May 2021 - Dev - mailweb.openeuler.org

南向兼容性sig组例会
by openEuler conference 24 May '21

24 May '21

1 0

sig-Gatekeeper双周例会
by openEuler conference 24 May '21

24 May '21

1 0

【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/20 release评审通知
by xiasenlin 24 May '21

24 May '21

openEuler 20.03 LTS SP1 Update 20210520 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月24日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210519 代码冻结： 20210519 转测试时间：20210520 版本发布： 20210524 本次更新主要涉及：qemu、ruby等包的CVE修复以及libvirt的新特性IO悬挂，需要与qemu一起发布；修复cve：9个 CVE清单： CVE-2021-3416 6 次要 src-openEuler/qemu CVE-2021-3409 5.7 次要 src-openEuler/qemu CVE-2021-3392 3.2 不重要 src-openEuler/qemu CVE-2019-14562 5.5 次要 src-openEuler/edk2 CVE-2020-25085 5 次要 src-openEuler/qemu CVE-2021-20208 6.1 次要 src-openEuler/cifs-utils CVE-2021-28965 7.5 主要 src-openEuler/ruby CVE-2021-20095 7.8 主要 src-openEuler/babel CVE-2020-18032 9.8 严重 src-openEuler/graphviz 涉及新增libvirt特性一个 From: xiasenlin Sent: Friday, May 14, 2021 6:15 PM To: 'release(a)openeuler.org' <release(a)openeuler.org>; 'qa(a)openeuler.org' <qa(a)openeuler.org>; 'sa-announce(a)openeuler.org' <sa-announce(a)openeuler.org>; 'dev(a)openeuler.org' <dev(a)openeuler.org> Cc: Guoge(JVM) <ge.guo(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; Chenzhendong (alex) <alex.chen(a)huawei.com>; Liyiting <liyiting(a)huawei.com>; Mingpei <mingpei(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; guoxiaoqi <guoxiaoqi2(a)huawei.com> Subject: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/14 release评审通知 openEuler 20.03 LTS SP1 Update 20210430 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月15日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210515 代码冻结： 20210512 转测试时间：20210514 版本发布： 20210515 本次更新主要涉及：golang、xstream等；修复cve：25个 CVE清单： CVE-2021-29425 次要 src-openEuler/apache-commons-io CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-27506 次要 src-openEuler/clamav CVE-2021-3448 不重要 src-openEuler/dnsmasq CVE-2021-29470 次要 src-openEuler/exiv2 CVE-2021-29457 主要 src-openEuler/exiv2 CVE-2021-29458 次要 src-openEuler/exiv2 CVE-2021-28650 次要 src-openEuler/gnome-autoar CVE-2021-27918 主要 src-openEuler/golang CVE-2021-28168 次要 src-openEuler/jersey CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-15169 次要 src-openEuler/rubygem-actionview CVE-2021-21349 主要 src-openEuler/xstream CVE-2021-21350 严重 src-openEuler/xstream CVE-2021-21348 主要 src-openEuler/xstream CVE-2021-21351 严重 src-openEuler/xstream CVE-2021-21341 主要 src-openEuler/xstream CVE-2021-21342 严重 src-openEuler/xstream CVE-2021-21343 主要 src-openEuler/xstream CVE-2021-21344 严重 src-openEuler/xstream CVE-2021-21345 严重 src-openEuler/xstream CVE-2021-21346 严重 src-openEuler/xstream CVE-2021-21347 严重 src-openEuler/xstream From: guoxiaoqi Sent: Friday, May 14, 2021 9:34 AM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; xiasenlin <xiasenlin1(a)huawei.com<mailto:xiasenlin1@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试新增依赖软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler src-openEuler/mxparser 依赖 SP1 不涉及 openEuler src-openEuler/xmlpull 依赖 SP1 不涉及 openEuler From: guoxiaoqi Sent: Thursday, May 13, 2021 9:10 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试更新，xstream不涉及接口变更。thrift涉及变更，本次版本暂时不发布软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base… From: guoxiaoqi Sent: Thursday, May 13, 2021 3:39 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: 【20.03-LTS-SP1 512 update周版本】启动测试请启动openEuler-20.03-LTS-SP1 2021年512 周版本测试软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 涉及接口变更 openEuler src-openEuler/thrift CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base…

1 0

Re: Compiler SIG双周例会【会议纪要】
by hedongbo 20 May '21

20 May '21

会议纪要 MEETING MINUTES 主题 Subject Compiler SIG双周例会时间 Date & Time 2021年05月18日星期二 10:00-11:00 地点 Location 线上会议与会者 Attendees 郭建兴（麒麟），徐赫（麒麟），李城宏（麒麟），沙文娜（麒麟），孟朝明（麒麟），刘吉林（麒麟），liwenchong(麒麟)，xiaozai(麒麟)，郭炳荣（金蝶），郭建军（保兰德），Erik Yuan(ARM), 刘金刚（华为），郭歌（华为），王篁（华为），王坤（华为），张高峰（华为），张云博（华为），贺东博（华为）纪要者 Note Taker 贺东博议题一：如何基于OpenJDK制作自己的发行版(郭歌) 1. 介绍OpenJDK的一些基本知识 2. 介绍如何制作单包发行版 3．介绍如何制作rpm包发型吧 4．回答麒麟同学关于制作发行的一些疑问议题二：从0到1构建BishengJDK-rpm包(基于openeuler和树莓派)（张云博） 1．分享如何基于openeuler上的bishengjdk源码构建出来rpm包，以及构建过程中常遇到的坑。 2．对相关的疑问进行解答分享资料见附件。会议录屏已自动上传至B站: https://www.bilibili.com/video/BV1w44y1r7jq?from=search&seid=69299028430501… From: openEuler conference [mailto:public@openeuler.io] Sent: Friday, May 14, 2021 5:57 PM To: dev(a)openeuler.org Subject: [Dev] Compiler SIG双周例会您好！ openEuler Compiler SIG 邀请您参加 2021-05-18 10:00 召开的ZOOM会议(自动录制) 会议主题：Compiler SIG双周例会会议内容：1. bishengjdk发行介绍&如何做发行 2. 构建bishengjdk rpm包常见的坑欢迎上报议题！会议链接：https://us06web.zoom.us/j/89840429300?pwd=Tk5GL3FjdFBpMTlzc1ExODJzT0tJZz09 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com的ID 更多资讯尽在：https://openeuler.org/zh/ Hello! openEuler Compiler SIG invites you to attend the ZOOM conference(auto recording) will be held at 2021-05-18 10:00, The subject of the conference is Compiler SIG双周例会, Summary: 1. bishengjdk发行介绍&如何做发行 2. 构建bishengjdk rpm包常见的坑欢迎上报议题！ You can join the meeting at https://us06web.zoom.us/j/89840429300?pwd=Tk5GL3FjdFBpMTlzc1ExODJzT0tJZz09. Note: You are advised to change the participant name after joining the conference or use your ID at gitee.com. More information<https://openeuler.org/zh/>

1 0

【会议纪要】Rust安全编译选项遗留
by yanglijin 20 May '21

20 May '21

SP2版本stratovirt扫描安全编译选项有缺失，定位出来是依赖的rust工具链升级导致的。结论：stratovirt安全编译选项问题遗留，不影响SP2版本发布 1、安全编译选项实施指导规范适用于C、C++,针对rust无细则 2、升级rust后引入编译选项缺失原因未知遗留任务： 1、rust的安全编译选项细则――安全委员会 2、分析为何升级会导致缺失栈保护选项和Fortify Source两个安全编译选项问题

1 0

【会议纪要】SIG-compliance双周例会
by yangcong 19 May '21

19 May '21

SIG-compliance双周例会：时间：2021年5月18日上午10:00-11:00 与会者（请与会者在下面添加您的姓名）：杨聪、李自、郑志鹏、杨昭、王悦良 SIG-compliance组6月1日例会轮值主持人：郑志鹏议题（描述-发起人）： 1.“张飞”（license扫描工具）门禁与openeuler社区CI工具jenkins的集成流程中，非SPDX（Software Package Data Exchange，一种记录有关软件许可信息的文件格式）规范的license如何处理责任人：杨聪 2.合规SIG组例会分享的“张飞”（license扫描）工具使用责任人：杨聪 3.scantist工具与其它license扫描和漏洞扫描工具优缺点对比分享责任人：李冠庆 4.代码血缘关系分析报告确认系统试用前演示交流责任人：王小军会议纪要： 1.“张飞”（license扫描工具）门禁与openeuler社区CI工具jenkins的集成流程中，非SPDX（Software Package Data Exchange，一种记录有关软件许可信息的文件格式）规范的license如何处理责任人：杨聪 SPDX（Software Package Data Exchange）是用于传达软件物料清单信息（包括组件、许可证、版权和安全参考）的开放标准。张飞扫描工具采用 SPDX 报告许可证信息：以 SDPX 格式提供许可证信息，以尽量减少任何可能的错误，并标准化报告信息的方式。因此，扫描结果中，如果license信息错误，扫描工具不能给出SPDX格式规范或者给出unknown-license-reference。目前已经扫描openEuler仓库10+款较为典型的项目，发现对于license信息匹配不上的会提示unknown-license-reference，但均是系统误报。所以对于这种提示信息的处理分为三步：（1）门禁系统给出模糊匹配信息，判断这款license与哪款license信息最相似，然后再确认是否是license文本信息有误；（2）确认是否是系统误报，可查看该issue下是否有相关误报信息，如果没有相关误报信息，请在此issue下进行回复；（3）若license信息均不属于上述两种情况，提交issue关联compliance-sig组，由sig组分析后给出建议并添加到张飞license数据库 2.合规SIG组例会分享的“张飞”（license扫描）工具使用责任人：杨聪现在提供源码、docker镜像等形式使用工具，详细使用说明、使用链接可参考https://gitee.com/compliance-tools/com…. 另外，该系统也提供了门禁集成的功能，详细部署到Jenkins流程的代码及配置可参考https://gitee.com/compliance-bot/j… 遗留问题：由于相关责任人时间冲突，可在下次例会进行分享 1.scantist工具与其它license扫描和漏洞扫描工具优缺点对比分享责任人：李冠庆 2.代码血缘关系分析报告确认系统试用前演示交流责任人：王小军 | | yangcong | | yangcong_hit(a)163.com | 签名由网易邮箱大师定制

1 0

【会议纪要】sig-release-management双周例会
by Xuxiaosong 19 May '21

19 May '21

轮值主持人：许小松下次主持人：胡峰会议时间：2021年5月19日 14:30－16:30 会议地点：sig电话会议议题一：openEuler 20.03 LTS SP2版本进展介绍：许小松 1、openEuler 20.03 LTS SP2已完成第一轮转测试，正在进行第二轮测试； 2、第三轮转测试时间5.24日，openEuler 20.03 LTS SP2版本需求合入情况和转测试，发布计划详见： https://gitee.com/openeuler/release-management/blob/master/openEuler-20.03-… 议题二：openEuler 21.09创新版本需求搜集计划介绍：胡峰 1、openEuler 21.09创新版本需求收集时间； 2、openEuler 21.09创新版本版本计划介绍； 3、openEuler 21.09创新版本需求填写要求；议题三：为解决xfce声音控制问题引入pavucontrol包：dingwenlong 结论： 1、同意引入pavucontrol包解决声音控制bugfix； 2、代码在5月21日前完成合入验证； From: Xuxiaosong Sent: Monday, May 17, 2021 3:24 PM To: 'tc(a)openeuler.org'; 'dev(a)openeuler.org'; 'release(a)openeuler.org' Subject: [Dev] sig-release-management双周例会欢迎大家申报议题。 From: openEuler conference [mailto:public@openeuler.io] Sent: Monday, May 17, 2021 3:20 PM Subject: [Dev] sig-release-management双周例会您好！ openEuler sig-release-management SIG 邀请您参加 2021-05-19 14:30 召开的ZOOM会议会议主题：sig-release-management双周例会会议链接：https://us06web.zoom.us/j/86057315767?pwd=TTRHUTRaOUwxelhERmQvZVV1UTZ0QT09 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com的ID 更多资讯尽在：https://openeuler.org/zh/ Hello! openEuler sig-release-management SIG invites you to attend the ZOOM conference will be held at 2021-05-19 14:30, The subject of the conference is sig-release-management双周例会, You can join the meeting at https://us06web.zoom.us/j/86057315767?pwd=TTRHUTRaOUwxelhERmQvZVV1UTZ0QT09. Note: You are advised to change the participant name after joining the conference or use your ID at gitee.com. More information<https://openeuler.org/zh/>

