From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (mail.openvz.org [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id A10B9811BB for ; Thu, 5 Nov 2026 18:50:09 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A5ImoJX007958; Thu, 5 Nov 2026 21:48:51 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A5ImoJX007958 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="aR/9aH+r" Received: from mail-wm1-f72.google.com (mail-wm1-f72.google.com [209.85.128.72]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A5Imnnj007945 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Thu, 5 Nov 2026 21:48:49 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A5Imnnj007945 Received: by mail-wm1-f72.google.com with SMTP id 5b1f17b1804b1-4ad3d35e899so25039275e9.1 for ; Thu, 05 Nov 2026 10:48:49 -0800 (PST) X-Forwarded-Encrypted: i=2; AKwUvBwxVjxGiWMo6lgUx4UPt9wapQ+zKuhA4q1vAGdzxf9zrTb0ofMrelsHPrZSGP8v8G7pD4i0gA==@openvz.org X-Gm-Message-State: APuU4Z/rJ34YelOPeh58JwlfqykkKDrnixoHY3X3vLfTw0HgmSUe7FZU fTAx7WiVIibl7NNaDjcMNaPJYVS8QCHT+cVUyW0J/WJq7MSTqiWKg845ltUrqSYRfpakZ9qLrbQ H9ZLVIa/5iDPPkb14/4bYTX7B6lzMV2MwVKFQSNWprBD8OM1CvsvjBA== X-Gm-Gg: AYBFou3HmHseQgIpfaWkUYzLJT8iJsistbus8yzHsmLUdhxQJZQCJir4mnG/5RUvolM DUuSXNihVegw1BNMVlbIhz1xLLwpIyO/0zwtjyInqO7BWJFd/5usf+WjddH4NsX+TbBSehUodmd TrWPTBcJ9pdfqeooZYgQUU7LzhMnylqEqAfW1+wIlaYMOK5sN18CZnEM1JYFmjxj1CHq0bbW2oz 8A81TLlVUN4CHeWL7OYLb4+if/dnjkqgZH2TKZWmfPQU0pUmOLkttHx7XQPIrd6h/ebzPTCkj4g 0mEW7dhj6AwVJFh8q1O8DY/YWp3dD1vRsy5NuGH2IrNaN8hjFpR4efZur/1GuJQ2sTbxJcfiq1e I2mY/s2pb/Np4/4Lm X-Received: by 2002:a05:600c:19d1:b0:4a2:677:ad8e with SMTP id 5b1f17b1804b1-4ac1970b9f7mr429713025e9.34.1793904529387; Thu, 05 Nov 2026 10:48:49 -0800 (PST) X-Received: by 2002:a05:600c:19d1:b0:4a2:677:ad8e with SMTP id 5b1f17b1804b1-4ac1970b9f7mr429712745e9.34.1793904529019; Thu, 05 Nov 2026 10:48:49 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1793904529; cv=none; d=google.com; s=arc-20260327; b=dYLiJfZyCip5OS+2HaqD7POw7aNC4S4AMlsxkQK+sw6rWn4ZgHbeDy3C+HN6oWAuu1 2juAqufz8DYoz4mIIMP5LgPaWtT0X+QKmTi7nNY8pdtu1qecP+gs8tvHQYZH+Le2uKt+ LpFwnYQjWaEdpVyDQRtYiSXLaXd4FPMAvRrnyTijvRgtCaOadLiwqf1G/luYBL43KlD4 45TpU1EPcwJYOjGKw8+NEPYDUTurEDdybrHaZiwIyXi0KXyDCN0hxM6KCp/casSdRbNY UDT11k/HtezyWQlYGZsJLYzudPKg/fME7i1F+SAJjdl4mi5m0ZYdgD/BfeYmuJWy61rf MeFQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:content-transfer-encoding:mime-version:message-id:date :subject:from:dkim-signature; bh=6PjbCTIbIoPebxKyBpyAAkorWUWAy2+xcV8zjS/QX/8=; fh=bRkZfFa6377EgOVW8zBDri2gGIQqe/ZeiH+ijEM/ROI=; b=jj/VI1UruLi/R+Ph21G7z7e2I3kE/dtsSQAjhSTDeD5lH6laTnGox459UVcEIleN1A zN4xERgBEe0h3BtC468kmf8VbXiVedWwZ/KNiIH277ADbWN5tvgs2wv3Bw0gR0XHGhT8 