From xen-users-bounces@lists.xenproject.org Tue Oct 07 13:42:26 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 07 Oct 2025 13:42:26 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1138836.1474436 (Exim 4.92) (envelope-from ) id 1v67wY-0004el-23; Tue, 07 Oct 2025 13:41:30 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1138836.1474436; Tue, 07 Oct 2025 13:41:30 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v67wX-0004ee-V9; Tue, 07 Oct 2025 13:41:29 +0000 Received: by outflank-mailman (input) for mailman id 1138836; Tue, 07 Oct 2025 13:41:29 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v67wW-0004eR-Fm for xen-users@lists.xenproject.org; Tue, 07 Oct 2025 13:41:28 +0000 Received: from smtp.tiscali.it (michael-notr.mail.tiscali.it [213.205.33.216]) by se1-gles-flk1.inumbo.com (Halon) with ESMTP id 4fd67f68-a383-11f0-9809-7dc792cee155; Tue, 07 Oct 2025 15:41:23 +0200 (CEST) Received: from [192.168.2.254] ([62.97.44.210]) by michael.mail.tiscali.it with id nRhM2F0014Y4eqe01RhMpp; Tue, 07 Oct 2025 13:41:22 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 4fd67f68-a383-11f0-9809-7dc792cee155 X-Spam-Final-Verdict: clean X-Spam-State: 0 X-Spam-Score: 0 X-Spam-Verdict: clean x-auth-user: jclark@tiscali.it Content-Type: multipart/alternative; boundary="------------vc5faQ0AnbQ3e0yp0A2z0m1K" Message-ID: Date: Tue, 7 Oct 2025 15:41:20 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: "Mario V. Guenzi" Content-Language: en-US, it-IT To: xen-users@lists.xenproject.org Subject: Minimal performance gain with jumbo frames (MTU 9000) during VM migration DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tiscali.it; s=smtp; t=1759844482; bh=HVe9IcmDRbWlDca+pduR7N5JCNf3q8VAevwnmKaC3y4=; h=Date:From:To:Subject; b=yXRgXBbZM53HdcN5x2glLxSSIxFPSE3TFrkXYldM/fWKW4zhOemKlExPpRr5iVmID M7tZ3I3kIQB1SqqaIkDxUWVzHGMRA3EoXJmgLeZInhEt7K0qIqShtVwPJ6vmPXaUN7 m9TkrMCHm8hySxTBsgdsTQZXpw63SFFXkzzIzN5Y= This is a multi-part message in MIME format. --------------vc5faQ0AnbQ3e0yp0A2z0m1K Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Hi everyone, I'm trying to configure jumbo frames on two cluster nodes running Xen 4.17. Both nodes are on Devuan 5, and the NICs are *Intel Corporation Ethernet Controller 10-Gigabit X540-AT2.* At boot, I apply the following MTU settings: |post-up ifconfig eth05 mtu 9000 && ifconfig eth07 mtu 9000 && ifconfig bond1 mtu 9000 | The two NICs are bonded with these settings: |bond-slaves eth05 eth07 bond-primary eth05 bond-mode 0 bond-miimon 100 bond-updelay 200 bond-downdelay 200 | In |rc.local| I enable the following offload options: |ethtool -K eth05 rx on ethtool -K eth05 tx on ethtool -K eth05 sg on ethtool -K eth05 tso on ethtool -K eth05 gso on ethtool -K eth05 gro off | Sysctl/kernel network tuning parameters: |net.core.somaxconn = 1000 net.core.netdev_max_backlog = 300000 net.core.rmem_max = 16777216 net.core.wmem_max = 16777216 net.ipv4.tcp_max_syn_backlog = 8096 net.ipv4.tcp_slow_start_after_idle = 0 net.ipv4.tcp_tw_reuse = 1 net.ipv4.ip_local_port_range = 10240 65535 net.ipv4.tcp_rmem = 4096 87380 16777216 net.ipv4.tcp_wmem = 4096 65536 16777216 net.ipv4.tcp_mtu_probing = 1 net.ipv4.route.flush = 1 net.ipv4.tcp_timestamps = 0 net.ipv4.tcp_fin_timeout = 15 net.ipv4.tcp_sack = 0 net.ipv4.tcp_moderate_rcvbuf = 1 vm.vfs_cache_pressure = 50 | The issue: When I perform a VM live migration between the two nodes, the difference between MTU 1500 and 9000 is negligible—only about *2–3 seconds faster *with jumbo frames enabled. Does anyone know what I might be missing or doing wrong? Any tips or insights would be greatly appreciated. Thanks in advance and best regards ------------------------------------------------------------------------ -- Mario Vittorio Guenzi E-mailjclark@tiscali.it Si vis pacem, para bellum --------------vc5faQ0AnbQ3e0yp0A2z0m1K Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit

Hi everyone,

I'm trying to configure jumbo frames on two cluster nodes running Xen 4.17.
Both nodes are on Devuan 5, and the NICs are Intel Corporation Ethernet Controller 10-Gigabit X540-AT2.

At boot, I apply the following MTU settings:

post-up ifconfig eth05 mtu 9000 && ifconfig eth07 mtu 9000 && ifconfig bond1 mtu 9000

The two NICs are bonded with these settings:

bond-slaves eth05 eth07
bond-primary eth05
bond-mode 0
bond-miimon 100
bond-updelay 200
bond-downdelay 200

In rc.local I enable the following offload options:

ethtool -K eth05 rx on
ethtool -K eth05 tx on
ethtool -K eth05 sg on
ethtool -K eth05 tso on
ethtool -K eth05 gso on
ethtool -K eth05 gro off

Sysctl/kernel network tuning parameters:

net.core.somaxconn = 1000
net.core.netdev_max_backlog = 300000
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_max_syn_backlog = 8096
net.ipv4.tcp_slow_start_after_idle = 0
net.ipv4.tcp_tw_reuse = 1
net.ipv4.ip_local_port_range = 10240 65535
net.ipv4.tcp_rmem = 4096 87380 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216
net.ipv4.tcp_mtu_probing = 1
net.ipv4.route.flush = 1
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_sack = 0
net.ipv4.tcp_moderate_rcvbuf = 1
vm.vfs_cache_pressure = 50

The issue:
When I perform a VM live migration between the two nodes, the difference between MTU 1500 and 9000 is negligible—only about 2–3 seconds faster with jumbo frames enabled.

Does anyone know what I might be missing or doing wrong?
Any tips or insights would be greatly appreciated.

Thanks in advance and best regards


-- 
 
Mario Vittorio Guenzi
E-mail jclark@tiscali.it
Si vis pacem, para bellum
--------------vc5faQ0AnbQ3e0yp0A2z0m1K-- From xen-users-bounces@lists.xenproject.org Wed Oct 08 11:10:46 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 08 Oct 2025 11:10:46 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1139446.1474795 (Exim 4.92) (envelope-from ) id 1v6S3V-0000Qb-L1; Wed, 08 Oct 2025 11:10:01 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1139446.1474795; Wed, 08 Oct 2025 11:10:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v6S3V-0000OO-EJ; Wed, 08 Oct 2025 11:10:01 +0000 Received: by outflank-mailman (input) for mailman id 1139446; Wed, 08 Oct 2025 11:10:00 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v6S3U-0000Lz-HT for xen-users@lists.xenproject.org; Wed, 08 Oct 2025 11:10:00 +0000 Received: from mail-io1-xd33.google.com (mail-io1-xd33.google.com [2607:f8b0:4864:20::d33]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 4e3c7b61-a437-11f0-9809-7dc792cee155; Wed, 08 Oct 2025 13:09:49 +0200 (CEST) Received: by mail-io1-xd33.google.com with SMTP id ca18e2360f4ac-937b40137b4so33529639f.0 for ; Wed, 08 Oct 2025 04:09:49 -0700 (PDT) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 4e3c7b61-a437-11f0-9809-7dc792cee155 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1759921788; x=1760526588; darn=lists.xenproject.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=WQC1pTt1NusZh+vH9Bn8jii+Hyi7OOIilxBqdSpTqk0=; b=f7NwMer2uyhgMyoiNYg/CtrJGiMhdAzh2/lLn9x0LSb9kXmB5zhzGid+IjSsz7y8Z5 g+x9luwPaGJU9YkvoYdU3gWFNXigobXCBQgtbj73J2kqXC4ohxKwVyV6CwQrP3BLYFUu QrI2xn6Z2CdlXqsWCGwsECoJV8IF83wjOSRq1Qru7hvRILh2L7WEZplsgy2Ql3u29dno lnoX6Z06eF1/CJj/2NEEMfDN/CGiVDMjLyj5iUlOoU5CrvZ954RxHNXjf83R/eKYOPhC qSJ0cY7SHxjp54AvT3RGJcaTa/MgtLMPDeWi6+c8aX6zAhdGKta6I3feoXZEQpP3D0no D8fQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1759921788; x=1760526588; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=WQC1pTt1NusZh+vH9Bn8jii+Hyi7OOIilxBqdSpTqk0=; b=m2Vqv8K8DgbOkGaL85yp2bLd/snr+Hn8ytvOryBaMzAIMAWiUOEaGhqTZaYce+GxIm PdmGbNLpwnwS1K8wWq7WekaB+wh2C8FjFVb8t/WHCAIdDNLNAupF+yZZtLFDiCt4i3/1 ENVSp6uqOcIK9Zng80il3U8RxFl6m11bAxAjGjNnhmLKLN7sAKm+0MptNw3FOG/lWxby /hPkOtrnYUjF1hJCqIZnjcDvKY0Jdw1f+lPEt4/yxJxLERju/8LMre7v/GJEyy+2WpJw dbUiA5HcFu0gMjhfmeP2BXRCm601eTfDzZVT7ydWEAMoHgIGVgV9cykmEYPDvDvyZMzA qkvg== X-Gm-Message-State: AOJu0YxBsUu0qcD4SkeUkjK7E29vlUjEdN5LlDcIjiGhYoPiJIiwQFsi je2aPs4d+sqZEkBD1BZDH1/oulWYJsqGtrfL9TGy7YrHm42vRX54IxZJ03nIKq8NgXgB6UIOV2Z 6YRreM5du9au3dnT1XGczDfFmse1AUiU= X-Gm-Gg: ASbGncvERDsGpjDy6QyVnX75Le97StRQUvq2uy4gzu6fXq40cZ+z+wtvYngus8pgkWQ Gpo3rWHNR1aL1LsMgOzs9Su+xjig8ug2ksGwTbcLNS9uxOVN88OA2dKMkh/bFo/yQWZaYBKRCz6 xlQYm6UwOUiFuXrEeGCezrRm/i5jg04dD4ropGU6L6K4MUuyoYGdUqBj+KGh27ejx6jlW6HEuQ+ S66ByR0zavFD8TafVAZ042uUdFoVtA= X-Google-Smtp-Source: AGHT+IEIvjRlVK4RK00JSv4q4V+f8O+xhQ4J2OsKeD8avGNq2jqfw1zJ/OwcoUWzo0/AJMSl4vbrGiJr+BeGrc2H6uo= X-Received: by 2002:a05:6e02:19cb:b0:42d:83cf:7eba with SMTP id e9e14a558f8ab-42f87325ceemr25345695ab.0.1759921788427; Wed, 08 Oct 2025 04:09:48 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Cyrus Date: Wed, 8 Oct 2025 08:06:57 -0300 X-Gm-Features: AS18NWAfECWNKFIrEelEl6-EWNuoDCpFnDPbvBnz0QwCmMbkkSIl0UeoKzmNvdc Message-ID: Subject: Re: Minimal performance gain with jumbo frames (MTU 9000) during VM migration To: "Mario V. Guenzi" Cc: xen-users@lists.xenproject.org Content-Type: multipart/alternative; boundary="0000000000000824c60640a3b9ec" --0000000000000824c60640a3b9ec Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Good morning Mario, Usually Jumbo Frames will lead you to lower CPU usage for the same heavy workload, not more throughput. What's the throughput you are seen on those ports?. Regards, CI On Tue, Oct 7, 2025, 11:52 Mario V. Guenzi wrote: > Hi everyone, > > I'm trying to configure jumbo frames on two cluster nodes running Xen 4.1= 7. > Both nodes are on Devuan 5, and the NICs are *Intel Corporation Ethernet > Controller 10-Gigabit X540-AT2.* > > At boot, I apply the following MTU settings: > > post-up ifconfig eth05 mtu 9000 && ifconfig eth07 mtu 9000 && ifconfig bo= nd1 mtu 9000 > > The two NICs are bonded with these settings: > > bond-slaves eth05 eth07 > bond-primary eth05 > bond-mode 0 > bond-miimon 100 > bond-updelay 200 > bond-downdelay 200 > > In rc.local I enable the following offload options: > > ethtool -K eth05 rx on > ethtool -K eth05 tx on > ethtool -K eth05 sg on > ethtool -K eth05 tso on > ethtool -K eth05 gso on > ethtool -K eth05 gro off > > Sysctl/kernel network tuning parameters: > > net.core.somaxconn =3D 1000 > net.core.netdev_max_backlog =3D 300000 > net.core.rmem_max =3D 16777216 > net.core.wmem_max =3D 16777216 > net.ipv4.tcp_max_syn_backlog =3D 8096 > net.ipv4.tcp_slow_start_after_idle =3D 0 > net.ipv4.tcp_tw_reuse =3D 1 > net.ipv4.ip_local_port_range =3D 10240 65535 > net.ipv4.tcp_rmem =3D 4096 87380 16777216 > net.ipv4.tcp_wmem =3D 4096 65536 16777216 > net.ipv4.tcp_mtu_probing =3D 1 > net.ipv4.route.flush =3D 1 > net.ipv4.tcp_timestamps =3D 0 > net.ipv4.tcp_fin_timeout =3D 15 > net.ipv4.tcp_sack =3D 0 > net.ipv4.tcp_moderate_rcvbuf =3D 1 > vm.vfs_cache_pressure =3D 50 > > The issue: > When I perform a VM live migration between the two nodes, the difference > between MTU 1500 and 9000 is negligible=E2=80=94only about *2=E2=80=933 s= econds faster *with > jumbo frames enabled. > > Does anyone know what I might be missing or doing wrong? > Any tips or insights would be greatly appreciated. > > Thanks in advance and best regards > ------------------------------ > > > -- > > Mario Vittorio Guenzi > E-mail jclark@tiscali.it > Si vis pacem, para bellum > > --0000000000000824c60640a3b9ec Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Good morning Mario,=C2=A0
Usually Jumbo Frames will lead you to lower CPU us= age for the same heavy workload, not more throughput.

What's the throughput you are seen on tho= se ports?.

Regards,
CI

O= n Tue, Oct 7, 2025, 11:52 Mario V. Guenzi <jclark@tiscali.it> wrote:
=20 =20 =20

Hi everyone,

I'm trying to configure jumbo frames on two cluster nodes running Xen 4.17.
Both nodes are on Devuan 5, and the NICs are Intel Corporation Ethernet Controller 10-Gigabit X540-AT2.

At boot, I apply the following MTU settings:

post-up ifconfig eth05 mtu=
 9000 && ifconfig eth07 mtu 9000 && ifconfig bond1 mtu 9000

The two NICs are bonded with these settings:

bond-slaves eth05 eth07
bond-primary eth05
bond-mode 0
bond-miimon 100
bond-updelay 200
bond-downdelay 200

In rc.local I enable the following offload options:

ethtool -K eth05 rx on
ethtool -K eth05 tx on
ethtool -K eth05 sg on
ethtool -K eth05 tso on
ethtool -K eth05 gso on
ethtool -K eth05 gro off

Sysctl/kernel network tuning parameters:

net.core.somaxconn =3D 100=
0
net.core.netdev_max_backlog =3D 300000
net.core.rmem_max =3D 16777216
net.core.wmem_max =3D 16777216
net.ipv4.tcp_max_syn_backlog =3D 8096
net.ipv4.tcp_slow_start_after_idle =3D 0
net.ipv4.tcp_tw_reuse =3D 1
net.ipv4.ip_local_port_range =3D 10240 65535
net.ipv4.tcp_rmem =3D 4096 87380 16777216
net.ipv4.tcp_wmem =3D 4096 65536 16777216
net.ipv4.tcp_mtu_probing =3D 1
net.ipv4.route.flush =3D 1
net.ipv4.tcp_timestamps =3D 0
net.ipv4.tcp_fin_timeout =3D 15
net.ipv4.tcp_sack =3D 0
net.ipv4.tcp_moderate_rcvbuf =3D 1
vm.vfs_cache_pressure =3D 50

The issue:
When I perform a VM live migration between the two nodes, the difference between MTU 1500 and 9000 is negligible=E2=80=94only about= 2=E2=80=933 seconds faster with jumbo frames enabled.

Does anyone know what I might be missing or doing wrong?
Any tips or insights would be greatly appreciated.

