Upgrade 121, PAE-Kernel pos. not working on XEN

ITechPro
Posts: 37
Joined: October 11th, 2011, 11:15 am

Upgrade 121, PAE-Kernel pos. not working on XEN

Post by ITechPro » July 30th, 2018, 9:14 pm

I've had problems after upgrading my (virtual) firewall to release level 121, because it didn't boot anymore on my debian jessie xen host with the new PAE-kernel (4.14.50-ipfire-pae) as domU.
Because the upgrade also removed the old pae-kernel (3.14.79-ipfire-pae), I had to recover it from another installation, which finally got it running again.
Therefore I advice everybody with such a configuration to do a kernel backup before trying to upgrade, and report success or failure in this thread.
If someone is interested, I'll investigate this problem further.

Regards

chriskro
Posts: 6
Joined: February 9th, 2012, 8:52 pm

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by chriskro » August 1st, 2018, 10:18 am

debian stretch 9.5
kernel 4.9.0-6-amd64 (XEN)
XEN 4.8

upgrade 119 ---> 121 kernel panic!

back to kernel 3.14.79-ipfire-pae! --> thx @ITechPro

any solutions?

Regards

ITechPro
Posts: 37
Joined: October 11th, 2011, 11:15 am

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by ITechPro » August 1st, 2018, 12:40 pm

Thx @chriskro for your feedback: therefore the reason isn't my oldish debian version 8.11 (jessie).

Today I've installed/upgraded to core 122 and reinstalled the actual linux-pae package, but it made no difference -> kernel panic :( .

I've found out that a parallel 'arch linux' domU also produces a kernel panic with it's kernel 4.14.56-1-lts. But the 'normal' kernel (4.17.11-arch1) boots fine. Maybe that can help narrowing down the cause of this problem.

Regards

User avatar
moisesbites
Posts: 33
Joined: March 23rd, 2015, 1:57 am

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by moisesbites » August 1st, 2018, 4:06 pm

My system had the same message after upgrade from 120 to 122... Kerner Panic
"kernel panic - not syncing: Attempted to kill init!"
https://fireinfo.ipfire.org/profile/3c7 ... 994c034be0
Image

Processor Intel(R) Pentium(R) Dual CPU E2160 @ 1.80GHz x2
Dual-core processor Supported features: 64 bit AES-NI NX PAE RDRAND VT-x/AMD-V
Vendor Hewlett-Packard
Model HP Compaq dc5800 Small Form Factor
Memory 5G
System Storage 932G
Kernel 3.14.79-ipfire
Location Brazil
Language English

I downloaded the ISO image of 122 version. The installation process don't start.

Someone could help us in this problem?
I recovered then to version 120. For while the firewalls are working normaly in the previous version.

I had two firewalls with the same problem.
Moisés Bites

Image

User avatar
Arne.F
Core Developer
Core Developer
Posts: 8522
Joined: May 7th, 2006, 8:57 am
Location: BS <-> NDH
Contact:

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by Arne.F » August 2nd, 2018, 6:32 pm

Older hp's have very often Bios bugs. Is an update avail?

Also try to reconfigure the hdd controller to ahci mode in bios. Legacy IDE mode often result in not found discs.
Arne

Support the project on the donation!

Image

Image

Image
PS: I will not answer support questions via email and ignore IPFire related messages on my non IPFire.org mail addresses.

User avatar
moisesbites
Posts: 33
Joined: March 23rd, 2015, 1:57 am

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by moisesbites » August 3rd, 2018, 7:35 pm

Arne.F wrote:
August 2nd, 2018, 6:32 pm
Older hp's have very often Bios bugs. Is an update avail?

Also try to reconfigure the hdd controller to ahci mode in bios. Legacy IDE mode often result in not found discs.
Arne, thank you. I will try to test this options. After I will tell here the results. :D
Moisés Bites

Image

hafenwasser
Posts: 7
Joined: May 21st, 2014, 9:03 am

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by hafenwasser » August 10th, 2018, 7:57 pm

Exact the same issue with my firewall. Cannot even boot from a freshly downloaded iso image.

ITechPro
Posts: 37
Joined: October 11th, 2011, 11:15 am

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by ITechPro » August 11th, 2018, 7:59 pm

Since there isn't a solution in sight for our problem with the new i586 pae kernel, I've meanwhile managed to get the x86-64 version of ipfire running as DomU under XEN with its original 64-bit kernel ;D

To manage that I've manually gone through the steps of the script "xen-image-maker.sh" inside the "Xen-Image-Generator" from https://downloads.ipfire.org/releases/i ... 22.tar.bz2, adopting it for the x86_64 version, and leaving the pae kernel installation for i586 arch out.

Until now the 64-bit version boots and runs fine, but there is the following warning displayed during the boot process:
"x86/mm: Checked W+X mappings: FAILED", which is supposed to "make the exploitation of other unfixed kernel bugs easier".
Therefore that leaves me unsure of which option is the less vulnerable one: running the old 3.14.79 pae kernel or the new one :-\

Regards

hafenwasser
Posts: 7
Joined: May 21st, 2014, 9:03 am

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by hafenwasser » August 19th, 2018, 9:52 am

Update:
On my Debian-Stretch with XEN it is stll imposible to update from 120 to 122.
Update from 120 to 121 and to 122 is working like a charm, but final reboot will crash at boot time.
Same result with installaling a fresh downloaded iso-image or by downloading the xen-installer-script.

Solution:
Download flush-image, start within XEN and do a fresh install.

frickelpit
Posts: 297
Joined: April 18th, 2011, 7:34 am

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by frickelpit » August 24th, 2018, 6:22 pm

ITechPro wrote:
August 11th, 2018, 7:59 pm
x86/mm: Checked W+X mappings: FAILED
Your xen domu use grub legacy that is the reason for the error (new kernel need grub2). The upgrade path for xen users is actually broken :'(
Last edited by frickelpit on August 25th, 2018, 8:56 am, edited 2 times in total.

hafenwasser
Posts: 7
Joined: May 21st, 2014, 9:03 am

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by hafenwasser » August 25th, 2018, 7:55 am

Thanks for the clarification. If you need some testing help, let me know.

User avatar
Arne.F
Core Developer
Core Developer
Posts: 8522
Joined: May 7th, 2006, 8:57 am
Location: BS <-> NDH
Contact:

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by Arne.F » August 26th, 2018, 7:16 am

Xen Paravirt does not use grub. It reads only same config by a script called pygrub.

At the moment a xen driver for the pci/memory management is broken in kernel 4.14.50 32bit

You can only try to use a hvm installation if the hardware support it. (This is the reason why it looks like then new kernel works only with grub2)
Arne

Support the project on the donation!

Image

Image

Image
PS: I will not answer support questions via email and ignore IPFire related messages on my non IPFire.org mail addresses.

fow0ryl
Posts: 23
Joined: November 30th, 2015, 3:26 pm
Location: GF

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by fow0ryl » January 5th, 2019, 11:10 am

Hello,

is there a (no official) script "xen-image-maker.sh" for the x86_64 version?
I would like to try it because I have to upgrade a old xen installation 2.17-core94 running on XEN 6.5 @ a friend of mine
It crashes everytime when trying to upgrade.

So I would like to give the 2.21-core126 x86_64 bit version a chance.

Henning

User avatar
Arne.F
Core Developer
Core Developer
Posts: 8522
Joined: May 7th, 2006, 8:57 am
Location: BS <-> NDH
Contact:

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by Arne.F » January 5th, 2019, 11:41 am

We have never released a 64bit xen image maker. The image maker is for old xen machines that support pv only. On new systems that support hvm you should install IPFire using the normal iso.

Also keep in mind that IPFire 2.21 is marked as untested because no one test it in the testing window before release. For us xen pv is dead!!!
Arne

Support the project on the donation!

Image

Image

Image
PS: I will not answer support questions via email and ignore IPFire related messages on my non IPFire.org mail addresses.

hafenwasser
Posts: 7
Joined: May 21st, 2014, 9:03 am

Re: Upgrade 121, PAE-Kernel pos. not working on XEN

Post by hafenwasser » January 6th, 2019, 11:23 am

I still have two firewalls runing .120 and are not able to update.

Any info or test I can share to make you find a solution?

Post Reply