Commit Graph

1151 Commits

Author SHA1 Message Date
Thomas Lamprecht
a78931e1e5 update sources to Ubuntu-6.11.0-24.24
(generated with debian/scripts/import-upstream-tag)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2025-03-16 19:51:50 +01:00
Friedrich Weber
1fb1563b45 backport fix for network crashes when exiting ovs-tcpdump
A user in enterprise support reported a low (<1/50) chance of network
crash (with soft lockups reported) when exiting ovs-tcpdump (a tcpdump
wrapper provided by Open vSwitch) which they could only resolve by
rebooting the host.

After reporting the issue upstream with a reproducer [1], an OVS
developer submitted a kernel patch which is now included 6.13 and some
stable kernels. With this patch, the reproducer does not seem to
trigger the issue anymore. Hence, backport the patch.

[1] https://mail.openvswitch.org/pipermail/ovs-discuss/2025-January/053423.html

Signed-off-by: Friedrich Weber <f.weber@proxmox.com>
2025-01-24 13:41:42 +01:00
Stoiko Ivanov
8f6fe4f2f0 buildsys: add explicit DEB_VERSION variable in Makefile
Can be used to generate a package for testing a particular bugfix, or
new version, which can be shared with a small audience, without
reusing the current package version, or bumping to a version that
looks like our released kernels[0].

previously this could be accomplished by setting the PKGREL variable
to the revision and temporary suffix. PKGREL got dropped in:
de18530801 ("bump version to 6.2.16-8")
as each new version we release needs to have a ABI bump anyways (due
to module signing).

[0] e.g. new versions of submodules (ZFS), or packages shared in the
temp-dir of our CDN nodes

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
2025-01-23 09:10:58 +01:00
Thomas Lamprecht
7a5e09159f update ABI file for 6.11.11-1-pve
(generated with debian/scripts/abi-generate)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2025-01-17 18:24:24 +01:00
Thomas Lamprecht
2e2ac3cd3d buildsys: add PDM to upload target
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2025-01-17 18:24:15 +01:00
Thomas Lamprecht
634897b772 update firmware list
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2025-01-17 17:49:02 +01:00
Thomas Lamprecht
d1d3a8c002 update ZFS submodule to current master
no semantic change but include latest bump commits to avoid potential
confusion.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2025-01-17 17:49:02 +01:00
Thomas Lamprecht
30e83d2c18 bump version to 6.11.11-1
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2025-01-17 17:49:02 +01:00
Thomas Lamprecht
72d241207c fix #6065: cherry-pick "x86/mm: Don't disable PCID when INVLPG has been fixed by microcode"
Cherry-pick upstream commit f24f669d03f884a6ef95cca84317d0f329e93961
to avoid unnecessary performance penalty for setups with a new enough
CPU microcode update applied.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2025-01-17 16:42:31 +01:00
Thomas Lamprecht
4320d769ef update submodule and rebase patches for Ubuntu-6.11.0-17.17
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2025-01-17 16:39:38 +01:00
Thomas Lamprecht
e9ea280b7b update ZFS to 2.2.7
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2025-01-15 17:02:55 +01:00
Thomas Lamprecht
3f4d88534c d/scripts: add --full-index parameter to export-patchqueue
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-12-19 19:53:32 +01:00
Fiona Ebner
24bfa44438 backport fix for kvm performance regression with Intel Emerald Rapids
Adapted to context change in "arch/x86/kvm/cpuid.h", because of the
vcpu_supports_xsave_pkru() function that got added by Proxmox VE
downstream patch "kvm: xsave set: mask-out PKRU bit in xfeatures if
vCPU has no support". But otherwise clean cherry-pick from linux-next,
no functional changes.

Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
2024-12-19 19:52:25 +01:00
Fiona Ebner
f3ec9c1f62 patches: kernel: switch to using full index for patch files
git will automatically change the length of the index hashes when
formatting a patch depending on what references are present in the
submodule. After pulling in the stable tags today, git wanted to add
a character to all hashes for me. Use --full-index when generating the
patches to avoid such issues in the future.

No functional change intended.

Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
2024-12-19 19:52:25 +01:00
Thomas Lamprecht
6fe4c2cb8d update ABI file for 6.11.0-2-pve
(generated with debian/scripts/abi-generate)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-12-04 14:27:39 +01:00
Thomas Lamprecht
e9bbc10267 update firmware list
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-12-04 14:10:44 +01:00
Thomas Lamprecht
f4e8296418 bump version to 6.11.0-2
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-12-04 11:29:45 +01:00
Thomas Lamprecht
a872f278b9 rebase patches on top of Ubuntu-6.11.0-13.14
(generated with debian/scripts/import-upstream-tag)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-12-04 11:27:29 +01:00
Thomas Lamprecht
b50ca75ce2 update sources to Ubuntu-6.11.0-13.14
(generated with debian/scripts/import-upstream-tag)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-12-04 11:27:29 +01:00
Stoiko Ivanov
d4dcf2b536 revert Ubuntu patch disabling IOMMU functionality for Skylake iGPU
This change breaks passthrough of the iGPU on older Intel Plattforms
(Skylake)
https://forum.proxmox.com/threads/.157266

The patch was orignally applied by Ubuntu upstream for an issue
unrelated to passthrough - flickering of the display with these chips,
where some comments suggest that setting intel_iommu=igfx_off does not
fix the issue, while the patch explicitly says it does the same as
setting intel_iommu=igfx_off - my quick glance at the code agrees with
the patch author, with the downside that with the patch you cannot
enable it again via kernel_cmdline.
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2062951

As this is a regression, and our user-base does not seem to have
encountered the issue with flickering displays simply revert the
change for now. A proper fix seems to be in the makings in linux
upstream (according to the launchpad issue)

I tested this on an old machine we had lying around - reverting the
patch suppressed the message:
pci 0000:00:02.0: DMAR: Disabling IOMMU for graphics on this chipset
(also did not notice any flickering in a short graphic session
(wayland+kde)).

I'd suggest pulling this also into our 6.8 kernel (but this can also happen
after we get some feedback that it indeed fixes the issue of the
reporters in the forum)

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
2024-11-27 20:23:26 +01:00
Stoiko Ivanov
21160ccd40 fix #5926: cherry-pick ACS-quirk fix from linux-stable/6.11.7
the latest linux-stable pull I found in ubuntu-oracular was for 6.11.5
- this fix here seems targeted enough. see also the discussion
upstream:
https://lore.kernel.org/all/20241029163317.GA216411@nvidia.com/

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
2024-11-27 20:23:26 +01:00
Fiona Ebner
2519c2669d d/rules: enable CONFIG_MEMCG_V1 needed for legacy containers
As reported in the community forum [0], containers requiring cgroup v1
would not start anymore, even when systemd.unified_cgroup_hierarchy=0
was set on the kernel commandline. The error message would be:

> cgfsng_setup_limits_legacy: 3442 No such file or directory - Failed to set "memory.limit_in_bytes" to "536870912"

Kernel commit e93d4166b40a ("mm: memcg: put cgroup v1-specific code
under a config option"), which was first shipped in v6.11, made it
necessary to explicitly enable the new associated Kconfig flag.

[0]: https://forum.proxmox.com/threads/156830/

Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
 [TL: note that the commit was first shipped with 6.11 ]
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-11-06 17:16:17 +01:00
Fiona Ebner
a681faec23 cherry-pick fix mitigating host reboot issue affecting certain AMD Zen4 CPU models
Reported in the community forum:
Issue: https://forum.proxmox.com/threads/139500/
Fix: https://forum.proxmox.com/threads/139500/post-717968

Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
2024-11-06 15:58:11 +01:00
Thomas Lamprecht
035534f88e update ABI file for 6.11.0-1-pve
(generated with debian/scripts/abi-generate)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-10-24 11:24:14 +02:00
Thomas Lamprecht
bd86b34a04 bump version to 6.11.0-1
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-10-24 09:22:52 +02:00
Thomas Lamprecht
e4a79ff812 update fwlist for 6.11.0
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-10-24 09:22:40 +02:00
Thomas Lamprecht
ecf3bf697d update ZFS submodule to include 6.11 compat patches
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-10-24 09:22:19 +02:00
Thomas Lamprecht
560cce22a7 update submodule and rebase patches for Oracular 6.11 based kernel
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-10-24 09:21:45 +02:00
Thomas Lamprecht
91a1395d53 update ABI file for 6.8.12-3-pve
(generated with debian/scripts/abi-generate)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-10-23 15:30:27 +02:00
Thomas Lamprecht
123bb15c43 bump version to 6.8.12-3
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-10-23 13:41:39 +02:00
Christian Ebner
e64f4bfb14 fix #5683: netfs: reset subreq iov iter before tail clean
Fixes rare read corruption issues using the in kernel ceph client.

On incomplete read requests, the clean tail flag should make sure to
zero fill the remaining bytes for the subrequest.
If the iov iterator is not at the correct position, e.g., because the
subreq->transferred was not yet updated, this can however zero fill
downloaded data, corrupting the read content.

Link to issue:
https://bugzilla.proxmox.com/show_bug.cgi?id=5683

Link to upstream issue:
https://bugzilla.kernel.org/show_bug.cgi?id=219237

Signed-off-by: Christian Ebner <c.ebner@proxmox.com>
 [ TL: mention an specific example for subreq misalignment ]
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-10-23 13:08:26 +02:00
Daniel Kral
0fd4977d31 fix #5430: cherry-pick fix for ocfs2 io_uring rw issues
Reported in the community forum [0].

This fixes an issue with read/write operations done on ocfs2 with
io_uring. This has caused QEMU guests to be unable to determine the file
format at [1] because of an unsuccessful read and therefore could not
boot, which has been resolved with this patch.

This patch is already merged in Jens Axboe's linux-block tree and also
merged in the mainline v6.12 prepatch kernels:

> # git tag --contains c0a9d496e0fece67db777bd48550376cf2960c47
> v6.12-rc1
> v6.12-rc2
> v6.13-rc3

[0] https://forum.proxmox.com/threads/140273/post-702007
[1] https://elixir.bootlin.com/qemu/v9.0.2/source/block.c#L1031

Signed-off-by: Daniel Kral <d.kral@proxmox.com>
2024-10-22 16:02:24 +02:00
Thomas Lamprecht
144fbc40a5 update ABI file for 6.8.12-2-pve
(generated with debian/scripts/abi-generate)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-09-05 14:42:37 +02:00
Thomas Lamprecht
5abce78024 bump version to 6.8.12-2
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-09-05 12:03:24 +02:00
Thomas Lamprecht
9e5033a1b6 update ZFS submodule to 2.2.6
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-09-05 12:03:05 +02:00
Thomas Lamprecht
b29c009196 cherry-pick "PCI: pciehp: Retain Power Indicator bits for userspace indicators"
cherry-picked from Linux kernel.org upstream commit
5560a612c20d3daacbf5da7913deefa5c31742f4

The issue was reported in the enterprise support. The customer
contacted the ledmon maintainer, who found that it is not an issue
with ledmon, bisected the kernel and came up with this fix

Originally-by: Fiona Ebner <f.ebner@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-09-05 09:27:11 +02:00
Thomas Lamprecht
cc43fddf5f update kernel submodule to Ubuntu-6.8.0-45.45
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-09-05 08:58:23 +02:00
Thomas Lamprecht
a37a8d7a49 update ABI file for 6.8.12-1-pve
(generated with debian/scripts/abi-generate)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-08-05 18:43:52 +02:00
Thomas Lamprecht
f6b0024e2f update firmware list
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-08-05 18:40:34 +02:00
Thomas Lamprecht
12593f0f92 bump version to 6.8.12-1
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-08-05 18:17:52 +02:00
Thomas Lamprecht
d17df467e1 rebase patches on top of Ubuntu-6.8.0-43.43
(generated with debian/scripts/import-upstream-tag)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-08-05 18:16:10 +02:00
Thomas Lamprecht
170c44772c update sources to Ubuntu-6.8.0-43.43
(generated with debian/scripts/import-upstream-tag)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-08-05 18:16:10 +02:00
Fiona Ebner
af6a9f701d cherry-pick fix for bnxt_re driver
Reported in the community forum:
https://forum.proxmox.com/threads/144557/post-689148

Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
2024-08-05 18:10:52 +02:00
Fiona Ebner
40e698c64b cherry-pick fix for NULL pointer dereference in apparmorfs
Reported in the community forum:
https://forum.proxmox.com/threads/145760/post-690328

Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
2024-08-05 18:10:52 +02:00
Fabian Grünbichler
775c9e744e update ABI file for 6.8.8-4-pve
(generated with debian/scripts/abi-generate)

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2024-07-26 14:02:39 +02:00
Fabian Grünbichler
d5815a05cc bump version to 6.8.8-4-pve
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2024-07-26 13:17:25 +02:00
Fiona Ebner
a791b86e0a backport fixes for missing verification for short frames in network tap/tun devices
A malicious guest with virtio-net device could apparently crash the
host [0]. Fixes CVE-2024-41090 and CVE-2024-41091. Reported in the
community forum [1].

[0]: https://seclists.org/oss-sec/2024/q3/110
[1]: https://forum.proxmox.com/threads/151813/

Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>
2024-07-26 13:13:20 +02:00
Thomas Lamprecht
69b55c504c update ABI file for 6.8.8-3-pve
(generated with debian/scripts/abi-generate)

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-07-17 17:49:06 +02:00
Thomas Lamprecht
96821b3e50 bump version to 6.8.8-3
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2024-07-17 17:49:06 +02:00
Fabian Grünbichler
88016b9eb4 fix #5558: cherry-pick NFSv4 fix
picked from v6.9.8, the bug can cause lost NFS connections according to
upstream, and possibly corrupt backups according to our user report.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2024-07-16 18:14:56 +02:00