Thanks in advance and best regards


--=20
=20
Mario Vittorio Guenzi
E-mail jclark@tiscali.it
Si vis pacem, para bellum
--0000000000000824c60640a3b9ec-- From xen-users-bounces@lists.xenproject.org Wed Oct 08 15:08:03 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 08 Oct 2025 15:08:03 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1139010.1475099 (Exim 4.92) (envelope-from ) id 1v6Vl6-0004Gy-Af; Wed, 08 Oct 2025 15:07:16 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1139010.1475099; Wed, 08 Oct 2025 15:07:16 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v6Vl6-0004Gr-7L; Wed, 08 Oct 2025 15:07:16 +0000 Received: by outflank-mailman (input) for mailman id 1139010; Tue, 07 Oct 2025 15:42:27 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v69pb-0001ED-1D for xen-users@lists.xenproject.org; Tue, 07 Oct 2025 15:42:27 +0000 Received: from mail-ed1-x52d.google.com (mail-ed1-x52d.google.com [2a00:1450:4864:20::52d]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 388e9d70-a394-11f0-9809-7dc792cee155; Tue, 07 Oct 2025 17:42:24 +0200 (CEST) Received: by mail-ed1-x52d.google.com with SMTP id 4fb4d7f45d1cf-62fca01f0d9so386397a12.3 for ; Tue, 07 Oct 2025 08:42:24 -0700 (PDT) Received: from [192.168.1.5] (user-109-243-146-38.play-internet.pl. [109.243.146.38]) by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-6376b3b7225sm12414502a12.16.2025.10.07.08.42.23 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 07 Oct 2025 08:42:23 -0700 (PDT) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 388e9d70-a394-11f0-9809-7dc792cee155 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1759851744; x=1760456544; darn=lists.xenproject.org; h=subject:from:cc:to:content-language:user-agent:mime-version:date :message-id:from:to:cc:subject:date:message-id:reply-to; bh=BH2imbmcGG8YC2NKOOPrT40O2e/gZ8uDrdr2Rn9CXkM=; b=nn4Om902HuWQGCfuAfAQNdZpTqRfpjlZyC773+07N5qCUGBXgQT4ZKNtTRG3B1d4CT 5saOQ8Apxz2C7Hg8q1coYSgs6QmQzhxpyonp02d9Oe8EdCd0OzrZi2KJrTrkpHf9gQCn xLxBVwlq4jniI+n4HpBkAZnRSWzYAeK0GoJ9XiPOk4C4ibEzfKZ1VZScxQfQsBUfgUsi 0xGrOlUWIsL7tEwLglzr3FmS9NTg5crGimBL6ddQgT3xKEDsvNbeWFsy91vKJHjXjwye uOql6zTgx4KJvVFDBF6kzmaX1BK9pPacPZISRRLOIqZCpsQalWOlYRhegdno51r2YZKx ncaQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1759851744; x=1760456544; h=subject:from:cc:to:content-language:user-agent:mime-version:date :message-id:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=BH2imbmcGG8YC2NKOOPrT40O2e/gZ8uDrdr2Rn9CXkM=; b=HRLttfbe8Ztvw+ZODZ6iNeJMTjOJYi9lS1FcS+mGTMKYV1Whw/s1uSsO53IwZ2g94O MwiO2ZplsKPkhr8Qoxq3PjXIYc2ZjIMpW7wSVApHIiDEaLe4sfo/4Q7K/PLAD3Elu6zb bzd4+CZvleDWpuaUAF6pKdJYqMkmdBcr/O9KT41Au4MDA8Sur3MSOEp7CQWoANJSD/8p tMJPktMvKEolOz6hL3D0gNkTZ6F0VT+zLllH4h/dAc28dttFdwri5xDzYc5Te6u58jHr Kxnj5docZcD9y+b9CQ2qDlM0bZaODWiebggGKFgKX02r6J/NlN6LFiNIQq6ksuVCi7xa o8lA== X-Gm-Message-State: AOJu0Yy7L1gV8kMAW6pRw5oBUHI0d+NMhoufOUbz57f9tn0MmM+4Gvmu ZBzt7D4O+4XXpjUqSAfhpQ90w2zg38vWpJADP9RWfylb6O2JDMnJaklq X-Gm-Gg: ASbGncvPnNuF4Fa/qnNr3Ym8/4ebBePjDDRt651l87MFX9dWefjK+8d8CI8OCte9ryS LckXgTp12DH6oZySpON8OVHaDwxxuxO7kzkiVwuGtlbVMesZapDC3I0k/BSUOQk4lusCKo07Ht2 sUeUja7DHyyzomG1NCaReN46JI7QXAiUT73u5IdcOQqk2ELCEW9ea/iLK7vkXJuULwFzT8CVauI eVDHs/OtDPf+ce0YypQmIKE3SvWbjcJ47FRWpjRNMPWH/BilUpqxoaevgwMNFUbuWl+Mr2eUzt3 AFANys+TeaZfDkf3yLjkHgPj79d3CHl/B3iADS1Dxx+gwIV5dF3Q9v1Hh5nMXZ/OCSuUxVThoOG AYVlZC28DJA6E7eTWD+/mmr7AWHAbHSh5I6z9MowDZtpas9eJJzXbwKPgWnG4IcFPtrlJP3p/rb ctViAcHxE3cqA9DysGBjjW7ZLwbWTm6ISccwihDA== X-Google-Smtp-Source: AGHT+IEDaDZMmobSFrigZoj/bc51u0nCCT+Ufn/VGhQVVVYj8ZKnFuX5ewdQ4cVkyW+PjmJvfjOrGw== X-Received: by 2002:a05:6402:1ec2:b0:62b:2f0:974f with SMTP id 4fb4d7f45d1cf-639348e4edfmr16712140a12.15.1759851743980; Tue, 07 Oct 2025 08:42:23 -0700 (PDT) Content-Type: multipart/alternative; boundary="------------QET1v2u4oLBXWmKoMaFyupyG" Message-ID: <1a7522f7-89e5-4d0d-9953-8fd4c6e86c16@gmail.com> Date: Tue, 7 Oct 2025 17:42:23 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: Xen-devel Cc: xen-users@lists.xenproject.org, xen-announce@lists.xenproject.org, Community Manager , "committers@xenproject.org" From: Oleksii Kurochko Subject: [ANNOUNCEMENT] Xen 4.21.0-rc1 is tagged This is a multi-part message in MIME format. --------------QET1v2u4oLBXWmKoMaFyupyG Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hello everyone, Xen 4.21 rc1 is tagged. You can check that out from xen.git: git://xenbits.xen.org/xen.git 4.21.0-rc1 For your convenience there is also a tarball and the signature at: https://downloads.xenproject.org/release/xen/4.21.0-rc1/xen-4.21.0-rc1.tar.gz And the signature is at: https://downloads.xenproject.org/release/xen/4.21.0-rc1/xen-4.21.0-rc1.tar.gz.sig Have a nice week! ~ Oleksii --------------QET1v2u4oLBXWmKoMaFyupyG Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit 
Hello everyone,

Xen 4.21 rc1 is tagged. You can check that out from xen.git:
  git://xenbits.xen.org/xen.git 4.21.0-rc1

For your convenience there is also a tarball and the signature at:
  https://downloads.xenproject.org/release/xen/4.21.0-rc1/xen-4.21.0-rc1.tar.gz

And the signature is at:
  https://downloads.xenproject.org/release/xen/4.21.0-rc1/xen-4.21.0-rc1.tar.gz.sig

Have a nice week!

~ Oleksii


--------------QET1v2u4oLBXWmKoMaFyupyG-- From xen-users-bounces@lists.xenproject.org Thu Oct 09 06:09:51 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 09 Oct 2025 06:09:51 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1140241.1475205 (Exim 4.92) (envelope-from ) id 1v6jpV-0003IN-12; Thu, 09 Oct 2025 06:08:45 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1140241.1475205; Thu, 09 Oct 2025 06:08:44 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v6jpU-0003Hp-QE; Thu, 09 Oct 2025 06:08:44 +0000 Received: by outflank-mailman (input) for mailman id 1140241; Thu, 09 Oct 2025 06:08:43 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v6jpS-0003Hj-Gg for xen-users@lists.xenproject.org; Thu, 09 Oct 2025 06:08:43 +0000 Received: from smtp.tiscali.it (santino-notr.mail.tiscali.it [213.205.33.215]) by se1-gles-sth1.inumbo.com (Halon) with ESMTP id 662a1fc3-a4d6-11f0-9d15-b5c5bf9af7f9; Thu, 09 Oct 2025 08:08:41 +0200 (CEST) Received: from [192.168.2.254] ([62.97.44.210]) by santino.mail.tiscali.it with id o68e2F00J4Y4eqe0168eZv; Thu, 09 Oct 2025 06:08:39 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 662a1fc3-a4d6-11f0-9d15-b5c5bf9af7f9 X-Spam-Final-Verdict: clean X-Spam-State: 0 X-Spam-Score: 0 X-Spam-Verdict: clean x-auth-user: jclark@tiscali.it Content-Type: multipart/alternative; boundary="------------uTPMvrD4Gs529K6xWjutIvFU" Message-ID: Date: Thu, 9 Oct 2025 08:08:38 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: "Mario V. Guenzi" Subject: Re: Minimal performance gain with jumbo frames (MTU 9000) during VM migration To: Cyrus References: Content-Language: en-US, it-IT Cc: xen-users@lists.xenproject.org In-Reply-To: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tiscali.it; s=smtp; t=1759990119; bh=NAi9m4yVQgX1LWAek/PxSs32d13odYDUQeP8lQml1ow=; h=Date:From:Subject:To:References:Cc:In-Reply-To; b=VEck6D0qXi5e4BuNc74+zqkNXICvKypB3xWhOWjkyrHHqA30433Y9d9fazwLNdCZn x0P0MbLXezsjUbqdUQBDOoxDbqsQMCgLRUqu7JQzTW0871g0Y5SRCzNrNbAf/6/o1P pidUJEjx9PHo3NEA+iSB29QDQJpNx1Y1EWB1cVCQ= This is a multi-part message in MIME format. --------------uTPMvrD4Gs529K6xWjutIvFU Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit I apologize, I clicked reply instead of reply all. Hello Cyrus, First of all, thanks for the reply and sorry for my english. I didn't measure the throughput on the ports. I simply scp'd between the two nodes of a 3 GB ISO and used netperf in this form: netperf -t TCP_STREAM -H xen2 -l 10 obtaining this result: MIGRATED TCP STREAM TEST from 0.0.0.0 (0.0.0.0) port 0 AF_INET to xen2 () port 0 AF_INET: demo Recv Send Send Socket Socket Message Elapsed Size Size Size Time Throughput bytes bytes bytes secs. 10^6 bits/sec 131072 65536 65536 10.03 486.86 And the differences between the two MTUs are really minimal, we're talking 1-2 seconds. I expected the 10 GB cards to have significantly higher speeds. Best regards. Il 08/10/25 13:06, Cyrus ha scritto: > Good morning Mario, > > Usually Jumbo Frames will lead you to lower CPU usage for the same > heavy workload, not more throughput. > > What's the throughput you are seen on those ports?. > > Regards, > CI > > On Tue, Oct 7, 2025, 11:52 Mario V. Guenzi wrote: > > Hi everyone, > > I'm trying to configure jumbo frames on two cluster nodes running > Xen 4.17. > Both nodes are on Devuan 5, and the NICs are *Intel Corporation > Ethernet Controller 10-Gigabit X540-AT2.* > > At boot, I apply the following MTU settings: > > |post-up ifconfig eth05 mtu 9000 && ifconfig eth07 mtu 9000 && > ifconfig bond1 mtu 9000 | > > The two NICs are bonded with these settings: > > |bond-slaves eth05 eth07 bond-primary eth05 bond-mode 0 > bond-miimon 100 bond-updelay 200 bond-downdelay 200 | > > In |rc.local| I enable the following offload options: > > |ethtool -K eth05 rx on ethtool -K eth05 tx on ethtool -K eth05 sg > on ethtool -K eth05 tso on ethtool -K eth05 gso on ethtool -K > eth05 gro off | > > Sysctl/kernel network tuning parameters: > > |net.core.somaxconn = 1000 net.core.netdev_max_backlog = 300000 > net.core.rmem_max = 16777216 net.core.wmem_max = 16777216 > net.ipv4.tcp_max_syn_backlog = 8096 > net.ipv4.tcp_slow_start_after_idle = 0 net.ipv4.tcp_tw_reuse = 1 > net.ipv4.ip_local_port_range = 10240 65535 net.ipv4.tcp_rmem = > 4096 87380 16777216 net.ipv4.tcp_wmem = 4096 65536 16777216 > net.ipv4.tcp_mtu_probing = 1 net.ipv4.route.flush = 1 > net.ipv4.tcp_timestamps = 0 net.ipv4.tcp_fin_timeout = 15 > net.ipv4.tcp_sack = 0 net.ipv4.tcp_moderate_rcvbuf = 1 > vm.vfs_cache_pressure = 50 | > > The issue: > When I perform a VM live migration between the two nodes, the > difference between MTU 1500 and 9000 is negligible—only about *2–3 > seconds faster *with jumbo frames enabled. > > Does anyone know what I might be missing or doing wrong? > Any tips or insights would be greatly appreciated. > > Thanks in advance and best regards > > ------------------------------------------------------------------------ > > > -- > > Mario Vittorio Guenzi > E-mailjclark@tiscali.it > Si vis pacem, para bellum > -- Mario Vittorio Guenzi E-mailjclark@tiscali.it Si vis pacem, para bellum --------------uTPMvrD4Gs529K6xWjutIvFU Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit

I apologize, I clicked reply instead of reply all.

Hello Cyrus, First of all, thanks for the reply and sorry for my english. 

I didn't measure the throughput on the ports. I simply scp'd between the two nodes of a 3 GB ISO and used netperf in this form: netperf -t TCP_STREAM -H xen2 -l 10 

obtaining this result:

MIGRATED TCP STREAM TEST from 0.0.0.0 (0.0.0.0) port 0 AF_INET to xen2 () port 0 AF_INET: demo Recv Send Send Socket Socket Message Elapsed Size Size Size Time Throughput bytes bytes bytes secs. 10^6 bits/sec 131072 65536 65536 10.03 486.86 

And the differences between the two MTUs are really minimal, we're talking 1-2 seconds. I expected the 10 GB cards to have significantly higher speeds.

Best regards.
Il 08/10/25 13:06, Cyrus ha scritto:
Good morning Mario, 

Usually Jumbo Frames will lead you to lower CPU usage for the same heavy workload, not more throughput.

What's the throughput you are seen on those ports?.

Regards,
CI

On Tue, Oct 7, 2025, 11:52 Mario V. Guenzi <jclark@tiscali.it> wrote:

Hi everyone,

I'm trying to configure jumbo frames on two cluster nodes running Xen 4.17.
Both nodes are on Devuan 5, and the NICs are Intel Corporation Ethernet Controller 10-Gigabit X540-AT2.

At boot, I apply the following MTU settings:

post-up ifconfig eth05 mtu 9000 && ifconfig eth07 mtu 9000 && ifconfig bond1 mtu 9000

The two NICs are bonded with these settings:

bond-slaves eth05 eth07
bond-primary eth05
bond-mode 0
bond-miimon 100
bond-updelay 200
bond-downdelay 200

In rc.local I enable the following offload options:

ethtool -K eth05 rx on
ethtool -K eth05 tx on
ethtool -K eth05 sg on
ethtool -K eth05 tso on
ethtool -K eth05 gso on
ethtool -K eth05 gro off

Sysctl/kernel network tuning parameters:

net.core.somaxconn = 1000
net.core.netdev_max_backlog = 300000
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_max_syn_backlog = 8096
net.ipv4.tcp_slow_start_after_idle = 0
net.ipv4.tcp_tw_reuse = 1
net.ipv4.ip_local_port_range = 10240 65535
net.ipv4.tcp_rmem = 4096 87380 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216
net.ipv4.tcp_mtu_probing = 1
net.ipv4.route.flush = 1
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_fin_timeout = 15
net.ipv4.tcp_sack = 0
net.ipv4.tcp_moderate_rcvbuf = 1
vm.vfs_cache_pressure = 50

The issue:
When I perform a VM live migration between the two nodes, the difference between MTU 1500 and 9000 is negligible—only about 2–3 seconds faster with jumbo frames enabled.

Does anyone know what I might be missing or doing wrong?
Any tips or insights would be greatly appreciated.

Thanks in advance and best regards


-- 
 
Mario Vittorio Guenzi
E-mail jclark@tiscali.it
Si vis pacem, para bellum

-- 
 
Mario Vittorio Guenzi
E-mail jclark@tiscali.it
Si vis pacem, para bellum
--------------uTPMvrD4Gs529K6xWjutIvFU-- From xen-users-bounces@lists.xenproject.org Mon Oct 13 15:43:37 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Mon, 13 Oct 2025 15:43:37 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1142402.1476598 (Exim 4.92) (envelope-from ) id 1v8KhI-0001PJ-4w; Mon, 13 Oct 2025 15:42:52 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1142402.1476598; Mon, 13 Oct 2025 15:42:52 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v8KhI-0001PC-1y; Mon, 13 Oct 2025 15:42:52 +0000 Received: by outflank-mailman (input) for mailman id 1142402; Mon, 13 Oct 2025 15:42:51 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1v8KhH-0001P2-3S for xen-users@lists.xenproject.org; Mon, 13 Oct 2025 15:42:51 +0000 Received: from mo4-p00-ob.smtp.rzone.de (mo4-p00-ob.smtp.rzone.de [81.169.146.220]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id 44954162-a84b-11f0-9d15-b5c5bf9af7f9; Mon, 13 Oct 2025 17:42:49 +0200 (CEST) Received: from sender by smtp.strato.de (RZmta 53.4.2 AUTH) with ESMTPSA id D2461919DFglKJ0 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)) (Client did not present a certificate); Mon, 13 Oct 2025 17:42:47 +0200 (CEST) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 44954162-a84b-11f0-9d15-b5c5bf9af7f9 ARC-Seal: i=1; a=rsa-sha256; t=1760370167; cv=none; d=strato.com; s=strato-dkim-0002; b=A9VnttDv8Q5lR7wEcumC2SqLk3OQ/hXpT/7FFPldPs/wZf6KfVvtGSgBb6A7R9LM9I HptcW/TWCqm9sWS9vfOJ74agf/SfRYh/rX+NfAF8la4/fAiEFo8jW1x5YWSoKUr3AroD dRK2I/VVlMxBMZD1nDpL9eKyhwDVmBuw9ZUtlup4tqZDrdIpSjRg6coBMAYDOVxW9Fr7 53n+gqm/yShjvdVqt8I9Me0FPOZBJtcWITpWloa++i4y+1zOOlpYoVWR7x0ccdHHvMVt +bpsirn4O99M4mU19mmfx3SU4hTzeYg4FDJrx2VZ75YxtnUh4chtB2yvpUJDZRghTVo5 B+ug== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; t=1760370167; s=strato-dkim-0002; d=strato.com; h=References:In-Reply-To:Message-ID:Subject:Cc:To:From:Date:Cc:Date: From:Subject:Sender; bh=xmBFe8VQ34LLcRlbjyRHb/Kn29WgCR9F3d+lziMgdN0=; b=UMN50M+sCnJDKDQkojpJemHu7pnI0g4O/apyn36lPrvTvigc0ERs7odfzceEqW9JxX cEXl/LdB6PQjsZovJOwQBuV0duP5k+1APUAQfjcOx1oQ14CREVPrR4RotJfG4Z16OECt szNbVxAOcoW5+R9o2veoEO1g8TnVC59RSTAJjmHyaIorlw6QxDz1KqbXJmeE4pSKXiht hidld7jar7oYMURCxxbk/xKOTkApwshEk7w68RiXxkGgMcERPnyGLUD0ScczEE8QX+Yi HbWj+Gc6iWZK93Oz1OKL0P3pSrQLh1j6W492ZHMm/HxLL6z2mGz/KmJc8gmJhWh31tjO D3jA== ARC-Authentication-Results: i=1; strato.com; arc=none; dkim=none X-RZG-CLASS-ID: mo00 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1760370167; s=strato-dkim-0002; d=aepfle.de; h=References:In-Reply-To:Message-ID:Subject:Cc:To:From:Date:Cc:Date: From:Subject:Sender; bh=xmBFe8VQ34LLcRlbjyRHb/Kn29WgCR9F3d+lziMgdN0=; b=QmHiHk1O5LBr9Ge8xq9dmiNZT0R5d5ORQWcGVvQ+X+Qlr0HGivff9P11a+xUQ3EBiH AC1yieYkjkPG7qCZARcEvbLgObIHFt/vz9I8rVBKELgg4ZB9MP0nKTZ9OPP0vefAH5lS xywTSzu3MI2E4EPfwRXbr6GZFcluQe76KRnh0iK1U6RupGA4ozwZvnxxxwLyAQztXNE/ feMblCxoWQ8V+aL6tdOtp9E9o3OLGVOxGfXpqAIErGWlEjWHAJBku0RFNxczp990bKPv fuQV9JAWY6BljYQQomXeJpxldrYCsrw2pMxMT7M9clyBFgXQOoPxeugehxAqtjpaoxkQ Gl7g== X-RZG-AUTH: ":P2EQZWCpfu+qG7CngxMFH1J+3q8wa/QLpd5ylWvMDX3y/OmD4uXd0fmwT4Ir8BK6QRg8oeKL6coO/y4jWn56uC/KgG32" Date: Mon, 13 Oct 2025 17:42:31 +0200 From: Olaf Hering To: "Mario V. Guenzi" Cc: xen-users@lists.xenproject.org Subject: Re: Minimal performance gain with jumbo frames (MTU 9000) during VM migration Message-ID: <20251013174231.10241d98.olaf@aepfle.de> In-Reply-To: References: X-Mailer: Claws Mail (olh) 20250514T101025.84a10d9e hat ein Softwareproblem, kann man nichts machen. MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/9KceG57kn_xHWwcqZlxO33V"; protocol="application/pgp-signature"; micalg=pgp-sha256 Content-Transfer-Encoding: 7bit --Sig_/9KceG57kn_xHWwcqZlxO33V Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Tue, 7 Oct 2025 15:41:20 +0200 "Mario V. Guenzi" : > Any tips or insights would be greatly appreciated. The time it takes to map and unmap the domU pages into dom0 is the limiting factor. The limit is below 400mb/s. Olaf --Sig_/9KceG57kn_xHWwcqZlxO33V Content-Type: application/pgp-signature Content-Description: Digitale Signatur von OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE97o7Um30LT3B+5b/86SN7mm1DoAFAmjtHecACgkQ86SN7mm1 DoAFlRAAhNCczu1EAZtPLvJqRNP7hSgnTTNVXHkHGyplHIMtIP4QbUhBFQYO+JKs 8MVxvhM2Q3TeUoYPH63K0hYCa9mhcMBlzklrO7D3emRgSy51H74laEUwZ2fJt6GX Q4t/LgTfppdXuRIc52ImrRqDirji27aTL6v7bw8/AHMobk5kLqAGN+6QCzIyAKyU m8uF/nVAwbHpPUcfrWxvzNiCyjtwaIqcx7/m8x24L3xVgdS7u+NC5L11scb/fH+8 3bMfYcLDrJBKDNYfzsJt18ouwQ6lCRamt4YjgJn+ZkMCqANP06hllUdpIORV+3pO OOniFMZGp6uybN9yVfe4sv8MWAAQEEoHr5mHZZ1ZFRAhE5C9/nBUzxn4xsgId3b1 4z2rcHvBg0JVXsxmjJDVf3RydfX2ZeuBsAaQU9QKXVV0Ekj00sTGTv6NoKgtpr07 ideiWiHSBFD52SEcwW6L6ZKdTuRFYjsT+ivVAGfs1UUDmyBcBSoJkd8cMH4bmEa2 nNklwEGkxTSvGtP3T2tHc6CVLEEy3MmPb5QkXSzUSNskmw2U3AexalVEe/Mc3pCx uU+x3NYaazvMVJXE6p8/yQuaHfGTwxLO+T/YvbNWA0ikTVRoTeRis3iOFO3lYCmV 7JfaIFbeFWtSAfR4MQa4Emz9KomSGgQhs+gYI6x5/D+Fiobzcy0= =NPu3 -----END PGP SIGNATURE----- --Sig_/9KceG57kn_xHWwcqZlxO33V-- From xen-users-bounces@lists.xenproject.org Tue Oct 21 12:01:03 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 21 Oct 2025 12:01:03 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1147034.1479357 (Exim 4.92) (envelope-from ) id 1vBB2O-00061k-JQ; Tue, 21 Oct 2025 12:00:24 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1147034.1479357; Tue, 21 Oct 2025 12:00:24 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vBB2O-00060E-DV; Tue, 21 Oct 2025 12:00:24 +0000 Received: by outflank-mailman (input) for mailman id 1147034; Tue, 21 Oct 2025 12:00:23 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vBB2N-0005sa-Et for xen-users@lists.xen.org; Tue, 21 Oct 2025 12:00:23 +0000 Received: from mail.xenproject.org (mail.xenproject.org [104.130.215.37]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id 8281166a-ae75-11f0-9d15-b5c5bf9af7f9; Tue, 21 Oct 2025 14:00:20 +0200 (CEST) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1vBB2B-00Chk7-1N; Tue, 21 Oct 2025 12:00:11 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1vBB2B-005gLp-1f; Tue, 21 Oct 2025 12:00:11 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 8281166a-ae75-11f0-9d15-b5c5bf9af7f9 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 475 v2 (CVE-2025-58147,CVE-2025-58148) - x86: Incorrect input sanitisation in Viridian hypercalls Message-Id: Date: Tue, 21 Oct 2025 12:00:11 +0000 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2025-58147,CVE-2025-58148 / XSA-475 version 2 x86: Incorrect input sanitisation in Viridian hypercalls UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause out-of-bounds reads and writes while processing the inputs. * CVE-2025-58147. Hypercalls using the HV_VP_SET Sparse format can cause vpmask_set() to write out of bounds when converting the bitmap to Xen's format. * CVE-2025-58148. Hypercalls using any input format can cause send_ipi() to read d->vcpu[] out-of-bounds, and operate on a wild vCPU pointer. IMPACT ====== A buggy or malicious guest can cause Denial of Service (DoS) affecting the entire host, information leaks, or elevation of privilege. VULNERABLE SYSTEMS ================== Xen versions 4.15 and newer are vulnerable. Versions 4.14 and older are not vulnerable. Only x86 HVM guests which have Viridian enabled can leverage the vulnerability. With the `xl` toolstack, this means any `viridian=` setting in the VM's configuration file. Note - despite: `viridian=["!hcall_remote_tlb_flush", "!hcall_ipi", "!ex_processor_masks"]` being documented to turns off the relevant functionality, this configuration does not block the relevant hypercalls. MITIGATION ========== Not enabling Viridian will avoid the issuse. CREDITS ======= This issue was discovered by Teddy Astie of Vates RESOLUTION ========== Applying the appropriate set of attached patches resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa475-?.patch xen-unstable - Xen 4.20.x xsa475-4.19-?.patch Xen 4.19.x - Xen 4.17.x $ sha256sum xsa475* 25ba4933e4cf94e81d192f3ba522ec7b258c6e69015a43d169b0325e61957f42 xsa475-1.patch d012541f99c69279b30554e8ea7a7da2790aaa6ff81b0d597f305e4498391369 xsa475-2.patch 6b820b116418e6fd376b6d23ede589e4f86fea4ea775e9afb5c631ceba44d05f xsa475-4.19-1.patch f94b48392179bc08f412ead900a91299ef3a27a6dd4f5fdcf7a152fd65d3a02b xsa475-4.19-2.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches (but not mitigations) described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. This is because the mitigations are guest visible changes, and hence could give hints to users about the upcoming vulnerabilities. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmj3daEMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZnvgIAJzU/Bczr7/Gj3pIqop+rgDsoLw/PU2tGkwhumJQ 0lICxaHWlqrk8cL0y+Ll0nQV4DTwoZbhSm9Bz3S9ZKo6/Qby9YZzo0Tyt9U2OxNU YTpiYGSwrSlCs8cpfj4gwKGzEZ0nNTBTVbAa9UfqIYcvNF4j/L0Tnl6cJOZ/xNhh 8BoH02j+vCF8B8ZInutJjHhKPtrmDta0/md9R4Ydrx4OrLlAoYA4hKnkOuBWfhHg amL1aJ3vk9kNNkP6sO19Vnp5KTawnLGZwN95+FDlDGuh8n8ixKfURvZ9eK8Ycfir naItP4wBkFC9ukzlvGtkwoHPDspxKjtFTYfNvVNvoV6JOWc= =oSQZ -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa475-1.patch" Content-Disposition: attachment; filename="xsa475-1.patch" Content-Transfer-Encoding: base64 RnJvbTogVGVkZHkgQXN0aWUgPHRlZGR5LmFzdGllQHZhdGVzLnRlY2g+ClN1 YmplY3Q6IHg4Ni92aXJpZGlhbjogRW5mb3JjZSBib3VuZHMgY2hlY2sgaW4g dnBtYXNrX3NldCgpCgpDYWxsZXJzIGNhbiBwYXNzIHZwL21hc2sgdmFsdWVz IHdoaWNoIGV4Y2VlZCB0aGUgc2l6ZSBvZiB2cG1hc2stPm1hc2suICBFbnN1 cmUKd2Ugb25seSBzZXQgYml0cyB3aGljaCBhcmUgd2l0aGluIGJvdW5kcy4K ClRoaXMgaXMgWFNBLTQ3NSAvIENWRS0yMDI1LTU4MTQ3LgoKRml4ZXM6IGI0 MTI0NjgyZGI2ZSAoInZpcmlkaWFuOiBhZGQgRXhQcm9jZXNzb3JNYXNrcyB2 YXJpYW50cyBvZiB0aGUgZmx1c2ggaHlwZXJjYWxscyIpClNpZ25lZC1vZmYt Ynk6IFRlZGR5IEFzdGllIDx0ZWRkeS5hc3RpZUB2YXRlcy50ZWNoPgpSZXZp ZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4 LmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvaHZtL3ZpcmlkaWFu L3ZpcmlkaWFuLmMgYi94ZW4vYXJjaC94ODYvaHZtL3ZpcmlkaWFuL3Zpcmlk aWFuLmMKaW5kZXggYzBiZTI0YmQyMjEwLi43MDNmOWFjOGJjYzEgMTAwNjQ0 Ci0tLSBhL3hlbi9hcmNoL3g4Ni9odm0vdmlyaWRpYW4vdmlyaWRpYW4uYwor KysgYi94ZW4vYXJjaC94ODYvaHZtL3ZpcmlkaWFuL3ZpcmlkaWFuLmMKQEAg LTU2Miw3ICs1NjIsOCBAQCBzdGF0aWMgdm9pZCB2cG1hc2tfc2V0KHN0cnVj dCBoeXBlcmNhbGxfdnBtYXNrICp2cG1hc2ssIHVuc2lnbmVkIGludCB2cCwK IAogICAgICAgICBpZiAoIG1hc2sgJiAxICkKICAgICAgICAgewotICAgICAg ICAgICAgQVNTRVJUKHZwIDwgSFZNX01BWF9WQ1BVUyk7CisgICAgICAgICAg ICBpZiAoIHZwID49IEhWTV9NQVhfVkNQVVMgKQorICAgICAgICAgICAgICAg IGJyZWFrOwogICAgICAgICAgICAgX19zZXRfYml0KHZwLCB2cG1hc2stPm1h c2spOwogICAgICAgICB9CiAK --=separator Content-Type: application/octet-stream; name="xsa475-2.patch" Content-Disposition: attachment; filename="xsa475-2.patch" Content-Transfer-Encoding: base64 RnJvbTogVGVkZHkgQXN0aWUgPHRlZGR5LmFzdGllQHZhdGVzLnRlY2g+ClN1 YmplY3Q6IHg4Ni92aXJpZGlhbjogRW5mb3JjZSBib3VuZHMgY2hlY2sgaW4g c2VuZF9pcGkoKQoKQ2FsbGVycyBjYW4gcGFzcyBpbiBhIHZwbWFzayB3aGlj aCBleGNlZWRzIGQtPm1heF92Y3B1cy4gIFByZXZlbnQgb3V0LW9mLWJvdW5k