From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [IPv6:2a0f:8001:1:32::40]) by lore.proxmox.com (Postfix) with ESMTPS id B6F931FF0E8 for ; Sat, 25 Jul 2026 09:14:33 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id 760E6214B1; Sat, 25 Jul 2026 09:14:32 +0200 (CEST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Ti8nHbUDVyRRU1RB2qB2y3y+zjxHnLvHWtRNzQmmlyjN5LkY/vu4zrYI3EMtY1zcJsJ3LlxZYFzjqTitxiqCfLOqPpEz/xvOgGskaImLHPL359CsPGP5cJHPvExaEuAzRYySjcHarxIbRBfH9PFimUjcDXMTCtDr+dfm683aFWKtcZE5wwZ1jI7PAQxtZiX6BWHoshv1edjJRpRxdPJ5MIvMxvNCbIXCvMSOs7Z/DgoDfmvIkR0h4Yg6ahdS0bGpl1DCruiU+8YXkd8Qb51M3kKQEoiqEVbwahGpQsN76dBNpD7YCbA5vqgEikoc40Wr0K7baVTL1L2KWeJ8wRJ6Fw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=6i7b+y2YihhuOjnqN8SyoFTj2jxrAZwukMpFwIr3EX0=; b=XMGxlXaPLKm9lLxkVU8PVGB1LEa4RXnaJMWFNvAnDZU8Ao/3BPcft9FTp5cNCCo7MlwpVitInhFhknf4X3RWXslCeRmk9mPriNGrRYzHp5vLzteGW3bTrz6zLIQ03mgZ+/y8rUjhGvpjN6wgFHGzmXOvc7GohUe7bBjpo4kBdZOKnvWCg/AF205EOScV23iwxhg2rm47oQ5nqsjgiVPU/0YD875pCvEybAXhOFX3ZmvyiJwPFTJFAcOIMxelVg159BFu9KzRPJLXPOo7qEQnqAjnqn9iRyLO5a5HIFrzIGoS7iFDv+S8tHwmYUloCayDpIZp1xH/5ZLSZeFxd1M6SA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=hitachivantara.com; dmarc=pass action=none header.from=hitachivantara.com; dkim=pass header.d=hitachivantara.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hitachivantara.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6i7b+y2YihhuOjnqN8SyoFTj2jxrAZwukMpFwIr3EX0=; b=lEYmACyDK3cwIa8FJFzUqMHKnC0fs/QVfuOBarK6S1HJ+0uS678hKB9BiYRJv+tTtkcX+V5wNee/FQjvXYM2z48ZLsxcqSNehJ2urhhp8sa5Ff76crh0Tp4GXQDcov+wKqcWll60lwXbBo1MeMpSD/OK8TxzEm+ZkVM40fFcf8qaLfmHGHR5IGfr4CViHAuIfxaqY+GN+Hwth00545u5/q3rVWpCurhaRt/vKD0Eyb1iim0UEeMNJhXqJe0taym30shBZ2Y+7JnmOOKCJyU/I7kyDfn51X6nbOwed3HnEZmW4XTCAO6RWKGHeqGOlzd2pWLZNGN2eaTZXTLnASiyJg== From: Anthony Galica To: Anthony Galica , "pve-devel@lists.proxmox.com" Subject: RE: :Cluster::cfs_lock_domain - bizarre issue Thread-Topic: :Cluster::cfs_lock_domain - bizarre issue Thread-Index: Ad0bRNhwvQ3lni1hRtOrhiMvaG5t1QAC0bkAAC1Cs3A= Date: Sat, 25 Jul 2026 07:14:18 +0000 Message-ID: References: <20260709115716.299836-1-l.wagner@proxmox.com> <20260709115716.299836-12-l.wagner@proxmox.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=hitachivantara.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: IA1PR08MB8621:EE_|DS0PR08MB11091:EE_ x-ms-office365-filtering-correlation-id: 4fd96d11-4055-4e94-dbf8-08deea1c5798 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|23010399003|376014|38070700021|6133799003|11063799006|5023799004|4143699003|56012099006|10067099003|22082099003|18002099003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:IA1PR08MB8621.namprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(23010399003)(376014)(38070700021)(6133799003)(11063799006)(5023799004)(4143699003)(56012099006)(10067099003)(22082099003)(18002099003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?7u3nt9Dd0ZVu4YBQ0ZcXJSuG7EXEBJvRQDmA42WOvdOFxAjGcpZ/j6mwv1mz?