| 2021-02-19 20:13:24 |
Mahantesh Salimath |
bug |
|
|
added bug |
| 2021-02-19 20:17:25 |
Mahantesh Salimath |
description |
On some Bluefield platforms, the reboot flow leaves PKA traces in the kernel.
This is due to PKA being corrupt on boot-up due to multiple applications using PKA at the same time.
Handling multiple applications requires a new feature in the PKA driver.
SRU Justification:
[Impact]
* Kernel traces are seen at startup on Bluefield platforms (by Mellanox/Nvidia) due to applications using public key accelerator (PKA) hardware simultaneously.
[Fix]
* Allow synchronized usage of PKA hardware resources "pka: Handle ring open scenario when rings are busy"
[Test Case]
* Trigger multiple processes/applications to use PKA HW simultaneously, this can be done via OpenSSL. Run the OpenSSL speed test with multiple processes using 'pka' engine. Ex: openssl speed -multi 2 -engine pka rsa512
* Note: On Bluefield platforms the OpenSSL dynamic engine (-engine pka, in the above example) is loaded by default.
[Regression Potential]
* The regression can be considered as low, since the rings are shared in a synchronized manner
there is no corruption due to different applications running concurrently.
* As there are limited resources (PKA rings) available, if exhausted, can cause applications
fail to execute (due to resource unavailability). This is an expected behaviour.
[Other]
* Note: Unit of PKA HW available for application usage is called a ring. |
On some Bluefield platforms, the reboot flow leaves PKA traces in the kernel.
This is due to PKA being corrupt on boot-up due to multiple applications using PKA at the same time.
Handling multiple applications requires a new feature in the PKA driver.
SRU Justification:
[Impact]
* Kernel traces are seen at startup on Bluefield platforms (by Mellanox/Nvidia) due to applications using public key accelerator (PKA) hardware simultaneously.
[Fix]
* Allow synchronized usage of PKA hardware resources "pka: Handle ring open scenario when rings are busy"
[Test Case]
* Trigger multiple processes/applications to use PKA HW simultaneously, this can be done via OpenSSL. Run the OpenSSL speed test with multiple processes using 'pka' engine. Ex: openssl speed -multi 2 -engine pka rsa512
* Note: On Bluefield platforms the OpenSSL dynamic engine (-engine pka, in the above example) is loaded by default.
[Regression Potential]
* The regression can be considered as low, since the rings are shared in a synchronized manner there is no corruption due to different applications running concurrently.
* As there are limited resources (PKA rings) available, if exhausted, can cause applications fail to execute (due to resource unavailability). This is an expected behaviour.
[Other]
* Note: Unit of PKA HW available for application usage is called a ring. |
|
| 2021-02-25 08:58:17 |
Kleber Sacilotto de Souza |
nominated for series |
|
Ubuntu Focal |
|
| 2021-02-25 08:58:17 |
Kleber Sacilotto de Souza |
bug task added |
|
linux-bluefield (Ubuntu Focal) |
|
| 2021-02-25 08:58:25 |
Kleber Sacilotto de Souza |
linux-bluefield (Ubuntu Focal): status |
New |
In Progress |
|
| 2021-02-25 08:58:34 |
Kleber Sacilotto de Souza |
linux-bluefield (Ubuntu Focal): importance |
Undecided |
Medium |
|
| 2021-02-25 08:58:36 |
Kleber Sacilotto de Souza |
linux-bluefield (Ubuntu): status |
New |
Invalid |
|
| 2021-02-26 09:04:33 |
Stefan Bader |
linux-bluefield (Ubuntu Focal): status |
In Progress |
Fix Committed |
|
| 2021-03-09 19:22:52 |
Stefan Bader |
tags |
|
verification-needed-focal |
|
| 2021-03-11 14:42:20 |
Meriton Tuli |
tags |
verification-needed-focal |
verification-done-focal |
|
| 2021-05-10 19:53:32 |
Launchpad Janitor |
linux-bluefield (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2021-05-10 19:53:32 |
Launchpad Janitor |
cve linked |
|
2021-29650 |
|
