Hi all,
Just a heads-up, I've built the following packages for Rawhide in the
side tag f39-build-side-65890. And I plan to merge the side tag on
Sunday. Feel free to let me know if there are concerns or objections.
libtracefs-1.6.4-1
trace-cmd-3.1.6-1
libtracecmd-1.3.1-1
kernelshark-2.2.0-1
By the way, corresponding work on Fedora 38 haven't started yet.
On Tue, Apr 18, 2023 at 6:24 AM John Kacur <jkacur(a)redhat.com> wrote:
>
> That's great Justin, thanks.
>
> John
>
> On Mon, Apr 17, 2023 at 5:01 PM Justin Forbes <jforbes(a)redhat.com> wrote:
>>
>> On Mon, Apr 17, 2023 at 2:45 PM John Kacur <jkacur(a)redhat.com> wrote:
>> >
>> > There is a new tool that is dependent on these libs too. Also from Daniel Bristot (rtla)
>> > tools/verification/rv
>> >
>> > I was wondering if we could get this into rawhide?
>>
>> Yes, I will get it in before the 6.3 release next Monday, that way it
>> will automatically follow into stable Fedora as they get the 6.3
>> rebase.
>>
>> Justin
>>
>> > John Kacur
>> >
>> > On Sun, Apr 9, 2023 at 12:12 AM Zamir SUN <zsun(a)fedoraproject.org> wrote:
>> >>
>> >>
>> >> On 4/5/23 23:49, Justin Forbes wrote:
>> >> > On Wed, Apr 5, 2023 at 5:05 AM Zamir SUN <zsun(a)fedoraproject.org> wrote:
>> >> >>
>> >> >> Hi,
>> >> >>
>> >> >> I'm working on libtraceevent and libtracefs update. There will be soname
>> >> >> bump happening to them. Namely,
>> >> >>
>> >> >> libtraceevent.so 1.6.3 -> 1.7.2
>> >> >> libtracefs.so 1.5.0 -> 1.6.4
>> >> >>
>> >> >> IIRC only kernel-tools (for perf and rtla) and trace-cmd depends on
>> >> >> them. So I'm also copying their corresponding contacts.
>> >> >>
>> >> >> As for libtraceevent, I've tried running trace-cmd/perf/rtla with the
>> >> >> new version and they still works. So I've updated it in Rawhide, Fedora
>> >> >> 38 and Fedora 37. They are now in Bodhi.
>> >> >>
>> >> >> As for libtracefs I've built it in side tag f39-build-side-65890. I plan
>> >> >> to update it in both Rawhide and Fedora 38 this week.
>> >> >
>> >> > Given that we are in a freeze for F38, it might be better to wait
>> >> > until GA, but I have rebuilt kernel-tools in the sidetag. Please let
>> >> > me know when this is merged back as we rebuild kernel-tools weekly in
>> >> > rawhide.
>> >> >
>> >>
>> >> Hi Justin,
>> >>
>> >> I think this is a good point. I will coordinate with you when I do it
>> >> for Fedora 38.
>> >>
--
Ziqian SUN (Zamir)
zsun(a)fedoraproject.org
GPG : 1D86 6D4A 49CE 4BBD 72CF FCF5 D856 6E11 F2A0 525E
Want to know more about Fedora?
Visit https://fedoraproject.org/wiki/
On Mon, Apr 17, 2023 at 2:45 PM John Kacur <jkacur(a)redhat.com> wrote:
>
> There is a new tool that is dependent on these libs too. Also from Daniel Bristot (rtla)
> tools/verification/rv
>
> I was wondering if we could get this into rawhide?
Yes, I will get it in before the 6.3 release next Monday, that way it
will automatically follow into stable Fedora as they get the 6.3
rebase.
Justin
> John Kacur
>
> On Sun, Apr 9, 2023 at 12:12 AM Zamir SUN <zsun(a)fedoraproject.org> wrote:
>>
>>
>> On 4/5/23 23:49, Justin Forbes wrote:
>> > On Wed, Apr 5, 2023 at 5:05 AM Zamir SUN <zsun(a)fedoraproject.org> wrote:
>> >>
>> >> Hi,
>> >>
>> >> I'm working on libtraceevent and libtracefs update. There will be soname
>> >> bump happening to them. Namely,
>> >>
>> >> libtraceevent.so 1.6.3 -> 1.7.2
>> >> libtracefs.so 1.5.0 -> 1.6.4
>> >>
>> >> IIRC only kernel-tools (for perf and rtla) and trace-cmd depends on
>> >> them. So I'm also copying their corresponding contacts.
>> >>
>> >> As for libtraceevent, I've tried running trace-cmd/perf/rtla with the
>> >> new version and they still works. So I've updated it in Rawhide, Fedora
>> >> 38 and Fedora 37. They are now in Bodhi.
>> >>
>> >> As for libtracefs I've built it in side tag f39-build-side-65890. I plan
>> >> to update it in both Rawhide and Fedora 38 this week.
>> >
>> > Given that we are in a freeze for F38, it might be better to wait
>> > until GA, but I have rebuilt kernel-tools in the sidetag. Please let
>> > me know when this is merged back as we rebuild kernel-tools weekly in
>> > rawhide.
>> >
>>
>> Hi Justin,
>>
>> I think this is a good point. I will coordinate with you when I do it
>> for Fedora 38.
>>
>> --
>> Zamir SUN
>> GPG : 1D86 6D4A 49CE 4BBD 72CF FCF5 D856 6E11 F2A0 525E
>> Want to know more about Fedora?
>> Visit https://fedoraproject.org/wiki/
>> Ready to contribute? See https://whatcanidoforfedora.org/
>> 想了解更多中文资讯,访问 https://zh.fedoracommunity.org/
>> _______________________________________________
>> devel mailing list -- devel(a)lists.fedoraproject.org
>> To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org
>> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
>> Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
From: Philipp Rudo <prudo(a)redhat.com>
kernel.spec: Fix UKI naming to comply with BLS
The Boot Loader Specification (BLS) [1] suggests that type #2 entries (UKIs)
shall have the same names like type #1 entries with the exception of
the suffix being .efi instead of .conf. In particular this means that
the name for installed UKIs should be
<entry-token-or-machine-id>-<version>.efi. The same naming convention is
used by kernel-installs 90-uki-copy.install [2] in systemd v253.
Adjust the workaround to install UKIs in the kernel.spec to follow the
same naming convention in order to prevent breaking user space tools
that rely on it.
[1] https://uapi-group.org/specifications/specs/boot_loader_specification/
[2] https://github.com/systemd/systemd/blob/v253/src/kernel-install/90-uki-copy…
Signed-off-by: Philipp Rudo <prudo(a)redhat.com>
diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100644
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -3033,10 +3033,12 @@ touch %{_localstatedir}/lib/rpm-state/%{name}/installing_core_%{KVERREL}%{?-v:+%
%define kernel_uki_virt_scripts() \
%{expand:%%posttrans %{?1:%{1}-}uki-virt}\
mkdir -p /boot/efi/EFI/Linux\
-cp /lib/modules/%{KVERREL}%{?1:+%{1}}/vmlinuz-virt.efi /boot/efi/EFI/Linux/vmlinuz-%{KVERREL}%{?1:+%{1}}-virt.efi\
+entry_token=$(kernel-install inspect | grep KERNEL_INSTALL_ENTRY_TOKEN: | cut -d ' ' -f2)\
+cp /lib/modules/%{KVERREL}%{?1:+%{1}}/vmlinuz-virt.efi /boot/efi/EFI/Linux/${entry_token}-%{KVERREL}%{?1:+%{1}}.efi\
%{nil}\
%{expand:%%postun %{?1:%{1}-}uki-virt}\
-rm -f /boot/efi/EFI/Linux/vmlinuz-%{KVERREL}%{?1:+%{1}}-virt.efi\
+entry_token=$(kernel-install inspect | grep KERNEL_INSTALL_ENTRY_TOKEN: | cut -d ' ' -f2)\
+rm -f /boot/efi/EFI/Linux/${entry_token}-%{KVERREL}%{?1:+%{1}}.efi\
%{nil}
#
@@ -3320,7 +3322,7 @@ fi
%if %{with_efiuki}\
%{expand:%%files %{?3:%{3}-}uki-virt}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/%{?-k:%{-k*}}%{!?-k:vmlinuz}-virt.efi\
-%ghost /%{image_install_path}/efi/EFI/Linux/%{?-k:%{-k*}}%{!?-k:vmlinuz}-%{KVERREL}%{?3:+%{3}}-virt.efi\
+%ghost /%{image_install_path}/efi/EFI/Linux/%{?-k:%{-k*}}%{!?-k:*}-%{KVERREL}%{?3:+%{3}}.efi\
%endif\
%if %{?3:1} %{!?3:0}\
%{expand:%%files %{3}}\
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2391
From: Thorsten Leemhuis on gitlab.com
Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2275
NOTE: Truncated patchset since committer email 'fedora(a)leemhuis.info'
does not match the submitter's GitLab public email address
'linux(a)leemhuis.info'.
These are a few changes I developed for supporting my kernel vanilla builds
(https://fedoraproject.org/wiki/Kernel_Vanilla_Repositories ) that IMHO are
worth integrating upstream.
Signed-off-by: Thorsten Leemhuis <fedora(a)leemhuis.info>
---
redhat/Makefile | 41 ++++++++++++++++++++++++++++++++++++-----
redhat/kernel.spec.template | 3 +++
2 files changed, 39 insertions(+), 5 deletions(-)
From: Justin M. Forbes <jforbes(a)fedoraproject.org>
Fix up the RHEL configs for xtables and ipset
At some point, we had an MR which disabled xtables and ipset. This put
configs to turn them off in the ark/generic directory. Quite a bit
later, it was decided to rever that change, and MR2267 was created to do
that. In the meantime, the ark directory was renamed to rhel. As that
MR was deleting files in ark, and they had already been deleted, this
was not raised as a problem, but we did not get the desired result
because those files do still exist in the rhel directory. This change
simply deletes the files in the rhel/generic directory making things
work as MR2267 intended.
Link:https://gitlab.com/cki-project/kernel-ark/-/issues/105
Cc: Phil Sutter <psutter(a)redhat.com>
Signed-off-by: Justin M. Forbes <jforbes(a)fedoraproject.org>
diff --git a/redhat/configs/rhel/generic/CONFIG_BRIDGE_NETFILTER b/redhat/configs/rhel/generic/CONFIG_BRIDGE_NETFILTER
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_BRIDGE_NETFILTER
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_BRIDGE_NETFILTER is not set
diff --git a/redhat/configs/rhel/generic/CONFIG_BRIDGE_NF_EBTABLES b/redhat/configs/rhel/generic/CONFIG_BRIDGE_NF_EBTABLES
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_BRIDGE_NF_EBTABLES
+++ /dev/null
@@ -1,2 +0,0 @@
-# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance.
-# CONFIG_BRIDGE_NF_EBTABLES is not set
diff --git a/redhat/configs/rhel/generic/CONFIG_IP6_NF_IPTABLES b/redhat/configs/rhel/generic/CONFIG_IP6_NF_IPTABLES
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_IP6_NF_IPTABLES
+++ /dev/null
@@ -1,2 +0,0 @@
-# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance.
-# CONFIG_IP6_NF_IPTABLES is not set
diff --git a/redhat/configs/rhel/generic/CONFIG_IP_NF_ARPTABLES b/redhat/configs/rhel/generic/CONFIG_IP_NF_ARPTABLES
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_IP_NF_ARPTABLES
+++ /dev/null
@@ -1,2 +0,0 @@
-# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance.
-# CONFIG_IP_NF_ARPTABLES is not set
diff --git a/redhat/configs/rhel/generic/CONFIG_IP_NF_IPTABLES b/redhat/configs/rhel/generic/CONFIG_IP_NF_IPTABLES
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_IP_NF_IPTABLES
+++ /dev/null
@@ -1,2 +0,0 @@
-# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance.
-# CONFIG_IP_NF_IPTABLES is not set
diff --git a/redhat/configs/rhel/generic/CONFIG_IP_SET b/redhat/configs/rhel/generic/CONFIG_IP_SET
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_IP_SET
+++ /dev/null
@@ -1,2 +0,0 @@
-# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance.
-# CONFIG_IP_SET is not set
diff --git a/redhat/configs/rhel/generic/CONFIG_NETFILTER_XTABLES b/redhat/configs/rhel/generic/CONFIG_NETFILTER_XTABLES
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_NETFILTER_XTABLES
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NETFILTER_XTABLES is not set
diff --git a/redhat/configs/rhel/generic/CONFIG_NFT_COMPAT b/redhat/configs/rhel/generic/CONFIG_NFT_COMPAT
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_NFT_COMPAT
+++ /dev/null
@@ -1,2 +0,0 @@
-# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance.
-# CONFIG_NFT_COMPAT is not set
diff --git a/redhat/configs/rhel/generic/CONFIG_NF_CONNTRACK_LABELS b/redhat/configs/rhel/generic/CONFIG_NF_CONNTRACK_LABELS
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_NF_CONNTRACK_LABELS
+++ /dev/null
@@ -1 +0,0 @@
-CONFIG_NF_CONNTRACK_LABELS=y
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2402
Hi, we tested your kernel and here are the results:
Overall result: FAILED
Merge: OK
Compile: OK
Test: FAILED
Kernel information:
Brew / Koji Task ID: 99900740
You can find all the details about the test run at
https://datawarehouse.cki-project.org/kcidb/checkouts/84657
One or more kernel tests failed:
Unrecognized or new issues:
s390x - Storage - block zstd smoke test
Logs: https://datawarehouse.cki-project.org/kcidb/tests/7815596
We also see the following known issues which are not related to your changes:
Issue: Storage blktests - blk: scsi/007: Reading from scsi_debug failed
URL: https://bugzilla.redhat.com/show_bug.cgi?id=2027550
Affected tests:
aarch64 - Storage - blktests - blk
Issue: avc: denied { name_bind } for pid=897864 comm="rpcbind" src=63924 scontext=system_u:system_r:rpcbind_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=udp_socket permissive=1
URL: https://bugzilla.redhat.com/show_bug.cgi?id=1983604#c3
Affected tests:
x86_64 - xfstests - nfsv4.2
Issue: (kernel-fedora) Storage - blktests - nvmeof-mp: FAIL: Configured NVMe target driver
URL: https://gitlab.com/redhat/centos-stream/tests/kernel/kernel-tests/-/issues/…
Affected tests:
ppc64le - Storage - blktests - nvmeof-mp
Issue: NFS Connectathon: SELinux prevents rpcbind
URL: https://bugzilla.redhat.com/1758147
Affected tests:
s390x - NFS Connectathon
If you find a failure unrelated to your changes, please ask the test maintainer to review it.
This will prevent the failures from being incorrectly reported in the future.
Please reply to this email if you have any questions about the tests that we
ran or if you have any suggestions on how to make future tests more effective.
,-. ,-.
( C ) ( K ) Continuous
`-',-.`-' Kernel
( I ) Integration
`-'
______________________________________________________________________________
From: Josh Poimboeuf <jpoimboe(a)redhat.com>
redhat/configs: Enable CONFIG_X86_KERNEL_IBT for Fedora and ARK
Kernel IBT is a nice kernel hardening feature with virtually no
performance impact. Since commit 4fd5f70ce14d ("x86/Kconfig: Enable
kernel IBT by default"), its now enabled by default upstream. Enable it
in Fedora and ARK as well.
Signed-off-by: Josh Poimboeuf <jpoimboe(a)redhat.com>
diff --git a/redhat/configs/common/generic/x86/CONFIG_X86_KERNEL_IBT b/redhat/configs/common/generic/x86/CONFIG_X86_KERNEL_IBT
index blahblah..blahblah 100644
--- a/redhat/configs/common/generic/x86/CONFIG_X86_KERNEL_IBT
+++ b/redhat/configs/common/generic/x86/CONFIG_X86_KERNEL_IBT
@@ -1 +1 @@
-# CONFIG_X86_KERNEL_IBT is not set
+CONFIG_X86_KERNEL_IBT=y
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2346
From: Jan Stancek <jstancek(a)redhat.com>
kernel.spec: gcov: make gcov subpackages per variant
There is currently only one gcov subpackage, but builds can contain multiple
kernel variants, which creates confusion which one is "gcov enabled".
Modify spec file so that gcov subpackage is created for each kernel variant.
During build, gcc creates gcno files (gcov notes), which we package
into -gcov subpackage. kernel exposes gcda (count data) via sysfs.
To make it easy to pair gcno and gcda, kernel also creates symlinks in sysfs
for gcno files. These symlinks use absolute paths based on builddir.
This creates a problem when we build multiple variants in same directory,
because gcno from all variants are mixed together (or overwritten).
Make build directory name unique so that we can package and install gcov
for more than one variant.
Signed-off-by: Jan Stancek <jstancek(a)redhat.com>
diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100644
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -1164,12 +1164,12 @@ Kernel sample programs and selftests.
# with_selftests
%endif
-%if %{with_gcov}
-%package gcov
-Summary: gcov graph and source files for coverage data collection.
-%description gcov
-kernel-gcov includes the gcov graph and source files for gcov coverage collection.
-%endif
+%define kernel_gcov_package() \
+%package %{?1:%{1}-}gcov\
+Summary: gcov graph and source files for coverage data collection.\
+%description %{?1:%{1}-}gcov\
+%{?1:%{1}-}gcov includes the gcov graph and source files for gcov coverage collection.\
+%{nil}
%package -n %{package_name}-abi-stablelists
Summary: The Red Hat Enterprise Linux kernel ABI symbol stablelists
@@ -1409,6 +1409,9 @@ Provides: installonlypkg(kernel)\
Provides: kernel-%{?1:%{1}-}uname-r = %{KVERREL}%{?1:+%{1}}\
Requires: kernel%{?1:-%{1}}-modules-core-uname-r = %{KVERREL}%{?1:+%{1}}\
%endif\
+%if %{with_gcov}\
+%{expand:%%kernel_gcov_package %{?1:%{1}}}\
+%endif\
%{nil}
#
@@ -1775,6 +1778,17 @@ BuildKernel() {
CopyKernel=cp
fi
+%if %{with_gcov}
+ # Make build directory unique for each variant, so that gcno symlinks
+ # are also unique for each variant.
+ if [ -n "$Variant" ]; then
+ ln -s $(pwd) ../linux-%{KVERREL}-${Variant}
+ fi
+ echo "GCOV - continuing build in: $(pwd)"
+ pushd ../linux-%{KVERREL}${Variant:+-${Variant}}
+ pwd > ../kernel${Variant:+-${Variant}}-gcov.list
+%endif
+
InitBuildVars $Variant
echo BUILDING A KERNEL FOR ${Variant} %{_target_cpu}...
@@ -2403,6 +2417,9 @@ BuildKernel() {
fi
%endif
+%if %{with_gcov}
+ popd
+%endif
}
###
@@ -3268,13 +3285,6 @@ fi
%files
%endif
-%if %{with_gcov}
-%ifnarch %nobuildarches noarch
-%files gcov
-%{_builddir}
-%endif
-%endif
-
# This is %%{image_install_path} on an arch where that includes ELF files,
# or empty otherwise.
%define elf_image_install_path %{?kernel_image_elf:%{image_install_path}}
@@ -3349,6 +3359,11 @@ fi
%if %{?3:1} %{!?3:0}\
%{expand:%%files %{3}}\
%endif\
+%if %{with_gcov}\
+%ifnarch %nobuildarches noarch\
+%{expand:%%files -f kernel-%{?3:%{3}-}gcov.list %{?3:%{3}-}gcov}\
+%endif\
+%endif\
%endif\
%{nil}
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2398