Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products

RecoverPoint for VMs:ESXi 主机上的 VMKernel.Boot.execInstalledOnly 设置为 True 导致的 ESXi 拆分器 vib 安装和启动问题。

Summary: Kdriver 安装或启动在已将 VMkernel.Boot.execInstalledOnly 设置为 true 的 ESXi 主机上失败,这还可能导致 RecoverPoint for VMs 安装失败,因为缺少拆分器。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

Kdriver vib 安装失败,并出现许多错误,例如:
[root@localhost:~] esxcli software vib install -v /scratch/kdriver_RPESX-00.5.3.1.1.0.m.149.000.vib --no-sig-check
 [LiveInstallationError]
 Error in running ['/etc/init.d/rp-splitterd', 'start', 'install']:
 Return code: 1
 Output: Wed Nov 10 18:24:18 UTC 2021: rp_splitterd: Starting rp_splitter
 Wed Nov 10 18:24:18 UTC 2021: rp_splitterd: DEBUG (notice true==0): isKdriverRunning=1, isSplitterRunning=1
 --- /etc/vmware/esx.conf
 +++ /tmp/auto-backup.2100162//etc/vmware/esx.conf
 @@ -1,18 +1,299 @@
 -/adv/UserVars/RP_IP_Discovery_5 = ""
 -/adv/UserVars/RP_IP_Discovery_8 = ""
...
 Saving current state in /bootbank
 Clock updated.
 Time: 18:24:19   Date: 11/10/2021   UTC
 Successfully created /opt/emc/rp/kdriver/mod/esx_splitter
 Creating symbolic link /usr/lib/vmware/vmkmod/esx_splitter ...
 Ready to load ESX splitter
 Cannot load module esx_splitter: Failure
 Cannot load module esx_splitter: Failure

 Failed to launch splitter. For assistance, please run launch_splitter.sh --help

 Wed Nov 10 18:24:20 UTC 2021: rp_splitterd: start_kdriver_from_boot.sh Failed to execute. failing service.

 It is not safe to continue. Please reboot the host immediately to discard the unfinished update.
 Please refer to the log file for more details.

/var/run/log/vmkernel.log 中的事件:
2021-11-10T18:24:18.411Z cpu1:2100089)VisorFSTar: 1994: emcrpspl.t00 (797949359604956901) as emcrpspl.t00 for 44144640 bytes
2021-11-10T18:24:20.285Z cpu3:2100373)UserMem: 7388: mmap denied: boot opt execInstalledOnly is set: file not installed

ESXi 主机重新启动后 ESXi 拆分器无法启动,/var/run/log/vmkernel.log 中显示错误:
2021-11-12T15:53:29.004Z cpu2:525352)UserMem: 7576: mmap denied: boot opt execInstalledOnly is set: file not installed
2021-11-12T15:53:29.029Z cpu0:525042)Jumpstart plugin rp-splitterd activation failed: Method invocation failed
提醒:由于部署 ESXi 拆分器时出错,此问题还会导致 RecoverPoint for VMs 群集安装失败。

Cause

ESXi 主机具有设置 VMKernel.Boot.execInstalledOnly 设置为 true
此设置可防止 kdriver vib 使用实时安装正确安装。

RecoverPoint 拆分器无法与 VMKernel.Boot.execInstalled 一 起运行 仅设置为 true。

Resolution

解决方案:
1.在 ESXi 主机上,将 VMKernel.Boot.execInstalledOnly 设置更改为 false。
  • 运行以下 ESXCLI 命令。
esxcli system settings encryption set --require-exec-installed-only=F
  • 验证更改。 
esxcli system settings encryption get
Mode: TPM
Require Executables Only From Installed VIBs: false
Require Secure Boot: true

 
               确认 “仅从已安装的 VIB 要求可执行文件” 显示 为 false
  • 要保存设置,请运行以下命令。
/sbin/auto-backup.sh
    TPM 不再强制执行执行仅引导选项。 
 
2.重新启动 ESXi 主机。
3.再次运行 vib 安装。

VMware 文档链接:https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-9047A43D-BB1F-4878-A971-EEFCAC183C86.html 此超链接会将您带往 Dell Technologies 之外的网站。

Additional Information

当客户运行 STIG 强化过程时,此问题也可能影响运行的 RecoverPoint 系统。

该过程设置默认 STIG 值,这将更改我们参数“VMKernel.Boot.execInstalledOnly”= True。
该过程会更改 ESXi 配置,但在下次重新启动/升级期间应用,这可能会导致 VxRail 升级问题,因为升级的主机无法运行受 RecoverPoint for VMs 保护的虚拟机。


虽然可以安装 vib with 选项 --no-live-install - - 即使重新启动后,拆分器仍不起作用。

Affected Products

RecoverPoint for Virtual Machines
Article Properties
Article Number: 000193437
Article Type: Solution
Last Modified: 21 Sep 2023
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.