CnJlYWRzIG9mIGQtPnZjcHVbXS4KClRoaXMgaXMgWFNBLTQ3NSAvIENWRS0y MDI1LTU4MTQ4LgoKRml4ZXM6IDcyOGFjYmExYmE0YSAoInZpcmlkaWFuOiB1 c2UgaHlwZXJjYWxsX3ZwbWFzayBpbiBodmNhbGxfaXBpKCkiKQpTaWduZWQt b2ZmLWJ5OiBUZWRkeSBBc3RpZSA8dGVkZHkuYXN0aWVAdmF0ZXMudGVjaD4K UmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNp dHJpeC5jb20+CgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L2h2bS92aXJp ZGlhbi92aXJpZGlhbi5jIGIveGVuL2FyY2gveDg2L2h2bS92aXJpZGlhbi92 aXJpZGlhbi5jCmluZGV4IDcwM2Y5YWM4YmNjMS4uZjc5Y2ZmY2IzNzY3IDEw MDY0NAotLS0gYS94ZW4vYXJjaC94ODYvaHZtL3ZpcmlkaWFuL3ZpcmlkaWFu LmMKKysrIGIveGVuL2FyY2gveDg2L2h2bS92aXJpZGlhbi92aXJpZGlhbi5j CkBAIC01NzcsMjYgKzU3Nyw2IEBAIHN0YXRpYyB2b2lkIHZwbWFza19maWxs KHN0cnVjdCBoeXBlcmNhbGxfdnBtYXNrICp2cG1hc2spCiAgICAgYml0bWFw X2ZpbGwodnBtYXNrLT5tYXNrLCBIVk1fTUFYX1ZDUFVTKTsKIH0KIAotc3Rh dGljIHVuc2lnbmVkIGludCB2cG1hc2tfZmlyc3QoY29uc3Qgc3RydWN0IGh5 cGVyY2FsbF92cG1hc2sgKnZwbWFzaykKLXsKLSAgICByZXR1cm4gZmluZF9m aXJzdF9iaXQodnBtYXNrLT5tYXNrLCBIVk1fTUFYX1ZDUFVTKTsKLX0KLQot c3RhdGljIHVuc2lnbmVkIGludCB2cG1hc2tfbmV4dChjb25zdCBzdHJ1Y3Qg aHlwZXJjYWxsX3ZwbWFzayAqdnBtYXNrLAotICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB1bnNpZ25lZCBpbnQgdnApCi17Ci0gICAgLyoKLSAg ICAgKiBJZiB2cCArIDEgPiBIVk1fTUFYX1ZDUFVTIHRoZW4gZmluZF9uZXh0 X2JpdCgpIHdpbGwgcmV0dXJuCi0gICAgICogSFZNX01BWF9WQ1BVUywgZW5z dXJpbmcgdGhlIGZvcl9lYWNoX3ZwICggLi4uICkgbG9vcCB0ZXJtaW5hdGVz LgotICAgICAqLwotICAgIHJldHVybiBmaW5kX25leHRfYml0KHZwbWFzay0+ bWFzaywgSFZNX01BWF9WQ1BVUywgdnAgKyAxKTsKLX0KLQotI2RlZmluZSBm b3JfZWFjaF92cCh2cG1hc2ssIHZwKSBcCi0JZm9yICggKHZwKSA9IHZwbWFz a19maXJzdCh2cG1hc2spOyBcCi0JICAgICAgKHZwKSA8IEhWTV9NQVhfVkNQ VVM7IFwKLQkgICAgICAodnApID0gdnBtYXNrX25leHQodnBtYXNrLCB2cCkg KQotCiBzdGF0aWMgdW5zaWduZWQgaW50IHZwbWFza19ucihjb25zdCBzdHJ1 Y3QgaHlwZXJjYWxsX3ZwbWFzayAqdnBtYXNrKQogewogICAgIHJldHVybiBi aXRtYXBfd2VpZ2h0KHZwbWFzay0+bWFzaywgSFZNX01BWF9WQ1BVUyk7CkBA IC04MTMsNyArNzkzLDcgQEAgc3RhdGljIHZvaWQgc2VuZF9pcGkoc3RydWN0 IGh5cGVyY2FsbF92cG1hc2sgKnZwbWFzaywgdWludDhfdCB2ZWN0b3IpCiAg ICAgaWYgKCBuciA+IDEgKQogICAgICAgICBjcHVfcmFpc2Vfc29mdGlycV9i YXRjaF9iZWdpbigpOwogCi0gICAgZm9yX2VhY2hfdnAgKCB2cG1hc2ssIHZw ICkKKyAgICBiaXRtYXBfZm9yX2VhY2ggKCB2cCwgdnBtYXNrLT5tYXNrLCBj dXJyZC0+bWF4X3ZjcHVzICkKICAgICB7CiAgICAgICAgIHN0cnVjdCB2bGFw aWMgKnZsYXBpYyA9IHZjcHVfdmxhcGljKGN1cnJkLT52Y3B1W3ZwXSk7CiAK --=separator Content-Type: application/octet-stream; name="xsa475-4.19-1.patch" Content-Disposition: attachment; filename="xsa475-4.19-1.patch" Content-Transfer-Encoding: base64 RnJvbTogVGVkZHkgQXN0aWUgPHRlZGR5LmFzdGllQHZhdGVzLnRlY2g+ClN1 YmplY3Q6IHg4Ni92aXJpZGlhbjogRW5mb3JjZSBib3VuZHMgY2hlY2sgaW4g dnBtYXNrX3NldCgpCgpDYWxsZXJzIGNhbiBwYXNzIHZwL21hc2sgdmFsdWVz IHdoaWNoIGV4Y2VlZCB0aGUgc2l6ZSBvZiB2cG1hc2stPm1hc2suICBFbnN1 cmUKd2Ugb25seSBzZXQgYml0cyB3aGljaCBhcmUgd2l0aGluIGJvdW5kcy4K ClRoaXMgaXMgWFNBLTQ3NSAvIENWRS0yMDI1LTU4MTQ3LgoKRml4ZXM6IGI0 MTI0NjgyZGI2ZSAoInZpcmlkaWFuOiBhZGQgRXhQcm9jZXNzb3JNYXNrcyB2 YXJpYW50cyBvZiB0aGUgZmx1c2ggaHlwZXJjYWxscyIpClNpZ25lZC1vZmYt Ynk6IFRlZGR5IEFzdGllIDx0ZWRkeS5hc3RpZUB2YXRlcy50ZWNoPgpSZXZp ZXdlZC1ieTogQW5kcmV3IENvb3BlciA8YW5kcmV3LmNvb3BlcjNAY2l0cml4 LmNvbT4KCmRpZmYgLS1naXQgYS94ZW4vYXJjaC94ODYvaHZtL3ZpcmlkaWFu L3ZpcmlkaWFuLmMgYi94ZW4vYXJjaC94ODYvaHZtL3ZpcmlkaWFuL3Zpcmlk aWFuLmMKaW5kZXggYTQxYTcwZTM3YTI5Li40MWU5M2VmMjBmYjIgMTAwNjQ0 Ci0tLSBhL3hlbi9hcmNoL3g4Ni9odm0vdmlyaWRpYW4vdmlyaWRpYW4uYwor KysgYi94ZW4vYXJjaC94ODYvaHZtL3ZpcmlkaWFuL3ZpcmlkaWFuLmMKQEAg LTU2Miw3ICs1NjIsOCBAQCBzdGF0aWMgdm9pZCB2cG1hc2tfc2V0KHN0cnVj dCBoeXBlcmNhbGxfdnBtYXNrICp2cG1hc2ssIHVuc2lnbmVkIGludCB2cCwK IAogICAgICAgICBpZiAoIG1hc2sgJiAxICkKICAgICAgICAgewotICAgICAg ICAgICAgQVNTRVJUKHZwIDwgSFZNX01BWF9WQ1BVUyk7CisgICAgICAgICAg ICBpZiAoIHZwID49IEhWTV9NQVhfVkNQVVMgKQorICAgICAgICAgICAgICAg IGJyZWFrOwogICAgICAgICAgICAgX19zZXRfYml0KHZwLCB2cG1hc2stPm1h c2spOwogICAgICAgICB9CiAK --=separator Content-Type: application/octet-stream; name="xsa475-4.19-2.patch" Content-Disposition: attachment; filename="xsa475-4.19-2.patch" Content-Transfer-Encoding: base64 RnJvbTogVGVkZHkgQXN0aWUgPHRlZGR5LmFzdGllQHZhdGVzLnRlY2g+ClN1 YmplY3Q6IHg4Ni92aXJpZGlhbjogRW5mb3JjZSBib3VuZHMgY2hlY2sgaW4g c2VuZF9pcGkoKQoKQ2FsbGVycyBjYW4gcGFzcyBpbiBhIHZwbWFzayB3aGlj aCBleGNlZWRzIGQtPm1heF92Y3B1cy4gIFByZXZlbnQgb3V0LW9mLWJvdW5k CnJlYWRzIG9mIGQtPnZjcHVbXS4KClRoaXMgaXMgWFNBLTQ3NSAvIENWRS0y MDI1LTU4MTQ4LgoKRml4ZXM6IDcyOGFjYmExYmE0YSAoInZpcmlkaWFuOiB1 c2UgaHlwZXJjYWxsX3ZwbWFzayBpbiBodmNhbGxfaXBpKCkiKQpTaWduZWQt b2ZmLWJ5OiBUZWRkeSBBc3RpZSA8dGVkZHkuYXN0aWVAdmF0ZXMudGVjaD4K UmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNp dHJpeC5jb20+CgpkaWZmIC0tZ2l0IGEveGVuL2FyY2gveDg2L2h2bS92aXJp ZGlhbi92aXJpZGlhbi5jIGIveGVuL2FyY2gveDg2L2h2bS92aXJpZGlhbi92 aXJpZGlhbi5jCmluZGV4IDQxZTkzZWYyMGZiMi4uZDQ1NzUxMzY1ZmRlIDEw MDY0NAotLS0gYS94ZW4vYXJjaC94ODYvaHZtL3ZpcmlkaWFuL3ZpcmlkaWFu LmMKKysrIGIveGVuL2FyY2gveDg2L2h2bS92aXJpZGlhbi92aXJpZGlhbi5j CkBAIC01NzcsMjYgKzU3Nyw2IEBAIHN0YXRpYyB2b2lkIHZwbWFza19maWxs KHN0cnVjdCBoeXBlcmNhbGxfdnBtYXNrICp2cG1hc2spCiAgICAgYml0bWFw X2ZpbGwodnBtYXNrLT5tYXNrLCBIVk1fTUFYX1ZDUFVTKTsKIH0KIAotc3Rh dGljIHVuc2lnbmVkIGludCB2cG1hc2tfZmlyc3QoY29uc3Qgc3RydWN0IGh5 cGVyY2FsbF92cG1hc2sgKnZwbWFzaykKLXsKLSAgICByZXR1cm4gZmluZF9m aXJzdF9iaXQodnBtYXNrLT5tYXNrLCBIVk1fTUFYX1ZDUFVTKTsKLX0KLQot c3RhdGljIHVuc2lnbmVkIGludCB2cG1hc2tfbmV4dChjb25zdCBzdHJ1Y3Qg aHlwZXJjYWxsX3ZwbWFzayAqdnBtYXNrLAotICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB1bnNpZ25lZCBpbnQgdnApCi17Ci0gICAgLyoKLSAg ICAgKiBJZiB2cCArIDEgPiBIVk1fTUFYX1ZDUFVTIHRoZW4gZmluZF9uZXh0 X2JpdCgpIHdpbGwgcmV0dXJuCi0gICAgICogSFZNX01BWF9WQ1BVUywgZW5z dXJpbmcgdGhlIGZvcl9lYWNoX3ZwICggLi4uICkgbG9vcCB0ZXJtaW5hdGVz LgotICAgICAqLwotICAgIHJldHVybiBmaW5kX25leHRfYml0KHZwbWFzay0+ bWFzaywgSFZNX01BWF9WQ1BVUywgdnAgKyAxKTsKLX0KLQotI2RlZmluZSBm b3JfZWFjaF92cCh2cG1hc2ssIHZwKSBcCi0JZm9yICggKHZwKSA9IHZwbWFz a19maXJzdCh2cG1hc2spOyBcCi0JICAgICAgKHZwKSA8IEhWTV9NQVhfVkNQ VVM7IFwKLQkgICAgICAodnApID0gdnBtYXNrX25leHQodnBtYXNrLCB2cCkg KQotCiBzdGF0aWMgdW5zaWduZWQgaW50IHZwbWFza19ucihjb25zdCBzdHJ1 Y3QgaHlwZXJjYWxsX3ZwbWFzayAqdnBtYXNrKQogewogICAgIHJldHVybiBi aXRtYXBfd2VpZ2h0KHZwbWFzay0+bWFzaywgSFZNX01BWF9WQ1BVUyk7CkBA IC04MTMsNyArNzkzLDcgQEAgc3RhdGljIHZvaWQgc2VuZF9pcGkoc3RydWN0 IGh5cGVyY2FsbF92cG1hc2sgKnZwbWFzaywgdWludDhfdCB2ZWN0b3IpCiAg ICAgaWYgKCBuciA+IDEgKQogICAgICAgICBjcHVfcmFpc2Vfc29mdGlycV9i YXRjaF9iZWdpbigpOwogCi0gICAgZm9yX2VhY2hfdnAgKCB2cG1hc2ssIHZw ICkKKyAgICBmb3JfZWFjaF9zZXRfYml0ICggdnAsIHZwbWFzay0+bWFzaywg Y3VycmQtPm1heF92Y3B1cyApCiAgICAgewogICAgICAgICBzdHJ1Y3Qgdmxh cGljICp2bGFwaWMgPSB2Y3B1X3ZsYXBpYyhjdXJyZC0+dmNwdVt2cF0pOwog Cg== --=separator-- From xen-users-bounces@lists.xenproject.org Wed Oct 22 15:05:12 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 22 Oct 2025 15:05:12 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1148283.1480417 (Exim 4.92) (envelope-from ) id 1vBaO5-0007tQ-6t; Wed, 22 Oct 2025 15:04:29 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1148283.1480417; Wed, 22 Oct 2025 15:04:29 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vBaO5-0007tJ-3P; Wed, 22 Oct 2025 15:04:29 +0000 Received: by outflank-mailman (input) for mailman id 1148283; Wed, 22 Oct 2025 14:48:43 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vBa8p-00051Z-4U for xen-users@lists.xenproject.org; Wed, 22 Oct 2025 14:48:43 +0000 Received: from mail-ej1-x633.google.com (mail-ej1-x633.google.com [2a00:1450:4864:20::633]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 326f5bb2-af56-11f0-980a-7dc792cee155; Wed, 22 Oct 2025 16:48:40 +0200 (CEST) Received: by mail-ej1-x633.google.com with SMTP id a640c23a62f3a-b472842981fso946491866b.1 for ; Wed, 22 Oct 2025 07:48:39 -0700 (PDT) Received: from [192.168.1.5] (user-109-243-146-38.play-internet.pl. [109.243.146.38]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-b6d36b0eba4sm152096566b.47.2025.10.22.07.48.38 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 22 Oct 2025 07:48:38 -0700 (PDT) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 326f5bb2-af56-11f0-980a-7dc792cee155 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1761144519; x=1761749319; darn=lists.xenproject.org; h=subject:from:cc:to:content-language:user-agent:mime-version:date :message-id:from:to:cc:subject:date:message-id:reply-to; bh=RysLH4Z6/v7Zc7nVBXq2y7fwG9r6bT2HCxe4AkVI1YI=; b=X/q4x4EOQiJqv05Xzxi+Ve8NH4lVQgLMBt8nlfiRccHVS7IcoV7OdRylrQkTchGCIg WDxVO/HrrzBuTjb7zhXLs9xOVTgECvV1QG77w4vEbfq45andauO0r1wmFKSvOtgzSnjQ dEl4KllrsVC316ShchF0s1TXjvbzbrXXkmYIo+RonjD4K4iNGchIA/RjTF4cMYmeynvd c+yN0YDvulc2VTeFuhohxQxk4yf9LdFu/dO426oINysUEiOgRKQ3fCBTkYfxc9mDBZtb wwuEmwYGtvfQf2aEhRi3CJfqC4ELlPADbVHzMEZbgI7/HB77Uu+v99EYa7kUPOyMYErE s35Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761144519; x=1761749319; h=subject:from:cc:to:content-language:user-agent:mime-version:date :message-id:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=RysLH4Z6/v7Zc7nVBXq2y7fwG9r6bT2HCxe4AkVI1YI=; b=V9KGOrtZFmvm5dXinHqeOMBZdS8gNytNnahzNcWdXC/BrKDR7fTgOTs5BFiimJnBR/ FZ9wHx0paLT8Qr1D1SSpqVz2GcOHbrIMDDwtN4qWTrrX1M6m07ZYKPzHaZux/iUsJvx0 ga/IegTJQzOlv5yiJN63NgLJADNEKqY9dTkF4+CQihWIr8RJOpAWiYAQzo5gBXhkZiGT GnYowuHzSAdk5by6u+fOg8TJ0NdM/ylBnpHTr+EivPbxO8KjA4dQgTGmR2XsVfdk1Xm2 Lfg1v5rphQ+l1xTMhIInqQ2uWj7vGfCqu+YDHIKqi3lqMLcpgnMbtfgtvjrVeS081eC+ 9KKQ== X-Gm-Message-State: AOJu0Yx23rD8rJS991kJy8TR2yeanOzujDil1KE3S63d2bMHMRzSh+Vx f6r6o6mQOIk/JIoXUxIf+sarEfIpYUuyIYsmCfMhD3qLU3Pzvwo1xdIr X-Gm-Gg: ASbGncvoKb1x0bqQ7xP+AMRSmTgeQ63k65+1s21s5yXe3Tl2Y/J5z/iZpQUMOP6lMml m/lEAsedny8+KB0vG7Zo1ingI2AM1THTKiI1/NzPGQbCi0kwnuEZqs7E55x0dYz+fqlh/UjyI/F fOfLNN6reN6GKoKZPTduf9wXg9OIqP8+4Gbi60wYkJgCYYvGCbvqiVGvXWu53nFDMVYb+W4W8uX GbKs4AV31tZdqz4ZMRe3BHC1PlI7zUpPCxqZQH3ICncDyShUgHAsijR5OitiyHc0g9CK5VsKIrk AmCYTl0acLF2MN1R5ja5u4qUh3LSDa4cXwlG9w61z1oYHBsGnOduRsNArBFhIio1uMcjfjvGYid gu50+WNkDxLQN2MDUWq8/rLcgfByqH92beQZ7/aVmdyIQaMqT2Mkwpn+WPpFehlsyUlzaJ8VNgE wLkZjWDZ9hMDyWp0hz2mtyB89W4D7rjhK/dM6kIY++DGi+4RHmbTgrX9rI X-Google-Smtp-Source: AGHT+IHeFtW+4R8CQlGr5XX/R95uUw1wMnDxOuiAiKXvRtGrjMENC96vZsZBfQ7k+xUZZCBV7IIpVw== X-Received: by 2002:a17:906:fd87:b0:b07:c5b1:b129 with SMTP id a640c23a62f3a-b647195b8c3mr2686811266b.1.1761144519101; Wed, 22 Oct 2025 07:48:39 -0700 (PDT) Content-Type: multipart/alternative; boundary="------------QYI6grCkYridlXYS03aYmntk" Message-ID: Date: Wed, 22 Oct 2025 16:48:37 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: Xen-devel Cc: xen-users@lists.xenproject.org, xen-announce@lists.xenproject.org, Community Manager , "committers@xenproject.org" From: Oleksii Kurochko Subject: [ANNOUNCEMENT] Xen 4.21.0-rc2 is tagged This is a multi-part message in MIME format. --------------QYI6grCkYridlXYS03aYmntk Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hello everyone, Xen 4.21 rc2 is tagged. You can check that out from xen.git: git://xenbits.xen.org/xen.git 4.21.0-rc2 For your convenience there is also a tarball and the signature at: https://downloads.xenproject.org/release/xen/4.21.0-rc2/xen-4.21.0-rc2.tar.gz And the signature is at: https://downloads.xenproject.org/release/xen/4.21.0-rc2/xen-4.21.0-rc2.tar.gz.sig Have a nice week! ~ Oleksii --------------QYI6grCkYridlXYS03aYmntk Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit 
Hello everyone,

Xen 4.21 rc2 is tagged. You can check that out from xen.git:
  git://xenbits.xen.org/xen.git 4.21.0-rc2

For your convenience there is also a tarball and the signature at:
  https://downloads.xenproject.org/release/xen/4.21.0-rc2/xen-4.21.0-rc2.tar.gz

And the signature is at:
  https://downloads.xenproject.org/release/xen/4.21.0-rc2/xen-4.21.0-rc2.tar.gz.sig

Have a nice week!

~ Oleksii



--------------QYI6grCkYridlXYS03aYmntk-- From xen-users-bounces@lists.xenproject.org Fri Oct 24 12:15:19 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 24 Oct 2025 12:15:19 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1150123.1481404 (Exim 4.92) (envelope-from ) id 1vCGgm-0007D7-Ee; Fri, 24 Oct 2025 12:14:36 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1150123.1481404; Fri, 24 Oct 2025 12:14:36 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vCGgm-0007BZ-BK; Fri, 24 Oct 2025 12:14:36 +0000 Received: by outflank-mailman (input) for mailman id 1150123; Fri, 24 Oct 2025 12:14:35 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vCGgk-0006Wk-WC for xen-users@lists.xen.org; Fri, 24 Oct 2025 12:14:35 +0000 Received: from mail.xenproject.org (mail.xenproject.org [104.130.215.37]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id f6d9b689-b0d2-11f0-980a-7dc792cee155; Fri, 24 Oct 2025 14:14:19 +0200 (CEST) Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1vCGgP-00HRHW-0s; Fri, 24 Oct 2025 12:14:13 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1vCGgP-00EOqt-1K; Fri, 24 Oct 2025 12:14:13 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: f6d9b689-b0d2-11f0-980a-7dc792cee155 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 476 v1 (CVE-2025-58149) - Incorrect removal of permissions on PCI device unplug Message-Id: Date: Fri, 24 Oct 2025 12:14:13 +0000 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2025-58149 / XSA-476 Incorrect removal of permissions on PCI device unplug ISSUE DESCRIPTION ================= When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allows the domain itself to map the memory in the page-tables. For HVM it would require a compromised device model or stubdomain to map the leaked memory into the HVM domain p2m. IMPACT ====== A buggy or malicious PV guest can access memory of PCI devices no longer assigned to it. VULNERABLE SYSTEMS ================== Xen versions 4.0 and newer are vulnerable. Only PV guests with PCI passthrough devices can leverage the vulnerability. Only domains whose PCI devices are managed by the libxl library are affected. This includes the xl toolstack and xapi, which uses the xl toolstack when dealing with PCI devices. HVM guests are also affected, but accessing the leaked memory requires an additional compromised component on the system. MITIGATION ========== Not doing hot unplug of PCI devices will avoid the vulnerability. Passing through PCI devices to HVM domains only will also limit the impact, as an attacker would require another compromised component to exploit it. CREDITS ======= This issue was discovered by Jiqian Chen of AMD and diagnosed as a security issue by Roger Pau Monné of XenServer. RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa476.patch xen-unstable xsa476-4.20.patch Xen 4.20.x - Xen 4.18.x xsa476-4.17.patch Xen 4.17.x $ sha256sum xsa476* ee4c2fa73d38c5c699006b6317ba53f20343af0593ff9a8c38e7e59b69a0beca xsa476.patch 3b921545f023dc7d9d943d0d661e677711458a917630de14f0871b03db0f2148 xsa476-4.17.patch 5babfaa3680de9950d3391a78e4956b5c18d54eaac9938c6cde2433a2ad3f27d xsa476-4.20.patch $ NOTE REGARDING LACK OF EMBARGO ============================== This issue was discussed in public already. -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmj7bXYMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZEIEH/ApNvYmMcqqEyOMgGV/VVmEMcXsAy1Ps3rMdDe9U YLsa7ugJLQ/kMI70y0qzws8Uc/kVftl6Z3NbvhpnBMdpurEbZnVuuPtV5I08BF7G 23Qij+NNXSFdUzZVtgqz+POuhpVmrZgEwmg2HXsL1h2KgirUgwh5Nbs4ZuAlbz/f 05tiljIdv4ntqz8sczUxUmtw3XuzcTu0GS8EtPSoAEC5paK72X+5i496qDKpgtqv gdnxqDL2s5ue3G029e9JA3pscVQTMYa3InNiHK28GAM2BW10op1JaxVl/JLN1zzL igpd+u6Fs73qNzcClXQ48YEBkCoTTIdhIrl0mSp4zTfN9dk= =MBxa -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa476.patch" Content-Disposition: attachment; filename="xsa476.patch" Content-Transfer-Encoding: base64 RnJvbTogSmlxaWFuIENoZW4gPEppcWlhbi5DaGVuQGFtZC5jb20+ClN1Ympl Y3Q6IHRvb2xzL2xpYnMvbGlnaHQ6IGZpeCBCQVIgbWVtb3J5IGFkZHJlc3Mg dHJ1bmNhdGlvbgoKNjQtYml0IEJBUiBtZW1vcnkgYWRkcmVzcyBpcyB0cnVu Y2F0ZWQgd2hlbiByZW1vdmluZyBhIHBhc3N0aHJvdWdoCnBjaSBkZXZpY2Ug ZnJvbSBndWVzdCBzaW5jZSBpdCB1c2VzICJ1bnNpZ25lZCBpbnQiLgoKU28s IGNoYW5nZSB0byB1c2UgNjQtYml0IHR5cGUgdG8gZml4IHRoaXMgcHJvYmxl bS4KClRoaXMgaXMgWFNBLTQ3NiAvIENWRS0yMDI1LTU4MTQ5LgoKRml4ZXM6 IGIwYTFhZjYxNjc4YiAoImxpYnhlbmxpZ2h0OiBpbXBsZW1lbnQgcGNpIHBh c3N0aHJvdWdoIikKU2lnbmVkLW9mZi1ieTogSmlxaWFuIENoZW4gPEppcWlh bi5DaGVuQGFtZC5jb20+ClJlbGVhc2UtQWNrZWQtYnk6IE9sZWtzaWkgS3Vy b2Noa28gPG9sZWtzaWkua3Vyb2Noa29AZ21haWwuY29tPgpSZXZpZXdlZC1i eTogSnVlcmdlbiBHcm9zcyA8amdyb3NzQHN1c2UuY29tPgpBY2tlZC1ieTog QW50aG9ueSBQRVJBUkQgPGFudGhvbnkucGVyYXJkQHZhdGVzLnRlY2g+Cgpk aWZmIC0tZ2l0IGEvdG9vbHMvbGlicy9saWdodC9saWJ4bF9wY2kuYyBiL3Rv b2xzL2xpYnMvbGlnaHQvbGlieGxfcGNpLmMKaW5kZXggMmVhMmNhZWI2NjI0 Li40OWQyNzJkMGRlNjUgMTAwNjQ0Ci0tLSBhL3Rvb2xzL2xpYnMvbGlnaHQv bGlieGxfcGNpLmMKKysrIGIvdG9vbHMvbGlicy9saWdodC9saWJ4bF9wY2ku YwpAQCAtMjAwMSw3ICsyMDAxLDggQEAgc3RhdGljIHZvaWQgcGNpX3JlbW92 ZV9kZXRhY2hlZChsaWJ4bF9fZWdjICplZ2MsCiB7CiAgICAgU1RBVEVfQU9f R0MocHJzLT5hb2Rldi0+YW8pOwogICAgIGxpYnhsX2N0eCAqY3R4ID0gbGli eGxfX2djX293bmVyKGdjKTsKLSAgICB1bnNpZ25lZCBpbnQgc3RhcnQgPSAw LCBlbmQgPSAwLCBmbGFncyA9IDAsIHNpemUgPSAwLCBpcnEgPSAwOworICAg IHVpbnQ2NF90IHN0YXJ0ID0gMCwgZW5kID0gMCwgZmxhZ3MgPSAwLCBzaXpl ID0gMDsKKyAgICB1bnNpZ25lZCBpbnQgaXJxID0gMDsKICAgICBpbnQgaSwg c3R1YmRvbWlkID0gMDsKICAgICBjb25zdCBjaGFyICpzeXNmc19wYXRoOwog ICAgIEZJTEUgKmY7CkBAIC0yMDMxLDcgKzIwMzIsOCBAQCBzdGF0aWMgdm9p ZCBwY2lfcmVtb3ZlX2RldGFjaGVkKGxpYnhsX19lZ2MgKmVnYywKICAgICB9 CiAKICAgICBmb3IgKGkgPSAwOyBpIDwgUFJPQ19QQ0lfTlVNX1JFU09VUkNF UzsgaSsrKSB7Ci0gICAgICAgIGlmIChmc2NhbmYoZiwgIjB4JXggMHgleCAw eCV4XG4iLCAmc3RhcnQsICZlbmQsICZmbGFncykgIT0gMykKKyAgICAgICAg aWYgKGZzY2FuZihmLCAiMHglIlNDTng2NCIgMHglIlNDTng2NCIgMHglIlND Tng2NCJcbiIsCisgICAgICAgICAgICAgICAgICAgJnN0YXJ0LCAmZW5kLCAm ZmxhZ3MpICE9IDMpCiAgICAgICAgICAgICBjb250aW51ZTsKICAgICAgICAg c2l6ZSA9IGVuZCAtIHN0YXJ0ICsgMTsKICAgICAgICAgaWYgKHN0YXJ0KSB7 CkBAIC0yMDQwLDcgKzIwNDIsNyBAQCBzdGF0aWMgdm9pZCBwY2lfcmVtb3Zl X2RldGFjaGVkKGxpYnhsX19lZ2MgKmVnYywKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBzaXplLCAwKTsKICAg ICAgICAgICAgICAgICBpZiAocmMgPCAwKQogICAgICAgICAgICAgICAgICAg ICBMT0dFRChFUlJPUiwgZG9taWQsCi0gICAgICAgICAgICAgICAgICAgICAg ICAgICJ4Y19kb21haW5faW9wb3J0X3Blcm1pc3Npb24gZXJyb3IgMHgleC8w eCV4IiwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgInhjX2RvbWFpbl9p b3BvcnRfcGVybWlzc2lvbiBlcnJvciAlIyJQUkl4NjQiLyUjIlBSSXg2NCwK ICAgICAgICAgICAgICAgICAgICAgICAgICAgc3RhcnQsCiAgICAgICAgICAg ICAgICAgICAgICAgICAgIHNpemUpOwogICAgICAgICAgICAgfSBlbHNlIHsK QEAgLTIwNTAsNyArMjA1Miw3IEBAIHN0YXRpYyB2b2lkIHBjaV9yZW1vdmVf ZGV0YWNoZWQobGlieGxfX2VnYyAqZWdjLAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgMCk7CiAgICAgICAgICAg ICAgICAgaWYgKHJjIDwgMCkKICAgICAgICAgICAgICAgICAgICAgTE9HRUQo RVJST1IsIGRvbWlkLAotICAgICAgICAgICAgICAgICAgICAgICAgICAieGNf ZG9tYWluX2lvbWVtX3Blcm1pc3Npb24gZXJyb3IgMHgleC8weCV4IiwKKyAg ICAgICAgICAgICAgICAgICAgICAgICAgInhjX2RvbWFpbl9pb21lbV9wZXJt aXNzaW9uIGVycm9yICUjIlBSSXg2NCIvJSMiUFJJeDY0LAogICAgICAgICAg ICAgICAgICAgICAgICAgICBzdGFydCwKICAgICAgICAgICAgICAgICAgICAg ICAgICAgc2l6ZSk7CiAgICAgICAgICAgICB9Cg== --=separator Content-Type: application/octet-stream; name="xsa476-4.17.patch" Content-Disposition: attachment; filename="xsa476-4.17.patch" Content-Transfer-Encoding: base64 RnJvbTogSmlxaWFuIENoZW4gPEppcWlhbi5DaGVuQGFtZC5jb20+ClN1Ympl Y3Q6IHRvb2xzL2xpYnMvbGlnaHQ6IGZpeCBCQVIgbWVtb3J5IGFkZHJlc3Mg dHJ1bmNhdGlvbgoKNjQtYml0IEJBUiBtZW1vcnkgYWRkcmVzcyBpcyB0cnVu Y2F0ZWQgd2hlbiByZW1vdmluZyBhIHBhc3N0aHJvdWdoCnBjaSBkZXZpY2Ug ZnJvbSBndWVzdCBzaW5jZSBpdCB1c2VzICJ1bnNpZ25lZCBpbnQiLgoKU28s IGNoYW5nZSB0byB1c2UgNjQtYml0IHR5cGUgdG8gZml4IHRoaXMgcHJvYmxl bS4KClRoaXMgaXMgWFNBLTQ3NiAvIENWRS0yMDI1LTU4MTQ5LgoKRml4ZXM6 IGIwYTFhZjYxNjc4YiAoImxpYnhlbmxpZ2h0OiBpbXBsZW1lbnQgcGNpIHBh c3N0aHJvdWdoIikKU2lnbmVkLW9mZi1ieTogSmlxaWFuIENoZW4gPEppcWlh bi5DaGVuQGFtZC5jb20+ClJlbGVhc2UtQWNrZWQtYnk6IE9sZWtzaWkgS3Vy b2Noa28gPG9sZWtzaWkua3Vyb2Noa29AZ21haWwuY29tPgpSZXZpZXdlZC1i eTogSnVlcmdlbiBHcm9zcyA8amdyb3NzQHN1c2UuY29tPgpBY2tlZC1ieTog QW50aG9ueSBQRVJBUkQgPGFudGhvbnkucGVyYXJkQHZhdGVzLnRlY2g+Cgpk aWZmIC0tZ2l0IGEvdG9vbHMvbGlicy9saWdodC9saWJ4bF9wY2kuYyBiL3Rv b2xzL2xpYnMvbGlnaHQvbGlieGxfcGNpLmMKaW5kZXggZjRjNGYxNzU0NTRk Li4zN2UyZTI2MjQ3N2UgMTAwNjQ0Ci0tLSBhL3Rvb2xzL2xpYnMvbGlnaHQv bGlieGxfcGNpLmMKKysrIGIvdG9vbHMvbGlicy9saWdodC9saWJ4bF9wY2ku YwpAQCAtMTk5NSw3ICsxOTk1LDcgQEAgc3RhdGljIHZvaWQgZG9fcGNpX3Jl bW92ZShsaWJ4bF9fZWdjICplZ2MsIHBjaV9yZW1vdmVfc3RhdGUgKnBycykK ICAgICAgICAgY2hhciAqc3lzZnNfcGF0aCA9IEdDU1BSSU5URihTWVNGU19Q Q0lfREVWIi8iUENJX0JERiIvcmVzb3VyY2UiLCBwY2ktPmRvbWFpbiwKICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBwY2ktPmJ1cywg cGNpLT5kZXYsIHBjaS0+ZnVuYyk7CiAgICAgICAgIEZJTEUgKmYgPSBmb3Bl bihzeXNmc19wYXRoLCAiciIpOwotICAgICAgICB1bnNpZ25lZCBpbnQgc3Rh cnQgPSAwLCBlbmQgPSAwLCBmbGFncyA9IDAsIHNpemUgPSAwOworICAgICAg ICB1aW50NjRfdCBzdGFydCA9IDAsIGVuZCA9IDAsIGZsYWdzID0gMCwgc2l6 ZSA9IDA7CiAgICAgICAgIGludCBpcnEgPSAwOwogICAgICAgICBpbnQgaTsK IApAQCAtMjAwNCw3ICsyMDA0LDggQEAgc3RhdGljIHZvaWQgZG9fcGNpX3Jl bW92ZShsaWJ4bF9fZWdjICplZ2MsIHBjaV9yZW1vdmVfc3RhdGUgKnBycykK ICAgICAgICAgICAgIGdvdG8gc2tpcDE7CiAgICAgICAgIH0KICAgICAgICAg Zm9yIChpID0gMDsgaSA8IFBST0NfUENJX05VTV9SRVNPVVJDRVM7IGkrKykg ewotICAgICAgICAgICAgaWYgKGZzY2FuZihmLCAiMHgleCAweCV4IDB4JXhc biIsICZzdGFydCwgJmVuZCwgJmZsYWdzKSAhPSAzKQorICAgICAgICAgICAg aWYgKGZzY2FuZihmLCAiMHglIlNDTng2NCIgMHglIlNDTng2NCIgMHglIlND Tng2NCJcbiIsCisgICAgICAgICAgICAgICAgICAgICAgICZzdGFydCwgJmVu ZCwgJmZsYWdzKSAhPSAzKQogICAgICAgICAgICAgICAgIGNvbnRpbnVlOwog ICAgICAgICAgICAgc2l6ZSA9IGVuZCAtIHN0YXJ0ICsgMTsKICAgICAgICAg ICAgIGlmIChzdGFydCkgewpAQCAtMjAxMiw3ICsyMDEzLDcgQEAgc3RhdGlj IHZvaWQgZG9fcGNpX3JlbW92ZShsaWJ4bF9fZWdjICplZ2MsIHBjaV9yZW1v dmVfc3RhdGUgKnBycykKICAgICAgICAgICAgICAgICAgICAgcmMgPSB4Y19k b21haW5faW9wb3J0X3Blcm1pc3Npb24oY3R4LT54Y2gsIGRvbWlkLCBzdGFy dCwgc2l6ZSwgMCk7CiAgICAgICAgICAgICAgICAgICAgIGlmIChyYyA8IDAp CiAgICAgICAgICAgICAgICAgICAgICAgICBMT0dFRChFUlJPUiwgZG9tYWlu aWQsCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAieGNfZG9tYWlu X2lvcG9ydF9wZXJtaXNzaW9uIGVycm9yIDB4JXgvMHgleCIsCisgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAieGNfZG9tYWluX2lvcG9ydF9wZXJt aXNzaW9uIGVycm9yICUjIlBSSXg2NCIvJSMiUFJJeDY0LAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgc3RhcnQsCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBzaXplKTsKICAgICAgICAgICAgICAgICB9IGVsc2Ug ewpAQCAtMjAyMCw3ICsyMDIxLDcgQEAgc3RhdGljIHZvaWQgZG9fcGNpX3Jl bW92ZShsaWJ4bF9fZWdjICplZ2MsIHBjaV9yZW1vdmVfc3RhdGUgKnBycykK ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAoc2l6ZSsoWENfUEFHRV9TSVpFLTEpKT4+WENfUEFHRV9TSElG VCwgMCk7CiAgICAgICAgICAgICAgICAgICAgIGlmIChyYyA8IDApCiAgICAg ICAgICAgICAgICAgICAgICAgICBMT0dFRChFUlJPUiwgZG9tYWluaWQsCi0g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAieGNfZG9tYWluX2lvbWVt X3Blcm1pc3Npb24gZXJyb3IgMHgleC8weCV4IiwKKyAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICJ4Y19kb21haW5faW9tZW1fcGVybWlzc2lvbiBl cnJvciAlIyJQUkl4NjQiLyUjIlBSSXg2NCwKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIHN0YXJ0LAogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgc2l6ZSk7CiAgICAgICAgICAgICAgICAgfQo= --=separator Content-Type: application/octet-stream; name="xsa476-4.20.patch" Content-Disposition: attachment; filename="xsa476-4.20.patch" Content-Transfer-Encoding: base64 RnJvbTogSmlxaWFuIENoZW4gPEppcWlhbi5DaGVuQGFtZC5jb20+ClN1Ympl Y3Q6IHRvb2xzL2xpYnMvbGlnaHQ6IGZpeCBCQVIgbWVtb3J5IGFkZHJlc3Mg dHJ1bmNhdGlvbgoKNjQtYml0IEJBUiBtZW1vcnkgYWRkcmVzcyBpcyB0cnVu Y2F0ZWQgd2hlbiByZW1vdmluZyBhIHBhc3N0aHJvdWdoCnBjaSBkZXZpY2Ug ZnJvbSBndWVzdCBzaW5jZSBpdCB1c2VzICJ1bnNpZ25lZCBpbnQiLgoKU28s IGNoYW5nZSB0byB1c2UgNjQtYml0IHR5cGUgdG8gZml4IHRoaXMgcHJvYmxl bS4KClRoaXMgaXMgWFNBLTQ3NiAvIENWRS0yMDI1LTU4MTQ5LgoKRml4ZXM6 IGIwYTFhZjYxNjc4YiAoImxpYnhlbmxpZ2h0OiBpbXBsZW1lbnQgcGNpIHBh c3N0aHJvdWdoIikKU2lnbmVkLW9mZi1ieTogSmlxaWFuIENoZW4gPEppcWlh bi5DaGVuQGFtZC5jb20+ClJlbGVhc2UtQWNrZWQtYnk6IE9sZWtzaWkgS3Vy b2Noa28gPG9sZWtzaWkua3Vyb2Noa29AZ21haWwuY29tPgpSZXZpZXdlZC1i eTogSnVlcmdlbiBHcm9zcyA8amdyb3NzQHN1c2UuY29tPgpBY2tlZC1ieTog QW50aG9ueSBQRVJBUkQgPGFudGhvbnkucGVyYXJkQHZhdGVzLnRlY2g+Cgpk aWZmIC0tZ2l0IGEvdG9vbHMvbGlicy9saWdodC9saWJ4bF9wY2kuYyBiL3Rv b2xzL2xpYnMvbGlnaHQvbGlieGxfcGNpLmMKaW5kZXggMTY0N2ZkNmY0NzU2 Li43YWY2MDIyMjRhYmEgMTAwNjQ0Ci0tLSBhL3Rvb2xzL2xpYnMvbGlnaHQv bGlieGxfcGNpLmMKKysrIGIvdG9vbHMvbGlicy9saWdodC9saWJ4bF9wY2ku YwpAQCAtMjE3OSw3ICsyMTc5LDcgQEAgc3RhdGljIHZvaWQgcGNpX3JlbW92 ZV9kZXRhY2hlZChsaWJ4bF9fZWdjICplZ2MsCiB7CiAgICAgU1RBVEVfQU9f R0MocHJzLT5hb2Rldi0+YW8pOwogICAgIGxpYnhsX2N0eCAqY3R4ID0gbGli eGxfX2djX293bmVyKGdjKTsKLSAgICB1bnNpZ25lZCBpbnQgc3RhcnQgPSAw LCBlbmQgPSAwLCBmbGFncyA9IDAsIHNpemUgPSAwOworICAgIHVpbnQ2NF90 IHN0YXJ0ID0gMCwgZW5kID0gMCwgZmxhZ3MgPSAwLCBzaXplID0gMDsKICAg ICBpbnQgIGlycSA9IDAsIGksIHN0dWJkb21pZCA9IDA7CiAgICAgY29uc3Qg Y2hhciAqc3lzZnNfcGF0aDsKICAgICBGSUxFICpmOwpAQCAtMjIwOSw3ICsy MjA5LDggQEAgc3RhdGljIHZvaWQgcGNpX3JlbW92ZV9kZXRhY2hlZChsaWJ4 bF9fZWdjICplZ2MsCiAgICAgfQogCiAgICAgZm9yIChpID0gMDsgaSA8IFBS T0NfUENJX05VTV9SRVNPVVJDRVM7IGkrKykgewotICAgICAgICBpZiAoZnNj YW5mKGYsICIweCV4IDB4JXggMHgleFxuIiwgJnN0YXJ0LCAmZW5kLCAmZmxh Z3MpICE9IDMpCisgICAgICAgIGlmIChmc2NhbmYoZiwgIjB4JSJTQ054NjQi IDB4JSJTQ054NjQiIDB4JSJTQ054NjQiXG4iLAorICAgICAgICAgICAgICAg ICAgICZzdGFydCwgJmVuZCwgJmZsYWdzKSAhPSAzKQogICAgICAgICAgICAg Y29udGludWU7CiAgICAgICAgIHNpemUgPSBlbmQgLSBzdGFydCArIDE7CiAg ICAgICAgIGlmIChzdGFydCkgewpAQCAtMjIxOCw3ICsyMjE5LDcgQEAgc3Rh dGljIHZvaWQgcGNpX3JlbW92ZV9kZXRhY2hlZChsaWJ4bF9fZWdjICplZ2Ms CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgc2l6ZSwgMCk7CiAgICAgICAgICAgICAgICAgaWYgKHJjIDwgMCkK ICAgICAgICAgICAgICAgICAgICAgTE9HRUQoRVJST1IsIGRvbWlkLAotICAg ICAgICAgICAgICAgICAgICAgICAgICAieGNfZG9tYWluX2lvcG9ydF9wZXJt aXNzaW9uIGVycm9yIDB4JXgvMHgleCIsCisgICAgICAgICAgICAgICAgICAg ICAgICAgICJ4Y19kb21haW5faW9wb3J0X3Blcm1pc3Npb24gZXJyb3IgJSMi UFJJeDY0Ii8lIyJQUkl4NjQsCiAgICAgICAgICAgICAgICAgICAgICAgICAg IHN0YXJ0LAogICAgICAgICAgICAgICAgICAgICAgICAgICBzaXplKTsKICAg ICAgICAgICAgIH0gZWxzZSB7CkBAIC0yMjI4LDcgKzIyMjksNyBAQCBzdGF0 aWMgdm9pZCBwY2lfcmVtb3ZlX2RldGFjaGVkKGxpYnhsX19lZ2MgKmVnYywK ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDApOwogICAgICAgICAgICAgICAgIGlmIChyYyA8IDApCiAgICAgICAg ICAgICAgICAgICAgIExPR0VEKEVSUk9SLCBkb21pZCwKLSAgICAgICAgICAg ICAgICAgICAgICAgICAgInhjX2RvbWFpbl9pb21lbV9wZXJtaXNzaW9uIGVy cm9yIDB4JXgvMHgleCIsCisgICAgICAgICAgICAgICAgICAgICAgICAgICJ4 Y19kb21haW5faW9tZW1fcGVybWlzc2lvbiBlcnJvciAlIyJQUkl4NjQiLyUj IlBSSXg2NCwKICAgICAgICAgICAgICAgICAgICAgICAgICAgc3RhcnQsCiAg ICAgICAgICAgICAgICAgICAgICAgICAgIHNpemUpOwogICAgICAgICAgICAg fQo= --=separator-- From xen-users-bounces@lists.xenproject.org Tue Oct 28 14:28:45 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Oct 2025 14:28:45 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1152149.1482676 (Exim 4.92) (envelope-from ) id 1vDkg6-0005eO-GQ; Tue, 28 Oct 2025 14:28:02 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1152149.1482676; Tue, 28 Oct 2025 14:28:02 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vDkg6-0005eH-CZ; Tue, 28 Oct 2025 14:28:02 +0000 Received: by outflank-mailman (input) for mailman id 1152149; Tue, 28 Oct 2025 14:28:01 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vDkg5-0005e9-Py for XEN-USERS@lists.xenproject.org; Tue, 28 Oct 2025 14:28:01 +0000 Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.131]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id 4db10b24-b40a-11f0-9d16-b5c5bf9af7f9; Tue, 28 Oct 2025 15:27:59 +0100 (CET) Received: from [10.66.0.8] ([134.61.124.224]) by mrelayeu.kundenserver.de (mreue009 [213.165.67.97]) with ESMTPSA (Nemesis) id 1Mgvj3-1vumbD3awP-00hsT9 for ; Tue, 28 Oct 2025 15:27:59 +0100 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 4db10b24-b40a-11f0-9d16-b5c5bf9af7f9 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rosner-online.de; s=s1-ionos; t=1761661679; x=1762266479; i=richard@rosner-online.de; bh=6RDn4FtbsZu2uTo7DzaNsPepO6S1H+n6lwDNFncx7o0=; h=X-UI-Sender-Class:Content-Type:Message-ID:Date:MIME-Version:To: From:Subject:cc:content-transfer-encoding:content-type:date:from: message-id:mime-version:reply-to:subject:to; b=HngANmNWM/qpbfaORULybaDLx70mUvCLChPWp8YQuoYW9/M/+cqGsef3Db4m/bn7 qtkBRLgYZJuhKIS3evMfPoxikKLdVk/Y9hnZZsRVZJB+PBMfmiQXAG7uWIGJ79Siq RmJQwzOG+LEc3E1kb94Vj1FWMtbxSuBMBFSY1ECSC+nx7vY12H8HREb1LeiGd4j8o amyq/qyYs4REx0myBxtC/47P18vPYvsy3+Cb9PdyJYpIhyGOYBkMCdtD8wHa2AAzL VZPshBr4mZQLU4FRPrS3DUu5TLVMIkdj4KSZqQSekQP++5a4Qvadw0aZK/gDl357/ fOrYSNWeYg0o0IQFMg== X-UI-Sender-Class: 55c96926-9e95-11ee-ae09-1f7a4046a0f6 Content-Type: multipart/alternative; boundary="------------d4RJ0K4Pgb3vRBYEbJB7OLGa" Message-ID: <2e481905-c9e6-4be5-a198-630c37bee164@rosner-online.de> Date: Tue, 28 Oct 2025 15:27:58 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US, de-DE To: XEN-USERS@lists.xenproject.org From: Richard Rosner Subject: Kernel config for Linux guest X-Provags-ID: V03:K1:ov0oxtAai+XqHJUYpQf+39QJuoFHhbXZQycP2Xu7eT/mW6Gq0Dr hOS2XTPyZqo9laHgePBEu82w2Fag9q+F7WNqqrtob+YSAKzdBN3j7BZccf/O877PDCLW2CQ K1rd8xNp3YZCsTAgc3+xKa5raULsKLENbjIWYWs81WL8/fd9wPkJbijr8So+oWD26ZNpu04 nhbkHqA6FRW/ROYRCBTZQ== X-Spam-Flag: NO UI-OutboundReport: notjunk:1;M01:P0:mz7m5OVxvFA=;7pZibe+0NdH9gTcGjqkoseHNx4f B/MQ2l/FyobMz/V1jxJFI4qWzt6VugVG3z0U6b/AN1rbLdlOEP0pnmlFWToRYR4Flz4IN6DBt QECIei4KzYxzj1scPYC11RFMAefFo9T+6XOYc+Z4aRlRfypefwzafy7Ie7Rh9YSAMPb0T9UDK 3fkp2aOuSlbmUZAhRd/nVis0Wgq0BwlV/IQU5UERdPP/I78AOwmdncqchZxFVqqCVDOerPwCd Huf7mdd+2AJal/wl211TFrdLjayNZOH7N6l6setZFODNsMdd+Vy7uZM321CclIMYlK/UI89FM wORxq04h93f6DYc1XXfWayh68C9amYiPgWV/wg9jCa7Ev5dEC1D0wERGiESG02WvU8H/U0kI/ XnlAUFxwNaXuyrwnZEAHhICtsJj+9LHcn68bxTd2uAUPZ4VH532W57D7fsqSaS3Ey1/YN3kch WtkEYHYa3/a0+Rc9/bp5lpyRgYwbSd58BPNndpDiJAp1+l+qI6BY8qufnQ7DDI3qTMQGodDV8 yrSk4xStl56c2c7J3zHUJIFEnCxY0ywWSXs+AbYXkChkv+B41peN8lvmWttKEN4fw5DhHfy/O 1mTBnE+2ZCOVEFvO+kIQmglY3uTMNZOA6ZVUtWoRnMxu4JQlXcmfbT7pAZZGgvGQV5KtmdsHT U1O6wSmCz5zKaLJHHrpoZ+TW3dnDTz0jjwYudwNeZq/sYkPScsE9+3cH0+Ebe0FlsofHirhn3 SzF995cCsTdkV0ovNajuPhXQA4z8PbdSK+7+sz65fQ+MhmyRpUSlJLCsxBZq4SVjwFmjsWgSW NGghrUj9kaMSSGoLb8us8j44K2HTNtdt0kQN0f0VULjLgvg7QO5U7oP/X+TOUGpyC07p/s43T UMAH6PErQfUnouXxn68LU+zm//6a8O4htnDXF3KixqMwmBG8ntc0Z7J1jcRwBMo9fSEwgfKJ0 tDMEjmkZXIPWRZx3QuVoHK7KpTn08DO8uXEpE3ErUBxyb5/frxeJk28tX5YJmKbkkMdjV+FDM AdNE7uTx/xAHLS+sL6EdDGxJGjiBFa1Vlcjv4yFu9YtdjkWYUSupDxfYw39D5u9CQVZNISWWP F6W1qg72c3fhiwA4F0s1O3VSrhz1dahiFXiyriR4l7131xUGn/ckkeztbvmJn/G8dy5uII+xV qPDVcQxWuccnrNCnT+R5tb74TkrtnD7NMnK2bImSAjE+WUSvIWikNzWXbAWcDWSw+0wxjP8Z2 vLnXT0KIiXgDTx/CIE7J021GijNCj4bgPxavdFUeXPGaNxwHSMIdFlNoJOFzBXjS7NQDRWz0T LWPFKHjEWh/gbqEgweH/Ez2e3vOghQjicj04whGnrFwUohvhu7hPFm6XYnU0cXVnAu1wqg+PX Zbh/u3BhLhn29aFSnkpjooZu8sLxZ+sUR87ytkW1uFWZ2BUu6UkXQ700COc6tZGChgCDAYaEt aMvyprWbvqkaiSoz2R4UuJzHunk/rqg1H+/DmA9XLzuQZ4e8fKu5eryYim/gNuab4BWpJLUas e2U1TyGz2Ym4YgpzMn3sW8X+uK4oMkpbTwJvJXXB12c1X8H+QhOpBMYCRizeMPmCfRxJ7nYCb a3h5fvRjmuRHGLTmxw5amasfIK+P29r1mDsPG9wZc0c4fhG0Zs7VAQ/Wl3+ReyPZXwbqiyghP w= This is a multi-part message in MIME format. --------------d4RJ0K4Pgb3vRBYEbJB7OLGa Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hello, we've been running Xen as our hypervisor for many years now, with Debian being both the host OS and the guest OS in each VM. But since Debian 13, their kernel for whatever reason can't boot anymore on Xen with the error messages: Loading Linux 6.12.48-amd64 ... error: not xen image. Loading initial ramdisk ... error: you need to load the kernel first. Press any key to continue... A different kernel compiled by myself based on the config of an older 6.12.x config from Debian still boots, but I really can't figure out what difference between them actually causes it to not be able to boot anymore. I even went through the Gentoo Wiki [1], where I could actually find differences, but I got no clue how to resolve them (and also I don't know if they even make a difference): * "Support for running as a PVH guest" doesn't seem to be an option anymore, the option is now called "Xen PVH guest support" * "Bus options (PCI etc.) -> Xen PCI Frontend" seems to be entirely gone Sure, some modules are market as M in Debian's config compared to the Gentoo wiki, but that was also the case in the past. Does anybody have a full list of kernel configs needed for a Linux kernel to boot on Xen? For reference, these are our configs for the Xen guests: name = "ts" type = "pv" kernel = "/usr/lib/grub-xen/grub-x86_64-xen.bin" memory = 4096 maxmem = 4096 vcpus = 4 maxvcpus = 4 disk = [ 'phy:/dev/xen-guests/ts,sda,w' ] vif = [ 'mac=00:16:3e:33:b7:3f,bridge=xenbr0' ] acpi = 1 pus="6-31" device_model_version = "qemu-xen" device_model_override = "/usr/bin/qemu-system-x86_64" Best regards Richard [1]: https://wiki.gentoo.org/wiki/Xen#Creating_an_unprivileged_domain_.28domU.29 --------------d4RJ0K4Pgb3vRBYEbJB7OLGa Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Hello,

