kernel July 2021

kernel@lists.fedoraproject.org

14 participants
77 discussions

[OS-BUILD PATCHv2 0/0] [redhat] Generate a crashkernel.conf for each kernel build
by Kairui Song (via Email Bridge) 06 Jul '21

06 Jul '21

From: Kairui Song on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1171 NOTE: Truncated patchset due to missing public @redhat.com email address on your GitLab profile at https://gitlab.com/-/profile. Once that is fixed, close and reopen the merge request to retrigger sending the emails. It has been a long-term demand for having a default crashkernel value for each kernel build. This helps to manage kernel's crashkernel usage by kernel version and provide users a reference default value. RHEL kernels support a `crashkernel=auto` cmdline param. And kernel have a built-in default value used when `auto` is specified. Many attempts are made to push this upstream. Recent attempt to push this upstream raised a lot of discussions [1]. Upstream is not accepting this `crashkernel=auto` design. So after more discussions, instead of adding a default value in kernel, just add a config that packaged with kernel is more doable. Other packages, like kexec-tools[2], can use this as a reference and update kernel cmdline param. [1]: https://lore.kernel.org/linux-mm/20210507010432.IN24PudKT%25akpm@linux- foundation.org/ [2]: https://lists.fedoraproject.org/archives/list/kexec@lists.fedoraproject.o rg/thread/MKUSELX3GKKXPFNLEGJMWXSS2LADRPMQ/ Signed-off-by: Kairui Song <kasong(a)redhat.com> --- Documentation/admin-guide/kdump/kdump.rst | 12 ------------ kernel/crash_core.c | 28 ++-------------------------- redhat/Makefile | 1 + redhat/generate_crashkernel_default.sh | 25 +++++++++++++++++++++++++ redhat/kernel.spec.template | 5 +++++ 5 files changed, 33 insertions(+), 38 deletions(-)

4 6

[Test Week] Fedora Linux Kernel 5.13 2021-07-11 through 2021-07-18
by Sumantro Mukherjee 06 Jul '21

06 Jul '21

Hey All, I would like to invite all of you to participate in the Kernel 5.13 Test week, which is happening from 2021-07-11 to 2021-07-18. It's fairly simple, head over to the wiki [0] and read in detail about the test week and simply run the test case mentioned in[1] and enter your results. As usual, the Fedora QA team will hang out at #fedora-test-day(a)libera.chat for question and discussion. [0] https://fedoraproject.org/wiki/Test_Day:2021-07-11_Kernel_5.13_Test_Week [1] https://testdays.fedoraproject.org/events/115 -- //sumantro Fedora QE TRIED AND PERSONALLY TESTED, ERGO TRUSTED

1 0

[OS-BUILD PATCH] netfilter: Add deprecation notices for xtables
by Phil Sutter (via Email Bridge) 05 Jul '21

05 Jul '21

From: Phil Sutter <psutter(a)redhat.com> netfilter: Add deprecation notices for xtables Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1945179 Upstream Status: RHEL-only Upon loading legacy xtables table modules or the nft compat module, print a warning suggesting nftables. diff --git a/net/bridge/netfilter/ebtables.c b/net/bridge/netfilter/ebtables.c index blahblah..blahblah 100644 --- a/net/bridge/netfilter/ebtables.c +++ b/net/bridge/netfilter/ebtables.c @@ -2484,6 +2484,9 @@ static int __init ebtables_init(void) { int ret; + pr_warn_ratelimited("This module is deprecated in Red Hat Enterprise Linux,\n" + "please use nftables instead (https://red.ht/nft_your_tables)\n"); + ret = xt_register_target(&ebt_standard_target); if (ret < 0) return ret; diff --git a/net/ipv4/netfilter/arp_tables.c b/net/ipv4/netfilter/arp_tables.c index blahblah..blahblah 100644 --- a/net/ipv4/netfilter/arp_tables.c +++ b/net/ipv4/netfilter/arp_tables.c @@ -1623,6 +1623,9 @@ static int __init arp_tables_init(void) { int ret; + pr_warn_ratelimited("This module is deprecated in Red Hat Enterprise Linux,\n" + "please use nftables instead (https://red.ht/nft_your_tables)\n"); + ret = register_pernet_subsys(&arp_tables_net_ops); if (ret < 0) goto err1; diff --git a/net/ipv4/netfilter/ip_tables.c b/net/ipv4/netfilter/ip_tables.c index blahblah..blahblah 100644 --- a/net/ipv4/netfilter/ip_tables.c +++ b/net/ipv4/netfilter/ip_tables.c @@ -1902,6 +1902,9 @@ static int __init ip_tables_init(void) { int ret; + pr_warn_ratelimited("This module is deprecated in Red Hat Enterprise Linux,\n" + "please use nftables instead (https://red.ht/nft_your_tables)\n"); + ret = register_pernet_subsys(&ip_tables_net_ops); if (ret < 0) goto err1; diff --git a/net/ipv6/netfilter/ip6_tables.c b/net/ipv6/netfilter/ip6_tables.c index blahblah..blahblah 100644 --- a/net/ipv6/netfilter/ip6_tables.c +++ b/net/ipv6/netfilter/ip6_tables.c @@ -1909,6 +1909,9 @@ static int __init ip6_tables_init(void) { int ret; + pr_warn_ratelimited("This module is deprecated in Red Hat Enterprise Linux,\n" + "please use nftables instead (https://red.ht/nft_your_tables)\n"); + ret = register_pernet_subsys(&ip6_tables_net_ops); if (ret < 0) goto err1; diff --git a/net/netfilter/ipset/ip_set_core.c b/net/netfilter/ipset/ip_set_core.c index blahblah..blahblah 100644 --- a/net/netfilter/ipset/ip_set_core.c +++ b/net/netfilter/ipset/ip_set_core.c @@ -6,6 +6,8 @@ /* Kernel module for IP set management */ +#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt + #include <linux/init.h> #include <linux/module.h> #include <linux/moduleparam.h> @@ -2362,8 +2364,12 @@ static struct pernet_operations ip_set_net_ops = { static int __init ip_set_init(void) { - int ret = register_pernet_subsys(&ip_set_net_ops); + int ret; + + pr_warn_ratelimited("This module is deprecated in Red Hat Enterprise Linux,\n" + "please use nftables instead (https://red.ht/nft_your_tables)\n"); + ret = register_pernet_subsys(&ip_set_net_ops); if (ret) { pr_err("ip_set: cannot register pernet_subsys.\n"); return ret; diff --git a/net/netfilter/nft_compat.c b/net/netfilter/nft_compat.c index blahblah..blahblah 100644 --- a/net/netfilter/nft_compat.c +++ b/net/netfilter/nft_compat.c @@ -5,6 +5,8 @@ * This software has been sponsored by Sophos Astaro <http://www.sophos.com> */ +#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt + #include <linux/kernel.h> #include <linux/init.h> #include <linux/module.h> @@ -882,6 +884,9 @@ static int __init nft_compat_module_init(void) { int ret; + pr_warn_ratelimited("This module is deprecated in Red Hat Enterprise Linux,\n" + "please use nftables instead (https://red.ht/nft_your_tables)\n"); + ret = nft_register_expr(&nft_match_type); if (ret < 0) return ret; -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1226

1 0

[OS-BUILD PATCH 0/0] [redhat] Generate a crashkernel.conf for each kernel build
by Kairui Song (via Email Bridge) 02 Jul '21

02 Jul '21

From: Kairui Song on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1171 NOTE: Truncated patchset due to missing public @redhat.com email address on your GitLab profile at https://gitlab.com/-/profile. Once that is fixed, close and reopen the merge request to retrigger sending the emails. It has been a long-term demand for having a default crashkernel value for each kernel build. This helps to manage kernel's crashkernel usage by kernel version and provide users a reference default value. RHEL kernels support a `crashkernel=auto` cmdline param. And kernel have a built-in default value used when `auto` is specified. Many attempts are made to push this upstream. Recent attempt to push this upstream raised a lot of discussions [1]. Upstream is not accepting this `crashkernel=auto` design. So after more discussions, instead of adding a default value in kernel, just add a config that packaged with kernel is more doable. Other packages, like kexec-tools[2], can use this as a reference and update kernel cmdline param. [1]: https://lore.kernel.org/linux-mm/20210507010432.IN24PudKT%25akpm@linux- foundation.org/ [2]: https://lists.fedoraproject.org/archives/list/kexec@lists.fedoraproject.o rg/thread/MKUSELX3GKKXPFNLEGJMWXSS2LADRPMQ/ Signed-off-by: Kairui Song <kasong(a)redhat.com> --- Documentation/admin-guide/kdump/kdump.rst | 11 ----------- kernel/crash_core.c | 28 ++-------------------------- redhat/Makefile | 1 + redhat/generate_crashkernel_conf.sh | 25 +++++++++++++++++++++++++ redhat/kernel.spec.template | 5 +++++ 5 files changed, 33 insertions(+), 37 deletions(-)

8 19

[OS-BUILD PATCHv2] configs/common/s390: disable CONFIG_QETH_{OSN,OSX}
by Philipp Rudo (via Email Bridge) 02 Jul '21

02 Jul '21

From: Philipp Rudo <prudo(a)redhat.com> configs/common/s390: disable CONFIG_QETH_{OSN,OSX} Shipment of the devices required for these options were ceased with z13. With the ALS set to z14 for ark there is no need to keep the options enabled. v2: disable the configs for fedora as well Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1903201 Signed-off-by: Philipp Rudo <prudo(a)redhat.com> diff a/redhat/configs/common/generic/s390x/CONFIG_QETH_OSN b/redhat/configs/common/generic/s390x/CONFIG_QETH_OSN --- a/redhat/configs/common/generic/s390x/CONFIG_QETH_OSN +++ b/redhat/configs/common/generic/s390x/CONFIG_QETH_OSN @@ -1 +1 @@ -CONFIG_QETH_OSN=y +# CONFIG_QETH_OSN is not set diff a/redhat/configs/common/generic/s390x/CONFIG_QETH_OSX b/redhat/configs/common/generic/s390x/CONFIG_QETH_OSX --- a/redhat/configs/common/generic/s390x/CONFIG_QETH_OSX +++ b/redhat/configs/common/generic/s390x/CONFIG_QETH_OSX @@ -1 +1 @@ -CONFIG_QETH_OSX=y +# CONFIG_QETH_OSX is not set -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1149

5 4

[OS-BUILD PATCH 0/0] Don't build bpftool on Fedora
by Justin M. Forbes (via Email Bridge) 01 Jul '21

01 Jul '21

From: Justin M. Forbes on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1210 NOTE: Truncated patchset due to missing public @redhat.com email address on your GitLab profile at https://gitlab.com/-/profile. Once that is fixed, close and reopen the merge request to retrigger sending the emails. The MR 1153 change which generates the vmlinux.h as an artifact in kernel-devel seems to have also removed the '%define with_bpftool 0' from the Fedora section, resulting in a bpftool subpackage being created in Fedora kernel builds. This is unnecessary for the vmlinux.h generation and undesired from a Fedora packaging standpoint. Signed-off-by: Justin M. Forbes <jforbes(a)fedoraproject.org> --- redhat/kernel.spec.template | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)

3 3

[OS-BUILD PATCHv2] mod-denylist.sh: Change to denylist
by Prarit Bhargava (via Email Bridge) 01 Jul '21

01 Jul '21

From: Prarit Bhargava <prarit(a)redhat.com> mod-denylist.sh: Change to denylist Change blacklist references to denylist. v2: modprobe still uses blacklist Suggested-by: Brian Masney <bmasney(a)redhat.com> Signed-off-by: Prarit Bhargava <prarit(a)redhat.com> diff --git a/redhat/mod-denylist.sh b/redhat/mod-denylist.sh index blahblah..blahblah 100755 --- a/redhat/mod-denylist.sh +++ b/redhat/mod-denylist.sh @@ -10,28 +10,29 @@ Dir="$1/$2" List=$3 Dest="$4" -blacklist() +denylist() { + # modprobe still uses the phrase 'blacklist' instead of 'denylist' cat > "$RpmDir/etc/modprobe.d/$1-blacklist.conf" <<-__EOF__ # This kernel module can be automatically loaded by non-root users. To - # enhance system security, the module is blacklisted by default to ensure + # enhance system security, the module is denylisted by default to ensure # system administrators make the module available for use as needed. # See https://access.redhat.com/articles/3760101 for more details. # - # Remove the blacklist by adding a comment # at the start of the line. + # Remove the denylist by adding a comment # at the start of the line. blacklist $1 __EOF__ } -check_blacklist() +check_denylist() { mod=$(find "$RpmDir/$ModDir" -name "$1") [ ! "$mod" ] && return 0 if modinfo "$mod" | grep -q '^alias:\s\+net-'; then mod="${1##*/}" mod="${mod%.ko*}" - echo "$mod has an alias that allows auto-loading. Blacklisting." - blacklist "$mod" + echo "Blocking $mod from auto-loading." + denylist "$mod" fi } @@ -142,7 +143,7 @@ if [ -z "$Dest" ]; then sed -e "s|^.|${ModDir}|g" "$Dir"/dep2.list > "$RpmDir/$ListName" echo "./$RpmDir/$ListName created." [ -d "$RpmDir/etc/modprobe.d/" ] || mkdir -p "$RpmDir/etc/modprobe.d/" - foreachp check_blacklist < "$List" + foreachp check_denylist < "$List" fi # Many BIOS-es export a PNP-id which causes the floppy driver to autoload @@ -152,7 +153,7 @@ fi floppylist=("$RpmDir"/"$ModDir"/kernel/drivers/block/floppy.ko*) if [[ -n ${floppylist[0]} && -f ${floppylist[0]} ]]; then - blacklist "floppy" + denylist "floppy" fi # avoid an empty kernel-extra package -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1185

5 6

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

kernel July 2021