Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

RecoverPoint for VMs:VMKernel.Boot.execInstalledOnly 在 ESXi 主機上設為 True 時,ESXi 分割器 vib 的安裝和啟動問題。

Summary: 在已將 VMkernel.Boot.execInstalledOnly 設為 true 的 ESXi 主機上,Kdriver 安裝或啟動失敗,這也可能導致 RecoverPoint for VMs 安裝失敗,因為分割器遺失。

This article applies to   This article does not apply to 

Symptoms

Kdriver vib 安裝失敗,並出現許多錯誤,例如:
[root@localhost:~] esxcli software vib install -v /scratch/kdriver_RPESX-00.5.3.1.1.0.m.149.000.vib --no-sig-check
 [LiveInstallationError]
 Error in running ['/etc/init.d/rp-splitterd', 'start', 'install']:
 Return code: 1
 Output: Wed Nov 10 18:24:18 UTC 2021: rp_splitterd: Starting rp_splitter
 Wed Nov 10 18:24:18 UTC 2021: rp_splitterd: DEBUG (notice true==0): isKdriverRunning=1, isSplitterRunning=1
 --- /etc/vmware/esx.conf
 +++ /tmp/auto-backup.2100162//etc/vmware/esx.conf
 @@ -1,18 +1,299 @@
 -/adv/UserVars/RP_IP_Discovery_5 = ""
 -/adv/UserVars/RP_IP_Discovery_8 = ""
...
 Saving current state in /bootbank
 Clock updated.
 Time: 18:24:19   Date: 11/10/2021   UTC
 Successfully created /opt/emc/rp/kdriver/mod/esx_splitter
 Creating symbolic link /usr/lib/vmware/vmkmod/esx_splitter ...
 Ready to load ESX splitter
 Cannot load module esx_splitter: Failure
 Cannot load module esx_splitter: Failure

 Failed to launch splitter. For assistance, please run launch_splitter.sh --help

 Wed Nov 10 18:24:20 UTC 2021: rp_splitterd: start_kdriver_from_boot.sh Failed to execute. failing service.

 It is not safe to continue. Please reboot the host immediately to discard the unfinished update.
 Please refer to the log file for more details.

在 /var/run/log/vmkernel.log 中的事件:
2021-11-10T18:24:18.411Z cpu1:2100089)VisorFSTar: 1994: emcrpspl.t00 (797949359604956901) as emcrpspl.t00 for 44144640 bytes
2021-11-10T18:24:20.285Z cpu3:2100373)UserMem: 7388: mmap denied: boot opt execInstalledOnly is set: file not installed

ESXi Splitter fails to start after an ESXi host reboot, with errors in /var/run/log/vmkernel.log:
2021-11-12T15:53:29.004Z cpu2:525352)UserMem: 7576: mmap denied: boot opt execInstalledOnly is set: file not installed
2021-11-12T15:53:29.029Z cpu0:525042)Jumpstart plugin rp-splitterd activation failed: Method invocation failed
注意:此問題也會導致 RecoverPoint for VM 叢集安裝失敗,因為部署 ESXi 分割器時發生錯誤。

Cause

ESXi 主機已將VMKernel.Boot.execInstalledOnly設定為true
此設定可防止 kdriver vib 使用即時安裝正確安裝。

RecoverPoint 分隔器無法與已設為 true 的VMKernel.Boot.execInstalledOnly一起運作

Resolution

解決方案:
1.在 ESXi 主機上,將 VMKernel.Boot.execInstalledOnly設定變更為 false。
  • 執行下列 ESXCLI 命令。
esxcli system settings encryption set --require-exec-installed-only=F
  • 確認變更。 
esxcli system settings encryption get
Mode: TPM
Require Executables Only From Installed VIBs: false
Require Secure Boot: true

 
               確認 僅從已安裝的 VIB 中要求執行檔 會顯示 為錯誤
  • 若要儲存設定,請執行下列命令。
/sbin/auto-backup.sh
    TPM 不再強制執行 execInstalledOnly 開機選項。 
 
2.將 ESXi 主機重新開機。
3.再次執行 vib 安裝。

VMware 檔連結:HTTPs://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-9047A43D-BB1F-4878-A971-EEFCAC183C86.html 此超連結會帶您前往 Dell Technologies 以外的網站。

Additional Information

當客戶執行 STIG 強化程式時,此問題也可能影響運作中的 RecoverPoint 系統。

此程式會設定預設 STIG 值,以變更我們「VMKernel.Boot.execInstalledOnly」=True 的參數。
此程式會變更 ESXi 組態,但在下次重新開機/升級時套用,這可能會導致 VxRail 升級問題,因為升級的主機無法執行受 RecoverPoint for VMs 保護的 VM。


雖然可以使用選項 --no-live-install 安裝來安裝 vib,但即使重新開機後,分割器似乎仍無法運作。

Affected Products

RecoverPoint for Virtual Machines
Article Properties
Article Number: 000193437
Article Type: Solution
Last Modified: 21 Sep 2023
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.
Article Properties
Article Number: 000193437
Article Type: Solution
Last Modified: 21 Sep 2023
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.