Public bug reported: On some Bluefield platforms, the reboot flow leaves PKA traces in the kernel. This is due to PKA being corrupt on boot-up due to multiple applications using PKA at the same time. Handling multiple applications requires a new feature in the PKA driver.
SRU Justification: [Impact] * Kernel traces are seen at startup on Bluefield platforms (by Mellanox/Nvidia) due to applications using public key accelerator (PKA) hardware simultaneously. [Fix] * Allow synchronized usage of PKA hardware resources "pka: Handle ring open scenario when rings are busy" [Test Case] * Trigger multiple processes/applications to use PKA HW simultaneously, this can be done via OpenSSL. Run the OpenSSL speed test with multiple processes using 'pka' engine. Ex: openssl speed -multi 2 -engine pka rsa512 * Note: On Bluefield platforms the OpenSSL dynamic engine (-engine pka, in the above example) is loaded by default. [Regression Potential] * The regression can be considered as low, since the rings are shared in a synchronized manner there is no corruption due to different applications running concurrently. * As there are limited resources (PKA rings) available, if exhausted, can cause applications fail to execute (due to resource unavailability). This is an expected behaviour. [Other] * Note: Unit of PKA HW available for application usage is called a ring. ** Affects: linux-bluefield (Ubuntu) Importance: Undecided Status: New ** Description changed: On some Bluefield platforms, the reboot flow leaves PKA traces in the kernel. This is due to PKA being corrupt on boot-up due to multiple applications using PKA at the same time. Handling multiple applications requires a new feature in the PKA driver. SRU Justification: [Impact] * Kernel traces are seen at startup on Bluefield platforms (by Mellanox/Nvidia) due to applications using public key accelerator (PKA) hardware simultaneously. [Fix] * Allow synchronized usage of PKA hardware resources "pka: Handle ring open scenario when rings are busy" [Test Case] * Trigger multiple processes/applications to use PKA HW simultaneously, this can be done via OpenSSL. Run the OpenSSL speed test with multiple processes using 'pka' engine. Ex: openssl speed -multi 2 -engine pka rsa512 * Note: On Bluefield platforms the OpenSSL dynamic engine (-engine pka, in the above example) is loaded by default. [Regression Potential] - * The regression can be considered as low, since the rings are shared in a synchronized manner - there is no corruption due to different applications running concurrently. - * As there are limited resources (PKA rings) available, if exhausted, can cause applications - fail to execute (due to resource unavailability). This is an expected behaviour. + * The regression can be considered as low, since the rings are shared in a synchronized manner there is no corruption due to different applications running concurrently. + * As there are limited resources (PKA rings) available, if exhausted, can cause applications fail to execute (due to resource unavailability). This is an expected behaviour. [Other] * Note: Unit of PKA HW available for application usage is called a ring. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1916289 Title: PKA reboot flow kernel traces To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-bluefield/+bug/1916289/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs