Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products

RecoverPoint for VMs:ESXi 主机上的 VMKernel.Boot.execInstalledOnly 设置为 True 导致的 ESXi 拆分器 vib 安装和启动问题。

Summary: Kdriver 安装或启动在已将 VMkernel.Boot.execInstalledOnly 设置为 true 的 ESXi 主机上失败,这还可能导致 RecoverPoint for VMs 安装失败,因为缺少拆分器。

This article applies to   This article does not apply to 

Symptoms

Kdriver vib 安装失败,并出现许多错误,例如:
[root@localhost:~] esxcli software vib install -v /scratch/kdriver_RPESX-00.5.3.1.1.0.m.149.000.vib --no-sig-check
 [LiveInstallationError]
 Error in running ['/etc/init.d/rp-splitterd', 'start', 'install']:
 Return code: 1
 Output: Wed Nov 10 18:24:18 UTC 2021: rp_splitterd: Starting rp_splitter
 Wed Nov 10 18:24:18 UTC 2021: rp_splitterd: DEBUG (notice true==0): isKdriverRunning=1, isSplitterRunning=1
 --- /etc/vmware/esx.conf
 +++ /tmp/auto-backup.2100162//etc/vmware/esx.conf
 @@ -1,18 +1,299 @@
 -/adv/UserVars/RP_IP_Discovery_5 = ""
 -/adv/UserVars/RP_IP_Discovery_8 = ""
...
 Saving current state in /bootbank
 Clock updated.
 Time: 18:24:19   Date: 11/10/2021   UTC
 Successfully created /opt/emc/rp/kdriver/mod/esx_splitter
 Creating symbolic link /usr/lib/vmware/vmkmod/esx_splitter ...
 Ready to load ESX splitter
 Cannot load module esx_splitter: Failure
 Cannot load module esx_splitter: Failure

 Failed to launch splitter. For assistance, please run launch_splitter.sh --help

 Wed Nov 10 18:24:20 UTC 2021: rp_splitterd: start_kdriver_from_boot.sh Failed to execute. failing service.

 It is not safe to continue. Please reboot the host immediately to discard the unfinished update.
 Please refer to the log file for more details.

/var/run/log/vmkernel.log 中的事件:
2021-11-10T18:24:18.411Z cpu1:2100089)VisorFSTar: 1994: emcrpspl.t00 (797949359604956901) as emcrpspl.t00 for 44144640 bytes
2021-11-10T18:24:20.285Z cpu3:2100373)UserMem: 7388: mmap denied: boot opt execInstalledOnly is set: file not installed

ESXi 主机重新启动后 ESXi 拆分器无法启动,/var/run/log/vmkernel.log 中显示错误:
2021-11-12T15:53:29.004Z cpu2:525352)UserMem: 7576: mmap denied: boot opt execInstalledOnly is set: file not installed
2021-11-12T15:53:29.029Z cpu0:525042)Jumpstart plugin rp-splitterd activation failed: Method invocation failed
提醒:由于部署 ESXi 拆分器时出错,此问题还会导致 RecoverPoint for VMs 群集安装失败。

Cause

ESXi 主机具有设置 VMKernel.Boot.execInstalledOnly 设置为 true
此设置可防止 kdriver vib 使用实时安装正确安装。

RecoverPoint 拆分器无法与 VMKernel.Boot.execInstalled 一 起运行 仅设置为 true。

Resolution

解决方案:
1.在 ESXi 主机上,将 VMKernel.Boot.execInstalledOnly 设置更改为 false。
  • 运行以下 ESXCLI 命令。
esxcli system settings encryption set --require-exec-installed-only=F
  • 验证更改。 
esxcli system settings encryption get
Mode: TPM
Require Executables Only From Installed VIBs: false
Require Secure Boot: true

 
               确认 “仅从已安装的 VIB 要求可执行文件” 显示 为 false
  • 要保存设置,请运行以下命令。
/sbin/auto-backup.sh
    TPM 不再强制执行执行仅引导选项。 
 
2.重新启动 ESXi 主机。
3.再次运行 vib 安装。

VMware 文档链接:https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-9047A43D-BB1F-4878-A971-EEFCAC183C86.html 此超链接会将您带往 Dell Technologies 之外的网站。

Additional Information

当客户运行 STIG 强化过程时,此问题也可能影响运行的 RecoverPoint 系统。

该过程设置默认 STIG 值,这将更改我们参数“VMKernel.Boot.execInstalledOnly”= True。
该过程会更改 ESXi 配置,但在下次重新启动/升级期间应用,这可能会导致 VxRail 升级问题,因为升级的主机无法运行受 RecoverPoint for VMs 保护的虚拟机。


虽然可以安装 vib with 选项 --no-live-install - - 即使重新启动后,拆分器仍不起作用。

Affected Products

RecoverPoint for Virtual Machines
Article Properties
Article Number: 000193437
Article Type: Solution
Last Modified: 21 Sep 2023
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.