Public bug reported:
On some Bluefield platforms, the reboot flow leaves PKA traces in the kernel.
This is due to PKA being corrupt on boot-up due to multiple applications using
PKA at the same time.
Handling multiple applications requires a new feature in the PKA driver.
SRU Justification:
[Impact]
* Kernel traces are seen at startup on Bluefield platforms (by Mellanox/Nvidia)
due to applications using public key accelerator (PKA) hardware simultaneously.
[Fix]
* Allow synchronized usage of PKA hardware resources "pka: Handle ring open
scenario when rings are busy"
[Test Case]
* Trigger multiple processes/applications to use PKA HW simultaneously, this
can be done via OpenSSL. Run the OpenSSL speed test with multiple processes
using 'pka' engine. Ex: openssl speed -multi 2 -engine pka rsa512
* Note: On Bluefield platforms the OpenSSL dynamic engine (-engine pka, in the
above example) is loaded by default.
[Regression Potential]
* The regression can be considered as low, since the rings are shared in a
synchronized manner there is no corruption due to different applications
running concurrently.
* As there are limited resources (PKA rings) available, if exhausted, can cause
applications fail to execute (due to resource unavailability). This is an
expected behaviour.
[Other]
* Note: Unit of PKA HW available for application usage is called a ring.
** Affects: linux-bluefield (Ubuntu)
Importance: Undecided
Status: New
** Description changed:
On some Bluefield platforms, the reboot flow leaves PKA traces in the kernel.
This is due to PKA being corrupt on boot-up due to multiple applications
using PKA at the same time.
Handling multiple applications requires a new feature in the PKA driver.
SRU Justification:
[Impact]
* Kernel traces are seen at startup on Bluefield platforms (by
Mellanox/Nvidia) due to applications using public key accelerator (PKA)
hardware simultaneously.
[Fix]
* Allow synchronized usage of PKA hardware resources "pka: Handle ring open
scenario when rings are busy"
[Test Case]
* Trigger multiple processes/applications to use PKA HW simultaneously, this
can be done via OpenSSL. Run the OpenSSL speed test with multiple processes
using 'pka' engine. Ex: openssl speed -multi 2 -engine pka rsa512
* Note: On Bluefield platforms the OpenSSL dynamic engine (-engine pka, in
the above example) is loaded by default.
[Regression Potential]
- * The regression can be considered as low, since the rings are shared in a
synchronized manner
- there is no corruption due to different applications running concurrently.
- * As there are limited resources (PKA rings) available, if exhausted, can
cause applications
- fail to execute (due to resource unavailability). This is an expected
behaviour.
+ * The regression can be considered as low, since the rings are shared in a
synchronized manner there is no corruption due to different applications
running concurrently.
+ * As there are limited resources (PKA rings) available, if exhausted, can
cause applications fail to execute (due to resource unavailability). This is an
expected behaviour.
[Other]
* Note: Unit of PKA HW available for application usage is called a ring.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1916289
Title:
PKA reboot flow kernel traces
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-bluefield/+bug/1916289/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
