From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (mail.openvz.org [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id E2FC6811BB for ; Fri, 6 Nov 2026 14:03:07 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A6E1jKr018719; Fri, 6 Nov 2026 17:01:46 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A6E1jKr018719 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="yMjKJF2e" Received: from mail-wm1-f69.google.com (mail-wm1-f69.google.com [209.85.128.69]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 6A6E1iUE018699 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Fri, 6 Nov 2026 17:01:44 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 6A6E1iUE018699 Received: by mail-wm1-f69.google.com with SMTP id 5b1f17b1804b1-4b64722b5e6so7531015e9.2 for ; Fri, 06 Nov 2026 06:01:44 -0800 (PST) X-Forwarded-Encrypted: i=2; AKwUvBwhJ3YQ2bB67UzbIkrdi9v5Q984NqXYAlaSC40/G6u/CJo1TBXYG9mSpQGWqJgAvSlBdomkUQ==@openvz.org X-Gm-Message-State: APuU4Z9yw6AkKjWDWMSsTIXqcRMewxa1ycINa5Xo/IdEJIBV6sK4bBLi +oSKBfogyG4mR9TbWkdejwUtHlj+1OtoAF5laZJ2RGMixClB++wovGtLMWFkzm900XibsWwxjkR y+8/6qFIen419vC+KR8/XkhOKpslVyVRVYH5FJblcxhXibUSAIBIjoQ== X-Gm-Gg: AYBFou3MPj9hfm5llfmmdKX1xUTYTJlrdW6Gs9b7KF49JurTn6lf5P3DbsivMcujnHP y0owDuB0lJSE+NyYFx+vDglev8+2zSWctbBieSAseGj2fKgn7A5itNl+4kJsygKKmTiCQeRcLTR +FQ/IQbiboGoRE6BLOd8eFHBqxRVMWoqHoeLkpOp4+lQvXQ2N74ZokFI05vtnAGLAnmRPekevRp wAX1iGdyZRsIrviBzBWvM8T8PN2UP9CYziyflyclmlME0xWCDIVvqrXhjiUlkGgXm9WsvyYv3FN rslySBi3hwQuUBoJkFAzytZCILdx/V5WKgvYWC4l3phskEqRefm1GbS1fFMJjpyIMPBKV6CSVpD 82bJuUjtkNq/uIfws3w== X-Received: by 2002:a05:600c:608a:b0:49f:e8bf:8f9b with SMTP id 5b1f17b1804b1-4b6dc6dec3emr45509185e9.4.1793973703858; Fri, 06 Nov 2026 06:01:43 -0800 (PST) X-Received: by 2002:a05:600c:608a:b0:49f:e8bf:8f9b with SMTP id 5b1f17b1804b1-4b6dc6dec3emr45508545e9.4.1793973703233; Fri, 06 Nov 2026 06:01:43 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1793973703; cv=none; d=google.com; s=arc-20260327; b=RfqGydxcPICfKw6nfARYdyaAFgjnTDIfWmoZXWsJ7E7F4WSHGRLSPNJ1CrcrmZSdpc 4i0+yJr77WFq6IlNcZqfcg+qR4aT0x+DMJF6Vv8QpABU7CbUNFPYdcBXKihIRnPuvEYH LKlOtsyE7kMte9YNKGMygaCgJpzOQHvB4pNGl4IPoh8vkHZVBj7m7H30i/v8y9Fyi2U2 ec7mJka79dIhwMR5eYTLQAeSFqmKKRQe4uYmYRxJUkygXvTzwEX8pO+A+d4Qh6wXcJvC 4ZmiGOcg6Eh7MV6Zlx7nRKtWbXY58tuhqJuiDdmp3FJg9opWR0rbvPEk1yFa1sBaPBHE P+2Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:content-transfer-encoding:mime-version:message-id:date :subject:from:dkim-signature; bh=jW8jxknDjG2KsxXLP1Vu1qetlwGbeRxgEq8zHALn5N0=; fh=bRkZfFa6377EgOVW8zBDri2gGIQqe/ZeiH+ijEM/ROI=; b=T6DRkXPniA1i/tMI45AA28UTDi8AcUzokpYI6bCUeBS4FrGOyBfCaSpDhOF56z9zJd 7OMFDmPiyj0tyhWC5cBYABlpSCrwTlLOzjyUGkYZoIhgXDSn5sdbPvR5r+J5MbB1cJdd Z7CLoYjqK4CRCK4g8/S/xWFeqaQmgEJJGHIFCtZmYmyeun3dUhCp8/bL5wEsyXkDGQ1C IW0+6UpzAW2HDveTGgPnEwXhXEfWi08Y44H7j+L8nep79YJf4NSrZ3nQiBFdpzUsJqU6 vbjayzZOMo4uqgUJpmHNtG7/pya57XDsQ7uMi7LDmmN95lCak9rixPZwJSAK51evDSIE 7ZUg==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=yMjKJF2e; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from relay.virtuozzo.com (relay.virtuozzo.com. [130.117.225.111]) by mx.google.com with ESMTPS id 5b1f17b1804b1-4b56fd99c33si116174225e9.3.2026.11.06.06.01.43 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Nov 