Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

engine: Remove taa-no from Secure Skylake Server #837

Merged
merged 1 commit into from
Apr 21, 2023

Commits on Apr 20, 2023

  1. engine: Remove taa-no from Secure Skylake Server

    The host with Secure Intel Icelake Server Family become non operational
    because it does not provide "taa-no" CPU feature even though the
    following command indicates that the host is not vulnerable.
    
    cat /sys/devices/system/cpu/vulnerabilities/tsx_async_abort
    Not affected
    
    It is possible that this flag is not reported on systems that
    are not vulnerable anymore. We disable TSX in our CPU definition
    (we use Icelake-Server-noTSX) so it is not a security risk if we leave
    the requirement for "taa-no" CPU feature.
    
    Bug-Url: https://github.com/oVirt/ovirt-engine/issues/2184623
    Signed-off-by: Lucia Jelinkova <ljelinko@redhat.com>
    ljelinkova committed Apr 20, 2023
    Configuration menu
    Copy the full SHA
    db7480d View commit details
    Browse the repository at this point in the history