No description
Find a file
2015-05-08 10:28:55 +02:00
firmware-misc include missing firmware rtl8168g-1.fw 2014-02-18 08:14:15 +01:00
proxmox-ve compile for debian jessie, add proxmox-ve-3.10.0 packages 2015-03-06 07:51:54 +01:00
0001-UBUNTU-SAUCE-AppArmor-Add-profile-introspection-file.patch add apparmor patches from apparmor package 2015-04-05 18:14:55 +02:00
0002-UBUNTU-SAUCE-AppArmor-basic-networking-rules.patch add apparmor patches from apparmor package 2015-04-05 18:14:55 +02:00
0003-apparmor-Fix-quieting-of-audit-messages-for-network-.patch add apparmor patches from apparmor package 2015-04-05 18:14:55 +02:00
0004-UBUNTU-SAUCE-apparmor-Add-the-ability-to-mediate-mou.patch add apparmor patches from apparmor package 2015-04-05 18:14:55 +02:00
aacraid-linux-src-1.2.1-40700.tgz update drivers (e1000e, ibg, ixgbe, arcmsr aacraid, bnx2) 2014-08-08 10:12:16 +02:00
add-empty-ndo_poll_controller-to-veth.patch add Kernel patch to allow netpoll while veth is in use 2014-06-23 13:52:59 +02:00
apparmor-01-add-kvzalloc-to-handle-zeroing-for-kvmalloc.patch use apparmor as default security module 2015-04-05 13:19:12 +02:00
apparmor-02-fix-fully-qualified-name-parsing.patch use apparmor as default security module 2015-04-05 13:19:12 +02:00
apparmor-03-no-need-to-delay-vfree.patch use apparmor as default security module 2015-04-05 13:19:12 +02:00
apparmor-04-remove-minimum-size-check-for-vmalloc.patch use apparmor as default security module 2015-04-05 13:19:12 +02:00
apparmor-05-nick-kvfree-from-apparmor.patch use apparmor as default security module 2015-04-05 13:19:12 +02:00
arcmsr-1.30.0X.19-140509.zip update drivers (e1000e, ibg, ixgbe, arcmsr aacraid, bnx2) 2014-08-08 10:12:16 +02:00
assemble-firmware.pl skip firware file which are unavailable 2015-03-14 13:35:07 +01:00
bridge-forward-ipv6-neighbor-solicitation.patch add patch to forward ipv6 neighbor solicitation on bridge 2015-03-06 07:10:14 +01:00
bridge-patch.diff re-add patch bridge-patch.diff 2013-12-17 08:50:54 +01:00
changelog.Debian update intel network drivers 2015-05-08 10:28:55 +02:00
changelog.firmware bump firware package version to 1.1-4 2015-03-14 14:14:28 +01:00
config-3.10.0.diff add apparmor patches from apparmor package 2015-04-05 18:14:55 +02:00
control.firmware conflict with firmware-libertas and firmware-myricom 2013-12-13 06:29:02 +01:00
control.in allow grub-efi-ia32 boot loader 2014-08-23 09:05:55 +02:00
copyright add zfs copyright info 2015-01-11 10:09:16 +01:00
drbd-9.0.0rc2.tar.gz drbd9 update to commit 6d340f1f63db9d2dd38e3696e47c0d0e49f3f6b2 2015-05-08 10:23:53 +02:00
e1000e-3.1.0.2.tar.gz update drivers (e1000e, ibg, ixgbe, arcmsr aacraid, bnx2) 2014-08-08 10:12:16 +02:00
find-firmware.pl add script to extract used firmeware 2013-12-12 12:56:24 +01:00
fwlist-2.6.18-2-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.24-12-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.32-3-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.32-4-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.32-5-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.32-6-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.32-13-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.32-14-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.32-20-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.32-21-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.32-22-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-2.6.35-1-pve add firmeware files 2013-12-12 13:07:50 +01:00
fwlist-3.10.0-3-pve update drivers (e1000e, ibg, ixgbe, arcmsr aacraid, bnx2) 2014-08-08 10:12:16 +02:00
headers-control.in add kernel header package 2013-12-13 07:22:20 +01:00
headers-postinst.in add kernel header package 2013-12-13 07:22:20 +01:00
hpsa-3.4.6-170.tar.bz2 add latest hpsa driver 2015-01-13 17:30:38 +01:00
i40e-1.2.38.tar.gz update intel network drivers 2015-05-08 10:28:55 +02:00
igb-5.2.18.tar.gz update intel network drivers 2015-05-08 10:28:55 +02:00
ixgbe-4.0.3.tar.gz update intel network drivers 2015-05-08 10:28:55 +02:00
kernel-3.10.0-229.1.2.el7.src.rpm update kernel source to kernel-3.10.0-229.1.2.el7.src.rpm 2015-04-10 16:14:07 +02:00
Makefile update intel network drivers 2015-05-08 10:28:55 +02:00
netxtreme2-7.11.05.tar.gz update netxtreme2 drivers to 7.11.05 2014-12-24 14:38:06 +01:00
override_for_missing_acs_capabilities.patch add override_for_missing_acs_capabilities.patch 2014-08-11 07:51:55 +02:00
postinst.in add zfs modules 2015-01-11 08:37:42 +01:00
postrm.in add zfs modules 2015-01-11 08:37:42 +01:00
prerm.in add zfs modules 2015-01-11 08:37:42 +01:00
README include latest DRBD 9 driver 2015-03-17 16:08:56 +01:00
RR272x_1x-Linux-Src-v1.5-130325-0732.tar.gz add latest ARECA RAID driver 2013-12-16 09:00:10 +01:00
spl-0.6.4.tar.gz update zfs/spl source to 0.6.4 2015-04-14 13:09:41 +02:00
vhost-net-extend-device-allocation-to-vmalloc.patch vhost-net: extend device allocation to vmallo 2015-03-06 07:40:21 +01:00
zfs-0.6.4.tar.gz update zfs/spl source to 0.6.4 2015-04-14 13:09:41 +02:00

KERNEL SOURCE:
==============

We use the CENTOS7/RHEL7 kernel sources, available from:

http://vault.centos.org/

or

http://oss.oracle.com/ol7/SRPMS-updates/


Additional/Updated Modules:
---------------------------

- include latest ixgbe driver from intel/sourceforge

- include latest igb driver from intel/sourceforge

- include latest e1000e driver from intel/sourceforge

 include latest Broadcom bnx2 drivers: http://driverdownloads.qlogic.com/

  * original file linux-7.11.05.zip contains
    netxtreme2-7.11.05.tar.gz (added to repository)

- include latest Adaptec aacraid driver

  * http://download.adaptec.com/raid/aac/linux/aacraid-linux-src-1.2.1-40300.tgz

- include latest ARECA RAID drivers

  * http://www.areca.com.tw/support/s_linux/linux.htm

- include native OpenZFS filesystem kernel modules for Linux

  * https://github.com/zfsonlinux/

  For licensing questions, see: http://open-zfs.org/wiki/Talk:FAQ

- include latest HPSA driver (HP Smart Array)

  * http://sourceforge.net/projects/cciss/

- include latest DRBD 9 driver, see http://drbd.linbit.com/home/what-is-drbd/


FIRMWARE:
=========

We create our own firmware package, which includes the firmware for
all proxmox-ve kernels. So far this include

pve-kernel-2.6.18
pve-kernel-2.6.24
pve-kernel-2.6.32
pve-kernel-2.6.35
pve-kernel-3.10.0

We use 'find-firmware.pl' to extract lists of required firmeware
files.  The script 'assemble-firmware.pl' is used to read those lists
and copy the files from various source directory into a target
directory.

We do not include firmeware for some wireless HW when there is a
separate debian package for that, for example:

zd1211-firmware
atmel-firmware
bluez-firmware 


PATCHES:
--------

 bridge-patch.diff: Avoid bridge problems with changing MAC
  see also: http://forum.openvz.org/index.php?t=msg&th=5291

  Behaviour after 2.6.27 has changed slighly - after setting mac address
  of bridge device, then address won't change. So we could omit
  that patch, requiring to set hwaddress in /etc/network/interfaces.


Additional information
----------------------

We use the default configuration provided by RHEL, and apply
the following modification:

see config-3.10.0.diff

- enable CONFIG_CEPH_FS=m (request from user)

- enable common CONFIG_BLK_DEV_XXX to avoid hardware detection
  problems (udev, undate-initramfs hav serious problems without that)

  	 CONFIG_BLK_DEV_SD=y
  	 CONFIG_BLK_DEV_SR=y
  	 CONFIG_BLK_DEV_DM=y

- compile NBD and RBD modules
	 CONFIG_BLK_DEV_NBD=m
	 CONFIG_BLK_DEV_RBD=m

- set LOOP_MIN_COUNT to 8 (debian defaults)
	 CONFIG_BLK_DEV_LOOP_MIN_COUNT=8

- disable module signatures (CONFIG_MODULE_SIG)
 
- enable IBM JFS file system 

  This is disabled in RHEL kernel for no real reason, so we enable
  it as requested by users (bug #64)

- enable apple HFS and HFSPLUS

  This is disabled in RHEL kernel for no real reason, so we enable
  it as requested by users

- enable CONFIG_BCACHE=m (requested by user)

- enable CONFIG_BRIDGE=y

  Else we get warnings on boot, that
  net.bridge.bridge-nf-call-iptables is an unknown key

- disable CONFIG_DEFAULT_SECURITY_SELINUX

  Use same SELINUX config as debian kernels (CONFIG_DEFAULT_SECURITY_DAC=y)

- set CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y

  because if not set, it can give some dynamic memory or cpu frequencies 
  change, and vms can crash (mainly windows guest).

  see http://forum.proxmox.com/threads/18238-Windows-7-x64-VMs-crashing-randomly-during-process-termination?p=93273#post93273

- set CONFIG_CC_STACKPROTECTOR_REGULAR=y

  gcc on debian wheezy does not supportCONFIG_CC_STACKPROTECTOR_STRONG
 
# Note: enable now for testing
#- disable CONFIG_BRIDGE_IGMP_SNOOPING 
#
# To avoid problems with multicasting. Various users reported
#  multipath problems, which can be avoided by turning off IGMP
# snooping.

# deadline is default anyways now
#- use 'deadline' as default scheduler
#
#  This is the suggested setting for KVM. We also measure bad fsync
#  performance with ext4 and cfq.

Testing final kernel with kvm
-----------------------------

kvm -kernel data/boot/vmlinuz-3.10.0-2-pve -initrd initrd.img-3.10.0-2-pve -append "vga=791 video=vesafb:ywrap,mtrr" /dev/zero