unable to rinstall (redhat 9.6 patched for openssl) with lenovo hardware

[kk0nrad]

I am experiencing this strange issue when I run rinstall:

[root@xcatmasternew ~]# rinstall gnode05 osimage=gpu-image9.6 -u
Provision node(s): gnode05
Error: [xcatmasternew]: rinstall plugin bug, pid 10914, process description: 'xcatd SSL: rinstall to gnode05 for root@localhost: rinstall instance' with error 'Died at /opt/xcat/sbin/xcatd line 2104.
' while trying to fulfill request for the following nodes: gnode05
[root@xcatmasternew ~]# rpower gnode05 status
gnode05: on
[root@xcatmasternew ~]#

as you can see, rpower works so I presume that IPMI is working.
The server I am trying to install is a lenovo SR650V4.

[kk0nrad]

I'd like to add that if I reset the server after I have issued rinstall the installation is succesful, it just requires this addisional step

[kk0nrad]

the issue seems to be related to the lenovo xcc. Rinstall works with different hardware

[Obihoernchen]

Yes probably nodeset which is broken for this specific IPMI implementation (nodeset runs as part of rinstall).
I saw similar behaviour on some newer Intel BMCs but didn't have time to debug this yet.

[kk0nrad]

is there something that I could try as a temporarary workaround that would allow mass-rinstalling a whole group of servers? The only way I found is what I wrote above, but I have to rinstall every single node individually then reset it with rpower.

[viniciusferrao]

This is likely the same IPMI.pm session bug fixed in the PR linked from #7511. rinstall calls rsetboot through IPMI, and on some newer BMCs (Lenovo XCC, Intel) the RMCP+ session handling in IPMI.pm crashes during decryption. The fix covers cbc_pad bounds checking, RAKP message tag handling for OpenBMC, and the name-only lookup bit that newer firmware requires. Since rpower uses a simpler IPMI exchange it can succeed while rsetboot (which rinstall depends on) fails. @kk0nrad can you test with the latest code once the PR from #7511 merges?

[kk0nrad]

I will give it a try asap Davide Corrado Senior HPC Engineer Senior UNIX System Administrator Via Abramo Lincoln, 25 20129 Milano Tel +39 3474259950 Il Gio 7 Mag 2026, 00:05 Vinícius Ferrão ***@***.***> ha scritto:

…

*viniciusferrao* left a comment (xcat2/xcat-core#7506) <#7506 (comment)> This is likely the same IPMI.pm session bug fixed in the PR linked from #7511 <#7511>. rinstall calls rsetboot through IPMI, and on some newer BMCs (Lenovo XCC, Intel) the RMCP+ session handling in IPMI.pm crashes during decryption. The fix covers cbc_pad bounds checking, RAKP message tag handling for OpenBMC, and the name-only lookup bit that newer firmware requires. Since rpower uses a simpler IPMI exchange it can succeed while rsetboot (which rinstall depends on) fails. @kk0nrad <https://github.com/kk0nrad> can you test with the latest code once the PR from #7511 <#7511> merges? — Reply to this email directly, view it on GitHub <#7506 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AFTO7PPQSEFFDRL4G64C7GL4ZOZJ3AVCNFSM6AAAAACYTXFSI6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DGOJSGUZTOOBYGY> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[viniciusferrao]

@kk0nrad xCAT 2.18 is released. It should address your issue. Can you try it?