we've been running Xen as our hypervisor for many years now, with Debian being both the host OS and the guest OS in each VM. But since Debian 13, their kernel for whatever reason can't boot anymore on Xen with the error messages:


Loading Linux 6.12.48-amd64 ...
error: not xen image.
Loading initial ramdisk ...
error: you need to load the kernel first.

Press any key to continue...


A different kernel compiled by myself based on the config of an older 6.12.x config from Debian still boots, but I really can't figure out what difference between them actually causes it to not be able to boot anymore. I even went through the Gentoo Wiki [1], where I could actually find differences, but I got no clue how to resolve them (and also I don't know if they even make a difference):

  • "Support for running as a PVH guest" doesn't seem to be an option anymore, the option is now called "Xen PVH guest support"
  • "Bus options (PCI etc.) -> Xen PCI Frontend" seems to be entirely gone

Sure, some modules are market as M in Debian's config compared to the Gentoo wiki, but that was also the case in the past. Does anybody have a full list of kernel configs needed for a Linux kernel to boot on Xen? For reference, these are our configs for the Xen guests:


name = "ts"
type = "pv"
kernel = "/usr/lib/grub-xen/grub-x86_64-xen.bin"
memory = 4096
maxmem = 4096
vcpus = 4
maxvcpus = 4
disk = [ 'phy:/dev/xen-guests/ts,sda,w' ]
vif = [ 'mac=00:16:3e:33:b7:3f,bridge=xenbr0' ]
acpi = 1
pus="6-31"
device_model_version = "qemu-xen"
device_model_override = "/usr/bin/qemu-system-x86_64"


Best regards

Richard


[1]: https://wiki.gentoo.org/wiki/Xen#Creating_an_unprivileged_domain_.28domU.29

--------------d4RJ0K4Pgb3vRBYEbJB7OLGa-- From xen-users-bounces@lists.xenproject.org Tue Oct 28 19:20:47 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 28 Oct 2025 19:20:47 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1152300.1482822 (Exim 4.92) (envelope-from ) id 1vDpEf-0004TC-Jq; Tue, 28 Oct 2025 19:20:01 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1152300.1482822; Tue, 28 Oct 2025 19:20:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vDpEf-0004Rw-Eg; Tue, 28 Oct 2025 19:20:01 +0000 Received: by outflank-mailman (input) for mailman id 1152300; Tue, 28 Oct 2025 19:20:00 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vDpEd-0004Rk-QW for xen-users@lists.xenproject.org; Tue, 28 Oct 2025 19:20:00 +0000 Received: from mo4-p00-ob.smtp.rzone.de (mo4-p00-ob.smtp.rzone.de [81.169.146.220]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 14e258ac-b433-11f0-980a-7dc792cee155; Tue, 28 Oct 2025 20:19:54 +0100 (CET) Received: from [10.101.101.5] by smtp.strato.de (RZmta 53.4.2 DYNA|AUTH) with ESMTPSA id 922f4019SJJqSJw (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)) (Client did not present a certificate) for ; Tue, 28 Oct 2025 20:19:52 +0100 (CET) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 14e258ac-b433-11f0-980a-7dc792cee155 ARC-Seal: i=1; a=rsa-sha256; t=1761679192; cv=none; d=strato.com; s=strato-dkim-0002; b=kri1VAk4G5aFUVJH40j+lOquA4eiAib2Ry6gGeJ0SZX3H96uIe8m25hgSSHlUdgL0x 7yxjoi4ZAyiCM4vSiJNKVMjK/wYfwf2TmByOEb3FeIUiUtYgb/FBrU+tduKgVZofGUuf eng0fZUOTkDoLPUUTUvWyoAJDSy6EMagOwuv4twx16Q0iL2r7lQq39BKhyzUhehlvAVB jpSAhPTUptSAd0TPtJ9oT7UpIB3xIBkaVCzKOC8vAoMp3rHhyWDuvp5FaS2I9wWBEyin CphoiEmsPNDMtyIdOk+9TQZ92o+2KXKPeakILMs5dIGjCRbNdnVQv09NdNtM6yAYhtg5 WB4Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; t=1761679192; s=strato-dkim-0002; d=strato.com; h=In-Reply-To:From:References:To:Subject:Date:Message-ID:Cc:Date:From: Subject:Sender; bh=B8G8KPa8En5uB7ohT/zeeYa8UBf3WJQLtd7+D3oLUvg=; b=LBMnSM0Pcfhl25VWi0dmPt/oWC9tse5qczHjpkndxmaRnW0XYfRCgWh24O2+qA0hf6 Y45+twpLz6sL+yE41Qc1O3GlmJZuJqLWXUx+hqxSZT0qcPuZSl7xn+I+8ctdb8J9u3mS VUtM8frHmpCJKSvvtKLakcoQEv8f/ZdjgLBTknyG6Rv0+IilemCM6YbfIfc4N7ugZHOg ajdlZH4Xc9b9dYuRgn0jNS9uqPeY8rXUk3uBx2Gx4zqEBwavFxZ41TRg213RhS+JF5Gx 5KRrL0m/7F2SrTMgV3AIrBHZ0+8xb1hoPrPVNjcE2KB6DpRDxv2jcX+rIBIPxGQdnzMe +uaQ== ARC-Authentication-Results: i=1; strato.com; arc=none; dkim=none X-RZG-CLASS-ID: mo00 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1761679192; s=strato-dkim-0002; d=weber-oldenburg.de; h=In-Reply-To:From:References:To:Subject:Date:Message-ID:Cc:Date:From: Subject:Sender; bh=B8G8KPa8En5uB7ohT/zeeYa8UBf3WJQLtd7+D3oLUvg=; b=HudUpxMxSIClgLi3mhmkJyYgaEOPlFiRLP7Ja0De9eXXDw2yKmMMbsVzH6RcvMI802 5tOQ02y4nzehiPzdV31zBEW7nkoVUBOR8oghORMIuwOO6qAUZKDniL+JWFHMAf0ImApq 0YSRPOOQVrOVeuGEnugkLtsgGYfiyi2SSzh2WlhTSdfUs23gbUQuHRI+5c75PW9C2Tdu yU+x1YUHKcEfEouM4/YhzqoMhrj3MX2dAhvYV9ZC8MFUQymlFXymAGKcZbKX/pfKA6se EVF8xeXn2hefiRLzPP5no6IIBe7dT3ytPkyiBVUKc6f0Su6NU3iIKs+sKZnadyEjsT6T dd6w== X-RZG-AUTH: ":O2kGeEG7b/pS1Fq8SXqhxGZYjo4oe3VyGGVIF+o+ELiC6kPUFoz0lK5VhljB9gIZplrXv1DUAIvzOk4j" Content-Type: multipart/mixed; boundary="------------oYipuQEvoJjBOWRqKlyi49Ns" Message-ID: <6701a6e4-584d-4d3b-8b7b-35a9a2241f75@weber-oldenburg.de> Date: Tue, 28 Oct 2025 20:19:52 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Kernel config for Linux guest To: xen-users@lists.xenproject.org References: <2e481905-c9e6-4be5-a198-630c37bee164@rosner-online.de> From: Volker Weber Content-Language: de-DE, en-US In-Reply-To: <2e481905-c9e6-4be5-a198-630c37bee164@rosner-online.de> Content-Transfer-Encoding: 7bit This is a multi-part message in MIME format. --------------oYipuQEvoJjBOWRqKlyi49Ns Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hi, i run into this around a month before. Seems to be a Problem in the grub bootloader: https://bugs-devel.debian.org/cgi-bin/bugreport.cgi?bug=1102066 regards Volker Weber Am 28.10.25 um 15:27 schrieb Richard Rosner: > Hello, > > we've been running Xen as our hypervisor for many years now, with Debian > being both the host OS and the guest OS in each VM. But since Debian 13, > their kernel for whatever reason can't boot anymore on Xen with the > error messages: > > > Loading Linux 6.12.48-amd64 ... > error: not xen image. > Loading initial ramdisk ... > error: you need to load the kernel first. > > Press any key to continue... > > > A different kernel compiled by myself based on the config of an older > 6.12.x config from Debian still boots, but I really can't figure out > what difference between them actually causes it to not be able to boot > anymore. I even went through the Gentoo Wiki [1], where I could actually > find differences, but I got no clue how to resolve them (and also I > don't know if they even make a difference): > > * "Support for running as a PVH guest" doesn't seem to be an option > anymore, the option is now called "Xen PVH guest support" > * "Bus options (PCI etc.) -> Xen PCI Frontend" seems to be entirely gone > > Sure, some modules are market as M in Debian's config compared to the > Gentoo wiki, but that was also the case in the past. Does anybody have a > full list of kernel configs needed for a Linux kernel to boot on Xen? > For reference, these are our configs for the Xen guests: > > > name = "ts" > type = "pv" > kernel = "/usr/lib/grub-xen/grub-x86_64-xen.bin" > memory = 4096 > maxmem = 4096 > vcpus = 4 > maxvcpus = 4 > disk = [ 'phy:/dev/xen-guests/ts,sda,w' ] > vif = [ 'mac=00:16:3e:33:b7:3f,bridge=xenbr0' ] > acpi = 1 > pus="6-31" > device_model_version = "qemu-xen" > device_model_override = "/usr/bin/qemu-system-x86_64" > > > Best regards > > Richard > > > [1]: https://wiki.gentoo.org/wiki/ > Xen#Creating_an_unprivileged_domain_.28domU.29 > --------------oYipuQEvoJjBOWRqKlyi49Ns Content-Type: text/vcard; charset=UTF-8; name="volker.vcf" Content-Disposition: attachment; filename="volker.vcf" Content-Transfer-Encoding: base64 bnVsbA== --------------oYipuQEvoJjBOWRqKlyi49Ns-- From xen-users-bounces@lists.xenproject.org Thu Oct 30 02:17:53 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 30 Oct 2025 02:17:53 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1153234.1483656 (Exim 4.92) (envelope-from ) id 1vEIDZ-0005ez-9K; Thu, 30 Oct 2025 02:16:49 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1153234.1483656; Thu, 30 Oct 2025 02:16:49 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vEIDZ-0005ed-2a; Thu, 30 Oct 2025 02:16:49 +0000 Received: by outflank-mailman (input) for mailman id 1153234; Thu, 30 Oct 2025 02:16:47 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vEIDX-0005eX-2c for xen-users@lists.xenproject.org; Thu, 30 Oct 2025 02:16:47 +0000 Received: from mail-vs1-xe35.google.com (mail-vs1-xe35.google.com [2607:f8b0:4864:20::e35]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 7a6d1c16-b536-11f0-980a-7dc792cee155; Thu, 30 Oct 2025 03:16:45 +0100 (CET) Received: by mail-vs1-xe35.google.com with SMTP id ada2fe7eead31-5c7fda918feso759541137.0 for ; Wed, 29 Oct 2025 19:16:44 -0700 (PDT) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 7a6d1c16-b536-11f0-980a-7dc792cee155 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1761790603; x=1762395403; darn=lists.xenproject.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=wi7M3ezMHcq7ywQpzCn6pFgznLf6fHs5fXK6WHXsabI=; b=gpY8dREp17Twe5k1IxlwSJr/lt1m20tt2TIpZKGN1F+8P4GR1sxeVytfdz/gmOGr7i 6JEHJ3DnVL7k8hOkZleonD03aeYuNRMwvZ8go6qPs9XFAVGOXWKKuHVp0jTKw1XQmo3U 57eSLfqQO88K7oYCNwxolTnuztqyUFyyaS/SUwcr1J4KKB4mw9WzBjIa08e/kSlPjd0x hPH1nUEtJ4rT0S8VfG6vizcSj9rvDNxzQNzW/5POaaQSUv+PcS1VdlMvVsItimuKx3F7 m32/zhcfuiqSugjsmA0fuuxPkG55jDYDMxLkZBu68pw01aaCCpiWk1VvulyRaaBZyd+6 YPiA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761790603; x=1762395403; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=wi7M3ezMHcq7ywQpzCn6pFgznLf6fHs5fXK6WHXsabI=; b=B2QAGEG0hbeUzmu0+/IQrZ0rHWvl3lJA0iweyjzvfBf5I+NDjUxCA1XGd1OnG2yCdx fJlL9VYsoobDzhpCmEPmWIxt5bxTaW43GzCk/TN2EgJJMmrR4ta1z3DkxcBtXmvjvPr1 Iqi+KrJHZBRwKWDqTyzENZ9/iT/XqeG2yTLKsnPDh0S7UYRFABhVzyOU1HP7CXb4khMr SJcm7/Y4dW61WqVNmcJW0vIhCrzBZ5Cvv09gU88H61DcwFy/PzJZBvotLMxcJwBwJuX2 orkNeTOX7aYOOthxEZBlJjcEonn9cnki7YKzL2kn17unfPilTd83sH7HUtuJMmOfOy7U 1nPA== X-Gm-Message-State: AOJu0Yy1bf7z3GPaxG6RI3blQRHRfyrkUaELPfdWJese5Th6jWAyBPKD LZ7j5lE6ecER+Y+AfKmUAP84jZx7EV6IUthmeoR778reFqFMpHXZFzLSt7xiywSEGNS2inDO/Uo ugrwq0CjW9Fmx/H8kY81Ay+Gz8WTGnyMKLASS X-Gm-Gg: ASbGncvSeQUIiUGqAL67rLbwFNtOobtsEBwmQMeoQ0Wl72WSzwwGL578Woy1bsoCTBO h9qGpaUlWm3XTyqW5CgtXw+3ImNU34uJ6Cdip595Xl34pV0b1fyf+OHIn67G5tOA486uIkVER5O ys8s+Hmx+ICIJXkISh7jfUdNTdEKRjPhdbMQcvH5vNnTB4ts5RobPfL5SZoHYkCNzO+SXvHUOZa THSjlQYT4em+w8vH5Sg4sH8m0eT1jwJjEs1t4R35xeoCATUIv5dyI9oj1F7bHdsaVN6gQ== X-Google-Smtp-Source: AGHT+IHWtPaA8oFFHy4JdDjbVOvIevMMzvYczVl4KordC135Agc92fgSrXy+SximB0ckkolBBibFRLRR+UtJtg61Q5o= X-Received: by 2002:a05:6102:3e20:b0:5d7:ddf6:8951 with SMTP id ada2fe7eead31-5db9057ba9dmr1952979137.1.1761790602867; Wed, 29 Oct 2025 19:16:42 -0700 (PDT) MIME-Version: 1.0 From: Pry Mar Date: Wed, 29 Oct 2025 19:16:31 -0700 X-Gm-Features: AWmQ_bmhJ7O-2wLiEiqX3fzVTV-KNSsxY6IGab-ucAy0HjMa-SzJfKYTO4oz-3U Message-ID: Subject: re: Kernel config for Linux guest To: xen-users Content-Type: multipart/alternative; boundary="0000000000000d78f2064256d76c" --0000000000000d78f2064256d76c Content-Type: text/plain; charset="UTF-8" Hello, You could recompile that 6.12.x kernel and turn-off the zstd compression, but you could also recompile grub2 and add the patches from Logan Gunthorpe, posted here: https://cgit.git.savannah.gnu.org/cgit/grub.git/log/ This was my approach using the official source and delta from Trixie. The new xen-kernels in grub-xen-host will now support the required zstdio iofilter. The resulting xen-kernels are here: https://repo.dynavirt.com/xen/debian/trixie-nmu/grub2/pvgrub2/ The upstream grub2 has a new release of grub-2.14~rc1 from 2 days ago. cheers, PryMar56 --0000000000000d78f2064256d76c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello,

