Re: FreeBSD PVHVM call for testing

2013-05-30 Thread Jeroen van der Ham
Hi,

On 30 May 2013, at 16:56, Outback Dingo  wrote:
> first is this a public vm ? and if so who is??
> May 29 23:42:30 image01 sshd[31227]: error: Received disconnect from
> 150.165.15.175: 11: Bye Bye [preauth]
> 
> because it is after this potential ssh login attempt, so is this you, has
> there been a breach ? only thing i noticed, but it might be nothing.

This VM is on a public IP indeed, and SSH connectivity is enabled. As with any 
publicly accessible host this then becomes the target of ssh scans.

I included the message just to show that between it and the reboot nothing had 
been logged.

AFAICT there has not been a breach, and I have not seen any indications at all 
that there may be one.

Jeroen.

___
freebsd-xen@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-xen
To unsubscribe, send any mail to "freebsd-xen-unsubscr...@freebsd.org"


Re: FreeBSD PVHVM call for testing

2013-05-30 Thread Outback Dingo
On Thu, May 30, 2013 at 5:15 AM, Jeroen van der Ham  wrote:

> Hi,
>
> On 30 May 2013, at 11:04, Roger Pau Monné  wrote:
> > So it looks like the system rebooted (but it was not a crash or a
> > sporadic reboot? the kernel seems to be aware of the reboot request). It
> > would be interesting if you could provide the output of the serial
> > console when this happens, that might be helpful. Did you enable
> > xenconsoled logging?
>
> Unfortunately I did not.
>
> > Also, could you provide more info about your system, Xen version, what
> > workload was the DomU running, Dom0 kernel version?
>
> There was no one logged in at the time of the reboot according to the last
> log.
> I did do some sysbench tests during the day, but that was way before it
> rebooted. The only thing that could be running during that time was daily
> periodic.
>
> $ sudo xm info
> host   : soleus01.soleus.nu
> release: 2.6.32-5-xen-amd64
> version: #1 SMP Mon Oct 3 07:53:54 UTC 2011
> machine: x86_64
> nr_cpus: 8
> nr_nodes   : 2
> cores_per_socket   : 4
> threads_per_core   : 1
> cpu_mhz: 2200
> hw_caps:
> 178bf3ff:efd3fbff::1310:00802001::37ff:
> virt_caps  : hvm
> total_memory   : 65534
> free_memory: 6866
> node_to_cpu: node0:0-3
>  node1:4-7
> node_to_memory : node0:3128
>  node1:3737
> node_to_dma32_mem  : node0:3128
>  node1:0
> max_node_id: 1
> xen_major  : 4
> xen_minor  : 0
> xen_extra  : .1
> xen_caps   : xen-3.0-x86_64 xen-3.0-x86_32p hvm-3.0-x86_32
> hvm-3.0-x86_32p hvm-3.0-x86_64
> xen_scheduler  : credit
> xen_pagesize   : 4096
> platform_params: virt_start=0x8000
> xen_changeset  : unavailable
> xen_commandline: placeholder dom0_mem=1852M
> cc_compiler: gcc version 4.4.5 (Debian 4.4.5-10)
> cc_compile_by  : waldi
> cc_compile_domain  : debian.org
> cc_compile_date: Wed Jan 12 14:04:06 UTC 2011
> xend_config_format : 4
>
> $ uname -a
> Linux soleus01.soleus.nu 2.6.32-5-xen-amd64 #1 SMP Mon Oct 3 07:53:54 UTC
> 2011 x86_64 GNU/Linux
>
> Jeroen.
>
>
first is this a public vm ? and if so who is??
May 29 23:42:30 image01 sshd[31227]: error: Received disconnect from
150.165.15.175: 11: Bye Bye [preauth]

because it is after this potential ssh login attempt, so is this you, has
there been a breach ? only thing i noticed, but it might be nothing.




> ___
> freebsd-xen@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-xen
> To unsubscribe, send any mail to "freebsd-xen-unsubscr...@freebsd.org"
>
___
freebsd-xen@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-xen
To unsubscribe, send any mail to "freebsd-xen-unsubscr...@freebsd.org"


Re: FreeBSD PVHVM call for testing

2013-05-30 Thread Jeroen van der Ham
Hi,

On 30 May 2013, at 11:04, Roger Pau Monné  wrote:
> So it looks like the system rebooted (but it was not a crash or a
> sporadic reboot? the kernel seems to be aware of the reboot request). It
> would be interesting if you could provide the output of the serial
> console when this happens, that might be helpful. Did you enable
> xenconsoled logging?

Unfortunately I did not.

> Also, could you provide more info about your system, Xen version, what
> workload was the DomU running, Dom0 kernel version?

There was no one logged in at the time of the reboot according to the last log.
I did do some sysbench tests during the day, but that was way before it 
rebooted. The only thing that could be running during that time was daily 
periodic.