zLtdHHiOlsOsXp+9/ERyIECjcF63FNBz51TcmvPKYKvEGQXgDmrXOqX/3d13fiDb4bD8 vfU+bEs2hy/EwIIAAn1OwL1UF8GW6w2sN0/y8ZxMBDKqq3flZPUM5cZAvce3KeL6gY2u PfI2EhM1Um4/uFFsv1l9XQOHVfnIDAEh+hoUzLxVP1/9xbkZnbZEE+PCHsKrxM1EpWmy ZecQ==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b="aR/9aH+r"; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id ffacd0b85a97d-48fefaa94bdsi11395287f8f.361.2026.11.05.10.48.48 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 05 Nov 2026 10:48:48 -0800 (PST) Received-SPF: pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b="aR/9aH+r"; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=Content-Type:MIME-Version:Message-Id:Date:Subject :From; bh=6PjbCTIbIoPebxKyBpyAAkorWUWAy2+xcV8zjS/QX/8=; b=aR/9aH+rRHfgXJenIUw qnJM3sbYo8Px6zHpZ8pziBgS27Bl4RW/W70pZXDk0HuL1zSveVEWA5yKKQTWn51A8OLgPCSnutSbo BXcfHOakPavw3NIlegRvOwKHRNDNI3PJfQggFMNM4aL9DTwmxGZKjUmDtACm65QEcPjyBMSzXk06z WO+rgZcYpks/8eEaDjkf3plSfdK0oiuJmvgT6V7x1hpPKYjuCYstU9P9qKWQJ9niPIjbwr6/EqWRf F1EA5126rSaz9Hvw9wYnentRlCFdZ2OJJ0Tt8yEARbWCgF0esK8sSRYwFkP718rywtojSeF1Z5bx8 cm3Y3zmnMgnNF8Q==; Received: from ch-demo-asa.virtuozzo.com ([130.117.225.8] helo=f0.sw.ru) by relay.virtuozzo.com with esmtp (Exim 4.96) (envelope-from ) id 1xP2S1-007GKi-2y; Thu, 05 Nov 2026 19:48:46 +0100 From: Konstantin Khorenko Date: Thu, 05 Nov 2026 19:48:43 +0100 Message-Id: <20261105-b4-prep-khorenko-vstor-153679-mbind-ve-v1-0-b4fcd27c8001@virtuozzo.com> MIME-Version: 1.0 X-B4-Tracking: v=1; b=H4sIAIvP7GoC/yVNSw6CMBC9Cpm10zAVEL2KcUHLaCuxJS02BMLdL bJ7/7dC5GA5wq1YIXCy0XqXCZ0K0KZzL0bbZw6ylA1RWaOqcAw84mB8YDd4THHyAak+N5crfpR 1PSZG1bdE3F0VVxLyWO487fw/uoPRFltB8DiM+FVv1tN+s0dVF3M/dE6bXToQBkMlNoKkKFESi VoKElKKWaQlOz4tsG0/b+4gZc8AAAA= X-Change-ID: 20261105-b4-prep-khorenko-vstor-153679-mbind-ve-bd811ea9be42 To: Pavel Tikhomirov , Vasileios Almpanis X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=2502; i=khorenko@virtuozzo.com; h=from:subject:message-id; bh=o63SBFG0ICJM7zvCAWmGWrAAfuVm9UDOM73K3u36kpg=; b=owEBbQKS/ZANAwAKAVGWCkf5YVwqAcsmYgBq7M+PiFCvZS5LiR4HfVwfuiidXVfmukrnKH9/x cKQAWNlIsCJAjMEAAEKAB0WIQRWD23IPcXT0GO9CCxRlgpH+WFcKgUCauzPjwAKCRBRlgpH+WFc KqnOEACRNA01qRsc83gh7gjzLA1qs1Bb11R3cocHo9ApUjEkCZbUlyWomGhegUMw1BZ34ZvygyJ XSJbW24LHNROmyjsgScv/ZanvPer9CF/5rNQvuxb/+YPUYPQyMLXo6y0NGti51f9HUpW0KkKw6J wCrBMjgEXpA/Zncp2Kfpwz4qhwoCqS/6sHx38thtGaSGbk/g1Fj3Kozu1bnabCSKYW3ULayzTqu zYio8e9A5tNCTmPMs+LiPZh67nycBPMTWwJlVtY7kQJsIbaC+YD/RbD2eJvQ8bvDNjOLlpDWRx4 21gkE9Obx6Qounk2N8JhtLwjxcbSx51Bm8ocxrmsxgF0CG853PvkmY5nC5XI6l1q6q1GW+YSbcV lC5OCllXStsh8I2s08elkr3j1KwCpxj0A2lB+IMuM5goXLfcLwoL7cS7kXdKC4F0VUWoBvhdB9r j5a63IdBv/I3gnXYvGcGiJGsZyJVZgM8dAZTX/Ft6Z5hbL2bAKMNsXigG03Jr3fKeNislx8dIqU