[OS-BUILD PATCH] Include the information about builtin symbols into kernel-uki-virt package too

2023-04-25 Thread Vitaly Kuznetsov (via Email Bridge)
From: Vitaly Kuznetsov 

Include the information about builtin symbols into kernel-uki-virt package too

The information about builtin symbols: symvers, modules.builtin, System.map,
config and the auto generated RPM "Provides" may be required by e.g.
proprietary kernel modules and there's no reason why these can't be used
with UKI. Include the information to kernel-uki-virt package in parallel
with kernel-core so both these packages can be used to resolve the
dependency if needed.

Signed-off-by: Vitaly Kuznetsov 

diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100644
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -3360,6 +3360,10 @@ fi
 %endif\
 %if %{with_efiuki}\
 %{expand:%%files %{?3:%{3}-}uki-virt}\
+%attr(0600, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/System.map\
+/lib/modules/%{KVERREL}%{?3:+%{3}}/symvers.gz\
+/lib/modules/%{KVERREL}%{?3:+%{3}}/config\
+/lib/modules/%{KVERREL}%{?3:+%{3}}/modules.builtin*\
 /lib/modules/%{KVERREL}%{?3:+%{3}}/%{?-k:%{-k*}}%{!?-k:vmlinuz}-virt.efi\
 %ghost 
/%{image_install_path}/efi/EFI/Linux/%{?-k:%{-k*}}%{!?-k:*}-%{KVERREL}%{?3:+%{3}}.efi\
 %endif\

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2408
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCH] Include the information about builtin symbols into kernel-uki-virt package too

2023-04-25 Thread Vitaly Kuznetsov (via Email Bridge)
From: Vitaly Kuznetsov on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2408#note_1365997499

@jmflinuxtx @jstancek @hertonrk-rh please review! In particular, I'm not sure
what the downsides of packaging System.map/ config/symvers/modules.builtin to
**both** kernel-core and kernel-uki-virt might be. I've checked that these two
packages can be installed in parallel without issues but there might be other
implications of the added Provides I'm missing. Thanks!
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCHv4 0/0] Support querying tags as well as building stable rc and next releases

2023-04-25 Thread Thorsten Leemhuis (via Email Bridge)
From: Thorsten Leemhuis on gitlab.com
Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2275
NOTE: Truncated patchset since committer email 'fed...@leemhuis.info'
  does not match the submitter's GitLab public email address
  'li...@leemhuis.info'.
These are a few changes I developed for supporting my kernel vanilla builds
(https://fedoraproject.org/wiki/Kernel_Vanilla_Repositories ) that IMHO are
worth integrating upstream.

Signed-off-by: Thorsten Leemhuis 

---
 redhat/Makefile |  41 -
 redhat/kernel.spec.template |   3 +++
 2 files changed, 39 insertions(+), 5 deletions(-)
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCH] redhat/configs: disable CONFIG_USB_NET_SR9700 for aarch64

2023-04-25 Thread via Email Bridge
From: Jose Ignacio Tornos Martinez 

redhat/configs: disable CONFIG_USB_NET_SR9700 for aarch64

This config is not enabled for x86 and the reason why it is was enabled for
aarch64 is unclear, so configure in the same way.

Signed-off-by: Jose Ignacio Tornos Martinez 

diff --git a/redhat/configs/rhel/generic/arm/aarch64/CONFIG_USB_NET_SR9700 
b/redhat/configs/rhel/generic/arm/aarch64/CONFIG_USB_NET_SR9700
index blahblah..blahblah 100644
--- a/redhat/configs/rhel/generic/arm/aarch64/CONFIG_USB_NET_SR9700
+++ b/redhat/configs/rhel/generic/arm/aarch64/CONFIG_USB_NET_SR9700
@@ -1 +1 @@
-CONFIG_USB_NET_SR9700=m
+# CONFIG_USB_NET_SR9700 is not set

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2409
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCHv2] redhat/configs: disable CONFIG_USB_NET_SR9700 for aarch64

2023-04-25 Thread via Email Bridge
From: Jose Ignacio Tornos Martinez 

redhat/configs: disable CONFIG_USB_NET_SR9700 for aarch64

This config is not enabled for x86 and the reason why it is was only enabled
for aarch64 is unclear, so configure in the same way.

