kernel November 2022

kernel@lists.fedoraproject.org

9 participants
65 discussions

[OS-BUILD PATCH] redhat/configs: consolidate CONFIG_TEST_LIVEPATCH=m
by Joe Lawrence (via Email Bridge) 22 Nov '22

22 Nov '22

From: Joe Lawrence <joe.lawrence(a)redhat.com> redhat/configs: consolidate CONFIG_TEST_LIVEPATCH=m Three of the four arches (ppc64le, s390x, x86_64) turn on CONFIG_TEST_PATCH, so consolidate the configuration files and turn it off for the lone unsupported arch (aarch64). Requested-by: Prarit Bhargava <prarit(a)redhat.com> Signed-off-by: Joe Lawrence <joe.lawrence(a)redhat.com> diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_TEST_LIVEPATCH b/redhat/configs/ark/generic/CONFIG_TEST_LIVEPATCH rename from redhat/configs/ark/generic/powerpc/CONFIG_TEST_LIVEPATCH rename to redhat/configs/ark/generic/CONFIG_TEST_LIVEPATCH index blahblah..blahblah 100644 --- a/redhat/configs/ark/generic/powerpc/CONFIG_TEST_LIVEPATCH +++ b/redhat/configs/ark/generic/CONFIG_TEST_LIVEPATCH diff --git a/redhat/configs/common/generic/CONFIG_TEST_LIVEPATCH b/redhat/configs/ark/generic/arm/aarch64/CONFIG_TEST_LIVEPATCH rename from redhat/configs/common/generic/CONFIG_TEST_LIVEPATCH rename to redhat/configs/ark/generic/arm/aarch64/CONFIG_TEST_LIVEPATCH index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_TEST_LIVEPATCH +++ b/redhat/configs/ark/generic/arm/aarch64/CONFIG_TEST_LIVEPATCH diff --git a/redhat/configs/ark/generic/s390x/CONFIG_TEST_LIVEPATCH b/redhat/configs/ark/generic/s390x/CONFIG_TEST_LIVEPATCH deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/s390x/CONFIG_TEST_LIVEPATCH +++ /dev/null @@ -1 +0,0 @@ -CONFIG_TEST_LIVEPATCH=m diff --git a/redhat/configs/ark/generic/x86/CONFIG_TEST_LIVEPATCH b/redhat/configs/ark/generic/x86/CONFIG_TEST_LIVEPATCH deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/x86/CONFIG_TEST_LIVEPATCH +++ /dev/null @@ -1 +0,0 @@ -CONFIG_TEST_LIVEPATCH=m -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2161

1 1

[PATCH 0/3] pre-generated initrd and unified kernels
by Gerd Hoffmann 22 Nov '22

22 Nov '22

Hi, Here is a little patch series to kick off a discussion on pre-generated initrd images and unified kernels. Lets start with a description of the patches: Patch #1 adds a dracut config file, targeting virtual machines. Given that most physical machines have either sata or nvme disks these days it probably boots most physical systems too. Patch #2 adds a sub-package with an initrd image. Patch #3 adds a sub-package with an unified kernel. The goal is to move away from initrd images being generated on the installed machine. They are generated while building the kernel package instead. Main motivation for this move is to make the distro more robust and more secure. When shipping the initrd as rpm it is possible to check it with the usual tools ('rpm --verify' for example). TPM measurements are much more useful because it is possible to pre-calculate the PCR values for a given kernel version. When shipping a unified kernel image (containing kernel, initrd, cmdline and signature) we get the additional benefit that the initrd is covered by the signature so secure boot will actually be secure. So, while unified kernels are clearly the better approach it is also the one which needs some changes in various packages. For an initrd image the hooks needed are in place thanks to CoreOS shipping initrd images today. Opt-in by install the sub-rpm and everything JustWorks[tm]. To make unified kernels work smoothly a number of changes are needed (beside the kernel rpm changes): (1) Add support for unified kernels to the kernel update scripts. (/usr/lib/kernel/install.d/*). (2) Add boot loader support for unified kernel images: (a) either switch to sd-boot which already supports this. (b) or add support to grub2 (improve blscfg downstream patch). (3) Support /boot being vfat (depending on #2, sd-boot needs this). (4) Remove configuration information (and secrets) from initrd images and kernel command line. Most important item here is root the filesystem location, which should be doable using https://systemd.io/DISCOVERABLE_PARTITIONS/ for many use cases. Can initially be handled in anaconda kickstart %post scripts. Long-term we need proper support in anaconda (and any other tool used to install or generate cloud images), especially if we want make unified kernel images the default some day. (5) There might be more ... I think the best way forward is to skip the initrd image interim step and try go straight to unified kernel image support, starting with virtual machines & cloud images, when things are working smoothly there go expand to cover more use cases. I think it makes sense to start with the kernel changes. Comments? Reviews? Suggestions? thanks & take care, Gerd Daniel P. Berrangé (1): [testing] add a kernel-unified-virt sub-RPM Gerd Hoffmann (2): [testing] virtual machine dracut config [testing] add a kernel-initrd-virt sub-RPM dracut-virt.conf | 26 +++++++++++++++++++ kernel.spec | 65 ++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 91 insertions(+) create mode 100644 dracut-virt.conf -- 2.37.2

5 20

[OS-BUILD PATCH] Revert "Merge branch 'ark-make-help' into 'os-build'"
by Scott Weaver (via Email Bridge) 21 Nov '22

21 Nov '22

From: Scott Weaver <scweaver(a)redhat.com> Revert "Merge branch 'ark-make-help' into 'os-build'" This reverts commit f11ef857288e28ec3859e4a6af74506b914d85b7, reversing changes made to a6c76faa127a684197ec2febba863c856df93c12. diff --git a/makefile b/makefile index blahblah..blahblah 100644 --- a/makefile +++ b/makefile @@ -1,24 +1,16 @@ -ifeq ($(filter help dist-% distg-%,$(MAKECMDGOALS)),) +ifeq ($(filter dist-% distg-%,$(MAKECMDGOALS)),) include Makefile endif -MAKEFLAGS += --no-print-directory _OUTPUT := "." # this section is needed in order to make O= to work ifeq ("$(origin O)", "command line") _OUTPUT := "$(abspath $(O))" _EXTRA_ARGS := O=$(_OUTPUT) endif -help:: - @echo "## Distribution Targets" - @$(MAKE) -C redhat dist-help - @echo "" - @echo "## Kernel Targets" - @$(MAKE) -f Makefile $(@) - dist-%:: - @$(MAKE) -C redhat $(@) $(_EXTRA_ARGS) + $(MAKE) -C redhat $(@) $(_EXTRA_ARGS) distg-%:: - @$(MAKE) -C redhat $(@) $(_EXTRA_ARGS) + $(MAKE) -C redhat $(@) $(_EXTRA_ARGS) diff --git a/redhat/Makefile b/redhat/Makefile index blahblah..blahblah 100644 --- a/redhat/Makefile +++ b/redhat/Makefile @@ -19,7 +19,7 @@ SPECRELEASED_KERNEL=$(RELEASED_KERNEL) SPECINCLUDE_FEDORA_FILES=$(INCLUDE_FEDORA_FILES) SPECINCLUDE_RHEL_FILES=$(INCLUDE_RHEL_FILES) -ifneq (,$(findstring n,$(filter-out --%,$(MAKEFLAGS)))) +ifneq (,$(findstring n,$(MAKEFLAGS))) # Do not set RHTEST on the command line. Use the make command built-in options # -n, --just-print, --dry-run, --recon on the command line. RHTEST=1 -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2158

5 5

[OS-BUILD PATCHv2] [redhat] Update configs for the 9.2 DRM backport
by Karol Herbst (via Email Bridge) 21 Nov '22

21 Nov '22

From: Karol Herbst <kherbst(a)redhat.com> [redhat] Update configs for the 9.2 DRM backport Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2115876 Signed-off-by: Karol Herbst <kherbst(a)redhat.com> diff --git a/redhat/configs/ark/generic/CONFIG_DRM_IMX8QM_LDB b/redhat/configs/ark/generic/CONFIG_DRM_IMX8QM_LDB new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/ark/generic/CONFIG_DRM_IMX8QM_LDB @@ -0,0 +1 @@ +# CONFIG_DRM_IMX8QM_LDB is not set diff --git a/redhat/configs/ark/generic/CONFIG_DRM_IMX8QXP_LDB b/redhat/configs/ark/generic/CONFIG_DRM_IMX8QXP_LDB new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/ark/generic/CONFIG_DRM_IMX8QXP_LDB @@ -0,0 +1 @@ +# CONFIG_DRM_IMX8QXP_LDB is not set diff --git a/redhat/configs/ark/generic/CONFIG_DRM_IMX8QXP_PIXEL_COMBINER b/redhat/configs/ark/generic/CONFIG_DRM_IMX8QXP_PIXEL_COMBINER new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/ark/generic/CONFIG_DRM_IMX8QXP_PIXEL_COMBINER @@ -0,0 +1 @@ +# CONFIG_DRM_IMX8QXP_PIXEL_COMBINER is not set diff --git a/redhat/configs/ark/generic/CONFIG_DRM_IMX8QXP_PIXEL_LINK_TO_DPI b/redhat/configs/ark/generic/CONFIG_DRM_IMX8QXP_PIXEL_LINK_TO_DPI new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/ark/generic/CONFIG_DRM_IMX8QXP_PIXEL_LINK_TO_DPI @@ -0,0 +1 @@ +# CONFIG_DRM_IMX8QXP_PIXEL_LINK_TO_DPI is not set diff --git a/redhat/configs/ark/generic/CONFIG_HSA_AMD_P2P b/redhat/configs/ark/generic/CONFIG_HSA_AMD_P2P index blahblah..blahblah 100644 --- a/redhat/configs/ark/generic/CONFIG_HSA_AMD_P2P +++ b/redhat/configs/ark/generic/CONFIG_HSA_AMD_P2P @@ -1 +1 @@ -CONFIG_HSA_AMD_P2P=y +# CONFIG_HSA_AMD_P2P is not set diff --git a/redhat/configs/ark/generic/CONFIG_INTEL_MEI_GSC b/redhat/configs/ark/generic/CONFIG_INTEL_MEI_GSC deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_INTEL_MEI_GSC +++ /dev/null @@ -1 +0,0 @@ -# CONFIG_INTEL_MEI_GSC is not set diff --git a/redhat/configs/fedora/generic/x86/CONFIG_INTEL_MEI_GSC b/redhat/configs/common/generic/x86/CONFIG_INTEL_MEI_GSC rename from redhat/configs/fedora/generic/x86/CONFIG_INTEL_MEI_GSC rename to redhat/configs/common/generic/x86/CONFIG_INTEL_MEI_GSC index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/x86/CONFIG_INTEL_MEI_GSC +++ b/redhat/configs/common/generic/x86/CONFIG_INTEL_MEI_GSC -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2152

4 4

[OS-BUILD PATCH] Remove recommendation to use 'common' for config changes.
by Don Zickus (via Email Bridge) 18 Nov '22

18 Nov '22

From: Don Zickus <dzickus(a)redhat.com> Remove recommendation to use 'common' for config changes. Config changes should be focused on the 'ark' or 'fedora' directory. Update the docs to promote that. Signed-off-by: Don Zickus <dzickus(a)redhat.com> diff --git a/redhat/docs/submitting-contributions.rst b/redhat/docs/submitting-contributions.rst index blahblah..blahblah 100644 --- a/redhat/docs/submitting-contributions.rst +++ b/redhat/docs/submitting-contributions.rst @@ -72,10 +72,12 @@ more generic directories. Configurations that are specific to a particular architecture should be placed in that architecture's directory rather in the generic directory. -Configuration changes in the ``common`` and ``ark`` directories require -review from Red Hat kernel developers, where-as the configurations in -``fedora`` can be changed with the approval of the Fedora kernel -maintainers. +Configuration changes in the ``ark`` directory requires review from Red Hat +kernel developers, where-as the configurations in ``fedora`` can be changed +with the approval of the Fedora kernel maintainers. The ``common`` +directory is for changes common to both ``ark`` and ``fedora`` and will be +populated by a bot that periodically looks in both ``ark`` and ``fedora`` +for common changes. Makefile changes ---------------- -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2157