= =?us-ascii?Q?p44KjnwxmaTLR+OtOXrOLHo2vyO+yADDQBb0+7BbiNJlOo+LtPBpIxpbEKkf?= =?us-ascii?Q?cPXl9bHph0Av1b9k7oBRwevAXm+r824y6c0w+q814hDe6D6fKwkjwI15E6Gn?= =?us-ascii?Q?AN+0eWzFj8AH4vLAvUGHVj8TDP+Rw2ufDmOaMdGeKs5f8ZPoJIyAL2Mzrlm2?= =?us-ascii?Q?TS7znoqlDhQateDZTqIUVG1ZehqOu3kdkYoWGKbx5RFk8fm5//GRkSXYvgoC?= =?us-ascii?Q?+R0RzYwvazheso14SmUxgJCxOZqfSZbeVKwCeHDS1DBiZQgVITQa6an+epOX?= =?us-ascii?Q?ymepLgbsLqOVrhaZn2bbE8GusHASW+XVlfh8Onvpffkdvg0Fey1nfsALODBF?= =?us-ascii?Q?E57SakOdVTlC5s3NxLWokBsw1GMs/ogVWwNn3gUw8/9eVkRwVYZ0GL/ktNZH?= =?us-ascii?Q?KldGt1BHCGmzR5kNw+0QRnvK4RfdApAJMW5DxYfagkdWfPPqY/nr+g1prtw/?= =?us-ascii?Q?LNrSMoyWrXFuyqrEF6oGhzt+TFF0Rx7Ku4SoF608XBOB3F09WXO7YmlTwLM0?= =?us-ascii?Q?RDr0MllpKH9JzUizd2fJXPBIjAVijqi4DYKPh2k0iq8DRTlIiSbyil9g1yQX?= =?us-ascii?Q?qKTV58obJfcjINEDS834pPoyP4U3y/R17WXzwgAoKyHgBylz+oeLOaEayjPb?= =?us-ascii?Q?otYY8TNEVb4Rn1CaInVTKYgb9huq5+rZ+kk8K230Qu9FK6+PkQrt8coXsaYi?= =?us-ascii?Q?iHoJ+kEqZ5O5KbUWYc1UjMp13ZQXWTqw7JuSZfhj/aNX+uHcwSBzbi+p4U10?= =?us-ascii?Q?PcdBTSHFIbvhfl/zJvuy7eIdk8y7j4FC09OHBWPSVmFc8VrGYJ+/AAD3KU7v?= =?us-ascii?Q?sKKteiQWAnaYgIIQIHidnTCMQNnP6O8fu74P/ijEciQmT4U0VgGVvLdncmKx?= =?us-ascii?Q?ZuITXfg8AhDU4sqcNqfPelUs2rotFh9ZiGmgJh1qkP2oavBNXec/3hJWkBv0?= =?us-ascii?Q?Uu/JDBw8+lkjpi95CWLTXWJRlBu7/R2STQNF8cmgUtocCkDDjYMUAoUAPBV0?= =?us-ascii?Q?j4QDSYIZBHblT2z948h8E/PEq8pDbvl5oNE5S6EGlHRn1LEC0FPTa+rwlpaz?= =?us-ascii?Q?lFfNxp2GNZ1eemiz27/LwhC3lze6c5utfvv+GwYJk/wO2Cjh2LE7+KZEwYue?= =?us-ascii?Q?ju6pNvH+EQhy/pDFUoSgM+uBH6trXXHBjMaRrXHv1E8QLEuWZay46o0ETy4v?= =?us-ascii?Q?eZ1C679jMq9mqQ0Z7XF+UV1wMb+wZkqKl6GDxGZ9TOHQvbwoCRffQ2SrgguW?= =?us-ascii?Q?ilp1bzujYJxFy5n4xQWmcm+jiZFNCsoFYA0pK27KyxBor9Dm+/gmWoBu/ppU?= =?us-ascii?Q?8hIbM6kzkewlL3jJZqoFFm0Dtwlyw8pTFeI+O+4nZY54YujCUXPsG6g0ATAv?= =?us-ascii?Q?betvOYWbxty8P3b4NWto+8NmZwDY7n/RwSTnx1GJSXK+zrsEHjHRQnhah18g?= =?us-ascii?Q?0kXzB/pJ4AnzuhTx6VKJ56UMIwt97KUl0pOGnoPksrRd1R20vwGvT9gdXK9/?= =?us-ascii?Q?FEhlUTsm3swae/Ot5ygO+yhPM6pnfiOQSKX+qsLXNWXpK5GnhWQWSgdT+rTl?= =?us-ascii?Q?98g1EzhFLXUm626tf1ANYDAG8cKwf5K/a+RqbwtxmJw0splie7R3cWPmhupq?= =?us-ascii?Q?gzObGtFsz+i/q0mvvx2PTOJ5RfQQkg4VegUVGyUABbMuc3XcclTvT+FeiLut?= =?us-ascii?Q?nwL4BmHvZnnonm1xYfuo/3LIhbOQ8Xs=3D?= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: hitachivantara.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: IA1PR08MB8621.namprd08.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4fd96d11-4055-4e94-dbf8-08deea1c5798 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jul 2026 07:14:18.2376 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 18791e17-6159-4f52-a8d4-de814ca8284a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: VwNaVkP9ZgAOH0xMmx5KaL40Ejvah3vzcvrfF5YnIhN5xBjok0JqswhAWWXXFVxzSj8o5EI/FmvmHIV5j+p/FfklAMg7mGJqcTtUpxiST4Jl+uggx6z7RmVgY8THKgFV X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR08MB11091 X-SPAM-LEVEL: Spam detection results: 0 AWL -0.001 Adjusted score from AWL reputation of From: address DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: DEXUQMJIV6HEV7BYRVZGWQUIIYHOLBST X-Message-ID-Hash: DEXUQMJIV6HEV7BYRVZGWQUIIYHOLBST X-MailFrom: anthony.galica@hitachivantara.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: I've figured this out, and now know about tainted values in Perl! -----Original Message----- From: Anthony Galica =20 Sent: Friday, July 24, 2026 2:38 AM To: pve-devel@lists.proxmox.com Subject: RE: :Cluster::cfs_lock_domain - bizarre issue I also see this same issue with PVE::Tools::file_set_contents(). -----Original Message----- From: Anthony Galica =20 Sent: Friday, July 24, 2026 1:28 AM To: pve-devel@lists.proxmox.com Subject: PVE::Cluster::cfs_lock_domain - bizarre issue Hi everyone, I am getting a very strange issue from PVE::Cluster::cfs_lock_domain, but o= nly when it is called via activate_volume. =20 For each test, I restarted these services first: systemctl restart pveproxy pvedaemon pvestatd pvescheduler spiceproxy pve-c= luster I have asked Gemini for help, and it continues to suggest various things, b= ut none of them work. Consider this code: sub _lock_name { my ($context) =3D @_; use constant CONNECTION_LOCK_NAME_HEADER =3D> 'connection-lock-'; my $serial =3D $context->serial(); # returns 810050 return CONNECTION_LOCK_NAME_HEADER . "$serial"; } my $lock_name =3D _lock_name($context); PVE::Cluster::cfs_lock_domain($lock_name, _CONNECTIONS_LOCK_TIMEOUT, sub {= print(""); }); This will *always* fail from within activate_volume (or another subroutine = in the same stack) with this error: TASK ERROR: cfs-lock 'domain-connection-lock-810050' error: Insecure depen= dency in mkdir while running with -T switch at /usr/share/perl5/PVE/Cluster= .pm line 639. It also fails if I use sprintf instead. Or if I append an extra "" (Gemini= suggestion), etc. =20 When this happens, /etc/pve/priv/lock is empty, and no other calls have bee= n made to activate_volume. The above code works fine if invoked from a subroutine that was called via = the command line. Now for the really strange part: if I change _lock_name to return the exact= same string, only without any formatting, it will work. Working code: sub _lock_name { my ($context) =3D @_; return 'connection-lock-810050'; } Does anyone have any insight as to why this is happening and how I can get = around it? Thank you! Anthony