Signed-off-by: Jose Ignacio Tornos Martinez 

diff --git a/redhat/configs/rhel/generic/arm/aarch64/CONFIG_USB_NET_SR9700 
b/redhat/configs/rhel/generic/arm/aarch64/CONFIG_USB_NET_SR9700
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/arm/aarch64/CONFIG_USB_NET_SR9700
+++ /dev/null
@@ -1 +0,0 @@
-CONFIG_USB_NET_SR9700=m

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2409
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv2] redhat/configs: disable CONFIG_USB_NET_SR9700 for aarch64

2023-04-25 Thread perobins (via Email Bridge)
From: perobins on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2409#note_1366216834

Makes sense, I'm not aware of any HW that would require this.
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCHv9 0/3] redhat/kernel.spec.template: Add global compression variables

2023-04-25 Thread Prarit Bhargava (via Email Bridge)
From: Prarit Bhargava on gitlab.com
Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2173

Most of the kernel and its packing is currently xz.  There is one
exception, KABI.  Remove gzip and change the KABI symbol compression to
xz.

There are other compression algorithms that are becoming more popular.  To
prepare for this change,  add a compression variable and compression file
extension variable.

Signed-off-by: Prarit Bhargava 

---
 redhat/kernel.spec.template |  35 ++-
 1 files changed, 14 insertions(+), 21 deletions(-)
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCHv9 1/3] kernel.spec.template: Remove gzip related aarch64 code

2023-04-25 Thread Prarit Bhargava (via Email Bridge)
From: Prarit Bhargava 

kernel.spec.template: Remove gzip related aarch64 code

With the move to CONFIG_EFI_ZBOOT, the aarch64 gzip code is no longer
necessary and can be removed.

Signed-off-by: Prarit Bhargava 

diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100644
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -1850,14 +1850,7 @@ BuildKernel() {
 CopyKernel=cp
 fi
 
-# Sign the image if we're using EFI
-# aarch64 kernels are gziped EFI images
-KernelExtension=${KernelImage##*.}
-if [ "$KernelExtension" == "gz" ]; then
-SignImage=${KernelImage%.*}
-else
-SignImage=$KernelImage
-fi
+SignImage=$KernelImage
 
 %ifarch x86_64 aarch64
 %pesign -s -i $SignImage -o vmlinuz.tmp -a %{secureboot_ca_0} -c 
%{secureboot_key_0} -n %{pesign_name_0}
@@ -1880,9 +1873,6 @@ BuildKernel() {
 exit 1
 fi
 mv vmlinuz.signed $SignImage
-if [ "$KernelExtension" == "gz" ]; then
-gzip -f9 $SignImage
-fi
 # signkernel
 %endif
 

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2173
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCHv9 2/3] kernel.spec.template: Use xz for KABI

2023-04-25 Thread Prarit Bhargava (via Email Bridge)
From: Prarit Bhargava 

kernel.spec.template: Use xz for KABI

Use xz for KABI instead of gzip.  This allows the removal of gzip as a
kernel dependency.

Signed-off-by: Prarit Bhargava 

diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100644
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -605,7 +605,7 @@ Provides: installonlypkg(kernel)
 # List the packages used during the kernel build
 #
 BuildRequires: kmod, bash, coreutils, tar, git-core, which
-BuildRequires: bzip2, xz, findutils, gzip, m4, perl-interpreter, perl-Carp, 
perl-devel, perl-generators, make, diffutils, gawk
+BuildRequires: bzip2, xz, findutils, m4, perl-interpreter, perl-Carp, 
perl-devel, perl-generators, make, diffutils, gawk
 BuildRequires: gcc, binutils, redhat-rpm-config, hmaccalc, bison, flex, gcc-c++
 BuildRequires: net-tools, hostname, bc, elfutils-devel
 BuildRequires: dwarves
@@ -1949,8 +1949,8 @@ BuildKernel() {
 # NOTENOTE: checksums to the rpm metadata provides list.
 # NOTENOTE: if you change the symvers name, update the backend too
 echo " GENERATING kernel ABI metadata "
-gzip -c9 < Module.symvers > $RPM_BUILD_ROOT/boot/symvers-$KernelVer.gz
-cp $RPM_BUILD_ROOT/boot/symvers-$KernelVer.gz 
$RPM_BUILD_ROOT/lib/modules/$KernelVer/symvers.gz
+xz -c9 < Module.symvers > $RPM_BUILD_ROOT/boot/symvers-$KernelVer.xz
+cp $RPM_BUILD_ROOT/boot/symvers-$KernelVer.xz 
$RPM_BUILD_ROOT/lib/modules/$KernelVer/symvers.xz
 
 %if %{with_kabichk}
 echo " kABI checking is enabled in kernel SPEC file. "
@@ -3030,9 +3030,9 @@ fi\
 %endif\
 rm -f 
%{_localstatedir}/lib/rpm-state/%{name}/installing_core_%{KVERREL}%{?1:+%{1}}\
 /bin/kernel-install add %{KVERREL}%{?1:+%{1}} 
/lib/modules/%{KVERREL}%{?1:+%{1}}/vmlinuz || exit $?\
-if [[ ! -e "/boot/symvers-%{KVERREL}%{?1:+%{1}}.gz" ]]; then\
-ln -s "/lib/modules/%{KVERREL}%{?1:+%{1}}/symvers.gz" 
"/boot/symvers-%{KVERREL}%{?1:+%{1}}.gz"\
-command -v restorecon &>/dev/null && restorecon 
"/boot/symvers-%{KVERREL}%{?1:+%{1}}.gz" \
+if [[ ! -e "/boot/symvers-%{KVERREL}%{?1:+%{1}}.xz" ]]; then\
+ln -s "/lib/modules/%{KVERREL}%{?1:+%{1}}/symvers.xz" 
"/boot/symvers-%{KVERREL}%{?1:+%{1}}.xz"\
+command -v restorecon &>/dev/null && restorecon 
"/boot/symvers-%{KVERREL}%{?1:+%{1}}.xz" \
 fi\
 %{nil}
 
@@ -3306,10 +3306,10 @@ fi
 %endif\
 %attr(0600, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/System.map\
 %ghost %attr(0600, root, root) /boot/System.map-%{KVERREL}%{?3:+%{3}}\
-/lib/modules/%{KVERREL}%{?3:+%{3}}/symvers.gz\
+/lib/modules/%{KVERREL}%{?3:+%{3}}/symvers.xz\
 /lib/modules/%{KVERREL}%{?3:+%{3}}/config\
 /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.builtin*\
-%ghost %attr(0600, root, root) /boot/symvers-%{KVERREL}%{?3:+%{3}}.gz\
+%ghost %attr(0600, root, root) /boot/symvers-%{KVERREL}%{?3:+%{3}}.xz\
 %ghost %attr(0600, root, root) /boot/initramfs-%{KVERREL}%{?3:+%{3}}.img\
 %ghost %attr(0644, root, root) /boot/config-%{KVERREL}%{?3:+%{3}}\
 %{expand:%%files -f kernel-%{?3:%{3}-}modules-core.list 
%{?3:%{3}-}modules-core}\

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2173
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCHv9 3/3] kernel.spec.template: Add global compression variables

2023-04-25 Thread Prarit Bhargava (via Email Bridge)
From: Prarit Bhargava 

kernel.spec.template: Add global compression variables

Add global compression variables.  'compression' is the compression
utility, and 'compext' is the compression extension.  In the case of xz,
these variables have the same value but that may not always be the
case.

