpiphp: Slot [26-3] registered [ 0.288011] acpiphp: Slot [27-3] registered [ 0.288043] acpiphp: Slot [28-3] registered [ 0.288102] acpiphp: Slot [29-3] registered [ 0.288136] acpiphp: Slot [30-2] registered [ 0.288168] acpiphp: Slot [31-2] registered [ 0.288606] pci 0000:00:1f.0: PCI bridge to [bus 02] [ 0.288656] pci 0000:00:1f.0: bridge window [io 0xc000-0xcfff] [ 0.288683] pci 0000:00:1f.0: bridge window [mem 0xfe600000-0xfe7fffff] [ 0.288732] pci 0000:00:1f.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 0.290359] ACPI: PCI: Interrupt link LNKA configured for IRQ 10 [ 0.290525] ACPI: PCI: Interrupt link LNKB configured for IRQ 10 [ 0.290700] ACPI: PCI: Interrupt link LNKC configured for IRQ 11 [ 0.290856] ACPI: PCI: Interrupt link LNKD configured for IRQ 11 [ 0.290950] ACPI: PCI: Interrupt link LNKS configured for IRQ 9 [ 0.291768] iommu: Default domain type: Passthrough [ 0.292221] pci 0000:00:02.0: vgaarb: setting as boot VGA device [ 0.292221] pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 0.292221] pci 0000:00:02.0: vgaarb: bridge control possible [ 0.292221] vgaarb: loaded [ 0.292221] SCSI subsystem initialized [ 0.292221] ACPI: bus type USB registered [ 0.292221] usbcore: registered new interface driver usbfs [ 0.292221] usbcore: registered new interface driver hub [ 0.292221] usbcore: registered new device driver usb [ 0.292221] pps_core: LinuxPPS API ver. 1 registered [ 0.292221] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> [ 0.292221] PTP clock support registered [ 0.292269] EDAC MC: Ver: 3.0.0 [ 0.293657] NetLabel: Initializing [ 0.293657] NetLabel: domain hash size = 128 [ 0.293657] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 0.293657] NetLabel: unlabeled traffic allowed by default [ 0.294223] PCI: Using ACPI for IRQ routing [ 0.294223] PCI: pci_cache_line_size set to 64 bytes [ 0.294223] e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] [ 0.294223] e820: reserve RAM buffer [mem 0xbffda000-0xbfffffff] [ 0.294513] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 [ 0.294524] hpet0: 3 comparators, 64-bit 100.000000 MHz counter [ 0.299314] clocksource: Switched to clocksource kvm-clock [ 0.313305] VFS: Disk quotas dquot_6.6.0 [ 0.313330] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 0.313466] pnp: PnP ACPI init [ 0.313613] pnp 00:02: [dma 2] [ 0.313964] pnp: PnP ACPI: found 4 devices [ 0.320464] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 0.320564] NET: Registered PF_INET protocol family [ 0.320738] IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) [ 0.321882] tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) [ 0.321892] TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) [ 0.321941] TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) [ 0.322015] TCP: Hash tables configured (established 32768 bind 32768) [ 0.322105] UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) [ 0.322118] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) [ 0.322239] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 0.322264] NET: Registered PF_XDP protocol family [ 0.322288] pci 0000:00:1e.0: PCI bridge to [bus 01] [ 0.322313] pci 0000:00:1e.0: bridge window [io 0xd000-0xdfff] [ 0.323202] pci 0000:00:1e.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 0.323755] pci 0000:00:1e.0: bridge window [mem 0xfe200000-0xfe3fffff 64bit pref] [ 0.324933] pci 0000:00:1f.0: PCI bridge to [bus 02] [ 0.324954] pci 0000:00:1f.0: bridge window [io 0xc000-0xcfff] [ 0.325839] pci 0000:00:1f.0: bridge window [mem 0xfe600000-0xfe7fffff] [ 0.326435] pci 0000:00:1f.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 0.328018] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] [ 0.328022] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] [ 0.328024] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] [ 0.328026] pci_bus 0000:00: resource 7 [mem 0xc0000000-0xfebfffff window] [ 0.328042] pci_bus 0000:00: resource 8 [mem 0x140000000-0x1bfffffff window] [ 0.328044] pci_bus 0000:01: resource 0 [io 0xd000-0xdfff] [ 0.328046] pci_bus 0000:01: resource 1 [mem 0xfe800000-0xfe9fffff] [ 0.328048] pci_bus 0000:01: resource 2 [mem 0xfe200000-0xfe3fffff 64bit pref] [ 0.328050] pci_bus 0000:02: resource 0 [io 0xc000-0xcfff] [ 0.328051] pci_bus 0000:02: resource 1 [mem 0xfe600000-0xfe7fffff] [ 0.328053] pci_bus 0000:02: resource 2 [mem 0xfe000000-0xfe1fffff 64bit pref] [ 0.328147] pci 0000:00:01.0: PIIX3: Enabling Passive Release [ 0.328168] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 0.328191] pci 0000:00:01.0: Activating ISA DMA hang workarounds [ 0.349279] ACPI: \_SB_.LNKD: Enabled at IRQ 11 [ 0.370322] pci 0000:00:01.2: quirk_usb_early_handoff+0x0/0x620 took 41098 usecs [ 0.370471] pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 0.370575] PCI: CLS 0 bytes, default 64 [ 0.370607] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 0.370609] software IO TLB: mapped [mem 0x00000000bbfda000-0x00000000bffda000] (64MB) [ 0.370694] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x39a85c9bff6, max_idle_ns: 881590591483 ns [ 0.370763] Trying to unpack rootfs image as initramfs... [ 0.374684] Initialise system trusted keyrings [ 0.374702] Key type blacklist registered [ 0.375045] workingset: timestamp_bits=36 max_order=20 bucket_order=0 [ 0.376906] zbud: loaded [ 0.377761] integrity: Platform Keyring initialized [ 0.390622] NET: Registered PF_ALG protocol family [ 0.390627] Key type asymmetric registered [ 0.390636] Asymmetric key parser 'x509' registered [ 0.390651] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 247) [ 0.390974] io scheduler mq-deadline registered [ 0.390976] io scheduler kyber registered [ 0.391030] io scheduler bfq registered [ 0.391388] atomic64_test: passed for x86-64 platform with CX8 and with SSE [ 0.391632] shpchp 0000:00:1e.0: Requesting control of SHPC hotplug via OSHP (\_SB_.PCI0.SF0_) [ 0.391641] shpchp 0000:00:1e.0: Requesting control of SHPC hotplug via OSHP (\_SB_.PCI0) [ 0.391650] shpchp 0000:00:1e.0: Cannot get control of SHPC hotplug [ 0.391728] shpchp 0000:00:1f.0: Requesting control of SHPC hotplug via OSHP (\_SB_.PCI0.SF8_) [ 0.391733] shpchp 0000:00:1f.0: Requesting control of SHPC hotplug via OSHP (\_SB_.PCI0) [ 0.391736] shpchp 0000:00:1f.0: Cannot get control of SHPC hotplug [ 0.391749] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4 [ 0.391948] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 0.392013] ACPI: button: Power Button [PWRF] [ 0.413781] ACPI: \_SB_.LNKC: Enabled at IRQ 10 [ 0.436508] ACPI: \_SB_.LNKA: Enabled at IRQ 10 [ 0.482421] ACPI: \_SB_.LNKB: Enabled at IRQ 11 [ 0.484258] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 0.484968] Non-volatile memory driver v1.3 [ 0.485004] Linux agpgart interface v0.103 [ 0.485901] rdac: device handler registered [ 0.486032] hp_sw: device handler registered [ 0.486035] emc: device handler registered [ 0.486113] alua: device handler registered [ 0.486332] libphy: Fixed MDIO Bus: probed [ 0.486408] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 0.486413] ehci-pci: EHCI PCI platform driver [ 0.486435] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 0.486446] ohci-pci: OHCI PCI platform driver [ 0.486468] uhci_hcd: USB Universal Host Controller Interface driver [ 0.508583] uhci_hcd 0000:00:01.2: UHCI Host Controller [ 0.508676] uhci_hcd 0000:00:01.2: new USB bus registered, assigned bus number 1 [ 0.508723] uhci_hcd 0000:00:01.2: detected 2 ports [ 0.508948] uhci_hcd 0000:00:01.2: irq 11, io base 0x0000e0c0 [ 0.509123] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 5.14 [ 