I made a fresh re-install of qubes 4.1, because I had two big issues, one with most of Vms freezing after suspend, other with pci device 00.14.0.
I thought problem was because I update from 4.0, some time ago, and then after a while all both problems started until at making very difficult to use (Qubes is my main and only OS at the moment)
After the fresh install (and even during it) the pci issue was still there (I will write another ticket about, just saying in case there could be a connection)
The suspension issue was gone. I could suspend and go back to normal without problem.
Then I did a dom0 update. (I paste an extract below)
After that the problem is back.
I read then about STM and suspension problems but also I read that in qubes hyperthread was disabled, so I checked
[x3l3n3@dom0 ~]$ cat /sys/devices/system/cpu/smt/active
1
[x3l3n3@dom0 ~]$ cat /sys/devices/system/cpu/smt/control
on
So, I read about disabling hiperthread. I did
[root@dom0 x3l3n3]# echo off | sudo tee /sys/devices/system/cpu/smt/control
off
[x3l3n3@dom0 ~]$ cat /sys/devices/system/cpu/smt/active
0
(I can’t assure that BEFORE the update hyperthead was inactive, but as the QSB says it was disabled and I read about the connection with the suspend issue, I was guessing)
Then after reboot was active again.
Check in boot option (coreboot) there was not any SMT or hyperthread option
As it is supposed to be disabled for security reasons I guess this is a security issue.
The initial problem, the suspension issue is: after a suspension (by systemctl or closing the machine) all VMs are frozen less ‘sys-net’ and dom0. The ‘vault’ VM for example, nautilus get frozen, gedit, too, and firefox(for offline use), also xfce terminal, but moving between tabs changes the name in the window (in xfce an i3 the same). Goldendict is not affected.
Xterm windows from appvms opened originally from dom0 stay operational.
VMs can’t be ‘shutdown’ qvm-kill is necessary.
Here some system info:
[x3l3n3@dom0 ~]$ sudo dmidecode -t processor | grep Count
Core Count: 2
Thread Count: 4
[x3l3n3@dom0 ~]$ lscpu
Architecture: x86_64
CPU op-mode(s): 32-bit, 64-bit
Byte Order: Little Endian
Address sizes: 36 bits physical, 48 bits virtual
CPU(s): 2
On-line CPU(s) list: 0,1
Thread(s) per core: 2
Core(s) per socket: 1
Socket(s): 1
NUMA node(s): 1
Vendor ID: GenuineIntel
CPU family: 6
Model: 58
Model name: Intel(R) Core™ i7-3520M CPU @ 2.90GHz
Stepping: 9
CPU MHz: 2893.426
BogoMIPS: 5786.85
Hypervisor vendor: Xen
Virtualization type: full
L1d cache: 32 KiB
L1i cache: 32 KiB
L2 cache: 256 KiB
L3 cache: 4 MiB
NUMA node0 CPU(s): 0,1
Vulnerability Itlb multihit: KVM: Mitigation: VMX unsupported
Vulnerability L1tf: Mitigation; PTE Inversion
Vulnerability Mds: Mitigation; Clear CPU buffers; SMT Host state unknown
Vulnerability Meltdown: Unknown (XEN PV detected, hypervisor mitigation required)
Vulnerability Spec store bypass: Mitigation; Speculative Store Bypass disabled via prctl and seccomp
Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __3user pointer sanitization
Vulnerability Spectre v2: Mitigation; Retpolines, IBPB conditional, IBRS_FW, STIBP conditional, RSB filling
Vulnerability Srbds: Not affected
Vulnerability Tsx async abort: Not affected
Flags: fpu de tsc msr pae mce cx8 apic sep mca cmov pat clflush acpi mmx fxsr sse sse2 ss ht syscall nx rdts
cp lm constant_tsc rep_good nopl nonstop_tsc cpuid tsc_known_freq pni pclmulqdq monitor est ssse3 cx1
6 sse4_1 sse4_2 popcnt aes xsave avx f16c hypervisor lahf_lm cpuid_fault ssbd ibrs ibpb stibp fsgsbas
e erms xsaveopt md_clear
Dom0 Update (extract)
kernel:
----------
new:
1000:5.10.112-1.fc32.qubes,1000:5.10.90-1.fc32.qubes
old:
1000:5.10.90-1.fc32.qubes
xen:
----------
new:
2001:4.14.4-4.fc32
old:
2001:4.14.3-8.fc32
xen-hvm-stubdom-linux:
----------
new:
1.2.3-1.fc32
old:
1.2.2-1.fc32
xen-hvm-stubdom-linux-full:
----------
new:
1.2.3-1.fc32
old:
1.2.2-1.fc32
xen-hypervisor:
----------
new:
2001:4.14.4-4.fc32
old:
2001:4.14.3-8.fc32
xen-libs:
----------
new:
2001:4.14.4-4.fc32
old:
2001:4.14.3-8.fc32
xen-licenses:
----------
new:
2001:4.14.4-4.fc32
old:
2001:4.14.3-8.fc32
xen-runtime:
----------
new:
2001:4.14.4-4.fc32
old:
2001:4.14.3-8.fc32