<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
Thanks again, Gavin. We did the same thing at our site this week (mitigated on login nodes, disabled mitigation on compute nodes), but I intend to go back and test to see if there’s any performance penalty without the kernel arguments.
<div><br>
</div>
<div>Am I correct that this is Haswell and newer that is affected?<br>
<br>
<div id="AppleMailSignature"><span style="background-color: rgba(255, 255, 255, 0);">--<br>
____<br>
|| \\UTGERS,       |---------------------------*O*---------------------------<br>
||_// the State     |         Ryan Novosielski - <a href="mailto:novosirj@rutgers.edu" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="1">novosirj@rutgers.edu</a><br>
|| \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS Campus<br>
||  \\    of NJ     | Office of Advanced Research Computing - MSB C630, Newark<br>
    `'</span></div>
<div><br>
On Mar 9, 2018, at 10:06, Gavin W. Burris <<a href="mailto:bug@wharton.upenn.edu">bug@wharton.upenn.edu</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div><span>Hey, Ryan.  Doing well.  Hope you weathered the storm OK!</span><br>
<span></span><br>
<span>The benchmarks were inconclusive, as they were ran on a loaded system.  I should have ran a variety during the maintenance window, when queues were clear.  With so many different applications, many of which being network IO-bound, we decided to only enforce
 patches on login nodes, applying grub options on compute nodes.  Numbers there are good.</span><br>
<span></span><br>
<span>Cheers.</span><br>
<span></span><br>
<span>On Thu 03/08/18 02:47PM EST, Ryan Novosielski wrote:</span><br>
<blockquote type="cite"><span>Cheers, Gavin (hope you're well, BTW)!</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>Any real-world ballpark figures on how "killed" performance is (and</span><br>
</blockquote>
<blockquote type="cite"><span>does your site disable those patches)?</span><br>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>On 03/08/2018 02:36 PM, Gavin W. Burris wrote:</span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span>Just had our biannual maintenance window.  All the things are
</span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span>patched.  One could disable the performance-killing patches with
</span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span>the "noibrs noibpb nopti" grub options.  Cheers.</span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span>On Thu 03/08/18 01:55PM EST, Ryan Novosielski wrote:</span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>I have been waiting, specifically, for Prentice Bisbal to try it.</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>:-P</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>I actually have not checked to see whether any other upgrades
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>I’ve applied have handled these vulnerabilities (I’d assume
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>RedHat would have patched their distribution). FWIW, however, I
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>did receive a report that one of our newer images seemed slower.</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>Haven’t gotten a chance to fully investigate those reports —
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>could be any number of other things.</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>-- ____ || \\UTGERS, </span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>|---------------------------*O*--------------------------- ||_//</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>the State     |         Ryan Novosielski - </span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span><a href="mailto:novosirj@rutgers.edu">novosirj@rutgers.edu</a><<a href="mailto:novosirj@rutgers.edu">mailto:novosirj@rutgers.edu</a>> || \\
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>Campus ||  \\    of NJ     | Office of Advanced Research
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>Computing - MSB C630, Newark `'</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>On Mar 8, 2018, at 13:13, Alex Chekholko via Beowulf
