From 0fe5cef92c1b28fa78b726d84453cca133504798 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Thu, 25 Mar 2021 21:07:30 +0800 Subject: [PATCH 01/28] =?UTF-8?q?update=20docs/zh/docs/NVWA/=E4=BD=BF?= =?UTF-8?q?=E7=94=A8=E6=96=B9=E6=B3=95.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" | 1 + 1 file changed, 1 insertion(+) diff --git "a/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" "b/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" index 69960d64e..4eb7a0dd3 100644 --- "a/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" +++ "b/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" @@ -1,3 +1,4 @@ +# NVWA使用方法 - [NVWA命令用法](#nvwa命令用法) -- Gitee From c32bc9482da00ff94ba1f015457a615655358fb1 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Thu, 25 Mar 2021 21:35:39 +0800 Subject: [PATCH 02/28] =?UTF-8?q?update=20docs/zh/docs/Releasenotes/?= =?UTF-8?q?=E6=B3=95=E5=BE=8B=E5=A3=B0=E6=98=8E.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../\346\263\225\345\276\213\345\243\260\346\230\216.md" | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git "a/docs/zh/docs/Releasenotes/\346\263\225\345\276\213\345\243\260\346\230\216.md" "b/docs/zh/docs/Releasenotes/\346\263\225\345\276\213\345\243\260\346\230\216.md" index 9769a3f5c..b979850e6 100644 --- "a/docs/zh/docs/Releasenotes/\346\263\225\345\276\213\345\243\260\346\230\216.md" +++ "b/docs/zh/docs/Releasenotes/\346\263\225\345\276\213\345\243\260\346\230\216.md" @@ -1,6 +1,6 @@ # 法律声明 -**版权所有 © 2020 openEuler社区。** +**版权所有 © 2021 openEuler社区。** 您对“本文档”的复制、使用、修改及分发受知识共享\(Creative Commons\)署名—相同方式共享4.0国际公共许可协议\(以下简称“CC BY-SA 4.0”\)的约束。为了方便用户理解，您可以通过访问[https://creativecommons.org/licenses/by-sa/4.0/](https://creativecommons.org/licenses/by-sa/4.0/) 了解CC BY-SA 4.0的概要 \(但不是替代\)。CC BY-SA 4.0的完整协议内容您可以访问如下网址获取：[https://creativecommons.org/licenses/by-sa/4.0/legalcode](https://creativecommons.org/licenses/by-sa/4.0/legalcode)。 -- Gitee From 5eb15e038b46e28bb247029b68afdf3936ec11bc Mon Sep 17 00:00:00 2001 From: qiaominna Date: Thu, 25 Mar 2021 21:36:03 +0800 Subject: [PATCH 03/28] update docs/en/docs/Releasenotes/terms-of-use.md. --- docs/en/docs/Releasenotes/terms-of-use.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/en/docs/Releasenotes/terms-of-use.md b/docs/en/docs/Releasenotes/terms-of-use.md index 1a7fbcac3..8c3262c51 100644 --- a/docs/en/docs/Releasenotes/terms-of-use.md +++ b/docs/en/docs/Releasenotes/terms-of-use.md @@ -1,6 +1,6 @@ # Terms of Use -**Copyright © 2020 openEuler Community** +**Copyright © 2021 openEuler Community** Your replication, use, modification, and distribution of this document are governed by the Creative Commons License Attribution-ShareAlike 4.0 International Public License \(CC BY-SA 4.0\). You can visit [https://creativecommons.org/licenses/by-sa/4.0/](https://creativecommons.org/licenses/by-sa/4.0/) to view a human-readable summary of \(and not a substitute for\) CC BY-SA 4.0. For the complete CC BY-SA 4.0, visit [https://creativecommons.org/licenses/by-sa/4.0/legalcode](https://creativecommons.org/licenses/by-sa/4.0/legalcode). -- Gitee From b6bde2b53160943dba3ac5a8c997d5a6cef3e8d6 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Thu, 25 Mar 2021 22:43:37 +0800 Subject: [PATCH 04/28] =?UTF-8?q?update=20docs/zh/docs/NVWA/=E5=AE=89?= =?UTF-8?q?=E8=A3=85=E4=B8=8E=E9=83=A8=E7=BD=B2.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- ...\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" | 2 ++ 1 file changed, 2 insertions(+) diff --git "a/docs/zh/docs/NVWA/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" "b/docs/zh/docs/NVWA/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" index 35985b7de..55301b601 100644 --- "a/docs/zh/docs/NVWA/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" +++ "b/docs/zh/docs/NVWA/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" @@ -1,5 +1,7 @@ # 安装与部署 + 本章介绍如何安装和部署NVWA。 + - [安装与部署](#安装与部署) - [软硬件要求](#软硬件要求) -- Gitee From b66a082682859f23d4cd49bb94400f6e214dd997 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Sat, 27 Mar 2021 16:38:19 +0800 Subject: [PATCH 05/28] add --- ...56\345\244\215\351\227\256\351\242\230.md" | 656 ++++++------------ 1 file changed, 226 insertions(+), 430 deletions(-) diff --git "a/docs/zh/docs/Releasenotes/\345\267\262\344\277\256\345\244\215\351\227\256\351\242\230.md" "b/docs/zh/docs/Releasenotes/\345\267\262\344\277\256\345\244\215\351\227\256\351\242\230.md" index 037c4fc21..8061fdf10 100644 --- "a/docs/zh/docs/Releasenotes/\345\267\262\344\277\256\345\244\215\351\227\256\351\242\230.md" +++ "b/docs/zh/docs/Releasenotes/\345\267\262\344\277\256\345\244\215\351\227\256\351\242\230.md" @@ -4,435 +4,231 @@ 完整的内核提交记录请参见[提交记录](https://gitee.com/openeuler/kernel/commits/openEuler-21.03。 -**应用和基础服务** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-

ISSUE

- 		-

问题描述

-
-

I1TPY4

- 		-

x86/arm - mariadb-server安装失败

-
-

I1TOV5

- 		-

lm_sensors默认不能启动，systemd为degraded状态

-
-

I1TOCE

- 		-

x86/arm 物理机kdump - 启动失败

-
-

I1TZH1

- 		-

x86 - 添加规则，允许目的端口80，来自某机器源ip 的数据包，规则不生效

-
-

I1T4O3

- 		-

x86 - pxe安装，ks文件中%packages 安装minimal ， @core， @base ，安装成功后，启动卡住

-
-

I1T8JJ

- 		-

arm - 安装freeradius报错

-
+已修复问题请参见[表1](#table249714911433)。 -**编程语言和编译器** - - - - - - - - - - - - - - - -
-

