May 2021 - kernel - Fedora Mailing-Lists

[OS-BUILD PATCHv2 0/2] [redhat] Embed crypto algos, modes and templates needed in the FIPS mode

by Vladis Dronov (via Email Bridge)

From: Vladis Dronov on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1125 ``` Currently a number of FIPS-allowed algorithms are built as modules or are not enabled in Fedora and ARK. This can result in a panic while booting in the FIPS mode. Fix this by embedding the FIPS-allowed algorithms, modes and templates into a kernel, the same way as CTC, CBC and other algorithms already do. The below is a detailed description of a current state and changes suggested in this patchset in a readable form: $ git grep CRYPTO_SHA3 common/generic/CONFIG_CRYPTO_SHA3:CONFIG_CRYPTO_SHA3=m ### should be =y $ git grep CRYPTO_RSA fedora/generic/CONFIG_CRYPTO_RSA:CONFIG_CRYPTO_RSA=y ### unify, set =y $ git grep CRYPTO_NULL fedora/generic/CONFIG_CRYPTO_NULL:CONFIG_CRYPTO_NULL=y ### should be common $ git grep -e 'CRYPTO_$ECB\|CBC\|CTR\|XTS\|GCM\|CCM\|AUTH\|HMAC\|CMAC\|OFB\|CTS$' ark/generic/CONFIG_CRYPTO_XTS:CONFIG_CRYPTO_XTS=m ### unify, set to =y fedora/generic/CONFIG_CRYPTO_XTS:CONFIG_CRYPTO_XTS=y ### unify, set to =y common/generic/CONFIG_CRYPTO_CCM:CONFIG_CRYPTO_CCM=m ### set to =y common/generic/CONFIG_CRYPTO_AUTHENC:CONFIG_CRYPTO_AUTHENC=m ### set to =y common/generic/CONFIG_CRYPTO_CMAC:CONFIG_CRYPTO_CMAC=m ### set to =y common/generic/CONFIG_CRYPTO_OFB:CONFIG_CRYPTO_OFB=m ### set to =y Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1947240 Signed-off-by: Vladis Dronov <vdronov(a)redhat.com> ```

2 years, 11 months

1
2
0 / 0

[OS-BUILD PATCH] rpmspec: build debug-* meta-packages if debug builds are disabled

by Herton R. Krzesinski (via Email Bridge)

From: Herton R. Krzesinski <herton(a)redhat.com> rpmspec: build debug-* meta-packages if debug builds are disabled During upstream git snapshot builds, Fedora uses the debug configs to build the main kernels, and drops the *-debug package variants. However if someone installs a kernel-debug package for example it'll not update until the next non-snapshot build. So add support to keep the debug packages around even for snapshot builds, however in this case, they will be just meta-packages requiring the main kernel-* packages built with debug configs. Signed-off-by: Herton R. Krzesinski <herton(a)redhat.com> diff a/redhat/kernel.spec.template b/redhat/kernel.spec.template --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -1039,9 +1039,9 @@ This is required to use SystemTap with %{name}%{?1:-%{1}}-%{KVERREL}.\ # # This macro creates a kernel-<subpackage>-devel package. -# %%kernel_devel_package <subpackage> <pretty-name> +# %%kernel_devel_package [-m] <subpackage> <pretty-name> # -%define kernel_devel_package() \ +%define kernel_devel_package(m) \ %package %{?1:%{1}-}devel\ Summary: Development package for building kernel modules to match the %{?2:%{2} }kernel\ Provides: kernel%{?1:-%{1}}-devel-%{_target_cpu} = %{version}-%{release}\ @@ -1058,6 +1058,9 @@ Requires: bison\ Requires: flex\ Requires: make\ Requires: gcc\ +%if %{-m:1}%{!-m:0}\ +Requires: kernel-devel-uname-r = %{KVERREL}\ +%endif\ %description %{?1:%{1}-}devel\ This package provides kernel headers and makefiles sufficient to build modules\ against the %{?2:%{2} }kernel package.\ @@ -1098,9 +1101,9 @@ This package provides kernel modules for the %{?2:%{2} }kernel package for Red H # # This macro creates a kernel-<subpackage>-modules-extra package. -# %%kernel_modules_extra_package <subpackage> <pretty-name> +# %%kernel_modules_extra_package [-m] <subpackage> <pretty-name> # -%define kernel_modules_extra_package() \ +%define kernel_modules_extra_package(m) \ %package %{?1:%{1}-}modules-extra\ Summary: Extra kernel modules to match the %{?2:%{2} }kernel\ Provides: kernel%{?1:-%{1}}-modules-extra-%{_target_cpu} = %{version}-%{release}\ @@ -1110,6 +1113,9 @@ Provides: installonlypkg(kernel-module)\ Provides: kernel%{?1:-%{1}}-modules-extra-uname-r = %{KVERREL}%{?1:+%{1}}\ Requires: kernel-uname-r = %{KVERREL}%{?1:+%{1}}\ Requires: kernel%{?1:-%{1}}-modules-uname-r = %{KVERREL}%{?1:+%{1}}\ +%if %{-m:1}%{!-m:0}\ +Requires: kernel-modules-extra-uname-r = %{KVERREL}\ +%endif\ AutoReq: no\ AutoProv: yes\ %description %{?1:%{1}-}modules-extra\ @@ -1118,9 +1124,9 @@ This package provides less commonly used kernel modules for the %{?2:%{2} }kerne # # This macro creates a kernel-<subpackage>-modules package. -# %%kernel_modules_package <subpackage> <pretty-name> +# %%kernel_modules_package [-m] <subpackage> <pretty-name> # -%define kernel_modules_package() \ +%define kernel_modules_package(m) \ %package %{?1:%{1}-}modules\ Summary: kernel modules to match the %{?2:%{2}-}core kernel\ Provides: kernel%{?1:-%{1}}-modules-%{_target_cpu} = %{version}-%{release}\ @@ -1129,6 +1135,9 @@ Provides: kernel-modules = %{version}-%{release}%{?1:+%{1}}\ Provides: installonlypkg(kernel-module)\ Provides: kernel%{?1:-%{1}}-modules-uname-r = %{KVERREL}%{?1:+%{1}}\ Requires: kernel-uname-r = %{KVERREL}%{?1:+%{1}}\ +%if %{-m:1}%{!-m:0}\ +Requires: kernel-modules-uname-r = %{KVERREL}\ +%endif\ AutoReq: no\ AutoProv: yes\ %description %{?1:%{1}-}modules\ @@ -1152,22 +1161,27 @@ The meta-package for the %{1} kernel\ # # This macro creates a kernel-<subpackage> and its -devel and -debuginfo too. # %%define variant_summary The Linux kernel compiled for <configuration> -# %%kernel_variant_package [-n <pretty-name>] <subpackage> +# %%kernel_variant_package [-n <pretty-name>] [-m] <subpackage> # -%define kernel_variant_package(n:) \ +%define kernel_variant_package(n:m) \ %package %{?1:%{1}-}core\ Summary: %{variant_summary}\ Provides: kernel-%{?1:%{1}-}core-uname-r = %{KVERREL}%{?1:+%{1}}\ Provides: installonlypkg(kernel)\ +%if %{-m:1}%{!-m:0}\ +Requires: kernel-core-uname-r = %{KVERREL}\ +%endif\ %{expand:%%kernel_reqprovconf}\ %if %{?1:1} %{!?1:0} \ %{expand:%%kernel_meta_package %{?1:%{1}}}\ %endif\ -%{expand:%%kernel_devel_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\ -%{expand:%%kernel_modules_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\ -%{expand:%%kernel_modules_extra_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\ +%{expand:%%kernel_devel_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}} %{-m:%{-m}}}\ +%{expand:%%kernel_modules_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}} %{-m:%{-m}}}\ +%{expand:%%kernel_modules_extra_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}} %{-m:%{-m}}}\ +%if %{-m:0}%{!-m:1}\ %{expand:%%kernel_modules_internal_package %{?1:%{1}} %{!?{-n}:%{1}}%{?{-n}:%{-n*}}}\ %{expand:%%kernel_debuginfo_package %{?1:%{1}}}\ +%endif\ %{nil} # Now, each variant package. @@ -1190,7 +1204,11 @@ zfcpdump infrastructure. %endif %define variant_summary The Linux kernel compiled with extra debugging enabled +%if !%{debugbuildsenabled} +%kernel_variant_package -m debug +%else %kernel_variant_package debug +%endif %description debug-core The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions @@ -2529,8 +2547,10 @@ fi\ %kernel_variant_post -v lpae -r (kernel|kernel-smp) %endif +%if %{with_debug} %kernel_variant_preun debug %kernel_variant_post -v debug +%endif %if %{with_zfcpdump} %kernel_variant_preun zfcpdump @@ -2755,6 +2775,13 @@ fi %kernel_variant_files %{_use_vdso} %{with_up} %kernel_variant_files %{_use_vdso} %{with_debug} debug +%if !%{debugbuildsenabled} +%files debug +%files debug-core +%files debug-devel +%files debug-modules +%files debug-modules-extra +%endif %kernel_variant_files %{use_vdso} %{with_pae} lpae %kernel_variant_files %{_use_vdso} %{with_zfcpdump} zfcpdump -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1133

2 years, 11 months

2
1
0 / 0

[OS-BUILD PATCH 0/0] kernel.spec: Add support to store build artifacts

by Jiri Olsa (via Email Bridge)

From: Jiri Olsa on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1035 NOTE: Truncated patchset since committer email 'jolsa(a)kernel.org' does not match the submitter's GitLab public email address 'jolsa(a)redhat.com'. We need to handle a split cross env, where the userspace tools are built on a different machine from the kernel itself. The only restriction in this environment is the vmlinux.h file derived from the vmlinux binary used to compile the bpftool. Add support to define artifact path with: $ rpmbuild --define "artifacts PATH" and generate the vmlinux.h and save it as build artifact in this path. Also use the vmlinux.h artifact (if defined) for bpftool/selftest builds. The original patch was developed by Don Zickus. Co-developed-by: Don Zickus <dzickus(a)redhat.com> Signed-off-by: Jiri Olsa <jolsa(a)redhat.com>

2 years, 11 months

3
4
0 / 0

[OS-BUILD PATCHv4 0/2] enable CONFIG_CMA on x86_64 in ARK

by David Hildenbrand (via Email Bridge)

From: David Hildenbrand on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1023 Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1945002 Enable CONFIG_CMA on x86_64 in ARK as we already have in fedora; CMA is Tech Preview in RHEL 9.

2 years, 11 months

2
3
0 / 0

[OS-BUILD PATCHv3 0/2] enable CONFIG_CMA on x86_64 in ARK

by David Hildenbrand (via Email Bridge)

From: David Hildenbrand on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1023 Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1945002 Enable CONFIG_CMA on x86_64 in ARK as we already have in fedora; CMA is Tech Preview in RHEL 9.

2 years, 11 months

2
5
0 / 0

[OS-BUILD PATCH] UIO: disable unused config options

by Aristeu Rozanski (via Email Bridge)

From: Aristeu Rozanski <arozansk(a)redhat.com> UIO: disable unused config options Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1957819 Tested: locally with dist-rhel-configs Upstream Status: RHEL only This patch disables unused UIO config options. See https://bugzilla.redhat.com/show_bug.cgi?id=1957819#c0 for more details Signed-off-by: Aristeu Rozanski <arozansk(a)redhat.com> diff a/redhat/configs/ark/generic/CONFIG_UIO_AEC b/redhat/configs/ark/generic/CONFIG_UIO_AEC --- /dev/null +++ b/redhat/configs/ark/generic/CONFIG_UIO_AEC @@ -0,0 +1 @@ +# CONFIG_UIO_AEC is not set diff a/redhat/configs/ark/generic/CONFIG_UIO_CIF b/redhat/configs/ark/generic/CONFIG_UIO_CIF --- /dev/null +++ b/redhat/configs/ark/generic/CONFIG_UIO_CIF @@ -0,0 +1 @@ +# CONFIG_UIO_CIF is not set diff a/redhat/configs/ark/generic/CONFIG_UIO_PDRV_GENIRQ b/redhat/configs/ark/generic/CONFIG_UIO_PDRV_GENIRQ --- a/redhat/configs/ark/generic/CONFIG_UIO_PDRV_GENIRQ +++ b/redhat/configs/ark/generic/CONFIG_UIO_PDRV_GENIRQ @@ -1 +1 @@ -CONFIG_UIO_PDRV_GENIRQ=m +# CONFIG_UIO_PDRV_GENIRQ is not set diff a/redhat/configs/ark/generic/CONFIG_UIO_SERCOS3 b/redhat/configs/ark/generic/CONFIG_UIO_SERCOS3 --- /dev/null +++ b/redhat/configs/ark/generic/CONFIG_UIO_SERCOS3 @@ -0,0 +1 @@ +# CONFIG_UIO_SERCOS3 is not set -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1116

2 years, 11 months

2
1
0 / 0

[OS-BUILD PATCH] [redhat] enable CONFIG_DM_VERITY_FEC in ARK

by Mike Snitzer (via Email Bridge)

From: Mike Snitzer <snitzer(a)redhat.com> [redhat] enable CONFIG_DM_VERITY_FEC in ARK Enabling CONFIG_DM_VERITY_FEC in terms of common/ because Fedora already has it enabled. Signed-off-by: Mike Snitzer <snitzer(a)redhat.com> diff a/redhat/configs/ark/generic/CONFIG_DM_VERITY_FEC b/redhat/configs/ark/generic/CONFIG_DM_VERITY_FEC --- a/redhat/configs/ark/generic/CONFIG_DM_VERITY_FEC +++ /dev/null @@ -1 +0,0 @@ -# CONFIG_DM_VERITY_FEC is not set diff a/redhat/configs/fedora/generic/CONFIG_DM_VERITY_FEC b/redhat/configs/common/generic/CONFIG_DM_VERITY_FEC --- a/redhat/configs/fedora/generic/CONFIG_DM_VERITY_FEC +++ b/redhat/configs/common/generic/CONFIG_DM_VERITY_FEC -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1141

2 years, 11 months

4
3
0 / 0

[OS-BUILD PATCH] [redhat] perf: enable CTF support

by Michael Petlan (via Email Bridge)

From: Michael Petlan <mpetlan(a)redhat.com> [redhat] perf: enable CTF support Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1957305 CTF support in perf needs libbabeltrace-devel to be present at buildtime. Signed-off-by: Michael Petlan <mpetlan(a)redhat.com> diff a/redhat/kernel.spec.template b/redhat/kernel.spec.template --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -542,6 +542,7 @@ BuildRequires: zlib-devel binutils-devel newt-devel perl(ExtUtils::Embed) bison BuildRequires: audit-libs-devel BuildRequires: java-devel BuildRequires: libbpf-devel +BuildRequires: libbabeltrace-devel %ifnarch %{arm} s390x BuildRequires: numactl-devel %endif -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1140

2 years, 11 months

2
1
0 / 0

[OS-BUILD PATCH] rpmspec: revert/drop content hash for kernel-headers

by Herton R. Krzesinski (via Email Bridge)

From: Herton R. Krzesinski <herton(a)redhat.com> rpmspec: revert/drop content hash for kernel-headers This was a change done in the RHEL 8 kernel package, with the purpose of providing means to other tools to determine if the kernel-headers changed between package updates. For example, linux containers that only install kernel-headers would not be flagged for the need of CVE updates if kernel-headers didn't change, in case of kernel CVEs that didn't affect the headers. But this content hash ended up never being used and AFAIK there were no users. The need to avoid kernel CVEs flagging containers needing updates only because of kernel-headers installed but not affected, was handled through changes made in Red Hat's errata tool, and the content hash here has no use anymore. Signed-off-by: Herton R. Krzesinski <herton(a)redhat.com> diff a/redhat/kernel.spec.template b/redhat/kernel.spec.template --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -2385,18 +2385,6 @@ find -type f ! -executable -exec install -D -m644 {} %{buildroot}%{_libexecdir}/ popd %endif -# We have to do the headers checksum calculation after the tools install because -# these might end up installing their own set of headers on top of kernel's -%if %{with_headers} -# compute a content hash to export as Provides: kernel-headers-checksum -HEADERS_CHKSUM=$(export LC_ALL=C; find $RPM_BUILD_ROOT/usr/include -type f -name "*.h" \ - ! -path $RPM_BUILD_ROOT/usr/include/linux/version.h | \ - sort | xargs cat | sha1sum - | cut -f 1 -d ' '); -# export the checksum via usr/include/linux/version.h, so the dynamic -# find-provides can grab the hash to update it accordingly -echo "#define KERNEL_HEADERS_CHECKSUM \"$HEADERS_CHKSUM\"" >> $RPM_BUILD_ROOT/usr/include/linux/version.h -%endif - ### ### clean ### -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1135

2 years, 11 months

2
1
0 / 0

[OS-BUILD PATCH] rpmspec: fix check that calls InitBuildVars

by Herton R. Krzesinski (via Email Bridge)

From: Herton R. Krzesinski <herton(a)redhat.com> rpmspec: fix check that calls InitBuildVars InitBuildVars is only called in case BuildKernel is not called (because it already calls InitBuildVars), and that is done eg. when all kernel builds are disabled but still building of tools is wanted which needs the definitions/variables it declares. However, the check is missing the case when armv7hl with_pae is enabled which already called BuildKernel->InitBuildVars, this just adds the missing check. Signed-off-by: Herton R. Krzesinski <herton(a)redhat.com> diff a/redhat/kernel.spec.template b/redhat/kernel.spec.template --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -2043,7 +2043,7 @@ BuildKernel %make_target %kernel_image %{_use_vdso} %endif %ifnarch noarch i686 -%if !%{with_debug} && !%{with_zfcpdump} && !%{with_up} +%if !%{with_debug} && !%{with_zfcpdump} && !%{with_pae} && !%{with_up} # If only building the user space tools, then initialize the build environment # and some variables so that the various userspace tools can be built. InitBuildVars -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1134

2 years, 11 months

2
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

kernel May 2021