Bug 1532180 – add host and guest reporting for kpti/ibrs/ibpb

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1532180 - add host and guest reporting for kpti/ibrs/ibpb

Summary:	add host and guest reporting for kpti/ibrs/ibpb

Status:	CLOSED CURRENTRELEASE

Aliases:	None

Product:	ovirt-engine
Classification:	oVirt
Component:	BLL.Virt (Show other bugs)
Sub Component:
Version:	---
Hardware:	Unspecified Unspecified

Priority	urgent Severity urgent (vote)
Target Milestone:	ovirt-4.1.9
Target Release:	---
Assigned To:	jniederm
QA Contact:	Israel Pinto
Docs Contact:

URL:
Whiteboard:
Keywords:	Improvement

Depends On:	1531016
Blocks:	1533095
	Show dependency tree / graph

Reported:	2018-01-08 04:50 EST by Michal Skrivanek
Modified:	2018-01-28 20:18 EST (History)
CC List:	5 users (show)

See Also:
Fixed In Version:	ovirt-engine-4.1.9.1
Doc Type:	Enhancement
Doc Text:	The Software subtab in the Host General pane now contains a new "Kernel Features" field showing the PTI, IBPB, and IBRS kernel features of the host system, if the information is available. The Virtual Machine General pane now contains a new "Guest CPU Type" field showing the guest machine CPU type. These can be used to easily recognize if meltdown fixes are applied. For more info on meltdown patches detection, see https://access.redhat.com/solutions/3317841.
Story Points:	---
Clone Of:
Clones:	1533095 (view as bug list)
Environment:
Last Closed:	2018-01-24 05:40:39 EST
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	Virt
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Flags:	rule-engine: ovirt‑4.1+ ykaul: blocker+

Attachments	(Terms of Use)
vm_ibrs (84.87 KB, image/png) 2018-01-17 07:42 EST, Israel Pinto	no flags	Details
host_ibrs (51.22 KB, image/png) 2018-01-17 07:43 EST, Israel Pinto	no flags	Details
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Knowledge Base (Solution)	3317841	None	None	None	2018-01-10 18:16 EST
oVirt gerrit	86058	master	MERGED	caps: add reporting of various kernel runtime config opts	2018-01-09 03:17 EST
oVirt gerrit	86122	master	MERGED	webadmin: Guest CPU type shown in VM General pane	2018-01-10 06:47 EST
oVirt gerrit	86201	master	MERGED	core: VdsDynamic#kernelFeatures added	2018-01-15 08:13 EST
oVirt gerrit	86202	master	MERGED	webadmin: Listing of Kernel Features on Host pane	2018-01-15 08:13 EST
oVirt gerrit	86259	ovirt-engine-4.1	MERGED	webadmin: Guest CPU type shown in VM General pane	2018-01-14 04:25 EST
oVirt gerrit	86339	ovirt-4.1	MERGED	caps: add reporting of various kernel runtime config opts	2018-01-15 08:53 EST
oVirt gerrit	86340	ovirt-4.1	MERGED	caps: uppercase kernel features	2018-01-15 08:53 EST
oVirt gerrit	86374	ovirt-engine-4.1	MERGED	core: JsonHelper unchecked methods	2018-01-16 06:32 EST
oVirt gerrit	86375	ovirt-engine-4.1	MERGED	core: VdsDynamic#kernelFeatures added	2018-01-16 06:32 EST
oVirt gerrit	86376	ovirt-engine-4.1	MERGED	webadmin: Listing of Kernel Features on Host pane	2018-01-16 06:33 EST

Groups: None (edit)

Description Michal Skrivanek 2018-01-08 04:50:36 EST

Display the status of PTI, IBRS and IBPB in host subtab. 
A warning ("!") can be displayed when the host doesn't have any such support.

Display the status of actual running CPU model in guest in VM subtab

Comment 1 Michal Skrivanek 2018-01-08 07:17:26 EST

vdsm can report capabilities - separately for each, to be interpreted by engine.
VM's running CPU is already being reported but not used anywhere.

Comment 2 Israel Pinto 2018-01-17 07:42:17 EST

Verify with:
ovirt-engine-4.1.9.1-0.1.el7.noarch
vdsm 4.19.45-1.el7ev

Host info:
OS Version:RHEL - 7.4 - 18.el7
OS Description:Red Hat Enterprise Linux Server 7.4 (Maipo)
Kernel Version:3.10.0 - 693.11.6.el7.x86_64
KVM Version:2.9.0 - 16.el7_4.13
LIBVIRT Version:libvirt-3.2.0-14.el7_4.7
VDSM Version:vdsm-4.19.45-1.el7ev
SPICE Version:0.12.8 - 2.el7.1
GlusterFS Version:[N/A]
CEPH Version:librbd1-0.94.5-2.el7
Kernel Features:IBRS: 1, PTI: 1, IBPB: 1

See attached screenshots

Comment 3 Israel Pinto 2018-01-17 07:42 EST

Created attachment 1382391 [details]
vm_ibrs

Comment 4 Israel Pinto 2018-01-17 07:43 EST

Created attachment 1382392 [details]
host_ibrs

Comment 5 Sandro Bonazzola 2018-01-24 05:40:39 EST

This bugzilla is included in oVirt 4.1.9 release, published on Jan 24th 2018.

Since the problem described in this bug report should be
resolved in oVirt 4.1.9 release, published on Jan 24th 2018, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.

Note You need to log in before you can comment on or make changes to this bug.