1 0

openEuler 20.03 LTS SP2 Test round 2转测试通知
by Xuxiaosong 18 May '21

18 May '21

转测试计划比原计划有1天延期。请相关责任人最晚于2021-5-20前完成特性进展更新为正常状态。 Test round 2版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-20.03-LTS-SP2/openeuler-2021-05-1… 欢迎感兴趣的开发者提前获取验证，对于发现的问题请及时以issue的方式反馈给openEuler社区（里程碑选择openEuler 20.03-LTS-SP2-round-2）。由本次为发布前测试环节，软件版本可能存在重大问题，不建议大规模使用。 Release计划路径 https://gitee.com/openeuler/release-management/blob/master/openEuler-20.03-… 1、本轮转2个特性； no fetur 特性说明 status 1 【openEuler 20.03 LTS SP2】【虚拟化】回合openEuler 21.03，vmtop支持x86<https://gitee.com/openeuler/release-management/issues/I3NLWF?from=project-i…> 【openEuler 20.03 LTS SP2】【虚拟化】QEMU支持qemu-rbd和qemu-ssh 【openEuler 20.03 LTS SP2】【虚拟化】软件模拟超线程支持（HT）【openEuler 20.03 LTS SP2】【虚拟化】回合openEuler 20.09需求：Qemu支持IO悬挂【openEuler 20.03 LTS SP2】【虚拟化】回合openEuler 21.03，vmtop支持x86 Testing 2 openEuler 20.03 LTS SP2支持HA<https://gitee.com/openeuler/release-management/issues/I3N31O?from=project-i…> 支持HA Testing 2、新增和删除包见附件； Test round1已解决问题单40个，未解决的问题单26，详见： https://e.gitee.com/open_euler/issues/list?is%5Bmilestone_id%5D=69297&is%5B… https://e.gitee.com/open_euler/issues/list?is%5Bmilestone_id%5D=116380&is%5… Release plan Stage name Begin time End time key feature collect 2021-03-16 2021-03-31 Develop 2021-03-16 2021-04-26 Kernel freezing 2021-04-16 2021-04-16 Build 2021-04-26 2021-04-30 Test round 1 2021-05-6 2021-05-12 Test round 2（we are here） 2021-05-17 2021-05-21 Test round 3 2021-05-24 2021-05-31 Test round 4 2021-06-03 2021-06-07 Test round 5 2021-06-09 2021-06-11 release 2021-06-28 2021-06-30 Feture list 状态说明：discussion(方案讨论，需求未接受)，developing(开发中)，Testing(测试中)，Reject(未纳入版本) no fetur status sig owner 1 【openEuler 20.03 LTS SP2】【虚拟化】回合openEuler 21.03，vmtop支持x86<https://gitee.com/openeuler/release-management/issues/I3NLWF?from=project-i…> Testing 2 openEuler 20.03-LTS-SP2支持内存分级扩展特性<https://gitee.com/openeuler/release-management/issues/I2C2NI?from=project-i…> Testing storage liuzhiqiang26<https://gitee.com/liuzhiqiang26> 3 openEuler 20.03-LTS-SP2版本集成secgear组件<https://gitee.com/openeuler/release-management/issues/I3JE3U?from=project-i…> Testing sig-confidential-computing chenmaodong<https://gitee.com/chenmaodong> 4 openEuler 20.03 LTS SP2 support OpenStack Rocky discussion sig-openstack @joec88 @liksh @xiyuanwang @huangtianhua 5 openEuler 20.03 LTS SP2支持osinfo软件包<https://gitee.com/openeuler/release-management/issues/I3N30H?from=project-i…> Testing 6 openEuler 20.03 LTS SP2开源openEuler-rpm-config宏定义文件<https://gitee.com/openeuler/release-management/issues/I3N30J?from=project-i…> Testing 7 openEuler 20.03 LTS SP2 支持 compat-openssl10、libzip等<https://gitee.com/openeuler/release-management/issues/I3N30L?from=project-i…> Testing 8 openEuler 20.03 LTS SP2 支持libwbxml、hyperscan<https://gitee.com/openeuler/release-management/issues/I3N30N?from=project-i…> Testing 9 openEuler 20.03 LTS SP2支持microcode_ctl<https://gitee.com/openeuler/release-management/issues/I3N30S?from=project-i…> Testing 10 openEuler 20.03 LTS SP2支持bcc软件包<https://gitee.com/openeuler/release-management/issues/I3N30Q?from=project-i…> Testing 11 openEuler 20.03 LTS SP2支持树莓派<https://gitee.com/openeuler/release-management/issues/I3N30P?from=project-i…> Testing 12 openEuler 20.03 LTS SP2支持1822 HBA卡<https://gitee.com/openeuler/release-management/issues/I3N30V?from=project-i…> Testing 13 openEuler 20.03 LTS SP2支持飞腾2000+/64<https://gitee.com/openeuler/release-management/issues/I3N30W?from=project-i…> Testing 14 openEuler 20.03 LTS SP2支持maildrop和proftpd<https://gitee.com/openeuler/release-management/issues/I3N30X?from=project-i…> Testing 15 openEuler 20.03 LTS SP2支持 iSulad 2.0<https://gitee.com/openeuler/release-management/issues/I3N312?from=project-i…> Testing 16 openEuler 20.03 LTS SP2 A-tune 2.0<https://gitee.com/openeuler/release-management/issues/I3N314?from=project-i…> Testing 17 openEuler 20.03 LTS SP2 支持网络安装<https://gitee.com/openeuler/release-management/issues/I3N315?from=project-i…> Testing 18 openEuler 20.03 LTS SP2 支持 criu组件<https://gitee.com/openeuler/release-management/issues/I3N319?from=project-i…> Testing 19 openEuler 20.03 LTS SP2支持config_acpi_nfit<https://gitee.com/openeuler/release-management/issues/I3N31B?from=project-i…> Testing 20 openEuler 20.03 LTS SP2 虚拟化增强<https://gitee.com/openeuler/release-management/issues/I3N31E?from=project-i…> Testing 21 openEuler 20.03 LTS SP2 支持 UKUI桌面<https://gitee.com/openeuler/release-management/issues/I3N31F?from=project-i…> Testing 22 openEuler 20.03 LTS SP2 支持openGauss<https://gitee.com/openeuler/release-management/issues/I3N31I?from=project-i…> Discussion 23 openEuler 20.03 LTS SP2 支持DDE桌面<https://gitee.com/openeuler/release-management/issues/I3N31J?from=project-i…> Testing 24 openEuler 20.03 LTS SP2 编译器支持openjdk<https://gitee.com/openeuler/release-management/issues/I3N31M?from=project-i…> Testing 25 openEuler 20.03 LTS SP2支持HA<https://gitee.com/openeuler/release-management/issues/I3N31O?from=project-i…> Testing 26 openEuler 20.03 LTS SP2 加速库版本同步<https://gitee.com/openeuler/release-management/issues/I3N31Q?from=project-i…> Testing 27 openEuler 20.03 LTS SP2支持金融领域软件包<https://gitee.com/openeuler/release-management/issues/I3N311?from=project-i…> Testing 28 openEuler 20.03 LTS SP2支持kmod功能<https://gitee.com/openeuler/release-management/issues/I3N30C?from=project-i…> Testing 29 openEuler 20.03 LTS SP2支持华为多路径<https://gitee.com/openeuler/release-management/issues/I3N2XS?from=project-i…> Discussion 30 openEuler 20.03 LTS SP2 CPU核故障在线隔离解决方案<https://gitee.com/openeuler/release-management/issues/I3N36L?from=project-i…> Developing 31 openEuler 20.03 LTS SP2 支持多应用版本构建和发布<https://gitee.com/openeuler/release-management/issues/I3N36K?from=project-i…> Developing 32 openEuler 20.03 LTS SP2 内存UCE故障降级，用户数据保持一致，业务可持续运行<https://gitee.com/openeuler/release-management/issues/I3N36H?from=project-i…> Developing 33 openEuler 20.03 LTS SP2 故障预测框架<https://gitee.com/openeuler/release-management/issues/I3N36F?from=project-i…> Testing 34 openEuler 20.03 LTS SP2 IO_URING全栈使能<https://gitee.com/openeuler/release-management/issues/I3N36C?from=project-i…> Testing 35 openEuler 20.03 LTS SP2 Qemu：虚拟化可靠性和可维护性增强<https://gitee.com/openeuler/release-management/issues/I3N369?from=project-i…> Testing 36 openEuler 20.03 LTS SP2 Qemu：热迁移pro，提升热迁移性能+安全<https://gitee.com/openeuler/release-management/issues/I3N368?from=project-i…> Testing 37 openEuler 20.03 LTS SP2支持StratoVirt：下一代轻量化虚拟化平台<https://gitee.com/openeuler/release-management/issues/I3N364?from=project-i…> Testing 38 【openEuler 20.03 LTS SP2】继承xfce 4.14<https://gitee.com/openeuler/release-management/issues/I3NC3I?from=project-i…> Testing xfce @dillon_chen<https://gitee.com/dillon_chen> 39 【openEuler 20.03 LTS SP2】继承Kubernetes 1.18<https://gitee.com/openeuler/release-management/issues/I3NC5H?from=project-i…> Testing sig-cloudnative @jingxiaolu<https://gitee.com/jingxiaolu> 40 【openEuler 20.03 LTS SP2】继承门禁检查功能<https://gitee.com/openeuler/release-management/issues/I3O08F?from=project-i…> Testing 41 openEuler 20.03-LTS-SP2 集成 kubernetes 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I2BHF4?from=project-i…> Testing 42 openEuler 20.03-LTS-SP2 arm虚拟机支持NMI watchdog<https://gitee.com/openeuler/release-management/issues/I2B4WL?from=project-i…> Testing 43 openEuler 20.03-LTS-SP2 集成 coredns 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I3MXLJ?from=project-i…> Testing 44 【openEuler 20.03 LTS SP2】虚拟机热迁移支持TLS<https://gitee.com/openeuler/release-management/issues/I3IE57?from=project-i…> Testing 45 【kernel-4.19】openEuler kernel nvme 驱动增强<https://gitee.com/openeuler/release-management/issues/I1WGZE?from=project-i…> Testing 46 openEuler 20.03-LTS-SP2 集成 etcd 及其依赖组件<https://gitee.com/openeuler/release-management/issues/I3MXGJ?from=project-i…> Testing 历史转测试版本取用链接 Test round 1版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-20.03-LTS-SP2/openeuler-2021-05-0…

1 0

openEuler第三方镜像源列表上线使用说明/openEuler Third-Party Mirror Source List
by 随心 18 May '21

18 May '21

hello all: 为方便大家下载和使用openEuler的发布件，基础设施团队拓展了openEuler的第三方镜像源，目前已经上线包括中国&俄罗斯在内的9个Repo源，大家可以在官方页面[1]查找使用，也可以在下载页面[2]点击站点选择，已20.03-LTS-SP1为例[3]，选择距离最近的镜像源下载使用；同时也欢迎大家帮助我们拓展更多的openEuler第三方镜像源。 To facilitate users to download and use openEuler release files, the infrastructure team has expanded the third-party mirror source of openEuler. Currently, nine Repo sources, including those in China and Russia, have been launched, You can search for and use the mirror source on the official page [1] or select a site on the download page [2]. For example, 20.03-LTS-SP1 [3], select the closest mirror source to download. You are also welcome to help us develop more openEuler third-party mirror sources. [1]: https://openeuler.org/zh/mirror/list/ [2]: https://openeuler.org/zh/download/ [3]: https://openeuler.org/zh/mirror/select/?version=20.03-LTS-SP1

1 0

【会议纪要】RE: [Virt] virt sig例会-20210514
by Chenqun (kuhn) 17 May '21

17 May '21

时间：2021年4月23日 14：15 - 15：45 参会人员来自：麒麟、统信、品高、华云、移动、电信、浪潮、申威、Intel、华为等居多公司成员及个人参与者（详见与会人员信息） · 2021-05-14会议纪要： * openEuler 20.03 LTS SP2需求进展介绍当前openEuler 20.03 LTS SP2版本新增Feature 9个，代码均已经合入完成，当前已开展测试过程中。各个Feature说明：https://gitee.com/openeuler/qemu/wikis/openEuler%2020.03%20LTS%… * qemu 4.2特性回合需求介绍介绍了 qemu 4.2特性回合到openEuler 社区背景：当前有部分客户已经使用Centos 8.1版本（qemu 4.2），期望切换到openEuler版本后原qemu 4.2相关Feature不丢失。 qemu 4.2相对qemu 4.1发布Feature 总计32个，其中有13个非x86及arm架构。剩余19个中，已经回合openEuler版本8个，待回合11个。针对剩余的11个待回合Feature，各个开发者可以自主认领，认领后在qemu仓库建立ISSUE，回合代码。回合需求列表：https://gitee.com/openeuler/qemu/wikis/qemu%204.2%20Feature%E5%9B%9E… * 分享了StratoVirt之快速冷启动bootloader技术视频连接：https://www.bilibili.com/video/BV1Ef4y1Y7HK 本主题视频时间：0:22:44~00:00:41:30 参会人员列表： [cid:image002.jpg@01D74B6E.2E8FA2D0] [cid:image004.jpg@01D74B6E.2E8FA2D0] From: openEuler conference via Virt [mailto:virt@openeuler.org] Sent: Wednesday, May 12, 2021 8:23 PM To: tc(a)openeuler.org; virt(a)openeuler.org; dev(a)openeuler.org Subject: [Virt] virt sig例会-20210514 您好！ openEuler Virt SIG 邀请您参加 2021-05-14 14:15 召开的ZOOM会议(自动录制) 会议主题：virt sig例会-20210514 会议内容：1、openEuler 20.03 LTS SP2需求进展介绍 2、qemu 4.2特性回合需求介绍 3、StratoVirt快速冷启动bootloader技术分享会议链接：https://us06web.zoom.us/j/85000061143?pwd=VVJVY0Qyak51TFdvdWZUMWJCM2FQQT09 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com的ID 更多资讯尽在：https://openeuler.org/zh/ Hello! openEuler Virt SIG invites you to attend the ZOOM conference(auto recording) will be held at 2021-05-14 14:15, The subject of the conference is virt sig例会-20210514, Summary: 1、openEuler 20.03 LTS SP2需求进展介绍 2、qemu 4.2特性回合需求介绍 3、StratoVirt快速冷启动bootloader技术分享 You can join the meeting at https://us06web.zoom.us/j/85000061143?pwd=VVJVY0Qyak51TFdvdWZUMWJCM2FQQT09. Note: You are advised to change the participant name after joining the conference or use your ID at gitee.com. More information<https://openeuler.org/zh/>

1 0

[X-diagnosis] oom: add more info for oom
by Zhoukang (A) 17 May '21

17 May '21

From 18e0f00ea2e3e5528b4ac9671d5caa3e3110fa0e Mon Sep 17 00:00:00 2001 From: Liu Zixian <liuzixian4(a)huawei.com> Date: Sat, 15 May 2021 09:04:53 +0000 Subject: [PATCH] oom: add more info for oom kernel do not printk enough messages when OS happen oom. this module print more info when oom happen. Signed-off-by: Liu Zixian <liuzixian4(a)huawei.com> --- src/oom_debug_info/Makefile | 2 + src/oom_debug_info/oom_debug_info.c | 639 ++++++++++++++++++++++++++++ src/oom_debug_info/oom_debug_info.h | 19 + 3 files changed, 660 insertions(+) create mode 100755 src/oom_debug_info/Makefile create mode 100644 src/oom_debug_info/oom_debug_info.c create mode 100644 src/oom_debug_info/oom_debug_info.h diff --git a/src/oom_debug_info/Makefile b/src/oom_debug_info/Makefile new file mode 100755 index 0000000..b53d93e --- /dev/null +++ b/src/oom_debug_info/Makefile @@ -0,0 +1,2 @@ + +obj-m += oom_debug_info.o diff --git a/src/oom_debug_info/oom_debug_info.c b/src/oom_debug_info/oom_debug_info.c new file mode 100644 index 0000000..cba8eef --- /dev/null +++ b/src/oom_debug_info/oom_debug_info.c @@ -0,0 +1,639 @@ +// SPDX-License-Identifier: GPL-2.0 +/* + * Copyright (c) Huawei Technologies Co., Ltd. 2021-2021. ALL rights reversed. + */ + +#include <linux/delay.h> +#include <linux/fs.h> +#include <linux/hugetlb.h> +#include <linux/kallsyms.h> +#include <linux/kernel.h> +#include <linux/mman.h> +#include <linux/module.h> +#include <linux/nmi.h> +#include <linux/oom.h> +#include <linux/printk.h> +#include <linux/rwsem.h> +#include <linux/sched/signal.h> +#include <linux/sched/task.h> +#include <linux/seq_file.h> +#include <linux/swap.h> +#ifdef CONFIG_CMA +#include <linux/cma.h> +#endif +#include <../fs/mount.h> +#include <../mm/slab.h> + +#include "oom_debug_info.h" + +#define TMP_FS_ID 1 +#define FILE_PATH_BUF_SIZE 1024 +#define MAX_PRINT_STR_SIZE 1024 +#define SHOW_FILE_NUM_IN_DIR 1024 +#define RECURSE_DEPTH_LIMIT 50 +#define FILE_NUM_MDELAY_FOR_LOG 1000 +#define MAX_PRINT_FILE_INFO_BYTES (2 * 1024 * 1024UL) +#define MAX_BUF_LEN 256 + +int sysctl_oom_enhance_enable = 1; +int sysctl_oom_print_file_info = 1; +int sysctl_oom_show_file_num_in_dir = 10; + +static atomic_t console_silent_atomic = ATOMIC_INIT(0); +static atomic_t dentry_tree_running = ATOMIC_INIT(0); +static char file_path_buf[FILE_PATH_BUF_SIZE]; +static char str_print[MAX_PRINT_STR_SIZE]; +static unsigned long min_heap[SHOW_FILE_NUM_IN_DIR]; +static unsigned int fs_id; +static char *mount_path[] = { + "", + "/tmp", +}; + +static unsigned long show_file_num; +static unsigned long print_file_info_bytes; + +static const char *task_state_Array[] = { + "R (running)", /* 0 */ + "S (sleeping)", /* 1 */ + "D (disk sleep)", /* 2 */ + "T (stopped)", /* 4 */ + "T (tracing stop)", /* 8 */ + "Z (zombie)", /* 16 */ + "X (dead)" /* 32 */ +}; + +/* get_task_state() */ +#ifndef TASK_REPORT +#define TASK_REPORT (TASK_RUNNING | TASK_INTERRUPTIBLE | \ + TASK_UNINTERRUPTIBLE | __TASK_STOPPED | \ + __TASK_TRACED) +#endif + +static struct ctl_table_header *debug_table_header; + +static struct ctl_table debug_kernel_table[] = { + { + .procname = "oom_enhance_enable", + .data = &sysctl_oom_enhance_enable, + .maxlen = sizeof(int), + .mode = 0640, + .proc_handler = proc_dointvec_minmax, + }, + { + .procname = "oom_print_file_info", + .data = &sysctl_oom_print_file_info, + .maxlen = sizeof(int), + .mode = 0640, + .proc_handler = proc_dointvec_minmax, + }, + { + .procname = "oom_show_file_num_in_dir", + .data = &sysctl_oom_show_file_num_in_dir, + .maxlen = sizeof(int), + .mode = 0640, + .proc_handler = proc_dointvec_minmax, + }, + {} +}; + +static struct ctl_table debug_root_table[] = { + { + .procname = "kernel", + .mode = 0555, + .child = debug_kernel_table, + }, + {} +}; + +// TODO: compat to kernel-5.10 + +static struct rw_semaphore *k_namespace_sem = NULL; +static rwlock_t *k_tasklist_lock = NULL; + +typedef void (*show_mem_fn)(unsigned int, nodemask_t *); +show_mem_fn k_show_mem = NULL; + +typedef void (*iterate_supers_fn)(void (*)(struct super_block *, void *), void *); +iterate_supers_fn k_iterate_supers = NULL; + +typedef void (*hugetlb_report_meminfo_fn)(struct seq_file *); +hugetlb_report_meminfo_fn k_hugetlb_report_meminfo = NULL; + +static int last_console_printk = 0; +static int *k_console_printk = NULL; + +static inline void _console_silent(void) +{ + last_console_printk = *k_console_printk; + *k_console_printk = CONSOLE_LOGLEVEL_SILENT; +} + +static inline void _console_resume(void) +{ + *k_console_printk = last_console_printk; +} + +static int init_kernel_sym(void) +{ + k_namespace_sem = (struct rw_semaphore *) kallsyms_lookup_name("namespace_sem"); + + k_tasklist_lock = (rwlock_t *) kallsyms_lookup_name("tasklist_lock"); + if (!k_tasklist_lock) { + printk(KERN_WARNING "tasklist_lock is not found\n"); + return -1; + } + + k_console_printk = (int*) kallsyms_lookup_name("console_printk"); + if (!k_console_printk) { + printk(KERN_WARNING "console_printk is not found\n"); + return -1; + } + + k_show_mem = (show_mem_fn) kallsyms_lookup_name("show_mem"); + if (!k_show_mem) { + printk(KERN_WARNING "show_mem is not found\n"); + return -1; + } + + k_iterate_supers = (iterate_supers_fn) kallsyms_lookup_name("iterate_supers"); + if (!k_iterate_supers) { + printk(KERN_WARNING "iterate_supers is not found\n"); + return -1; + } + + k_hugetlb_report_meminfo = (hugetlb_report_meminfo_fn) kallsyms_lookup_name("hugetlb_report_meminfo"); + if (!k_hugetlb_report_meminfo) { + printk(KERN_WARNING "hugetlb_report_meminfo is not found\n"); + return -1; + } + + return 0; +} + +static struct dentry *get_mountpoint_from_mnt_root(struct dentry *dentry) +{ + struct mnt_namespace *ns = current->nsproxy->mnt_ns; + struct mount *mnt; + struct dentry *mount_point = NULL; + + if (IS_ERR_OR_NULL(dentry) || strncmp(dentry->d_iname, "/", sizeof("/"))) + goto out; + + if (!k_namespace_sem) { + printk(KERN_WARNING "k_namespace_sem is NULL\n"); + return NULL; + } + + if (!down_read_trylock(k_namespace_sem)) { + printk(KERN_WARNING "get namespace_sem fail when get mountpoint from mnt_root!\n"); + return NULL; + } + + list_for_each_entry(mnt, &ns->list, mnt_list) { + if (mnt->mnt.mnt_root == dentry) { + mount_point = mnt->mnt_mountpoint; + break; + } + } + up_read(k_namespace_sem); +out: + return mount_point; +} + +static int show_proc_slab_info(void) +{ +// TODO: read file /proc/slabinfo + return 0; +} + +static int show_proc_mem_info(void) +{ +// TODO: read file /proc/meminfo + return 0; +} + +/* + * get string of task status according to stat of task_struct. + */ +static inline const char *oom_get_task_state(struct task_struct *tsk) +{ + unsigned int state = (tsk->state & TASK_REPORT) | tsk->exit_state; + const char **p = &task_state_Array[0]; + + while (state) { + p++; + state >>= 1; + } + return *p; +} + +/* + * refer to ps -aux, show task info for debug. + */ +static int show_ps_aux_info(void) +{ + struct task_struct *p; + + printk(KERN_WARNING "%5s %5s %20s %8s %8s %16s\n", "PID", "PPID", "VSZ", "RSS", "STAT", "COMMAND"); + read_lock(k_tasklist_lock); + for_each_process(p) { + printk(KERN_WARNING "%5d %5d %7luK %7luK %16s %s\n", p->pid, + p->parent->pid, + (p->mm != NULL ? p->mm->total_vm : 0) * 4, + (p->mm != NULL ? get_mm_rss(p->mm) : 0) * 4, oom_get_task_state(p), p->comm); + } + read_unlock(k_tasklist_lock); + return 0; +} + +static char *get_file_path(struct dentry *dentry) +{ + /* for placing '\0' at end */ + int byte_left = FILE_PATH_BUF_SIZE - 2; + int name_len; + + memset(file_path_buf, 0, FILE_PATH_BUF_SIZE); + + while (dentry && (strncmp(dentry->d_name.name, "/", 1) != 0)) { + name_len = strlen(dentry->d_name.name); + if (byte_left <= name_len) { + printk(KERN_WARNING "file name too long ..."); + break; + } + + byte_left -= name_len; + memcpy(file_path_buf + byte_left, dentry->d_name.name, name_len); + byte_left--; + file_path_buf[byte_left] = '/'; + dentry = dentry->d_parent; + } + + return file_path_buf + byte_left; +} + +static bool is_empty_dir(struct dentry *dir) +{ + struct dentry *dentry = NULL; + + if (!d_is_dir(dir)) + return false; + + if (list_empty(&dir->d_subdirs)) + return true; + + spin_lock(&dir->d_lock); + list_for_each_entry(dentry, &dir->d_subdirs, d_child) { + if (dentry == NULL || dentry->d_inode == NULL) + continue; + if (d_is_file(dentry) && dentry->d_inode->i_size > 0) { + spin_unlock(&dir->d_lock); + return false; + } + if (d_is_dir(dentry) && !is_empty_dir(dentry)) { + spin_unlock(&dir->d_lock); + return false; + } + } + spin_unlock(&dir->d_lock); + return true; +} + +static void my_swap(unsigned long *a, int i, int j) +{ + unsigned long temp = a[i]; + + a[i] = a[j]; + a[j] = temp; +} + +static void heap_adjust(unsigned long *a, int n, int i) +{ + int j = 2 * i + 1; + + while (j < n) { + if (j + 1 < n && a[j] > a[j + 1]) + j++; + if (a[i] > a[j]) + my_swap(a, i, j); + else + break; + i = j; + j = 2 * i + 1; + } +} + +static void heap_build(unsigned long *a, int n) +{ + int i; + + for (i = n / 2 - 1; i >= 0; i--) + heap_adjust(a, n, i); +} + +static unsigned long get_topn_size_in_dir(struct dentry *dir, unsigned int *file_num) +{ + struct dentry *dentry = NULL; + unsigned long topn_size = 0; + + *file_num = 0; + memset(min_heap, 0, sizeof(min_heap)); + + spin_lock(&dir->d_lock); + list_for_each_entry(dentry, &dir->d_subdirs, d_child) { + if (dentry == NULL || dentry->d_inode == NULL) + continue; + if (d_is_file(dentry)) { + (*file_num)++; + if (*file_num < sysctl_oom_show_file_num_in_dir) { + min_heap[*file_num - 1] = dentry->d_inode->i_size; + } else if (*file_num == sysctl_oom_show_file_num_in_dir) { + min_heap[*file_num - 1] = dentry->d_inode->i_size; + heap_build(min_heap, sysctl_oom_show_file_num_in_dir); + } else if (*file_num > sysctl_oom_show_file_num_in_dir) { + if (dentry->d_inode->i_size > min_heap[0]) { + min_heap[0] = dentry->d_inode->i_size; + heap_adjust(min_heap, sysctl_oom_show_file_num_in_dir, 0); + } + } + } + } + spin_unlock(&dir->d_lock); + + if (*file_num > sysctl_oom_show_file_num_in_dir) + topn_size = min_heap[0]; + return topn_size; +} + +static unsigned long do_show_dentry_tree(struct dentry *tree, unsigned int depth) +{ + struct dentry *dentry = NULL; + unsigned long topn_size; + unsigned long dir_size = 0; + unsigned long subdir_size; + unsigned int file_num; + int num_chars; + + if (print_file_info_bytes > MAX_PRINT_FILE_INFO_BYTES) { + printk(KERN_WARNING "file info exceed %lu bytes!\n", MAX_PRINT_FILE_INFO_BYTES); + return 0; + } + + if (depth >= RECURSE_DEPTH_LIMIT) { + printk(KERN_WARNING "dir depth exceed %d!\n", RECURSE_DEPTH_LIMIT); + return 0; + } + + /* get topN file size in dir */ + topn_size = get_topn_size_in_dir(tree, &file_num); + + spin_lock(&tree->d_lock); + /* ramfs and tmpfs will "pin the dentry in core", + * so we can iterate all files in root initramfs(tmpfs) by dentry. + */ + list_for_each_entry(dentry, &tree->d_subdirs, d_child) { + if (dentry == NULL || dentry->d_inode == NULL) + continue; + if (dentry->d_inode->i_size == 0) + continue; + if (d_is_symlink(dentry)) + continue; + if (d_is_file(dentry)) { + if (dentry->d_inode->i_size >= topn_size) { + num_chars = snprintf(str_print, + MAX_PRINT_STR_SIZE, "%s:%llu\n", + dentry->d_name.name, dentry->d_inode->i_size); + if (num_chars > 0) + print_file_info_bytes += num_chars; + printk(KERN_CONT "%s", str_print); + show_file_num++; + } + if (show_file_num % FILE_NUM_MDELAY_FOR_LOG == 0) { + num_chars = snprintf(str_print, MAX_PRINT_STR_SIZE, + "already printed %lu files, will mdelay 10 ms for log system.\n", + show_file_num); + if (num_chars > 0) + print_file_info_bytes += num_chars; + printk(KERN_CONT "%s", str_print); + touch_nmi_watchdog(); + mdelay(10); + } + dir_size += dentry->d_inode->i_size; + } + } + /* second iterate list for showing subdirs after showing files */ + list_for_each_entry(dentry, &tree->d_subdirs, d_child) { + if (dentry == NULL || dentry->d_inode == NULL) + continue; + /* 1.we use d_mountpoint to skip mountpoint, but + * auditd mounted /usr/lib/modules to itself process space, + * it will lead to skip this dir in memory rootfs by mistake. + * 2.you can fix it by all inodes have same super block in same + * file system, pity that all inodes have same super block in + * root initramfs(tmpfs) when unpack, lead to it cann`t work by + * dentry iterate, although you can get distinguished + * inode->i_sb->s_dev by name lookup, refer to vfs_lstat to get + * stat.dev, but it shouldn`t sched or alloc when oom. + * 3.you also can fix it by refer to is_local_mountpoint, + * notice down_read may sleep and up_read call wake_up_process + * when hold d_lock, use down_read_trylock and call + * local_irq_save and preempt_disable preempt_enable_no_resched + * to ensure safe. + * 4.we handle it in simple way, treat as mountpoint is empty + * dir in initramfs. + */ + if (is_empty_dir(dentry)) + continue; + if (d_is_dir(dentry)) { + num_chars = snprintf(str_print, MAX_PRINT_STR_SIZE, + "%s%s\n", mount_path[fs_id], get_file_path(dentry)); + if (num_chars > 0) + print_file_info_bytes += num_chars; + printk(KERN_CONT "%s", str_print); + subdir_size = do_show_dentry_tree(dentry, depth + 1); + if (subdir_size > 0) { + num_chars = snprintf(str_print, + MAX_PRINT_STR_SIZE, "dir %s%s:%lu\n", + mount_path[fs_id], get_file_path(dentry), subdir_size); + if (num_chars > 0) + print_file_info_bytes += num_chars; + printk(KERN_CONT "%s", str_print); + dir_size += subdir_size; + } + } + } + spin_unlock(&tree->d_lock); + + if (topn_size > 0) { + num_chars = snprintf(str_print, MAX_PRINT_STR_SIZE, "...files num:%d\n", file_num); + if (num_chars > 0) + print_file_info_bytes += num_chars; + printk(KERN_CONT "%s", str_print); + } + + return dir_size; +} + +static void show_dentry_tree(struct dentry *tree) +{ + unsigned long dir_size; + + if (IS_ERR_OR_NULL(tree)) + return; + printk(KERN_WARNING "%s%s\n", mount_path[fs_id], tree->d_iname); + dir_size = do_show_dentry_tree(tree, 0); + printk(KERN_WARNING "%lu bytes in %s%s\n", dir_size, mount_path[fs_id], tree->d_iname); +} + +static void show_file_info_by_name(struct super_block *sb, void *name) +{ + struct dentry *mount_point = NULL; + + if (strncmp(sb->s_type->name, name, strlen(name))) + return; + + if (!strncmp(name, "rootfs", strlen(name))) { + fs_id = 0; + show_dentry_tree(sb->s_root); + } else if (!strncmp(name, "tmpfs", strlen(name))) { + /* get mount_point of mnt_root, I have no better way than refer + * to is_local_mountpoint, notice down_read may sleep and + * up_read call wake_up_process, use down_read_trylock and + * call preempt_disable preempt_enable_no_resched. + */ + mount_point = get_mountpoint_from_mnt_root(sb->s_root); + if (!strncmp(get_file_path(mount_point), "/tmp", sizeof("/tmp")) + && !strncmp(mount_point->d_sb->s_type->name, "rootfs", sizeof("rootfs"))) { + printk(KERN_WARNING "###################\n"); + printk(KERN_WARNING "show files in /tmp:\n"); + fs_id = TMP_FS_ID; + show_dentry_tree(sb->s_root); + } + } +} + +void show_rootfs_info(void) +{ + printk(KERN_WARNING "rootfs file info:\n"); + k_iterate_supers(show_file_info_by_name, "rootfs"); +} + +void show_tmpfs_info(void) +{ + k_iterate_supers(show_file_info_by_name, "tmpfs"); +} + +void show_memfs_info(void) +{ + if (!sysctl_oom_print_file_info) + return; + + if (atomic_cmpxchg(&dentry_tree_running, 0, 1)) + return; + print_file_info_bytes = 0; + show_file_num = 0; + show_rootfs_info(); + show_tmpfs_info(); + atomic_set(&dentry_tree_running, 0); +} + +void oom_show_debug_info(void) +{ + typedef int (*ivpfn) (void); + ivpfn show_pfn_memory_info = NULL; + + if (atomic_cmpxchg(&console_silent_atomic, 0, 1) == 1) { + mdelay(500); + return; + } + + dump_stack(); + + /* print the use info of all memory */ + show_pfn_memory_info = (ivpfn) kallsyms_lookup_name("MEM_PrintAllMemory"); + if (show_pfn_memory_info != NULL) { + printk(KERN_EMERG "\nmem trace:\n"); + show_pfn_memory_info(); + } else { + printk(KERN_EMERG "error, MEM_PrintAllMemory is NULL!\n"); + } + + /* print slab info */ + printk(KERN_EMERG "\nslab info:\n"); + show_proc_slab_info(); + + /* print mem info */ + printk(KERN_EMERG "\nmem info:\n"); + show_proc_mem_info(); + + /* silent console for console print too slow */ + _console_silent(); + /* print the info of current process */ + printk(KERN_EMERG "ps -aux:\n"); + show_ps_aux_info(); + _console_resume(); + + /* print mem */ + k_show_mem(0, NULL); + + /* silent console for console print too slow */ + _console_silent(); + show_memfs_info(); + _console_resume(); + + atomic_set(&console_silent_atomic, 0); +} + +static int debug_oom_notify(struct notifier_block *self, unsigned long notused, void *nfreed) +{ + if (sysctl_oom_enhance_enable) + oom_show_debug_info(); + return 0; +} + +static struct notifier_block debug_oom_nb = { + .notifier_call = debug_oom_notify +}; + +static int __init oom_debug_info_init(void) +{ + int ret; + + printk("oom_debug_info init\n"); + + ret = init_kernel_sym(); + if (ret) { + return ret; + } + + ret = register_oom_notifier(&debug_oom_nb); + if (ret) { + printk("register_oom_notifier fail\n"); + return ret; + } + + debug_table_header = register_sysctl_table(debug_root_table); + if (!debug_table_header) { + printk("register_sysctl_table fail\n"); + ret = -ENOMEM; + goto sysctl_fail; + } + + return 0; + +sysctl_fail: + unregister_oom_notifier(&debug_oom_nb); + return ret; +} + +static void __exit oom_debug_info_exit(void) +{ + printk("oom_debug_info exit\n"); + unregister_oom_notifier(&debug_oom_nb); + unregister_sysctl_table(debug_table_header); +} + +module_init(oom_debug_info_init) +module_exit(oom_debug_info_exit) + +MODULE_LICENSE("GPL"); diff --git a/src/oom_debug_info/oom_debug_info.h b/src/oom_debug_info/oom_debug_info.h new file mode 100644 index 0000000..d562290 --- /dev/null +++ b/src/oom_debug_info/oom_debug_info.h @@ -0,0 +1,19 @@ +/* SPDX-License-Identifier: GPL-2.0 */ +/* + * Copyright (c) Huawei Technologies Co., Ltd. 2021-2021. All rights reserved. + */ +#ifndef _OOM_SHOW_INFO_H +#define _OOM_SHOW_INFO_H +#ifdef CONFIG_EULEROS_DEBUG_OOM +#include <linux/nodemask.h> +#include <linux/seq_file.h> + +extern int sysctl_oom_enhance_enable; +extern int sysctl_oom_print_file_info; +extern int sysctl_oom_show_file_num_in_dir; + +extern unsigned long kallsyms_lookup_name(const char *name); +extern void oom_show_debug_info(nodemask_t *nodemask); +extern struct dentry *get_mountpoint_from_mnt_root(struct dentry *dentry); +#endif +#endif -- 2.29.2

1 0

Fwd: openEuler Developer Day 启动大会招募环节，报名通道同步开启！
by Marketing openEuler 17 May '21

17 May '21

openEuler 社区的开发者：您好！ openEuler Developer Day 2021 将于*6**月10日*在北京举行。本次大会是由 openEuler 社区发起，主要面向签署了 CLA的核心开发者、南北向生态厂商以及核心用户的一场技术盛会，旨在推动 openEuler 社区在多样性计算、云原生全栈、全场景协同等技术方向的持续探索和创新。 *开放招募* openEuler Developer Day 正式开放招募环节：*Call for Speaker* <https://shimo.im/forms/KgXxt8JCYKYtVXHx/fill>、*Call for Sponsor* <https://shimo.im/forms/vwCC68q3pQvvR3Yc/fill>、*Call for SIG* <https://shimo.im/forms/x6vXyW8QHCGK9QJD/fill>、*Call for Demo* <https://shimo.im/forms/PQTvWKjHgg96DjD8/fill> 欢迎 openEuler 社区的开发者提交以上四个方面的材料。 [image: 截屏2021-05-13 下午8.12.43.png] *大会亮点* 这是一场大型的面向 openEuler 社区开发者的技术交流会议。在现场共同探讨*热点技术方向*和*如何参与社区贡献*，通过大会*公开接收用户需求*，*完成版本规划*。 *技术委员会*、*品牌委员会*、*用户委员会*、*20个 SIG 组*会同期举办*开放工作会议**（仅限签署社区 CLA 的开发者参加）*。技术委员会主席给大家解读 *openEuler 21.03*，发布下个社区版的*技术定位*，分享社区创新思路。来自互联网、金融、运营商的客户分享成功的应用实践经验。开源圆桌中，客户、伙伴、厂商、研究机构一同探究开源软件供应链的意义和风险，开源模式如何推动独立演进操作系统技术的发展。更有开发者心心念念的 *Party* 心动不如行动，赶紧来报名参会 <https://e-campaign.huawei.com/m/mIzQFr>吧！！！

1 0

OBS 构建优化，软件包 spec 缺少构建依赖需要补齐，请各位开发者关注
by Chenyanpan 17 May '21

17 May '21

openEuler 社区各位开发者，大家好：目前我们在 openEuler OBS 构建优化过程中，发现一些优化项需要大家一起协作完成。具体情况是这样的： OBS 每次构建软件包会创建新的构建环境（build environment），在构建环境中 preinstall 一些必备软件包，然后 install 这些必备软件包及其依赖，以及 spec 中 BuildRequires 及其依赖。当前 preinstall 预安装一些多余软件包，部分软件包存在多余安装依赖，导致每次创建构建环境至少需要安装 300+ 个 rpm，占用空间 1.2GB，耗时 60+ 秒。需要对 Project Config 及软件包的依赖进行优化，减少构建过程安装的 rpm 数量，避免 IO 资源浪费，缩短构建时间。去除软件包多余依赖，不仅对构建过程有收益，对实际使用环境也有好处，在实际使用环境中避免安装时间、空间浪费，也可以减少安装多余 rpm 引入不必要的安全漏洞。前期我们做了初步分析，对 openEuler 整个版本每个包起到较好的效果。优化方案在 2021.05.12 TC 例会上汇报过，TC 同意优化方案落地实施。议题及结论如下： [cid:image001.png@01D74B12.BE6C92C0] 由于优化需要从构建环境去掉了一些依赖，有些软件包本来自身需要的构建依赖如果没在 spec 中明确指定，那么当前构建会缺少依赖导致构建失败，目前遇到的软件包有 317 个，已经提了 issue 跟踪，软件包列表见邮件附件。当前需要大家共同完成的工作是：对这些构建失败的软件包，整改 spec 文件，补齐各自需要的构建依赖。为了尽量缩小影响范围，我们从 openEuler:Mainline 复制了一个工程 openEuler-Mainline-copy，请大家基于 openEuler-Mainline-copy 开发验证，代码提交到 src-openeuler 各自的代码仓。软件包 spec 整改后我们再将优化的 Project Config 应用到 openEuler:Mainline 工程（由于复制的工程跟 Mainline 工程的代码未能及时同步，如果应用后个别软件包构建失败再进一步整改）。为了减少大家的工作量，我们对构建失败的这些软件包的日志进行初步分析，其中大部分包列出失败的关键日志，以及可能缺失的依赖，大家可以参考，或者对比 openEuler:Mainline 工程中同一软件的构建日志，可以判断缺少的构建依赖，具体信息请查看相关issue。请各位软件包责任人在 2021.05.31 前完成该项任务。开发验证过程中如有疑问，请与我联系。谢谢！ -- 陈燕潘 (@chenyanpanHW)

1 0

sig-release-management双周例会
by openEuler conference 17 May '21

17 May '21

1 0

sig-CN双周会议
by openEuler conference 17 May '21

17 May '21

1 0

Compliance-SIG 双周例会
by openEuler conference 17 May '21

17 May '21

1 0

测试结论////答复: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/14 release评审通知
by liyongqiang (H) 14 May '21

14 May '21

本次update测试策略： 1、发布软件包的安装升级管理操作验证验证本次发布软件包的升级正确性符合用户实际使用场景 1)从LTS升级到SP1的update 2)从LTS升级到LTS的某个update，然后再升级到SP1本次发布的update 3)从SP1版本直接升级到此次update 4)选取SP1的中间发布update进行升级发布软件包管理验证升级后的卸载与回退 2、本次发布软件包提供服务的管理操作验证(启动/停止/重启等) 3、软件包升级后操作系统的基本集成功能验证/重启 2、测试结论发布软件包安装升级无问题升级后，系统重启正常，软件包可以正常卸载软件包提供命令和服务完成验证测试过程中发现问题已解决同意update版本发布发件人: xiasenlin 发送时间: 2021年5月14日 18:15 收件人: release(a)openeuler.org; qa(a)openeuler.org; sa-announce(a)openeuler.org; dev(a)openeuler.org 抄送: Guoge(JVM) <ge.guo(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; Chenzhendong (alex) <alex.chen(a)huawei.com>; Liyiting <liyiting(a)huawei.com>; Mingpei <mingpei(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; Yanxiaobing <yanxiaobing(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; guoxiaoqi <guoxiaoqi2(a)huawei.com> 主题: 【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/14 release评审通知 openEuler 20.03 LTS SP1 Update 20210430 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月15日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210515 代码冻结： 20210512 转测试时间：20210514 版本发布： 20210515 本次更新主要涉及：golang、xstream等；修复cve：25个 CVE清单： CVE-2021-29425 次要 src-openEuler/apache-commons-io CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-27506 次要 src-openEuler/clamav CVE-2021-3448 不重要 src-openEuler/dnsmasq CVE-2021-29470 次要 src-openEuler/exiv2 CVE-2021-29457 主要 src-openEuler/exiv2 CVE-2021-29458 次要 src-openEuler/exiv2 CVE-2021-28650 次要 src-openEuler/gnome-autoar CVE-2021-27918 主要 src-openEuler/golang CVE-2021-28168 次要 src-openEuler/jersey CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-15169 次要 src-openEuler/rubygem-actionview CVE-2021-21349 主要 src-openEuler/xstream CVE-2021-21350 严重 src-openEuler/xstream CVE-2021-21348 主要 src-openEuler/xstream CVE-2021-21351 严重 src-openEuler/xstream CVE-2021-21341 主要 src-openEuler/xstream CVE-2021-21342 严重 src-openEuler/xstream CVE-2021-21343 主要 src-openEuler/xstream CVE-2021-21344 严重 src-openEuler/xstream CVE-2021-21345 严重 src-openEuler/xstream CVE-2021-21346 严重 src-openEuler/xstream CVE-2021-21347 严重 src-openEuler/xstream From: guoxiaoqi Sent: Friday, May 14, 2021 9:34 AM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>>; xiasenlin <xiasenlin1(a)huawei.com<mailto:xiasenlin1@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试新增依赖软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler src-openEuler/mxparser 依赖 SP1 不涉及 openEuler src-openEuler/xmlpull 依赖 SP1 不涉及 openEuler From: guoxiaoqi Sent: Thursday, May 13, 2021 9:10 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试更新，xstream不涉及接口变更。thrift涉及变更，本次版本暂时不发布软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base… From: guoxiaoqi Sent: Thursday, May 13, 2021 3:39 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: 【20.03-LTS-SP1 512 update周版本】启动测试请启动openEuler-20.03-LTS-SP1 2021年512 周版本测试软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 涉及接口变更 openEuler src-openEuler/thrift CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base…

1 0

【CVE update】openEuler 20.03 LTS SP1 CVE Update 2021/5/14 release评审通知
by xiasenlin 14 May '21

14 May '21

openEuler 20.03 LTS SP1 Update 20210430 release已经测试完成。请TC委员，Release委员，QA委员在issue内答复评审意见，欢迎广大开发者对本次发布发表意见，您的每条意见我们都会认真对待，并加以改进。如果您发现了版本的致命问题请及时邮件通知我们，2021年5月15日结束发布流程。版本目标：CVE修复版本计划：例行CVE冻结（本次为周例行版本）：20210515 代码冻结： 20210512 转测试时间：20210514 版本发布： 20210515 本次更新主要涉及：golang、xstream等；修复cve：25个 CVE清单： CVE-2021-29425 次要 src-openEuler/apache-commons-io CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-3487 次要 src-openEuler/binutils CVE-2021-27506 次要 src-openEuler/clamav CVE-2021-3448 不重要 src-openEuler/dnsmasq CVE-2021-29470 次要 src-openEuler/exiv2 CVE-2021-29457 主要 src-openEuler/exiv2 CVE-2021-29458 次要 src-openEuler/exiv2 CVE-2021-28650 次要 src-openEuler/gnome-autoar CVE-2021-27918 主要 src-openEuler/golang CVE-2021-28168 次要 src-openEuler/jersey CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-28493 次要 src-openEuler/python-jinja2 CVE-2020-15169 次要 src-openEuler/rubygem-actionview CVE-2021-21349 主要 src-openEuler/xstream CVE-2021-21350 严重 src-openEuler/xstream CVE-2021-21348 主要 src-openEuler/xstream CVE-2021-21351 严重 src-openEuler/xstream CVE-2021-21341 主要 src-openEuler/xstream CVE-2021-21342 严重 src-openEuler/xstream CVE-2021-21343 主要 src-openEuler/xstream CVE-2021-21344 严重 src-openEuler/xstream CVE-2021-21345 严重 src-openEuler/xstream CVE-2021-21346 严重 src-openEuler/xstream CVE-2021-21347 严重 src-openEuler/xstream From: guoxiaoqi Sent: Friday, May 14, 2021 9:34 AM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com>; liyongqiang (H) <liyongqiang10(a)huawei.com>; chenyaqiang <chenyaqiang(a)huawei.com> Cc: Yanxiaobing <yanxiaobing(a)huawei.com>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com>; Liujingang (Bob) <liujingang09(a)huawei.com>; fanjiachen (A) <fanjiachen3(a)huawei.com>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com>; wangchong (J) <wangchong56(a)huawei.com>; yaokai (G) <yaokai13(a)huawei.com>; Xuxiaosong <xuxiaosong(a)huawei.com>; xiasenlin <xiasenlin1(a)huawei.com> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试新增依赖软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler src-openEuler/mxparser 依赖 SP1 不涉及 openEuler src-openEuler/xmlpull 依赖 SP1 不涉及 openEuler From: guoxiaoqi Sent: Thursday, May 13, 2021 9:10 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: RE: 【20.03-LTS-SP1 512 update周版本】启动测试更新，xstream不涉及接口变更。thrift涉及变更，本次版本暂时不发布软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base… From: guoxiaoqi Sent: Thursday, May 13, 2021 3:39 PM To: Hufeng (Solar, Euler) <solar.hu(a)huawei.com<mailto:solar.hu@huawei.com>>; liyongqiang (H) <liyongqiang10(a)huawei.com<mailto:liyongqiang10@huawei.com>>; chenyaqiang <chenyaqiang(a)huawei.com<mailto:chenyaqiang@huawei.com>> Cc: Yanxiaobing <yanxiaobing(a)huawei.com<mailto:yanxiaobing@huawei.com>>; Jiangzhenhua (Ronnie, Kunpeng Computing) <zhenhua.jiang(a)huawei.com<mailto:zhenhua.jiang@huawei.com>>; Liujingang (Bob) <liujingang09(a)huawei.com<mailto:liujingang09@huawei.com>>; guoxiaoqi <guoxiaoqi2(a)huawei.com<mailto:guoxiaoqi2@huawei.com>>; fanjiachen (A) <fanjiachen3(a)huawei.com<mailto:fanjiachen3@huawei.com>>; Zhangtao (zhangtao, AX) <zhangtao221(a)huawei.com<mailto:zhangtao221@huawei.com>>; Miaokaibo (miao_kaibo) <miaokaibo(a)huawei.com<mailto:miaokaibo@huawei.com>>; wangchong (J) <wangchong56(a)huawei.com<mailto:wangchong56@huawei.com>>; yaokai (G) <yaokai13(a)huawei.com<mailto:yaokai13@huawei.com>>; Xuxiaosong <xuxiaosong(a)huawei.com<mailto:xuxiaosong@huawei.com>> Subject: 【20.03-LTS-SP1 512 update周版本】启动测试请启动openEuler-20.03-LTS-SP1 2021年512 周版本测试软件包类别所属分支接口变更责任田 src-openEuler/apache-commons-io CVE SP1 不涉及 openEuler src-openEuler/binutils CVE SP1 不涉及基础服务 src-openEuler/dnsmasq CVE SP1 不涉及网络组 src-openEuler/exiv2 CVE SP1 不涉及网络组 src-openEuler/gnome-autoar CVE SP1 不涉及网络组 src-openEuler/golang CVE SP1 不涉及容器组 src-openEuler/jersey CVE SP1 不涉及 openEuler src-openEuler/python-jinja2 CVE SP1 不涉及基础服务 src-openEuler/rubygem-actionview CVE SP1 不涉及 openEuler src-openEuler/velocity CVE SP1 不涉及 openEuler src-openEuler/xstream CVE SP1 涉及接口变更 openEuler src-openEuler/thrift CVE SP1 不涉及 openEuler 测试repo： SP1：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/update_… SP1 EPOL：http://121.36.84.172/repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/u… 请测试同时挂载发布源everything和update repo： SP1 everything: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/everything/$basearch SP1 update: https://repo.openeuler.org/openEuler-20.03-LTS-SP1/update/$basearch EPOL：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/$basearch EPOL update：https://repo.openeuler.org/openEuler-20.03-LTS-SP1/EPOL/update/$base…

1 0

Compiler SIG双周例会
by openEuler conference 14 May '21

14 May '21

1 0

OS-Builder 例会
by openEuler conference 14 May '21

14 May '21

1 0

会议纪要：安全委员会&安全sig例会
by yanglijin 14 May '21

14 May '21

��ˣ�� ʱ�䣺2021/5/13 16:00��17:30 ��ˣ��գ�κ�գ��콡ΰ��ס�ͳ��-gaochong��ͳ��-zhangshaoning��-��Ρ��-�� ⡿ 1. ©��֪��߽�չ �� ־ȫ 1��ݾۺ��Ż� 100% 2��ֶΣ��ϵͳ�״θ�֪ʱ��ֶΣ� 100% 3��Ż� 95% 4��Ż� 50% 5��ʱЧ�Ա�� 10% 2. ��©��չ �� 1�� ©��֪��˫�ܣ�4��28��-5��12�գ��©��67��7��©��42��Ҫ�漰Compiler��rust 8��Networking��unbound 11��kernel��4��52��©��֪��ߣ�ռ��78% 2�� ޸��5��6��ѷ��¶Ȱ汾��32��SA��74��CVE 3�� ޸��ǰ��99��©��δ�޸��7��ϴ��޸�©��39�� 4�� 5��12��ܰ汾��壬��CVE 30�� 3. ��openEuler��Դ��ȫ�� κ�� Ŀ�ģ��Ӳ��ƽ̨��ȫ��֮�� ܣ��ռ��ֲ��䡢��Ƽ��ϵĸ��ֻ��ȫ��Լ��ȫ�м��ʹ��ȫ�� Ҫ��ԣ�Զ��֤��û��ȡĿ��ϵͳ��Ӳ��״̬ ��ۣ�ͬ��openEuler��֣��security-facility�� 4. ��audit��Ӱ�� Ϊ��ʹaudit��ں˽ӿ�ƥ��ø��ã��ҪOSV��audit��Ӱ�� audit �ӿڱ��issue : https://gitee.com/src-openeuler/audit/issues/I3R0Q8?from=project-issue ��⣺��ǰOSV��audit��Ӱ�� 5. CVE�� giflib CVE-2020-23922 ��ۣ��Ҫ��һ��н�� ´λ��ʱ�䣺5��19�գ� ��ˣ�� 00511953 ��Ʒ��-��ƽ̨��ĿȺ Mobile��15168350853 Email��yanglijin(a)huawei.com <mailto:yanglijin@huawei.com%20>

1 0

ROS-sig 例会会议纪要
by 安传旭 13 May '21

13 May '21

您好： ROS-sig组23th双周例会会议纪要如下：上阶段计划完成的任务： 1. 验证提交到对应分支后，CI是否可以识别并通过对应分支代码； 2. 开始适配20.03spce文件，进行sp2入源包的修改和检查，并提交入源交付物 DONE 1. 维护ROS打包工作汇总表； 2. 验证提交到对应分支后，CI是否可以识别并通过对应分支代码； 3. 开始适配20.03 spce文件，进行sp2入源包的修改和检查，并提交入源交付物，共计36个PR被merge。注意事项催促release-sig组尽快审核PR，将ROS组件加入到版本测试； Hello: The meeting minutes of 23th biweekly regular meeting of ROS-SIG Group are as follows: Tasks planned to be completed in the previous stage: 1. Verify whether CI can identify and pass the corresponding branch code after submitting to the corresponding branch; 2. Begin to adapt the 20.03 SPCE file, modify and check the SP2 incoming source package, and submit incoming source deliverables DONE 1. Maintain the ROS packaging summary table; 2. Verify whether CI can identify and pass the corresponding branch code after submitting to the corresponding branch; 3. Start to adapt the 20.03 SPCE file, modify and check the SP2 incoming source package, and submit incoming source deliverables, a total of 36 PR were merged. Matters needing attention Urge the release-sig team to review the PR as soon as possible and add the ROS component to the release test;

1 0

etcd使用的简单介绍
by openEuler conference 13 May '21

13 May '21

1 0

ROS例会
by 安传旭 13 May '21

13 May '21

您好！ openEuler ROS SIG 邀请您参加 2021-05-13 19:00 召开的腾讯会议会议主题：ROS例会会议内容： 1. openEuler ROS组件的移植情况； 2. ROS组件对openEuler 20.03 LTS SP2的适配。点击链接入会，或添加至会议列表：https://meeting.tencent.com/s/2fogPapxXLsg <https://meeting.tencent.com/s/2fogPapxXLsg> 会议 ID：969 2960 5954 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com <http://gitee.com/>的ID 更多资讯尽在：https://openeuler.org/zh/ <https://openeuler.org/zh/> Hello! Openeuler Ros SIG invites you to attend the Tencent conference at 2021-05-13 19:00 Conference Theme: ROS Regular Meeting Content of the Conference: 1. Migration of OpenEuler ROS components; 2. Adaptation of the ROS component to OpenEuler 20.03 LTS SP2. Click on the links to membership, or add to the meeting list: https://meeting.tencent.com/s/2fogPapxXLsg <https://meeting.tencent.com/s/2fogPapxXLsg> Conference ID: 969 2960 5954 Warm Reminder: It is recommended to change the participant's name after accessing the conference, or you can use your ID at gitee.com <http://gitee.com/> More information on: https://openeuler.org/zh/ <https://openeuler.org/zh/>

1 0

ROS例会
by 安传旭 13 May '21

13 May '21

您好！ openEuler ROS SIG 邀请您参加 2021-05-14 19:00 召开的腾讯会议会议主题：ROS例会会议内容： 1. openEuler ROS组件的移植情况； 2. ROS组件对openEuler 20.03 LTS SP2的适配。点击链接入会，或添加至会议列表：https://meeting.tencent.com/s/2fogPapxXLsg 会议 ID：969 2960 5954 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com <http://gitee.com/>的ID 更多资讯尽在：https://openeuler.org/zh/ <https://openeuler.org/zh/> Hello! Openeuler Ros SIG invites you to attend the Tencent conference at 2021-05-14 19:00 Conference Theme: ROS Regular Meeting Content of the Conference: 1. Migration of OpenEuler ROS components; 2. Adaptation of the ROS component to OpenEuler 20.03 LTS SP2. Click on the links to membership, or add to the meeting list: https://meeting.tencent.com/s/2fogPapxXLsg Conference ID: 969 2960 5954 Warm Reminder: It is recommended to change the participant's name after accessing the conference, or you can use your ID at gitee.com More information on: https://openeuler.org/zh/

1 0