netdev - Re: [TEST] VirtioFS instead of 9p (was: net-next is OPEN)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <34e4f87d-a0c8-4ac3-afd8-a34bbab016ce@kernel.org>
Date: Mon, 25 Mar 2024 17:32:54 +0100
From: Matthieu Baerts <matttbe@...nel.org>
To: Jakub Kicinski <kuba@...nel.org>, netdev@...r.kernel.org,
 netdev-driver-reviewers@...r.kernel.org
Subject: Re: [TEST] VirtioFS instead of 9p (was: net-next is OPEN)

Hi Jakub,

On 25/03/2024 14:42, Jakub Kicinski wrote:
> net-next is open again, and accepting changes for v6.10.

Thank you for the notification!

> We seem to be in a good enough shape. For those trying to run selftests
> locally - 9p has a UaF bug, see the testing tree for the fix we're
> carrying locally.

With 'virtme-ng' used by NIPA, it is possible to use VirtioFS or
OverlayFS instead of 9p.

VirtioFS seems to perform much better than 9p [1]. All you need is to
install "virtiofsd" daemon in userspace [2]. It looks like Nipa is still
using 9p for the rootfs, it might be good to switch to VirtioFS if it is
easy :)

If you want to use OverlayFS (e.g. to mount the kselftests dir), you can
use "vng --overlay-rwdir". If you use "vng --rwdir" (or "vng --rodir"),
9p will be used. Maybe better to recommend that on the wiki [3]?

(The MPTCP CI didn't hit the bug with 9p, because it now uses vng with
VirtioFS.)

[1] https://lwn.net/Articles/951313/
[2] https://virtio-fs.gitlab.io/
[3]
https://github.com/linux-netdev/nipa/wiki/How-to-run-netdev-selftests-CI-style

> The changes in the timer subsystem also made a number
> of tests flaky, beware.

:'(

Cheers,
Matt
-- 
Sponsored by the NGI0 Core fund.