...
Description of problem: We anticipate CET support being merged into upstream Linux kernel in the near future: https://www.phoronix.com/news/Linux-6.4-Shadow-Stack-Coming While testing CentOS Stream 9 with custom kernel and glibc, both with shadow stack enabled, we were not able to start libvirtd service. Version-Release number of selected component (if applicable): The library that needs to be rebuilt with shadow stack enabled is provided by the package librados2: $ dnf provides /usr/lib64/ceph/libceph-common.so.2 librados2-2:16.2.4-5.el9.x86_64 : RADOS distributed object store client library Repo : @System Matched from: Filename : /usr/lib64/ceph/libceph-common.so.2 How reproducible: 100% Steps to Reproduce: 1. Boot CS9 with Linux kernel + glibc with CET enabled 2. $ sudo systemctl start libvirtd 3. $ sudo systemctl status libvirtd 3. $ sudo journalctl -ef libvirtd[42601]: internal error: Failed to load module '/usr/lib64/libvirt/storage-backend/libvirt_storage_backend_rbd.so': /usr/lib64/ceph/libceph-common.so.2: rebuild shared object with SHSTK support enabled Jul 20 12:30:14 gnr-bkc systemd[1]: libvirtd.service: Main process exited, code=exited, status=3/NOTIMPLEMENTED Actual results: libvirtd fails to run Expected results: libvirtd running
Won't Do
Click on a version to see all relevant bugs
Red Hat Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.