How to collect a crash dump from an RHEL 7.5+ based OpenStack instance where KASLR is enabled per default
Issue
Red Hat Enteprise Linux 7.5 introduces the Kernel Address Space Randomization (KASLR) feature for KVM guest virtual machines. KASLR
enables randomizing the physical and virtual address at which the kernel image is decompressed, and thus prevents guest security
exploits based on the location of kernel objects.
- How can one collect a crash dump from a QEMU domain with KASLR enabled?
- Kernel crash dumps of guests with KASLR activated cannot be analyzed using the Linux
crash
utility.
Environment
- Red Hat OpenStack Platform
- instances with KASLR enabled ( e.g. Red Hat Enterprise Linux 7.5+ )
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.