Retour
-
Titre
Boot firmware tainted by quiesce_manifest.xml -
Description
On virtual appliances of Syslog-ng Store Box warning message appears about the BOOT firmware being TAINTED.
You may get an email alert with the subject "Notification received: XCB-SNMP-MIB::xcbFirmwareTainted"
-
Cause
The cause of the warning is an extra configuration file created automatically by Vmware-tools application.
In case "Quiesced" option is enabled in the VM configuration then the onbox vmware-tools creates an extra configuration file on the boot firmware at /etc/vmware-tools/quiesce_manifest.xml which is not expected and taints the boot firmware. -
Résolution
Pre-check
Ensure that is indeed the cause of the warning.
Log in to the boot shell of the appliance and run the following:
xcbclient self xcb_check_boot_files
Expected output:
/initrd/mnt/private/etc/vmware-tools/quiesce_manifest.xml
If you got this then please go ahead and apply one of the workarounds described below; if your output differs from the above then this guide is not for you; please file a support ticket and upload a debug bundle for us to analyze your situation.
Solution
- Disable the "Quiesced" option from the VM's settings.
- Delete the file. Execute the following command from the boot shell.
rm /initrd/mnt/private/etc/vmware-tools/quiesce_manifest.xml
-
Demande de changement
SSB-2931