2026 06:01:43 -0800 (PST) Received-SPF: pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) client-ip=130.117.225.111; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=relay header.b=yMjKJF2e; spf=pass (google.com: domain of khorenko@virtuozzo.com designates 130.117.225.111 as permitted sender) smtp.mailfrom=khorenko@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=virtuozzo.com; s=relay; h=Content-Type:MIME-Version:Message-Id:Date:Subject :From; bh=jW8jxknDjG2KsxXLP1Vu1qetlwGbeRxgEq8zHALn5N0=; b=yMjKJF2etfLn2PkC8sH pMJ9YBljNKAUoI7eD7kqungCgJgsKRcONHSi0X1DP/FkM2vkFQQWIujNc7IrUiTpi8HwFO83EaOR4 NIAGXsAsSRJ2XezZUyIJffof4xdSEmwkEAJnbxTisaVSbCXF+LcV4TLt6OlRo+Vg1pHqyyVdxityC JLB1lvRFDevXHOdfb191iNq/xUBTAUzjKc7E02YWONkMzZRsuKGmii+aq8B/iVGMx3uEtE3sj9cCb 2JljTXsCOjwQrqwRinuth6PsGtb5L7r1Q5VPTPpOY6xmRdKbgApxsw/L+alNlfMo6c4/UdJqHwVS+ Ppae0i79yerkyag==; Received: from ch-demo-asa.virtuozzo.com ([130.117.225.8] helo=f0.sw.ru) by relay.virtuozzo.com with esmtp (Exim 4.96) (envelope-from ) id 1xPKRi-00BceL-2l; Fri, 06 Nov 2026 15:01:38 +0100 From: Konstantin Khorenko Date: Fri, 06 Nov 2026 15:01:31 +0100 Message-Id: <20261106-b4-prep-khorenko-vstor-153679-mbind-ve-v2-0-6327b23a2d93@virtuozzo.com> MIME-Version: 1.0 X-B4-Tracking: v=1; b=H4sIALvd7WoC/5VPQW7DMAz7SuHzJFhak6Y77R9DD7Gjzl5Ru7BTo 0uRv89OX7CbKJIi9VRZkpesPnZPlaT47GOogN92yroxfAv4qWLFmnsi3YHZwy3JDS4uJgmXCCX PMQF17/3hCFfjwwRFwEwDkYxHI3tW9Vj1nP1jC/pSznoYkNTpReS7+RE7t5gmNWOu/jQG69rqN UFypKFHYtTARNgxEjLjA8tSmViW5nW+tfnd3im0hf23eSHQVXu2Ex/soDV9Fp/me1yWiDZe1Wl d1z8OzIg8NwEAAA== X-Change-ID: 20261105-b4-prep-khorenko-vstor-153679-mbind-ve-bd811ea9be42 To: Pavel Tikhomirov , Vasileios Almpanis X-Mailer: b4 0.16.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=3975; i=khorenko@virtuozzo.com; h=from:subject:message-id; bh=lUC7slfqud3Xj1hZrTggN82z2vVQ3G7h6CW0hQt+klc=; b=owEBbQKS/ZANAwAKAVGWCkf5YVwqAcsmYgBq7d3ESNjyMyMaxdny7Hq4bv69SJ7ZABqTfy76r 4zJ3z0wLiGJAjMEAAEKAB0WIQRWD23IPcXT0GO9CCxRlgpH+WFcKgUCau3dxAAKCRBRlgpH+WFc KtalD/sFhHj9lWHvvd/TM+bZHUNztNBF01lhSuE+DSTrt/WGyGtCYcJAa/TIfLWd6B5UTgRIyxQ 60g4rq9kwcsGNfWj+PmCmAZNAxug21CbHpEX0dswW9ThG9lrpoKL1sOzs7FtUfv3DQKwpc1N3PZ tjAdErjL7njUXb3L43LcO9tpXXohOeep89pJd/zKnMiZUYCPD7eWhbks3Fmp2OAwDhUeFA+Ikiu +l9vD40mCHfb9FdVhkbU6Q7QZyn6VoGehqN6pQ3F9egQa9fzP78UrcXXIj/tKLIR7qW7dp/I4cw gf9uzyULqPYzSN0Fi1/Ia8zs9jCws6DaV05/q+GlvS2coichkgroRm/9KXaRzVoqDtIXoz5kj4h oO1VC6xkUqdai/M65tsuuq/JMWe7nNtnt9SMSD3p/th2n6QVz7+Fpam8Py3M7fOcrh3dZctLCdw JdKgNLOzVUsFB6W9tQ9tdY7EkBSXEVQSsPt848oDunOAZDE+TcHrPSHhktrBI3CEZwU0nHeINCZ 2jFmidtNJ/Vw47W9ttnxt/khjIdRsMQKFyL9Iw0v+06k3TyBYL3qQxmOxqLoMEO62L565iQqOM+ zexZJNPQU4TOVD2+smizcKM0E/v+xs0CWgORpj5EdSyFo+bKaZU38Nbd9hZ7lbnvIGb6QvlapYp 6aXO4qmyKRSvfcA== X-Developer-Key: i=khorenko@virtuozzo.com; a=openpgp; fpr=560F6DC83DC5D3D063BD082C51960A47F9615C2A X-OZ-Fwd: true Cc: devel@openvz.org Subject: [Devel] [PATCH hci-8.1 v2 0/4] mempolicy: prohibit mbind and set_mempolicy_home_node in VE X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org A CT is meant to see a kernel without NUMA, so the NUMA API syscalls return -ENOSYS in a non-super VE. mbind(2) was blocked in vz7, but the vz8 port put its check into the compat entry point only, and the compat entry points were dropped on the rebase to RHEL9. Since then a CT task can bind its pages to nodes and migrate them with mbind(2), while get_mempolicy(2) tells it there is no NUMA. set_mempolicy_home_node(2) appeared after vz7 and was never blocked. It only sets the home node of a policy installed by mbind(2), so it goes with it. The tmpfs mpol= mount option sets such a policy for all files of a mount, and a kernel without CONFIG_NUMA rejects it. It was never blocked in a VE either. - Patch 1 returns -ENOSYS from both in a non-super VE. - Patch 2 adds a ve selftest: all six NUMA API syscalls, with arguments that succeed on the host, must return -ENOSYS in a VE. - Patch 3 rejects mpol= in a non-super VE the way a kernel without CONFIG_NUMA does. - Patch 4 adds a ve selftest: a tmpfs with mpol= is created on the host and fails with -EINVAL in a VE. The unmerged selftests series for VSTOR-137234 carries an older ve_numa_syscalls_prohibited_test that covers four of the syscalls with arguments that fail on the host anyway; this version replaces it. Tested on a 4-node host, ve_numa_syscalls_prohibited_test: +----------------------------+--------------+--------------------------+ | kernel | host calls | calls in a VE | +----------------------------+--------------+--------------------------+ | vz10 without patch 1 | PASS | FAIL: mbind and | | | | set_mempolicy_home_node | | | | return 0 | +----------------------------+--------------+--------------------------+ | vz10 with the series | PASS | PASS | +----------------------------+--------------+--------------------------+ ve_numa_migrate_test still passes with the series. Tested on a 1-node VM, ve_tmpfs_mpol_test: +----------------------------+--------------+--------------------------+ | kernel | host mpol= | mpol= in a VE | +----------------------------+--------------+--------------------------+ | vz10 without the series | PASS | FAIL: mpol= accepted | +----------------------------+--------------+--------------------------+ | vz10 with the series | PASS | PASS | +----------------------------+--------------+--------------------------+ Assisted-by: LLM Signed-off-by: Konstantin Khorenko --- Changes in v2: - Patch 2: skip instead of failing when the host has no NUMA API (Sashiko). - New patches 3-4: reject the tmpfs mpol= mount option in a VE. - Link to v1: http://lore.virtuozzo.com/20261105-b4-prep-khorenko-vstor-153679-mbind-ve-v1-0-b4fcd27c8001@virtuozzo.com --- Konstantin Khorenko (4): mempolicy: prohibit mbind and set_mempolicy_home_node in VE selftests/ve: check that the NUMA API syscalls return ENOSYS in a VE shmem: reject the mpol= mount option in VE selftests/ve: check that tmpfs rejects mpol= in a VE mm/mempolicy.c | 6 + mm/shmem.c | 2 +- tools/testing/selftests/ve/.gitignore | 2 + tools/testing/selftests/ve/Makefile | 2 + .../ve/ve_numa_syscalls_prohibited_test.c | 196 +++++++++++++++++++++ tools/testing/selftests/ve/ve_tmpfs_mpol_test.c | 123 +++++++++++++ 6 files changed, 330 insertions(+), 1 deletion(-) --- base-commit: 1f21db982845109040d1feb279e9ee34f8e6f065 change-id: 20261105-b4-prep-khorenko-vstor-153679-mbind-ve-bd811ea9be42 Best regards, -- Konstantin Khorenko, Virtuozzo Linux Kernel Team _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel