2024.1.1-p1 Release Notes

Resolved Issues

Internal Number Products Case Number Description
VOV-16667 Accelerator Implemented an optional "CPU jail" for Accelerator jobs on Linux systems with cgroups v2. A new special resource "CGROUP:CORES" which may be specified in a job's resource request list to enable the CPU jail. When enabled, the job's processes are restricted to a selected set of logical CPU numbers that is consistent with the number of logical CPUS/cores specified in the "CORES/N" resource. Must be used with -jpp "packed" or "spread".
For example: 
% nc run -r CORES/4 -r CGROUP:CORES -jpp fastest,pack -- a.out
VOV-17167 Accelerator Fixed an issue that had caused jobs to get assigned to the generic "userslice" cgroups, with the result that the wrong number of CPUs in the CPUs-allowed affinity list was in effect for the job. Also made a change to allow cgroup resource declarations to be case-insensitive. Now CORES/ cores/ RAM/ ram/ are supported with cgroup resources. Finally, added code to remove VOV-created cgroup files from the Linux system when the tasker exits.
VOV-17170 Accelerator Fixed issue in CPU jail implementation for NUMA systems.
VOV-17179 All Fixed a security vulnerability where malicious HTML and JavaScript code could be injected via CGI endpoints.
VOV-17180 All Fixed a security vulnerability where malicious code could be injected via GET parameters for CGI endpoints.
VOV-17181 All Fix a security vulnerability in CGI scripts. Disallowed "$(.*)" and "()" combinations in web URL. It was evaluated as a TCL command by web server.
VOV-17182 All Disallowed "[.*+" combination in web URL. It was evaluated as a TCL command by web server.
VOV-17183 All Disallowed "[.*+" combination in web URL. It was evaluated as a TCL command by web server.
VOV-17184 All Disallowed "[.*+" combination in web URL. It was evaluated as a TCL command by web server.
VOV-17186 All Addressed an issue where users with little or no privileges could start and stop daemons via the web interface.
VOV-17187 All Issue addressed by fix for VOV-17183.
VOV-17188 All Modify the /cgi/vov/viewfile.cgi endpoint to respect the disablefileaccess vovserver configuration variable.
VOV-17229 Accelerator Plus CS0587077, CS0595849 Fixed an issue with Accelerator Plus Direct Drive, whereby vovvwxd was deleting the log file of a running tasker.
VOV-17245 All Disallowed malicious variable replacement in CGI pages from a known web URL query parameter.
VOV-17295 Accelerator Resolved issue causing unnecessary CPU usage in vovserver EventService thread.
VOV-17296 Accelerator, Accelerator Plus, FlowTracer CS0615889 This issue affects the situation where FT uses NC in an "indirect tasker" configuration. An internal FlowTracer script previously named "vrun" has been renamed to "vovrun" to avoid command name space collisions with other software used by customers. This script is used internally and so no documented user interface has changed. However this change introduces a potential incompatibility between versions in the following cases where FlowTracer uses an Accelerator queue as a base queue:
  • Case 1. If the FlowTracer running version is 2024.1.1-p1 or higher, the Accelerator running version is earlier than 2024.1.1-p1 and the customer does not use another vendor's vrun command.
  • Case 2. If the FlowTracer running version is earlier than 2024.1.1-p1, Accelerator running version is 2024.1.1-p1 or higher and the customer does not use another vendor's vrun command.
  • Case 3. The customer is using a vrun script from another vendor.
In Cases 1 and 2 above, two manual changes inside $VOVDIR will work around the problem:
  • Case 1. The base Accelerator queue has no "vovrun" or a capsule named vov_vovrun.tcl, so the admin should perform the following steps in the context of the Accelerator installation $VOVDIR:
    % ln -s $VOVDIR/scripts/vrun $VOVDIR/scripts/vovrun
 % ln -s $VOVDIR/tcl/vtcl/capsules/vov_vrun.tcl $VOVDIR/tcl/vtcl/capsules/vov_vovrun.tcl
  • Case 2: The base Accelerator queue has no "vrun" or a capsule named vov_vrun.tcl, so the admin should perform the following steps in the context of the Accelerator installation $VOVDIR:
    % ln -s $VOVDIR/scripts/vovrun $VOVDIR/scripts/vrun
% ln -s $VOVDIR/tcl/vtcl/capsules/vov_vovrun.tcl $VOVDIR/tcl/vtcl/capsules/vov_vrun.tcl
  • In Case 3, both the FlowTracer and Accelerator running versions must be 2024.1.1-p1 or higher.
VOV-17299 Accelerator Plus Fixed incorrect output of the SLOTSAVAIL field in vovselect, vtk_select_loop and related commands when suspended jobs are present on the tasker.
VOV-17301 Accelerator Fixed issue that caused the accounting of tasker hardware resources when Ctrl-C was pressed during the setup hook execution of an interactive job that utilizes the Accelerator container support feature.
VOV-17310 Accelerator Fixed issue that resulted in the submission shell being blocked due to server reconnect attempts when Ctrl-C was pressed during the setup hook execution of an interactive job that utilizes the Accelerator container support feature. The job is now aborted immediately without attempting to reconnect to the server.
VOV-17311 Accelerator Fixed issue that resulted in the job being auto-rescheduled when Ctrl-C was pressed during the setup hook execution of an interactive job that utilizes the Accelerator container support feature. The job is now aborted and reported as a failure.
VOV-17350 Accelerator Plus CS0610160 Fixed an issue with buckets synchronization in DirectDrive. Previously, deleting a foreign bucket in the base queue could cause vovwxd to stop processing further job additions into the WX bucket.