L1TF CPU bug present - What do I do now ?
by Sreyan Chakravarty
Hi guys,
While booting up I get a scary message saying:
L1TF CPU bug present and SMT on, data leak possible.
Yup you guessed it, I am on an Intel processor, which is in fact quiet old:
Intel(R) Core(TM) i5-6200U CPU
Vulnerability info from the kernel:
cat /sys/devices/system/cpu/vulnerabilities/l1tf
Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable
I am in the process of reading this detailed article about the bug:
https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html
Meanwhile, I wanted to know if any one here has the same problem and
what they did for mitigations.
The scariest thing about this bug, specifically, is that even malicious
VMs pose a threat. May speculative execution burn in hell.
I am no expert on hardware or these types of obscure vulnerabilities so
any advice/tips/help is greatly appreciated.
PS: I thought of going to a kernel mailing list, but am worried that
those "geniuses" would just flame me.
--
Regards,
Sreyan
3 years, 11 months
Error: Failed to download metadata for repo
'rpmfusion-free-updates'
by Patrick Dupre
Hello,
Trying to update a fedora 30 (which has been updated ~ 2 weeks ago), I get
Errors during downloading metadata for repository 'rpmfusion-free-updates':
- Curl error (60): SSL peer certificate or SSH remote key was not OK for https://mirrors.rpmfusion.org/metalink?repo=free-fedora-updates-released-... [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'rpmfusion-free-updates': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://mirrors.rpmfusion.org/metalink?repo=free-fedora-updates-released-... [SSL certificate problem: certificate has expired]
I worked around, and I could not solve the issue.
Can I get some help?
Thanks
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire interdisciplinaire Carnot de Bourgogne
9 Avenue Alain Savary, BP 47870, 21078 DIJON Cedex FRANCE
Tel: +33 (0)380395988
===========================================================================
3 years, 11 months
pause
by Patrick Dupre
Hello,
I can make the machine on pause from the graphics mode (gnome).
How can I do it from a terminal?
Thanks.
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire interdisciplinaire Carnot de Bourgogne
9 Avenue Alain Savary, BP 47870, 21078 DIJON Cedex FRANCE
Tel: +33 (0)380395988
===========================================================================
3 years, 11 months
pm-utils
by Patrick Dupre
Hello,
Is there any package equivalent to pm-utils?
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire interdisciplinaire Carnot de Bourgogne
9 Avenue Alain Savary, BP 47870, 21078 DIJON Cedex FRANCE
Tel: +33 (0)380395988
===========================================================================
3 years, 11 months
Re: (fedora) Re: Upgrade F31 -> F32 ended in freeze
by Jouk Jansen
samuel(a)sieb.net wrote on 22-MAY-2020 19:53:22.14
>On 5/22/20 2:29 AM, Jouk Jansen wrote:
>> dnf system-upgrade log --number=-1
>> .....
>> May 21 15:57:09 vlinder dnf[1839]: texlive-a5comb noarch 9:svn17020.4-19.fc32 >
>> May 21 15:57:09 vlinder dnf[1839]: texlive-abbr noarch 9:svn15878.0-19.fc32 >
>> May 21 16:02:21 vlinder systemd-journald[518]: Suppressed 4319 messages from dnf-system-upgrade.service
>> May 21 16:02:21 vlinder dnf[1839]: Total size: 25 G
>That seems wrong, way too big. Do you have some large packages
>installed from outside Fedora?
That is normal on this system : A lot of packages (i.e. all the games from
Fedora repostories) are installed. In this case it had to download 13684
packages. The upgrade was supposed to delete 531 packeages (mainly python2*)
The upgrade from F30 -> F31 even had more pacakges downloaded. And that one
worked out to be OK.
>> May 21 16:02:21 vlinder dnf[1839]: Downloading Packages:
>> May 21 16:05:08 vlinder kernel: perf: interrupt took too long (3264 > 3131), lowering kernel.perf_event_max_sample_rate to 61000
>> May 21 16:10:48 vlinder dnf[1839]: Running transaction check
>> May 21 16:13:37 vlinder dnf[1839]: Transaction check succeeded.
>> May 21 16:13:37 vlinder dnf[1839]: Running transaction test
>>
>> When I canceled the "upgrade" is was May 22 08.30.00.
>> But that is was "Running transaction test" I already knew
>I was hoping to see an error message or something.
Metoo
Jouk
Pax, vel iniusta, utilior est quam iustissimum bellum.
(free after Marcus Tullius Cicero (106 b.Chr.-46 b.Chr.)
Epistularum ad Atticum 7.1.4.3)
Touch not the cat bot a glove
>------------------------------------------------------------------------------<
Jouk Jansen
joukj(a)hrem.nano.tudelft.nl
Technische Universiteit Delft tttttttttt uu uu ddddddd
Kavli Institute of Nanoscience tttttttttt uu uu dd dd
Nationaal centrum voor HREM tt uu uu dd dd
Lorentzweg 1 tt uu uu dd dd
2628 CJ Delft tt uu uu dd dd
Nederland tt uu uu dd dd
tel. 31-15-2782272 tt uuuuuuu ddddddd
>------------------------------------------------------------------------------<
3 years, 11 months
nVidia: Loading out of tree module taints kernel problem.
by linux guy
Hello fellow Fedorians.
I have everything set up to run nvidia drivers for my GTX 1060. But my
machine loads nouveau instead, due to a tainted kernel message.
I turned off "Secure Boot" in the BIOS and enabled Compatibility Support
Mode - UEFI.
How do I force the use of the nvidia driver over nouveau ?
Thanks
dnf list \*nvidia\*
Installed Packages
akmod-nvidia.x86_64 3:440.82-1.fc32
@rpmfusion-nonfree
kmod-nvidia-5.6.13-300.fc32.x86_64.x86_64 3:440.82-1.fc32
@@commandline
nvidia-settings.x86_64 3:440.82-1.fc32
@rpmfusion-nonfree
xorg-x11-drv-nvidia.x86_64 3:440.82-1.fc32
@rpmfusion-nonfree
xorg-x11-drv-nvidia-cuda-libs.x86_64 3:440.82-1.fc32
@rpmfusion-nonfree
xorg-x11-drv-nvidia-kmodsrc.x86_64 3:440.82-1.fc32
@rpmfusion-nonfree
xorg-x11-drv-nvidia-libs.i686 3:440.82-1.fc32
@rpmfusion-nonfree
xorg-x11-drv-nvidia-libs.x86_64 3:440.82-1.fc32
@rpmfusion-nonfree
# akmods
Checking kmods exist for 5.6.13-300.fc32.x86_64 [ OK ]
uname -a
Linux bigboy 5.6.13-300.fc32.x86_64 #1 SMP Thu May 14 22:51:37 UTC 2020
x86_64 x86_64 x86_64 GNU/
dmesg | grep nvidia
[ 4.945685] nvidia: loading out-of-tree module taints kernel.
[ 4.945827] nvidia: module license 'NVIDIA' taints kernel.
[ 4.971124] nvidia: module verification failed: signature and/or
required key missing - tainting kernel
[ 5.034533] nvidia-nvlink: Nvlink Core is being initialized, major
device number 237
NVRM: nouveau, rivafb, nvidiafb or rivatv
[ 5.036086] nvidia-nvlink: Unregistered the Nvlink Core, major device
number 237
[ 5.168304] nvidia-nvlink: Nvlink Core is being initialized, major
device number 237
NVRM: nouveau, rivafb, nvidiafb or rivatv
[ 5.168962] nvidia-nvlink: Unregistered the Nvlink Core, major device
number 237
[ 25.343678] nvidia-nvlink: Nvlink Core is being initialized, major
device number 237
NVRM: nouveau, rivafb, nvidiafb or rivatv
[ 25.358661] nvidia-nvlink: Unregistered the Nvlink Core, major device
number 237
[ 25.444355] nvidia-nvlink: Nvlink Core is being initialized, major
device number 237
NVRM: nouveau, rivafb, nvidiafb or rivatv
[ 25.444678] nvidia-nvlink: Unregistered the Nvlink Core, major device
number 237
[ 46.628271] nvidia-nvlink: Nvlink Core is being initialized, major
device number 237
NVRM: nouveau, rivafb, nvidiafb or rivatv
[ 46.628573] nvidia-nvlink: Unregistered the Nvlink Core, major device
number 237
3 years, 11 months
Coy DVD's -
by Bob Goodwin
I have a set of instructional DVDs the I am asked to copy to thumb USB
drive. Can it be done with Fedora 31, the computer with a DVD drive and
if possible what is the best program to use. They are made for a Windows
computer and of course will not function in Linux. I can see the files
and run videos etc but the lessons will not run in my Linux computer.
I tried k3b but it did not even see the disk? Anyway what can I do to
put them on a 64 GB flash drive?
Bob
--
Bob Goodwin - Zuni, Virginia, USA
http://www.qrz.com/db/W2BOD
FEDORA-32/64bit LINUX XFCE Fastmail POP3
3 years, 11 months
After fresh F32 installation, Areca raid disk cannot be seen
by Gian Luca Franceschin
I made a fresh F32 installation. During install I saw the Areca raid disk. After installation the raid disk is no more available. After speaking with Areca Taiwan I started testing. I installed F28 and all was working properly. The raid disk was accessible. I upgraded from F28 to F29 and the raid disk was no more accessible. The controller is recognized by F29 but not the raid disk. The same with F30, F31 and F32. Any suggestion?
3 years, 11 months
Fedora 32 and Wireshark
by Earl Ramirez
Dear All,
After upgrading from Fedora 31 to 32 I am no longer able to launch
wireshark as it fails trying to find local interfaces. Based on my
troubleshooting it appears to be an issue with permission, the
application was reinstalled and downgraded; however, that did not
resolve the issue. A new account was created and I still encountered
Wireshark crashing while trying to find local interfaces.
I concluded that it is indeed a permission issue because I can launch
the application with the root account or by calling sudo wireshark from
the terminal. My login is a member of the wireshark group and I can see
the local interfaces if I execute /usr/bin/dumpcap -D or
/usr/bin/wireshark -D. At the same time if I execute sudo -u <username>
wireshark the application works. Has anyone experience this behaviour
after upgrading from F31 to F32? Additionally, I installed a vanilla
F32 VM and and wireshark worked but after updating it I am seeing the
same behaviour.
--
Earl Ramirez <earlaramirez(a)gmail.com>
3 years, 11 months
After fresh F32 installation, Areca raid disk cannot be seen
by Gian Luca Franceschin
During the installation I saw the Areca raid disk but after installation it was not visible. The controller was recognized but no disks attached to it. I spoke with Areca Taiwan and I started testing. I first installed F28 and it worked properly. The raid disk was recognized and accessible. I upgraded to F29 and the raid disk was no t visible anymore. The same with F30, F31 and F32. Did someone had the same problem?
Any suggestion?
3 years, 11 months
