XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    XCP-ng 8.2 updates announcements and testing

    Scheduled Pinned Locked Moved News
    708 Posts 67 Posters 1.1m Views 86 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stormiS Online
      stormi Vates 🪐 XCP-ng Team
      last edited by

      Update published: https://xcp-ng.org/blog/2020/06/12/intel-microcode-security-update-crosstalk/

      1 Reply Last reply Reply Quote 0
      • stormiS Online
        stormi Vates 🪐 XCP-ng Team
        last edited by

        I haven't had many tests from the community for the previous updates.

        I'm still trying to convince myself that I can count on the community to test updates before they are released to everyone, in addition to our internal testing.

        So, here are new update candidates, related to the latest Xen security advisories, for XCP-ng 8.0 and 8.1.

        Install them with

        yum update xen-dom0-libs xen-dom0-tools xen-hypervisor xen-libs xen-tools --enablerepo=xcp-ng-testing
        

        and reboot.

        Your host is just supposed to keep working normally as before.

        Thanks in advance.

        H 1 Reply Last reply Reply Quote 2
        • H Offline
          HeMaN @stormi
          last edited by

          @stormi
          Did the update and a reboot just minutes ago.
          Dell R710 / dual xeon L5640 / 96GB
          XCP-ng 8.1 with latest patches / pool with a single host

          System is working as expected so far.
          If I notice anything during usage I will report back here

          [20:41 xenserver ~]# yum update
          Loaded plugins: fastestmirror
          Determining fastest mirrors
          Excluding mirror: updates.xcp-ng.org
           * xcp-ng-base: mirrors.xcp-ng.org
          Excluding mirror: updates.xcp-ng.org
           * xcp-ng-updates: mirrors.xcp-ng.org
          dell-system-update_dependent                             | 2.3 kB     00:00
          dell-system-update_independent                           | 2.3 kB     00:00
          xcp-ng-base/signature                                    |  473 B     00:00
          xcp-ng-base/signature                                    | 3.0 kB     00:00 !!!
          xcp-ng-updates/signature                                 |  473 B     00:00
          xcp-ng-updates/signature                                 | 3.0 kB     00:00 !!!
          No packages marked for update
          [20:42 xenserver ~]# yum update xen-dom0-libs xen-dom0-tools xen-hypervisor xen-libs xen-tools --enablerepo=xcp-ng-testing
          Loaded plugins: fastestmirror
          Loading mirror speeds from cached hostfile
          Excluding mirror: updates.xcp-ng.org
           * xcp-ng-base: mirrors.xcp-ng.org
          Excluding mirror: updates.xcp-ng.org
           * xcp-ng-testing: mirrors.xcp-ng.org
          Excluding mirror: updates.xcp-ng.org
           * xcp-ng-updates: mirrors.xcp-ng.org
          xcp-ng-testing/signature                                 |  473 B     00:00
          xcp-ng-testing/signature                                 | 3.0 kB     00:00 !!!
          xcp-ng-testing/primary_db                                  |  31 kB   00:00
          Resolving Dependencies
          --> Running transaction check
          ---> Package xen-dom0-libs.x86_64 0:4.13.0-8.5.1.xcpng8.1 will be updated
          ---> Package xen-dom0-libs.x86_64 0:4.13.0-8.6.1.xcpng8.1 will be an update
          ---> Package xen-dom0-tools.x86_64 0:4.13.0-8.5.1.xcpng8.1 will be updated
          ---> Package xen-dom0-tools.x86_64 0:4.13.0-8.6.1.xcpng8.1 will be an update
          ---> Package xen-hypervisor.x86_64 0:4.13.0-8.5.1.xcpng8.1 will be updated
          ---> Package xen-hypervisor.x86_64 0:4.13.0-8.6.1.xcpng8.1 will be an update
          ---> Package xen-libs.x86_64 0:4.13.0-8.5.1.xcpng8.1 will be updated
          ---> Package xen-libs.x86_64 0:4.13.0-8.6.1.xcpng8.1 will be an update
          ---> Package xen-tools.x86_64 0:4.13.0-8.5.1.xcpng8.1 will be updated
          ---> Package xen-tools.x86_64 0:4.13.0-8.6.1.xcpng8.1 will be an update
          --> Finished Dependency Resolution
          
          Dependencies Resolved
          
          ================================================================================
           Package           Arch      Version                    Repository         Size
          ================================================================================
          Updating:
           xen-dom0-libs     x86_64    4.13.0-8.6.1.xcpng8.1      xcp-ng-testing    618 k
           xen-dom0-tools    x86_64    4.13.0-8.6.1.xcpng8.1      xcp-ng-testing    1.7 M
           xen-hypervisor    x86_64    4.13.0-8.6.1.xcpng8.1      xcp-ng-testing    2.3 M
           xen-libs          x86_64    4.13.0-8.6.1.xcpng8.1      xcp-ng-testing     35 k
           xen-tools         x86_64    4.13.0-8.6.1.xcpng8.1      xcp-ng-testing     26 k
          
          Transaction Summary
          ================================================================================
          Upgrade  5 Packages
          
          Total download size: 4.7 M
          Is this ok [y/d/N]: y
          Downloading packages:
          Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
          (1/5): xen-dom0-libs-4.13.0-8.6.1.xcpng8.1.x86_64.rpm      | 618 kB   00:00
          (2/5): xen-dom0-tools-4.13.0-8.6.1.xcpng8.1.x86_64.rpm     | 1.7 MB   00:00
          (3/5): xen-libs-4.13.0-8.6.1.xcpng8.1.x86_64.rpm           |  35 kB   00:00
          (4/5): xen-tools-4.13.0-8.6.1.xcpng8.1.x86_64.rpm          |  26 kB   00:00
          (5/5): xen-hypervisor-4.13.0-8.6.1.xcpng8.1.x86_64.rpm     | 2.3 MB   00:01
          --------------------------------------------------------------------------------
          Total                                              3.1 MB/s | 4.7 MB  00:01
          Running transaction check
          Running transaction test
          Transaction test succeeded
          Running transaction
            Updating   : xen-hypervisor-4.13.0-8.6.1.xcpng8.1.x86_64                 1/10
            Updating   : xen-libs-4.13.0-8.6.1.xcpng8.1.x86_64                       2/10
            Updating   : xen-dom0-libs-4.13.0-8.6.1.xcpng8.1.x86_64                  3/10
            Updating   : xen-tools-4.13.0-8.6.1.xcpng8.1.x86_64                      4/10
            Updating   : xen-dom0-tools-4.13.0-8.6.1.xcpng8.1.x86_64                 5/10
            Cleanup    : xen-dom0-tools-4.13.0-8.5.1.xcpng8.1.x86_64                 6/10
            Cleanup    : xen-tools-4.13.0-8.5.1.xcpng8.1.x86_64                      7/10
            Cleanup    : xen-libs-4.13.0-8.5.1.xcpng8.1.x86_64                       8/10
            Cleanup    : xen-dom0-libs-4.13.0-8.5.1.xcpng8.1.x86_64                  9/10
            Cleanup    : xen-hypervisor-4.13.0-8.5.1.xcpng8.1.x86_64                10/10
            Verifying  : xen-dom0-libs-4.13.0-8.6.1.xcpng8.1.x86_64                  1/10
            Verifying  : xen-libs-4.13.0-8.6.1.xcpng8.1.x86_64                       2/10
            Verifying  : xen-tools-4.13.0-8.6.1.xcpng8.1.x86_64                      3/10
            Verifying  : xen-hypervisor-4.13.0-8.6.1.xcpng8.1.x86_64                 4/10
            Verifying  : xen-dom0-tools-4.13.0-8.6.1.xcpng8.1.x86_64                 5/10
            Verifying  : xen-dom0-libs-4.13.0-8.5.1.xcpng8.1.x86_64                  6/10
            Verifying  : xen-tools-4.13.0-8.5.1.xcpng8.1.x86_64                      7/10
            Verifying  : xen-dom0-tools-4.13.0-8.5.1.xcpng8.1.x86_64                 8/10
            Verifying  : xen-hypervisor-4.13.0-8.5.1.xcpng8.1.x86_64                 9/10
            Verifying  : xen-libs-4.13.0-8.5.1.xcpng8.1.x86_64                      10/10
          
          Updated:
            xen-dom0-libs.x86_64 0:4.13.0-8.6.1.xcpng8.1
            xen-dom0-tools.x86_64 0:4.13.0-8.6.1.xcpng8.1
            xen-hypervisor.x86_64 0:4.13.0-8.6.1.xcpng8.1
            xen-libs.x86_64 0:4.13.0-8.6.1.xcpng8.1
            xen-tools.x86_64 0:4.13.0-8.6.1.xcpng8.1
          
          Complete!
          [20:42 xenserver ~]# reboot
          
          
          1 Reply Last reply Reply Quote 2
          • gskgerG Offline
            gskger Top contributor
            last edited by

            Same here.
            Updated a Dell R720 / dual Intel Xeon CPU E5-2640 v2 / 64GB
            XCP-ng 8,1 fully patched
            Standalone host

            Still have to do some testing on / with VMs, but this is something for the weekend.

            1 Reply Last reply Reply Quote 1
            • stormiS Online
              stormi Vates 🪐 XCP-ng Team
              last edited by

              Update published. Thanks for testing!

              https://xcp-ng.org/blog/2020/07/10/july-2020-xcp-ng-security-updates/

              1 Reply Last reply Reply Quote 1
              • stormiS Online
                stormi Vates 🪐 XCP-ng Team
                last edited by

                Hi everyone.

                An update candidate is available for netdata packages in XCP-ng 8.0 and 8.1. Feedback about it is welcome.

                They fix two issues:

                • a buffer overflow in JSON parsing, that could pose a security threat
                • netdata logs being flooded due to a bug in the computation of the last vcpu number

                To install the update candidate on XCP-ng 8.0 or 8.1:

                yum update "netdata*" --enablerepo=xcp-ng-testing
                

                This will update the netdata and netdata-ui RPMs if they are installed on the host.

                You can also install them if not already present with:

                yum install netdata-ui --enablerepo=xcp-ng-testing
                

                Note that installing netdata-ui automatically opens port 19999.

                1 Reply Last reply Reply Quote 0
                • antoniolfdacruzA Offline
                  antoniolfdacruz
                  last edited by

                  [10:37 xcpngp02h01 ~]# yum update "netdata*" --enablerepo=xcp-ng-testing
                  Loaded plugins: fastestmirror
                  Loading mirror speeds from cached hostfile
                  Excluding mirror: updates.xcp-ng.org
                   * xcp-ng-base: mirrors.xcp-ng.org
                  Excluding mirror: updates.xcp-ng.org
                   * xcp-ng-testing: mirrors.xcp-ng.org
                  Excluding mirror: updates.xcp-ng.org
                   * xcp-ng-updates: mirrors.xcp-ng.org
                  xcp-ng-testing/signature                                 |  473 B     00:00     
                  xcp-ng-testing/signature                                 | 3.0 kB     00:00 !!! 
                  xcp-ng-testing/primary_db                                  |  22 kB   00:01     
                  Resolving Dependencies
                  --> Running transaction check
                  ---> Package netdata.x86_64 0:1.19.0-3.xcpng8.1 will be updated
                  ---> Package netdata.x86_64 0:1.19.0-4.xcpng8.1 will be an update
                  ---> Package netdata-debuginfo.x86_64 0:1.19.0-3.xcpng8.1 will be updated
                  ---> Package netdata-debuginfo.x86_64 0:1.19.0-4.xcpng8.1 will be an update
                  ---> Package netdata-ui.x86_64 0:1.19.0-3.xcpng8.1 will be updated
                  ---> Package netdata-ui.x86_64 0:1.19.0-4.xcpng8.1 will be an update
                  --> Finished Dependency Resolution
                  
                  Dependencies Resolved
                  
                  ================================================================================
                   Package              Arch      Version                 Repository         Size
                  ================================================================================
                  Updating:
                   netdata              x86_64    1.19.0-4.xcpng8.1       xcp-ng-testing     11 M
                   netdata-debuginfo    x86_64    1.19.0-4.xcpng8.1       xcp-ng-testing    1.6 M
                   netdata-ui           x86_64    1.19.0-4.xcpng8.1       xcp-ng-testing    6.4 k
                  
                  Transaction Summary
                  ================================================================================
                  Upgrade  3 Packages
                  
                  Total download size: 13 M
                  Is this ok [y/d/N]: y
                  Downloading packages:
                  Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
                  (1/3): netdata-debuginfo-1.19.0-4.xcpng8.1.x86_64.rpm      | 1.6 MB   00:02     
                  (2/3): netdata-ui-1.19.0-4.xcpng8.1.x86_64.rpm             | 6.4 kB   00:00     
                  (3/3): netdata-1.19.0-4.xcpng8.1.x86_64.rpm                |  11 MB   00:12     
                  --------------------------------------------------------------------------------
                  Total                                              1.1 MB/s |  13 MB  00:12     
                  Running transaction check
                  Running transaction test
                  Transaction test succeeded
                  Running transaction
                    Updating   : netdata-1.19.0-4.xcpng8.1.x86_64                             1/6 
                    Updating   : netdata-ui-1.19.0-4.xcpng8.1.x86_64                          2/6 
                    Updating   : netdata-debuginfo-1.19.0-4.xcpng8.1.x86_64                   3/6 
                    Cleanup    : netdata-ui-1.19.0-3.xcpng8.1.x86_64                          4/6 
                    Cleanup    : netdata-debuginfo-1.19.0-3.xcpng8.1.x86_64                   5/6 
                    Cleanup    : netdata-1.19.0-3.xcpng8.1.x86_64                             6/6 
                    Verifying  : netdata-debuginfo-1.19.0-4.xcpng8.1.x86_64                   1/6 
                    Verifying  : netdata-1.19.0-4.xcpng8.1.x86_64                             2/6 
                    Verifying  : netdata-ui-1.19.0-4.xcpng8.1.x86_64                          3/6 
                    Verifying  : netdata-ui-1.19.0-3.xcpng8.1.x86_64                          4/6
                    Verifying  : netdata-1.19.0-3.xcpng8.1.x86_64                             5/6 
                    Verifying  : netdata-debuginfo-1.19.0-3.xcpng8.1.x86_64                   6/6 
                  
                  Updated:
                    netdata.x86_64 0:1.19.0-4.xcpng8.1                                            
                    netdata-debuginfo.x86_64 0:1.19.0-4.xcpng8.1                                  
                    netdata-ui.x86_64 0:1.19.0-4.xcpng8.1                                         
                  
                  Complete!
                  [12:47 xcpngp02h01 ~]# 
                  [12:50 xcpngp02h01 ~]# systemctl status netdata.service 
                  ? netdata.service - Real time performance monitoring
                     Loaded: loaded (/usr/lib/systemd/system/netdata.service; enabled; vendor preset: disabled)
                     Active: active (running) since Thu 2020-07-16 12:50:46 -03; 10s ago
                    Process: 9810 ExecStartPre=/usr/libexec/netdata/xcpng-iptables-restore.sh (code=exited, status=0/SUCCESS)
                    Process: 9807 ExecStartPre=/bin/chown -R netdata:netdata /var/run/netdata (code=exited, status=0/SUCCESS)
                    Process: 9804 ExecStartPre=/bin/mkdir -p /var/run/netdata (code=exited, status=0/SUCCESS)
                    Process: 9800 ExecStartPre=/bin/chown -R netdata:netdata /var/cache/netdata (code=exited, status=0/SUCCESS)
                    Process: 9797 ExecStartPre=/bin/mkdir -p /var/cache/netdata (code=exited, status=0/SUCCESS)
                   Main PID: 9816 (netdata)
                     CGroup: /system.slice/netdata.service
                             ??9816 /usr/sbin/netdata -P /var/run/netdata/netdata.pid -D -W set...
                             ??9849 /usr/bin/python /usr/libexec/netdata/plugins.d/python.d.plu...
                             ??9852 /usr/libexec/netdata/plugins.d/go.d.plugin 1
                             ??9854 /usr/libexec/netdata/plugins.d/freeipmi.plugin 1
                             ??9857 /usr/libexec/netdata/plugins.d/xenstat.plugin 1
                             ??9867 /usr/libexec/netdata/plugins.d/apps.plugin 1
                  [12:50 xcpngp02h01 ~]# 
                  
                  1 Reply Last reply Reply Quote 0
                  • antoniolfdacruzA Offline
                    antoniolfdacruz
                    last edited by

                    ![0_1594914932062_Anotação 2020-07-16 125339.png](Uploading 100%)

                    1 Reply Last reply Reply Quote 0
                    • B Offline
                      Biggen
                      last edited by

                      Doe the netdata update not actually fix the missing network interfaces or virtual drives?

                      antoniolfdacruzA stormiS 2 Replies Last reply Reply Quote 0
                      • antoniolfdacruzA Offline
                        antoniolfdacruz @Biggen
                        last edited by

                        @Biggen I am not aware of this problem. Mine (updated) displays the server's 6 physical eth interfaces and 3 more xapi0 ~ xapi2 and 9 physical drives sda to sdi. I still not have multipath configured in the servers.

                        B 1 Reply Last reply Reply Quote 0
                        • B Offline
                          Biggen @antoniolfdacruz
                          last edited by Biggen

                          @antoniolfdacruz

                          Perhaps it was fixed. The bug report doesn’t show it: https://github.com/xcp-ng/xcp/issues/379

                          I uninstalled it back in April and haven’t retested.

                          biggen1684 created this issue in xcp-ng/xcp

                          open Netdata not showing Virtual Network Interfaces for VMs #379

                          antoniolfdacruzA 1 Reply Last reply Reply Quote 0
                          • antoniolfdacruzA Offline
                            antoniolfdacruz @Biggen
                            last edited by

                            @Biggen The updated netdata packages display the vm's vbds data (in and out), but nothing for the vm's network interfaces. Not even its presence in the vm's domain.

                            1 Reply Last reply Reply Quote 1
                            • stormiS Online
                              stormi Vates 🪐 XCP-ng Team @Biggen
                              last edited by

                              @Biggen said in Updates announcements and testing:

                              Doe the netdata update not actually fix the missing network interfaces or virtual drives?

                              No, that bug is not fixed yet.

                              1 Reply Last reply Reply Quote 0
                              • stormiS Online
                                stormi Vates 🪐 XCP-ng Team
                                last edited by

                                Anyone else who could test the netdata update candidate?

                                1 Reply Last reply Reply Quote 0
                                • stormiS Online
                                  stormi Vates 🪐 XCP-ng Team
                                  last edited by

                                  I have pushed the netdata update to XCP-ng 8.0 and 8.1's update repository.

                                  1 Reply Last reply Reply Quote 0
                                  • stormiS Online
                                    stormi Vates 🪐 XCP-ng Team
                                    last edited by stormi

                                    Several update candidates have been available for some time in our testing repositories without me asking for feedback, so here is the request for tests.

                                    XCP-ng 8.0

                                    Update with:

                                    yum update openvswitch xapi-core xapi-doc xapi-tests xapi-xe xcp-networkd --enablerepo=xcp-ng-testing
                                    

                                    Changes:

                                    • support for backups with RAM in Xen Orchestra
                                    • openflow support in the SDN controller
                                    • dhcp requests now properly send the hostname to the DHCP server

                                    Aim of the tests:

                                    • no regression after installation and reboot

                                    XCP-ng 8.1

                                    Update with:

                                    yum update xapi-core xapi-doc xapi-tests xapi-xe xcp-networkd --enablerepo=xcp-ng-testing
                                    

                                    Changes:

                                    • fix compatibility with XenDesktop
                                    • openflow support in the SDN controller
                                    • dhcp requests now properly send the hostname to the DHCP server

                                    Aim of the tests:

                                    • no regression after installation and reboot

                                    Counting on you 😉

                                    1 Reply Last reply Reply Quote 1
                                    • stormiS Online
                                      stormi Vates 🪐 XCP-ng Team
                                      last edited by

                                      Simple message to bring the topic on top to increase the chances of feedback.

                                      1 Reply Last reply Reply Quote 1
                                      • gskgerG Offline
                                        gskger Top contributor
                                        last edited by gskger

                                        Updated a D54250WYK / i5-4250U / 16GB
                                        XCP-ng 8.1 fully patched

                                        Seems to work without unexpected issues, VMs are running fine.
                                        My USB NIC setup / configuration stopped working, but that was somewhat expected.
                                        I will fix this and report back, if I have an idea why it broke.
                                        Works again after another shutdown / start sequence 😊

                                        1 Reply Last reply Reply Quote 1
                                        • H Offline
                                          HeMaN
                                          last edited by

                                          Updated xcp-ng 8.1 fully patched (Dell R710, dual L5640, 92GB).
                                          no regression to report (but I am not using Xendesktop, SDN, and my dhcp already contains hostname)

                                          1 Reply Last reply Reply Quote 1
                                          • olivierlambertO Offline
                                            olivierlambert Vates 🪐 Co-Founder CEO
                                            last edited by olivierlambert

                                            IMPORTANT Security updates!

                                            Calling all stations

                                            Please test it with yum update qemu --enablerepo=xcp-ng-testing.

                                            Might be a bad flaw, so earlier people get feedback, faster we can release it 🙂

                                            DanpD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post