Problems using PaloAlto VM-Series with version 5.3

[srinath]

We are having some problems with ver 5.3 when trying to boot PaloAlto VM-Series firewall (8.1.0), it refuses to start with the new version. (kernel panic)
Downgrading pve-qemu-kvm to the previous version 2.11.2-1 made it work again.
I tested the same image on a ubuntu 18.04 with qemu-kvm 2.12 and it works fine.

* I've used PA VM on Proxmox for a while now, this is the first time we have had issues.

 

[Alwin]

Well, it seems that with 8.1.0 neither Debian as host nor qem-kvm 2.12 is supported. Or Ubuntu 18.04 for that matter.
https://www.paloaltonetworks.com/do...-series-on-kvm-requirements-and-prerequisites

Besides that, please be more specific and share with us the stacktrace of the kernel and any relevant journal/syslog message.

 

[srinath]

I'll try me my best capture the error. Those are "appliances" and once that happens the VM reboots automatically. (boot loop)

 

[srinath]

I had to record the screen to be able to capture this that is shown in a split of a second and then disappears:

 

[srinath]

We've been running it on Proxmox on multiple locations for a while now (we started with Proxmox 4.4)
What are the changes from 2.11 to 2.12 that could cause that ?

* I seems that disabling multi-queue on the NICs (I had it set to 6) also prevents the issue from happening.

Well, it seems that with 8.1.0 neither Debian as host nor qem-kvm 2.12 is supported. Or Ubuntu 18.04 for that matter.
https://www.paloaltonetworks.com/do...-series-on-kvm-requirements-and-prerequisites

Besides that, please be more specific and share with us the stacktrace of the kernel and any relevant journal/syslog message.

 

[Alwin]

The change log from qemu.
https://wiki.qemu.org/ChangeLog/2.12

And our patches on top.
http://download.proxmox.com/debian/.../binary-amd64/pve-qemu-kvm_2.12.1-1.changelog

* I seems that disabling multi-queue on the NICs (I had it set to 6) also prevents the issue from happening.

But this may well go back to the point of PaloAlto's KVM support (old kernel?).