Understood. Thanks for your help and your fast reply!


On 16/08/18 09:24, Michal Skrivanek wrote:
>
>> On 16 Aug 2018, at 09:13, Eduardo Mayoral <emayo...@arsys.es> wrote:
>>
>>
>> Hi,
>>
>>     For mitigation of the recently announced L1TF vulnerability, is it
>> sufficient to update the compute nodes to the updated kernel?
> for all mitigations? no, you’d need to disable HT
>
>> Are any
>> other updates to KVM / vdsm / ovirt-engine required?
> no, nothing that would be pending. If you’re running latest updates you 
> should be fine. 
> Vendor’s microcode would help with performance degradation, but it’s not 
> strictly needed IIUC. 
>
>>     Also, for the concurrent variant. Should we disable hyperthreading
>> altogether? Is there any remediation (even if expensive from a
>> performance view), that can be enabled?
> for complete mitigation HT need to be disabled. Either in BIOS or kernel 
> cmdline or even dynamically after system booted in sysfs.
> It’s not always practical, so you should probably review the details and also 
> compare the performance degradation for your workloads. It really varies a 
> lot.
>
> Red Hat published a security article which applies to platforms oVirt runs on 
> (obviously:)
> https://access.redhat.com/security/vulnerabilities/L1TF
>
> Thanks
> michal
>
>>     Thanks for your help!
>>
>> --
>>
>> Eduardo Mayoral.
>>
>> _______________________________________________
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/ALGCZCKNS4YJI65FIGXFELGVSR67JXUM/
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/USWHLKKMISTLZUEMKXZ5LO2D5VIDFS5B/

Reply via email to