3 4

[OS-BUILD PATCHv2] redhat/Makefile: Fix RHJOBS grep warning
by Prarit Bhargava (via Email Bridge) 17 Nov '22

17 Nov '22

From: Prarit Bhargava <prarit(a)redhat.com> redhat/Makefile: Fix RHJOBS grep warning Calculating RHJOBS results in the warning grep: warning: stray \ before white space Resolve this by using [ ] to detect a space in the regex. Before fix: Search for "before white space" in https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/6… After fix: No "before white space" errors seen in https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/6… Also, confirming that RHJOBS works correctly after the fix, [prarit@prarit kernel-ark]$ make -j13 dist-dump-variables | grep RHJOBS= RHJOBS=13 [prarit@prarit kernel-ark]$ Signed-off-by: Prarit Bhargava <prarit(a)redhat.com> diff --git a/redhat/Makefile b/redhat/Makefile index blahblah..blahblah 100644 --- a/redhat/Makefile +++ b/redhat/Makefile @@ -80,7 +80,7 @@ ifndef DISTRO endif ifndef RHJOBS - RHJOBS=$(shell j=$$(echo $(MAKEFLAGS) | grep -Eo "\ -j[0-9]*" | xargs ); \ + RHJOBS=$(shell j=$$(echo $(MAKEFLAGS) | grep -Eo "(^|[ ])-j[0-9]*" | xargs ); \ if [ -z "$${j}" ]; then \ echo "1"; \ else \ -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2148

1 2

✅ PASS (3/297 SKIPPED): Test report for 6.0.9-200.fc36 (fedora-36)
by cki-project＠redhat.com 16 Nov '22

16 Nov '22

Hi, we tested your kernel and here are the results: Overall result: PASSED Merge: OK Compile: OK Test: OK Tested-by: CKI Project <cki-project(a)redhat.com> Kernel information: Brew / Koji Task ID: 94243446 You can find all the details about the test run at https://datawarehouse.cki-project.org/kcidb/checkouts/60165 One or more kernel tests failed: We also see the following known issues which are not related to your changes: Issue: Storage block - storage fio numa: Performance comparison: min:40535 * 1.15 < max:81259 URL: https://bugzilla.redhat.com/show_bug.cgi?id=2032094 Affected tests: x86_64 - Storage - block - storage fio numa Issue: avc: denied { name_bind } for pid=897864 comm="rpcbind" src=63924 scontext=system_u:system_r:rpcbind_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=udp_socket permissive=1 URL: https://bugzilla.redhat.com/show_bug.cgi?id=1983604#c3 Affected tests: x86_64 - xfstests - nfsv4.2 Issue: NFS Connectathon: SELinux prevents rpcbind URL: https://gitlab.com/redhat/centos-stream/tests/kernel/kernel-tests/-/issues/… Affected tests: aarch64 - NFS Connectathon ppc64le - NFS Connectathon Issue: xfstests - _check_xfs_filesystem: filesystem on /dev/nvme0n1p4 is inconsistent (r) URL: https://bugzilla.redhat.com/show_bug.cgi?id=1989409 Affected tests: aarch64 - xfstests - btrfs If you find a failure unrelated to your changes, please ask the test maintainer to review it. This will prevent the failures from being incorrectly reported in the future. Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________

1 0

[OS-BUILD PATCH] redhat/Makefile: Fix RHJOBS grep warning
by Prarit Bhargava (via Email Bridge) 16 Nov '22

16 Nov '22

From: Prarit Bhargava <prarit(a)redhat.com> redhat/Makefile: Fix RHJOBS grep warning Calculating RHJOBS results in the warning grep: warning: stray \ before white space Resolve this by using [ ] to detect a space in the regex. Before fix: Search for "before white space" in https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/6… After fix: No "before white space" errors seen in https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/6… Also, confirming that RHJOBS works correctly after the fix, [prarit@prarit kernel-ark]$ make -j13 dist-dump-variables | grep RHJOBS= RHJOBS=13 [prarit@prarit kernel-ark]$ Signed-off-by: Prarit Bhargava <prarit(a)redhat.com> diff --git a/redhat/Makefile b/redhat/Makefile index blahblah..blahblah 100644 --- a/redhat/Makefile +++ b/redhat/Makefile @@ -80,7 +80,7 @@ ifndef DISTRO endif ifndef RHJOBS - RHJOBS=$(shell j=$$(echo $(MAKEFLAGS) | grep -Eo "\ -j[0-9]*" | xargs ); \ + RHJOBS=$(shell j=$$(echo $(MAKEFLAGS) | grep -Eo "[ ]-j[0-9]*" | xargs ); \ if [ -z "$${j}" ]; then \ echo "1"; \ else \ -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2148

2 1

[OS-BUILD PATCH] redhat/configs: Enable CONFIG_EFI_SECRET module
by Lenny Szubowicz (via Email Bridge) 16 Nov '22

16 Nov '22

From: Lenny Szubowicz <lszubowi(a)redhat.com> redhat/configs: Enable CONFIG_EFI_SECRET module Enable the efi_secret module to provide the contents of the EFI configuration table containing confidential computing (coco) secrets via /sys/kernel/security/secrets/coco/. CONFIG_EFI_SECRET depends on CONFIG_EFI_COCO_SECRETS, which is similarly defined. However, drivers/virt/coco/efi_secret/Kconfig currently effectively limits CONFIG_EFI_SECRET to X86_64. Signed-off-by: Lenny Szubowicz <lszubowi(a)redhat.com> diff --git a/redhat/configs/common/generic/CONFIG_EFI_SECRET b/redhat/configs/common/generic/CONFIG_EFI_SECRET new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/common/generic/CONFIG_EFI_SECRET @@ -0,0 +1 @@ +CONFIG_EFI_SECRET=m -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2124

4 6

[OS-BUILD PATCH] redhat/configs: Move ark/generic/s390x/CONFIG_ZSMALLOC to common/generic
by Waiman Long (via Email Bridge) 16 Nov '22

16 Nov '22

From: Waiman Long <longman(a)redhat.com> redhat/configs: Move ark/generic/s390x/CONFIG_ZSMALLOC to common/generic Commit 3f72c8eb03cb ("Fix up ZSMALLOC config for s390") added s390x specific CONFIG_ZSMALLOC to resolve config generation problem due to upcommit commit b3fbd58fcbb1 ("mm: Kconfig: simplify zswap configuration"). As this commit is being backported to centos-stream-9 with similar config changes into the common/generic directory. It makes sense to move the ark/generic config files to common/generic too. Signed-off-by: Waiman Long <longman(a)redhat.com> diff --git a/redhat/configs/ark/generic/s390x/CONFIG_ZSMALLOC b/redhat/configs/common/generic/s390x/CONFIG_ZSMALLOC rename from redhat/configs/ark/generic/s390x/CONFIG_ZSMALLOC rename to redhat/configs/common/generic/s390x/CONFIG_ZSMALLOC index blahblah..blahblah 100644 --- a/redhat/configs/ark/generic/s390x/CONFIG_ZSMALLOC +++ b/redhat/configs/common/generic/s390x/CONFIG_ZSMALLOC diff --git a/redhat/configs/ark/generic/s390x/zfcpdump/CONFIG_ZSMALLOC b/redhat/configs/common/generic/s390x/zfcpdump/CONFIG_ZSMALLOC rename from redhat/configs/ark/generic/s390x/zfcpdump/CONFIG_ZSMALLOC rename to redhat/configs/common/generic/s390x/zfcpdump/CONFIG_ZSMALLOC index blahblah..blahblah 100644 --- a/redhat/configs/ark/generic/s390x/zfcpdump/CONFIG_ZSMALLOC +++ b/redhat/configs/common/generic/s390x/zfcpdump/CONFIG_ZSMALLOC -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2127

2 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

kernel November 2022