Re: [OS-BUILD PATCHv2] redhat/configs: enable KEXEC_SIG for aarch64 RHEL
From: Coiby Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1442#note_719906578 Oh, I make a mistake. KEXEC_SIG doesn't exist for POWER. So it's indeed an NO- OP. Btw, POWER uses IMA appraise to verify the signature appended to the kernel image. So it doesn't need it. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: [OS-BUILD PATCHv2] redhat/configs: enable KEXEC_SIG for aarch64 RHEL
From: Coiby Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1442#note_719459832 It's not a NO-OP for POWER. With KEXEC_SIG enabled, some code in kernel/kexec_file.c would be invoked. For example, kimage_validate_signature would be called and this may lead to the failure of validating POWER kernel image's signature since POWER doesn't have image->fops->verify_sig. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: [OS-BUILD PATCHv2] redhat/configs: enable KEXEC_SIG for aarch64 RHEL
From: Coiby Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1442#note_719458496 Could you explain how it impacts x86? For CONFIG_KEXEC_SIG, I simply enable it for both aarch64 RHEL and it has already been enabled for x86 and aarch64 Fedora. For CONFIG_KEXEC_IMAGE_VERIFY_SIG, it's only used by aarch64. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: [OS-BUILD PATCHv2] redhat/configs: enable KEXEC_SIG for aarch64 RHEL
From: pbrobinson on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1442#note_719117764 Is there any reason not to unify the configs across all architectures, the only arch that doesn't currently have this enabled is POWER and it doesn't actually currently support it (which I'm actually surprised by) so it's a NO- OP there anyway. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: [OS-BUILD PATCHv2] redhat/configs: enable KEXEC_SIG for aarch64 RHEL
From: Don Zickus on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1442#note_718931153 @prarit @darcari apparently this impacts x86 now too. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: [OS-BUILD PATCHv2] redhat/configs: enable KEXEC_SIG for aarch64 RHEL
From: Mark Salter on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1442#note_717323659 Acked-by: Mark Salter (via approve button) ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