ISSUE

- 		-

问题描述

-
-

I1RUM6

- 		-

跟踪社区解决‘gcc - -static-pie‘编译生成文件类型误判问题

-
+**表 1** 修复问题列表 - -**虚拟化和容器** - - - - - - - - - - - - - - - - - - - - - -
-

ISSUE

- 		-

问题描述

-
-

I1TB7N

- 		-

PMU nmi watchdog - 不支持cpu热插

-
-

I1TXAU

- 		-

虚拟机cpu - mode配置host-model，虚拟机启动失败

-
-

I1U8BP

- 		-

以openeuler做镜像设置可信启动时，虚拟机内部无法识别tpm设备

-
- -**内核** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-

ISSUE

- 		-

问题描述

-
-

I17YPQ

- 		-

3408raid卡环境上，安装时识别不到raid卡连接的磁盘

-
-

I1JZHT

- 		-

netdevsim反复加载卸载，出现系统复位 -

-
-

I1RUC8

- 		-

vmalloc在x86版本上性能损耗较大 -

-
-

I1R86G

- 		-

openEuler - 测试open高斯数据库报错pread 返回-EIO

-
-

I1SISM

- 		-

x86平台 - openEuler无法挂载指定size=8192的xfs格式磁盘

-
- -**安全** - - - - - - - - - - - - - - - -
-

ISSUE

- 		-

问题描述

-
-

I1TQ15

- 		-

将一个不存在的IP集作为源添加到drop区域，执行firewall-cmd --reload报错

-
- - -**硬件和芯片** - - - - - - - - - - - - - - - - - - -
-

ISSUE

- 		-

问题描述

-
-

I1SY0K

- 		-

Raspberrypi wifi - unavailable，无法连接 wifi

-
-

I1R4G1

- 		-

Raspberrypi - BT重复多次连接不上

-
- -**文件系统** - - - - - - - - - - - - - - - - - - - - - -
-

ISSUE

- 		-

问题描述

-
-

I1E0KN

- 		-

在xfs文件系统中 并发创建删除文件夹 - 使用find 查询导致coredump

-
-

I1MA88

- 		-

libguestfs中使用了gnulib的代码，其中存在漏洞，会导致coredump

-
-

I1T3GC

- 		-

NFS客户端查看挂载的盘符时报无法分配内存

-
- -**网络** - - - - - - - - - - - - - - - - - - - - - -
-

ISSUE

- 		-

问题描述

-
-

I1TO3R

- 		-

安装时调用 - network-manager-appletda,手动配置ipv4出错

-
-

I1TYDG

- 		-

dbus服务异常导致NetworkManager服务不自愈

-
-

I1AD7N

- 		-

network-scripts中因为grep - -L返回值变更导致重启network时ip丢失

-
- -**系统工具** - - - - - - - - - - - - - - - - - - -
-

ISSUE

- 		-

问题描述

-
-

I1U7RL

- 		-

安装system-config-printer报错

-
-

I1T8H4

- 		-

x86/arm - 默认安装后执行systemctl -all --failed发现tuned服务启动失败

-
+| ISSUE |问题描述 | +|:--- |:---- | +| [I385CW](https://gitee.com/open_euler/dashboard?issue_id=I385CW) | 【21.03】安装mod_fcgid报错，存在warning和fail | +| [I38NM0](https://gitee.com/open_euler/dashboard?issue_id=I38NM0) | 同一个enclave重复销毁2次，出现段错误| +| [I38NO8](https://gitee.com/open_euler/dashboard?issue_id=I38NO8) | 同一个enclave重复创建2次，无具体报错信息| +| [I38PJ8](https://gitee.com/open_euler/dashboard?issue_id=I38PJ8) | infinite loop in htmlParseChunk found by fuzz | +| [I38QDA](https://gitee.com/open_euler/dashboard?issue_id=I38QDA) | stack overflow found by honggfuzz| +| [I38SNU](https://gitee.com/open_euler/dashboard?issue_id=I38SNU) | 【21.03】selinux规则导致系统服务启动失败 | +| [I38SON](https://gitee.com/open_euler/dashboard?issue_id=I38SON) |当依赖sdk的edl目录权限异常，codegen工具无法正常提示| +| [I38T6R](https://gitee.com/open_euler/dashboard?issue_id=I38T6R) | 未指定edl文件或将edl文件增加在--search-path 后面，提示信息不明确 | +| [I38WFT](https://gitee.com/open_euler/dashboard?issue_id=I38WFT) | 在openEuler 21.03每日构建版本中启动pacemaker服务失败，升级libqb软件包版本后解决。 | +| [I38XEC](https://gitee.com/open_euler/dashboard?issue_id=I38XEC) | [21.03]安装最小化完成后，rsyslog.service服务启动失败| +| [I38XHF](https://gitee.com/open_euler/dashboard?issue_id=I38XHF) |【21.03】虚拟机启动或重启irqbalance，偶现超时失败| +| [I38XPQ](https://gitee.com/open_euler/dashboard?issue_id=I38XPQ) | 【21.03】物理机/虚拟机启动或重启lm_sensors，必现失败| +| [I38XQ2](https://gitee.com/open_euler/dashboard?issue_id=I38XQ2) | 【21.03】【arm/x86】dnf --downloadonly参数并未下载软件包| +| [I38XRJ](https://gitee.com/open_euler/dashboard?issue_id=I38XRJ) | 【21.03】虚拟机启动或重启tcsd.service，必现失败| +| [I38XSC](https://gitee.com/open_euler/dashboard?issue_id=I38XSC) | 【21.03】虚拟机启动或重启rdisc，必现失败| +| [I38ZCF](https://gitee.com/open_euler/dashboard?issue_id=I38ZCF ) |[21.03]arm/x86 /etc/openEuler-latest下显示的kernelversion与实际kernel版本不一致| +| [I38ZTE](https://gitee.com/open_euler/dashboard?issue_id=I38ZTE) | 【21.03】安装hibernate-jpa-2.0-api-javadoc和hibernate-jpa-2.0-api-help存在文件冲突| +| [I391F2](https://gitee.com/open_euler/dashboard?issue_id=I391F2) | 【21.03】安装freeradius-posgresql和freeradius-mysql存在文件冲突| +| [I391PG](https://gitee.com/open_euler/dashboard?issue_id=I391PG) | [21.03]x86/arm版本netinst镜像以及x86标准镜像启动引导界面出现20.03字样| +| [I3927G](https://gitee.com/open_euler/dashboard?issue_id=I3927G) | 【21.03】【x86】安装nvml、nvml-help与pmdk的子包存在文件冲突| +| [I392CF](https://gitee.com/open_euler/dashboard?issue_id=I392CF) | 【21.03】安装firebird存在warning信息| +| [I392HC](https://gitee.com/open_euler/dashboard?issue_id=I392HC) | 【openEuler 21.03】【stratovirt】指定-daemonize参数启动虚拟机，同样的配置启动两次，第二次启动失败命令返回值仍为0| +| [I392JK](https://gitee.com/open_euler/dashboard?issue_id=I392JK) | 【21.03】【arm/x86】python3-wheel两个问题| +| [I392KT](https://gitee.com/open_euler/dashboard?issue_id=I392KT) | 【openEuler 21.03】【stratovirt】命令行启动虚拟机，-drive指定设备配置的iothread如果不存在，提示错误，但是返回值仍为0| +| [I393DJ](https://gitee.com/open_euler/dashboard?issue_id=I393DJ ) | 【21.03】arm 物理机安装最小化，软件选择勾选所有插件，安装成功进入系统后输入reboot，日志出现call trace| +| [I393JS](https://gitee.com/open_euler/dashboard?issue_id=I393JS ) | 【21.03】【x86】安装linux-sgx-driver有错误信息| +| [I393MX](https://gitee.com/open_euler/dashboard?issue_id=I393MX) | 【21.03】安装iavf存在错误信息| +| [I393NF](https://gitee.com/open_euler/dashboard?issue_id=I393NF) | 【21.03】安装sgx-dcap-pccs有失败信息| +| [I393PF](https://gitee.com/open_euler/dashboard?issue_id=I393PF) | 【21.03】用dnf info查看sgx-dcap-pccs的源码包为sgx-dcap-pccs，而不是linux-sgx| +| [I393U6](https://gitee.com/open_euler/dashboard?issue_id=I393U6 ) | 【21.03】卸载fprintd有异常信息| +| [I395AI](https://gitee.com/open_euler/dashboard?issue_id=I395AI) | 【openEuler 21.03】【stratovirt】config_guidebook.md中virtio-net设备热插提供的命令有误| +| [I396YM](https://gitee.com/open_euler/dashboard?issue_id=I396YM) | 【21.03】虚拟机关闭authz，查询服务状态为failed| +| [I3980L](https://gitee.com/open_euler/dashboard?issue_id=I3980L) | 35357端口已废弃，默认端口需要修改为5000| +| [I398PU](https://gitee.com/open_euler/dashboard?issue_id=I398PU) | 【21.03】x86/arm irqbalance 服务报错Can't open PID file /run/irqbalance.pid| +| [I399FI](https://gitee.com/open_euler/dashboard?issue_id=I399FI) | 缺少配置文件| +| [I399L1](https://gitee.com/open_euler/dashboard?issue_id=I399L1) | horizon的HTTPD配置文件不可用| +| [I399MW](https://gitee.com/open_euler/dashboard?issue_id=I399MW) | spec 和 package 重复| +| [I39A55](https://gitee.com/open_euler/dashboard?issue_id=I39A55) | 创建enclave，进行随机数生成或加解密或大量打印中销毁，出现段错误| +| [I39AEY](https://gitee.com/open_euler/dashboard?issue_id=I39AEY) | [21.03]arm/x86 执行powertop2tuned new_profile_name --force时报错| +| [I39AFM](https://gitee.com/open_euler/dashboard?issue_id=I39AFM) | 【21.03】arm物理机系统日志报错 could not open '/sys/module/ib_cm/holders'| +| [I39AH8](https://gitee.com/open_euler/dashboard?issue_id=I39AH8) | 【21.03】arm/x86环境systemd-xdg-autostart-generator 报错startup phases are not supported| +| [I39AJJ](https://gitee.com/open_euler/dashboard?issue_id=I39AJJ) | 【21.03】arm物理机出现内核报错hisi_sec2 0000:75:00.0: fail to alloc uacce| +| [I39ALG](https://gitee.com/open_euler/dashboard?issue_id=I39ALG) | 【21.03】arm（TaiShan 2280 V2）物理机出现内核报错 cma: cma_alloc: alloc failed| +| [I39AM8](https://gitee.com/open_euler/dashboard?issue_id=I39AM8) | 【21.03】arm（TaiShan 2280 V2）物理机出现内核报错swapper/0: page allocation failure| +| [I39ANR](https://gitee.com/open_euler/dashboard?issue_id=I39ANR) | 【21.03】base源安装openslp，因缺少二进制文件，导致slpd服务启动失败| +| [I39ET0](https://gitee.com/open_euler/dashboard?issue_id=I39ET0) | 【21.03】【arm/x86】oemaker构建标准iso时报错 | +| [I39EVJ](https://gitee.com/open_euler/dashboard?issue_id=I39EVJ ) |NULL pointer dereference in cil_fill_ipaddr| +| [I39GGV](https://gitee.com/open_euler/dashboard?issue_id=I39GGV) | 【21.03】虚拟机启动或重启php-fpm.service，必现告警| +| [I39H0X](https://gitee.com/open_euler/dashboard?issue_id=I39H0X) | 【21.03】源里面缺少maven-script导致一些包自编译失败| +| [I39HQB](https://gitee.com/open_euler/dashboard?issue_id=I39HQB) | 【21.03】kernel本地编译失败| +| [I39IB4](https://gitee.com/open_euler/dashboard?issue_id=I39IB4) | 【21.03】X86物理机，安装时，网卡与主机名设置界面的网卡名展示为rename| +| [I39IFV](https://gitee.com/open_euler/dashboard?issue_id=I39IFV) |【21.03】nginx的服务文件中出现redhat字样| +| [I39KLF](https://gitee.com/open_euler/dashboard?issue_id=I39KLF) | placement httpd配置不可用| +| [I39LM9](https://gitee.com/open_euler/dashboard?issue_id=I39LM9) | 【openEuler 21.03-RC1】【vmtop】终端页面被刷新问题| +| [I39LMD](https://gitee.com/open_euler/dashboard?issue_id=I39LMD) | 【openEuler 21.03-RC1】【vmtop】缺少参数解析和报错信息| +| [I39MI9](https://gitee.com/open_euler/dashboard?issue_id=I39MI9) | 【21.03】缺少maven-plugins-pom导致部分src包本地编译失败 | +| [I39N4Y](https://gitee.com/open_euler/dashboard?issue_id=I39N4Y) | 【21.03】缺少totem-pl-parser-devel、pkgconfig(totem-plparser)导致部分源码包本地编译失败| +| [I39NDA](https://gitee.com/open_euler/dashboard?issue_id=I39NDA) | 【21.03】缺少gimp-devel导致xsane本地编译失败| +| [I39NWJ](https://gitee.com/open_euler/dashboard?issue_id=I39NWJ) | 【21.03】本地编译gnulib失败| +| [I39OT1](https://gitee.com/open_euler/dashboard?issue_id=I39OT1 ) |PR需要同步到21.03分支 Fix iscsiadm segfault when exiting | +| [I39OZA](https://gitee.com/open_euler/dashboard?issue_id=I39OZA) | 【openEuler 21.03】【虚拟化】"热迁移支持zstd压缩算法"未编入21.03版本| +| [I39PTI](https://gitee.com/open_euler/dashboard?issue_id=I39PTI) | 安装secGear相关rpm包， 没带签名工具和codegen工具，无法正常编译 | +| [I39Q0V](https://gitee.com/open_euler/dashboard?issue_id=I39Q0V) | 【21.03】添加普通用户，启动用户对应的user@id.serice，出现Failed to migrate controller cgroups | +| [I39RTQ](https://gitee.com/open_euler/dashboard?issue_id=I39RTQ) | 对数据库初始化的回显进行优化| +| [I39S7T](https://gitee.com/open_euler/dashboard?issue_id=I39S7T) | installdep、builddep、bedepend 多次查询同一个包不存在的包时，未记录日志| +| [I39SCE](https://gitee.com/open_euler/dashboard?issue_id=I39SCE) | 【21.03】strongswan开启后查看日志“opening triplet file failed”| +| [I39SYV](https://gitee.com/open_euler/dashboard?issue_id=I39SYV) | 【21.03】缺少springframework-context-support导致gemini-blueprint本地编译失败 | +| [I39T5C](https://gitee.com/open_euler/dashboard?issue_id=I39T5C) | 【21.03】物理机启动过程报错rdma-init-kernel: Failed to add sysattr match| +| [I39T7I](https://gitee.com/open_euler/dashboard?issue_id=I39T7I ) | selfdepend 查询多包时，某个包不存在，未记录日志| +| [I39T9E](https://gitee.com/open_euler/dashboard?issue_id=I39T9E) | 安装secGear相关的rpm包， 没带edl文件，无法正常编译| +| [I39T9T](https://gitee.com/open_euler/dashboard?issue_id=I39T9T) | 【21.03】【arm/x86】systemctl启动rsyslog服务命令和rsyslogd同时执行，系统报错| +| [I39THU](https://gitee.com/open_euler/dashboard?issue_id=I39THU) | 【21.03】x86物理机启动过程报错rdma-ndd: set Node Description failed on i40iw0 | +| [I39TLM](https://gitee.com/open_euler/dashboard?issue_id=I39TLM) | 【21.03】【arm/x86】sos包下的命令都无法执行，报配置文件/etc/sos/sos.conf路径不存在 | +| [I39TTG](https://gitee.com/open_euler/dashboard?issue_id=I39TTG) |【21.03】【arm/x86】cppcheck包下的cppcheck-htmlreport 命令执行报错 | +| [I39TTT](https://gitee.com/open_euler/dashboard?issue_id=I39TTT) | 安装完secGear相关rpm包后，编译时提示sgx_sign:command not found，需再source下sgx，建议打包直接链接| +| [I39TZM](https://gitee.com/open_euler/dashboard?issue_id=I39TZM) | 【21.03】本地编译openEuler-latest-release失败| +| [I39U52](https://gitee.com/open_euler/dashboard?issue_id=I39U52) | 【21.03】使用parted分区，partuuid重复| +| [I39U8C](https://gitee.com/open_euler/dashboard?issue_id=I39U8C) | 【21.03】arm/x86物理机出现内核报错integrity: Unable to open file: /etc/keys/x509_ima.der (-2)| +| [I39W2T](https://gitee.com/open_euler/dashboard?issue_id=I39W2T ) | [21.03] xfs文件系统下无法修改文件的时间戳超过2038年| +| [I39W4K](https://gitee.com/open_euler/dashboard?issue_id=I39W4K ) | 安装secGear相关的rpm包，划分了secGear/host_inc目录，代码生成工具也需要适配，不然会报错找不到文件| +| [I39WJX](https://gitee.com/open_euler/dashboard?issue_id=I39WJX) | 普通用户初始化时没有捕获异常| +| [I39Y6E](https://gitee.com/open_euler/dashboard?issue_id=I39Y6E) | 安装完secGear相关rpm包后，cmake报错| +| [I3A028](https://gitee.com/open_euler/dashboard?issue_id=I3A028) | 【21.03】虚拟机关闭atuned，查询服务状态为failed| +| [I3A0UX](https://gitee.com/open_euler/dashboard?issue_id=I3A0UX) | 【21.03】augeas本地编译失败| +| [I3A0WO](https://gitee.com/open_euler/dashboard?issue_id=I3A0WO) | 【21.03】ceph本地编译失败| +| [I3A103](https://gitee.com/open_euler/dashboard?issue_id=I3A103) | 【21.03】本地编译coreutils失败| +| [I3A11P](https://gitee.com/open_euler/dashboard?issue_id=I3A11P) | 本地编译createrepo_c失败| +| [I3A16L](https://gitee.com/open_euler/dashboard?issue_id=I3A16L) | 【21.03】本地编译devhelp| +| [I3A1AI](https://gitee.com/open_euler/dashboard?issue_id=I3A1AI) | 签名加密后的文件建议还是按照600，其他类似| +| [I3A1TC](https://gitee.com/open_euler/dashboard?issue_id=I3A1TC) | [21.03]x86 执行长稳用例后卡死产生crash文件| +| [I3A2BR](https://gitee.com/open_euler/dashboard?issue_id=I3A2BR) | 【21.03】nginx start 查看日志出现”Failed to parse PID from file /run/nginx.pid“| +| [I3A3KM](https://gitee.com/open_euler/dashboard?issue_id=I3A3KM) | 【openEuler 21.03】【虚拟化】5.10.0-4.0.0内核未合入cpu_custom相关补丁| +| [I3A3X0](https://gitee.com/open_euler/dashboard?issue_id=I3A3X0) | 【21.03】系统安装完成后，重启anaconda,日志中出现Error setting audit daemon pid (Permission denied)| +| [I3A50O](https://gitee.com/open_euler/dashboard?issue_id=I3A50O) | 【21.03】虚拟机重启atune-engine，服务启动失败| +| [I3A554](https://gitee.com/open_euler/dashboard?issue_id=I3A554) | 【openEuler 21.03】【虚拟化】openEuler 21.03 版本在ARM服务器启动后会占用大量内存| +| [I3A5VT](https://gitee.com/open_euler/dashboard?issue_id=I3A5VT) | 【openEuler 21.03】【虚拟化】TLS热迁移时产生少量的内存泄露| +| [I3A5YC](https://gitee.com/open_euler/dashboard?issue_id=I3A5YC) | 【21.03】speech-dispatcher服务启动失败| +| [I3A600](https://gitee.com/open_euler/dashboard?issue_id=I3A600) | 执行命令/usr/sbin/sfcbd，失败| +| [I3A66H](https://gitee.com/open_euler/dashboard?issue_id=I3A66H) |[21.03]arm执行长稳用例一段时间后，系统报出异常信息| +| [I3A6CP](https://gitee.com/open_euler/dashboard?issue_id=I3A6CP) | 宏openEuler的值被修改成21.03，导致两个基础包本地编译失败| +| [I3A6FU](https://gitee.com/open_euler/dashboard?issue_id=I3A6FU) | [21.03]x86/arm执行ltp时，有如下用例semctl09/proc01/tpci报错出现异常| +| [I3A84O](https://gitee.com/open_euler/dashboard?issue_id=I3A84O) |创建enclave，设置flags为0时，结果报错 | +| [I3A89D](https://gitee.com/open_euler/dashboard?issue_id=I3A89D) | 【21.03】nghttpx.service服务启动失败| +| [I3A8GH](https://gitee.com/open_euler/dashboard?issue_id=I3A8GH ) | enclave销毁后再重新创建，出现段错误| +| [I3A8IJ](https://gitee.com/open_euler/dashboard?issue_id=I3A8IJ) | 【21.03】spice-webdavd.service服务重启失败| +| [I3A8OS](https://gitee.com/open_euler/dashboard?issue_id=I3A8OS) | 【21.03】vma服reload后，状态变成inactive| +| [I3A8X9](https://gitee.com/open_euler/dashboard?issue_id=I3A8X9) | [21.03] named-sdb-chroot,named-chroot以及named服务启动后报错误日志| +| [I3A8YF](https://gitee.com/open_euler/dashboard?issue_id=I3A8YF) | [21.03] slapd.service启动后查看状态，报错误日志：auxpropfunc error no mechanism available| +| [I3A8Z8](https://gitee.com/open_euler/dashboard?issue_id=I3A8Z8) | [21.03] sm-client.service启动后查看状态sm-client.service: Failed to...| +| [I3A8ZA](https://gitee.com/open_euler/dashboard?issue_id=I3A8ZA) | [21.03] sendmail.service启动后查看状态，报错误日志：auxpropfunc error no mechanism available| +| [I3A936](https://gitee.com/open_euler/dashboard?issue_id=I3A936) | 【21.03】bacular-dir、bacular-fd、bacula-sd 服务启动成功后，stop后服务状态变成failed| +| [I3ABFW](https://gitee.com/open_euler/dashboard?issue_id=I3ABFW) | 包升级导致接口变更| +| [I3AS0I](https://gitee.com/open_euler/dashboard?issue_id=I3AS0I) | [RC1]aarch64架构xfce图形界面执行glade触发coredump，x86_64架构下正常| +| [I3AT8N](https://gitee.com/open_euler/dashboard?issue_id=I3AT8N) | [21.03]arm/x86 selinux开启导致systemd-resolved.service启动不成功，以及导致nfs/smb服务启动后重启机器后服务启动不了| +| [I3AXP2](https://gitee.com/open_euler/dashboard?issue_id=I3AXP2) | 反复创建enclave、生成随机数、销毁enclave 这个流程，执行报错| +| [I3B0IH](https://gitee.com/open_euler/dashboard?issue_id=I3B0IH) | [21.03]x86物理机cpu0进行下线操作之后，无法进行上线操作| +| [I2433Y](https://gitee.com/open_euler/dashboard?issue_id=I2433Y) | [pkgship] /usr/share/doc/pkgship/README.md文件没有更新| +| [I38NK4](https://gitee.com/open_euler/dashboard?issue_id=I38NK4) | enclave销毁后使用出现段错误| +| [I3A2CO](https://gitee.com/open_euler/dashboard?issue_id=I3A2CO) | 安装后基础命令sealert不可用| +| [I3A8AW](https://gitee.com/open_euler/dashboard?issue_id=I3A8AW) | 【21.03】x86虚拟机，安装过程中点击按钮响应异常| +| [I3AAEM](https://gitee.com/open_euler/dashboard?issue_id=I3AAEM) | [pkgship] 使用自动安装部署脚本安装启动elasticsearch报错| +| [I3AEG7](https://gitee.com/open_euler/dashboard?issue_id=I3AEG7) | matplotlib在21.03版本运行失败| +| [I3AHWR](https://gitee.com/open_euler/dashboard?issue_id=I3AHWR) | [pkgship] 初始化数据库时经常会失败| +| [I3AITX](https://gitee.com/open_euler/dashboard?issue_id=I3AITX) | 【21.03】用dnf info apache-zookeeper查看到的source信息与源码包名不一致| +| [I3AIVF](https://gitee.com/open_euler/dashboard?issue_id=I3AIVF) | 【21.03】卸载mailman有fail信息| +| [I3AIZP](https://gitee.com/open_euler/dashboard?issue_id=I3AIZP) | 【openEuler 21.03】kernel rpm包安装失败 报错需要headers| +| [I3AJ2L](https://gitee.com/open_euler/dashboard?issue_id=I3AJ2L) | [pkgship] 当配置文件中的init_conf_path设为非yaml文件时，命令行执行报错| +| [I3AJ33](https://gitee.com/open_euler/dashboard?issue_id=I3AJ33) | 【21.03】系统启动后，网卡状态未开启，无ip| +| [I3AJ36](https://gitee.com/open_euler/dashboard?issue_id=I3AJ36) | [pkgship] 初始化命令指定不存在的文件路径时，命令抛出代码异常| +| [I3AJ5Q](https://gitee.com/open_euler/dashboard?issue_id=I3AJ5Q) | 【21.03】由于不能正确识别安装在raid盘的系统，导致lvm2.pvscan服务报错| +| [I3AJZ3](https://gitee.com/open_euler/dashboard?issue_id=I3AJZ3) | 【21.03】spice-webdavd缺少依赖包avahi，启动服务失败| +| [I3AK1K](https://gitee.com/open_euler/dashboard?issue_id=I3AK1K ) | [pkgship] 当配置数据库优先级相同时，初始化后的数据库没有按照字母排序| +| [I3AKM2](https://gitee.com/open_euler/dashboard?issue_id=I3AKM2) | [21.03] x86/arm 创建/dev/cgroup目录，执行mount -t cgroup -o memory ltp_cgroup /dev/cgroup/失败| +| [I3AKUR](https://gitee.com/open_euler/dashboard?issue_id=I3AKUR) | 【openEuler 21.03】【iscsi】新版本配置启动network_disk磁盘报错Unknown driver 'iscsi'| +| [I3ALZ6](https://gitee.com/open_euler/dashboard?issue_id=I3ALZ6) | 【openEuler 21.03】【io悬挂】配置io悬挂，retry_interval、retry_timeout配置为-1时，qemu命令行启动虚拟机仍成功，未防呆| +| [I3AM39](https://gitee.com/open_euler/dashboard?issue_id=I3AM39) | 【openEuler 21.03】虚拟机start后，立即通过virsh dump命令 dump core失败| +| [I3AM4T](https://gitee.com/open_euler/dashboard?issue_id=I3AM4T) | 【openEuler 21.03】qemu进程的cgroup信息中缺少了memory的信息| +| [I3AMMG](https://gitee.com/open_euler/dashboard?issue_id=I3AMMG) | 【openEuler 21.03】使用virsh schedinfo设置emulator_quota为18446744073709551失败| +| [[I3AMTA](https://gitee.com/open_euler/dashboard?issue_id=I3AMTA) | [pkgship] 初始化openEuler20.09数据库时，ES会出现超时现象| +| [I3AMVH](https://gitee.com/open_euler/dashboard?issue_id=I3AMVH) | 【21.03】arm/x86 开启selinux，导致部分服务启动失败| +| [I3AMW5](https://gitee.com/open_euler/dashboard?issue_id=I3AMW5) | [pkgship] 自动安装部署redis/elasticsearch过程中取消交互| +| [I3AN14](https://gitee.com/open_euler/dashboard?issue_id=I3AN14) | [pkgship] 在未启动服务进行查询时，应提示用户启动pkgship服务而不是uwsgi服务| +| [I3ANFP](https://gitee.com/open_euler/dashboard?issue_id=I3ANFP) | [pkgship] 配置不存在的本地repo源执行初始化时，初始化提示成功| +| [I3AP8U](https://gitee.com/open_euler/dashboard?issue_id=I3AP8U) | [pkgship] 查询pkgship bedepend不允许同时传参-install/-build| +| [I3AR58](https://gitee.com/open_euler/dashboard?issue_id=I3AR58) | [21.03] x86/arm 安装完lxcfs后启动lxcfs服务失败，缺少加载fuse模块| +| [I3AR6K](https://gitee.com/open_euler/dashboard?issue_id=I3AR6K) | 【21.03】【arm/x86】radeapclient的-q参数问题| +| [I3ARDX](https://gitee.com/open_euler/dashboard?issue_id=I3ARDX) | [pkgship] 配置客户端请求查询服务端时，提示启动本地pkgship服务| +| [I3ARHT](https://gitee.com/open_euler/dashboard?issue_id=I3ARHT) | [pkgship] 配置远端redis无法访问时，显示启动服务成功，实际上没有启动| +| [I3ARNO](https://gitee.com/open_euler/dashboard?issue_id=I3ARNO) | [21.03]物理机格式化mkfs.ext3 1.1T的磁盘，会卡住| +| [I3AROU](https://gitee.com/open_euler/dashboard?issue_id=I3AROU) | [pkgship] 本地查询访问没有限流措施| +| [I3ART8](https://gitee.com/open_euler/dashboard?issue_id=I3ART8) | [pkgship] 修改日志路径后启动服务，日志转储文件中的路径没有对应改变| +| [I3ARZH](https://gitee.com/open_euler/dashboard?issue_id=I3ARZH) | [pkgship] 配置文件中被删除的log_name在手动添加赋值后可以生效| +| [I3ASPJ](https://gitee.com/open_euler/dashboard?issue_id=I3ASPJ) | 【openEuler 21.03】【虚拟化】zstd压缩迁移可设置的压缩级别范围与文档不符| +| [I3AUO2](https://gitee.com/open_euler/dashboard?issue_id=I3AUO2) | 基线版本未添加cpuparkmem, 执行kexec -l 添加cpuparkmem进行预留内存失败| +| [I3AVDX](https://gitee.com/open_euler/dashboard?issue_id=I3AVDX) | [pkgship] 配置query_ip_addr为不存在的ip地址时，启动服务失败| +| [I3AVO6](https://gitee.com/open_euler/dashboard?issue_id=I3AVO6) | 【21.03】arm虚拟机出现内核报错:ERROR: Endpoint drop flag = 0, add flag = 1...| +| [I3AW41](https://gitee.com/open_euler/dashboard?issue_id=I3AW41) | [pkgship] remote_host配置非法地址时，命令回显抛出代码异常| +| [I3AWPM](https://gitee.com/open_euler/dashboard?issue_id=I3AWPM) | [21.03] arm 内核不支持files cgroup| +| [I3AX0D](https://gitee.com/open_euler/dashboard?issue_id=I3AX0D) | 反复执行内核替换（-q -l交替），会概率性出现-q加载内核失败的情况| +| [I3AZUU](https://gitee.com/open_euler/dashboard?issue_id=I3AZUU) | 当用户登录系统时，口令连续输错3次，不会锁定账户| +| [I3AZYM](https://gitee.com/open_euler/dashboard?issue_id=I3AZYM) | [21.03 RC2] podman stats命令执行报错| +| [I3B0ZW](https://gitee.com/open_euler/dashboard?issue_id=I3B0ZW ) | sudo文件语法错误，无法使用| +| [I3B17Q](https://gitee.com/open_euler/dashboard?issue_id=I3B17Q) | 【21.03】arm物理机 从usb启动，报错blk_update_request: I/O error| +| [I3B2B2](https://gitee.com/open_euler/dashboard?issue_id=I3B2B2) | [21.03] 未做热插拔操作，偶现盘符漂移现象| +| [I3B3BD](https://gitee.com/open_euler/dashboard?issue_id=I3B3BD) | 【21.03】TaiShan 200 (Model 2280) arm物理机出现内核报错 hisi_sec2 : Failed to enable PASID| +| [I3B3G0](https://gitee.com/open_euler/dashboard?issue_id=I3B3G0) | [pkgship] 修改配置文件中的database_engine_type值后，命令行抛出异常没有处理| +| [I3B3IP](https://gitee.com/open_euler/dashboard?issue_id=I3B3IP) | [pkgship] 配置文件中的[REDIS]的参数项的赋值缺少校验| +| [I3B3J7](https://gitee.com/open_euler/dashboard?issue_id=I3B3J7) | 加解密大内存，建议给出规格| +| [I3B48M](https://gitee.com/open_euler/dashboard?issue_id=I3B48M) | 【21.03】arm/x86安装base镜像所有包后，开启selinux，重启后，出现异常| +| [I3B4PB](https://gitee.com/open_euler/dashboard?issue_id=I3B4PB) | 【21.03】物理机偶现出现内核报错 usbhid: probe of 1-1.1:1.1 failed with error -110| +| [I3B4VE](https://gitee.com/open_euler/dashboard?issue_id=I3B4VE ) | 【ARM】【21.03】nvwa操作时 kexec相关日志未记录| +| [I3B4XH](https://gitee.com/open_euler/dashboard?issue_id=I3B4XH) | 【ARM】【21.03】nvwa操作时如需要更换端口，修改service文件配置的方式不合理| +| [I3B4XU](https://gitee.com/open_euler/dashboard?issue_id=I3B4XU) | 【ARM】【21.03】nvwa update进行恢复时，如出现PID占用会导致恢复失败| +| [I3B4ZE](https://gitee.com/open_euler/dashboard?issue_id=I3B4ZE) | 【ARM】【21.03】nvwa 服务需要支持restart时更新配置| +| [I3B514](https://gitee.com/open_euler/dashboard?issue_id=I3B514) | 【21.03】x86物理机出现内核报错xhci_hcd: ERROR: unexpected command completion code 0x11| +| [I3B5Z4](https://gitee.com/open_euler/dashboard?issue_id=I3B5Z4) | [21.03] quick-start文档出现20.03字段| +| [I3B60G](https://gitee.com/open_euler/dashboard?issue_id=I3B60G) | [21.03]缺少对应图片| +| [I3B85Z](https://gitee.com/open_euler/dashboard?issue_id=I3B85Z) | 【21.03】x86物理机出现内核报错：ERROR: unexpected command completion code 0x11| +| [I3B8JG](https://gitee.com/open_euler/dashboard?issue_id=I3B8JG) | [21.03] quick-start的英文文档中版本不正确| +| [I3B8NK](https://gitee.com/open_euler/dashboard?issue_id=I3B8NK) | [21.03]中文安装指导文档中缺少对应图片| +| [I3BC45](https://gitee.com/open_euler/dashboard?issue_id=I3BC45) | [21.03]物理机格式化mkfs.ext3 1.1T的磁盘，会卡住| +| [I3BD57](https://gitee.com/open_euler/dashboard?issue_id=I3BD57) | 21.03安全编译选项扫描问题| +| [I3BFEO](https://gitee.com/open_euler/dashboard?issue_id=I3BFEO) | inspector启动service文件缺少--config-file选项；缺少默认配置文件| +| [I3BGE4](https://gitee.com/open_euler/dashboard?issue_id=I3BGE4) | 【21.03】【arm/x86】radsqlrelay -P参数无效| +| [I3BMBV](https://gitee.com/open_euler/dashboard?issue_id=I3BMBV) | 【ARM】【21.03】建议处理nvwa二进制无使用选项| +| [I3BMHR](https://gitee.com/open_euler/dashboard?issue_id=I3BMHR) | 【21.03】samba-tool命令执行出错| +| [I3BMJF](https://gitee.com/open_euler/dashboard?issue_id=I3BMJF) | 【ARM】【21.03】建议手册对于server.yaml中用户无需关注的配置项加强说明避免误改| +| [I3BQDY](https://gitee.com/open_euler/dashboard?issue_id=I3BQDY) | 安装linux-sgx-driver，之后remove，发现isgx进程还在| +| [I3BQH3](https://gitee.com/open_euler/dashboard?issue_id=I3BQH3) | 【ARM】【21.03】使用syatemctl enable nvwa时有异常打印：File * already exists| +| [I3BW4X](https://gitee.com/open_euler/dashboard?issue_id=I3BW4X) |【openEuler 21.03】设置cgroup下cpu.cfs_quota_us为18446744073709551报错| +| [I3C6MP](https://gitee.com/open_euler/dashboard?issue_id=I3C6MP) | codegen 报错信息permission denied拼错了| +| [I3BHF2](https://gitee.com/open_euler/dashboard?issue_id=I3BHF2) | 【ARM】【21.03】nvwa服务仅支持后台守护进程的热迁移且需要关闭selinux| +| [I3BJIJ](https://gitee.com/open_euler/dashboard?issue_id=I3BJIJ) |[pkgship] 初始化校验文件失败时，初始化进度条会一直运行| +| [I3BMKM](https://gitee.com/open_euler/dashboard?issue_id=I3BMKM) | 【21.03】安装i40e有错误信息| +| [I3BOC4](https://gitee.com/open_euler/dashboard?issue_id=I3BOC4) | openEuler 21.03运行SPEC2017子项502.gcc卡死 | +| [I3BPQ8](https://gitee.com/open_euler/dashboard?issue_id=I3BPQ8) | [21.03]Administration/管理用户和用户组.md用户密码修改部分,需要修改| +| [I3BQ2Z](https://gitee.com/open_euler/dashboard?issue_id=I3BQ2Z) | [pkgship] 服务关闭的情况下，可以执行初始化| +| [I3BQDX](https://gitee.com/open_euler/dashboard?issue_id=I3BQDX) | [21.03]Administration/使用DNF管理软件包.md创建本地软件源仓库部分,需要修改| +| [I3BQE3](https://gitee.com/open_euler/dashboard?issue_id=I3BQE3) | 【21.03】group安装时提示找不到某些包| +| [I3BQVH](https://gitee.com/open_euler/dashboard?issue_id=I3BQVH) | [21.03]Administration/使用LVM管理硬盘.md扩展卷组部分,需要修改| +| [I3BQW6](https://gitee.com/open_euler/dashboard?issue_id=I3BQW6) | 21.03】在自定义分区处删除/分区，页面显示删除成功，实际/未删除| +| [I3BRDW](https://gitee.com/open_euler/dashboard?issue_id=I3BRDW) | 【openEuler 21.03】virsh update-devcie更新设备时，提示错误，设备更新失败| +| [I3BT7H](https://gitee.com/open_euler/dashboard?issue_id=I3BT7H) | 【ARM】【21.03】dump服务失败的情况下，/etc/nvwa/running下无dump失败日志| +| [I3BT8M](https://gitee.com/open_euler/dashboard?issue_id=I3BT8M) | [pkgship] pkginfo的接口实现和设计文档不符| +| [I3BTUX](https://gitee.com/open_euler/dashboard?issue_id=I3BTUX) | [21.03]arm/x86 passwd可以使用字典词汇作为口令，与官网手册描述不符| +| [I3BU08](https://gitee.com/open_euler/dashboard?issue_id=I3BU08) |[21.03]arm/x86 执行ltp用例失败memcg_stat_test/memcg_use_hierarchy| +| [I3BU3W](https://gitee.com/open_euler/dashboard?issue_id=I3BU3W) | [21.03]x86/arm未删除pkcs11-register.desktop文件导致systemd-xdg-autostart-generator报错| +| [I3BUAQ](https://gitee.com/open_euler/dashboard?issue_id=I3BUAQ) | 【21.03】本地编译atlas失败| +| [I3BVKD](https://gitee.com/open_euler/dashboard?issue_id=I3BVKD) | 【21.03】本地编译lapack失败| +| [I3BVX5](https://gitee.com/open_euler/dashboard?issue_id=I3BVX5) | [21.03] sendmail.service启动后查看状态，报错误日志：Can't open PID file /run/sendmail.pid| +| [I3BWCP](https://gitee.com/open_euler/dashboard?issue_id=I3BWCP) | [21.03]arm/x86 glibc的问题导致ltp的semctl09失败| +| [I3BYW0](https://gitee.com/open_euler/dashboard?issue_id=I3BYW0) | 【21.03】安装cloud-init，重启系统后查看cloud-init服务出现error日志Unable to render networking| +| [I3BYW2](https://gitee.com/open_euler/dashboard?issue_id=I3BYW2) | 【21.03】本地编译secGear失败| +| [I3C00V](https://gitee.com/open_euler/dashboard?issue_id=I3C00V) | pkgship文档描述存在问题| +| [I3C2ES](https://gitee.com/open_euler/dashboard?issue_id=I3C2ES) | 【21.03】物理机rasdaemon服务出现rasdaemon: Can't register mce handler，以及diskerror_eventstore| +| [I3C2JT](https://gitee.com/open_euler/dashboard?issue_id=I3C2JT) | 【21.03】x86，mariadb启动后，查看状态出现error日志Server GSSAPI error| +| [I3C5A9](https://gitee.com/open_euler/dashboard?issue_id=I3C5A9) |【openEuler 21.03】libvirt组件使用src包，在openEuler上arm架构下编译失败| +| [I3C5LD](https://gitee.com/open_euler/dashboard?issue_id=I3C5LD) | 启动etmemd，执行etmem migrate start操作会出现core| +| [I3CBT0](https://gitee.com/open_euler/dashboard?issue_id=I3CBT0 ) | [21.03]arm kdump启动失败| +| [I3CBXD](https://gitee.com/open_euler/dashboard?issue_id=I3CBXD) | 【21.03】卸载grub2的子包有报错信息| +| [I3CDJQ](https://gitee.com/open_euler/dashboard?issue_id=I3CDJQ) | 【21.03】使用rpmbuild本地编译失败| +| [I3CEO1](https://gitee.com/open_euler/dashboard?issue_id=I3CEO1) | 【21.03】使用rpmbuild本地编译失败| \ No newline at end of file -- Gitee From f1c0690468c0a0ac88ae5bd5ef1f2fda62339105 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Thu, 1 Apr 2021 20:11:42 +0800 Subject: [PATCH 06/28] =?UTF-8?q?update=20docs/zh/docs/Releasenotes/?= =?UTF-8?q?=E5=85=B3=E9=94=AE=E7=89=B9=E6=80=A7.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- ...263\351\224\256\347\211\271\346\200\247.md" | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" index f1128b75e..de05c1b3c 100644 --- "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" +++ "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" @@ -32,6 +32,13 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 - **Pin Memory、Pmem 特性**保证业务进程快速准确恢复，提升业务韧性。 - **NVWA控制器**提供 gRPC 通信接口，容易使用。 +## 分级内存管理框架(etMem) +支持多种内存、存储介质扩展系统内存容量，降低内存使用成本。 +- **冷热页面识别**，通过内核态的内存页面忙闲统计机制，精确识别进程内存页面访问冷热分布。 +- **淘汰策略可配置**，提供配置接口，可定制内存页面冷热分级策略。 +- **平滑扩展**，冷页面自动换出到扩展内存，部署在其上的软件不需要改变和适配编程方式的情况下兼容的运行。 +- **多介质扩展支持**，支持SCM、XL Flash、NVMe SSD等多种介质作为扩展内存，根据介质自身访问速度指定内存冷热分层方案，达到扩展内存并减少性能损失的目的。 + ## 虚拟化功能和可维测能力增强 增加热迁移 Pro 能力扩展，提升可维可测能力。 - **热迁移Pro特性**，增强热迁移 multifd 支持 TLS，保障迁移过程数据安全；支持热迁移数据并行压缩，提升迁移性能；增加数据页面访问频率统计，支撑热迁移数据提前预测。 @@ -46,13 +53,6 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 - **系统调用过滤**，简化设备模型，增加系统调用过滤支持，最简配置下仅需使用35个系统调用，有效减小系统攻击面。 - **IO子系统增强**，支持多通道并发IO能力支持，提升性能；支持IO-QOS能力，提升虚拟机IO流量管理的灵活性和稳定性。 -## 分级内存管理框架(etMem) -支持多种内存、存储介质扩展系统内存容量，降低内存使用成本。 -- **冷热页面识别**，通过内核态的内存页面忙闲统计机制，精确识别进程内存页面访问冷热分布。 -- **淘汰策略可配置**，提供配置接口，可定制内存页面冷热分级策略。 -- **平滑扩展**，冷页面自动换出到扩展内存，部署在其上的软件不需要改变和适配编程方式的情况下兼容的运行。 -- **多介质扩展支持**，支持SCM、XL Flash、NVMe SSD等多种介质作为扩展内存，根据介质自身访问速度指定内存冷热分层方案，达到扩展内存并减少性能损失的目的。 - ## OpenStack Victoria集成 简单、可大规模扩展、丰富、标准统一的云管理操作系统。更多特性，请参考OpenStack Victoria官方发行说明。 - **集成openStack Vicoria版本**，使能基础设施即服务(IaaS)解决方案。 @@ -72,10 +72,10 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 - **支持多种保护模式**，双机热备、双机互备、多机备份(N+M）等多种保护模式支持，满足业务应用各种保护需求。 - **物理机场景和云场景双支持**，既可以在虚拟机池中进行配置高可用，也可以对物理服务器节点进行高可用保护。 - **支持网络（包括单心跳和双心跳模式）等心跳方式**，全方位监控共享数据资源，在极端情况下保障数据的一致性。 -- **资源损耗低**，可在线部署，同时确保被保护应用的资源使用安全。 +- **资源损耗低**，软件消耗的系统资源少，对应用部署和资源使用安全影响小。 - **支持主流系统服务及应用软件**，如nginx、httpd、mariaDB等，支持二次开发。 - **支持HA-WEB人机交互接口**，如用户登录、集群状态展示、资源控制等。 -- **支持HA-API机机交互接口**，如后端集群控制、资源管理、集群状态监控、资源状态监控等。 +- **支持HA-API集群控制REST接口**，如后端集群控制、资源管理、集群状态监控、资源状态监控等。 ## 更多桌面环境的支持 提供更多的开发桌面选择，更好的开发体验。 -- Gitee From 94e381ed35e6f0817593a11eae2d294e5d21eefe Mon Sep 17 00:00:00 2001 From: zoujinda <826835384@qq.com> Date: Thu, 1 Apr 2021 23:02:39 +0800 Subject: [PATCH 07/28] fix key-features file --- ...63\351\224\256\347\211\271\346\200\247.md" | 55 +++++++++++-------- 1 file changed, 32 insertions(+), 23 deletions(-) diff --git "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" index de05c1b3c..26d01677e 100644 --- "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" +++ "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" @@ -2,38 +2,41 @@ ## 全新的5.10内核 深度优化调度、IO、内存管理，提供Arm64、x86、RISC-V等更多算力支持。 -- **调度器优化**，优化了 CFS Task 的公平性，新增 numa aware 异步调用机制，在 NVDIMM 初始化方面有明显的提升；优化 SCHED_IDLE 的调度策略，显著改善高优先级任务的调度延迟，降低对其他任务的干扰。 -- **numa balancing 机制优化**，带来更好的亲和性、更高的使用率和更少的无效迁移。 -- **CPU 隔离机制增强**，支持中断隔离，支持 unbound kthreads 隔离，增强 CPU 核的隔离性，可以更好的避免业务间的相互干扰。 -- **cgroup单线程迁移性能优化**，消除对 thread group 读写信号量的依赖；引入Time Namespaces 使容器迁移更方便。 -- **系统容器限制容器内使用文件句柄数能力支持**，文件句柄包括普通文件句柄和网络套接字，启动容器时，可以通过指定`--files-limit`参数限制容器内打开的最大句柄数。 -- **PSI 能力支持**，PSI (Pressure Stall Information)提供了一种评估系统资源如 CPU、Memory、IO 压力的方法。准确的检测方法可以帮助资源使用者确定合适的工作量，同时也可以帮助系统制定高效的资源调度策略，最大化利用系统资源，最大化改善用户体验。 -- **进程间通信优化**，pipe/epoll_wait 唤醒机制优化，解决唤醒多个等待线程的性能问题。 -- **内存管理增强**，精细化内存控制、统计，异构内存，热插拔、内存初始化等功能均有改善，并提供更有效的用户控制接口; 热点锁及信号量优化，激进内存规整和碎片整理，优化vmap/vmalloc机制，显著提升内存申请效率提升; KASAN、kmemleak、slub_debug、oom等内存维测特性增强，提升内存问题定位及解决效率。 -- **Early Departure Time模型切换**，解决了原来发包过程中TCP框架的限制，根据调度策略给数据包设置EDT时间戳，避免大的队列缓存带来的时延，带来tcp性能的较大提高。 -- **MultiPath TCP 支持**，可在移动与数据场景提升性能和可靠性，支持在负载均衡场景多条子流并行传输。 -- **日志 fast commit 方法引入**，EXT4 引入了新的、更轻量级的日志方法 `-fast commit`，可以大大加快 `fsync` 等耗时较长的操作，带来更好的性能。 -- **支持dm writecache 特性**，提升 SSD 大块顺序写性能，提高 DDR 持久性内存的性能。 -- **支持 io_uring**， io_uring 是一个新的异步IO框架和实现，支持 polling 模式，在polling模式下，性能提升显著，与spdk接近，在队列深度较高时性能更好。 -- **支持 ILP32**， 在鲲鹏920 Arm64 环境上支持 32 位的应用程序。 -- **IMA 商用增强**，在开源 IMA 方案基础上，增强安全性、提升性能、提高易用性，助力商用落地。 -- **支持 per task 栈检查**，增强对 ROP 攻击的防护能力。 -- **MPAM资源管控**，支持 Arm64架构Cache QoS 以及内存带宽控制技术。 -- **支持基于 SEDI 的 NMI 机制和基于 PMU 的 NMI 机制**，使能 hard lockup 检测；使能 perf nmi，能更精确的进行性能分析。 -- **Arm64 平台支持虚拟机 CPU 热插拔**，提高资源配置的灵活性。 -- **Arm64 kdump 增强**, 支持对 4G 以上地址的内存预留，使 kdump 能预留更多的内存空间，支持更大内存的机器。 -- **支持 Raspberry PI 系列板卡**，树莓派的支持已经合入原生的 openEuler 21.03 内核，可以直接使用 openEuler 21.03 内核源码调试。 -- **RISC-V 平台支持 KVM 虚拟化** -- **支持 1822 智能网卡** + +- **调度器优化**，优化了 CFS Task 的公平性，新增 numa aware 异步调用机制，在 NVDIMM 初始化方面有明显的提升；优化 SCHED_IDLE 的调度策略，显著改善高优先级任务的调度延迟，降低对其他任务的干扰。 +- **numa balancing 机制优化**，带来更好的亲和性、更高的使用率和更少的无效迁移。 +- **CPU 隔离机制增强**，支持中断隔离，支持 unbound kthreads 隔离，增强 CPU 核的隔离性，可以更好的避免业务间的相互干扰。 +- **cgroup单线程迁移性能优化**，消除对 thread group 读写信号量的依赖；引入Time Namespaces 使容器迁移更方便。 +- **系统容器限制容器内使用文件句柄数能力支持**，文件句柄包括普通文件句柄和网络套接字，启动容器时，可以通过指定`--files-limit`参数限制容器内打开的最大句柄数。 +- **PSI 能力支持**，PSI (Pressure Stall Information)提供了一种评估系统资源如 CPU、Memory、IO 压力的方法。准确的检测方法可以帮助资源使用者确定合适的工作量，同时也可以帮助系统制定高效的资源调度策略，最大化利用系统资源，最大化改善用户体验。 +- **进程间通信优化**，pipe/epoll_wait 唤醒机制优化，解决唤醒多个等待线程的性能问题。 +- **内存管理增强**，精细化内存控制、统计，异构内存，热插拔、内存初始化等功能均有改善，并提供更有效的用户控制接口; 热点锁及信号量优化，激进内存规整和碎片整理，优化vmap/vmalloc机制，显著提升内存申请效率提升; KASAN、kmemleak、slub_debug、oom等内存维测特性增强，提升内存问题定位及解决效率。 +- **Early Departure Time模型切换**，解决了原来发包过程中TCP框架的限制，根据调度策略给数据包设置EDT时间戳，避免大的队列缓存带来的时延，带来tcp性能的较大提高。 +- **MultiPath TCP 支持**，可在移动与数据场景提升性能和可靠性，支持在负载均衡场景多条子流并行传输。 +- **日志 fast commit 方法引入**，EXT4 引入了新的、更轻量级的日志方法 `-fast commit`，可以大大加快 `fsync` 等耗时较长的操作，带来更好的性能。 +- **支持dm writecache 特性**，提升 SSD 大块顺序写性能，提高 DDR 持久性内存的性能。 +- **支持 io_uring**， io_uring 是一个新的异步IO框架和实现，支持 polling 模式，在polling模式下，性能提升显著，与spdk接近，在队列深度较高时性能更好。 +- **支持 ILP32**， 在鲲鹏920 Arm64 环境上支持 32 位的应用程序。 +- **IMA 商用增强**，在开源 IMA 方案基础上，增强安全性、提升性能、提高易用性，助力商用落地。 +- **支持 per task 栈检查**，增强对 ROP 攻击的防护能力。 +- **MPAM资源管控**，支持 Arm64架构Cache QoS 以及内存带宽控制技术。 +- **支持基于 SEDI 的 NMI 机制和基于 PMU 的 NMI 机制**，使能 hard lockup 检测；使能 perf nmi，能更精确的进行性能分析。 +- **Arm64 平台支持虚拟机 CPU 热插拔**，提高资源配置的灵活性。 +- **Arm64 kdump 增强**, 支持对 4G 以上地址的内存预留，使 kdump 能预留更多的内存空间，支持更大内存的机器。 +- **支持 Raspberry PI 系列板卡**，树莓派的支持已经合入原生的 openEuler 21.03 内核，可以直接使用 openEuler 21.03 内核源码调试。 +- **RISC-V 平台支持 KVM 虚拟化** +- **支持 1822 智能网卡** ## 内核热升级(NVWA) NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换，业务不感知。 + - **Cpu Park、Quick Kexec 特性**加速系统启停，减少宕机时间，增加系统可用性。 - **Pin Memory、Pmem 特性**保证业务进程快速准确恢复，提升业务韧性。 - **NVWA控制器**提供 gRPC 通信接口，容易使用。 ## 分级内存管理框架(etMem) 支持多种内存、存储介质扩展系统内存容量，降低内存使用成本。 + - **冷热页面识别**，通过内核态的内存页面忙闲统计机制，精确识别进程内存页面访问冷热分布。 - **淘汰策略可配置**，提供配置接口，可定制内存页面冷热分级策略。 - **平滑扩展**，冷页面自动换出到扩展内存，部署在其上的软件不需要改变和适配编程方式的情况下兼容的运行。 @@ -41,6 +44,7 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 ## 虚拟化功能和可维测能力增强 增加热迁移 Pro 能力扩展，提升可维可测能力。 + - **热迁移Pro特性**，增强热迁移 multifd 支持 TLS，保障迁移过程数据安全；支持热迁移数据并行压缩，提升迁移性能；增加数据页面访问频率统计，支撑热迁移数据提前预测。 - **性能调试工具(vmtop)**， 可以实时动态查看虚拟机的资源使用情况，包括CPU使用率，内存使用率等信息。新增扩展支持x86_64架构。 - **IO悬挂支持**，IO发生错误时默认自动重试，超时会上报告警。 @@ -48,6 +52,7 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 ## 轻量虚拟运行时(Stratovirt) 增加弹性内存、大页功能、系统调用过滤功能，增强IO子系统提升性能和稳定性。 + - **弹性内存支持**，根据工作负载的内存需求，实现内存的分配和回收， virtio-balloon内存回收速度达3GB/秒。 - **大页支持**，在轻量级框架下提供大页的支持，可为轻量级虚拟机提供连续的物理内存页面，提高虚拟机内存访问效率。 - **系统调用过滤**，简化设备模型，增加系统调用过滤支持，最简配置下仅需使用35个系统调用，有效减小系统攻击面。 @@ -55,6 +60,7 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 ## OpenStack Victoria集成 简单、可大规模扩展、丰富、标准统一的云管理操作系统。更多特性，请参考OpenStack Victoria官方发行说明。 + - **集成openStack Vicoria版本**，使能基础设施即服务(IaaS)解决方案。 - **增强块存储服务能力**，增加容量扩展、快照和虚拟机镜像克隆等高级功能。 - **增强容器化部署和网络能力**，与容器能更好的集成。 @@ -62,6 +68,7 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 ## Kubernetes 1.20 集成 用于自动部署，扩展和管理容器化应用程序的云原生操作系统它更多特性，请参考Kubernetes 1.20官方发行说明。 + - **自动上线和回滚**，Kubernetes 会自动将应用或其配置的更改后的实例上线，同时监视应用程序运行状况，失败就会回滚之前所作更改。 - **服务发现和负载均衡**，服务发现和基于容器IP和DNS名称的负载均衡机支持。 - **存储编排**，支持多种存储后端的自动挂载，如本地存储、NFS、iSCSI、Gluster、Ceph等网络存储系统。 @@ -69,6 +76,7 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 ## HA 高可用集群方案 麒麟软件贡献的高可用集群方案，故障秒级切换，为用户提供业务连续性保障、数据持续保护、灾难恢复的高可用环境。 + - **支持多种保护模式**，双机热备、双机互备、多机备份(N+M）等多种保护模式支持，满足业务应用各种保护需求。 - **物理机场景和云场景双支持**，既可以在虚拟机池中进行配置高可用，也可以对物理服务器节点进行高可用保护。 - **支持网络（包括单心跳和双心跳模式）等心跳方式**，全方位监控共享数据资源，在极端情况下保障数据的一致性。 @@ -79,5 +87,6 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 ## 更多桌面环境的支持 提供更多的开发桌面选择，更好的开发体验。 + - **Xfce桌面支持**，Xfce是一款轻量级 Linux 桌面，与主流UI相比对资源占用小。 - **DDE桌面支持**，是统信软件旗下的一款linux桌面环境，具有美观，易用，高效等特点。 -- Gitee From f0595e93f664285dd1fdd931a76b2061bb326f6a Mon Sep 17 00:00:00 2001 From: zoujinda <826835384@qq.com> Date: Thu, 1 Apr 2021 23:23:03 +0800 Subject: [PATCH 08/28] fix kubernetes file --- ...347\275\262Kubernetes\351\233\206\347\276\244.md" | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git "a/docs/zh/docs/Kubernetes/\351\203\250\347\275\262Kubernetes\351\233\206\347\276\244.md" "b/docs/zh/docs/Kubernetes/\351\203\250\347\275\262Kubernetes\351\233\206\347\276\244.md" index fb6a6dee6..cb073849a 100644 --- "a/docs/zh/docs/Kubernetes/\351\203\250\347\275\262Kubernetes\351\233\206\347\276\244.md" +++ "b/docs/zh/docs/Kubernetes/\351\203\250\347\275\262Kubernetes\351\233\206\347\276\244.md" @@ -9,11 +9,11 @@ | HostName | MAC | IPv4 | | ---------- | ----------------- | ------------------ | -| k8smaster0 | 52:54:00:00:00:80 | 192.168.122.154/24 | -| k8smaster1 | 52:54:00:00:00:81 | 192.168.122.155/24 | -| k8smaster2 | 52:54:00:00:00:82 | 192.168.122.156/24 | -| k8snode1 | 52:54:00:00:00:83 | 192.168.122.157/24 | -| k8snode2 | 52:54:00:00:00:84 | 192.168.122.158/24 | -| k8snode3 | 52:54:00:00:00:85 | 192.168.122.159/24 | +| k8smaster0 | 52:54:00:00:00:80 | 192.168.122.154/24 | +| k8smaster1 | 52:54:00:00:00:81 | 192.168.122.155/24 | +| k8smaster2 | 52:54:00:00:00:82 | 192.168.122.156/24 | +| k8snode1 | 52:54:00:00:00:83 | 192.168.122.157/24 | +| k8snode2 | 52:54:00:00:00:84 | 192.168.122.158/24 | +| k8snode3 | 52:54:00:00:00:85 | 192.168.122.159/24 | -- Gitee From 11a18d749082601b8fe302e8554352e43c2c7b3c Mon Sep 17 00:00:00 2001 From: qiaominna Date: Fri, 2 Apr 2021 09:25:12 +0800 Subject: [PATCH 09/28] =?UTF-8?q?update=20docs/zh/docs/Releasenotes/?= =?UTF-8?q?=E5=85=B3=E9=94=AE=E7=89=B9=E6=80=A7.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../\345\205\263\351\224\256\347\211\271\346\200\247.md" | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" index 26d01677e..cdca90298 100644 --- "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" +++ "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" @@ -35,7 +35,7 @@ NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换 - **NVWA控制器**提供 gRPC 通信接口，容易使用。 ## 分级内存管理框架(etMem) -支持多种内存、存储介质扩展系统内存容量，降低内存使用成本。 +支持多种内存、存储介质统一管理，系统容量平滑扩展。 - **冷热页面识别**，通过内核态的内存页面忙闲统计机制，精确识别进程内存页面访问冷热分布。 - **淘汰策略可配置**，提供配置接口，可定制内存页面冷热分级策略。 -- Gitee From 6004cbf7ff80c4e6aa0378c2049e2aed00ac062a Mon Sep 17 00:00:00 2001 From: qiaominna Date: Fri, 2 Apr 2021 09:26:27 +0800 Subject: [PATCH 10/28] =?UTF-8?q?update=20docs/zh/docs/Releasenotes/?= =?UTF-8?q?=E5=B7=B2=E7=9F=A5=E9=97=AE=E9=A2=98.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../\345\267\262\347\237\245\351\227\256\351\242\230.md" | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git "a/docs/zh/docs/Releasenotes/\345\267\262\347\237\245\351\227\256\351\242\230.md" "b/docs/zh/docs/Releasenotes/\345\267\262\347\237\245\351\227\256\351\242\230.md" index 292b484cc..54862386b 100644 --- "a/docs/zh/docs/Releasenotes/\345\267\262\347\237\245\351\227\256\351\242\230.md" +++ "b/docs/zh/docs/Releasenotes/\345\267\262\347\237\245\351\227\256\351\242\230.md" @@ -3,8 +3,8 @@ | ISSUE |问题描述 | |:--- |:---- | | [I39AN0](https://gitee.com/openeuler/community/issues/I26ZLO?from=project-issue) | 【21.03】arm物理机出现内核报错ACPI CPPC: Failed to find PCC channel for subspace 0 | -| [I39I7C](https://gitee.com/open_euler/dashboard?issue_id=I29P84) | 【21.03】arm理机出现内核报错The BMC does not support , but the BMC needs to be fixed | | [I39MQQ](https://gitee.com/open_euler/dashboard?issue_id=I39MQQ) | 【21.03】RC1版本 字符界面login处使用上下方向键后导致输入异常，无法正常进行用户登录| -| [I3A52C](https://gitee.com/open_euler/dashboard?issue_id=I3A52C) | 【21.03】samba服务启动失败 | +| [I3A8YY](https://gitee.com/open_euler/dashboard?issue_id=I3A8YY) | 【21.03】nfs-blkmap服务停止状态failed | | [I3AB65](https://gitee.com/open_euler/dashboard?issue_id=I3AB65) | 【21.03】SCAP Security guide 不支持对opss（通用操作系统保护配置文件）的检查 | -| [I3A8YY](https://gitee.com/open_euler/dashboard?issue_id=I3A8YY) | 【21.03】nfs-blkmap服务停止状态failed | \ No newline at end of file +| [I3A52C](https://gitee.com/open_euler/dashboard?issue_id=I3A52C) | 【21.03】samba服务启动失败 | +| [I3EAS1](https://gitee.com/open_euler/dashboard?issue_id=I3EAS1) | 【21.03】arm/x86 的megaraid卡类型物理机上echo c > /proc/sysrq-trigger后kdump无法生成vmcore | \ No newline at end of file -- Gitee From eadd9a676210e80ce4515e2f71497b7e90cd1ef7 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Fri, 2 Apr 2021 10:55:19 +0800 Subject: [PATCH 11/28] =?UTF-8?q?update=20docs/zh/docs/Releasenotes/?= =?UTF-8?q?=E5=85=B3=E9=94=AE=E7=89=B9=E6=80=A7.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../\345\205\263\351\224\256\347\211\271\346\200\247.md" | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" index cdca90298..cae5c4248 100644 --- "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" +++ "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" @@ -27,14 +27,14 @@ - **RISC-V 平台支持 KVM 虚拟化** - **支持 1822 智能网卡** -## 内核热升级(NVWA) -NVWA是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换，业务不感知。 +## 内核热升级 +内核热升级是一种 OS 漏洞修复及升级解决方案，实现内核快速热替换，业务不感知。 - **Cpu Park、Quick Kexec 特性**加速系统启停，减少宕机时间，增加系统可用性。 - **Pin Memory、Pmem 特性**保证业务进程快速准确恢复，提升业务韧性。 - **NVWA控制器**提供 gRPC 通信接口，容易使用。 -## 分级内存管理框架(etMem) +## 分级内存管理框架 支持多种内存、存储介质统一管理，系统容量平滑扩展。 - **冷热页面识别**，通过内核态的内存页面忙闲统计机制，精确识别进程内存页面访问冷热分布。 -- Gitee From 87470633321c312b970b4b7f52b054552dac4591 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Fri, 2 Apr 2021 11:02:46 +0800 Subject: [PATCH 12/28] =?UTF-8?q?update=20docs/zh/docs/Releasenotes/?= =?UTF-8?q?=E5=85=B3=E9=94=AE=E7=89=B9=E6=80=A7.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../\345\205\263\351\224\256\347\211\271\346\200\247.md" | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" index cae5c4248..77111cbda 100644 --- "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" +++ "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" @@ -32,7 +32,7 @@ - **Cpu Park、Quick Kexec 特性**加速系统启停，减少宕机时间，增加系统可用性。 - **Pin Memory、Pmem 特性**保证业务进程快速准确恢复，提升业务韧性。 -- **NVWA控制器**提供 gRPC 通信接口，容易使用。 +- **内核热升级控制器**提供 gRPC 通信接口，容易使用。 ## 分级内存管理框架 支持多种内存、存储介质统一管理，系统容量平滑扩展。 -- Gitee From a7fe8aef9959269f2f740ee5533c0a9d14019278 Mon Sep 17 00:00:00 2001 From: geruijun Date: Fri, 2 Apr 2021 11:49:21 +0800 Subject: [PATCH 13/28] update docs/zh/docs/Administration/memory-management.md. --- .../docs/Administration/memory-management.md | 19 +++++++++++-------- 1 file changed, 11 insertions(+), 8 deletions(-) diff --git a/docs/zh/docs/Administration/memory-management.md b/docs/zh/docs/Administration/memory-management.md index 6f012b2ea..5344e2604 100644 --- a/docs/zh/docs/Administration/memory-management.md +++ b/docs/zh/docs/Administration/memory-management.md @@ -1,9 +1,9 @@ -# etmem内存管理 +# etmem内存分级扩展 ## 介绍 随着CPU算力的发展，尤其是ARM核成本的降低，内存成本和内存容量成为约束业务成本和性能的核心痛点，因此如何节省内存成本，如何扩大内存容量成为存储迫切要解决的问题。 -etmem内存垂直扩展技术，通过DRAM+内存压缩/高性能存储新介质形成多级内存存储，对内存数据进行分级，将分级后的内存冷数据从内存介质迁移到高性能存储介质中，达到内存容量扩展的目的，从而实现内存成本下降。 +etmem内存分级扩展技术，通过DRAM+内存压缩/高性能存储新介质形成多级内存存储，对内存数据进行分级，将分级后的内存冷数据从内存介质迁移到高性能存储介质中，达到内存容量扩展的目的，从而实现内存成本下降。 ## 软件架构 ![](./figures/etmem-system-architecture.png) @@ -11,21 +11,24 @@ etmem内存垂直扩展技术，通过DRAM+内存压缩/高性能存储新介质 etmem客户端通过socket通信机制与服务端进行交互，下发创建/删除工程、启动/停止工程、查询工程的命令，服务端通过客户端下发的配置文件，读取project管理配置信息，以及engine配置信息，并执行客户端下发的操作。启动工程之后，服务端会对业务进程进行扫描，并根据扫描统计结果以及淘汰策略，对页面进行分级淘汰，实现节省内存的目标。 -## 安装教程 +## 编译教程 1. 下载etmem源码 ``` # git clone https://gitee.com/src-openeuler/etmem.git ``` -2. 编译安装 +2. 编译和运行依赖 + +etmem的编译和运行依赖于libboundscheck组件。 + +3. 编译 ``` # cd etmem # mkdir build # cd build # cmake .. # make - # make install ``` ## 使用说明 @@ -56,7 +59,7 @@ options： 在运行etmem进程之前，需要管理员预先规划哪些进程需要做内存扩展，将进程信息配置到etmem配置文件中，并配置内存扫描的周期、扫描次数、内存冷热阈值等信息。 -配置文件的示例文件在安装etmem软件包后，放置在/etc/etmem/example_conf.yaml，示例内容为： +配置文件的示例文件在源码包中，放置在源码根目录的conf/example_conf.yaml，建议在使用时放置在/etc/etmem/目录下，示例内容为： ``` options: @@ -100,7 +103,7 @@ options: #### 使用方法 -通过etmem二进制执行工程创建/删除/查询操作，前提是服务端已经成功运行，并且配置文件/etc/etmem/example_conf.yaml内容正确。 +通过etmem二进制执行工程创建/删除/查询操作，前提是服务端已经成功运行，并且配置文件（e.g. /etc/etmem/example_conf.yaml）内容正确。 添加工程： ``` @@ -173,7 +176,7 @@ show命令： #### 使用方法 -通过etmem二进制执行任务启动/停止操作，前提是服务端已经成功运行，配置文件/etc/etmem/example_conf.yaml内容正确，且etmem工程已经创建。 +通过etmem二进制执行任务启动/停止操作，前提是服务端已经成功运行，配置文件（e.g. /etc/etmem/example_conf.yaml）内容正确，且etmem工程已经创建。 启动工程 ``` -- Gitee From 82c02e1792e7c63f27b488ab0266aac3dad1fc8e Mon Sep 17 00:00:00 2001 From: geruijun Date: Fri, 2 Apr 2021 14:02:57 +0800 Subject: [PATCH 14/28] update docs/zh/docs/Administration/memory-management.md. --- docs/zh/docs/Administration/memory-management.md | 1 - 1 file changed, 1 deletion(-) diff --git a/docs/zh/docs/Administration/memory-management.md b/docs/zh/docs/Administration/memory-management.md index 5344e2604..6ab5946b2 100644 --- a/docs/zh/docs/Administration/memory-management.md +++ b/docs/zh/docs/Administration/memory-management.md @@ -17,7 +17,6 @@ etmem客户端通过socket通信机制与服务端进行交互，下发创建/ ``` # git clone https://gitee.com/src-openeuler/etmem.git ``` - 2. 编译和运行依赖 etmem的编译和运行依赖于libboundscheck组件。 -- Gitee From ac69040976db5ca1180f880afd6b87feb61a0789 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Fri, 2 Apr 2021 14:08:01 +0800 Subject: [PATCH 15/28] =?UTF-8?q?update=20docs/zh/docs/Releasenotes/?= =?UTF-8?q?=E5=85=B3=E9=94=AE=E7=89=B9=E6=80=A7.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../\345\205\263\351\224\256\347\211\271\346\200\247.md" | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" index 77111cbda..83832eeff 100644 --- "a/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" +++ "b/docs/zh/docs/Releasenotes/\345\205\263\351\224\256\347\211\271\346\200\247.md" @@ -34,7 +34,7 @@ - **Pin Memory、Pmem 特性**保证业务进程快速准确恢复，提升业务韧性。 - **内核热升级控制器**提供 gRPC 通信接口，容易使用。 -## 分级内存管理框架 +## 内存分级扩展 支持多种内存、存储介质统一管理，系统容量平滑扩展。 - **冷热页面识别**，通过内核态的内存页面忙闲统计机制，精确识别进程内存页面访问冷热分布。 -- Gitee From b009e7cb066301d118c2413a0be5203fff918a85 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Fri, 2 Apr 2021 14:54:20 +0800 Subject: [PATCH 16/28] =?UTF-8?q?update=20docs/zh/docs/Releasenotes/CVE?= =?UTF-8?q?=E6=BC=8F=E6=B4=9E.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- "docs/zh/docs/Releasenotes/CVE\346\274\217\346\264\236.md" | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git "a/docs/zh/docs/Releasenotes/CVE\346\274\217\346\264\236.md" "b/docs/zh/docs/Releasenotes/CVE\346\274\217\346\264\236.md" index e7374faba..c3940611f 100644 --- "a/docs/zh/docs/Releasenotes/CVE\346\274\217\346\264\236.md" +++ "b/docs/zh/docs/Releasenotes/CVE\346\274\217\346\264\236.md" @@ -1,4 +1,4 @@ # CVE漏洞 -版本涉及的CVE可通过[CVE列表](https://cve.openeuler.org/#/CVE)查询。 +版本涉及的CVE可通过[CVE列表](https://openeuler.org/zh/security/cve/)查询。 -- Gitee From 359621c13107de60ebc350fa908728d4a9d9449f Mon Sep 17 00:00:00 2001 From: qiaominna Date: Fri, 2 Apr 2021 14:56:03 +0800 Subject: [PATCH 17/28] update docs/en/docs/Releasenotes/common-vulnerabilities-and-exposures-(cve).md. --- .../Releasenotes/common-vulnerabilities-and-exposures-(cve).md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/en/docs/Releasenotes/common-vulnerabilities-and-exposures-(cve).md b/docs/en/docs/Releasenotes/common-vulnerabilities-and-exposures-(cve).md index eadc4c0a4..530ec2a5b 100644 --- a/docs/en/docs/Releasenotes/common-vulnerabilities-and-exposures-(cve).md +++ b/docs/en/docs/Releasenotes/common-vulnerabilities-and-exposures-(cve).md @@ -1,4 +1,4 @@ # Common Vulnerabilities and Exposures \(CVE\) -For CVE involved in the version, see the [CVE list](https://cve.openeuler.org/#/CVE). +For CVE involved in the version, see the [CVE list](https://openeuler.org/en/security/cve/). -- Gitee From 98287e53e8ad66a51886c148432fae431069a292 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Fri, 2 Apr 2021 15:32:54 +0800 Subject: [PATCH 18/28] =?UTF-8?q?update=20docs/zh/docs/Releasenotes/?= =?UTF-8?q?=E5=8F=82=E4=B8=8E=E8=B4=A1=E7=8C=AE.md.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../\345\217\202\344\270\216\350\264\241\347\214\256.md" | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git "a/docs/zh/docs/Releasenotes/\345\217\202\344\270\216\350\264\241\347\214\256.md" "b/docs/zh/docs/Releasenotes/\345\217\202\344\270\216\350\264\241\347\214\256.md" index ba43d4adf..3184d0e46 100644 --- "a/docs/zh/docs/Releasenotes/\345\217\202\344\270\216\350\264\241\347\214\256.md" +++ "b/docs/zh/docs/Releasenotes/\345\217\202\344\270\216\350\264\241\347\214\256.md" @@ -6,7 +6,7 @@ openEuler将拥有共同兴趣的人们聚在一起，组成了不同的特别兴趣小组（SIG）。当前已有的SIG请参见[SIG列表](https://openeuler.org/zh/sig/sig-list/)。 -我们欢迎并鼓励你加入已有的SIG或创建新的SIG，创建方法请参见[SIG管理指南](https://gitee.com/openeuler/community/blob/master/zh/technical-committee/governance/README.md)。 +我们欢迎并鼓励你加入已有的SIG或创建新的SIG，创建方法请参见[SIG管理指南](https://gitee.com/openeuler/community/blob/master/zh/technical-committee/governance/)。 ## 邮件列表和任务 @@ -18,5 +18,5 @@ openEuler将拥有共同兴趣的人们聚在一起，组成了不同的特别 ## IRC -openEuler也在IRC开辟了频道，作为提供社区支持和交互的额外渠道。详情请参见[openEuler IRC](https://gitee.com/openeuler/community/blob/master/zh/communication/IRCs.md)。 +openEuler也在IRC开辟了频道，作为提供社区支持和交互的额外渠道。详情请参见[openEuler IRC](https://gitee.com/openeuler/community/blob/master/zh/communication/)。 -- Gitee From 3b2881307942dcc1c2fdfd236edaad762a32dd99 Mon Sep 17 00:00:00 2001 From: qiaominna Date: Fri, 2 Apr 2021 15:33:24 +0800 Subject: [PATCH 19/28] update docs/en/docs/Releasenotes/contribution.md. --- docs/en/docs/Releasenotes/contribution.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/en/docs/Releasenotes/contribution.md b/docs/en/docs/Releasenotes/contribution.md index 5ac221e13..ff6e6f09e 100644 --- a/docs/en/docs/Releasenotes/contribution.md +++ b/docs/en/docs/Releasenotes/contribution.md @@ -6,7 +6,7 @@ As an openEuler user, you can contribute to the openEuler community in multiple openEuler brings together people of common interest to form different special interest groups \(SIGs\). For details about existing SIGs, see the [SIG list](https://openeuler.org/en/sig/sig-list/). -You are welcome to join an existing SIG or create a SIG. For details about how to create a SIG, see the [SIG Management Procedure](https://gitee.com/openeuler/community/blob/master/en/technical-committee/governance/README.md). +You are welcome to join an existing SIG or create a SIG. For details about how to create a SIG, see the [SIG Management Procedure](https://gitee.com/openeuler/community/blob/master/en/technical-committee/governance/). ## Mail List and Tasks @@ -18,5 +18,5 @@ You can contribute to the community by submitting code. We also welcome your fee ## IRC -openEuler has also opened a channel in IRC as an additional channel to provide community support and interaction. For details, see [openEuler IRC](https://gitee.com/openeuler/community/blob/master/en/communication/IRCs.md). +openEuler has also opened a channel in IRC as an additional channel to provide community support and interaction. For details, see [openEuler IRC](https://gitee.com/openeuler/community/blob/master/en/communication/). -- Gitee From 873bf601c8ad748bef9e58bf1c5f4cf9f56b2d14 Mon Sep 17 00:00:00 2001 From: q00380213 Date: Thu, 8 Apr 2021 15:33:22 +0800 Subject: [PATCH 20/28] update --- ...4\275\277\347\224\250\346\226\271\346\263\225.md" | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git "a/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" "b/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" index c319a91ae..48a5a40bf 100644 --- "a/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" +++ "b/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" @@ -1,15 +1,15 @@ # NVWA使用方法 -<<<<<<< HEAD -======= - ->>>>>>> 3b2881307942dcc1c2fdfd236edaad762a32dd99 - + - [NVWA命令用法](#nvwa命令用法) + - [NVWA的使用限制](#nvwa的使用限制) + - [NVWA加速特性说明及使用](#nvwa加速特性说明及使用) + - [NVWA产生的日志信息](#nvwa产生的日志信息) - + + ## NVWA命令用法 -- Gitee From fcbd3b344bb7cc87ebd9aaf93a27b860389f49ac Mon Sep 17 00:00:00 2001 From: q00380213 Date: Thu, 8 Apr 2021 15:39:58 +0800 Subject: [PATCH 21/28] update --- ...77\347\224\250\346\226\271\346\263\225.md" | 19 ++++++++----------- 1 file changed, 8 insertions(+), 11 deletions(-) diff --git "a/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" "b/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" index 48a5a40bf..be9e7eacf 100644 --- "a/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" +++ "b/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" @@ -1,17 +1,14 @@ -# NVWA使用方法 - +# 使用方法 -- [NVWA命令用法](#nvwa命令用法) + -- [NVWA的使用限制](#nvwa的使用限制) +- [命令用法](#命令用法) +- [的使用限制](#使用限制) +- [加速特性说明及使用](#加速特性说明及使用) +- [产生的日志信息](#产生的日志信息) + -- [NVWA加速特性说明及使用](#nvwa加速特性说明及使用) - -- [NVWA产生的日志信息](#nvwa产生的日志信息) - - - -## NVWA命令用法 +## 命令用法 + nvwa help -- Gitee From 467e73fc43489a5ab85e14972d9e798f24826a74 Mon Sep 17 00:00:00 2001 From: amy_Mayun Date: Tue, 13 Apr 2021 15:28:15 +0800 Subject: [PATCH 22/28] delete unnecessary notes for secGear --- ...344\275\277\347\224\250secGear\345\267\245\345\205\267.md" | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git "a/docs/zh/docs/secGear/\344\275\277\347\224\250secGear\345\267\245\345\205\267.md" "b/docs/zh/docs/secGear/\344\275\277\347\224\250secGear\345\267\245\345\205\267.md" index 79c073320..6c969c15b 100644 --- "a/docs/zh/docs/secGear/\344\275\277\347\224\250secGear\345\267\245\345\205\267.md" +++ "b/docs/zh/docs/secGear/\344\275\277\347\224\250secGear\345\267\245\345\205\267.md" @@ -44,7 +44,7 @@ ARM 架构： #### **参数说明** -各参数含义如下：【安全侧、非安全测、可信区、非可信区，差异，统一用哪个。前面没有给出这个内容介绍，需要补充下】 +各参数含义如下： | **参数** | 是否可选 | 参数含义 | | ---------------------- | -------- | ------------------------------------------------------------ | @@ -158,4 +158,4 @@ $ sign_tool.sh –d sign –x sgx –i test.enclave -k private_test.pem –o sig $ sign_tool.sh –d sign –x sgx–i input –p pub.pem –s signature –o signed.enclave ``` -说明：为发布 Intel SGX 支持的正式版本应用，需要申请 Intel 白名单。流程请参考 Intel 文档：https://software.intel.com/content/www/us/en/develop/download/overview-on-signing-and-whitelisting-for-intel-software-guard-extensions-enclaves.html \ No newline at end of file +说明：为发布 Intel SGX 支持的正式版本应用，需要申请 Intel 白名单。流程请参考 Intel 文档：https://software.intel.com/content/www/us/en/develop/download/overview-on-signing-and-whitelisting-for-intel-software-guard-extensions-enclaves.html -- Gitee From d873abd2ce6194ecc29ad09df3f57b23de43fd97 Mon Sep 17 00:00:00 2001 From: amy_Mayun Date: Tue, 13 Apr 2021 16:14:55 +0800 Subject: [PATCH 23/28] modify the description for Kernel Live Upgrade --- .../KernelLiveUpgrade.md} | 32 +- ...77\347\224\250\346\226\271\346\263\225.md" | 214 +++++------ ...05\344\270\216\351\203\250\347\275\262.md" | 355 +++++++++--------- ...43\345\206\263\346\226\271\346\263\225.md" | 52 +-- docs/zh/menu/index.md | 8 +- 5 files changed, 330 insertions(+), 331 deletions(-) rename docs/zh/docs/{NVWA/NVWA.md => KernelLiveUpgrade/KernelLiveUpgrade.md} (56%) rename "docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" => "docs/zh/docs/KernelLiveUpgrade/\344\275\277\347\224\250\346\226\271\346\263\225.md" (92%) rename "docs/zh/docs/NVWA/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" => "docs/zh/docs/KernelLiveUpgrade/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" (57%) rename "docs/zh/docs/NVWA/\345\270\270\350\247\201\351\227\256\351\242\230\344\270\216\350\247\243\345\206\263\346\226\271\346\263\225.md" => "docs/zh/docs/KernelLiveUpgrade/\345\270\270\350\247\201\351\227\256\351\242\230\344\270\216\350\247\243\345\206\263\346\226\271\346\263\225.md" (94%) diff --git a/docs/zh/docs/NVWA/NVWA.md b/docs/zh/docs/KernelLiveUpgrade/KernelLiveUpgrade.md similarity index 56% rename from docs/zh/docs/NVWA/NVWA.md rename to docs/zh/docs/KernelLiveUpgrade/KernelLiveUpgrade.md index cd64447b7..d82b48ce0 100644 --- a/docs/zh/docs/NVWA/NVWA.md +++ b/docs/zh/docs/KernelLiveUpgrade/KernelLiveUpgrade.md @@ -1,16 +1,16 @@ -# 内核热升级用户指南 - -本文档介绍openEuler系统内核热升级特性的安装部署和使用方法，openEuler的内核热替换特性通过快速重启内核和程序热迁移实现，我们提供了一个用户态工具 —— NVWA 以自动化这一过程。 - -本文档适用于使用openEuler系统并希望了解和使用NVWA的社区开发者、开源爱好者以及相关合作伙伴。使用人员需要具备基础的Linux操作系统知识。 - -如果您想要对NVWA的工作机制有进一步了解，或者提出问题，进行代码合入，欢迎访问NVWA的[项目主页](https://gitee.com/openeuler/nvwa) - -## 使用场景 - -内核热升级的目标，是实现在秒级的端到端时延下，实现进程运行现场的保存和恢复。 - -使用场景通常符合以下两个条件： -1. 内核由于漏洞修复，版本更新等原因，需要重新启动 -2. 运行在内核之上的业务能够在内核重启后快速恢复状态 - +# 内核热升级用户指南 + +本文档介绍openEuler系统内核热升级特性的安装部署和使用方法，openEuler的内核热替换特性通过快速重启内核和程序热迁移实现，我们提供了一个用户态工具以自动化这一过程。 + +本文档适用于使用openEuler系统并希望了解和使用内核热升级的社区开发者、开源爱好者以及相关合作伙伴。使用人员需要具备基础的Linux操作系统知识。 + + + +## 使用场景 + +内核热升级的目标，是实现在秒级的端到端时延下，实现进程运行现场的保存和恢复。 + +使用场景通常符合以下两个条件： +1. 内核由于漏洞修复，版本更新等原因，需要重新启动 +2. 运行在内核之上的业务能够在内核重启后快速恢复状态 + diff --git "a/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" "b/docs/zh/docs/KernelLiveUpgrade/\344\275\277\347\224\250\346\226\271\346\263\225.md" similarity index 92% rename from "docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" rename to "docs/zh/docs/KernelLiveUpgrade/\344\275\277\347\224\250\346\226\271\346\263\225.md" index be9e7eacf..a70a6f9c7 100644 --- "a/docs/zh/docs/NVWA/\344\275\277\347\224\250\346\226\271\346\263\225.md" +++ "b/docs/zh/docs/KernelLiveUpgrade/\344\275\277\347\224\250\346\226\271\346\263\225.md" @@ -1,107 +1,107 @@ -# 使用方法 - - - -- [命令用法](#命令用法) -- [的使用限制](#使用限制) -- [加速特性说明及使用](#加速特性说明及使用) -- [产生的日志信息](#产生的日志信息) - - -## 命令用法 - -+ nvwa help - - 打印帮助信息，打印的信息如下: - ``` - NAME: - nvwa - a tool used for openEuler kernel update. - - USAGE: - nvwa [global options] command [command options] [arguments...] - - VERSION: - 0.1 - - COMMANDS: - update specify kernel version for nvwa to update - init init nvwa running environment - help, h Shows a list of commands or help for one command - - GLOBAL OPTIONS: - --help, -h show help (default: false) - --version, -v print the version (default: false) - ``` - -+ nvwa update - - 热升级到内核某一版本，nvwa会去/boot目录下寻找内核镜像和ramfs，kernel的命名格式需为vmlinuz-, rootfs命名格式需为initramfs-.img - - 需要注意的是，升级过程有可能会失败，如果失败，部分被dump的进程或者服务，将停止运行。 - -+ nvwa init - - 清除nvwa产生的现场信息以及对systemd的配置修改，用于nvwa执行前或者执行失败后，对现场进行清理 - -## NVWA的使用限制 - -1. 对于需要通过nvwa保存的service，其配置中需要设置标准输出(StandardOutput)和错误输出(StandardError)，以redis为例: - - ``` - [Unit] - Description=Redis persistent key-value database - After=network.target - [Service] - ExecStart=/usr/bin/redis-server /etc/redis.conf --supervised systemd - Type=notify - User=redis - Group=redis - RuntimeDirectory=redis - RuntimeDirectoryMode=0755 - StandardOutput=file:/root/log1.log - StandardError=file:/root/log2.log - [Install] - WantedBy=multi-user.target - ``` - -2. 使用加速特性需要修改cmdline以及分配合适的内存，参见[此处](#nvwa加速特性说明及使用) - -3. NVWA运行过程中需要关闭SELINUX - - 理论上，仅需要在执行nvwa update之后和系统重启nvwa恢复现场这段时间前需要关闭。稳妥起见，建议全程关闭SELINUX。 - -## NVWA加速特性说明及使用 - -1. cpu park(加速内核重启过程) - - cpu park，是在使用kexec过程，使cpu进入一种忙等的状态，更快的响应主核发送的中断请求，减少状态的变化。 - - 使用cpu park，需要在cmdline中加入"cpuparkmem=0x200000000"，其中0x200000000是一段未被其他程序使用的内存起始地址，cpuparkmem将占用从该地址开始，size为1M左右的内存空间。 - - 需要注意的是，在内存允许的情况下，此处的地址选择，建议范围在4G(0x100000000)之后，前4G通常被系统各组件预留，容易冲突。 - -2. quick kexec(加速内核启动过程) - - quick kexec，是对kexec加载镜像过程中的一种加速。 - - 使用quick kexec，需要在配置文件中使能相关选项，更多信息参考<<安装与部署>>(配置介绍) - -3. pin_memory(加速现场保存恢复过程) - - pin memory，是对criu进行现场保存恢复过程中的一种加速。 - - 使用pin memory，需要在配置文件中使能相关选项，更多信息参考<<安装与部署>>(配置介绍) - - -## NVWA产生的日志信息 - -nvwa产生的日志分为两部分: - -+ 运行过程产生的日志 - - 通过service nvwa status查看 - -+ 保留现场过程中产生的日志 - - 日志位于criu_dir指定的路径对应命名的进程/服务文件夹中 - +# 使用方法 + + + +- [命令用法](#命令用法) +- [的使用限制](#使用限制) +- [加速特性说明及使用](#加速特性说明及使用) +- [产生的日志信息](#产生的日志信息) + + +## 命令用法 + ++ nvwa help + + 打印帮助信息，打印的信息如下: + ``` + NAME: + nvwa - a tool used for openEuler kernel update. + + USAGE: + nvwa [global options] command [command options] [arguments...] + + VERSION: + 0.1 + + COMMANDS: + update specify kernel version for nvwa to update + init init nvwa running environment + help, h Shows a list of commands or help for one command + + GLOBAL OPTIONS: + --help, -h show help (default: false) + --version, -v print the version (default: false) + ``` + ++ nvwa update + + 热升级到内核某一版本，nvwa会去/boot目录下寻找内核镜像和ramfs，kernel的命名格式需为vmlinuz-, rootfs命名格式需为initramfs-.img + + 需要注意的是，升级过程有可能会失败，如果失败，部分被dump的进程或者服务，将停止运行。 + ++ nvwa init + + 清除nvwa产生的现场信息以及对systemd的配置修改，用于nvwa执行前或者执行失败后，对现场进行清理 + +## 使用限制 + +1. 对于需要通过nvwa保存的service，其配置中需要设置标准输出(StandardOutput)和错误输出(StandardError)，以redis为例: + + ``` + [Unit] + Description=Redis persistent key-value database + After=network.target + [Service] + ExecStart=/usr/bin/redis-server /etc/redis.conf --supervised systemd + Type=notify + User=redis + Group=redis + RuntimeDirectory=redis + RuntimeDirectoryMode=0755 + StandardOutput=file:/root/log1.log + StandardError=file:/root/log2.log + [Install] + WantedBy=multi-user.target + ``` + +2. 使用加速特性需要修改cmdline以及分配合适的内存，参见[此处](#nvwa加速特性说明及使用) + +3. 运行过程中需要关闭SELINUX + + 理论上，仅需要在执行nvwa update之后和系统重启nvwa恢复现场这段时间前需要关闭。稳妥起见，建议全程关闭SELINUX。 + +## 加速特性说明及使用 + +1. cpu park(加速内核重启过程) + + cpu park，是在使用kexec过程，使cpu进入一种忙等的状态，更快的响应主核发送的中断请求，减少状态的变化。 + + 使用cpu park，需要在cmdline中加入"cpuparkmem=0x200000000"，其中0x200000000是一段未被其他程序使用的内存起始地址，cpuparkmem将占用从该地址开始，size为1M左右的内存空间。 + + 需要注意的是，在内存允许的情况下，此处的地址选择，建议范围在4G(0x100000000)之后，前4G通常被系统各组件预留，容易冲突。 + +2. quick kexec(加速内核启动过程) + + quick kexec，是对kexec加载镜像过程中的一种加速。 + + 使用quick kexec，需要在配置文件中使能相关选项，更多信息参考<<安装与部署>>(配置介绍) + +3. pin_memory(加速现场保存恢复过程) + + pin memory，是对criu进行现场保存恢复过程中的一种加速。 + + 使用pin memory，需要在配置文件中使能相关选项，更多信息参考<<安装与部署>>(配置介绍) + + +## 产生的日志信息 + +内核热升级工具产生的日志分为两部分: + ++ 运行过程产生的日志 + + 通过service nvwa status查看 + ++ 保留现场过程中产生的日志 + + 日志位于criu_dir指定的路径对应命名的进程/服务文件夹中 + diff --git "a/docs/zh/docs/NVWA/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" "b/docs/zh/docs/KernelLiveUpgrade/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" similarity index 57% rename from "docs/zh/docs/NVWA/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" rename to "docs/zh/docs/KernelLiveUpgrade/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" index 55301b601..a24e5630e 100644 --- "a/docs/zh/docs/NVWA/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" +++ "b/docs/zh/docs/KernelLiveUpgrade/\345\256\211\350\243\205\344\270\216\351\203\250\347\275\262.md" @@ -1,178 +1,177 @@ -# 安装与部署 - -本章介绍如何安装和部署NVWA。 - - -- [安装与部署](#安装与部署) - - [软硬件要求](#软硬件要求) - - [硬件要求](#硬件要求) - - [软件要求](#软件要求) - - [环境准备](#环境准备) - - [安装NVWA](#安装nvwa) - - [部署NVWA](#部署nvwa) - - [配置介绍](#配置介绍) - - [使能NVWA](#使能nvwa) - - -## 软硬件要求 - -### 硬件要求 - -- 当前仅支持arm64架构 - -### 软件要求 - -- 操作系统：openEuler 21.03 - -## 环境准备 - -- 安装openEuler系统，安装方法参考 《openEuler 21.03 安装指南》 - -- 安装NVWA需要使用root权限 - -## 安装NVWA - -本章介绍NVWA的安装方法 - -安装NVWA的操作步骤如下： - -1. 挂载openEuler的iso文件 - - ``` - # mount openEuler-21.03-aarch64-dvd.iso /mnt - ``` - -2. 配置本地yum源 - - ``` - # vim /etc/yum.repos.d/local.repo - ``` - - 配置内容如下所示： - - ``` - [local] - name=local - baseurl=file:///mnt - gpgcheck=1 - enabled=1 - ``` - -3. 将RPM数字签名的GPG公钥导入系统 - - ``` - # rpm --import /mnt/RPM-GPG-KEY-openEuler - ``` - - -4. 安装NVWA - - ``` - # yum install nvwa -y - ``` - -5. 验证是否安装成功。命令和回显如下表示安装成功 - - ``` - # rpm -qa | grep nvwa - nvwa-xxx - ``` - - -## 部署NVWA - -本章介绍NVWA的配置部署： - -### 配置介绍 - -NVWA的配置文件位于/etc/nvwa，配置文件包括: -- nvwa-restore.yaml - - 该配置文件用于指导NVWA在内核热升级过程中如何保存和恢复现场，具体配置如下: - - + pids - - pids用于指明nvwa热升级过程中需要保留和恢复的进程，此处的进程通过进程号(pid)进行标识，需要注意的是，nvwa管理的进程在nvwa服务启动后，会被自动恢复。 - - + services - - services用于指明nvwa热升级过程中需要保留和恢复的服务。与pids的区别在于，NVWA可以直接保存和恢复进程的状态，对于服务，NVWA则需要依赖systemd进行相关操作。此处的服务名称，应该使用systemd中使用的服务名称。需要注意的是，对于nvwa管理的服务，是否要在nvwa启动时自动恢复，取决于systemd中有没有使能该服务，且当前支持的服务类型只有notify和oneshot。 - - + restore_net - - restore_net用于指明是否需要NVWA保存和恢复网络配置，如果网络配置有误，有可能导致恢复后网络不可用，默认关闭。 - - + enable_quick_kexec - - enable_quick_kexec用于指明是否需要使能quick kexec特性，quick kexec是nvwa社区推出的，加速内核重启过程的一个特性。使用该特性，需要在cmdline中，加入"quickkexec=128M"。128指分配给quick kexec特性的内存大小，该内存将用于在升级过程中加载kernel和initramfs，因此大小需要大于升级过程中涉及到的kernel，initramfs大小之和。该特性默认关闭。 - - + enable_pin_memory - - enable_pin_memory用于指明是否需要使能pin memory特性，pin memory是nvwa社区推出的，加速进程保存恢复过程的一个特性。使用该特性，需要在cmdline中，加入"max_pin_pid_num=10 redirect_space_size=2M pinmemory=200M@0x640000000"。 - - 其中，max_pin_pid_num代表支持pin memory恢复的最大进程数目，redirect_space_size代表pin memory过程中重定向物理页所需要的预留内存空间，建议配置为pin memory总预留内存的1/100，pinmemory指明这段内存的起点和大小。从0x640000000开始的200M空间，是pin memory使用的全部内存空间，这段空间不应该被其他程序使用。 - -- nvwa-restore.yaml的配置示例 -``` -pids: - - 14109 -services: - - redis -restore_net: false -enable_quick_kexec: true -enable_pin_memory: true -``` - -- nvwa-server.yaml - - 该文件包含了NVWA运行过程中，需要使用到的配置信息，具体如下： - - + criu_dir - - 用于指明NVWA在保存现场过程中，存储产生的信息文件夹路径。需要注意的是，这些信息可能会占用较大的磁盘空间。 - - + criu_exe - - 用于指明NVWA使用的criu可执行文件路径，除非是对criu进行调测，一般不建议修改。 - - + kexec_exe - - 用于指明NVWA使用的kexec可执行文件路径，除非是对kexec进行调测，一般不建议修改。 - - + systemd_etc - - 用于指明覆盖systemd配置过程中，使用到的文件夹路径。该路径由systemd决定，一般不需要修改。 - - + log_dir - - 存放NVWA产生的log信息，log模块当前未启用。NVWA日志信息的查看，参考其他章节<<使用方法>> - -- nvwa-server.yaml的配置示例 - -``` -criu_dir: /var/nvwa/running/ -criu_exe: /usr/sbin/criu -kexec_exe: /usr/sbin/kexec -systemd_etc: /etc/systemd/system/ -log_dir: /etc/nvwa/log/ -``` - -## 使能NVWA - -NVWA的运行依赖配置文件，配置文件修改后应该重新运行NVWA程序。 - -安装成功后，可以通过systemd的相关命令来操作NVWA - -+ 使能nvwa - - systemctl enable nvwa - -+ 启动nvwa - - systemctl start nvwa - -+ 查看nvwa日志 - - service nvwa status - -+ 更多用法参考systemd用法 +# 安装与部署 +本章介绍如何安装和部署内核热升级工具。 + + +- [安装与部署](#安装与部署) + - [软硬件要求](#软硬件要求) + - [硬件要求](#硬件要求) + - [软件要求](#软件要求) + - [环境准备](#环境准备) + - [安装内核热升级工具](#安装内核热升级工具) + - [部署内核热升级工具](#部署内核热升级工具) + - [配置介绍](#配置介绍) + - [使能内核热升级工具](#使能内核热升级工具) + + +## 软硬件要求 + +### 硬件要求 + +- 当前仅支持arm64架构 + +### 软件要求 + +- 操作系统：openEuler 21.03 + +## 环境准备 + +- 安装openEuler系统，安装方法参考 《openEuler 21.03 安装指南》 + +- 安装内核热升级工具需要使用root权限 + +## 安装内核热升级工具 + +本章介绍内核热升级工具的安装方法 + +安装内核热升级工具的操作步骤如下： + +1. 挂载openEuler的iso文件 + + ``` + # mount openEuler-21.03-aarch64-dvd.iso /mnt + ``` + +2. 配置本地yum源 + + ``` + # vim /etc/yum.repos.d/local.repo + ``` + + 配置内容如下所示： + + ``` + [local] + name=local + baseurl=file:///mnt + gpgcheck=1 + enabled=1 + ``` + +3. 将RPM数字签名的GPG公钥导入系统 + + ``` + # rpm --import /mnt/RPM-GPG-KEY-openEuler + ``` + + +4. 安装内核热升级工具 + + ``` + # yum install nvwa -y + ``` + +5. 验证是否安装成功。命令和回显如下表示安装成功 + + ``` + # rpm -qa | grep nvwa + nvwa-xxx + ``` + + +## 部署内核热升级工具 + +本章介绍内核热升级工具的配置部署： + +### 配置介绍 + +内核热升级工具的配置文件位于/etc/nvwa，配置文件包括: +- nvwa-restore.yaml + + 该配置文件用于指导内核热升级工具在内核热升级过程中如何保存和恢复现场，具体配置如下: + + + pids + + pids用于指明nvwa热升级过程中需要保留和恢复的进程，此处的进程通过进程号(pid)进行标识，需要注意的是，nvwa管理的进程在nvwa服务启动后，会被自动恢复。 + + + services + + services用于指明nvwa热升级过程中需要保留和恢复的服务。与pids的区别在于，内核热升级工具可以直接保存和恢复进程的状态，对于服务，内核热升级工具则需要依赖systemd进行相关操作。此处的服务名称，应该使用systemd中使用的服务名称。需要注意的是，对于nvwa管理的服务，是否要在nvwa启动时自动恢复，取决于systemd中有没有使能该服务，且当前支持的服务类型只有notify和oneshot。 + + + restore_net + + restore_net用于指明是否需要内核热升级工具保存和恢复网络配置，如果网络配置有误，有可能导致恢复后网络不可用，默认关闭。 + + + enable_quick_kexec + + enable_quick_kexec用于指明是否需要使能quick kexec特性，quick kexec是nvwa社区推出的，加速内核重启过程的一个特性。使用该特性，需要在cmdline中，加入"quickkexec=128M"。128指分配给quick kexec特性的内存大小，该内存将用于在升级过程中加载kernel和initramfs，因此大小需要大于升级过程中涉及到的kernel，initramfs大小之和。该特性默认关闭。 + + + enable_pin_memory + + enable_pin_memory用于指明是否需要使能pin memory特性，pin memory是nvwa社区推出的，加速进程保存恢复过程的一个特性。使用该特性，需要在cmdline中，加入"max_pin_pid_num=10 redirect_space_size=2M pinmemory=200M@0x640000000"。 + + 其中，max_pin_pid_num代表支持pin memory恢复的最大进程数目，redirect_space_size代表pin memory过程中重定向物理页所需要的预留内存空间，建议配置为pin memory总预留内存的1/100，pinmemory指明这段内存的起点和大小。从0x640000000开始的200M空间，是pin memory使用的全部内存空间，这段空间不应该被其他程序使用。 + +- nvwa-restore.yaml的配置示例 +``` +pids: + - 14109 +services: + - redis +restore_net: false +enable_quick_kexec: true +enable_pin_memory: true +``` + +- nvwa-server.yaml + + 该文件包含了内核热升级工具运行过程中，需要使用到的配置信息，具体如下： + + + criu_dir + + 用于指明内核热升级工具在保存现场过程中，存储产生的信息文件夹路径。需要注意的是，这些信息可能会占用较大的磁盘空间。 + + + criu_exe + + 用于指明内核热升级工具使用的criu可执行文件路径，除非是对criu进行调测，一般不建议修改。 + + + kexec_exe + + 用于指明内核热升级工具使用的kexec可执行文件路径，除非是对kexec进行调测，一般不建议修改。 + + + systemd_etc + + 用于指明覆盖systemd配置过程中，使用到的文件夹路径。该路径由systemd决定，一般不需要修改。 + + + log_dir + + 存放内核热升级工具产生的log信息，log模块当前未启用。内核热升级工具日志信息的查看，参考其他章节<<使用方法>> + +- nvwa-server.yaml的配置示例 + +``` +criu_dir: /var/nvwa/running/ +criu_exe: /usr/sbin/criu +kexec_exe: /usr/sbin/kexec +systemd_etc: /etc/systemd/system/ +log_dir: /etc/nvwa/log/ +``` + +## 使能内核热升级工具 + +内核热升级工具的运行依赖配置文件，配置文件修改后应该重新运行内核热升级工具程序。 + +安装成功后，可以通过systemd的相关命令来操作内核热升级工具 + ++ 使能nvwa + + systemctl enable nvwa + ++ 启动nvwa + + systemctl start nvwa + ++ 查看nvwa日志 + + service nvwa status + ++ 更多用法参考systemd用法 diff --git "a/docs/zh/docs/NVWA/\345\270\270\350\247\201\351\227\256\351\242\230\344\270\216\350\247\243\345\206\263\346\226\271\346\263\225.md" "b/docs/zh/docs/KernelLiveUpgrade/\345\270\270\350\247\201\351\227\256\351\242\230\344\270\216\350\247\243\345\206\263\346\226\271\346\263\225.md" similarity index 94% rename from "docs/zh/docs/NVWA/\345\270\270\350\247\201\351\227\256\351\242\230\344\270\216\350\247\243\345\206\263\346\226\271\346\263\225.md" rename to "docs/zh/docs/KernelLiveUpgrade/\345\270\270\350\247\201\351\227\256\351\242\230\344\270\216\350\247\243\345\206\263\346\226\271\346\263\225.md" index bb3b71704..125754103 100644 --- "a/docs/zh/docs/NVWA/\345\270\270\350\247\201\351\227\256\351\242\230\344\270\216\350\247\243\345\206\263\346\226\271\346\263\225.md" +++ "b/docs/zh/docs/KernelLiveUpgrade/\345\270\270\350\247\201\351\227\256\351\242\230\344\270\216\350\247\243\345\206\263\346\226\271\346\263\225.md" @@ -1,27 +1,27 @@ -1. 执行nvwa update后未升级 - - 原因：保留现场或者内核替换过程中出现错误。 - - 解决方法：查看日志，找出错误原因。 - -2. 开启加速特性后，nvwa执行命令失败 - - 原因：nvwa提供了诸多加速特性，包括quick kexec，pin memory，cpu park等等。这些特性都涉及到cmdline的配置和内存的分配，在选取内存时，通过cat /proc/iomemory确保选取的内存没有与其他程序冲突。必要时，通过dmesg查看使能特性后是否存在错误日志。 - -3. 热升级后，相关现场未被恢复 - - 原因：首先检查nvwa服务是否运行，运行情况下，可能存在两种情况，一种是服务恢复失败，一种是进程恢复失败。 - - 解决方法：通过service nvwa status查看nvwa的日志，如果是服务启动失败，首先确认是否使能了该服务，再通过systemd查看对应服务的日志。进一步的日志，去criu_dir指定的路径对应命名的进程/服务文件夹中。其中dump.log为保存现场产生的日志，restore.log为恢复现场产生的。 - -4. 恢复失败，日志显示Can't fork for 948: File exists - - 原因：NVWA在恢复程序过程中，发现程序的pid已经被占用。 - - 解决方法：当前内核没有提供保留pid的机制，相关策略正在开发，预计会在将来的内核版本中解决这一限制，当前仅能手动重启相关进程。 - -5. 使用nvwa去保存和恢复简单程序(hello world)，显示失败或者程序未在执行 - - 原因: criu使用存在诸多限制 - +1. 执行nvwa update后未升级 + + 原因：保留现场或者内核替换过程中出现错误。 + + 解决方法：查看日志，找出错误原因。 + +2. 开启加速特性后，nvwa执行命令失败 + + 原因：nvwa提供了诸多加速特性，包括quick kexec，pin memory，cpu park等等。这些特性都涉及到cmdline的配置和内存的分配，在选取内存时，通过cat /proc/iomemory确保选取的内存没有与其他程序冲突。必要时，通过dmesg查看使能特性后是否存在错误日志。 + +3. 热升级后，相关现场未被恢复 + + 原因：首先检查nvwa服务是否运行，运行情况下，可能存在两种情况，一种是服务恢复失败，一种是进程恢复失败。 + + 解决方法：通过service nvwa status查看nvwa的日志，如果是服务启动失败，首先确认是否使能了该服务，再通过systemd查看对应服务的日志。进一步的日志，去criu_dir指定的路径对应命名的进程/服务文件夹中。其中dump.log为保存现场产生的日志，restore.log为恢复现场产生的。 + +4. 