LKML Archive on
help / color / mirror / Atom feed
To: Michael Kelley <>,
	"Eric W. Biederman" <>
Cc: Konrad Rzeszutek Wilk <>,
	Dave Young <>,
	Andrew Morton <>,
	"" <>,
	"" <>,
	"" <>,
	Eric DeVolder <>,
	Tianyu Lan <>,
	Wei Liu <>,
	Masami Hiramatsu <>,
	HATAYAMA Daisuke <>
Subject: Re: [PATCH] Only allow to set crash_kexec_post_notifiers on boot time
Date: Thu, 24 Sep 2020 13:16:04 -0400	[thread overview]
Message-ID: <> (raw)
In-Reply-To: <>

On 9/24/20 12:43 PM, Michael Kelley wrote:
> From: Eric W. Biederman <> Sent: Thursday, September 24, 2020 9:26 AM
>> Michael Kelley <> writes:
>>>>> Added Hyper-V people and people who created the param, it is below
>>>>> commit, I also want to remove it if possible, let's see how people
>>>>> think, but the least way should be to disable the auto setting in both systemd
>>>>> and kernel:
>>> Hyper-V uses a notifier to inform the host system that a Linux VM has
>>> panic'ed.  Informing the host is particularly important in a public cloud
>>> such as Azure so that the cloud software can alert the customer, and can
>>> track cloud-wide reliability statistics.   Whether a kdump is taken is controlled
>>> entirely by the customer and how he configures the VM, and we want
>>> the host to be informed either way.
>> Why?
>> Why does the host care?
>> Especially if the VM continues executing into a kdump kernel?
> The host itself doesn't care.  But the host is a convenient out-of-band
> channel for recording that a panic has occurred and to collect basic data
> about the panic.  This out-of-band channel is then used to notify the end
> customer that his VM has panic'ed.  Sure, the customer should be running
> his own monitoring software, but customers don't always do what they
> should.  Equally important, the out-of-band channel allows the cloud
> infrastructure software to notice trends, such as that the rate of Linux
> panics has increased, and that perhaps there is a cloud problem that
> should be investigated.

In many cases (especially in cloud environment) your dump device is remote (e.g. iscsi) and kdump sometimes (often?) gets stuck because of connectivity issues (which could be cause of the panic in the first place). So it is quite desirable to inform the infrastructure that the VM is on its way out without waiting for kdump to complete.

>> Further like I have mentioned everytime something like this has come up
>> a call on the kexec on panic code path should be a direct call (That can
>> be audited) not something hidden in a notifier call chain (which can not).

We btw already have a direct call from panic() to kmsg_dump() which is indirectly controlled by crash_kexec_post_notifiers, and it would also be preferable to be able to call it before kdump as well.


> The use case I describe has no particular requirement that it be
> implemented via the notifier call chain.  If there's a better way to run
> some out-of-band notification code on all Linux panics regardless of
> whether a kdump is taken, we're open to such an alternative.

  reply	other threads:[~2020-09-24 17:16 UTC|newest]

Thread overview: 20+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-09-18  3:25 Dave Young
2020-09-19  0:47 ` Andrew Morton
2020-09-19  7:26   ` Dave Young
2020-09-21 20:18   ` Konrad Rzeszutek Wilk
2020-09-22  1:45     ` Eric W. Biederman
2020-09-23  2:43       ` Dave Young
2020-09-23 15:48         ` Konrad Rzeszutek Wilk
2020-09-24 16:15           ` Michael Kelley
2020-09-24 16:25             ` Eric W. Biederman
2020-09-24 16:43               ` Michael Kelley
2020-09-24 17:16                 ` boris.ostrovsky [this message]
2020-09-25  3:05                   ` Dave Young
2020-09-25 14:56                     ` Konrad Rzeszutek Wilk
2020-09-27  2:51                       ` Dave Young
2020-09-29 13:36                       ` Philipp Rudo
2020-09-29 19:10                         ` boris.ostrovsky
2020-09-22 10:58     ` Philipp Rudo
2020-09-22 14:50       ` boris.ostrovsky
2020-09-22 17:04         ` Guilherme G. Piccoli
2020-09-23  2:25     ` Dave Young

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \
    --subject='Re: [PATCH] Only allow to set crash_kexec_post_notifiers on boot time' \

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).