h8tPDtnLGTiYYxgFupG9ueR+olLLTCI+jaTEJ2uaUtFE8NaKls/uxn5rDkHqSCicu4o4vNK85zi jQTWOiVtnWBSBRC88ot3LuyXRehlmsSShPqxWuL8FV0A4EtNfpjkp1+abd2KJC1rOZ0UMXiohlx ClU9GLM+NfF8bDA== X-Developer-Key: i=khorenko@virtuozzo.com; a=openpgp; fpr=560F6DC83DC5D3D063BD082C51960A47F9615C2A X-OZ-Fwd: true Cc: devel@openvz.org Subject: [Devel] [PATCH hci-8.1 0/2] mempolicy: prohibit mbind and set_mempolicy_home_node in VE X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org A CT is meant to see a kernel without NUMA, so the NUMA API syscalls return -ENOSYS in a non-super VE. mbind(2) was blocked in vz7, but the vz8 port put its check into the compat entry point only, and the compat entry points were dropped on the rebase to RHEL9. Since then a CT task can bind its pages to nodes and migrate them with mbind(2), while get_mempolicy(2) tells it there is no NUMA. set_mempolicy_home_node(2) appeared after vz7 and was never blocked. It only sets the home node of a policy installed by mbind(2), so it goes with it. - Patch 1 returns -ENOSYS from both in a non-super VE. - Patch 2 adds a ve selftest: all six NUMA API syscalls, with arguments that succeed on the host, must return -ENOSYS in a VE. The unmerged selftests series for VSTOR-137234 carries an older ve_numa_syscalls_prohibited_test that covers four of the syscalls with arguments that fail on the host anyway; this version replaces it. Tested on a 4-node host, ve_numa_syscalls_prohibited_test: +----------------------------+--------------+--------------------------+ | kernel | host calls | calls in a VE | +----------------------------+--------------+--------------------------+ | vz10 without patch 1 | PASS | FAIL: mbind and | | | | set_mempolicy_home_node | | | | return 0 | +----------------------------+--------------+--------------------------+ | vz10 with the series | PASS | PASS | +----------------------------+--------------+--------------------------+ ve_numa_migrate_test still passes with the series. Assisted-by: LLM Signed-off-by: Konstantin Khorenko --- Konstantin Khorenko (2): mempolicy: prohibit mbind and set_mempolicy_home_node in VE selftests/ve: check that the NUMA API syscalls return ENOSYS in a VE mm/mempolicy.c | 6 + tools/testing/selftests/ve/.gitignore | 1 + tools/testing/selftests/ve/Makefile | 1 + .../ve/ve_numa_syscalls_prohibited_test.c | 192 +++++++++++++++++++++ 4 files changed, 200 insertions(+) --- base-commit: 1f21db982845109040d1feb279e9ee34f8e6f065 change-id: 20261105-b4-prep-khorenko-vstor-153679-mbind-ve-bd811ea9be42 Best regards, -- Konstantin Khorenko, Virtuozzo Linux Kernel Team _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel