Bug 8980 - [Anolis23.1 GA][Beta][vhd] dmesg_warn新增告警字段
Summary: [Anolis23.1 GA][Beta][vhd] dmesg_warn新增告警字段
Status: RESOLVED BYDESIGN
Alias: None
Product: Anolis OS 23
Classification: Anolis OS
Component: Images&Installations (show other bugs) Images&Installations
Version: 23.1
Hardware: All Linux
: P3-Medium S3-normal
Target Milestone: ---
Assignee: zhangjing
QA Contact:
URL:
Whiteboard:
Keywords: Function
Depends on:
Blocks:
 
Reported: 2024-05-10 10:58 UTC by gitpush
Modified: 2024-05-24 18:38 UTC (History)
4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description gitpush alibaba_cloud_group 2024-05-10 10:58:01 UTC 
环境：
[root@localhost ~]# cat /etc/os-release
NAME="Anolis OS"
VERSION="23"
ID="anolis"
VERSION_ID="23"
PLATFORM_ID="platform:an23"
PRETTY_NAME="Anolis OS 23"
ANSI_COLOR="0;31"
HOME_URL="https://openanolis.cn/"
BUG_REPORT_URL="https://bugzilla.openanolis.cn/"

执行过程：
测试用例执行失败tests/system_base/util-linux/tc_util_dmesg_warn_func_001.py，新增告警字段，执行dmesg -l warn -T | grep -Ev "^$|#"

[Tue May  7 22:56:39 2024] Speculative Return Stack Overflow: IBPB-extending microcode not applied!
[Tue May  7 22:56:39 2024] Speculative Return Stack Overflow: WARNING: See 			https://kernel.org/doc/html/latest/admin-guide/hw-vuln/srso.html for mitigation options.
[Tue May  7 22:56:40 2024] amd_pstate: the _CPC object is not present in SBIOS or ACPI disabled
[Tue May  7 22:56:43 2024 device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log.
[Tue May  7 22:56:53 2024] kauditd_printk_skb: 68 callbacks suppressed
Comment 1 yunmeng365524 2024-05-10 15:15:31 UTC 
请帮忙分析一下这些是否符合预期
Comment 2 zhangjing alibaba_cloud_group 2024-05-10 15:33:50 UTC 
(In reply to gitpush from comment #0)
> 环境：
> [root@localhost ~]# cat /etc/os-release
> NAME="Anolis OS"
> VERSION="23"
> ID="anolis"
> VERSION_ID="23"
> PLATFORM_ID="platform:an23"
> PRETTY_NAME="Anolis OS 23"
> ANSI_COLOR="0;31"
> HOME_URL="https://openanolis.cn/"
> BUG_REPORT_URL="https://bugzilla.openanolis.cn/"
> 
> 执行过程：
> 测试用例执行失败tests/system_base/util-linux/tc_util_dmesg_warn_func_001.
> py，新增告警字段，执行dmesg -l warn -T | grep -Ev "^$|#"
> 
> [Tue May  7 22:56:39 2024] Speculative Return Stack Overflow: IBPB-extending
> microcode not applied!
> [Tue May  7 22:56:39 2024] Speculative Return Stack Overflow: WARNING: See 	
> https://kernel.org/doc/html/latest/admin-guide/hw-vuln/srso.html for
> mitigation options.
> [Tue May  7 22:56:40 2024] amd_pstate: the _CPC object is not present in
> SBIOS or ACPI disabled

AMD相关的问题请@


> [Tue May  7 22:56:43 2024 device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is
> disabled. Duplicate IMA measurements will not be recorded in the IMA log.
> [Tue May  7 22:56:53 2024] kauditd_printk_skb: 68 callbacks suppressed
Comment 3 zhangjing alibaba_cloud_group 2024-05-10 15:36:35 UTC 
(In reply to zhangjing from comment #2)
> (In reply to gitpush from comment #0)
> > 环境：
> > [root@localhost ~]# cat /etc/os-release
> > NAME="Anolis OS"
> > VERSION="23"
> > ID="anolis"
> > VERSION_ID="23"
> > PLATFORM_ID="platform:an23"
> > PRETTY_NAME="Anolis OS 23"
> > ANSI_COLOR="0;31"
> > HOME_URL="https://openanolis.cn/"
> > BUG_REPORT_URL="https://bugzilla.openanolis.cn/"
> > 
> > 执行过程：
> > 测试用例执行失败tests/system_base/util-linux/tc_util_dmesg_warn_func_001.
> > py，新增告警字段，执行dmesg -l warn -T | grep -Ev "^$|#"
> > 
> > [Tue May  7 22:56:39 2024] Speculative Return Stack Overflow: IBPB-extending
> > microcode not applied!
> > [Tue May  7 22:56:39 2024] Speculative Return Stack Overflow: WARNING: See 	
> > https://kernel.org/doc/html/latest/admin-guide/hw-vuln/srso.html for
> > mitigation options.
> > [Tue May  7 22:56:40 2024] amd_pstate: the _CPC object is not present in
> > SBIOS or ACPI disabled
> 

AMD相关的问题请 @贯君 看看

> 
> > [Tue May  7 22:56:43 2024 device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is
> > disabled. Duplicate IMA measurements will not be recorded in the IMA log.

安全相关的麻烦 @熙羽 看看

> > [Tue May  7 22:56:53 2024] kauditd_printk_skb: 68 callbacks suppressed

网络相关的麻烦 @不达 看看
Comment 4 kun(llfl) alibaba_cloud_group 2024-05-10 15:53:46 UTC 
srso和amd pstate warning均为提示需要微码或bios支持。
1. srso mitigation方式有两种a. 纯软件 mitigation safeRET ，b. microcode。此处warning提示microcode不可用将采用纯软件mitigation；
2. amd pstate /cppc 需要bios透穿PCP，此处应该是测试机器bios不支持该功能
Comment 5 tj alibaba_cloud_group 2024-05-10 17:22:05 UTC 
CONFIG_IMA_DISABLE_HTABLE 没有开启是符合预期的
Comment 6 gaochang alibaba_cloud_group 2024-05-24 18:38:02 UTC 
已确定预期中事件，该问题关闭