$ sudo xm info
host   : soleus01.soleus.nu
release: 2.6.32-5-xen-amd64
version: #1 SMP Mon Oct 3 07:53:54 UTC 2011
machine: x86_64
nr_cpus: 8
nr_nodes   : 2
cores_per_socket   : 4
threads_per_core   : 1
cpu_mhz: 2200
hw_caps: 
178bf3ff:efd3fbff::1310:00802001::37ff:
virt_caps  : hvm
total_memory   : 65534
free_memory: 6866
node_to_cpu: node0:0-3
 node1:4-7
node_to_memory : node0:3128
 node1:3737
node_to_dma32_mem  : node0:3128
 node1:0
max_node_id: 1
xen_major  : 4
xen_minor  : 0
xen_extra  : .1
xen_caps   : xen-3.0-x86_64 xen-3.0-x86_32p hvm-3.0-x86_32 
hvm-3.0-x86_32p hvm-3.0-x86_64
xen_scheduler  : credit
xen_pagesize   : 4096
platform_params: virt_start=0x8000
xen_changeset  : unavailable
xen_commandline: placeholder dom0_mem=1852M
cc_compiler: gcc version 4.4.5 (Debian 4.4.5-10)
cc_compile_by  : waldi
cc_compile_domain  : debian.org
cc_compile_date: Wed Jan 12 14:04:06 UTC 2011
xend_config_format : 4

$ uname -a
Linux soleus01.soleus.nu 2.6.32-5-xen-amd64 #1 SMP Mon Oct 3 07:53:54 UTC 2011 
x86_64 GNU/Linux

Jeroen.

___
freebsd-xen@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-xen
To unsubscribe, send any mail to "freebsd-xen-unsubscr...@freebsd.org"


Re: FreeBSD PVHVM call for testing

2013-05-30 Thread Roger Pau Monné
On 30/05/13 10:50, Jeroen van der Ham wrote:
> Hi,
> 
> On 23 May 2013, at 19:41, Roger Pau Monné  wrote:
> 
>> Hello,
>>
>> I've pushed a new branch, pvhvm_v10 that contains a PV IPI
>> implementation for both amd64 and i386. I've also updated the wiki to
>> point to the pvhvm_v10 branch:
> 
> I've been running a VM with this kernel for about a week now. It ran fine, 
> until about 3:30 in the morning. The only thing I can see is the following 
> cryptic messages in /var/log/messages, followed by a reboot of the system.
> 
> May 29 23:42:30 image01 sshd[31227]: error: Received disconnect from 
> 150.165.15.175: 11: Bye Bye [preauth]
> May 30 03:30:57 image01 kernel: .
> May 30 03:30:57 image01 ntpd[4436]: ntpd exiting on signal 15
> May 30 03:30:57 image01 kernel: .
> May 30 03:30:58 image01 kernel: .
> May 30 03:31:00 image01 syslogd: exiting on signal 15
> May 30 03:32:52 image01 syslogd: kernel boot file is /boot/kernel/kernel
> May 30 03:32:52 image01 kernel: Copyright (c) 1992-2013 The FreeBSD Project.
> May 30 03:32:52 image01 kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 
> 1989, 1991, 1992, 1993, 1994
> May 30 03:32:52 image01 kernel: The Regents of the University of California. 
> All rights reserved.
> May 30 03:32:52 image01 kernel: FreeBSD is a registered trademark of The 
> FreeBSD Foundation.
> 
> I'm happy to help to gather more information, just tell me what you need.

Hello Jeroen,

So it looks like the system rebooted (but it was not a crash or a
sporadic reboot? the kernel seems to be aware of the reboot request). It
would be interesting if you could provide the output of the serial
console when this happens, that might be helpful. Did you enable
xenconsoled logging?

Also, could you provide more info about your system, Xen version, what
workload was the DomU running, Dom0 kernel version?

___
freebsd-xen@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-xen
To unsubscribe, send any mail to "freebsd-xen-unsubscr...@freebsd.org"


Re: FreeBSD PVHVM call for testing

2013-05-30 Thread Jeroen van der Ham
Hi,

On 23 May 2013, at 19:41, Roger Pau Monné  wrote:

> Hello,
> 
> I've pushed a new branch, pvhvm_v10 that contains a PV IPI
> implementation for both amd64 and i386. I've also updated the wiki to
> point to the pvhvm_v10 branch:

I've been running a VM with this kernel for about a week now. It ran fine, 
until about 3:30 in the morning. The only thing I can see is the following 
cryptic messages in /var/log/messages, followed by a reboot of the system.

May 29 23:42:30 image01 sshd[31227]: error: Received disconnect from 
150.165.15.175: 11: Bye Bye [preauth]
May 30 03:30:57 image01 kernel: .
May 30 03:30:57 image01 ntpd[4436]: ntpd exiting on signal 15
May 30 03:30:57 image01 kernel: .
May 30 03:30:58 image01 kernel: .
May 30 03:31:00 image01 syslogd: exiting on signal 15
May 30 03:32:52 image01 syslogd: kernel boot file is /boot/kernel/kernel
May 30 03:32:52 image01 kernel: Copyright (c) 1992-2013 The FreeBSD Project.
May 30 03:32:52 image01 kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 
1989, 1991, 1992, 1993, 1994
May 30 03:32:52 image01 kernel: The Regents of the University of California. 
All rights reserved.
May 30 03:32:52 image01 kernel: FreeBSD is a registered trademark of The 
FreeBSD Foundation.

I'm happy to help to gather more information, just tell me what you need.

Jeroen.


___
freebsd-xen@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-xen
To unsubscribe, send any mail to "freebsd-xen-unsubscr...@freebsd.org"