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span><<a href="mailto:beowulf@beowulf.org">beowulf@beowulf.org</a><<a href="mailto:beowulf@beowulf.org">mailto:beowulf@beowulf.org</a>>> wrote:</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>As an experienced and cynical HPC admin working with trusted
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>users... I have not installed any kind of firmware or kernel
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>updates.  I'll wait for you to go first :)</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>On Thu, Mar 8, 2018 at 10:10 AM, Prentice Bisbal </span>
<br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span><<a href="mailto:pbisbal@pppl.gov">pbisbal@pppl.gov</a><<a href="mailto:pbisbal@pppl.gov">mailto:pbisbal@pppl.gov</a>>> wrote: Beowulfers,</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>Have any of you updated the kernels on your clusters to fix the
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>Spectre and Meltdown vulnerabilities? I was following this issue</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>closely for the first couple of weeks. There seemed to be a lack</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>of consensus on how much these fixed would impact HPC jobs, and</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>if I recall correctly, some of the patches really hurt
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>performance, or caused other problems. We took a wait-and-see
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>approach here. So now that I've waited a while, what did you
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>see?</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>-- Prentice</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>_______________________________________________ Beowulf mailing
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>list, <a href="mailto:Beowulf@beowulf.org">Beowulf@beowulf.org</a><<a href="mailto:Beowulf@beowulf.org">mailto:Beowulf@beowulf.org</a>> sponsored
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>by Penguin Computing To change your subscription (digest mode or</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>unsubscribe) visit </span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.b">https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.b</a></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite"><span><a href="http://eowulf.org">eowulf.org</a>%2Fmailman%2Flistinfo%2Fbeowulf&data=02%7C01%7Cnovosirj%40rutg</span><br>
</blockquote>
<blockquote type="cite"><span><a href="http://ers.edu">ers.edu</a>%7Ca91c0d09885047db8ded08d5852beaa4%7Cb92d2b234d35447093ff69aca66</span><br>
</blockquote>
<blockquote type="cite"><span>32ffe%7C1%7C1%7C636561346021256640&sdata=Eq4smdlMLwxS4nNkgAZlfDcc6Sl2gl3</span><br>
</blockquote>
<blockquote type="cite"><span>NvuRZrt3AIxI%3D&reserved=0<<a href="https://na01.safelinks.protection.outlook.com">https://na01.safelinks.protection.outlook.com</a></span><br>
</blockquote>
<blockquote type="cite"><span>/?url=http%3A%2F%<a href="http://2Fwww.beowulf.org">2Fwww.beowulf.org</a>%2Fmailman%2Flistinfo%2Fbeowulf&data=0</span><br>
</blockquote>
<blockquote type="cite"><span>2%7C01%7Cnovosirj%<a href="http://40rutgers.edu">40rutgers.edu</a>%7Cc4cd547515a346014d0d08d5852058a0%7Cb92</span><br>
</blockquote>
<blockquote type="cite"><span>d2b234d35447093ff69aca6632ffe%7C1%7C0%7C636561296368291958&sdata=4fTJudM</span><br>
</blockquote>
<blockquote type="cite"><span>1x6k1L3KPRsLITJEy%2FKI%2FqaXOGJ6qwDJmgG4%3D&reserved=0></span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite"><span>_______________________________________________</span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>Beowulf mailing list, </span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span><a href="mailto:Beowulf@beowulf.org">Beowulf@beowulf.org</a><<a href="mailto:Beowulf@beowulf.org">mailto:Beowulf@beowulf.org</a>> sponsored by
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>Penguin Computing To change your subscription (digest mode or
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>unsubscribe) visit </span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.b">https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.b</a></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite"><span><a href="http://eowulf.org">eowulf.org</a>%2Fmailman%2Flistinfo%2Fbeowulf&data=02%7C01%7Cnovosirj%40rutg</span><br>
</blockquote>
<blockquote type="cite"><span><a href="http://ers.edu">ers.edu</a>%7Cc4cd547515a346014d0d08d5852058a0%7Cb92d2b234d35447093ff69aca66</span><br>
</blockquote>
<blockquote type="cite"><span>32ffe%7C1%7C0%7C636561296368291958&sdata=4fTJudM1x6k1L3KPRsLITJEy%2FKI%2</span><br>
</blockquote>
<blockquote type="cite"><span>FqaXOGJ6qwDJmgG4%3D&reserved=0</span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite"><span>_______________________________________________ Beowulf mailing</span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>list, <a href="mailto:Beowulf@beowulf.org">Beowulf@beowulf.org</a> sponsored by Penguin Computing To
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span>change your subscription (digest mode or unsubscribe) visit
</span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span><a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.b">https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.b</a></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite"><span><a href="http://eowulf.org">eowulf.org</a>%2Fmailman%2Flistinfo%2Fbeowulf&data=02%7C01%7Cnovosirj%40rutg</span><br>
</blockquote>
<blockquote type="cite"><span><a href="http://ers.edu">ers.edu</a>%7Ca91c0d09885047db8ded08d5852beaa4%7Cb92d2b234d35447093ff69aca66</span><br>
</blockquote>
<blockquote type="cite"><span>32ffe%7C1%7C1%7C636561346021256640&sdata=Eq4smdlMLwxS4nNkgAZlfDcc6Sl2gl3</span><br>
</blockquote>
<blockquote type="cite"><span>NvuRZrt3AIxI%3D&reserved=0</span><br>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite">
<blockquote type="cite"><span></span><br>
</blockquote>
</blockquote>
<blockquote type="cite"><span></span><br>
</blockquote>
<blockquote type="cite"><span>-- </span><br>
</blockquote>
<blockquote type="cite"><span>____</span><br>
</blockquote>
<blockquote type="cite"><span>|| \\UTGERS,     |----------------------*O*------------------------</span><br>
</blockquote>
<blockquote type="cite"><span>||_// the State  |    Ryan Novosielski - <a href="mailto:novosirj@rutgers.edu">
novosirj@rutgers.edu</a></span><br>
</blockquote>
<blockquote type="cite"><span>|| \\ University | Sr. Technologist - 973/972.0922 ~*~ RBHS Campus</span><br>
</blockquote>
<blockquote type="cite"><span>||  \\    of NJ  | Office of Advanced Res. Comp. - MSB C630, Newark</span><br>
</blockquote>
<blockquote type="cite"><span>     `'</span><br>
</blockquote>
<span></span><br>
<span>-- </span><br>
<span>Gavin W. Burris</span><br>
<span>Senior Project Leader for Research Computing</span><br>
<span>The Wharton School</span><br>
<span>University of Pennsylvania</span><br>
<span>Search our documentation: <a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fresearch-it.wharton.upenn.edu%2Fabout%2F&data=02%7C01%7Cnovosirj%40rutgers.edu%7C81518df46beb4ae2339808d585cf437d%7Cb92d2b234d35447093ff69aca6632ffe%7C1%7C1%7C636562047597701062&sdata=SyA6EIUeAjIH9oZsQXkZOVAA03ImAy607mr7Zt6nBRQ%3D&reserved=0">
https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fresearch-it.wharton.upenn.edu%2Fabout%2F&data=02%7C01%7Cnovosirj%40rutgers.edu%7C81518df46beb4ae2339808d585cf437d%7Cb92d2b234d35447093ff69aca6632ffe%7C1%7C1%7C636562047597701062&sdata=SyA6EIUeAjIH9oZsQXkZOVAA03ImAy607mr7Zt6nBRQ%3D&reserved=0</a></span><br>
<span>Subscribe to the Newsletter: <a href="https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwhr.tn%2FResearchNewsletterSubscribe&data=02%7C01%7Cnovosirj%40rutgers.edu%7C81518df46beb4ae2339808d585cf437d%7Cb92d2b234d35447093ff69aca6632ffe%7C1%7C1%7C636562047597701062&sdata=UUC35NEU2oNL4O%2FPkcBaeiaZqpUy0g9OYtIQuB%2FlGD4%3D&reserved=0">
https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwhr.tn%2FResearchNewsletterSubscribe&data=02%7C01%7Cnovosirj%40rutgers.edu%7C81518df46beb4ae2339808d585cf437d%7Cb92d2b234d35447093ff69aca6632ffe%7C1%7C1%7C636562047597701062&sdata=UUC35NEU2oNL4O%2FPkcBaeiaZqpUy0g9OYtIQuB%2FlGD4%3D&reserved=0</a></span><br>
</div>
</blockquote>
</div>
</body>
</html>