Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-11 Thread Hans van Kranenburg
On 01/10/2018 06:50 AM, Juergen Gross wrote: > On 09/01/18 23:11, Hans van Kranenburg wrote: >> On 01/09/2018 07:22 PM, Rich Persaud wrote: >>> >> >>> Since the primary audience for security fixes are production >>> deployments of Xen where customer assets are at risk, is there an >>> estimate for

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-10 Thread Anthony Liguori
On Wed, Jan 10, 2018 at 4:27 AM, Wei Liu wrote: > On Wed, Jan 10, 2018 at 08:32:24AM +, Roger Pau Monné wrote: >> On Tue, Jan 09, 2018 at 07:43:51PM +, Wei Liu wrote: >> > On Mon, Jan 08, 2018 at 05:45:32PM +, Ian Jackson wrote: >> > > AIUI we have a series for pv-in-pvh shim which is

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-10 Thread Wei Liu
On Wed, Jan 10, 2018 at 08:32:24AM +, Roger Pau Monné wrote: > On Tue, Jan 09, 2018 at 07:43:51PM +, Wei Liu wrote: > > On Mon, Jan 08, 2018 at 05:45:32PM +, Ian Jackson wrote: > > > AIUI we have a series for pv-in-pvh shim which is nearing completion > > > in the sense that it will hav

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-10 Thread Roger Pau Monné
On Tue, Jan 09, 2018 at 07:43:51PM +, Wei Liu wrote: > On Mon, Jan 08, 2018 at 05:45:32PM +, Ian Jackson wrote: > > AIUI we have a series for pv-in-pvh shim which is nearing completion > > in the sense that it will have been well-tested (especially the > > hypervisor parts) and has good fun

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Juergen Gross
On 09/01/18 23:11, Hans van Kranenburg wrote: > On 01/09/2018 07:22 PM, Rich Persaud wrote: On Jan 9, 2018, at 12:56, Stefano Stabellini wrote: On Tue, 9 Jan 2018, Doug Goldstein wrote: On 1/9/18 11:33 AM, Jan Beulich wrote: On 09.01.18 at 18:23, wrote: >> O

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread pedro
On 2018-01-10 11:11, Hans van Kranenburg wrote: Since the primary audience for security fixes are production deployments of Xen where customer assets are at risk, is there an estimate for the percentage/size of Xen deployments where PVH (not only Xen 4.10) has already been deployed for product

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Mike Latimer
On 01/09/2018 01:57 PM, Matt Wilson wrote: > Let me know if you need any help with the sidecar script. Generally > it's straightforward enough to build so I'm sure you won't have any > trouble. Here's one that I used for local testing on my laptop in a > CentOS-ish chroot (we have other bits respon

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Hans van Kranenburg
On 01/09/2018 07:22 PM, Rich Persaud wrote: >>> On Jan 9, 2018, at 12:56, Stefano Stabellini wrote: >>> >>> On Tue, 9 Jan 2018, Doug Goldstein wrote: >>> On 1/9/18 11:33 AM, Jan Beulich wrote: >>> On 09.01.18 at 18:23, wrote: > On Tue, Jan 9, 2018 at 8:52 AM, Stefano Stabellini > wro

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Matt Wilson
On Tue, Jan 09, 2018 at 05:58:46PM +, Wei Liu wrote: > > Ian has been busy writing the sidecar script and Roger and I have been > working on cleaning up the branch. We want to post a new version as > soon as possible (tomorrow or even tonight). Ian, Let me know if you need any help with the

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Anthony Liguori
On Tue, Jan 9, 2018 at 11:43 AM, Wei Liu wrote: > On Mon, Jan 08, 2018 at 05:45:32PM +, Ian Jackson wrote: >> AIUI we have a series for pv-in-pvh shim which is nearing completion >> in the sense that it will have been well-tested (especially the >> hypervisor parts) and has good functionality.