Signed-off-by: Prarit Bhargava 

diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100644
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -106,8 +106,11 @@ Summary: The Linux kernel
 %global zipmodules 1
 %endif
 
+# Default compression algorithm
+%global compression xz
+%global compext xz
 %if %{zipmodules}
-%global zipsed -e 's/\.ko$/\.ko.xz/'
+%global zipsed -e 's/\.ko$/\.ko.%compext/'
 %endif
 
 %if 0%{?fedora}
@@ -1949,8 +1952,8 @@ BuildKernel() {
 # NOTENOTE: checksums to the rpm metadata provides list.
 # NOTENOTE: if you change the symvers name, update the backend too
 echo " GENERATING kernel ABI metadata "
-xz -c9 < Module.symvers > $RPM_BUILD_ROOT/boot/symvers-$KernelVer.xz
-cp $RPM_BUILD_ROOT/boot/symvers-$KernelVer.xz 
$RPM_BUILD_ROOT/lib/modules/$KernelVer/symvers.xz
+%compression -c9 < Module.symvers > 
$RPM_BUILD_ROOT/boot/symvers-$KernelVer.%compext
+cp $RPM_BUILD_ROOT/boot/symvers-$KernelVer.%compext 
$RPM_BUILD_ROOT/lib/modules/$KernelVer/symvers.%compext
 
 %if %{with_kabichk}
 echo " kABI checking is enabled in kernel SPEC file. "
@@ -2602,7 +2605,7 @@ find Documentation -type d | xargs chmod u+w
   fi \
   if [ "%{zipmodules}" -eq "1" ]; then \
 echo "Compressing kernel modules ..." \
-find $RPM_BUILD_ROOT/lib/modules/ -type f -name '*.ko' | xargs -n 16 
-P${RPM_BUILD_NCPUS} -r xz; \
+find $RPM_BUILD_ROOT/lib/modules/ -type f -name '*.ko' | xargs -n 16 
-P${RPM_BUILD_NCPUS} -r %compression; \
   fi \
 %{nil}
 
@@ -3030,9 +3033,9 @@ fi\
 %endif\
 rm -f 
%{_localstatedir}/lib/rpm-state/%{name}/installing_core_%{KVERREL}%{?1:+%{1}}\
 /bin/kernel-install add %{KVERREL}%{?1:+%{1}} 
/lib/modules/%{KVERREL}%{?1:+%{1}}/vmlinuz || exit $?\
-if [[ ! -e "/boot/symvers-%{KVERREL}%{?1:+%{1}}.xz" ]]; then\
-ln -s "/lib/modules/%{KVERREL}%{?1:+%{1}}/symvers.xz" 
"/boot/symvers-%{KVERREL}%{?1:+%{1}}.xz"\
-command -v restorecon &>/dev/null && restorecon 
"/boot/symvers-%{KVERREL}%{?1:+%{1}}.xz" \
+if [[ ! -e "/boot/symvers-%{KVERREL}%{?1:+%{1}}.%compext" ]]; then\
+ln -s "/lib/modules/%{KVERREL}%{?1:+%{1}}/symvers.%compext" 
"/boot/symvers-%{KVERREL}%{?1:+%{1}}.%compext"\
+command -v restorecon &>/dev/null && restorecon 
"/boot/symvers-%{KVERREL}%{?1:+%{1}}.%compext" \
 fi\
 %{nil}
 
@@ -3306,10 +3309,10 @@ fi
 %endif\
 %attr(0600, root, root) /lib/modules/%{KVERREL}%{?3:+%{3}}/System.map\
 %ghost %attr(0600, root, root) /boot/System.map-%{KVERREL}%{?3:+%{3}}\
-/lib/modules/%{KVERREL}%{?3:+%{3}}/symvers.xz\
+/lib/modules/%{KVERREL}%{?3:+%{3}}/symvers.%compext\
 /lib/modules/%{KVERREL}%{?3:+%{3}}/config\
 /lib/modules/%{KVERREL}%{?3:+%{3}}/modules.builtin*\
-%ghost %attr(0600, root, root) /boot/symvers-%{KVERREL}%{?3:+%{3}}.xz\
+%ghost %attr(0600, root, root) /boot/symvers-%{KVERREL}%{?3:+%{3}}.%compext\
 %ghost %attr(0600, root, root) /boot/initramfs-%{KVERREL}%{?3:+%{3}}.img\
 %ghost %attr(0644, root, root) /boot/config-%{KVERREL}%{?3:+%{3}}\
 %{expand:%%files -f kernel-%{?3:%{3}-}modules-core.list 
%{?3:%{3}-}modules-core}\

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2173
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCH] Include the information about builtin symbols into kernel-uki-virt package too

2023-04-25 Thread Jan Stancek (via Email Bridge)
From: Jan Stancek on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2408#note_1366597050

That was question I had too, when I saw the patch. But per
https://docs.fedoraproject.org/en-US/packaging-
guidelines/#_file_and_directory_ownership it is allowed, and your tests were
OK.

Do you have a koji/brew build link? I'm curious what new provides are there in
uki now? Is it only kmod() and kernel()? Anything else?
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCH] Include the information about builtin symbols into kernel-uki-virt package too

2023-04-25 Thread Vitaly Kuznetsov (via Email Bridge)
From: Vitaly Kuznetsov on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2408#note_130375

Yes, here's the koji build
https://koji.fedoraproject.org/koji/taskinfo?taskID=100339642
My understanding is that we only get a bunch of kmod() and kernel() Provides:
added (same as in kernel-core).
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCHv2] redhat/configs: Enable CONFIG_INIT_STACK_ALL_ZERO for RHEL

2023-04-25 Thread Josh Poimboeuf (via Email Bridge)
From: Josh Poimboeuf 

redhat/configs: Enable CONFIG_INIT_STACK_ALL_ZERO for RHEL

CONFIG_INIT_STACK_ALL_ZERO is a hardening feature which is "intended to
eliminate all classes of uninitialized stack variable exploits and
information exposures."

Recent internal benchmark testing has shown negligible performance
impact.

It's already enabled for Fedora.  Enable it for RHEL.

Signed-off-by: Josh Poimboeuf 

diff --git a/redhat/configs/fedora/generic/CONFIG_INIT_STACK_ALL_ZERO 
b/redhat/configs/common/generic/CONFIG_INIT_STACK_ALL_ZERO
rename from redhat/configs/fedora/generic/CONFIG_INIT_STACK_ALL_ZERO
rename to redhat/configs/common/generic/CONFIG_INIT_STACK_ALL_ZERO
index blahblah..blahblah 100644
--- a/redhat/configs/fedora/generic/CONFIG_INIT_STACK_ALL_ZERO
+++ b/redhat/configs/common/generic/CONFIG_INIT_STACK_ALL_ZERO
diff --git a/redhat/configs/fedora/generic/CONFIG_INIT_STACK_NONE 
b/redhat/configs/common/generic/CONFIG_INIT_STACK_NONE
rename from redhat/configs/fedora/generic/CONFIG_INIT_STACK_NONE
rename to redhat/configs/common/generic/CONFIG_INIT_STACK_NONE
index blahblah..blahblah 100644
--- a/redhat/configs/fedora/generic/CONFIG_INIT_STACK_NONE
+++ b/redhat/configs/common/generic/CONFIG_INIT_STACK_NONE
diff --git a/redhat/configs/rhel/generic/CONFIG_INIT_STACK_ALL_ZERO 
b/redhat/configs/rhel/generic/CONFIG_INIT_STACK_ALL_ZERO
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_INIT_STACK_ALL_ZERO
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_INIT_STACK_ALL_ZERO is not set
diff --git a/redhat/configs/rhel/generic/CONFIG_INIT_STACK_NONE 
b/redhat/configs/rhel/generic/CONFIG_INIT_STACK_NONE
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/rhel/generic/CONFIG_INIT_STACK_NONE
+++ /dev/null
@@ -1 +0,0 @@
-CONFIG_INIT_STACK_NONE=y

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2400
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue