XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login
    1. Home
    2. Popular
    Log in to post
    • All Time
    • Day
    • Week
    • Month
    • All Topics
    • New Topics
    • Watched Topics
    • Unreplied Topics

    • All categories
    • J

      PCIe Pass-through lanes and lane performance

      Watching Ignoring Scheduled Pinned Locked Moved Unsolved Compute
      74
      0 Votes
      74 Posts
      18k Views
      J
      @pandusen said: @john.c said: also did you check "dmesg" output on the affected guests? real error messages are more interesting than speculation in this case Yes I did among a ton of other diagnoses, a billion times.. I am talking about findings i did over a long period(months). I am not going to sit down and write a book about something I gave up on almost a month ago. I know what I need to get it working, but I could not get to that state in XCP-ng. I could however get there using Proxmox. But that was on another system though, the x99 6900k. I am running as bare metal now... The former(my current xcp-ng box) was on a ROMED8-2T Epyc Milan. I tested that bare metal on a USB, and it also worked. Yes Above 4G has to be enabled otherwise reBar wont report a bar-0 or bar-1 at 16gb in linux, I got it to report that at one point (Sorry, I was not aware of the importence at that point, I just thought I had missed something, and was at a perfectly normal point in the process), but the guest driver still had issues(So it was no success anyway). All this led me to other findings, both here and in other discussions about people not succeeding with intel pass-through in xcp-ng. Again, I only mentioned those points, because I could see that Teddy, basically hadn't tested it beyond what I had already succeed at. "speculation" I am sry, but that was really I could get to.. I have searched everywhere, I have had Claud and GPT chew on it and looked through Intel's documention as well as my own hardware. The only thing I couldnt see, was what was happening under the xen hood. I will look through my flyby notes and if I find something of interest, or perhaps in regards to getting that reBar to report 16gb on the guest, I will post it here! My current Ubuntu bare metal, works as expected, I get a 16x8 on PCI v3 wich is expected from the 8 lanes electrical of the Arc pro b50. reBar is working and reporting correctly, and the performance numbers match what others have measured in a healthy system. Yes I have run plenty of heavy inference and compute.. mostly inference.. I have not used it for transcoding media yet, as that was a job it was suppose to have on the xcp-ng server.. It is even running a rtx 2080 card in the same box as well, which is running isolated along side the intel card and they are juggling data back and forth every day. No issues. But as I also said, I might suspect PCI grouping of certain motherboards, not playing well with xcp-ng, which might explain your "Its working on my computer" phenomenon. I am not currently at a point where I feel like taking my AI server apart and put the Intel card back in the xcp-ng server.. Maybe when something has actually changed, I would be willing to give it a shot again and I promise at that point, I will be sure to have some notes with me. @pandusen Absolutely spot on regarding the bare-metal and Proxmox testing—that narrows the bottleneck down completely to how the Xen hypervisor layer and XAPI orchestrate the virtualized memory topology down to the guest VM. Since the underlying XCP-ng OVMF (UEFI) builds do technically support ReBAR, the driver resets and oneAPI/compute-stack crashes under load usually mean the guest thinks it has a large BAR but is hitting a hard page fault or timing out the moment a workload tries to stream data past the old 256MB boundary. As an aside, what CPU did you use in the ROMED8-2T Epyc Milan server? Ideally, what is the exact model (akin to how someone would specify an AMD Ryzen 7 5700X on the desktop side, such as an EPYC 73F3, 7543, etc.)? I'm curious if a specific core-die layout or NUMA topology is introducing firmware-level quirks with large BAR allocations under Xen. If you ever feel like dropping the Intel card back into the ROMED8-2T for another round of testing, here are the exact diagnostic knobs to turn to see if we can get the Xen hypervisor to behave: 1. Force Xen to Re-allocate Host Memory BARs Xen often locks down the host’s initial PCIe memory allocations statically, which can prevent a guest from cleanly widening its memory map. You can force the Xen microkernel to actively re-balance and open up contiguous MMIO holes by appending this to your Xen command line: /opt/xensource/libexec/xen-cmdline --set-xen "pci=realloc" 2. Lock Down the EPYC Infinity Fabric (Prevent FLR Timeouts) On the ASRock ROMED8-2T, Milan's dynamic power management frequently shifts Infinity Fabric clock speeds depending on load. While normal for enterprise NICs, these transient latency shifts can cause sensitive, first-generation Intel Arc compute drivers to panic and trigger an immediate Function Level Reset (FLR). The Fix: In the motherboard BIOS, navigate to AMD CBS → Workload Profile and flip it to "NIC Throughput Intensive". This locks the Infinity Fabric P-States and prevents the root complex from modulating performance lanes mid-calculation. 3. Ensure Strict Multi-Function Passthrough You mentioned speculation about the companion audio endpoint. Passing only the VGA function of a multi-function card frequently causes severe kernel driver resets if the guest driver tries to initiate a hardware handshake with its missing audio sibling. Ensure both endpoints are explicitly hidden from Dom0 and bound to the same template slot: # Check lspci to grab your exact dual IDs (e.g., 0b:00.0 and 0b:00.1) /opt/xensource/libexec/xen-cmdline --set-dom0 "xen-pciback.hide=(0000:0b:00.0)(0000:0b:00.1)" 4. Check the Guest's Internal Memory Mapping Map If the compute stack chokes, running a quick log dump inside the headless Ubuntu guest right after a crash will tell us if the virtualized page tables are failing: dmesg | grep -i -E "bar|xe|i915|memory" Look closely to see if the guest logs a successful BAR 2 resized to 16384MiB or if it explicitly throws a failed to allocate/map BAR warning. If it claims a 16GB allocation but still faults, the hypervisor isn't dynamically updating the virtual page structures under pressure. If you ever get around to digging out your flyby notes or throwing the card back into the server, let me know what the guest kernel throws back!
    • olivierlambertO

      🛰️ XO 6: dedicated thread for all your feedback!

      Watching Ignoring Scheduled Pinned Locked Moved Xen Orchestra
      292
      7 Votes
      292 Posts
      152k Views
      C
      @julienXOvates Thank you Julien...really appreciate it.
    • J

      A VM without any data on disk, passes Health Check - Bug?

      Watching Ignoring Scheduled Pinned Locked Moved Unsolved Backup
      4
      1
      0 Votes
      4 Posts
      93 Views
      J
      @poddingue Thanks for taking a look on your end as well. I would like to point out that the line from the docs is quite deffinitive. If there are gotchas, such as UEFI affecting things. Then this either should be documented. Or better yet, that outlier of an edge-case probably should be addressed. One scenario I'm envisioning is that a disk is faulty for some reason, and this goes unoticed due to the VM being rarely used. And since no backup-errors are given, this might go unoticed for quite some time. The Health Check passing is a false signal in that case. These are my two-cents. And I confirm that this is an edge-case, and even unlikely one. But a theoretical greater than zero risk anyways. Thank you
    • ludalm13L

      Audit plugin: forward audit records to syslog in real time (PR #10460)

      Watching Ignoring Scheduled Pinned Locked Moved Advanced features
      2
      0 Votes
      2 Posts
      59 Views
      poddingueP
      For anyone reading along who needs the forwarding part today, the [logs.transport.syslog] setting this PR builds on is documented, though on the backup settings page rather than next to the audit log, which isn't where I'd have looked: https://docs.xen-orchestra.com/backups-and-dr/backup-features-and-settings#send-xo-logs-to-an-external-syslog-server On the design question (a log line through the existing pipeline versus a dedicated syslog transport in the plugin) I don't know the plugin well enough to have an opinion worth reading, so I think it's one for @Team-XO-Backend. The PR has been open since late September without a reviewer, so a look from them would help it along. I'm also curious about your second question: if others here already ship audit records to a SIEM, saying so would show how many people need this.