You could recompile t= hat 6.12.x kernel and turn-off the zstd compression, but you could also rec= ompile grub2 and add the patches from Logan Gunthorpe, posted here:=C2=A0 <= br>

=
This was my approach using the official source and delta from Tr= ixie. The new xen-kernels in grub-xen-host will now support the required zs= tdio iofilter.=C2=A0
The resulting xen-kernels are here:=C2= =A0

The upstream grub2 has a new release of= grub-2.14~rc1 from 2 days ago.=C2=A0

cheers,=
PryMar56


--0000000000000d78f2064256d76c-- From xen-users-bounces@lists.xenproject.org Fri Oct 31 13:58:55 2025 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 31 Oct 2025 13:58:55 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1151993.1484395 (Exim 4.92) (envelope-from ) id 1vEpdm-0005gJ-Vl; Fri, 31 Oct 2025 13:58:06 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1151993.1484395; Fri, 31 Oct 2025 13:58:06 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vEpdm-0005gC-Rt; Fri, 31 Oct 2025 13:58:06 +0000 Received: by outflank-mailman (input) for mailman id 1151993; Tue, 28 Oct 2025 08:22:57 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1vDeym-0004m0-VQ for xen-users@lists.xenproject.org; Tue, 28 Oct 2025 08:22:57 +0000 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id 4cb5f8bc-b3d7-11f0-9d16-b5c5bf9af7f9; Tue, 28 Oct 2025 09:22:54 +0100 (CET) Received: from mail-qk1-f200.google.com (mail-qk1-f200.google.com [209.85.222.200]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-199-I4QSo6JUNJCsZdDx46IIOg-1; Tue, 28 Oct 2025 04:22:51 -0400 Received: by mail-qk1-f200.google.com with SMTP id af79cd13be357-8a2594fa114so696738985a.0 for ; Tue, 28 Oct 2025 01:22:51 -0700 (PDT) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" X-Inumbo-ID: 4cb5f8bc-b3d7-11f0-9d16-b5c5bf9af7f9 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1761639773; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type; bh=aGltrD1mXhSYeZ86X0qSCTCBuYED6Oi7pqIWLgbyS5s=; b=bsS6SzUjzg5z65CzQmbY6s9B4wNOcm3cLCm1ShhxljQ2go56STdR6zGncr/2CHKPKJqitY 5HTnYD8FLaZf0TgXRFwb9+1R7ZMPHfvRtJNaP2hHJ/nbBmkBTp/9njRgxPIFGaT06YeCag 9HBl75aM5nlH0+CO9bYjTTE7Zsm238A= X-MC-Unique: I4QSo6JUNJCsZdDx46IIOg-1 X-Mimecast-MFC-AGG-ID: I4QSo6JUNJCsZdDx46IIOg_1761639771 X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761639771; x=1762244571; h=cc:to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=aGltrD1mXhSYeZ86X0qSCTCBuYED6Oi7pqIWLgbyS5s=; b=VJ58Tt0UR1a4JP5rJwfGuZPL8GBjYlNesQMhaTF1ryKKjJk7P4jS/QdBbrSsXxbTVj yNW3vDyRUy0WxOb/IucT+I3wQhi1okaLDCbiHlSDqVgj/YeGix8p4LgcIfGXtFeHJqP5 awf9o9HDAeR3VgGRZk6KVf+RaPsScKgYIasziajQts4tUWW10feNvhXUGSwKD8PI8C7j F84nP9qfI4bpdpdKHnUkUK/ecVyNdvDOLy2NGbO8UdQVzi1vI9YMaJ28v5wf0d61nBNN HnKkIZuyMQYthPkzCR2ha/Sdu3bfVLKuyzDzUzca72zs0XFiqJ17UOdw5++lXbJsmOgp KgfQ== X-Gm-Message-State: AOJu0YwsMgn/9K3xAvadKwa50Az1IrDjjVfdQKgB7PmpGZ9LiRtBNnCL 350haKyY/i7KSnlLUWcVQvSLM5JnE0QZ6hTFb5KS4WMHLcqCRc5vG3RdQbssDQB0gfnMKMUdxVt D6ehEmAP3F3FG5z/fcd1hpZs9RBq0GnEVXfwopDXAGyHUoee1nQkjimh3okwYhVB4Bkvz3W2dta KaxxI7NeqB8zc61cHokKiOqpEbTPUtTRmpp6i0TO39iyRx5akzyKIK6Q== X-Gm-Gg: ASbGnctoKY5SbNOaqndCQRg0TfLJCo0KNrEVDkBqgfslX3IRzZq5kyTtLapLNlQzQb+ cCJJM5xilrPYGywflK18Yexr590t1AgR0Tfhqkfz4Nu17/CC4LhL6UGWpG/DWR1Mmw/MZ1k/2ws e4M/JzYHziC5EC1AUG6PSOa4kbb29RpIWlG7nHQh4+BhtEWVUcANptzsmb4q1ev0l58gVFSnocq M9+pfL/81hYO5zVUGd3QjrZNIWdu4/WEe9j0+PrRZ4GAwBm9RbiyOCOQt0= X-Received: by 2002:a05:620a:1a0c:b0:891:19be:32b2 with SMTP id af79cd13be357-8a726a99415mr238512385a.26.1761639770947; Tue, 28 Oct 2025 01:22:50 -0700 (PDT) X-Google-Smtp-Source: AGHT+IG4xH9rJQjTnCAzPDPRd9b3D85mSKxSCLni+r+nVod93THJZbwTjT860z8Nk+CFIEYV6vyYIYZFb3HhIdDa81A= X-Received: by 2002:a05:620a:1a0c:b0:891:19be:32b2 with SMTP id af79cd13be357-8a726a99415mr238510485a.26.1761639770577; Tue, 28 Oct 2025 01:22:50 -0700 (PDT) MIME-Version: 1.0 From: Piotr Kliczewski Date: Tue, 28 Oct 2025 09:22:36 +0100 X-Gm-Features: AWmQ_bkqbGJ69kS0GtriMLhAnDX1LsgOQ6upHrydPPPOt46rR9uVPRMLBY7EG7E Message-ID: Subject: [FOSDEM] Call for participation: Virtualization and Cloud infrastructure Room at FOSDEM 2026 To: xen-users@lists.xenproject.org Cc: Tal Nisan X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: WOuzZ_8wdn93ihFDFNAf4NBS9l9OEva6obTzsckECCE_1761639771 X-Mimecast-Originator: redhat.com Content-Type: multipart/alternative; boundary="000000000000bf720b064233b847" --000000000000bf720b064233b847 Content-Type: text/plain; charset="UTF-8" We are excited to announce that the call for proposals is now open for the Virtualization and Cloud infrastructure devroom at the upcoming FOSDEM 2026, to be hosted on 31st of January. This devroom is a collaborative effort, and is organized by dedicated folks from projects such as OpenStack, Xen Project, KubeVirt, QEMU, KVM, and Foreman. We invite everyone involved in these fields to submit your proposals by 5th December 2025. About the Devroom The Virtualization & IaaS devroom will feature session topics such as open source hypervisors or virtual machine managers such as Xen Project, KVM, bhyve and VirtualBox as well as Infrastructure-as-a-Service projects such as KubeVirt, Apache CloudStack, OpenStack, QEMU and OpenNebula. This devroom will host presentations that focus on topics of shared interest, such as KVM, libvirt, shared storage, virtualized networking, cloud security, clustering and high availability, interfacing with multiple hypervisors, hyperconverged deployments and scaling across hundreds or thousands of servers. Presentations in this devroom will be aimed at developers working on these platforms who are looking to collaborate and improve shared infrastructure or solve common problems. We seek topics that encourage dialog between projects and continued work post-FOSDEM. Important Dates Submission deadline: 5th December 2025 Acceptance notifications: 10th December 2025 Final schedule announcement: 15th of December 2025 Devroom: 31st of January Submit Your Proposal During submission [1] please make sure to select Virtualization and Cloud infrastructure from the Track list. Please provide a meaningful abstract and description of your proposed session. Submission Guidelines We expect more proposals than we can possibly accept, so it is vitally important that you submit your proposal on or before the deadline. Late submissions are unlikely to be considered. All presentation slots are 30 minutes, with 20 minutes planned for presentations, and 10 minutes for Q&A. All presentations will be recorded and made available under Creative Commons licenses. In the Submission notes field, please indicate that you agree that your presentation will be licensed under the CC-By-SA-4.0 or CC-By-4.0 license and that you agree to have your presentation recorded. For example: "If my presentation is accepted for FOSDEM, I hereby agree to license all recordings, slides, and other associated materials under the Creative Commons Attribution Share-Alike 4.0 International License. Sincerely, Piotr Kliczewski and Tal Nisan In the Submission notes field, please also confirm that if your talk is accepted, you will be able to attend FOSDEM and deliver your presentation. We will not consider proposals from prospective speakers who are unsure whether they will be able to secure funds for travel and lodging to attend FOSDEM. (Sadly, we are not able to offer travel funding for prospective speakers.) Code of Conduct Following the release of the updated code of conduct for FOSDEM[2], we'd like to remind all speakers and attendees that all of the presentations and discussions in our devroom are held under the guidelines set in the CoC and we expect attendees, speakers, and volunteers to follow the CoC at all times. If you submit a proposal and it is accepted, you will be required to confirm that you accept the FOSDEM CoC. If you have any questions about the CoC or wish to have one of the devroom organizers review your presentation slides or any other content for CoC compliance, please email us and we will do our best to assist you. Questions? If you have any questions about this devroom, please send your questions to our devroom mailing list. You can also subscribe to the list to receive updates about important dates, session announcements, and to connect with other attendees. See you all at FOSDEM! [1] https://fosdem.org/submit [2] https://fosdem.org/2026/practical/conduct/ --000000000000bf720b064233b847 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

We are excited to announce that the call for proposals is now = open for the Virtualization and Cloud infrastructure devroom at the upcomin= g FOSDEM 2026, to be hosted on 31st of January.


This devro= om is a collaborative effort, and is organized by dedicated folks from proj= ects such as OpenStack, Xen Project, KubeVirt, QEMU, KVM, and Foreman. We i= nvite everyone involved in these fields to submit your proposals by 5th Dec= ember 2025.


About the Devroom


The Virtualiz= ation & IaaS devroom will feature session topics such as open source hy= pervisors or virtual machine managers such as Xen Project, KVM, bhyve and V= irtualBox as well as Infrastructure-as-a-Service projects such as KubeVirt,= Apache CloudStack, OpenStack, QEMU and OpenNebula.


This de= vroom will host presentations that focus on topics of shared interest, such= as KVM, libvirt, shared storage, virtualized networking, cloud security, c= lustering and high availability, interfacing with multiple hypervisors, hyp= erconverged deployments and scaling across hundreds or thousands of servers= .


Presentations in this devroom will be aimed at developers= working on these platforms who are looking to collaborate and improve shar= ed infrastructure or solve common problems. We seek topics that encourage d= ialog between projects and continued work post-FOSDEM.


Impo= rtant Dates


Submission deadline: 5th December 2025

Acceptance notifications: 10th December 2025

Final schedule= announcement: 15th of December 2025

Devroom: 31st of January


Submit Your Proposal


During submission [1] p= lease make sure to select Virtualization and Cloud infrastructure from the = Track list. Please provide a meaningful abstract and description of your pr= oposed session.


Submission Guidelines


We e= xpect more proposals than we can possibly accept, so it is vitally importan= t that you submit your proposal on or before the deadline. Late submissions= are unlikely to be considered.


All presentation slots are = 30 minutes, with 20 minutes planned for presentations, and 10 minutes for Q= &A.


All presentations will be recorded and made availab= le under Creative Commons licenses. In the Submission notes field, please i= ndicate that you agree that your presentation will be licensed under the CC= -By-SA-4.0 or CC-By-4.0 license and that you agree to have your presentatio= n recorded. For example:


"If my presentation is accept= ed for FOSDEM, I hereby agree to license all recordings, slides, and other = associated materials under the Creative Commons Attribution Share-Alike 4.0= International License.


Sincerely,=C2=A0

Piot= r Kliczewski and Tal Nisan


In the Submission notes field, p= lease also confirm that if your talk is accepted, you will be able to atten= d FOSDEM and deliver your presentation. We will not consider proposals from= prospective speakers who are unsure whether they will be able to secure fu= nds for travel and lodging to attend FOSDEM. (Sadly, we are not able to off= er travel funding for prospective speakers.)


Code of Conduc= t


Following the release of the updated code of conduct for = FOSDEM[2], we'd like to remind all speakers and attendees that all of t= he presentations and discussions in our devroom are held under the guidelin= es set in the CoC and we expect attendees, speakers, and volunteers to foll= ow the CoC at all times.


If you submit a proposal and it is= accepted, you will be required to confirm that you accept the FOSDEM CoC. = If you have any questions about the CoC or wish to have one of the devroom = organizers review your presentation slides or any other content for CoC com= pliance, please email us and we will do our best to assist you.

<= br>

Questions?


If you have any questions about this devroo= m, please send your questions to

our devroom mailing list. You = can also subscribe to the list to receive

updates about importa= nt dates, session announcements, and to connect with

other atte= ndees.


See you all at FOSDEM!


[1] https://fosdem.org/submit

[2] https://fosdem.org/2026/practical/condu= ct/=C2=A0


--000000000000bf720b064233b847--