Closed rbusquet closed 4 years ago
On debian, userns
is compiled into the kernel, but disabled by default for security purposes. You'll need to enable it.
Try the following to enable it until the next reboot:
$ sudo su
$ echo 1 > /proc/sys/kernel/unprivileged_userns_clone
Then try re-running sudo sysctl -w kernel.unprivileged_userns_clone=1
to enable it. That should allow it to persist across reboots.
This appears to be a debian-specific support question, though. Nothing in the patchsets appear to cause this behaviour, so I'm not sure if there's any action item to address here. This should probably be closed in favour of other support forums (Stack Overflow or the debian mailing list, for example).
Thank you @bacongobbler ! I’ll definitely try that. I’ll close the ticket, and if I can’t move forward I’ll try other forums. Thanks for your help!
This might be relevant here as we're not exactly using the "official" Ubuntu source, but I know too little about the Ubuntu/Debian specific patches and their interaction with Docker/namespaces to tell.
All I can tell you is that we don't use the same source that the official Ubuntu kernel packages use, so some patches may not be included and some things might be different than on the "normal" Ubuntu. We instead use the Ubuntu mainline PPA (https://kernel.ubuntu.com/~kernel-ppa/mainline/) to build our kernels, which is something you might want to mention if you look for help elsewhere. As far as I can tell this is usually closer to the upstream kernel than the patched Ubuntu source. (The reason why we use the PPA is that we don't want to/have the capacity to maintain additional kernel versions and on top of that the keep up with the distro specific patch sets, so we stick with the PPA instead which gives us the latest upstream version and use similar sources for the other distros).
tried the command from @bacongobbler and I got bash: /proc/sys/kernel/unprivileged_userns_clone: No such file or directory
I'll try to find a docker or debian forum and follow up on the issue. I'm also thinking about booting a plain 5.6 debian kernel and see if it's still issue.
Anyway, thanks for the feedback.
Can't configure rootless docker to run with overlay2.
I'm trying to use my surface laptop 3 as my development environment. It was recommended to use rootless docker. The issue is that with rootless docker I can only use the
vfs
file system, which has been causing issues with disk space.https://docs.docker.com/engine/security/rootless/ mentions using Ubuntu wouldn't need any more configuration to get overlay without root access. I imagined that using this firmware would make me need to do further configuration, since I managed to get everything working when running ubuntu's original firmware.
I can't pass this step:
I'd appreciate it if I could get more help. I don't understand much about firmware differences, and just recently started looking more into it since I got this laptop. I understand there is evidence that Ubuntu is actually an exception to a rule, and enabling the changes that allow for rootless docker can be a security risk--reference can be found in this patch: https://salsa.debian.org/kernel-team/linux/blob/283390e7feb21b47779b48e0c8eb0cc409d2c815/debian/patches/debian/overlayfs-permit-mounts-in-userns.patch
Thanks in advance.
Environment
Linux ricardo-Surface-Laptop-3 5.6.11-surface #1 SMP Fri May 8 09:21:29 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
`dmesg` output