0.509127] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 0.509132] usb usb1: Product: UHCI Host Controller [ 0.509134] usb usb1: Manufacturer: Linux 5.14.0-0.rc7.el8.elrepo.bcat.x86_64 uhci_hcd [ 0.509135] usb usb1: SerialNumber: 0000:00:01.2 [ 0.509312] hub 1-0:1.0: USB hub found [ 0.509332] hub 1-0:1.0: 2 ports detected [ 0.509587] usbcore: registered new interface driver usbserial_generic [ 0.509604] usbserial: USB Serial support registered for generic [ 0.509645] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 0.510987] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 0.511003] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 0.511245] mousedev: PS/2 mouse device common for all mice [ 0.511628] rtc_cmos 00:03: RTC can wake from S4 [ 0.512383] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 0.513576] input: VirtualPS/2 VMware VMMouse as /devices/platform/i8042/serio1/input/input4 [ 0.513590] rtc_cmos 00:03: registered as rtc0 [ 0.513760] rtc_cmos 00:03: setting system clock to 2021-08-23T13:25:35 UTC (1629725135) [ 0.513856] rtc_cmos 00:03: alarms up to one day, y3k, 242 bytes nvram, hpet irqs [ 0.513870] intel_pstate: CPU model not supported [ 0.514185] input: VirtualPS/2 VMware VMMouse as /devices/platform/i8042/serio1/input/input3 [ 0.514578] hid: raw HID events driver (C) Jiri Kosina [ 0.514653] usbcore: registered new interface driver usbhid [ 0.514655] usbhid: USB HID core driver [ 0.514774] Initializing XFRM netlink socket [ 0.514939] NET: Registered PF_INET6 protocol family [ 0.515582] Segment Routing with IPv6 [ 0.515614] NET: Registered PF_PACKET protocol family [ 0.515712] mpls_gso: MPLS GSO support [ 0.516282] IPI shorthand broadcast: enabled [ 0.516301] AVX version of gcm_enc/dec engaged. [ 0.516462] AES CTR mode by8 optimization enabled [ 0.732307] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 0.901753] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 0.901761] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 0.901763] usb 1-1: Product: QEMU USB Tablet [ 0.901765] usb 1-1: Manufacturer: QEMU [ 0.901767] usb 1-1: SerialNumber: 28754-0000:00:01.2-1 [ 0.910399] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input5 [ 0.910532] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:01.2-1/input0 [ 0.917253] Freeing initrd memory: 29700K [ 0.951140] sched_clock: Marking stable (922403066, 28709681)->(990211686, -39098939) [ 0.951570] registered taskstats version 1 [ 0.951744] Loading compiled-in X.509 certificates [ 0.952001] alg: No test for pkcs1pad(rsa,sha1) (pkcs1pad(rsa-generic,sha1)) [ 0.952939] Loaded X.509 cert 'Build time autogenerated kernel key: 7d77ed950f4c78c085207da440ca04d9ea1d3d25' [ 0.952991] zswap: loaded using pool lzo/zbud [ 0.958351] Key type encrypted registered [ 0.958374] ima: No TPM chip found, activating TPM-bypass! [ 0.958385] ima: Allocated hash algorithm: sha1 [ 0.958410] ima: No architecture policies found [ 0.958427] evm: Initialising EVM extended attributes: [ 0.958428] evm: security.selinux [ 0.958430] evm: security.SMACK64 (disabled) [ 0.958431] evm: security.SMACK64EXEC (disabled) [ 0.958432] evm: security.SMACK64TRANSMUTE (disabled) [ 0.958433] evm: security.SMACK64MMAP (disabled) [ 0.958433] evm: security.apparmor (disabled) [ 0.958434] evm: security.ima [ 0.958435] evm: security.capability [ 0.958436] evm: HMAC attrs: 0x1 [ 0.958978] RAS: Correctable Errors collector initialized. [ 0.962591] Freeing unused decrypted memory: 2036K [ 0.964917] Freeing unused kernel image (initmem) memory: 2732K [ 0.969326] Write protecting the kernel read-only data: 20480k [ 0.971474] Freeing unused kernel image (text/rodata gap) memory: 2036K [ 0.973021] Freeing unused kernel image (rodata/data gap) memory: 1548K [ 0.973104] Run /init as init process [ 0.973109] with arguments: [ 0.973111] /init [ 0.973112] rhgb [ 0.973113] with environment: [ 0.973114] HOME=/ [ 0.973115] TERM=linux [ 0.973116] BOOT_IMAGE=(hd0,msdos1)/vmlinuz-5.14.0-0.rc7.el8.elrepo.bcat.x86_64 [ 0.973117] crashkernel=auto [ 0.988512] systemd[1]: systemd 239 (239-49.el8) running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=legacy) [ 0.988636] systemd[1]: Detected virtualization kvm. [ 0.988643] systemd[1]: Detected architecture x86-64. [ 0.988647] systemd[1]: Running in initial RAM disk. [ 1.000271] systemd[1]: Set hostname to <localhost.localdomain>. [ 1.077638] random: systemd: uninitialized urandom read (16 bytes read) [ 1.077773] systemd[1]: Listening on udev Control Socket. [ 1.077854] random: systemd: uninitialized urandom read (16 bytes read) [ 1.077945] systemd[1]: Listening on udev Kernel Socket. [ 1.077977] random: systemd: uninitialized urandom read (16 bytes read) [ 1.077991] systemd[1]: Reached target Timers. [ 1.078014] systemd[1]: Reached target Slices. [ 1.079173] systemd[1]: Created slice system-systemd\x2dhibernate\x2dresume.slice. [ 1.109789] fuse: module verification failed: signature and/or required key missing - tainting kernel [ 1.112575] fuse: init (API version 7.34) [ 1.585340] device-mapper: uevent: version 1.0.3 [ 1.585478] device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com [ 1.771742] FDC 0 is a S82078B [ 1.795161] scsi host0: Virtio SCSI HBA [ 1.796782] scsi 0:0:0:0: Direct-Access QEMU QEMU HARDDISK 2.5+ PQ: 0 ANSI: 5 [ 1.817926] random: fast init done [ 1.836309] libata version 3.00 loaded. [ 1.838326] ata_piix 0000:00:01.1: version 2.13 [ 1.843400] scsi host1: ata_piix [ 1.845285] scsi host2: ata_piix [ 1.845382] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xe100 irq 14 [ 1.845387] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xe108 irq 15 [ 1.860977] bochs-drm 0000:00:02.0: vgaarb: deactivate vga console [ 1.864491] virtio_net virtio3 ens18: renamed from eth0 [ 1.876350] Console: switching to colour dummy device 80x25 [ 1.876557] scsi 0:0:0:0: Attached scsi generic sg0 type 0 [ 1.876620] [drm] Found bochs VGA, ID 0xb0c0. [ 1.876624] [drm] Framebuffer size 16384 kB @ 0xfd000000, mmio @ 0xfea50000. [ 1.879161] [drm] Found EDID data blob. [ 1.879590] [drm] Initialized bochs-drm 1.0.0 20130925 for 0000:00:02.0 on minor 0 [ 1.881400] fbcon: bochs-drm (fb0) is primary device [ 1.884411] sd 0:0:0:0: Power-on or device reset occurred [ 1.885410] Console: switching to colour frame buffer device 128x48 [ 1.886072] sd 0:0:0:0: [sda] 134217728 512-byte logical blocks: (68.7 GB/64.0 GiB) [ 1.886135] sd 0:0:0:0: [sda] Write Protect is off [ 1.886138] sd 0:0:0:0: [sda] Mode Sense: 63 00 00 08 [ 1.886244] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 1.887160] bochs-drm 0000:00:02.0: [drm] fb0: bochs-drm frame buffer device [ 1.889565] sda: sda1 sda2 [ 1.898527] sd 0:0:0:0: [sda] Attached SCSI disk [ 2.003169] ata2.01: NODEV after polling detection [ 2.003676] ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 [ 2.005269] scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 [ 2.006455] scsi 2:0:0:0: Attached scsi generic sg1 type 5 [ 2.019805] sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray [ 2.019811] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 2.047673] sr 2:0:0:0: Attached scsi CD-ROM sr0 [ 2.827068] SGI XFS with ACLs, security attributes, quota, no debug enabled [ 2.834382] XFS (dm-0): Mounting V5 Filesystem [ 3.211867] XFS (dm-0): Ending clean mount [ 3.563316] random: crng init done [ 3.563321] random: 7 urandom warning(s) missed due to ratelimiting [ 3.909150] printk: systemd: 17 output lines suppressed due to ratelimiting [ 4.301698] audit: type=1404 audit(1629725139.287:2): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 4.637476] SELinux: Permission watch in class filesystem not defined in policy. [ 4.637486] SELinux: Permission watch in class file not defined in policy. [ 4.637487] SELinux: Permission watch_mount in class file not defined in policy. [ 4.637489] SELinux: Permission watch_sb in class file not defined in policy. [ 4.637490] SELinux: Permission watch_with_perm in class file not defined in policy. [ 4.637491] SELinux: Permission watch_reads in class file not defined in policy. [ 4.637494] SELinux: Permission watch in class dir not defined in policy. [ 4.637495] SELinux: Permission watch_mount in class dir not defined in policy. [ 4.637496] SELinux: Permission watch_sb in class dir not defined in policy. [ 4.637497] SELinux: Permission watch_with_perm in class dir not defined in policy. [ 4.637498] SELinux: Permission watch_reads in class dir not defined in policy. [ 4.637501] SELinux: Permission watch in class lnk_file not defined in policy. [ 4.637502] SELinux: Permission watch_mount in class lnk_file not defined in policy. [ 4.637503] SELinux: Permission watch_sb in class lnk_file not defined in policy. [ 4.637504] SELinux: Permission watch_with_perm in class lnk_file not defined in policy. [ 4.637505] SELinux: Permission watch_reads in class lnk_file not defined in policy. [ 4.637507] SELinux: Permission watch in class chr_file not defined in policy. [ 4.637508] SELinux: Permission watch_mount in class chr_file not defined in policy. [ 4.637509] SELinux: Permission watch_sb in class chr_file not defined in policy. [ 4.637510] SELinux: Permission watch_with_perm in class chr_file not defined in policy. [ 4.637510] SELinux: Permission watch_reads in class chr_file not defined in policy. [ 4.637512] SELinux: Permission watch in class blk_file not defined in policy. [ 4.637513] SELinux: Permission watch_mount in class blk_file not defined in policy. [ 4.637514] SELinux: Permission watch_sb in class blk_file not defined in policy. [ 4.637515] SELinux: Permission watch_with_perm in class blk_file not defined in policy. [ 4.637516] SELinux: Permission watch_reads in class blk_file not defined in policy. [ 4.637518] SELinux: Permission watch in class sock_file not defined in policy. [ 4.637519] SELinux: Permission watch_mount in class sock_file not defined in policy. [ 4.637520] SELinux: Permission watch_sb in class sock_file not defined in policy. [ 4.637521] SELinux: Permission watch_with_perm in class sock_file not defined in policy. [ 4.637522] SELinux: Permission watch_reads in class sock_file not defined in policy. [ 4.637524] SELinux: Permission watch in class fifo_file not defined in policy. [ 4.637525] SELinux: Permission watch_mount in class fifo_file not defined in policy. [ 4.637526] SELinux: Permission watch_sb in class fifo_file not defined in policy. [ 4.637527] SELinux: Permission watch_with_perm in class fifo_file not defined in policy. [ 4.637528] SELinux: Permission watch_reads in class fifo_file not defined in policy. [ 4.637569] SELinux: Permission perfmon in class capability2 not defined in policy. [ 4.637570] SELinux: Permission bpf in class capability2 not defined in policy. [ 4.637576] SELinux: Permission perfmon in class cap2_userns not defined in policy. [ 4.637577] SELinux: Permission bpf in class cap2_userns not defined in policy. [ 4.637619] SELinux: Class lockdown not defined in policy. [ 4.637620] SELinux: Class anon_inode not defined in policy. [ 4.637621] SELinux: the above unknown classes and permissions will be allowed [ 4.641949] SELinux: policy capability network_peer_controls=1 [ 4.641957] SELinux: policy capability open_perms=1 [ 4.641958] SELinux: policy capability extended_socket_class=1 [ 4.641959] SELinux: policy capability always_check_network=0 [ 4.641960] SELinux: policy capability cgroup_seclabel=1 [ 4.641961] SELinux: policy capability nnp_nosuid_transition=1 [ 4.641962] SELinux: policy capability genfs_seclabel_symlinks=0 [ 4.689983] audit: type=1403 audit(1629725139.675:3): auid=4294967295 ses=4294967295 lsm=selinux res=1 [ 4.692464] systemd[1]: Successfully loaded SELinux policy in 400.447ms. [ 4.840044] systemd[1]: Relabelled /dev, /run and /sys/fs/cgroup in 42.922ms. [ 4.877561] systemd[1]: systemd 239 (239-49.el8) running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=legacy) [ 4.877655] systemd[1]: Detected virtualization kvm. [ 4.877688] systemd[1]: Detected architecture x86-64. [ 4.892659] systemd[1]: Set hostname to <localhost.localdomain>. [ 6.185694] systemd[1]: systemd-journald.service: Succeeded. [ 6.187945] systemd[1]: initrd-switch-root.service: Succeeded. [ 6.188670] systemd[1]: Stopped Switch Root. [ 6.190291] systemd[1]: systemd-journald.service: Service has no hold-off time (RestartSec=0), scheduling restart. [ 6.190397] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 6.190552] systemd[1]: Stopped Journal Service. [ 6.289287] Adding 4157436k swap on /dev/mapper/cs-swap. Priority:-2 extents:1 across:4157436k FS [ 6.347974] xfs filesystem being remounted at / supports timestamps until 2038 (0x7fffffff) [ 7.294406] input: PC Speaker as /devices/platform/pcspkr/input/input6 [ 7.313324] piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 [ 7.720914] XFS (dm-2): Mounting V5 Filesystem [ 7.722890] XFS (sda1): Mounting V5 Filesystem [ 7.896809] XFS (dm-2): Ending clean mount [ 7.930029] xfs filesystem being mounted at /home supports timestamps until 2038 (0x7fffffff) [ 8.825764] XFS (sda1): Ending clean mount [ 8.838289] xfs filesystem being mounted at /boot supports timestamps until 2038 (0x7fffffff) [ 9.267554] audit: type=1400 audit(1629725144.253:4): avc: denied { fowner } for pid=766 comm="auditd" capability=3 scontext=system_u:system_r:auditd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=capability permissive=0 [ 9.267564] audit: type=1400 audit(1629725144.253:5): avc: denied { fowner } for pid=766 comm="auditd" capability=3 scontext=system_u:system_r:auditd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=capability permissive=0 [ 9.267567] audit: type=1400 audit(1629725144.253:6): avc: denied { fowner } for pid=766 comm="auditd" capability=3 scontext=system_u:system_r:auditd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=capability permissive=0 [ 9.267601] audit: type=1400 audit(1629725144.253:7): avc: denied { fowner } for pid=766 comm="auditd" capability=3 scontext=system_u:system_r:auditd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=capability permissive=0 [ 9.267604] audit: type=1400 audit(1629725144.253:8): avc: denied { fowner } for pid=766 comm="auditd" capability=3 scontext=system_u:system_r:auditd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=capability permissive=0 |
|
|
Oh I have another question. When the next major kernel-lt is released from elrepo, will this config change carry over to that? |
|
|
[quote] When the next major kernel-lt is released from elrepo, will this config change carry over to that? [/quote] The next major update to the kernel-lt package set will occur when the linux-5.4.X branch is declared EOL. The current, publicly stated, date for that event is December 2025. [1] If you would like the CONFIG_CRYPYO_FIPS option to be set for the kernel-lt package set, then I could certainly take a look at implementing it once we are certain that nothing untoward is occurring in the kernel-ml package set. [1] https://www.kernel.org/category/releases.html |
|
|
Ahh ok, I wasn't sure what the actual process was for the kernel-lt set. I didn't know if it had its own config, or if the kernel-ml config was imported to the new incoming kernel-lt package. Kind of like how Arch does it, where linux rolls along on the stable kernel versions, and linux-lts rolls along on the longterm kernel versions, and once it comes time to version bump linux-lts to the next major release, the stable kernel and config was converted to the next linux-lts package. I guess that doesn't make sense in what you described the process as being, as kernel-lt doesn't roll like kernel-ml does, it follows RedHat release cycles. Thanks for the information. I appreciate all the work. |
|
|
@phunyguy -- I'm prepared to import that configuration option into the current kernel-lt package set (for el8) once I'm sure that all is well with the (upcoming) new kernel-ml package set. Let's see how things pan out . . . You can always give me a ping in #elrepo (even though it appears I'm not there to respond, I will (within 24 hours) see it) or, even better, open a new RFE, here, against the kernel-lt package set. |
|
|
The configuration option has now been queued to be applied to the next builds of the kernel-lt package set, both el7 & el8. |
|
|
The kernel-lt & kernel-ml package sets, for both el7 & el8, released earlier today [1][2][3][4], now have the requested configuration option enabled. Now closing as "resolved/fixed". [1] https://lists.elrepo.org/pipermail/elrepo/2021-September/005831.html [2] https://lists.elrepo.org/pipermail/elrepo/2021-September/005832.html [3] https://lists.elrepo.org/pipermail/elrepo/2021-September/005833.html [4] https://lists.elrepo.org/pipermail/elrepo/2021-September/005834.html |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2021-08-19 18:09 | phunyguy | New Issue | |
| 2021-08-19 18:09 | phunyguy | Status | new => assigned |
| 2021-08-19 18:09 | phunyguy | Assigned To | => toracat |
| 2021-08-19 19:10 | pperry | Relationship added | related to 0001044 |
| 2021-08-19 19:11 | pperry | Note Added: 0007768 | |
| 2021-08-19 19:19 | pperry | Note Added: 0007769 | |
| 2021-08-19 19:21 | pperry | Note Edited: 0007769 | |
| 2021-08-19 19:21 | phunyguy | Note Added: 0007770 | |
| 2021-08-20 09:12 | burakkucat | Assigned To | toracat => burakkucat |
| 2021-08-20 09:12 | burakkucat | Status | assigned => feedback |
| 2021-08-20 09:12 | burakkucat | Note Added: 0007771 | |
| 2021-08-20 12:42 | phunyguy | Note Added: 0007772 | |
| 2021-08-20 12:42 | phunyguy | Status | feedback => assigned |
| 2021-08-20 12:46 | burakkucat | Note Added: 0007773 | |
| 2021-08-20 12:47 | phunyguy | Note Added: 0007774 | |
| 2021-08-20 13:04 | burakkucat | Note Added: 0007775 | |
| 2021-08-20 13:09 | phunyguy | Note Added: 0007776 | |
| 2021-08-20 13:16 | pperry | Note Added: 0007778 | |
| 2021-08-20 13:18 | phunyguy | Note Added: 0007779 | |
| 2021-08-20 19:25 | burakkucat | Status | assigned => feedback |
| 2021-08-20 19:25 | burakkucat | Note Added: 0007783 | |
| 2021-08-21 14:32 | phunyguy | Note Added: 0007786 | |
| 2021-08-21 14:32 | phunyguy | Status | feedback => assigned |
| 2021-08-21 14:47 | phunyguy | Note Added: 0007787 | |
| 2021-08-21 19:25 | burakkucat | Note Added: 0007788 | |
| 2021-08-21 20:47 | phunyguy | Note Added: 0007789 | |
| 2021-08-22 19:50 | burakkucat | Note Added: 0007790 | |
| 2021-08-22 19:51 | burakkucat | Status | assigned => feedback |
| 2021-08-23 09:28 | phunyguy | Note Added: 0007792 | |
| 2021-08-23 09:28 | phunyguy | Status | feedback => assigned |
| 2021-08-23 09:30 | phunyguy | Note Added: 0007793 | |
| 2021-08-23 17:54 | burakkucat | Note Added: 0007796 | |
| 2021-08-24 11:07 | phunyguy | Note Added: 0007800 | |
| 2021-08-24 11:33 | burakkucat | Note Added: 0007801 | |
| 2021-08-31 11:03 | burakkucat | Note Added: 0007808 | |
| 2021-09-03 18:09 | burakkucat | Status | assigned => resolved |
| 2021-09-03 18:09 | burakkucat | Resolution | open => fixed |
| 2021-09-03 18:09 | burakkucat | Note Added: 0007809 |