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Wei Liu
On Mon, Jan 08, 2018 at 05:45:32PM +, Ian Jackson wrote: > AIUI we have a series for pv-in-pvh shim which is nearing completion > in the sense that it will have been well-tested (especially the > hypervisor parts) and has good functionality. (Wei is handling the > assembly of this series.) >

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Rich Persaud
>> On Jan 9, 2018, at 12:56, Stefano Stabellini wrote: >> >> On Tue, 9 Jan 2018, Doug Goldstein wrote: >> On 1/9/18 11:33 AM, Jan Beulich wrote: >> On 09.01.18 at 18:23, wrote: On Tue, Jan 9, 2018 at 8:52 AM, Stefano Stabellini wrote: >>> On Tue, 9 Jan 2018, George Dunlap wrot

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread George Dunlap
On 01/09/2018 06:13 PM, Doug Goldstein wrote: > On 1/8/18 11:45 AM, Ian Jackson wrote: >> But this is not a usual situation. This time, we don't have the time >> to wait. >> >> Opinions ? > > I'm going to follow up with a top post with my feelings and from info on > various parts of the thread. >

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Doug Goldstein
On 1/8/18 11:45 AM, Ian Jackson wrote: > But this is not a usual situation. This time, we don't have the time > to wait. > > Opinions ? I'm going to follow up with a top post with my feelings and from info on various parts of the thread. We have 2 versions of PV shim, the Citrix version and the

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Wei Liu
On Tue, Jan 09, 2018 at 11:59:01AM -0600, Doug Goldstein wrote: > On 1/9/18 5:50 AM, Wei Liu wrote: > > > > We haven't tested booting the series I posted in HVM mode, but off the > > top of my head it should work in HVM mode as well -- the multiboot path > > is left intact. > > > > Can we actual

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Wei Liu
On Tue, Jan 09, 2018 at 09:23:03AM -0800, Anthony Liguori wrote: > On Tue, Jan 9, 2018 at 8:52 AM, Stefano Stabellini > wrote: > > On Tue, 9 Jan 2018, George Dunlap wrote: > >> On Mon, Jan 8, 2018 at 9:01 PM, Rich Persaud wrote: > >> > On a similarly pragmatic note: would a variation of Anthony's

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Doug Goldstein
On 1/9/18 5:50 AM, Wei Liu wrote: > > We haven't tested booting the series I posted in HVM mode, but off the > top of my head it should work in HVM mode as well -- the multiboot path > is left intact. > Can we actually do this before committing to this series? I've seen a number of "this should

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Stefano Stabellini
On Tue, 9 Jan 2018, Doug Goldstein wrote: > On 1/9/18 11:33 AM, Jan Beulich wrote: > On 09.01.18 at 18:23, wrote: > >> On Tue, Jan 9, 2018 at 8:52 AM, Stefano Stabellini > >> wrote: > >>> On Tue, 9 Jan 2018, George Dunlap wrote: > On Mon, Jan 8, 2018 at 9:01 PM, Rich Persaud wrote: > >

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Doug Goldstein
On 1/8/18 3:44 PM, Anthony Liguori wrote: > > It's not particularly hard to plumb through I think but if you are > using PCI passthrough for PV, then you really shouldn't worry about > Spectre/Meltdown. That PV guest can already read all of physical > memory (since no IOMMU is used) and they can

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Doug Goldstein
On 1/9/18 11:33 AM, Jan Beulich wrote: On 09.01.18 at 18:23, wrote: >> On Tue, Jan 9, 2018 at 8:52 AM, Stefano Stabellini >> wrote: >>> On Tue, 9 Jan 2018, George Dunlap wrote: On Mon, Jan 8, 2018 at 9:01 PM, Rich Persaud wrote: > On a similarly pragmatic note: would a variation of

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Anthony Liguori
On Tue, Jan 9, 2018 at 9:33 AM, Jan Beulich wrote: On 09.01.18 at 18:23, wrote: >> On Tue, Jan 9, 2018 at 8:52 AM, Stefano Stabellini >> wrote: >>> On Tue, 9 Jan 2018, George Dunlap wrote: On Mon, Jan 8, 2018 at 9:01 PM, Rich Persaud wrote: > On a similarly pragmatic note: would

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Jan Beulich
>>> On 09.01.18 at 18:23, wrote: > On Tue, Jan 9, 2018 at 8:52 AM, Stefano Stabellini > wrote: >> On Tue, 9 Jan 2018, George Dunlap wrote: >>> On Mon, Jan 8, 2018 at 9:01 PM, Rich Persaud wrote: >>> > On a similarly pragmatic note: would a variation of Anthony's vixen patch > series be suitable

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Anthony Liguori
On Tue, Jan 9, 2018 at 8:52 AM, Stefano Stabellini wrote: > On Tue, 9 Jan 2018, George Dunlap wrote: >> On Mon, Jan 8, 2018 at 9:01 PM, Rich Persaud wrote: >> > On a similarly pragmatic note: would a variation of Anthony's vixen patch >> > series be suitable for pre-PVH Xen 4.6 - 4.9? These ver

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Stefano Stabellini
On Tue, 9 Jan 2018, George Dunlap wrote: > On Mon, Jan 8, 2018 at 9:01 PM, Rich Persaud wrote: > > On a similarly pragmatic note: would a variation of Anthony's vixen patch > > series be suitable for pre-PVH Xen 4.6 - 4.9? These versions are currently > > documented as security-supported (Oct 2

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Anthony Liguori
On Tue, Jan 9, 2018 at 2:49 AM, Ian Jackson wrote: > Andrew Cooper writes ("Re: Radical proposal: ship not-fully-tidied shim as > 4.10.1"): >> Does this sound fair? > > Everything is on fire. Your proposal seems much less radical than > mine. I doubt it will produce a release to our users tomor

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Roger Pau Monné
On Tue, Jan 09, 2018 at 06:08:53AM -0800, Anthony Liguori wrote: > On Jan 9, 2018 2:59 AM, "Ian Jackson" wrote: > > George Dunlap writes ("Re: Radical proposal: ship not-fully-tidied shim as > 4.10.1"): > > On 01/09/2018 10:53 AM, Ian Jackson wrote: > > > And as my other mail suggests, I don't th

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Anthony Liguori
On Jan 9, 2018 2:59 AM, "Ian Jackson" wrote: George Dunlap writes ("Re: Radical proposal: ship not-fully-tidied shim as 4.10.1"): > On 01/09/2018 10:53 AM, Ian Jackson wrote: > > And as my other mail suggests, I don't think we should allow this work > > to be blocked by outstanding reviewed. IMO

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Wei Liu
On Tue, Jan 09, 2018 at 01:24:02AM -0700, Jan Beulich wrote: > >>> On 09.01.18 at 01:14, wrote: > > On 08/01/2018 17:45, Ian Jackson wrote: > >> AIUI we have a series for pv-in-pvh shim which is nearing completion > >> in the sense that it will have been well-tested (especially the > >> hypervisor

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Ian Jackson
George Dunlap writes ("Re: Radical proposal: ship not-fully-tidied shim as 4.10.1"): > On 01/09/2018 10:53 AM, Ian Jackson wrote: > > And as my other mail suggests, I don't think we should allow this work > > to be blocked by outstanding reviewed. IMO we should ship what we > > have ASAP. > > We

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread George Dunlap
On 01/09/2018 10:53 AM, Ian Jackson wrote: > Andrew Cooper writes ("Re: Radical proposal: ship not-fully-tidied shim as > 4.10.1"): >> What I mean by this is >> that, if we agree to go along this route, patches should be committed to >> staging then immediately cherrypicked to staging-4.10, rather

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Ian Jackson
Andrew Cooper writes ("Re: Radical proposal: ship not-fully-tidied shim as 4.10.1"): > What I mean by this is > that, if we agree to go along this route, patches should be committed to > staging then immediately cherrypicked to staging-4.10, rather than > committed to staging-4.10 directly. This e

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Ian Jackson
Andrew Cooper writes ("Re: Radical proposal: ship not-fully-tidied shim as 4.10.1"): > Does this sound fair? Everything is on fire. Your proposal seems much less radical than mine. I doubt it will produce a release to our users tomorrow, let alone this week. If we can't get agreement to commit

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread George Dunlap
On Mon, Jan 8, 2018 at 9:01 PM, Rich Persaud wrote: > On a similarly pragmatic note: would a variation of Anthony's vixen patch > series be suitable for pre-PVH Xen 4.6 - 4.9? These versions are currently > documented as security-supported (Oct 2018 - July 2020). Hmm, Ian's mail seems to be fo

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-09 Thread Jan Beulich
>>> On 09.01.18 at 01:14, wrote: > On 08/01/2018 17:45, Ian Jackson wrote: >> AIUI we have a series for pv-in-pvh shim which is nearing completion >> in the sense that it will have been well-tested (especially the >> hypervisor parts) and has good functionality. (Wei is handling the >> assembly o

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-08 Thread Andrew Cooper
On 08/01/2018 17:45, Ian Jackson wrote: > AIUI we have a series for pv-in-pvh shim which is nearing completion > in the sense that it will have been well-tested (especially the > hypervisor parts) and has good functionality. (Wei is handling the > assembly of this series.) > > The series, however,

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-08 Thread Rich Persaud
> On Jan 8, 2018, at 16:44, Anthony Liguori wrote: >> On Mon, Jan 8, 2018 at 1:01 PM, Rich Persaud wrote: >> On a similarly pragmatic note: would a variation of Anthony's vixen patch >> series be suitable for pre-PVH Xen 4.6 - 4.9? These versions are currently >> documented as security-support

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-08 Thread Anthony Liguori
On Mon, Jan 8, 2018 at 1:01 PM, Rich Persaud wrote: >> On Jan 8, 2018, at 12:45, Ian Jackson wrote: >> >> AIUI we have a series for pv-in-pvh shim which is nearing completion >> in the sense that it will have been well-tested (especially the >> hypervisor parts) and has good functionality. (Wei

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-08 Thread Rich Persaud
> On Jan 8, 2018, at 12:45, Ian Jackson wrote: > > AIUI we have a series for pv-in-pvh shim which is nearing completion > in the sense that it will have been well-tested (especially the > hypervisor parts) and has good functionality. (Wei is handling the > assembly of this series.) > > The seri

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-08 Thread Lars Kurth
> On 8 Jan 2018, at 17:45, Ian Jackson wrote: > > > But this is not a usual situation. This time, we don't have the time > to wait. > > Opinions ? > > Ian. +1 ___ Xen-devel mailing list Xen-devel@lists.xenproject.org https://lists.xenproject.org/

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-08 Thread Anthony Liguori
On Mon, Jan 8, 2018 at 10:13 AM, Konrad Rzeszutek Wilk wrote: > On Mon, Jan 08, 2018 at 05:45:32PM +, Ian Jackson wrote: >> AIUI we have a series for pv-in-pvh shim which is nearing completion >> in the sense that it will have been well-tested (especially the >> hypervisor parts) and has good

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-08 Thread Konrad Rzeszutek Wilk
On Mon, Jan 08, 2018 at 05:45:32PM +, Ian Jackson wrote: > AIUI we have a series for pv-in-pvh shim which is nearing completion > in the sense that it will have been well-tested (especially the > hypervisor parts) and has good functionality. (Wei is handling the > assembly of this series.) >

Re: [Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-08 Thread Anthony Liguori
On Mon, Jan 8, 2018 at 9:45 AM, Ian Jackson wrote: > AIUI we have a series for pv-in-pvh shim which is nearing completion > in the sense that it will have been well-tested (especially the > hypervisor parts) and has good functionality. (Wei is handling the > assembly of this series.) > > The seri

[Xen-devel] Radical proposal: ship not-fully-tidied shim as 4.10.1

2018-01-08 Thread Ian Jackson
AIUI we have a series for pv-in-pvh shim which is nearing completion in the sense that it will have been well-tested (especially the hypervisor parts) and has good functionality. (Wei is handling the assembly of this series.) The series, however, needs proper review and tidying up. Specifically,