``` [ 0.000000] Linux version 5.6.11-surface (root@53dd4e1b6433) (gcc version 9.3.0 (Debian 9.3.0-12)) #1 SMP Fri May 8 09:21:29 UTC 2020 [ 0.000000] Command line: BOOT_IMAGE=/vmlinuz-5.6.11-surface root=UUID=6d3ea128-8513-4f17-9306-699762511e8a ro quiet splash vt.handoff=7 [ 0.000000] KERNEL supported cpus: [ 0.000000] Intel GenuineIntel [ 0.000000] AMD AuthenticAMD [ 0.000000] Hygon HygonGenuine [ 0.000000] Centaur CentaurHauls [ 0.000000] zhaoxin Shanghai [ 0.000000] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' [ 0.000000] x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' [ 0.000000] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000] x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 [ 0.000000] x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 [ 0.000000] x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 [ 0.000000] x86/fpu: xstate_offset[9]: 2432, xstate_sizes[9]: 8 [ 0.000000] x86/fpu: Enabled xstate features 0x2e7, context size is 2440 bytes, using 'compacted' format. [ 0.000000] BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable [ 0.000000] BIOS-e820: [mem 0x00000000000a0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000007a831fff] usable [ 0.000000] BIOS-e820: [mem 0x000000007a832000-0x000000007a832fff] ACPI NVS [ 0.000000] BIOS-e820: [mem 0x000000007a833000-0x000000007a833fff] reserved [ 0.000000] BIOS-e820: [mem 0x000000007a834000-0x000000007bae1fff] usable [ 0.000000] BIOS-e820: [mem 0x000000007bae2000-0x000000007bb89fff] reserved [ 0.000000] BIOS-e820: [mem 0x000000007bb8a000-0x000000007bbb3fff] ACPI NVS [ 0.000000] BIOS-e820: [mem 0x000000007bbb4000-0x000000007bbfefff] ACPI data [ 0.000000] BIOS-e820: [mem 0x000000007bbff000-0x000000007bbfffff] usable [ 0.000000] BIOS-e820: [mem 0x000000007bc00000-0x00000000953fffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fe010000-0x00000000fe010fff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fed20000-0x00000000fed7ffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000046abfffff] usable [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] efi: EFI v2.70 by MSFT [ 0.000000] efi: ACPI=0x7bbfe000 ACPI 2.0=0x7bbfe014 TPMFinalLog=0x7bbab000 SMBIOS=0x7bb51000 SMBIOS 3.0=0x7bb4f000 MEMATTR=0x77e1a518 ESRT=0x78ab7398 RNG=0x7bb64798 TPMEventLog=0x77e01018 [ 0.000000] efi: seeding entropy pool [ 0.000000] random: fast init done [ 0.000000] SMBIOS 3.2.0 present. [ 0.000000] DMI: Microsoft Corporation Surface Laptop 3/Surface Laptop 3, BIOS 7.100.140 12/20/2019 [ 0.000000] tsc: Detected 1500.000 MHz processor [ 0.001647] tsc: Detected 1497.600 MHz TSC [ 0.001647] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved [ 0.001650] e820: remove [mem 0x000a0000-0x000fffff] usable [ 0.001659] last_pfn = 0x46ac00 max_arch_pfn = 0x400000000 [ 0.001666] MTRR default type: write-back [ 0.001667] MTRR fixed ranges enabled: [ 0.001669] 00000-9FFFF write-back [ 0.001670] A0000-BFFFF uncachable [ 0.001671] C0000-FFFFF write-protect [ 0.001672] MTRR variable ranges enabled: [ 0.001675] 0 base 00C0000000 mask 7FC0000000 uncachable [ 0.001676] 1 base 00A0000000 mask 7FE0000000 uncachable [ 0.001677] 2 base 0098000000 mask 7FF8000000 uncachable [ 0.001678] 3 base 0094000000 mask 7FFC000000 uncachable [ 0.001680] 4 base 0092000000 mask 7FFE000000 uncachable [ 0.001681] 5 base 0091000000 mask 7FFF000000 uncachable [ 0.001682] 6 base 4000000000 mask 4000000000 uncachable [ 0.001683] 7 disabled [ 0.001684] 8 disabled [ 0.001685] 9 disabled [ 0.002630] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.002984] last_pfn = 0x7bc00 max_arch_pfn = 0x400000000 [ 0.030366] esrt: Reserving ESRT space from 0x0000000078ab7398 to 0x0000000078ab74e8. [ 0.030376] e820: update [mem 0x78ab7000-0x78ab7fff] usable ==> reserved [ 0.030439] check: Scanning 1 areas for low memory corruption [ 0.030445] Using GB pages for direct mapping [ 0.030448] BRK [0x464201000, 0x464201fff] PGTABLE [ 0.030450] BRK [0x464202000, 0x464202fff] PGTABLE [ 0.030451] BRK [0x464203000, 0x464203fff] PGTABLE [ 0.030487] BRK [0x464204000, 0x464204fff] PGTABLE [ 0.030489] BRK [0x464205000, 0x464205fff] PGTABLE [ 0.030627] BRK [0x464206000, 0x464206fff] PGTABLE [ 0.030656] BRK [0x464207000, 0x464207fff] PGTABLE [ 0.030719] BRK [0x464208000, 0x464208fff] PGTABLE [ 0.030801] Secure boot enabled [ 0.030802] RAMDISK: [mem 0x3b15d000-0x3fffdfff] [ 0.030830] ACPI: Early table checksum verification disabled [ 0.030834] ACPI: RSDP 0x000000007BBFE014 000024 (v02 MSFT ) [ 0.030839] ACPI: XSDT 0x000000007BBFD0E8 0000C4 (v01 MSFT MSFT 00000002 MSFT 20160422) [ 0.030846] ACPI: FACP 0x000000007BBE3000 000114 (v06 MSFT MSFT 00000002 MSFT 20160422) [ 0.030854] ACPI: DSDT 0x000000007BBC3000 01B1E0 (v02 MSFT MSFT 00000002 MSFT 20160422) [ 0.030858] ACPI: FACS 0x000000007BB92000 000040 [ 0.030862] ACPI: SSDT 0x000000007BBFB000 001B61 (v02 CpuRef CpuSsdt 00003000 INTL 20181003) [ 0.030866] ACPI: MSDM 0x000000007BBFA000 000055 (v01 MSFT 00000001 MSFT 00000001) [ 0.030870] ACPI: SSDT 0x000000007BBF4000 00557B (v02 OEMID DptfTabl 00001000 INTL 20181003) [ 0.030874] ACPI: SSDT 0x000000007BBF0000 0033E3 (v02 SaSsdt SaSsdt 00003000 INTL 20181003) [ 0.030878] ACPI: SSDT 0x000000007BBE4000 00B27A (v02 INTEL TcssSsdt 00001000 INTL 20181003) [ 0.030881] ACPI: HPET 0x000000007BBE2000 000038 (v01 MSFT MSFT 00000002 MSFT 20160422) [ 0.030885] ACPI: LPIT 0x000000007BBE1000 000094 (v01 MSFT MSFT 00000002 MSFT 20160422) [ 0.030889] ACPI: APIC 0x000000007BBE0000 00012C (v03 MSFT MSFT 00000002 MSFT 20160422) [ 0.030893] ACPI: MCFG 0x000000007BBDF000 00003C (v01 MSFT MSFT 00000002 MSFT 20160422) [ 0.030896] ACPI: SSDT 0x000000007BBC2000 0000DD (v02 MSFT DEVPANEL 00000001 INTL 20181003) [ 0.030900] ACPI: SSDT 0x000000007BBC1000 000DB4 (v02 MSFT RTD3_ED 00001000 INTL 20181003) [ 0.030904] ACPI: SSDT 0x000000007BBC0000 0009DE (v02 MSFT xh_ed000 00000000 INTL 20181003) [ 0.030908] ACPI: NHLT 0x000000007BBBF000 00002D (v00 MSFT MSFT 00000002 MSFT 20160422) [ 0.030911] ACPI: SSDT 0x000000007BBBE000 000574 (v02 MSFT Tpm2Tabl 00001000 INTL 20181003) [ 0.030915] ACPI: TPM2 0x000000007BBBD000 000034 (v03 MSFT MSFT 00000002 MSFT 20160422) [ 0.030919] ACPI: DMAR 0x000000007BBBC000 000088 (v02 MSFT MSFT 00000002 MSFT 20160422) [ 0.030922] ACPI: BGRT 0x000000007BBBB000 000038 (v01 MSFT MSFT 00000002 MSFT 20160422) [ 0.030926] ACPI: WSMT 0x000000007BBBA000 000028 (v01 MSFT MSFT 00000002 MSFT 20160422) [ 0.030930] ACPI: FPDT 0x000000007BBB9000 000034 (v01 MSFT MSFT 00000002 MSFT 20160422) [ 0.030941] ACPI: Local APIC address 0xfee00000 [ 0.031323] No NUMA configuration found [ 0.031324] Faking a node at [mem 0x0000000000000000-0x000000046abfffff] [ 0.031334] NODE_DATA(0) allocated [mem 0x46abd6000-0x46abfffff] [ 0.031675] Zone ranges: [ 0.031676] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.031678] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.031679] Normal [mem 0x0000000100000000-0x000000046abfffff] [ 0.031680] Device empty [ 0.031682] Movable zone start for each node [ 0.031687] Early memory node ranges [ 0.031688] node 0: [mem 0x0000000000001000-0x000000000009ffff] [ 0.031690] node 0: [mem 0x0000000000100000-0x000000007a831fff] [ 0.031691] node 0: [mem 0x000000007a834000-0x000000007bae1fff] [ 0.031692] node 0: [mem 0x000000007bbff000-0x000000007bbfffff] [ 0.031693] node 0: [mem 0x0000000100000000-0x000000046abfffff] [ 0.032055] Zeroed struct page in unavailable ranges: 39296 pages [ 0.032057] Initmem setup node 0 [mem 0x0000000000001000-0x000000046abfffff] [ 0.032060] On node 0 totalpages: 4089472 [ 0.032061] DMA zone: 64 pages used for memmap [ 0.032062] DMA zone: 25 pages reserved [ 0.032063] DMA zone: 3999 pages, LIFO batch:0 [ 0.032115] DMA32 zone: 7852 pages used for memmap [ 0.032116] DMA32 zone: 502497 pages, LIFO batch:63 [ 0.038789] Normal zone: 55984 pages used for memmap [ 0.038790] Normal zone: 3582976 pages, LIFO batch:63 [ 0.082420] x86/hpet: Will disable the HPET for this platform because it's not reliable [ 0.082452] Reserving Intel graphics memory at [mem 0x91800000-0x953fffff] [ 0.082872] ACPI: PM-Timer IO Port: 0x1808 [ 0.082874] ACPI: Local APIC address 0xfee00000 [ 0.082883] ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) [ 0.082884] ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) [ 0.082885] ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) [ 0.082886] ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) [ 0.082886] ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) [ 0.082887] ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) [ 0.082888] ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) [ 0.082889] ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) [ 0.082889] ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) [ 0.082890] ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) [ 0.082891] ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) [ 0.082891] ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) [ 0.082892] ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) [ 0.082893] ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) [ 0.082893] ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) [ 0.082894] ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) [ 0.082930] IOAPIC[0]: apic_id 2, version 32, address 0xfec00000, GSI 0-119 [ 0.082933] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.082934] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.082936] ACPI: IRQ0 used by override. [ 0.082938] ACPI: IRQ9 used by override. [ 0.082940] Using ACPI (MADT) for SMP configuration information [ 0.082942] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 0.082954] e820: update [mem 0x78358000-0x78384fff] usable ==> reserved [ 0.082964] smpboot: Allowing 8 CPUs, 0 hotplug CPUs [ 0.082983] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 0.082984] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000fffff] [ 0.082986] PM: hibernation: Registered nosave memory: [mem 0x78358000-0x78384fff] [ 0.082988] PM: hibernation: Registered nosave memory: [mem 0x78ab7000-0x78ab7fff] [ 0.082990] PM: hibernation: Registered nosave memory: [mem 0x7a832000-0x7a832fff] [ 0.082990] PM: hibernation: Registered nosave memory: [mem 0x7a833000-0x7a833fff] [ 0.082992] PM: hibernation: Registered nosave memory: [mem 0x7bae2000-0x7bb89fff] [ 0.082993] PM: hibernation: Registered nosave memory: [mem 0x7bb8a000-0x7bbb3fff] [ 0.082993] PM: hibernation: Registered nosave memory: [mem 0x7bbb4000-0x7bbfefff] [ 0.082995] PM: hibernation: Registered nosave memory: [mem 0x7bc00000-0x953fffff] [ 0.082996] PM: hibernation: Registered nosave memory: [mem 0x95400000-0xfe00ffff] [ 0.082996] PM: hibernation: Registered nosave memory: [mem 0xfe010000-0xfe010fff] [ 0.082997] PM: hibernation: Registered nosave memory: [mem 0xfe011000-0xfed1ffff] [ 0.082998] PM: hibernation: Registered nosave memory: [mem 0xfed20000-0xfed7ffff] [ 0.082998] PM: hibernation: Registered nosave memory: [mem 0xfed80000-0xffffffff] [ 0.083001] [mem 0x95400000-0xfe00ffff] available for PCI devices [ 0.083002] Booting paravirtualized kernel on bare hardware [ 0.083006] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns [ 0.083013] setup_percpu: NR_CPUS:8192 nr_cpumask_bits:8 nr_cpu_ids:8 nr_node_ids:1 [ 0.083287] percpu: Embedded 57 pages/cpu s196608 r8192 d28672 u262144 [ 0.083295] pcpu-alloc: s196608 r8192 d28672 u262144 alloc=1*2097152 [ 0.083295] pcpu-alloc: [0] 0 1 2 3 4 5 6 7 [ 0.083326] Built 1 zonelists, mobility grouping on. Total pages: 4025547 [ 0.083326] Policy zone: Normal [ 0.083328] Kernel command line: BOOT_IMAGE=/vmlinuz-5.6.11-surface root=UUID=6d3ea128-8513-4f17-9306-699762511e8a ro quiet splash vt.handoff=7 [ 0.084457] Dentry cache hash table entries: 2097152 (order: 12, 16777216 bytes, linear) [ 0.084951] Inode-cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) [ 0.085054] mem auto-init: stack:off, heap alloc:on, heap free:off [ 0.135590] Memory: 15826404K/16357888K available (14339K kernel code, 2529K rwdata, 4964K rodata, 2580K init, 4992K bss, 531484K reserved, 0K cma-reserved) [ 0.135599] random: get_random_u64 called from __kmem_cache_create+0x42/0x540 with crng_init=1 [ 0.135770] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=8, Nodes=1 [ 0.135788] ftrace: allocating 44685 entries in 175 pages [ 0.163567] ftrace: allocated 175 pages with 6 groups [ 0.163717] rcu: Hierarchical RCU implementation. [ 0.163719] rcu: RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=8. [ 0.163720] Tasks RCU enabled. [ 0.163721] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies. [ 0.163723] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=8 [ 0.167795] NR_IRQS: 524544, nr_irqs: 2048, preallocated irqs: 16 [ 0.168334] random: crng done (trusting CPU's manufacturer) [ 0.168369] Console: colour dummy device 80x25 [ 0.168373] printk: console [tty0] enabled [ 0.168396] ACPI: Core revision 20200110 [ 0.168683] APIC: Switch to symmetric I/O mode setup [ 0.168685] DMAR: Host address width 39 [ 0.168687] DMAR: DRHD base: 0x000000fed90000 flags: 0x0 [ 0.168694] DMAR: dmar0: reg_base_addr fed90000 ver 4:0 cap 1c0000c40660462 ecap 49e2ff0505e [ 0.168695] DMAR: DRHD base: 0x000000fed91000 flags: 0x1 [ 0.168702] DMAR: dmar1: reg_base_addr fed91000 ver 1:0 cap d2008c40660462 ecap f050da [ 0.168704] DMAR: RMRR base: 0x00000091000000 end: 0x000000953fffff [ 0.168708] DMAR-IR: IOAPIC id 2 under DRHD base 0xfed91000 IOMMU 1 [ 0.168708] DMAR-IR: HPET id 0 under DRHD base 0xfed91000 [ 0.168710] DMAR-IR: x2apic is disabled because BIOS sets x2apic opt out bit. [ 0.168711] DMAR-IR: Use 'intremap=no_x2apic_optout' to override the BIOS setting. [ 0.170458] DMAR-IR: Enabled IRQ remapping in xapic mode [ 0.170460] x2apic: IRQ remapping doesn't support X2APIC mode [ 0.175012] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x159647815e3, max_idle_ns: 440795269835 ns [ 0.175020] Calibrating delay loop (skipped), value calculated using timer frequency.. 2995.20 BogoMIPS (lpj=5990400) [ 0.175023] pid_max: default: 32768 minimum: 301 [ 0.179016] LSM: Security Framework initializing [ 0.179016] Yama: becoming mindful. [ 0.179016] AppArmor: AppArmor initialized [ 0.179016] Mount-cache hash table entries: 32768 (order: 6, 262144 bytes, linear) [ 0.179016] Mountpoint-cache hash table entries: 32768 (order: 6, 262144 bytes, linear) [ 0.179016] *** VALIDATE tmpfs *** [ 0.179016] *** VALIDATE proc *** [ 0.179016] *** VALIDATE cgroup *** [ 0.179016] *** VALIDATE cgroup2 *** [ 0.179016] x86/cpu: User Mode Instruction Prevention (UMIP) activated [ 0.179016] mce: CPU0: Thermal monitoring enabled (TM1) [ 0.179016] process: using mwait in idle threads [ 0.179016] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 [ 0.179016] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 0.179016] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization [ 0.179016] Spectre V2 : Mitigation: Enhanced IBRS [ 0.179016] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 0.179016] Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier [ 0.179016] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp [ 0.179016] Freeing SMP alternatives memory: 40K [ 0.179016] TSC deadline timer enabled [ 0.179016] smpboot: CPU0: Intel(R) Core(TM) i7-1065G7 CPU @ 1.30GHz (family: 0x6, model: 0x7e, stepping: 0x5) [ 0.179016] Performance Events: PEBS fmt4+-baseline, Icelake events, 32-deep LBR, full-width counters, Intel PMU driver. [ 0.179016] ... version: 5 [ 0.179016] ... bit width: 48 [ 0.179016] ... generic registers: 8 [ 0.179016] ... value mask: 0000ffffffffffff [ 0.179016] ... max period: 00007fffffffffff [ 0.179016] ... fixed-purpose events: 4 [ 0.179016] ... event mask: 0000000f000000ff [ 0.179016] rcu: Hierarchical SRCU implementation. [ 0.179016] NMI watchdog: Enabled. Permanently consumes one hw-PMU counter. [ 0.179016] smp: Bringing up secondary CPUs ... [ 0.179016] x86: Booting SMP configuration: [ 0.179016] .... node #0, CPUs: #1 #2 #3 #4 #5 #6 #7 [ 0.191982] smp: Brought up 1 node, 8 CPUs [ 0.191982] smpboot: Max logical packages: 1 [ 0.191982] smpboot: Total of 8 processors activated (23961.60 BogoMIPS) [ 0.195482] devtmpfs: initialized [ 0.195482] x86/mm: Memory block size: 128MB [ 0.197422] PM: Registering ACPI NVS region [mem 0x7a832000-0x7a832fff] (4096 bytes) [ 0.197422] PM: Registering ACPI NVS region [mem 0x7bb8a000-0x7bbb3fff] (172032 bytes) [ 0.197422] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.197422] futex hash table entries: 2048 (order: 5, 131072 bytes, linear) [ 0.197422] pinctrl core: initialized pinctrl subsystem [ 0.197422] PM: RTC time: 23:59:22, date: 2020-05-09 [ 0.197422] thermal_sys: Registered thermal governor 'fair_share' [ 0.197422] thermal_sys: Registered thermal governor 'bang_bang' [ 0.197422] thermal_sys: Registered thermal governor 'step_wise' [ 0.197422] thermal_sys: Registered thermal governor 'user_space' [ 0.197422] NET: Registered protocol family 16 [ 0.199105] audit: initializing netlink subsys (disabled) [ 0.199118] audit: type=2000 audit(1589068762.024:1): state=initialized audit_enabled=0 res=1 [ 0.199168] EISA bus registered [ 0.199182] cpuidle: using governor ladder [ 0.199182] cpuidle: using governor menu [ 0.199182] ACPI: bus type PCI registered [ 0.199182] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 0.199194] PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xe0000000-0xefffffff] (base 0xe0000000) [ 0.199212] PCI: not using MMCONFIG [ 0.199213] PCI: Using configuration type 1 for base access [ 0.200651] ENERGY_PERF_BIAS: Set to 'normal', was 'performance' [ 0.203506] HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages [ 0.203506] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages [ 0.207095] ACPI: Added _OSI(Module Device) [ 0.207096] ACPI: Added _OSI(Processor Device) [ 0.207097] ACPI: Added _OSI(3.0 _SCP Extensions) [ 0.207099] ACPI: Added _OSI(Processor Aggregator Device) [ 0.207100] ACPI: Added _OSI(Linux-Dell-Video) [ 0.207102] ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) [ 0.207103] ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) [ 0.282401] ACPI: 9 ACPI AML tables successfully acquired and loaded [ 0.290834] ACPI: Dynamic OEM Table Load: [ 0.290851] ACPI: SSDT 0xFFFF9EDBA7C0EE00 0000F4 (v02 PmRef Cpu0Psd 00003000 INTL 20181003) [ 0.292704] ACPI: \_SB_.PR00: _OSC native thermal LVT Acked [ 0.293947] ACPI: Dynamic OEM Table Load: [ 0.293954] ACPI: SSDT 0xFFFF9EDBA83AB800 000394 (v02 PmRef Cpu0Cst 00003001 INTL 20181003) [ 0.295850] ACPI: Dynamic OEM Table Load: [ 0.295857] ACPI: SSDT 0xFFFF9EDBA7D23000 000437 (v02 PmRef Cpu0Ist 00003000 INTL 20181003) [ 0.297836] ACPI: Dynamic OEM Table Load: [ 0.297841] ACPI: SSDT 0xFFFF9EDBA7E18E00 00012C (v02 PmRef Cpu0Hwp 00003000 INTL 20181003) [ 0.299600] ACPI: Dynamic OEM Table Load: [ 0.299608] ACPI: SSDT 0xFFFF9EDBA7D26000 000724 (v02 PmRef HwpLvt 00003000 INTL 20181003) [ 0.301843] ACPI: Dynamic OEM Table Load: [ 0.301849] ACPI: SSDT 0xFFFF9EDBA7D20800 0005FC (v02 PmRef ApIst 00003000 INTL 20181003) [ 0.303938] ACPI: Dynamic OEM Table Load: [ 0.303944] ACPI: SSDT 0xFFFF9EDBA83A9000 000317 (v02 PmRef ApHwp 00003000 INTL 20181003) [ 0.305984] ACPI: Dynamic OEM Table Load: [ 0.305991] ACPI: SSDT 0xFFFF9EDBA837B000 000AB0 (v02 PmRef ApPsd 00003000 INTL 20181003) [ 0.308882] ACPI: Dynamic OEM Table Load: [ 0.308888] ACPI: SSDT 0xFFFF9EDBA83AC400 00030A (v02 PmRef ApCst 00003000 INTL 20181003) [ 0.315264] ACPI: Interpreter enabled [ 0.315338] ACPI: (supports S0 S4 S5) [ 0.315339] ACPI: Using IOAPIC for interrupt routing [ 0.315398] PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xe0000000-0xefffffff] (base 0xe0000000) [ 0.316429] PCI: MMCONFIG at [mem 0xe0000000-0xefffffff] reserved in ACPI motherboard resources [ 0.316447] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 0.317124] ACPI: Enabled 8 GPEs in block 00 to 7F [ 0.323557] ACPI: Power Resource [BTPR] (on) [ 0.336789] ACPI: Power Resource [V0PR] (on) [ 0.337032] ACPI: Power Resource [V1PR] (on) [ 0.337270] ACPI: Power Resource [V2PR] (on) [ 0.339461] ACPI: Power Resource [WRST] (on) [ 0.339749] ACPI: Power Resource [TBT0] (on) [ 0.339809] ACPI: Power Resource [TBT1] (on) [ 0.339862] ACPI: Power Resource [D3C] (on) [ 0.353972] ACPI: Power Resource [PIN] (off) [ 0.354744] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-fe]) [ 0.354751] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] [ 0.365369] acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug SHPCHotplug PME AER PCIeCapability LTR] [ 0.371024] PCI host bridge to bus 0000:00 [ 0.371027] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 0.371029] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 0.371031] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 0.371032] pci_bus 0000:00: root bus resource [mem 0x000c0000-0x000c3fff window] [ 0.371033] pci_bus 0000:00: root bus resource [mem 0x000c4000-0x000c7fff window] [ 0.371034] pci_bus 0000:00: root bus resource [mem 0x000c8000-0x000cbfff window] [ 0.371035] pci_bus 0000:00: root bus resource [mem 0x000cc000-0x000cffff window] [ 0.371036] pci_bus 0000:00: root bus resource [mem 0x000d0000-0x000d3fff window] [ 0.371037] pci_bus 0000:00: root bus resource [mem 0x000d4000-0x000d7fff window] [ 0.371038] pci_bus 0000:00: root bus resource [mem 0x000d8000-0x000dbfff window] [ 0.371039] pci_bus 0000:00: root bus resource [mem 0x000dc000-0x000dffff window] [ 0.371040] pci_bus 0000:00: root bus resource [mem 0x000e0000-0x000e3fff window] [ 0.371041] pci_bus 0000:00: root bus resource [mem 0x000e4000-0x000e7fff window] [ 0.371042] pci_bus 0000:00: root bus resource [mem 0x000e8000-0x000ebfff window] [ 0.371043] pci_bus 0000:00: root bus resource [mem 0x000ec000-0x000effff window] [ 0.371044] pci_bus 0000:00: root bus resource [mem 0x000f0000-0x000fffff window] [ 0.371045] pci_bus 0000:00: root bus resource [mem 0x95400000-0xdfffffff window] [ 0.371046] pci_bus 0000:00: root bus resource [mem 0x4000000000-0x7fffffffff window] [ 0.371048] pci_bus 0000:00: root bus resource [bus 00-fe] [ 0.371092] pci 0000:00:00.0: [8086:8a12] type 00 class 0x060000 [ 0.373194] pci 0000:00:02.0: [8086:8a52] type 00 class 0x030000 [ 0.373212] pci 0000:00:02.0: reg 0x10: [mem 0x6000000000-0x6000ffffff 64bit] [ 0.373221] pci 0000:00:02.0: reg 0x18: [mem 0x4000000000-0x400fffffff 64bit pref] [ 0.373227] pci 0000:00:02.0: reg 0x20: [io 0x3000-0x303f] [ 0.373249] pci 0000:00:02.0: BAR 2: assigned to efifb [ 0.375032] pci 0000:00:04.0: [8086:8a03] type 00 class 0x118000 [ 0.375062] pci 0000:00:04.0: reg 0x10: [mem 0x6001120000-0x600112ffff 64bit] [ 0.377017] pci 0000:00:0d.0: [8086:8a13] type 00 class 0x0c0330 [ 0.377038] pci 0000:00:0d.0: reg 0x10: [mem 0x6001110000-0x600111ffff 64bit] [ 0.377109] pci 0000:00:0d.0: PME# supported from D3hot D3cold [ 0.378985] pci 0000:00:14.0: [8086:34ed] type 00 class 0x0c0330 [ 0.379039] pci 0000:00:14.0: reg 0x10: [mem 0x6001100000-0x600110ffff 64bit] [ 0.379163] pci 0000:00:14.0: PME# supported from D3hot D3cold [ 0.380970] pci 0000:00:14.2: [8086:34ef] type 00 class 0x050000 [ 0.381027] pci 0000:00:14.2: reg 0x10: [mem 0x6001138000-0x6001139fff 64bit] [ 0.381047] pci 0000:00:14.2: reg 0x18: [mem 0x6001140000-0x6001140fff 64bit] [ 0.382894] pci 0000:00:14.3: [8086:34f0] type 00 class 0x028000 [ 0.382948] pci 0000:00:14.3: reg 0x10: [mem 0x6001134000-0x6001137fff 64bit] [ 0.383126] pci 0000:00:14.3: PME# supported from D0 D3hot D3cold [ 0.385002] pci 0000:00:15.0: [8086:34e8] type 00 class 0x0c8000 [ 0.385075] pci 0000:00:15.0: reg 0x10: [mem 0x00000000-0x00000fff 64bit] [ 0.387136] pci 0000:00:15.1: [8086:34e9] type 00 class 0x0c8000 [ 0.387215] pci 0000:00:15.1: reg 0x10: [mem 0x00000000-0x00000fff 64bit] [ 0.389217] pci 0000:00:16.0: [8086:34e0] type 00 class 0x078000 [ 0.389258] pci 0000:00:16.0: reg 0x10: [mem 0x600113d000-0x600113dfff 64bit] [ 0.389389] pci 0000:00:16.0: PME# supported from D3hot [ 0.391236] pci 0000:00:16.4: [8086:34e4] type 00 class 0x078000 [ 0.391278] pci 0000:00:16.4: reg 0x10: [mem 0x600113c000-0x600113cfff 64bit] [ 0.391407] pci 0000:00:16.4: PME# supported from D3hot [ 0.393215] pci 0000:00:19.0: [8086:34c5] type 00 class 0x0c8000 [ 0.393292] pci 0000:00:19.0: reg 0x10: [mem 0x00000000-0x00000fff 64bit] [ 0.395331] pci 0000:00:1d.0: [8086:34b0] type 01 class 0x060400 [ 0.395501] pci 0000:00:1d.0: PME# supported from D0 D3hot D3cold [ 0.395544] pci 0000:00:1d.0: PTM enabled (root), 4ns granularity [ 0.397501] pci 0000:00:1e.0: [8086:34a8] type 00 class 0x078000 [ 0.397573] pci 0000:00:1e.0: reg 0x10: [mem 0x00000000-0x00000fff 64bit] [ 0.399605] pci 0000:00:1f.0: [8086:3482] type 00 class 0x060100 [ 0.401556] pci 0000:00:1f.3: [8086:34c8] type 00 class 0x040380 [ 0.401646] pci 0000:00:1f.3: reg 0x10: [mem 0x6001130000-0x6001133fff 64bit] [ 0.401730] pci 0000:00:1f.3: reg 0x20: [mem 0x6001000000-0x60010fffff 64bit] [ 0.401954] pci 0000:00:1f.3: PME# supported from D3hot D3cold [ 0.403838] pci 0000:00:1f.5: [8086:34a4] type 00 class 0x0c8000 [ 0.403867] pci 0000:00:1f.5: reg 0x10: [mem 0xfe010000-0xfe010fff] [ 0.405810] pci 0000:01:00.0: [1c5c:1327] type 00 class 0x010802 [ 0.405858] pci 0000:01:00.0: reg 0x10: [mem 0x95400000-0x95403fff 64bit] [ 0.406030] pci 0000:01:00.0: supports D1 [ 0.406031] pci 0000:01:00.0: PME# supported from D0 D1 D3hot [ 0.406233] pci 0000:00:1d.0: PCI bridge to [bus 01] [ 0.406239] pci 0000:00:1d.0: bridge window [mem 0x95400000-0x954fffff] [ 0.479038] iommu: Default domain type: Translated [ 0.479038] pci 0000:00:02.0: vgaarb: setting as boot VGA device [ 0.479038] pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 0.479038] pci 0000:00:02.0: vgaarb: bridge control possible [ 0.479038] vgaarb: loaded [ 0.479216] SCSI subsystem initialized [ 0.479233] libata version 3.00 loaded. [ 0.479233] ACPI: bus type USB registered [ 0.479233] usbcore: registered new interface driver usbfs [ 0.479233] usbcore: registered new interface driver hub [ 0.479233] usbcore: registered new device driver usb [ 0.479233] pps_core: LinuxPPS API ver. 1 registered [ 0.479233] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti