Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons
From: Emanuele Giuseppe Esposito on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1843132802 As long as it doesn't imply to drop all I did so far because otherwise all the discussion done so far would be vain. -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons
From: Emanuele Giuseppe Esposito on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1843120881 how do you propose to version it? -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: [OS-BUILD PATCHv2 0/6] secure boot signing updates
From: Jan Stancek on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2849#note_1841829098 we have new shim now, so I'm resolving this thread -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons
From: Vitaly Kuznetsov on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841630493 While separating addons into `kernel-uki-virt-addons` package may make perfect sense when we have a lot of them, we can probably postpone it and just package them in the same package with UKI while there's just a few. -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: [OS-BUILD PATCHv12 2/2] redhat/uki_cmdline_addons.conf: add FIPS addon
From: Vitaly Kuznetsov on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841625716 It may make sense to avoid mentioning RHEL in ARK MRs. -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons
From: Vitaly Kuznetsov on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841621091 @eesposit I'm looking at kernel-uki-virt- addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm: ``` $ rpm -qpl /tmp/kernel-uki-virt- addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm /usr/lib/linux/extra.d/fips-virt.fedora.x86_64.addon.efi ``` at the same time dependencies are stict: ``` $ rpm -qp --requires /tmp/kernel-uki-virt- addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm kernel-uki-virt = 6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41 ... ``` so imaging I want to install two UKI versions, it'll require to install two kernel-uki-virt-addons packages providing the same file. While it doesn't really matter for 'FIPS' addon we have, what if we ever decide to change the addon and thus the file won't be the same? I think we need to use a versioned location so two installed kernel-uki-virt-addons don't clash. -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons
From: Vitaly Kuznetsov on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841621091 @eesposit I'm looking at kernel-uki-virt- addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm: ` $ rpm -qpl /tmp/kernel-uki-virt- addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm /usr/lib/linux/extra.d/fips-virt.fedora.x86_64.addon.efi ` at the same time dependencies are stict: ` $ rpm -qp --requires /tmp/kernel-uki-virt- addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm kernel-uki-virt = 6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41 ... ` so imaging I want to install two UKI versions, it'll require to install two kernel-uki-virt-addons packages providing the same file. While it doesn't really matter for 'FIPS' addon we have, what if we ever decide to change the addon and thus the file won't be the same? I think we need to use a versioned location so two installed kernel-uki-virt-addons don't clash. -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: [OS-BUILD PATCHv12 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons
From: Vitaly Kuznetsov on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1841621091 @eesposit I'm looking at kernel-uki-virt- addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm: ` $ rpm -qpl /tmp/kernel-uki-virt- addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm /usr/lib/linux/extra.d/fips-virt.fedora.x86_64.addon.efi ` at the same time dependencies are stict: ` $ rpm -qp --requires /tmp/kernel-uki-virt- addons-6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41.x86_64.rpm kernel-uki-virt = 6.9.0-0.rc0.a4145ce1e7bc.11.test.fc41 ... ` so imaging I want to install two UKI versions, it'll require to install two kernel-uki-virt-addons packages providing the same file. While it doesn't really matter for 'FIPS' addon we have, what if we ever decide to change the addon and thus the file won't be the same? I think we need to use a versioned location so two installed kernel-uki-virt-addons don't clash. -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[OS-BUILD PATCH] arch/x86: Fix XSAVE check for x86_64-v2 check
From: Prarit Bhargava arch/x86: Fix XSAVE check for x86_64-v2 check The flag check should be XSAVE, not OSXSAVE. Signed-off-by: Prarit Bhargava diff --git a/arch/x86/kernel/setup.c b/arch/x86/kernel/setup.c index blahblah..blahblah 100644 --- a/arch/x86/kernel/setup.c +++ b/arch/x86/kernel/setup.c @@ -733,7 +733,7 @@ static void rh_check_supported(void) !boot_cpu_has(X86_FEATURE_FMA) || /* LZCNT is not explicitly listed, but appears to be paired with BMI2 */ !boot_cpu_has(X86_FEATURE_MOVBE) || - !boot_cpu_has(X86_FEATURE_OSXSAVE)) { + !boot_cpu_has(X86_FEATURE_XSAVE)) { mark_hardware_deprecated("x86_64-v2", "%s:%s", boot_cpu_data.x86_vendor_id, boot_cpu_data.x86_model_id); } -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3052 -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue