Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-04-02 Thread Emanuele Giuseppe Esposito (via Email Bridge)
From: Emanuele Giuseppe Esposito on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1843132802

As long as it doesn't imply to drop all I did so far because otherwise all the
discussion done so far would be vain.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-04-02 Thread Emanuele Giuseppe Esposito (via Email Bridge)
From: Emanuele Giuseppe Esposito on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1843120881

how do you propose to version it?
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv2 0/6] secure boot signing updates

2024-04-02 Thread Jan Stancek (via Email Bridge)
From: Jan Stancek on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2849#note_1841829098

we have new shim now, so I'm resolving this thread
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-04-02 Thread Vitaly Kuznetsov (via Email Bridge)
From: Vitaly Kuznetsov on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841630493

While separating addons into `kernel-uki-virt-addons` package may make perfect
sense when we have a lot of them, we can probably postpone it and just package
them in the same package with UKI while there's just a few.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv12 2/2] redhat/uki_cmdline_addons.conf: add FIPS addon

2024-04-02 Thread Vitaly Kuznetsov (via Email Bridge)
From: Vitaly Kuznetsov on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841625716

It may make sense to avoid mentioning RHEL in ARK MRs.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-04-02 Thread Vitaly Kuznetsov (via Email Bridge)
From: Vitaly Kuznetsov on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841621091

@eesposit I'm looking at kernel-uki-virt-
addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm:

```
$ rpm -qpl /tmp/kernel-uki-virt-
addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm
/usr/lib/linux/extra.d/fips-virt.fedora.x86_64.addon.efi
```

at the same time dependencies are stict:

```
$ rpm -qp --requires /tmp/kernel-uki-virt-
addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm
kernel-uki-virt = 6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41
...
```

so imaging I want to install two UKI versions, it'll require to install two
kernel-uki-virt-addons packages providing the same file. While it doesn't
really matter for 'FIPS' addon we have, what if we ever decide to change the
addon and thus the file won't be the same? I think we need to use a versioned
location so two installed kernel-uki-virt-addons don't clash.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-04-02 Thread Vitaly Kuznetsov (via Email Bridge)
From: Vitaly Kuznetsov on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841621091

@eesposit I'm looking at kernel-uki-virt-
addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm:

`
$ rpm -qpl /tmp/kernel-uki-virt-
addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm
/usr/lib/linux/extra.d/fips-virt.fedora.x86_64.addon.efi
`

at the same time dependencies are stict:

`
$ rpm -qp --requires /tmp/kernel-uki-virt-
addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm
kernel-uki-virt = 6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41
...
`

so imaging I want to install two UKI versions, it'll require to install two
kernel-uki-virt-addons packages providing the same file. While it doesn't
really matter for 'FIPS' addon we have, what if we ever decide to change the
addon and thus the file won't be the same? I think we need to use a versioned
location so two installed kernel-uki-virt-addons don't clash.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-04-02 Thread Vitaly Kuznetsov (via Email Bridge)
From: Vitaly Kuznetsov on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841621091

@eesposit I'm looking at kernel-uki-virt-
addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm:

`
$ rpm -qpl /tmp/kernel-uki-virt-
addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm
/usr/lib/linux/extra.d/fips-virt.fedora.x86_64.addon.efi
`
at the same time dependencies are stict:
`
$ rpm -qp --requires /tmp/kernel-uki-virt-
addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm
kernel-uki-virt = 6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41
...
`
so imaging I want to install two UKI versions, it'll require to install two
kernel-uki-virt-addons packages providing the same file. While it doesn't
really matter for 'FIPS' addon we have, what if we ever decide to change the
addon and thus the file won't be the same? I think we need to use a versioned
location so two installed kernel-uki-virt-addons don't clash.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCH] arch/x86: Fix XSAVE check for x86_64-v2 check

2024-04-02 Thread Prarit Bhargava (via Email Bridge)
From: Prarit Bhargava 

arch/x86: Fix XSAVE check for x86_64-v2 check

The flag check should be XSAVE, not OSXSAVE.

Signed-off-by: Prarit Bhargava 

diff --git a/arch/x86/kernel/setup.c b/arch/x86/kernel/setup.c
index blahblah..blahblah 100644
--- a/arch/x86/kernel/setup.c
+++ b/arch/x86/kernel/setup.c
@@ -733,7 +733,7 @@ static void rh_check_supported(void)
   !boot_cpu_has(X86_FEATURE_FMA) ||
   /* LZCNT is not explicitly listed, but appears to be paired 
with BMI2 */
   !boot_cpu_has(X86_FEATURE_MOVBE) ||
-  !boot_cpu_has(X86_FEATURE_OSXSAVE)) {
+  !boot_cpu_has(X86_FEATURE_XSAVE)) {
mark_hardware_deprecated("x86_64-v2", "%s:%s",
 boot_cpu_data.x86_vendor_id, 
boot_cpu_data.x86_model_id);
}

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3052
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue