Bug 1532180 - add host and guest reporting for kpti/ibrs/ibpb
Summary: add host and guest reporting for kpti/ibrs/ibpb
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: ovirt-engine
Classification: oVirt
Component: BLL.Virt
Version: ---
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: ovirt-4.1.9
: ---
Assignee: jniederm
QA Contact: Israel Pinto
URL:
Whiteboard:
Depends On: 1531016
Blocks: 1533095
TreeView+ depends on / blocked
 
Reported: 2018-01-08 09:50 UTC by Michal Skrivanek
Modified: 2018-01-29 01:18 UTC (History)
5 users (show)

Fixed In Version: ovirt-engine-4.1.9.1
Doc Type: Enhancement
Doc Text:
The Software subtab in the Host General pane now contains a new "Kernel Features" field showing the PTI, IBPB, and IBRS kernel features of the host system, if the information is available. The Virtual Machine General pane now contains a new "Guest CPU Type" field showing the guest machine CPU type. These can be used to easily recognize if meltdown fixes are applied. For more info on meltdown patches detection, see https://access.redhat.com/solutions/3317841.
Clone Of:
: 1533095 (view as bug list)
Environment:
Last Closed: 2018-01-24 10:40:39 UTC
oVirt Team: Virt
Embargoed:
rule-engine: ovirt-4.1+
ykaul: blocker+


Attachments (Terms of Use)
vm_ibrs (84.87 KB, image/png)
2018-01-17 12:42 UTC, Israel Pinto
no flags Details
host_ibrs (51.22 KB, image/png)
2018-01-17 12:43 UTC, Israel Pinto
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 3317841 0 None None None 2018-01-10 23:16:24 UTC
oVirt gerrit 86058 0 master MERGED caps: add reporting of various kernel runtime config opts 2018-01-09 08:17:51 UTC
oVirt gerrit 86122 0 master MERGED webadmin: Guest CPU type shown in VM General pane 2018-01-10 11:47:15 UTC
oVirt gerrit 86201 0 master MERGED core: VdsDynamic#kernelFeatures added 2018-01-15 13:13:54 UTC
oVirt gerrit 86202 0 master MERGED webadmin: Listing of Kernel Features on Host pane 2018-01-15 13:13:58 UTC
oVirt gerrit 86259 0 ovirt-engine-4.1 MERGED webadmin: Guest CPU type shown in VM General pane 2018-01-14 09:25:37 UTC
oVirt gerrit 86339 0 ovirt-4.1 MERGED caps: add reporting of various kernel runtime config opts 2018-01-15 13:53:10 UTC
oVirt gerrit 86340 0 ovirt-4.1 MERGED caps: uppercase kernel features 2018-01-15 13:53:15 UTC
oVirt gerrit 86374 0 ovirt-engine-4.1 MERGED core: JsonHelper unchecked methods 2018-01-16 11:32:52 UTC
oVirt gerrit 86375 0 ovirt-engine-4.1 MERGED core: VdsDynamic#kernelFeatures added 2018-01-16 11:32:58 UTC
oVirt gerrit 86376 0 ovirt-engine-4.1 MERGED webadmin: Listing of Kernel Features on Host pane 2018-01-16 11:33:03 UTC

Description Michal Skrivanek 2018-01-08 09:50:36 UTC
Display the status of PTI, IBRS and IBPB in host subtab. 
A warning ("!") can be displayed when the host doesn't have any such support.

Display the status of actual running CPU model in guest in VM subtab

Comment 1 Michal Skrivanek 2018-01-08 12:17:26 UTC
vdsm can report capabilities - separately for each, to be interpreted by engine.
VM's running CPU is already being reported but not used anywhere.

Comment 2 Israel Pinto 2018-01-17 12:42:17 UTC
Verify with:
ovirt-engine-4.1.9.1-0.1.el7.noarch
vdsm 4.19.45-1.el7ev

Host info:
OS Version:RHEL - 7.4 - 18.el7
OS Description:Red Hat Enterprise Linux Server 7.4 (Maipo)
Kernel Version:3.10.0 - 693.11.6.el7.x86_64
KVM Version:2.9.0 - 16.el7_4.13
LIBVIRT Version:libvirt-3.2.0-14.el7_4.7
VDSM Version:vdsm-4.19.45-1.el7ev
SPICE Version:0.12.8 - 2.el7.1
GlusterFS Version:[N/A]
CEPH Version:librbd1-0.94.5-2.el7
Kernel Features:IBRS: 1, PTI: 1, IBPB: 1

See attached screenshots

Comment 3 Israel Pinto 2018-01-17 12:42:49 UTC
Created attachment 1382391 [details]
vm_ibrs

Comment 4 Israel Pinto 2018-01-17 12:43:26 UTC
Created attachment 1382392 [details]
host_ibrs

Comment 5 Sandro Bonazzola 2018-01-24 10:40:39 UTC
This bugzilla is included in oVirt 4.1.9 release, published on Jan 24th 2018.

Since the problem described in this bug report should be
resolved in oVirt 4.1.9 release, published on Jan 24th 2018, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.