恢复失败，日志显示Can't fork for 948: File exists + + 原因：内核热升级工具在恢复程序过程中，发现程序的pid已经被占用。 + + 解决方法：当前内核没有提供保留pid的机制，相关策略正在开发，预计会在将来的内核版本中解决这一限制，当前仅能手动重启相关进程。 + +5. 使用nvwa去保存和恢复简单程序(hello world)，显示失败或者程序未在执行 + + 原因: criu使用存在诸多限制 + 解决办法：查看nvwa的日志，如果显示是criu相关的错误，去相应的目录下检查dump.log或者restore.log，criu相关的使用限制，可以参考[wiki](https://criu.org/What_cannot_be_checkpointed) \ No newline at end of file diff --git a/docs/zh/menu/index.md b/docs/zh/menu/index.md index 8f6d1d4a7..83547cc27 100644 --- a/docs/zh/menu/index.md +++ b/docs/zh/menu/index.md @@ -133,10 +133,10 @@ headless: true - [使用方法]({{< relref "./docs/A-Tune/使用方法.md" >}}) - [常见问题与解决方法]({{< relref "./docs/A-Tune/常见问题与解决方法.md" >}}) - [附录]({{< relref "./docs/A-Tune/附录.md" >}}) -- [内核热升级用户指南]({{< relref "./docs/NVWA/NVWA.md" >}}) - - [安装与部署]({{< relref "./docs/NVWA/安装与部署.md" >}}) - - [使用方法]({{< relref "./docs/NVWA/使用方法.md" >}}) - - [常见问题与解决方法]({{< relref "./docs/NVWA/常见问题与解决方法.md" >}}) +- [内核热升级指南]({{< relref "./docs/KernelLiveUpgrade/KernelLiveUpgrade.md" >}}) + - [安装与部署]({{< relref "./docs/KernelLiveUpgrade/安装与部署.md" >}}) + - [使用方法]({{< relref "./docs/KernelLiveUpgrade/使用方法.md" >}}) + - [常见问题与解决方法]({{< relref "./docs/KernelLiveUpgrade/常见问题与解决方法.md" >}}) - [附录]({{< relref "./docs/A-Tune/附录.md" >}}) - [应用开发指南]({{< relref "./docs/ApplicationDev/application-development.md" >}}) - [开发环境准备]({{< relref "./docs/ApplicationDev/开发环境准备.md" >}}) -- Gitee From df1747e8b50c315e358c6d2e8b8079ff843ace2c Mon Sep 17 00:00:00 2001 From: amy_Mayun Date: Tue, 13 Apr 2021 16:24:16 +0800 Subject: [PATCH 24/28] correct typos --- docs/zh/docs/desktop/Install_XFCE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/zh/docs/desktop/Install_XFCE.md b/docs/zh/docs/desktop/Install_XFCE.md index 55725c785..1163a39c8 100644 --- a/docs/zh/docs/desktop/Install_XFCE.md +++ b/docs/zh/docs/desktop/Install_XFCE.md @@ -1,5 +1,5 @@ # 在 openEuler 上安装 XFCE -XFCE是一款轻量级 Linux 桌面，当前版本已经将所有不见从 GTK2 更新到 GTK3，从D-Dbus Glib更新到GDBus，大部分组件支持Object Introspection（简称 GI，用于产生与解析 C 程序库 API 元信息，以便于动态语言（或托管语言）绑定基于 C + GObject 的程序库）。优化用户体验，加入新特性，并修补大量BUG。与其它UI界面（GNOME、KDE）相比，XFCE占用的内存和CPU使用量非常小，给用户带来亲切和高效的使用体验。 +XFCE是一款轻量级 Linux 桌面，当前版本已经将所有部件从 GTK2 更新到 GTK3，从D-Dbus Glib更新到GDBus，大部分组件支持Object Introspection（简称 GI，用于产生与解析 C 程序库 API 元信息，以便于动态语言（或托管语言）绑定基于 C + GObject 的程序库）。优化用户体验，加入新特性，并修补大量BUG。与其它UI界面（GNOME、KDE）相比，XFCE占用的内存和CPU使用量非常小，给用户带来亲切和高效的使用体验。 XFCE支持x86_64和aarch64两种架构。 -- Gitee From a16031dc7165511a41058fac79dd538846d6933a Mon Sep 17 00:00:00 2001 From: DCCooper <1866858@gmail.com> Date: Thu, 15 Apr 2021 11:52:12 +0800 Subject: [PATCH 25/28] docs:update isula-build docs Signed-off-by: DCCooper <1866858@gmail.com> --- docs/en/docs/Container/isula-build.md | 134 ++++++++-- ...04\345\273\272\345\267\245\345\205\267.md" | 242 +++++++++++++++--- 2 files changed, 321 insertions(+), 55 deletions(-) diff --git a/docs/en/docs/Container/isula-build.md b/docs/en/docs/Container/isula-build.md index abe201586..6630ce840 100644 --- a/docs/en/docs/Container/isula-build.md +++ b/docs/en/docs/Container/isula-build.md @@ -22,6 +22,8 @@ * [rm: Deleting a Local Persistent Image](#rm-deleting-a-local-persistent-image) * [save: Exporting Cascade Images](#save-exporting-cascade-images) * [tag: Tagging Local Persistent Images](#tag-tagging-local-persistent-images) + * [pull: Pulling an Image To a Local Host](#pull-pulling-an-image-to-a-local-host) + * [push: Pushing a Local Image to a Remote Repository](#push-pushing-a-local-image-to-a-remote-repository) * [info: Viewing the Operating Environment and System Information](#info-viewing-the-operating-environment-and-system-information) * [login: Logging In to the Remote Image Repository](#login-logging-in-to-the-remote-image-repository) * [logout: Logging Out of the Remote Image Repository](#logout-logging-out-of-the-remote-image-repository) @@ -109,7 +111,7 @@ Currently, the isula-build server contains the following configuration file: | run_root | Mandatory | Sets the root directory of runtime data. | For example, /var/run/isula-build/ | | data_root | Mandatory | Sets the local persistency directory. | For example, /var/lib/isula-build/ | | runtime | Optional | Sets the runtime type. Currently, only runc is supported. | runc | - +| group | Optional | Sets an owner group for the local socket file isula_build.sock so that non-privileged users in the group can use isula-build. | isula | - /etc/isula-build/storage.toml: configuration file for local persistent storage, including the configuration of the storage driver in use. @@ -136,6 +138,7 @@ Currently, the isula-build server contains the following configuration file: > - isula-build supports the preceding configuration file with the maximum size of 1 MiB. > - The persistent working directory dataroot cannot be configured on the memory disk, for example, tmpfs. > - Currently, only overlay2 can be used as the underlying graphdriver. +> - Before setting the --group option, ensure that the corresponding user group has been created on a local OS and non-privileged users have been added to the group. After the isula-builder is restarted, non-privileged users can use the isula-build function. In addition, to ensure permission consistency, the array of the isula-build configuration file directory /etc/isula-build is set to the group specified by --group. @@ -184,6 +187,7 @@ You can also run the isula-builder command on the server to start the service. T - --runroot: runtime directory. The default value is /var/run/isula-build/. - --storage-driver: underlying storage driver type. - --storage-opt: underlying storage driver configuration. +- --group: an owner group for the local socket file isula_build.sock so that non-privileged users in the group can use isula-build. The default owner group is "isula". >![](./public_sys-resources/icon-note.gif) **Note:** > If the command line startup parameters contain the same configuration options as those in the configuration file, the command line parameters are preferentially used for startup. @@ -227,6 +231,8 @@ The isula-build client provides a series of commands for building and managing c - rm: deletes a local container image. - save: exports a cascade image to a local disk. - tag: adds a tag to a local container image. + - pull: pulls an image to a local host. + - push: pushes a local image to a remote repository. - info: displays the running environment and system information of isula-build. - login: logs in to the remote container image repository. - logout: logs out of the remote container image repository. @@ -316,7 +322,7 @@ When isula-build is used to build a container image, assume that a fixed timesta For container image build, isula-build supports the same Dockerfile. If the build environments are the same, the image content and image ID generated in multiple builds are the same. -–build-static supports the key-value pair option in the k=v format. Currently, the following options are supported: +--build-static supports the key-value pair option in the k=v format. Currently, the following options are supported: - build-time: string, which indicates the fixed timestamp for creating a static image. The value is in the format of YYYY-MM-DD HH-MM-SS. The timestamp affects the attribute of the file for creating and modifying the time at the diff layer. @@ -353,7 +359,7 @@ $ cat testfile **\-o, --output** -Currently, -o and –output support the following formats: +Currently, -o and --output support the following formats: - `isulad:image:tag`: directly pushes the image that is successfully built to iSulad, for example, `-o isulad:busybox:latest`. Pay attention to the following restrictions: @@ -413,6 +419,7 @@ $ sudo isula-build ctr-img build --cap-add CAP_SYS_ADMIN --cap-add CAP_SYS_PTRAC > - The stage name can contain a maximum of 64 characters. > - isula-build does not support resource restriction on a single Dockerfile build. If resource restriction is required, you can configure a resource limit on the isula-builder. > - Currently, isula-build does not support a remote URL as the data source of the ADD command in the Dockerfile. +> - The local tarball exported using the 'docker-archive' type is not compressed, you can manually compress the file as required. @@ -448,13 +455,13 @@ Example: ```sh $ sudo isula-build ctr-img import ./openEuler-docker.x86_64.tar.xz openeuler:21.03 -Import success with image id: 7317851cd2ab33263eb293f68efee9d724780251e4e92c0fb76bf5d3c5585e37 +Import success with image id: "aac8223a40e9c37558477671c4d66692c8ee5d37b28d947e10010911dd0549d8" $ sudo isula-build ctr-img images ----------------------------------------------- -------------------- ----------------- ------------------------ ------------ -REPOSITORY TAG IMAGE ID CREATED SIZE ----------------------------------------------- -------------------- ----------------- ------------------------ ------------ -openeuler 21.03 7317851cd2ab 2021-03-15 06:25:34 500 MB ----------------------------------------------- -------------------- ----------------- ------------------------ ------------ +--------------- ----------- ----------------- ------------------------ ------------ + REPOSITORY TAG IMAGE ID CREATED SIZE +--------------- ----------- ----------------- ------------------------ ------------ + openeuler 21.03 aac8223a40e9 2021-04-02 00:56:46 210 MB +--------------- ----------- ----------------- ------------------------ ------------ ``` >![](./public_sys-resources/icon-note.gif) **Note** @@ -518,8 +525,8 @@ isula-build ctr-img rm IMAGE [IMAGE...] [FLAGS] Currently, the following flags are supported: -- -a, –all: deletes all images stored locally. -- -p, –prune: deletes all images that are stored locally and do not have tags. +- -a, --all: deletes all images stored locally. +- -p, --prune: deletes all images that are stored locally and do not have tags. Example: @@ -567,6 +574,28 @@ Storing signatures Save success with image: 21c3e96ac411 ``` +The following example shows how to export multiple images to the same tarball: + +```sh +$ sudo isula-build ctr-img save busybox:latest nginx:latest -o all.tar +Getting image source signatures +Copying blob sha256:eb78099fbf7fdc70c65f286f4edc6659fcda510b3d1cfe1caa6452cc671427bf +Copying blob sha256:29f11c413898c5aad8ed89ad5446e89e439e8cfa217cbb404ef2dbd6e1e8d6a5 +Copying blob sha256:af5bd3938f60ece203cd76358d8bde91968e56491daf3030f6415f103de26820 +Copying config sha256:b8efb18f159bd948486f18bd8940b56fd2298b438229f5bd2bcf4cedcf037448 +Writing manifest to image destination +Storing signaturesGetting image source signatures +Copying blob sha256:e2d6930974a28887b15367769d9666116027c411b7e6c4025f7c850df1e45038 +Copying config sha256:a33de3c85292c9e65681c2e19b8298d12087749b71a504a23c576090891eedd6 +Writing manifest to image destination +Storing signatures +Save success with image: [busybox:latest nginx:latest] +``` + +>![](./public_sys-resources/icon-note.gif) **NOTE:** +> +>- save exports an image in .tar format by default. If necessary, you can save the image and then manually compress it. +>- When exporting an image, specify the image integrity in the format of IMAGE_NAME:IMAGE_TAG. #### tag: Tagging Local Persistent Images @@ -596,6 +625,49 @@ alpine v1 a24bb4013296 ---------------------------------------------- ----------- ----------------- -------------------------- ------------ ``` +#### pull: Pulling an Image To a Local Host + +Run the pull command to pull an image from a remote image repository to a local host. Command format: + +``` +isula-build ctr-img pull REPOSITORY[:TAG] +``` + +Example: + +```sh +$ sudo isula-build ctr-img pull example-registry/library/alpine:latest +Getting image source signatures +Copying blob sha256:8f52abd3da461b2c0c11fda7a1b53413f1a92320eb96525ddf92c0b5cde781ad +Copying config sha256:e4db68de4ff27c2adfea0c54bbb73a61a42f5b667c326de4d7d5b19ab71c6a3b +Writing manifest to image destination +Storing signatures +Pull success with image: example-registry/library/alpine:latest +``` + +#### push: Pushing a Local Image to a Remote Repository + +Run the push command to push a local image to a remote repository. Command format: + +``` +isula-build ctr-img push REPOSITORY[:TAG] +``` + +Example: + +```sh +$ sudo isula-build ctr-img push example-registry/library/mybusybox:latest +Getting image source signatures +Copying blob sha256:d2421964bad195c959ba147ad21626ccddc73a4f2638664ad1c07bd9df48a675 +Copying config sha256:f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f +Writing manifest to image destination +Storing signatures +Push success with image: example-registry/library/mybusybox:latest +``` + +>![](./public_sys-resources/icon-note.gif) **NOTE:** +> +>- Before pushing an image, log in to the corresponding image repository. ### info: Viewing the Operating Environment and System Information @@ -608,7 +680,8 @@ You can run the isula-build info command to view the running environment and sys The following flags are supported: -- -H, –human-readable: Boolean. The memory information is printed in the common memory format. The value is 1000 power. +- -H, --human-readable: Boolean. The memory information is printed in the common memory format. The value is 1000 power. +- -V, --verbose: Boolean. The memory usage is displayed during system running. Example: @@ -633,6 +706,13 @@ $ sudo isula-build info -H Insecure Registries: localhost:5000 oepkgs.net + Runtime: + MemSys: 68.4 MB + HeapSys: 63.3 MB + HeapAlloc: 7.41 MB + MemHeapInUse: 8.98 MB + MemHeapIdle: 54.4 MB + MemHeapReleased: 52.1 MB ``` ### login: Logging In to the Remote Image Repository @@ -695,17 +775,17 @@ You can run the version command to view the current version information. ```sh $ sudo isula-build version Client: - Version: 0.9.2 - Go Version: go1.13.3 - Git Commit: ccb2a13 - Built: Sat Aug 22 08:06:47 2020 + Version: 0.9.5-6 + Go Version: go1.15.7 + Git Commit: b82408f + Built: Tue Mar 30 11:08:00 2021 OS/Arch: linux/amd64 - + Server: - Version: 0.9.2 - Go Version: go1.13.3 - Git Commit: ccb2a13 - Built: Sat Aug 22 08:06:47 2020 + Version: 0.9.5 + Go Version: go1.15.5 + Git Commit: 64dbad50 + Built: Mon Apr 12 20:30:31 2021 OS/Arch: linux/amd64 ``` @@ -735,7 +815,7 @@ busybox 2.0 2d414a5cad6d 2020-08-01 06:41: >![](./public_sys-resources/icon-note.gif) **Note:** > - It is required that isula-build and iSulad be on the same node. -> - When an image is directly exported to the iSulad, the isula-build client needs to temporarily store the successfully built image as `/var/tmp/isula-build-tmp-%v.tar` and then import it to the iSulad. Ensure that the /var/tmp/ directory has sufficient disk space. If the isula-build client process is killed or Ctrl+C is pressed during the export, you need to manually clear the `/var/tmp/isula-build-tmp-%v.tar` file. +> - When an image is directly exported to the iSulad, the isula-build client needs to temporarily store the successfully built image as `/var/lib/isula-build/tmp/[buildid]/isula-build-tmp-%v.tar` and then import it to the iSulad. Ensure that the /var/tmp/ directory has sufficient disk space. If the isula-build client process is killed or Ctrl+C is pressed during the export, you need to manually clear the `/var/lib/isula-build/tmp/[buildid]/isula-build-tmp-%v.tar` file. ### Integration with Docker @@ -815,22 +895,24 @@ The isula-build component processes communicate with each other through the Unix ### File and Permission -- All isula-build operations must be performed by the root user. +- All isula-build operations must be performed by the root user. To perform operations as a non-privileged user, you need to configure the --group option. - The following table lists the file permissions involved in the running of isula-build. | **File Path** | **File/Folder Permission** | **Description** | | ------------------------------------------- | ------------------- | ------------------------------------------------------------ | -| /usr/bin/isula-build | 550 | Binary file of the command line tool. | +| /usr/bin/isula-build | 551 | Binary file of the command line tool. | | /usr/bin/isula-builder | 550 | Binary file of the isula-builder process on the server. | | /usr/lib/systemd/system/isula-build.service | 640 | systemd configuration file, which is used to manage the isula-build service. | +| /usr/isula-build | 650 | Root directory of the isula-builder configuration file. | | /etc/isula-build/configuration.toml | 600 | General isula-builder configuration file, which sets the isula-builder log level, persistency directory, runtime directory, and OCI runtime. | | /etc/isula-build/policy.json | 600 | Syntax file of the signature verification policy file. | | /etc/isula-build/registries.toml | 600 | Configuration file of each image repository, including the available image repository list and image repository blacklist. | | /etc/isula-build/storage.toml | 600 | Configuration file for local persistent storage, including the configuration of the used storage driver. | -| /var/run/isula_build.sock | 600 | Local socket of isula-builder. | +| /etc/isula-build/isula-build.pub | 444 | Asymmetric encryption public key file. | +| /var/run/isula_build.sock | 660 | Local socket of isula-builder. | | /var/lib/isula-build | 700 | Local persistency directory. | | /var/run/isula-build | 700 | Local runtime directory. | -| /var/tmp/isula-build-tmp-*.tar | 600 | Local directory for temporarily storing the images when they are exported to the iSulad. | +| /var/lib/isula-build/tmp/[buildid]/isula-build-tmp-*.tar | 644 | Local directory for temporarily storing the images when they are exported to the iSulad. | diff --git "a/docs/zh/docs/Container/isula-build\346\236\204\345\273\272\345\267\245\345\205\267.md" "b/docs/zh/docs/Container/isula-build\346\236\204\345\273\272\345\267\245\345\205\267.md" index a72a3f687..6e70fe441 100644 --- "a/docs/zh/docs/Container/isula-build\346\236\204\345\273\272\345\267\245\345\205\267.md" +++ "b/docs/zh/docs/Container/isula-build\346\236\204\345\273\272\345\267\245\345\205\267.md" @@ -21,10 +21,17 @@ * [rm: 删除本地持久化镜像](#rm-删除本地持久化镜像) * [save: 导出层叠镜像](#save-导出层叠镜像) * [tag: 给本地持久化镜像打标签](#tag-给本地持久化镜像打标签) + * [pull: 拉取镜像到本地](#pull-拉取镜像到本地) + * [push: 将本地镜像推送到远程仓库](#push-将本地镜像推送到远程仓库) * [info: 查看运行环境与系统信息](#info-查看运行环境与系统信息) * [login: 登录远端镜像仓库](#login-登录远端镜像仓库) * [logout: 退出远端镜像仓库](#logout-退出远端镜像仓库) * [version: 版本查询](#version-版本查询) + * [manifest: manifest列表管理（实验特性）](#manifest-manifest列表管理) + * [create: manifest列表创建](#create-manifest列表创建) + * [annotate: manifest列表更新](#annotate-manifest列表更新) + * [inspect: manifest列表查询](#inspect-manifest列表查询) + * [push: 将manifest列表推送到远程仓库](#push-将manifest列表推送到远程仓库) * [直接集成容器引擎](#直接集成容器引擎) * [与iSulad集成](#与isulad集成) * [与Docker集成](#与docker集成) @@ -77,7 +84,7 @@ isula-build采用服务端/客户端模式，其中，isula-build为客户端， **方法二：使用rpm包安装** -1. 从openEuler yum源中获取isula-build对应安装包isula-build-*.rpm。例如isula-build-0.9.3-1.oe1.x86_64.rpm。 +1. 从openEuler yum源中获取isula-build对应安装包isula-build-*.rpm。例如isula-build-0.9.5-6.oe1.x86_64.rpm。 2. 将获取的rpm软件包上传至目标服务器的任一目录，例如 /home/。 @@ -106,7 +113,8 @@ isula-build采用服务端/客户端模式，其中，isula-build为客户端， | loglevel | 可选 | 设置日志级别 | debug
info
warn
error | | run_root | 必选 | 设置运行时数据根目录 | 运行时数据根目录路径，例如/var/run/isula-build/ | | data_root | 必选 | 设置本地持久化目录 | 本地持久化目录路径，例如/var/lib/isula-build/ | -| runtime | 可选 | 设置runtime种类，目前仅支持runc。 | runc | +| runtime | 可选 | 设置runtime种类，目前仅支持runc | runc | +| group | 可选 | 设置本地套接字isula_build.sock文件属组使得加入该组的非特权用户可以操作isula-build | isula | - /etc/isula-build/storage.toml: 本地持久化存储的配置文件，包含所使用的存储驱动的配置。 @@ -134,6 +142,7 @@ isula-build采用服务端/客户端模式，其中，isula-build为客户端， > - isula-build 支持最大 1MiB 的上述配置文件。 > - isula-build 不支持将持久化工作目录 dataroot 配置在内存盘上，比如 tmpfs。 > - isula-build 目前仅支持使用overlay2为底层 graphdriver。 +> - 在设置--group参数前，需保证本地OS已经创建了对应的用户组，且非特权用户已经加入该组。重启isula-builder之后即可使该非特权用户使用isula-build功能。同时，为了保持权限一致性，isula-build的配置文件目录/etc/isula-build的数组也会被设置为--group指定的组。 @@ -182,6 +191,7 @@ sudo systemctl daemon-reload - --runroot: 运行时路径，默认为”/var/run/isula-build/“。 - --storage-driver：底层存储驱动类型。 - --storage-opt: 底层存储驱动配置。 +- --group: 设置本地套接字isula_build.sock文件属组使得加入该组的非特权用户可以操作isula-build，默认为“isula”。 >![](./public_sys-resources/icon-note.gif) **说明：** >当命令行启动参数中传递了与配置文件相同的配置选项时，优先使用命令行参数启动。 @@ -223,8 +233,10 @@ isula-build 客户端提供了一系列命令用于构建和管理容器镜像 - import，导入容器基础镜像。 - load，导入层叠镜像。 - rm，删除本地容器镜像。 - - save, 导出层叠镜像至本地磁盘。 + - save，导出层叠镜像至本地磁盘。 - tag，给本地容器镜像打tag。 + - pull，拉取镜像到本地。 + - push，推送本地镜像到远程仓库。 - info，查看isula-build的运行环境和系统信息。 - login，登录远端容器镜像仓库。 - logout，退出远端容器镜像仓库。 @@ -314,7 +326,7 @@ Build success with image id: 39b62a3342eed40b41a1bcd9cd455d77466550dfa0f0109af7a 对于容器镜像构建，isula-build支持相同的Dockerfile。如果构建环境相同，则多次构建生成的镜像内容和镜像ID相同。 -–build-static接受k=v形式的键值对选项，当前支持的选项有： +--build-static接受k=v形式的键值对选项，当前支持的选项有： - build-time：字符串类型。构建静态镜像的固定时间戳，格式为“YYYY-MM-DD HH-MM-SS”。时间戳影响diff层创建修改时间的文件属性。 @@ -351,7 +363,7 @@ $ cat testfile **\-o, --output** -目前 -o, –output 支持如下形式： +目前 -o, --output 支持如下形式： - `isulad:image:tag`：将构建成功的镜像直接推送到 iSulad。比如：`-o isulad:busybox:latest`。同时需要注意如下约束： @@ -411,6 +423,7 @@ $ sudo isula-build ctr-img build --cap-add CAP_SYS_ADMIN --cap-add CAP_SYS_PTRAC > - isula-build 的stage name最长可为64个字符。 > - isula-build 暂不支持对单次Dockerfile的构建进行资源限制。如有资源限制需求，可通过对 isula-builder 服务端配置资源限额的方式进行限制。 > - isula-build 目前不支持Dockerfile里的ADD指令提供的数据来源是远端url。 +> - isula-build 使用docker-archive类型导出的本地tar包未经压缩。如有需求，用户可以手动进行压缩。 @@ -446,13 +459,13 @@ isula-build ctr-img import [flags] ```sh $ sudo isula-build ctr-img import ./openEuler-docker.x86_64.tar.xz openeuler:21.03 -Import success with image id: 7317851cd2ab33263eb293f68efee9d724780251e4e92c0fb76bf5d3c5585e37 +Import success with image id: "aac8223a40e9c37558477671c4d66692c8ee5d37b28d947e10010911dd0549d8" $ sudo isula-build ctr-img images ----------------------------------------------- -------------------- ----------------- ------------------------ ------------ -REPOSITORY TAG IMAGE ID CREATED SIZE ----------------------------------------------- -------------------- ----------------- ------------------------ ------------ -openeuler 21.03 7317851cd2ab 2021-03-15 06:25:34 500 MB ----------------------------------------------- -------------------- ----------------- ------------------------ ------------ +--------------- ----------- ----------------- ------------------------ ------------ + REPOSITORY TAG IMAGE ID CREATED SIZE +--------------- ----------- ----------------- ------------------------ ------------ + openeuler 21.03 aac8223a40e9 2021-04-02 00:56:46 210 MB +--------------- ----------- ----------------- ------------------------ ------------ ``` >![](./public_sys-resources/icon-note.gif) **说明：** @@ -515,8 +528,8 @@ isula-build ctr-img rm IMAGE [IMAGE...] [FLAGS] 目前支持的 flags 为： -- -a, –all：删除所有本地持久化存储的镜像。 -- -p, –prune：删除所有没有tag的本地持久化存储的镜像。 +- -a, --all：删除所有本地持久化存储的镜像。 +- -p, --prune：删除所有没有tag的本地持久化存储的镜像。 使用示例如下： @@ -564,6 +577,27 @@ Storing signatures Save success with image: 21c3e96ac411 ``` +以下示例导出多个镜像到同一个tarball： +```sh +$ sudo isula-build ctr-img save busybox:latest nginx:latest -o all.tar +Getting image source signatures +Copying blob sha256:eb78099fbf7fdc70c65f286f4edc6659fcda510b3d1cfe1caa6452cc671427bf +Copying blob sha256:29f11c413898c5aad8ed89ad5446e89e439e8cfa217cbb404ef2dbd6e1e8d6a5 +Copying blob sha256:af5bd3938f60ece203cd76358d8bde91968e56491daf3030f6415f103de26820 +Copying config sha256:b8efb18f159bd948486f18bd8940b56fd2298b438229f5bd2bcf4cedcf037448 +Writing manifest to image destination +Storing signaturesGetting image source signatures +Copying blob sha256:e2d6930974a28887b15367769d9666116027c411b7e6c4025f7c850df1e45038 +Copying config sha256:a33de3c85292c9e65681c2e19b8298d12087749b71a504a23c576090891eedd6 +Writing manifest to image destination +Storing signatures +Save success with image: [busybox:latest nginx:latest] +``` + +>![](./public_sys-resources/icon-note.gif) **说明：** +> +>- save 导出的镜像默认格式为未压缩的tar格式，如有需求，用户可以再save之后手动压缩。 +>- 在导出镜像时，需要写明镜像的完整性，格式为IMAGE_NAME:IMAGE_TAG。 #### tag: 给本地持久化镜像打标签 @@ -593,6 +627,49 @@ alpine v1 a24bb4013296 ---------------------------------------------- ----------- ----------------- -------------------------- ------------ ``` +#### pull: 拉取镜像到本地 + +可通过pull命令拉取远程镜像仓库中的镜像到本地。命令原型如下： + +``` +isula-build ctr-img pull REPOSITORY[:TAG] +``` + +使用示例： + +```sh +$ sudo isula-build ctr-img pull example-registry/library/alpine:latest +Getting image source signatures +Copying blob sha256:8f52abd3da461b2c0c11fda7a1b53413f1a92320eb96525ddf92c0b5cde781ad +Copying config sha256:e4db68de4ff27c2adfea0c54bbb73a61a42f5b667c326de4d7d5b19ab71c6a3b +Writing manifest to image destination +Storing signatures +Pull success with image: example-registry/library/alpine:latest +``` + +#### push: 将本地镜像推送到远程仓库 + +可通过push命令将本地镜像推送到远程仓库。命令原型如下： + +``` +isula-build ctr-img push REPOSITORY[:TAG] +``` + +使用示例： + +```sh +$ sudo isula-build ctr-img push example-registry/library/mybusybox:latest +Getting image source signatures +Copying blob sha256:d2421964bad195c959ba147ad21626ccddc73a4f2638664ad1c07bd9df48a675 +Copying config sha256:f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f +Writing manifest to image destination +Storing signatures +Push success with image: example-registry/library/mybusybox:latest +``` + +>![](./public_sys-resources/icon-note.gif) **说明：** +> +>- 推送镜像时，需要先登录对应的镜像仓库。 ### info: 查看运行环境与系统信息 @@ -605,12 +682,13 @@ alpine v1 a24bb4013296 支持如下Flags： -- -H, –human-readable 布尔值，以常用内存表示格式打印内存信息，使用1000次幂 +- -H, --human-readable 布尔值，以常用内存表示格式打印内存信息，使用1000次幂 +- -V, --verbose 布尔值，显示运行时内存占用信息 使用示例： ```sh -$ sudo isula-build info -H +$ sudo isula-build info -HV General: MemTotal: 7.63 GB MemFree: 757 MB @@ -630,6 +708,13 @@ $ sudo isula-build info -H Insecure Registries: localhost:5000 oepkgs.net + Runtime: + MemSys: 68.4 MB + HeapSys: 63.3 MB + HeapAlloc: 7.41 MB + MemHeapInUse: 8.98 MB + MemHeapIdle: 54.4 MB + MemHeapReleased: 52.1 MB ``` ### login: 登录远端镜像仓库 @@ -692,20 +777,117 @@ $ sudo isula-build info -H ```sh $ sudo isula-build version Client: - Version: 0.9.2 - Go Version: go1.13.3 - Git Commit: ccb2a13 - Built: Sat Aug 22 08:06:47 2020 + Version: 0.9.5-6 + Go Version: go1.15.7 + Git Commit: b82408f + Built: Tue Mar 30 11:08:00 2021 OS/Arch: linux/amd64 - + Server: - Version: 0.9.2 - Go Version: go1.13.3 - Git Commit: ccb2a13 - Built: Sat Aug 22 08:06:47 2020 + Version: 0.9.5 + Go Version: go1.15.5 + Git Commit: 64dbad50 + Built: Mon Apr 12 20:30:31 2021 OS/Arch: linux/amd64 ``` +### manifest: manifest列表管理 + +manifest列表包含不同系统架构对应的镜像信息，通过使用manifest列表，用户可以在不同的架构中使用相同的manifest（例如openeuler:latest）获取对应架构的镜像，manifest包含create、annotate、inspect和push子命令。 +> **说明：** +> +> - manifest为实验特性，使用时需开启客户端和服务端的实验选项，方式详见客户端总体说明和配置服务章节。 + + +#### create: manifest列表创建 + +manifest的子命令create用于创建manifest列表，命令原型为： + +``` +isula-build manifest create MANIFEST_LIST MANIFEST [MANIFEST...] +``` + +用户可以指定manifest列表的名称以及需要加入到列表中的远程镜像，若不指定任何远程镜像，则会创建一个空的manifest列表。 + +使用示例如下： + +```sh +$ sudo isula-build manifest create openeuler localhost:5000/openeuler_x86:latest localhost:5000/openeuler_aarch64:latest +``` + +#### annotate: manifest列表更新 + +manifest的子命令annotate用于更新manifest列表，命令原型为： + +``` +isula-build manifest annotate MANIFEST_LIST MANIFEST [flags] +``` + +用户可以指定需要更新的manifest列表以及其中的镜像，通过flags指定需要更新的选项，此命令也可用于添加新的镜像到列表中。 + +其中annotate包含如下flags： +- --arch： string，重写镜像适用架构 +- --os： string，重写镜像适用系统 +- --os-features： string列表，指定镜像需要的OS特性，很少使用 +- --variant： string，指定列表中记录镜像的变量 + +使用示例如下： + +```sh +$ sudo isula-build manifest annotate --os linux --arch arm64 openeuler:latest localhost:5000/openeuler_aarch64:latest +``` + +#### inspect: manifest列表查询 + +manifest子命令inspect用于查询manifest列表信息，命令原型为： + +``` +isula-build manifest inspect MANIFEST_LIST +``` + +使用示例如下： + +```sh +$ sudo isula-build manifest inspect openeuler:latest +{ + "schemaVersion": 2, + "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", + "manifests": [ + { + "mediaType": "application/vnd.docker.distribution.manifest.v2+json", + "size": 527, + "digest": "sha256:bf510723d2cd2d4e3f5ce7e93bf1e52c8fd76831995ac3bd3f90ecc866643aff", + "platform": { + "architecture": "amd64", + "os": "linux" + } + }, + { + "mediaType": "application/vnd.docker.distribution.manifest.v2+json", + "size": 527, + "digest": "sha256:f814888b4bb6149bd39ba8375a1932fb15071b4dbffc7f76c7b602b06abbb820", + "platform": { + "architecture": "arm64", + "os": "linux" + } + } + ] +} +``` + +#### push: 将manifest列表推送到远程仓库 + +manifest子命令push用于将manifest列表推送到远程仓库，命令原型为： + +``` +isula-build manifest push MANIFEST_LIST DESTINATION +``` + +使用示例如下： + +```sh +$ sudo isula-build manifest push openeuler:latest localhost:5000/openeuler:latest +``` ## 直接集成容器引擎 @@ -732,7 +914,7 @@ busybox 2.0 2d414a5cad6d 2020-08-01 06:41: > ![](./public_sys-resources/icon-note.gif) **说明：** > - 要求isula-build和iSulad在同一节点。 -> - 直接导出镜像到iSulad时，isula-build client端需要将构建成功的镜像暂存成 `/var/tmp/isula-build-tmp-%v.tar` 再导入至 iSulad，用户需要保证 /var/tmp/ 目录有足够磁盘空间；同时如果在导出过程中 isula-build client进程被KILL或Ctrl+C终止，需要依赖用户手动清理 `/var/tmp/isula-build-tmp-%v.tar` 文件。 +> - 直接导出镜像到iSulad时，isula-build client端需要将构建成功的镜像暂存成 `/var/lib/isula-build/tmp/[buildid]/isula-build-tmp-%v.tar` 再导入至 iSulad，用户需要保证 /var/lib/isula-build/tmp/ 目录有足够磁盘空间；同时如果在导出过程中 isula-build client进程被KILL或Ctrl+C终止，需要依赖用户手动清理 `/var/lib/isula-build/tmp/[buildid]/isula-build-tmp-%v.tar` 文件。 ### 与Docker集成 @@ -812,22 +994,24 @@ isula-build两个组件进程之间通过unix socket套接字文件进行通信 ### 文件与权限 -- isula-build 所有的操作均需要使用 root 权限。 +- isula-build 所有的操作均需要使用 root 权限。如需使用非特权用户操作，则需要配置--group参数 - isula-build 运行涉及文件权限如下表所示： | **文件路径** | **文件/文件夹权限** | **说明** | | ------------------------------------------- | ------------------- | ------------------------------------------------------------ | -| /usr/bin/isula-build | 550 | 命令行工具二进制文件。 | +| /usr/bin/isula-build | 551 | 命令行工具二进制文件。 | | /usr/bin/isula-builder | 550 | 服务端isula-builder进程二进制文件。 | | /usr/lib/systemd/system/isula-build.service | 640 | systemd配置文件，用于管理isula-build服务。 | +| /etc/isula-build | 650 | isula-builder 配置文件根目录 | | /etc/isula-build/configuration.toml | 600 | isula-builder 总配置文件，包含设置 isula-builder 日志级别、持久化目录和运行时目录、OCI runtime等。 | | /etc/isula-build/policy.json | 600 | 签名验证策略文件的语法文件。 | | /etc/isula-build/registries.toml | 600 | 针对各个镜像仓库的配置文件，含可用的镜像仓库列表、镜像仓库黑名单。 | | /etc/isula-build/storage.toml | 600 | 本地持久化存储的配置文件，包含所使用的存储驱动的配置。 | -| /var/run/isula_build.sock | 600 | 服务端isula-builder的本地套接字。 | +| /etc/isula-build/isula-build.pub | 444 | 非对称加密公钥文件 | +| /var/run/isula_build.sock | 660 | 服务端isula-builder的本地套接字。 | | /var/lib/isula-build | 700 | 本地持久化目录。 | | /var/run/isula-build | 700 | 本地运行时目录。 | -| /var/tmp/isula-build-tmp-*.tar | 600 | 镜像导出至iSulad时的本地暂存目录。 | +| /var/lib/isula-build/tmp/[buildid]/isula-build-tmp-*.tar | 644 | 镜像导出至iSulad时的本地暂存目录。 | -- Gitee From f05736522e69019a2ffb29a17b6636411518b7b5 Mon Sep 17 00:00:00 2001 From: q00380213 Date: Mon, 26 Apr 2021 20:17:50 +0800 Subject: [PATCH 26/28] update --- docs/en/docs/Releasenotes/key-features.md | 146 ++++-- docs/en/docs/Releasenotes/known-issues.md | 38 +- docs/en/docs/Releasenotes/resolved-issues.md | 451 ++++++++++--------- 3 files changed, 339 insertions(+), 296 deletions(-) diff --git a/docs/en/docs/Releasenotes/key-features.md b/docs/en/docs/Releasenotes/key-features.md index 53df363b8..641cce59e 100644 --- a/docs/en/docs/Releasenotes/key-features.md +++ b/docs/en/docs/Releasenotes/key-features.md @@ -1,49 +1,101 @@ # Key Features -- StratoVirt: Combines high security and performance with lightweight loads, low power consumption, and flexible component splitting for trusted virtualization platform in all scenarios. - - - Uses the Rust language, supports **seccomp** and multi-tenant isolation, providing a secure and trusted operating environment. - - Supports startup within 50 ms and memory noise floor of less than 4 MB, achieving the ultimate performance and lightweight deployment in various scenarios across-device-edge-cloud. - - Supports multiple hardware acceleration virtualized engines, such as x86 VT and Kunpeng-V. - - Supports device scaling within milliseconds, providing flexible resource scaling capabilities for lightweight loads. - - Scalable device models, supports complex device specifications such as PCI, and compatible with the QEMU software ecosystem. - - Supports multiple computing, network, and storage acceleration solutions, and flexible collaboration of heterogeneous computing power. - -- iSula: A lightweight container solution that unifies IoT, edge, and cloud computing. - - - Optimized operation performance for the startup and container lifecycle. - - **isula-build**, a container image build tool that provides secure and fast container image build capabilities. - - Secure and trusted VM startup for enhanced VM security. - -- Enhanced virtualization features - - - Optimizes VM lock preemption with dual-layer scheduling and Hypervisor-aware VM scheduling, delivering higher performance in the multi-core overcommitment scenario. - - Optimizes the IPI interruption performance using the Guest-Idle-Haltpoll mechanism, improving the database service performance. - - For the virtualization feature of the ARM platform, supports the CPU/memory hot plug and the custom mode for the KVM CPU, making resource configuration more flexible. - - Quickly collects performance indicators of a VM using the O\&M tool VMTOP. - - Enables hardlockup detection using the PMU NMI watchdog feature. - -- Kernel feature enhancement - - - Enhancement for IMA commercial use: Based on the open source IMA solution, improves security, performance, and usability to facilitate commercial use. - - NUMA Aware Qspinlock: Improves system performance by reducing cross-NUMA cache synchronization and ping-pong operations caused by lock competition. - - Ktask parallelism: A kernel task parallelism framework that supports the parallel operation of kernel tasks. - - MPAM resource control: Supports Cache QoS and memory bandwidth control technology for the ARM64 architecture. - - Memory system lock optimization: Optimizes vmalloc allocation lock and Pagecache lock. - -- Programming languages and compilers - - - JDK8 enhancement: Supports the APPCDS feature and crc32 hardware acceleration instruction. - - GCC optimization: Supports cyclic optimization, automatic vectorization, and global optimization. - -- Hardware and chip enablement - - - Raspberry Pi: Supports the Raspberry series boards. - -- Desktop support - - - UKUI: Default desktop environment of the Kylin OS. Its layout, style, and usage habits are similar to those of the traditional Windows OS. - -- Intelligent O\&M - - - A-Tune: An intelligent system performance optimization engine that infers service features and configures the optimal system parameter set for the optimal service operations. \ No newline at end of file +## Brand New 5.10 Kernel + +In-depth optimization of scheduling, I/O, and memory management has been performed, providing more computing capabilities such as ARM64, x86, and RISC-V. + +- **Optimized scheduler**. The fairness of CFS tasks has been optimized. The NUMA aware asynchronous calling mechanism has been added so that the NVDIMM initialization is significantly improved. The SCHED\_IDLE scheduling policy is optimized to significantly reduce the scheduling delay of high-priority tasks and reduce interference to other tasks. +- **Optimized the NUMA balancing mechanism**. Better affinity, higher utilization, and fewer invalid migrations are achieved. +- **Enhanced the CPU isolation mechanism**. Interrupt isolation and unbound kthreads isolation are supported to enhance the isolation of CPU cores and avoid mutual interference between services. +- **Optimized Cgroup single-thread migration**. The dependency on the read and write semaphores of the thread group is eliminated. Time namespaces are introduced to facilitate container migration. +- **Limitable number of file handles that can be used in a container**. File handles include common file handles and network sockets. When a container is started, you can specify the `--files-limit` parameter to limit the maximum number of handles that can be opened in the container. +- **PSI support**. Pressure Stall Information (PSI) provides a method for evaluating system resources, such as the CPU, memory, and I/O pressure. An accurate detection method can help a resource user determine an appropriate workload, and can also help a system formulate an efficient resource scheduling policy, so as to maximize system resource utilization and improve user experience. +- **Optimized inter-process communication**. The **pipe/epoll\_wait** wakeup mechanism is optimized to improve the performance of waking up multiple waiting threads. +- **Enhanced memory management**. Memory control and statistics are refined, and heterogeneous memory, hot swap, and memory initialization functions are improved. More effective user control interfaces are provided. Hotspot locks and semaphores are optimized. Radical memory normalization and defragmentation are supported. The vmap/vmalloc mechanism is optimized, significantly improving the memory application efficiency. Memory maintenance and test features, such as **KASAN**, **kmemleak**, **slub\_debug**, and **oom**, are enhanced to improve the efficiency of locating and resolving memory problems. +- **Early Departure Time model switching**. It eliminates the limitation of the TCP framework during packet sending. The EDT timestamp is set for data packets based on the scheduling policy, which avoids the delay caused by large queue buffer and greatly improves the TCP performance. +- **MultiPath TCP**. MultiPath TCP improves performance and reliability in mobile and data scenarios and supports parallel transmission of multiple subflows in load balancing scenarios. +- **Log fast commit method**. EXT4 introduces a new and lightweight log method `-fast commit`, which can greatly accelerate time-consuming operations such as `fsync` and bring better performance. +- **dm writecache feature**. The dm writecache feature is supported to improve the sequential write performance of large SSD blocks and the performance of the DDR persistent memory. +- **io\_uring**. io\_uring is a new asynchronous I/O framework and implementation. It supports the polling mode. In polling mode, the performance is greatly improved, which is close to that of the SPDK. When the queue depth is high, the performance is better. +- **ILP32**. 32-bit applications are supported in the Kunpeng 920 ARM64 environment. +- **Enhanced IMA commercial use**. Based on the open-source IMA solution, the security, performance, and ease-of-use of IMA are enhanced to facilitate commercial use. +- **Per task stack check**. Per task stack check is supported to enhance the capability of defending against ROP attacks. +- **MPAM resource management and control**. The cache QoS and memory bandwidth control technologies of the ARM64 architecture is supported. +- **SEDI-based NMI mechanism and PMU-based NMI mechanism**. Hard lockup detection is enabled. perf nmi is enabled so that the performance analysis becomes more accurate. +- **VM CPU hot swap in the ARM64 platform**. CPU hot swap is supported in ARM64 for more flexible resource allocation. +- **Enhanced ARM64 kdump**. Memory reservation for addresses greater than 4 GB is supported so that the kdump can reserve more memory space to support machines with larger memory. +- **Raspberry PI series board**s. The support for the Raspberry PI has been integrated into the native openEuler 21.03 kernel. You can directly use the openEuler 21.03 kernel source code for debugging the boards. +- **KVM virtualization in the RISC-V platform** +- **1822 iNICs** + +## Kernel Hot Upgrade (NVWA) + +NVWA is an OS vulnerability repair and upgrade solution that implements quick hot replacement of the kernel without affecting services. + +- **The CPU park and quick kexec features** accelerate system startup and shutdown, reduce system downtime, and improve system availability. +- **The pin memory and PMem features** ensure quick and accurate recovery of service processes and improve service resilience. +- **The NVWA controllere** provides the gRPC communication interface, which is easy to use. + +## Enhanced Virtualization Function and Maintainability + +The live migration Pro capability is extended to improve the maintainability and testability. + +- **Live migration Pro feature**. multifd is enhanced to support TLS, ensuring data security during migration. Concurrent compression of live migration data is supported, improving migration performance. Statistics on data page access frequency are added for live migration data prediction in advance. +- **Performance debugging tool (vmtop).** You can dynamically view the resource usage of VMs in real time, including the CPU usage and memory usage. The x86\_64 architecture is supported. +- **I/O suspension**. I/O suspension is supported so that automatic retry is performed by default in case an I/O error occurs. If the retry times out, an alarm is reported. +- **Virtualization live migration on RISC-V architecture** + +## Lightweight Virtual Runtime (StratoVirt) + +Elastic memory, huge page, and system call filtering are added to enhance the performance and stability of the I/O subsystem. + +- **Elastic memory**. The memory can be allocated and reclaimed based on the memory requirements of the workload. The memory reclamation speed of virtio-balloon can reach 3 GB/s. +- **Huge page**. Huge page in the lightweight framework provides continuous physical memory pages for lightweight VMs, improving VM memory access efficiency. +- **System call filtering**. The device model has been simplified and system call filtering is supported. In the simplest configuration, only 35 system calls are required, effectively reducing the system attack surface. +- **Enhanced I/O subsystem**. Multi-channel concurrent I/O capability is supported and the performance is improved. The I/O-QoS capability improves the flexibility and stability of VM I/O traffic management. + +## Hierarchical Memory Management Framework (etmem) + +Various memory and storage media are supported to expand the system memory capacity and reduce memory usage costs. + +- **Hot and cold page identification**. The busy/idle status statistics mechanism of the kernel-mode memory page can accurately identify the cold and hot distribution of process memory page accesses. +- **Configurable elimination policies**. A configuration interface is provided to customize the cold and hot tiering policies for memory pages. +- **Smooth expansion**. Cold pages are automatically swapped out to the extended memory. The software deployed on the cold pages can run properly without changing or adapting the programming mode. +- **Multi-media expansion**. Multiple media such as SCM, XL flash, and NVMe SSD can be used as the extended memory. The cold and hot memory tiering solution is specified based on the access speed of the media to expand the memory and reduce performance loss. + +## OpenStack Victoria Integration + +OpenStack Victoria is a simple, scalable, rich, and standard cloud management operating system. For details about more features, see OpenStack Victoria release notes. + +- **Integrated OpenStack Victoria**. OpenStack Victoria enables the IaaS solution. +- **Enhanced block storage.** Advanced functions such as capacity expansion, snapshots, and VM image cloning are supported. +- **Container-based deployment and network capabilities**. Better integration with containers is achieved. +- **Extended services**. Extended services such as control panel management, bare metal server deployment, and cloud resource tracing are supported. + +## Kubernetes 1.20 Integration + +Kubernetes 1.20 is a cloud-native OS used to automatically deploy, scale, and manage containerized applications. For more information, see Kubernetes 1.20 release notes. + +- **Automatic rollout and rollback**. Kubernetes automatically rolls out applications or instances whose configurations have been modified and monitors the running status of the applications. If any application fails to be rolled out, Kubernetes will roll back the previous modification. +- **Service discovery and load balancing**. Service discovery and load balancing based on the container IP addresses and DNS names are supported. +- **Storage orchestration**. Automatic mounting of multiple storage backends, such as local storage, NFS, iSCSI, Gluster, and Ceph. +- **Scaleou**t. Manual scaleout on the CLI and UI, and automatic scaleout based on the CPU usage are supported. + +## HA Cluster Solution + +The high-availability (HA) cluster solution provided by Kylinsoft implements second-level failover and provides users with an HA environment that ensures service continuity, continuous data protection, and disaster recovery. + +- **Multiple protection modes**. Protection modes such as dual-system hot backup, dual-system mutual backup, and multi-system backup (*N* + *M*) are supported to meet various protection requirements of service applications. +- **Physical machine and cloud scenarios**. HA can be configured in the VM pool, and for physical server nodes as well. +- **Network heartbeat modes (the single-heartbeat and dual-heartbeat modes)**. Shared data resources can be comprehensively monitored to ensure data consistency in extreme conditions. +- **Low resource consumption**. Online deployment is supported with secure use of protected application resources. +- **Mainstream system services and application software supported.** Nginx, httpd, MariaDB are supported. Secondary development is made possible. +- **HA-WEB man-machine interaction interfaces.** Interfaces for user login, cluster status display, and resource control are supported. +- **HA-API machine-machine interaction interfaces**. Interfaces for backend cluster control, resource management, cluster status monitoring, and resource status monitoring are supported. + +## More Desktop Environments + +More development desktop options and better development experience are provided. + +- **Xfce.** Xfce is a lightweight Linux desktop that occupies fewer resources than mainstream UIs. +- **DDE**. DDE is a Linux desktop environment provided by Uniontech Software. It is aesthetic, easy-to-use, and efficient. \ No newline at end of file diff --git a/docs/en/docs/Releasenotes/known-issues.md b/docs/en/docs/Releasenotes/known-issues.md index 16ada9132..d79eae95f 100644 --- a/docs/en/docs/Releasenotes/known-issues.md +++ b/docs/en/docs/Releasenotes/known-issues.md @@ -1,29 +1,11 @@ -# Known Issues - - - - - - - - - - - - - - - - -

Issue

-

Description

-

I1VR1W

-

An error message is displayed when the x86 QCOW2 image is used for VM creation or the ISO image is used for physical machine installation. The error message is output as expected. For details, see the issue response.

-

I1U1LP

-

The ARM-based physical machine uses the drive that has been written into the file system for customized partitioning, but the partitioning fails. A special path can be used to prevent this issue. For details, see the issue response.

-

I1VTC5

-

In the pressure test in the overcommitment scenario, frame freezing occurs to vmtop -H page turning when the number of vCPUs is greater than 1,000. The impact scope is controllable. For details, see the issue response.

-

I1WVM8

-

Among the CPU usage data collected by vmtop, the single core whose usage exceeds 100% exists. The impact scope is controllable. For details, see the issue response.

-
+# Known Issues + +| ISSUE| Description| +|:----------|:----------| +| [I39AN0](https://gitee.com/openeuler/community/issues/I26ZLO?from=project-issue)| \[21.03] ARM Physical Machine Reports the Kernel Error: "ACPI CPPC: Failed to find PCC channel for subspace 0"| +| [I39I7C](https://gitee.com/open_euler/dashboard?issue_id=I29P84)| \[21.03] ARM Physical Machine Reports the Kernel Error: "The BMC does not support, but the BMC needs to be fixed"| +| [I39MQQ](https://gitee.com/open_euler/dashboard?issue_id=I39MQQ)| \[21.03] Input Is Abnormal and the User Login Fails in the RC1 Version After the Up and Down Arrow Keys Are Used in the Login Area on the Character Interface| +| [I3A52C](https://gitee.com/open_euler/dashboard?issue_id=I3A52C)| \[21.03] Samba Service Fails to Start| +| [I3AB65](https://gitee.com/open_euler/dashboard?issue_id=I3AB65)| \[21.03] SCAP Security Guide Does Not Support the Check of OPSS (General Operating System Protection Configuration File)| +| [I3A8YY](https://gitee.com/open_euler/dashboard?issue_id=I3A8YY)| \[21.03] Stopping of nfs-blkmap Is in the "failed" State| diff --git a/docs/en/docs/Releasenotes/resolved-issues.md b/docs/en/docs/Releasenotes/resolved-issues.md index 01107f9b3..ea1832764 100644 --- a/docs/en/docs/Releasenotes/resolved-issues.md +++ b/docs/en/docs/Releasenotes/resolved-issues.md @@ -2,225 +2,234 @@ For the complete issue list, see [Complete Issue List](https://gitee.com/organizations/src-openeuler/issues). -For details about the complete kernel submission records, see [Record Submission](https://gitee.com/openeuler/kernel/commits/openEuler-1.0-LTS). - -**Applications and basic services** - - - - - - - - - - - - - - - - - - - - -

Issue

-

Description

-

I1TPY4

-

x86/arm mariadb-server installation fails.

-

I1TOV5

-

lm_sensors cannot be started by default, and systemd is in the degraded state.

-

I1TOCE

-

The kdump on an x86- or ARM-based physical machine fails to be started.

-

I1TZH1

-

The rule does not take effect when the destination port is 80 and the data packages from the source IP address of a host are added to the x86-based server.

-

I1T4O3

-

During x86 PXE installation, the %packages file in the .ks file is used to install minimal, @core, and @base. After the installation is successful, the startup is suspended.

-

I1T8JJ

-

The installation of the ARM-based freeRADIUS server fails.

-
- -**Programming languages and compilers ** - - - - - - - - - - -

Issue

-

Description

-

I1RUM6

-

Track the community to resolve the issue that the type of the file generated after the compilation of gcc -static-pie is incorrect.

-
- -**Virtualization and containers ** - - - - - - - - - - - - - - -

Issue

-

Description

-

I1TB7N

-

PMU nmi watchdog does not support CPU hot-plug.

-

I1TXAU

-

The VM fails to be started when the VM CPU mode is configured with host-model.

-

I1U8BP

-

When openEuler is used to set trusted boot as an image, the VM cannot identify the TPM device.

-
- -**Kernel** - - - - - - - - - - - - - - - - - - -

Issue

-

Description

-

I17YPQ

-

The drive connected to the LSI SAS3408 RAID controller card cannot be identified during the installation.

-

I1JZHT

-

The Netdevsim is repeatedly loaded and uninstalled, causing the system to reset.

-

I1RUC8

-

The performance loss of vmalloc on x86-based servers is huge.

-

I1R86G

-

An error of pread is reported when openEuler performs a test on the open GaussDB, causing the return to -EIO.

-

I1SISM

-

The XFS drive with size=8192 cannot be mounted to the openEuler on the x86 platform.

-
- -**Security ** - - - - - - - - - - -

Issue

-

Description

-

I1TQ15

-

An error is reported when the firewall-cmd --reload command is executed to add an IP address set that does not exist to the drop area as the source.

-
- -**Hardware and chips** ****** - - - - - - - - - - - - -

Issue

-

Description

-

I1SY0K

-

The Raspberry Pi Wi-Fi is unavailable and the connection to the Wi-Fi network fails.

-

I1R4G1

-

The connection to the Raspberry Pi BT fails repeatedly.

-
- -**File system ** - - - - - - - - - - - - - - -

Issue

-

Description

-

I1E0KN

-

A core dump occurs when a user creates and deletes folders concurrently in the XFS file system and uses the find command to query the folders.

-

I1MA88

-

The libguestfs uses the Gnulib code that has a vulnerability, causing a core dump.

-

I1T3GC

-

The memory allocation is reported to fail when the mounted drive letter is checked at the NFS client.

-
- -**Network ** - - - - - - - - - - - - - - -

Issue

-

Description

-

I1TO3R

-

An error occurs when the network-manager-appletda is invoked during installation and ipv4 is manually configured.

-

I1TYDG

-

The NetworkManager service cannot not be self-healed due to the D-Bus service exception.

-

I1AD7N

-

The IP address is lost when the network is restarted because the return value of the grep -L command in the network-scripts file is changed.

-
- -**System tools ** - - - - - - - - - - - -

Issue

-

Description

-

I1U7RL

-

An error occurs during system-config-printer installation.

-

I1T8H4

-

After the x86/ARM-based device is installed by default, the systemctl -all --failed command is executed and the tuned service fails to be started.

-
+For details about the kernel submission records, see \[Submission Record] (https://gitee.com/openeuler/kernel/commits/openEuler-21.03). + +For details about the resolved issues, see [Table 1](#table249714911433). + +Table 1 Resolved issues + +| ISSUE| Description| +|:----------|:----------| +| [I385CW](https://gitee.com/open_euler/dashboard?issue_id=I385CW)| \[21.03] An Error Is Reported During the Installation of mod\_fcgid, Indicating that Warnings and Failures Exist| +| [I38NM0](https://gitee.com/open_euler/dashboard?issue_id=I38NM0)| A Segment Error Occurs When the Same Enclave Is Destroyed Twice| +| [I38NO8](https://gitee.com/open_euler/dashboard?issue_id=I38NO8)| No Error Message Is Displayed When the Same Enclave Is Created Twice| +| [I38PJ8](https://gitee.com/open_euler/dashboard?issue_id=I38PJ8)| Infinite loop in htmlParseChunk found by fuzz| +| [I38QDA](https://gitee.com/open_euler/dashboard?issue_id=I38QDA)| Stack overflow found by honggfuzz| +| [I38SNU](https://gitee.com/open_euler/dashboard?issue_id=I38SNU)| \[21.03] System Services Fail to Be Started Due to SELinux Rules| +| [I38SON](https://gitee.com/open_euler/dashboard?issue_id=I38SON)| Codegen Fails to Display Messages When the Permission on the EDL Directory That Depends on the SDK Is Abnormal| +| [I38T6R](https://gitee.com/open_euler/dashboard?issue_id=I38T6R)| Displayed Message Is Unclear When the EDL File Is Not Specified or Is Added After **--search-path**| +| [I38WFT](https://gitee.com/open_euler/dashboard?issue_id=I38WFT)| Pacemaker Service Fails to Be Started in the Daily Build Version of openEuler 21.03, Which Can Be Resolved After the libqb Software Package Is Upgraded| +| [I38XEC](https://gitee.com/open_euler/dashboard?issue_id=I38XEC)| \[21.03] Rsyslog Service Fails to Be Started After the Minimum Installation Is Complete| +| [I38XHF](https://gitee.com/open_euler/dashboard?issue_id=I38XHF)| \[21.03] irqbalance Process Occasionally Times Out During VM Startup or Restart| +| [I38XPQ](https://gitee.com/open_euler/dashboard?issue_id=I38XPQ)| \[21.03] lm\_sensors Fails to Start or Restart on a Physical Machine or VM| +| [I38XQ2](https://gitee.com/open_euler/dashboard?issue_id=I38XQ2)| \[21.03] \[ARM/x86] Software Package Is Not Downloaded Based on the **dnf --downloadonly** Parameter | +| [I38XRJ](https://gitee.com/open_euler/dashboard?issue_id=I38XRJ)| \[21.03] tcsd.service Fails to Start or Restart on a VM| +| [I38XSC](https://gitee.com/open_euler/dashboard?issue_id=I38XSC)| \[21.03] VM Fails to Start or Restart rdisc| +| [I38ZCF](https://gitee.com/open_euler/dashboard?issue_id=I38ZCF)| \[21.03] \[ARM/x86] Kernel Version Displayed in **/etc/openEuler-latest** Is Different from the Actual Kernel Version | +| [I38ZTE](https://gitee.com/open_euler/dashboard?issue_id=I38ZTE)| \[21.03] File Conflict Occurs When hibernate-jpa-2.0-api-javadoc and hibernate-jpa-2.0-api-help Are Installed| +| [I391F2](https://gitee.com/open_euler/dashboard?issue_id=I391F2)| \[21.03] File Conflict Occurs When freeradius-posgresql and freeradius-mysql Are Installed| +| [I391PG](https://gitee.com/open_euler/dashboard?issue_id=I391PG)| \[21.03] "20.03" Is Displayed on the Boot Screen of the x86/ARM netinst Image and x86 Standard Image| +| [I3927G](https://gitee.com/open_euler/dashboard?issue_id=I3927G)| \[21.03] \[x86] Subpackages Conflict Occurs When NVML, nvml-help and PMDK Are Installed at the Same Time| +| [I392CF](https://gitee.com/open_euler/dashboard?issue_id=I392CF)| \[21.03] Warning Information Is Displayed During Firebird Installation| +| [I392HC](https://gitee.com/open_euler/dashboard?issue_id=I392HC)| \[openEuler 21.03] \[StratoVirt] Second Startup with the Same Configuration Fails and the Return Value Is Still 0 When the **-daemonize** Parameter Is Specified to Start a VM| +| [I392JK](https://gitee.com/open_euler/dashboard?issue_id=I392JK)| \[21.03] \[ARM/x86] Two python3-wheel Problems| +| [I392KT](https://gitee.com/open_euler/dashboard?issue_id=I392KT)| \[openEuler 21.03] \[StratoVirt] Error Message Is Displayed If the iothread Configured for the Device Specified by **-drive** Does Not Exist When a VM Is Started Using the CLI, But the Return Value Is Still 0 | +| [I393DJ](https://gitee.com/open_euler/dashboard?issue_id=I393DJ)| \[21.03] "call trace" Is Displayed in the Log After Minimum ARM Physical Machine Installation Is Performed and the System Is Rebooted| +| [I393JS](https://gitee.com/open_euler/dashboard?issue_id=I393JS)| \[21.03] \[x86] Error Message Is Displayed When the linux-sgx-driver Is Installed| +| [I393MX](https://gitee.com/open_euler/dashboard?issue_id=I393MX)| \[21.03] Error Message Is Displayed During the Installation of iavf| +| [I393NF](https://gitee.com/open_euler/dashboard?issue_id=I393NF)| \[21.03] Failure Reported During the Installation of sgx-dcap-pccs| +| [I393PF](https://gitee.com/open_euler/dashboard?issue_id=I393PF)| \[21.03] sgx-dcap-pccs Source Code Package Queried by Running the **dnf info** Command Is **sgx-dcap-pccs** Instead of **linux-sgx** | +| [I393U6](https://gitee.com/open_euler/dashboard?issue_id=I393U6)| \[21.03] Exception Occurs When fprintd Is Uninstalled| +| [I395AI](https://gitee.com/open_euler/dashboard?issue_id=I395AI)| \[openEuler 21.03] \[StratoVirt] Hot Swap Command Provided by virtio-net in **config\_guidebook.md** Is Incorrect | +| [I396YM](https://gitee.com/open_euler/dashboard?issue_id=I396YM)| \[21.03] Service Status Is "Failed" After authz Is Disabled on a VM| +| [I3980L](https://gitee.com/open_euler/dashboard?issue_id=I3980L)| Default Port Number Needs to Be Changed to 5000 Because 35357 Is No Longer Used| +| [I398PU](https://gitee.com/open_euler/dashboard?issue_id=I398PU)| \[21.03] \[x86/ARM] Error "Can't open PID file /run/irqbalance.pid" Reported by irqbalance| +| [I399FI](https://gitee.com/open_euler/dashboard?issue_id=I399FI)| No Configuration Files Available| +| [I399L1](https://gitee.com/open_euler/dashboard?issue_id=I399L1)| HTTPD Configuration File of Horizon Is Unavailable| +| [I399MW](https://gitee.com/open_euler/dashboard?issue_id=I399MW)| Duplicate spec and package| +| [I39A55](https://gitee.com/open_euler/dashboard?issue_id=I39A55)| Segment Error Occurs When An Enclave Is Created, A Random Number Is Generated, Encrypted, or Decrypted, or a Large Amount of Information Is Printed| +| [I39AEY](https://gitee.com/open_euler/dashboard?issue_id=I39AEY)| \[21.03] \[ARM/x86] Error Is Reported When **powertop2tuned new\_profile\_name --force** Is Executed | +| [I39AFM](https://gitee.com/open_euler/dashboard?issue_id=I39AFM)| \[21.03] Error "could not open '/sys/module/ib\_cm/holders'" Is Reported in System Logs of ARM Physical Machines| +| [I39AH8](https://gitee.com/open_euler/dashboard?issue_id=I39AH8)| \[21.03] \[ARM/x86] Error "startup phases are not supported" Is Reported by systemd-xdg-autostart-generator| +| [I39AJJ](https://gitee.com/open_euler/dashboard?issue_id=I39AJJ)| \[21.03] ARM Physical Machine Reports the Kernel Error "hisi\_sec2 0000:75:00.0: fail to alloc uacce"| +| [I39ALG](https://gitee.com/open_euler/dashboard?issue_id=I39ALG)| \[21.03] \[ARM] Kernel Error Is Reported on the TaiShan 2280 V2 Physical Machine: "cma: cma\_alloc: alloc failed"| +| [I39AM8](https://gitee.com/open_euler/dashboard?issue_id=I39AM8)| \[21.03] \[ARM] Kernel Error Is Reported on the TaiShan 2280 V2 Physical Machine: "swapper/0 page allocation failure"| +| [I39ANR](https://gitee.com/open_euler/dashboard?issue_id=I39ANR)| \[21.03] slpd Service Fails to Be Started Because the Binary File Is Missing When the OpenSLP Is Installed Using the base Source| +| [I39ET0](https://gitee.com/open_euler/dashboard?issue_id=I39ET0)| \[21.03] \[ARM/x86] Error Is Reported When oemaker Constructs the Standard ISO| +| [I39EVJ](https://gitee.com/open_euler/dashboard?issue_id=I39EVJ)| NULL pointer dereference in cil\_fill\_ipaddr| +| [I39GGV](https://gitee.com/open_euler/dashboard?issue_id=I39GGV)| \[21.03] Alarm Is Generated When the VM Starts or Restarts the php-fpm Service| +| [I39H0X](https://gitee.com/open_euler/dashboard?issue_id=I39H0X)| \[21.03] Self-Compiling of Some Packages Fails Because the Maven Script Is Missing in the Source Code| +| [I39HQB](https://gitee.com/open_euler/dashboard?issue_id=I39HQB)| \[21.03] Kernel Fails to Be Compiled Locally| +| [I39IB4](https://gitee.com/open_euler/dashboard?issue_id=I39IB4)| \[21.03] NIC Name Is Displayed as "rename" on the NIC and Host Name Setting Page During the Installation of an x86 Physical Machine| +| [I39IFV](https://gitee.com/open_euler/dashboard?issue_id=I39IFV)| \[21.03] NGINX Service Document Contains "redhat"| +| [I39KLF](https://gitee.com/open_euler/dashboard?issue_id=I39KLF)| Placement HTTPD Configuration Is Unavailable| +| [I39LM9](https://gitee.com/open_euler/dashboard?issue_id=I39LM9)| \[openEuler 21.03-RC1] \[vmtop] Terminal Page Is Refreshed| +| [I39LMD](https://gitee.com/open_euler/dashboard?issue_id=I39LMD)| \[openEuler 21.03-RC1] \[vmtop] Parameter Parsing and Error Information Is Missing| +| [I39MI9](https://gitee.com/open_euler/dashboard?issue_id=I39MI9)| \[21.03] Some SRC Files Fail to Be Compiled Locally Due to the Lack of maven-plugins-pom| +| [I39N4Y](https://gitee.com/open_euler/dashboard?issue_id=I39N4Y)| \[21.03] Local Compilation of Some Source Code Packages Fails Because totem-pl-parser-devel and pkgconfig (totem-plparser) Are Missing| +| [I39NDA](https://gitee.com/open_euler/dashboard?issue_id=I39NDA)| \[21.03] Local Compilation of XSane Fails Due to the Lack of gimp-devel| +| [I39NWJ](https://gitee.com/open_euler/dashboard?issue_id=I39NWJ)| \[21.03] Local Compilation of gnulib Fails| +| [I39OT1](https://gitee.com/open_euler/dashboard?issue_id=I39OT1)| \[21.03] PR Needs to Be Synchronized to the Fix iscsiadm segfault when exiting Branch| +| [I39OZA](https://gitee.com/open_euler/dashboard?issue_id=I39OZA)| \[openEuler 21.03] \[Virtualization] Support for the Zstd Compression Algorithm by Live Migration Is Not Included in the 21.03 Version| +| [I39PTI](https://gitee.com/open_euler/dashboard?issue_id=I39PTI)| Compilation Fails If the Signature Tool and Codegen Are Not Included in the secGear RPM Files| +| [I39Q0V](https://gitee.com/open_euler/dashboard?issue_id=I39Q0V)| \[21.03] "Failed to migrate controller cgroups" Is Displayed When a Common User Is Added and the user@id.service Corresponding to the User Is Started| +| [I39RTQ](https://gitee.com/open_euler/dashboard?issue_id=I39RTQ)| Optimized the Command Output for Database Initialization | +| [I39S7T](https://gitee.com/open_euler/dashboard?issue_id=I39S7T)| No Log Is Recorded When installdep, builddep, and bedepend Are Used to Query a Package That Does Not Exist for Multiple Times| +| [I39SCE](https://gitee.com/open_euler/dashboard?issue_id=I39SCE)| \[21.03] "opening triplet file failed" Is Displayed When Logs Are Queried After strongswan Is Enabled| +| [I39SYV](https://gitee.com/open_euler/dashboard?issue_id=I39SYV)| \[21.03] Local Compilation of Gemini Blueprint Fails Due to the Lack of springframework-context-support| +| [I39T5C](https://gitee.com/open_euler/dashboard?issue_id=I39T5C)| \[21.03] Error Is Displayed During the Startup of the Physical Machine: rdma-init-kernel: Failed to add sysattr match| +| [I39T7I](https://gitee.com/open_euler/dashboard?issue_id=I39T7I)| No Log Is Recorded If a File Does Not Exist During the Querying of Multiple Packages by selfdepend| +| [I39T9E](https://gitee.com/open_euler/dashboard?issue_id=I39T9E)| Compilation Fails If the EDL File Is Not Included When secGear-related RPM Packages Are Installed| +| [I39T9T](https://gitee.com/open_euler/dashboard?issue_id=I39T9T)| \[21.03] \[ARM/x86] System Reports an Error When the systemctl for Starting the rsyslog service and the rsyslogd Command Are Executed at the Same Time| +| [I39THU](https://gitee.com/open_euler/dashboard?issue_id=I39THU)| \[21.03] Error Message Is Displayed During the Startup of an x86 Physical Machine: "rdma-ndd: set Node Description failed on i40iw0"| +| [I39TLM](https://gitee.com/open_euler/dashboard?issue_id=I39TLM)| \[21.03] \[ARM/x86] All Commands in the sos Package Cannot be Executed and an Error Is Displayed Indicating that the **/etc/sos/sos.conf** Configuration File Does Not Exist | +| [I39TTG](https://gitee.com/open_euler/dashboard?issue_id=I39TTG)| \[21.03] \[ARM/x86] An Error Is Reported When the **cppcheck-htmlreport** Command in the cppcheck File Is Executed | +| [I39TTT](https://gitee.com/open_euler/dashboard?issue_id=I39TTT)| "sgx\_sign:command not found" Is Displayed During Compilation After the secGear RPM Package Is Installed. You Need to Run the **source** Command on the sgx Package, Compress the Package and Link It Directly| +| [I39TZM](https://gitee.com/open_euler/dashboard?issue_id=I39TZM)| \[21.03] openEuler-latest-release Fails to Be Compiled Locally| +| [I39U52](https://gitee.com/open_euler/dashboard?issue_id=I39U52)| \[21.03] Duplicate partuids Exist When Parted Partitions Are Used| +| [I39U8C](https://gitee.com/open_euler/dashboard?issue_id=I39U8C)| \[21.03] \[ARM/x86] Integrity Error Is Reported on the Physical Machine: "Unable to open file: /etc/keys/x509\_ima.der (-2)" | +| [I39W2T](https://gitee.com/open_euler/dashboard?issue_id=I39W2T)| \[21.03] Timestamps of the Files in the XFS File System Cannot Be Changed to Later than 2038| +| [I39W4K](https://gitee.com/open_euler/dashboard?issue_id=I39W4K)| Code Generation Tool Needs to Adapt to the secGear/host\_inc Directory Created When the secGear-related RPM Files Are Installed| +| [I39WJX](https://gitee.com/open_euler/dashboard?issue_id=I39WJX)| No Exception Is Captured When a Common User Is Initialized| +| [I39Y6E](https://gitee.com/open_euler/dashboard?issue_id=I39Y6E)| CMake Reports an Error After a secGear RPM File Is Installed| +| [I3A028](https://gitee.com/open_euler/dashboard?issue_id=I3A028)| \[21.03] Service Status Is "Failed" After atuned Is Disabled on a VM| +| [I3A0UX](https://gitee.com/open_euler/dashboard?issue_id=I3A0UX)| \[21.03] Local Compilation of Augeas Fails| +| [I3A0WO](https://gitee.com/open_euler/dashboard?issue_id=I3A0WO)| \[21.03] Local Compilation of Ceph Fails| +| [I3A103](https://gitee.com/open_euler/dashboard?issue_id=I3A103)| \[21.03] Local Compilation of Coreutils Fails| +| [I3A11P](https://gitee.com/open_euler/dashboard?issue_id=I3A11P)| Local Compilation of createrepo\_c Fails| +| [I3A16L](https://gitee.com/open_euler/dashboard?issue_id=I3A16L)| \[21.03] Local Compilation of Devhelp| +| [I3A1AI](https://gitee.com/open_euler/dashboard?issue_id=I3A1AI)| Setting Permission of the Encrypted Signature File and Others to 600| +| [I3A1TC](https://gitee.com/open_euler/dashboard?issue_id=I3A1TC)| \[21.03] \[x86] System Is Suspended and a Crash File Is Generated After Long-term Stability Test Cases Are Executed| +| [I3A2BR](https://gitee.com/open_euler/dashboard?issue_id=I3A2BR)| \[21.03] "Failed to parse PID from file /run/nginx.pid" Is Displayed When Logs Are Queried Using nginx start| +| [I3A3KM](https://gitee.com/open_euler/dashboard?issue_id=I3A3KM)| \[openEuler 21.03] \[Virtualization] cpu\_custom Patch Is Not Integrated Into Kernel 5.10.0-4.0.0| +| [I3A3X0](https://gitee.com/open_euler/dashboard?issue_id=I3A3X0)| \[21.03] "Error setting audit daemon pid (Permission denied)" Is Recorded in the Log After the System Is Installed and Anaconda Is Restarted| +| [I3A50O](https://gitee.com/open_euler/dashboard?issue_id=I3A50O)| \[21.03] Service Fails to Be Started After atune-engine Is Restarted on a VM| +| [I3A554](https://gitee.com/open_euler/dashboard?issue_id=I3A554)| \[openEuler 21.03] \[Virtualization] openEuler 21.03 Occupies a Large Amount of Memory After the ARM Server Is Started| +| [I3A5VT](https://gitee.com/open_euler/dashboard?issue_id=I3A5VT)| \[openEuler 21.03] \[Virtualization] A Small Amount of Memory Leaks During TLS Live Migration| +| [I3A5YC](https://gitee.com/open_euler/dashboard?issue_id=I3A5YC)| \[21.03] Service speech-dispatcher Fails To Be Started| +| [I3A600](https://gitee.com/open_euler/dashboard?issue_id=I3A600)| Command **/usr/sbin/sfcbd** Fails to Run| +| [I3A66H](https://gitee.com/open_euler/dashboard?issue_id=I3A66H)| \[21.03] \[ARM] System Reports an Exception After a Long-term Stability Test Case Is Executed for a Period of Time| +| [I3A6CP](https://gitee.com/open_euler/dashboard?issue_id=I3A6CP)| Two Basic Packages Fail to Be Compiled Locally After the Value of the Macro openEuler Is Changed to **21.03**| +| [I3A6FU](https://gitee.com/open_euler/dashboard?issue_id=I3A6FU)| \[21.03] \[x86/ARM] An Error Is Reported for the **semctl09/proc01/tpci** Case When LTP Is Executed | +| [I3A84O](https://gitee.com/open_euler/dashboard?issue_id=I3A84O)| An Error Is Reported When Flags Is Set to **0** During Enclave Creation | +| [I3A89D](https://gitee.com/open_euler/dashboard?issue_id=I3A89D)| \[21.03] nghttpx.service Fails to Be Started| +| [I3A8GH](https://gitee.com/open_euler/dashboard?issue_id=I3A8GH)| Segment Error Occurs When an Enclave Is Destroyed and Then Recreated| +| [I3A8IJ](https://gitee.com/open_euler/dashboard?issue_id=I3A8IJ)| \[21.03] spice-webdavd.service Fails to Be Restarted| +| [I3A8OS](https://gitee.com/open_euler/dashboard?issue_id=I3A8OS)| \[21.03] vma Service Status Changes to "inactive" After It Is Reloaded| +| [I3A8X9](https://gitee.com/open_euler/dashboard?issue_id=I3A8X9)| \[21.03] Error Logs Are Reported After the named-sdb-chroot,named-chroot and named Services Are Started| +| [I3A8YF](https://gitee.com/open_euler/dashboard?issue_id=I3A8YF)| \[21.03] Error Log "auxpropfunc error no mechanism available" Is Displayed After slapd.service Is Started| +| [I3A8Z8](https://gitee.com/open_euler/dashboard?issue_id=I3A8Z8)| \[21.03] Status of sm-client.service After Start Is: "sm-client.service: Failed to..."| +| [I3A8ZA](https://gitee.com/open_euler/dashboard?issue_id=I3A8ZA)| \[21.03] Error Log "auxpropfunc error no mechanism available" Is Displayed After the sendmail.service Is Started| +| [I3A936](https://gitee.com/open_euler/dashboard?issue_id=I3A936)| \[21.03] Service Status of the bacular-dir, bacular-fd and bacula-sd Services Changes to "failed" After They Are Started and Then Stopped| +| [I3ABFW](https://gitee.com/open_euler/dashboard?issue_id=I3ABFW)| Interface Is Changed Due to Package Upgrade| +| [I3AS0I](https://gitee.com/open_euler/dashboard?issue_id=I3AS0I)| \[RC1] Core Dump Is Triggered When glade Is Executed on the Xfce GUI in the AArch64 Architecture, But It Does Not Occur in the x86\_64 Environment| +| [I3AT8N](https://gitee.com/open_euler/dashboard?issue_id=I3AT8N)| \[21.03] \[ARM/x86] systemd-resolved.service Fails to Be Started and the NFS/SMB Service Fails to Be Restarted After the Server Is Restarted After the SELinux Is Enabled | +| [I3AXP2](https://gitee.com/open_euler/dashboard?issue_id=I3AXP2)| Error Is Reported When the Enclave Is Repeatedly Created, Random Numbers Are Generated, and the Enclave Is Destroyed | +| [I3B0IH](https://gitee.com/open_euler/dashboard?issue_id=I3B0IH)| \[21.03] [x86] Physical Machine Cannot Be Brought Online After CPU 0 Is Brought Offline | +| [I2433Y](https://gitee.com/open_euler/dashboard?issue_id=I2433Y)| \[pkgship] File **/usr/share/doc/pkgship/README.md** Is Not Updated| +| [I38NK4](https://gitee.com/open_euler/dashboard?issue_id=I38NK4)| Segment Error Occurs After the Enclave Is Destroyed| +| [I3A2CO](https://gitee.com/open_euler/dashboard?issue_id=I3A2CO)| sealert Command Is Unavailable After the Installation| +| [I3A8AW](https://gitee.com/open_euler/dashboard?issue_id=I3A8AW)| \[21.03] System Responds Abnormally When You Click a Button During the Installation of an x86 VM| +| [I3AAEM](https://gitee.com/open_euler/dashboard?issue_id=I3AAEM)| \[pkgship] Error Is Reported When Elasticsearch Is Installed and Started Using the Automatic Installation and Deployment Script| +| [I3AEG7](https://gitee.com/open_euler/dashboard?issue_id=I3AEG7)| \[21.03] Matplotlib Fails to Run| +| [I3AHWR](https://gitee.com/open_euler/dashboard?issue_id=I3AHWR)| \[pkgship] Database Initialization Often Fails| +| [I3AITX](https://gitee.com/open_euler/dashboard?issue_id=I3AITX)| \[21.03] Source Information Queried Using **dnf info apache-zookeeper** Is Inconsistent with the Source Package Name | +| [I3AIVF](https://gitee.com/open_euler/dashboard?issue_id=I3AIVF)| \[21.03] Failure Message Is Displayed When the Mailman Is Uninstalled| +| [I3AIZP](https://gitee.com/open_euler/dashboard?issue_id=I3AIZP)| \[openEuler 21.03] Error Message Is Displayed When the Kernel RPM Fails to Be Installed, Indicating that Headers Are Required| +| [I3AJ2L](https://gitee.com/open_euler/dashboard?issue_id=I3AJ2L)| \[pkgship] Error Is Reported During Command Execution When **init\_conf\_path** in the Configuration File Is Set to a Non-YAML File | +| [I3AJ33](https://gitee.com/open_euler/dashboard?issue_id=I3AJ33)| \[21.03] NIC Is Not Enabled and No IP Address Is Available After the System Is Started| +| [I3AJ36](https://gitee.com/open_euler/dashboard?issue_id=I3AJ36)| \[pkgship] Code Exception Occurs When the Initialization Command Specifies a File Path that Does Not Exist| +| [I3AJ5Q](https://gitee.com/open_euler/dashboard?issue_id=I3AJ5Q)| \[21.03] Service lvm2.pvscan Reports an Error Because the System Installed on the RAID Disk Cannot Be Identified| +| [I3AJZ3](https://gitee.com/open_euler/dashboard?issue_id=I3AJZ3)| \[21.03] spice-webdavd Fails to Be Started Due to the Lack of the Avahi Dependency Package| +| [I3AK1K](https://gitee.com/open_euler/dashboard?issue_id=I3AK1K)| \[pkgship] Initialized Databases Are Not Sorted Alphabetically When the Configured Database Priorities Are the Same| +| [I3AKM2](https://gitee.com/open_euler/dashboard?issue_id=I3AKM2)| \[21.03] \[x86/ARM] **mount -t cgroup -o memory ltp\_cgroup /dev/cgroup/** Fails to Be Executed After the **/dev/cgroup** Directory Is Created | +| [I3AKUR](https://gitee.com/open_euler/dashboard?issue_id=I3AKUR)| \[openEuler 21.03] \[iSCSI] Error Message "Unknown driver'iscsi'" Is Displayed When network\_disk Is Started in the New Version| +| [I3ALZ6](https://gitee.com/open_euler/dashboard?issue_id=I3ALZ6)| \[openEuler 21.03] \[I/O Suspension] Foolproof Is Not Set and the VM Can Still Be Started Using the QEMU Command When I/O Suspension Is Configured and **retry\_interval** and **retry\_timeout** Are Set to -1| +| [I3AM39](https://gitee.com/open_euler/dashboard?issue_id=I3AM39)| \[openEuler 21.03] Core Dump Fails Using the **virsh dump** Command Immediately After a VM Is Started| +| [I3AM4T](https://gitee.com/open_euler/dashboard?issue_id=I3AM4T)| \[openEuler 21.03] Memory Information Is Missing from the Cgroup Information of the QEMU Process| +| [I3AMMG](https://gitee.com/open_euler/dashboard?issue_id=I3AMMG)| \[openEuler 21.03] Setting **emulator\_quota** to **18446744073709551** Fails| +| \[[I3AMTA](https://gitee.com/open_euler/dashboard?issue_id=I3AMTA)| \[pkgship] Elasticsearch Times Out When the openEuler 20.09 Database Is Initialized| +| [I3AMVH](https://gitee.com/open_euler/dashboard?issue_id=I3AMVH)| \[21.03] \[ARM/x86] Some Services Fail to Be Started After SELinux Is Enabled | +| [I3AMW5](https://gitee.com/open_euler/dashboard?issue_id=I3AMW5)| \[pkgship] Interaction Is Canceled During Automatic Redis/Elasticsearch Installation and Deployment| +| [I3AN14](https://gitee.com/open_euler/dashboard?issue_id=I3AN14)| \[pkgship] System Should Prompt the User to Start the pkgship Service Instead of the uWSGI Service When the User Queries a Service That Is Not Started| +| [I3ANFP](https://gitee.com/open_euler/dashboard?issue_id=I3ANFP)| \[pkgship] Initialization Using the Local Repo Source that Does Not Exist Is Successful| +| [I3AP8U](https://gitee.com/open_euler/dashboard?issue_id=I3AP8U)| \[pkgship] **-install** and **-build** Parameters Cannot Be Transferred at the Same Time During pkgship bedepend Query| +| [I3AR58](https://gitee.com/open_euler/dashboard?issue_id=I3AR58)| \[21.03] \[x86/ARM] Installed LXCFS Service Fails to Be Started Due to the Lack of the Module to Load FUSE| +| [I3AR6K](https://gitee.com/open_euler/dashboard?issue_id=I3AR6K)| \[21.03] \[ARM/x86] Parameter **-q** of radeapclient Is Incorrect| +| [I3ARDX](https://gitee.com/open_euler/dashboard?issue_id=I3ARDX)| \[pkgship] Message Is Displayed Indicating that the Local pkgship Service Needs to be Started When a Client Sends a Request to Query the Server| +| [I3ARHT](https://gitee.com/open_euler/dashboard?issue_id=I3ARHT)| \[pkgship] System Falsely Displays a Message Indicating that the Service is Started When the Remote Redis Cannot Be Accessed| +| [I3ARNO](https://gitee.com/open_euler/dashboard?issue_id=I3ARNO)| \[21.03] Formatting of the mkfs.ext3 1.1 TB Disk of a Physical Machine Is Stuck| +| [I3AROU](https://gitee.com/open_euler/dashboard?issue_id=I3AROU)| \[pkgship] There Is No Traffic Control Measure for Local Query Accesses| +| [I3ART8](https://gitee.com/open_euler/dashboard?issue_id=I3ART8)| \[pkgship] Path in the Log Dump File Is Not Changed Accordingly After the Service Log Path Is Changed and the Service Is Started| +| [I3ARZH](https://gitee.com/open_euler/dashboard?issue_id=I3ARZH)| \[pkgship] Deleted **log\_name** in the Configuration File Takes Effect After It Is Manually Added and Assigned with a Value| +| [I3ASPJ](https://gitee.com/open_euler/dashboard?issue_id=I3ASPJ)| \[openEuler 21.03] \[Virtualization] Compression Level Range That Can Be Set for Zstd Compression Migration Is Inconsistent with that Described in the Document| +| [I3AUO2](https://gitee.com/open_euler/dashboard?issue_id=I3AUO2)| Using **kexec -l** to Add **cpuparkmem** to Reserve Memory Fails When **cpuparkmem** Is Not Added in the Baseline Version| +| [I3AVDX](https://gitee.com/open_euler/dashboard?issue_id=I3AVDX)| \[pkgship] Service Fails to Be Started When **query\_ip\_addr** Is Set to an IP Address That Does Not Exist| +| [I3AVO6](https://gitee.com/open_euler/dashboard?issue_id=I3AVO6)| \[21.03] ARM VM Reports the Following Kernel Error: "ERROR: Endpoint drop flag = 0, add flag = 1..."| +| [I3AW41](https://gitee.com/open_euler/dashboard?issue_id=I3AW41)| \[pkgship] Code Exception Is Thrown in the Command Output When an Invalid Address Is Configured for **remote\_host**| +| [I3AWPM](https://gitee.com/open_euler/dashboard?issue_id=I3AWPM)| \[21.03] ARM Kernel Does Not Support Files Cgroup| +| [I3AX0D](https://gitee.com/open_euler/dashboard?issue_id=I3AX0D)| **-q** Occasionally Fails to Load the Kernel When the Kernel Is Replaced Repeatedly Using **-q** and **-l** Alternately | +| [I3AZUU](https://gitee.com/open_euler/dashboard?issue_id=I3AZUU)| Account Is Not Locked If a User Enters Incorrect Login Passwords for Three Consecutive Times| +| [I3AZYM](https://gitee.com/open_euler/dashboard?issue_id=I3AZYM)| \[21.03 RC2] Error Is Reported When podman stats Is Executed| +| [I3B0ZW](https://gitee.com/open_euler/dashboard?issue_id=I3B0ZW)| sudo File Syntax Is Incorrect and Cannot Be Used| +| [I3B17Q](https://gitee.com/open_euler/dashboard?issue_id=I3B17Q)| \[21.03] Error Message "blk\_update\_request" Is Displayed When the ARM Physical Machine Boots from the USB I/O error| +| [I3B2B2](https://gitee.com/open_euler/dashboard?issue_id=I3B2B2)| \[21.03] Drive Letter Shift Occurs Occasionally Because No Hot Swap Is Performed| +| [I3B3BD](https://gitee.com/open_euler/dashboard?issue_id=I3B3BD)| \[21.03] Kernel Error "hisi\_sec2: Failed to enable PASID" Occurs on a TaiShan 200 (Model 2280) ARM Physical Machine| +| [I3B3G0](https://gitee.com/open_euler/dashboard?issue_id=I3B3G0)| \[pkgship] CLI Throws an Exception and Does Not Process It After the Value of database\_engine\_type in the Configuration File Is Changed| +| [I3B3IP](https://gitee.com/open_euler/dashboard?issue_id=I3B3IP)| \[pkgship] Value Assignment of the **REDIS** Parameter in the Configuration File Is Not Verified| +| [I3B3J7](https://gitee.com/open_euler/dashboard?issue_id=I3B3J7)| Specifications Should Be Provided for Large Memory Encryption and Decryption| +| [I3B48M](https://gitee.com/open_euler/dashboard?issue_id=I3B48M)| \[21.03] \[ARM/x86] Exception Occurs After the System Is Restarted When All Base Image Packages Are Installed and SELinux Is Enabled | +| [I3B4PB](https://gitee.com/open_euler/dashboard?issue_id=I3B4PB)| \[21.03] Kernel Occasionally Reports the Error on the Physical Machine: "usbhid: probe of 1-1.1:1.1 failed with error -110"| +| [I3B4VE](https://gitee.com/open_euler/dashboard?issue_id=I3B4VE)| \[ARM] \[21.03] kexec-related Logs Are Not Recorded During the nvwa Operation| +| [I3B4XH](https://gitee.com/open_euler/dashboard?issue_id=I3B4XH)| \[ARM] \[21.03] Method of Modifying the Service File Configuration Is Improper if the Port Needs to Be Changed During the nvwa Operation| +| [I3B4XU](https://gitee.com/open_euler/dashboard?issue_id=I3B4XU)| \[ARM] \[21.03] Restoration Using nvwa Update Fails If PID Is Occupied| +| [I3B4ZE](https://gitee.com/open_euler/dashboard?issue_id=I3B4ZE)| \[ARM] \[21.03] Service nvwa Needs to Support Configuration Update During Restart| +| [I3B514](https://gitee.com/open_euler/dashboard?issue_id=I3B514)| \[21.03] Kernel Error Occurs on an x86 Physical Machine: "xhci\_hcd: ERROR: unexpected command completion code 0x11"| +| [I3B5Z4](https://gitee.com/open_euler/dashboard?issue_id=I3B5Z4)| \[21.03] Field "20.03" Is Found in the Quick Start Document| +| [I3B60G](https://gitee.com/open_euler/dashboard?issue_id=I3B60G)| \[21.03] Corresponding Image Is Missing| +| [I3B85Z](https://gitee.com/open_euler/dashboard?issue_id=I3B85Z)| \[21.03] Kernel Error Occurs on an x86 Physical Machine: "ERROR: unexpected command completion code 0x11"| +| [I3B8JG](https://gitee.com/open_euler/dashboard?issue_id=I3B8JG)| \[21.03] Version Information in the Quick Start Document Is Incorrect| +| [I3B8NK](https://gitee.com/open_euler/dashboard?issue_id=I3B8NK)| \[21.03] Chinese Installation Guide Does Not Contain the Corresponding Screenshots| +| [I3BC45](https://gitee.com/open_euler/dashboard?issue_id=I3BC45)| \[21.03] Formatting of the mkfs.ext3 1.1 TB Disk of a Physical Machine Is Stuck| +| [I3BD57](https://gitee.com/open_euler/dashboard?issue_id=I3BD57)| \[21.03] Option Scanning of Security Compilation Is Abnormal| +| [I3BFEO](https://gitee.com/open_euler/dashboard?issue_id=I3BFEO)| Inspector Startup Service File Does Not Contain the --config-file Option and the Default Configuration File Is Missing| +| [I3BGE4](https://gitee.com/open_euler/dashboard?issue_id=I3BGE4)| \[21.03] \[ARM/x86] Parameter **radsqlrelay -P** Is Invalid| +| [I3BMBV](https://gitee.com/open_euler/dashboard?issue_id=I3BMBV)| \[21.03] \[ARM] No Use Option for the nvwa Binary| +| [I3BMHR](https://gitee.com/open_euler/dashboard?issue_id=I3BMHR)| \[21.03] Error Occurs When the samba-tool Command Is Executed| +| [I3BMJF](https://gitee.com/open_euler/dashboard?issue_id=I3BMJF)| \[ARM] \[21.03] Description of the Configuration Items That Users Do Not Need to Pay Attention to in the **server.yaml** File Should be Optimized to Avoid Incorrect Modification| +| [I3BQDY](https://gitee.com/open_euler/dashboard?issue_id=I3BQDY)| Process isgx Is Still Running After the linux-sgx-driver Is Installed and Then Removed| +| [I3BQH3](https://gitee.com/open_euler/dashboard?issue_id=I3BQH3)| \[ARM] \[21.03] Error Message "File \* already exists" Is Displayed When **syatemctl enable nvwa** Is Used| +| [I3BW4X](https://gitee.com/open_euler/dashboard?issue_id=I3BW4X)| \[openEuler 21.03] Error Is Reported When **cpu.cfs\_quota\_us** of cgroup Is Set to **18446744073709551**| +| [I3C6MP](https://gitee.com/open_euler/dashboard?issue_id=I3C6MP)| Spelling Error for Error Message "permission denied" Reported by the Codegen| +| [I3BHF2](https://gitee.com/open_euler/dashboard?issue_id=I3BHF2)| \[ARM] \[21.03] Service nvwa Supports Live Migration Only for the Daemon Process and SELinux Needs To Be Disabled| +| [I3BJIJ](https://gitee.com/open_euler/dashboard?issue_id=I3BJIJ)| \[pkgship] Initialization Progress Bar Keeps Running When the Files Fail to be Verified| +| [I3BMKM](https://gitee.com/open_euler/dashboard?issue_id=I3BMKM)| \[21.03] Error Message Is Displayed During i40e Installation| +| [I3BOC4](https://gitee.com/open_euler/dashboard?issue_id=I3BOC4)| \[openEuler 21.03] Sub-item 502.gcc of SPEC2017 Is Suspended| +| [I3BPQ8](https://gitee.com/open_euler/dashboard?issue_id=I3BPQ8)| \[21.03] Description About User Passwords in the *Administration/Managing Users and User Groups.md* Needs to Be Modified| +| [I3BQ2Z](https://gitee.com/open_euler/dashboard?issue_id=I3BQ2Z)| \[pkgship] Initialization Can Be Performed When the Service Is Disabled| +| [I3BQDX](https://gitee.com/open_euler/dashboard?issue_id=I3BQDX)| \[21.03] Description About Creating a Local Software Repository in the *Administration/Managing Software Packages Through DNF.md* Needs to Be Modified| +| [I3BQE3](https://gitee.com/open_euler/dashboard?issue_id=I3BQE3)| \[21.03] Some Packages Cannot Be Found During Group Installation| +| [I3BQVH](https://gitee.com/open_euler/dashboard?issue_id=I3BQVH)| \[21.03] Description About Extending a VG in the *Administration/Managing Hard Disks Through LVM.md* Needs to Be Modified| +| [I3BQW6](https://gitee.com/open_euler/dashboard?issue_id=I3BQW6)| \[21.03] Deletion of the **/** Partition Fails But the System Prompts That It Is Successfully Deleted| +| [I3BRDW](https://gitee.com/open_euler/dashboard?issue_id=I3BRDW)| \[openEuler 21.03] Device Update Using virsh update-device Fails| +| [I3BT7H](https://gitee.com/open_euler/dashboard?issue_id=I3BT7H)| \[ARM] \[21.03] No Dump Failure Log Is Generated in **/etc/nvwa/running** When the Service Dump Fails| +| [I3BT8M](https://gitee.com/open_euler/dashboard?issue_id=I3BT8M)| \[pkgship] pkginfo Interface Implementation Does Not Comply with the Design Document| +| [I3BTUX](https://gitee.com/open_euler/dashboard?issue_id=I3BTUX)| \[21.03] \[ARM/x86] Words in the Dictionary Can Be Used as the Password, Which Is Inconsistent with the Description in the Official Website Manual| +| [I3BU08](https://gitee.com/open_euler/dashboard?issue_id=I3BU08)| \[21.03] \[ARM/x86] LTP Test Case memcg\_stat\_test/memcg\_use\_hierarchy Fails to Be Executed| +| [I3BU3W](https://gitee.com/open_euler/dashboard?issue_id=I3BU3W)| \[21.03] \[x86/ARM] systemd-xdg-autostart-generator Reports an Error Because the pkcs11-register.desktop File Is Not Deleted| +| [I3BUAQ](https://gitee.com/open_euler/dashboard?issue_id=I3BUAQ)| \[21.03] Local Compilation of Atlas Fails| +| [I3BVKD](https://gitee.com/open_euler/dashboard?issue_id=I3BVKD)| \[21.03] Local Compilation of LAPACK Fails| +| [I3BVX5](https://gitee.com/open_euler/dashboard?issue_id=I3BVX5)| \[21.03] Error Log "Can't open PID file /run/sendmail.pid" Is Displayed After the sendmail.service Is Started| +| [I3BWCP](https://gitee.com/open_euler/dashboard?issue_id=I3BWCP)| \[21.03] \[ARM/x86] LTP semctl09 Fails Due to the glibc Problem | +| [I3BYW0](https://gitee.com/open_euler/dashboard?issue_id=I3BYW0)| \[21.03] Error Log "Unable to render networking" Is Displayed for the cloud-init Service After It Is Installed and the System Is Restarted| +| [I3BYW2](https://gitee.com/open_euler/dashboard?issue_id=I3BYW2)| \[21.03] Local Compilation of secGear Fails| +| [I3C00V](https://gitee.com/open_euler/dashboard?issue_id=I3C00V)| Description in the pkgship Document Is Incorrect| +| [I3C2ES](https://gitee.com/open_euler/dashboard?issue_id=I3C2ES)| \[21.03] Service rasdaemon of the Physical Machine Displays: "rasdaemon: Can't register mce handler" and "diskerror\_eventstore"| +| [I3C2JT](https://gitee.com/open_euler/dashboard?issue_id=I3C2JT)| \[21.03] \[x86] Error Log "Server GSSAPI error" Is Displayed After MariaDB Is Started| +| [I3C5A9](https://gitee.com/open_euler/dashboard?issue_id=I3C5A9)| \[openEuler 21.03] \[ARM] Compilation of libvirt Using the SRC Package Fails| +| [I3C5LD](https://gitee.com/open_euler/dashboard?issue_id=I3C5LD)| Core Occurs After etmemd Is Started and **etmem migrate start** Is Executed| +| [I3CBT0](https://gitee.com/open_euler/dashboard?issue_id=I3CBT0)| \[21.03] \[ARM] kdump Fails to Be Started| +| [I3CBXD](https://gitee.com/open_euler/dashboard?issue_id=I3CBXD)| \[21.03] Error Message Is Displayed When the Subpackage of GRUB2 Is Uninstalled| +| [I3CDJQ](https://gitee.com/open_euler/dashboard?issue_id=I3CDJQ)| \[21.03] Local Compilation Using rpmbuild Fails| +| [I3CEO1](https://gitee.com/open_euler/dashboard?issue_id=I3CEO1)| \[21.03] Local Compilation Using rpmbuild Fails| -- Gitee From 48dafff5408095be6330e6efd947a6ab02f2cdf9 Mon Sep 17 00:00:00 2001 From: q00380213 Date: Mon, 26 Apr 2021 20:23:01 +0800 Subject: [PATCH 27/28] update --- docs/en/docs/Releasenotes/key-features.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/en/docs/Releasenotes/key-features.md b/docs/en/docs/Releasenotes/key-features.md index 641cce59e..361eb40a5 100644 --- a/docs/en/docs/Releasenotes/key-features.md +++ b/docs/en/docs/Releasenotes/key-features.md @@ -28,7 +28,7 @@ In-depth optimization of scheduling, I/O, and memory management has been perform - **KVM virtualization in the RISC-V platform** - **1822 iNICs** -## Kernel Hot Upgrade (NVWA) +## Kernel Hot Upgrade NVWA is an OS vulnerability repair and upgrade solution that implements quick hot replacement of the kernel without affecting services. @@ -54,7 +54,7 @@ Elastic memory, huge page, and system call filtering are added to enhance the pe - **System call filtering**. The device model has been simplified and system call filtering is supported. In the simplest configuration, only 35 system calls are required, effectively reducing the system attack surface. - **Enhanced I/O subsystem**. Multi-channel concurrent I/O capability is supported and the performance is improved. The I/O-QoS capability improves the flexibility and stability of VM I/O traffic management. -## Hierarchical Memory Management Framework (etmem) +## Hierarchical Memory Management Framework Various memory and storage media are supported to expand the system memory capacity and reduce memory usage costs. -- Gitee From 9650248db9e221b6c65782fffc98621f72575659 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=8D=A2=E5=8D=8E=E6=AD=86?= <1539327763@qq.com> Date: Wed, 28 Apr 2021 15:59:56 +0800 Subject: [PATCH 28/28] =?UTF-8?q?=E6=96=B0=E5=A2=9Eselinux=E7=AD=96?= =?UTF-8?q?=E7=95=A5=E7=BA=A6=E6=9D=9F=E7=AB=A0=E8=8A=82?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- "docs/zh/docs/SecHarden/SELinux\351\205\215\347\275\256.md" | 4 ++++ 1 file changed, 4 insertions(+) diff --git "a/docs/zh/docs/SecHarden/SELinux\351\205\215\347\275\256.md" "b/docs/zh/docs/SecHarden/SELinux\351\205\215\347\275\256.md" index 9eb41b743..b68a071ef 100644 --- "a/docs/zh/docs/SecHarden/SELinux\351\205\215\347\275\256.md" +++ "b/docs/zh/docs/SecHarden/SELinux\351\205\215\347\275\256.md" @@ -63,4 +63,8 @@ openEuler默认开启SELinux，且默认模式为enforcing，用户可以通过 Max kernel policy version: 31 ``` +## SELinux策略约束 +SELinux是一个策略集中式的强制访问控制安全机制，selinux-policy会为操作系统中常用软件指定规则，因此部分软件的使用会受到一些约束，对于这些受到约束的软件，用户可以在关闭SELinux的情况下使用，如果需要在开启SELinux的情况下使用，可能需要进行规则适配。例如： + +- 使用freeradius连接sqlite，SELinux策略限制了sqlite数据库文件需要位于/var/lib/radiusd目录下，且SELinux标签为radiusd_var_lib_t。如果用户想将数据库文件放在其他位置，需要自行适配规则。 -- Gitee