Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-114156

Get a prompt error from dst host hmp when do postcopy_preempt + tls migration: qemu-kvm: Cannot read from TLS channel: The TLS connection was non-properly terminated

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • No
    • Moderate
    • 1
    • rhel-virt-core-live-migration
    • None
    • QE ack
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • Red Hat Enterprise Linux
    • feature & bug fixed planned
    • None
    • RegressionOnly
    • Unspecified
    • Unspecified
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?
      Get a prompt error from dst host hmp when do postcopy_preempt + tls migration:
      qemu-kvm: Cannot read from TLS channel: The TLS connection was non-properly terminated

      Please provide the package NVR for which bug is seen:
      kernel-5.14.0-611.el9.x86_64 && qemu-kvm-9.1.0-26.el9.x86_64 && gnutls-3.8.3-9.el9.x86_64

      How reproducible:
      100%

      Steps to reproduce
      1. Configure tls environment
      2. Boot a VM on the src host, also boot a VM with appending "-incoming defer" on the dst host
      3. Enable postcopy and postcopy_preempt capabilities on src and dst host
      4. Add TLS client and server:

      {"execute": "object-add", "arguments":{"qom-type": "tls-creds-x509", "id": "tls0", "dir": "/etc/pki/qemu", "endpoint": "client", "verify-peer": true}, "id": "p2ORDILc"}
      
      {"execute": "object-add", "arguments":{"qom-type": "tls-creds-x509", "id": "tls0", "dir": "/etc/pki/qemu", "endpoint": "server", "verify-peer": true}, "id": "84vCrk6C"}

      5. Set TLS creds on src and dst host

      {"execute": "migrate-set-parameters", "arguments":{"tls-creds": "tls0"}, "id": "YRHVic4I"}

      6. Migrate VM from src to dst host
      7. During migration is active, switch to postcopy

       

      Expected results
      Migration succeeds, VM works well on the dst host.

       

      Actual results
      Get a prompt error from dst host hmp when postcopy_preempt + tls migration converge:
      qemu-kvm: Cannot read from TLS channel: The TLS connection was non-properly terminated

      It's worth to mention that VM works well after migration, and don't hit any other errors from qmp/VM;
      And if do vanilla postcopy migration, won't hit above prompt.

              zhexu@redhat.com Peter Xu
              rhn-support-xiaohli Xiaohui Li
              virt-maint virt-maint
              Xiaohui Li Xiaohui Li
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated: