New 2.6.32-3 Kernel in pvetest repository

[tom]

... addressing the latest kernel security issue raised today.
(pve-kernel-2.6.32-3-pve_2.6.32-18_amd64.deb)
we will move this kernel to pve next week.

 

[mccharlet]

Hi,

it's not pssoible to move this kernel now to pve

this bug is very several

best regards

 

[sytry]

Hi,

My server no boot

/bin/sh: can't access tty; job control turned OFF

(initramfs)

i reboot un rescue mod and try update-initramfs -tuk 2.6.32-3-pve

update-initramfs: Generating /boot/initrd.img-2.6.32-3-pve
grep: /proc/modules: No such file or directory
W: Possible missing firmware /lib/firmware/rtl8168d-2.fw for module r8169
grep: /proc/modules: No such file or directory
W: Possible missing firmware /lib/firmware/rtl8168d-1.fw for module r8169
W: mdadm: /etc/mdadm/mdadm.conf defines no arrays.
W: mkconf: MD subsystem is not loaded, thus I cannot scan for arrays.
W: mdadm: failed to auto-generate temporary mdadm.conf file.
W: mdadm: no configuration file available.

feedback off

 

[dietmar]

Do you use software RAID? If so, you need to debug that yourself (it is your setup). The warning about the missing firmware can be ignored.

 

[sytry]

yes i use raid soft...

i fix this error by team ovh

Solution:

-> rebooter en rescue
-> mount ton / sur /mnt
-> for i in proc sys dev; do mount --bind /$i /mnt/$i; done
-> sed -i "s/^MODULES=.*/MODULES=most/g"  /mnt/etc/initramfs-tools/initramfs.conf
-> chroot /mnt/ update-initramfs -vtuk 2.6.32-3-pve
-> umount /mnt/proc /mnt/sys /mnt/dev /mnt
-> reboot sur disque dur

Il semble avoir un bug dans initramfs-tools qui fait que le démarrage
ne s'effectue pas correctement si les modules dans la liste
/etc/initramfs-tools/modules sont activé avant que udev démarre.

Cdlt,
Félix

My kernel and server is up.

thanks, support dietmar... but this kernel it's secure ? or no (root hack)