Hello Chavdar,
Am 28.07.2020 um 18:48 schrieb Chavdar Ivanov:
This being a place people are trying samba4 as a DC, I got a
repeatable panic on one of the systems I am trying it on, as follows:
....
crash: _kvm_kvatop(0)
Crash version 9.99.69, image version 9.99.69.
Kernel compiled without options LOCKDEBUG.
System panicked: /: bad dir ino 657889 at offset 0: Bad dir (not
rounded), reclen=0x2e33, namlen=51, dirsiz=60 <= reclen=11827 <=
maxsize=512, flags=0x2005900, entryoffsetinblock=0, dirblksiz=512
Backtrace from time of crash is available.
_KERNEL_OPT_NARCNET() at 0
_KERNEL_OPT_DDB_HISTORY_SIZE() at _KERNEL_OPT_DDB_HISTORY_SIZE
sys_reboot() at sys_reboot
vpanic() at vpanic+0x15b
snprintf() at snprintf
ufs_lookup() at ufs_lookup+0x518
VOP_LOOKUP() at VOP_LOOKUP+0x42
lookup_once() at lookup_once+0x1a1
namei_tryemulroot() at namei_tryemulroot+0xacf
namei() at namei+0x29
vn_open() at vn_open+0x9a
do_open() at do_open+0x112
do_sys_openat() at do_sys_openat+0x72
sys_open() at sys_open+0x24
syscall() at syscall+0x26e
--- syscall (number 5) ---
syscall+0x26e:
....
that still looks like a file system inconsistency. Before the patch from
Chuck I also had the case several times that a filesystem that was
apparently repaired with fsck could no longer be trusted. After
importing the patched kernel, to be on the safe side, I recreated all
the file systems previously mounted with posix1eacls with newfs.
Presumably fsck is not prepared for the kind of inconsistency, and only
a newfs can restore a trustworthy initial state. What is the starting
point for you? Has the file system been created after the patch, or has
it only been treated with fsck so far?
In any case, I would advise you - if you have not already done so - to
use a separate partition or LVM volume for the sysvol with its own file
system, and to mount only this with the posix1eacls option. It seems the
ACL code still needs a lot of testingh, so at least you can be sure that
your root filesystem will not be affected.
Definitely good to know that you also test with Samba - many eyes see
more :-)
Best wishes
Matthias
