Re: Generating a cloud / VM kernel package

2017-08-28 Thread Noah Meyerhans
On Sun, Aug 27, 2017 at 04:16:50PM +0200, Thomas Goirand wrote: > Basically, the only thing that I want to see is a specific config for > that kernel, nothing else. Otherwise, it's going to be too much > maintenance work. Indeed, it should *not* be a different source upload, > that's too much work

Re: Generating a cloud / VM kernel package

2017-08-28 Thread Bastian Blank
On Sat, Aug 26, 2017 at 11:48:22AM +0200, Thomas Goirand wrote: > This makes the kernel binary package a lot smaller, Is the size a problem right now? > and also potentially reduces the surface of attack in case of a security > problem. What attach surface? > For

Re: Generating a cloud / VM kernel package

2017-08-27 Thread Noah Meyerhans
On Mon, Aug 28, 2017 at 01:31:31AM +0100, Ben Hutchings wrote: > > OTOH, the list of required modules may be small enough for us to > > enumerate the ones we need for booting in /etc/initramfs-tools/modules. > > ...and then you could use MODULES=list. initramfs-tools will still > follow module

Re: Generating a cloud / VM kernel package

2017-08-27 Thread Ben Hutchings
On Sun, 2017-08-27 at 16:38 -0700, Noah Meyerhans wrote: > On Sat, Aug 26, 2017 at 05:18:45PM +0100, Ben Hutchings wrote: > > > Thomas, can you elaborate why you think this a good idea? Is this about > > > boot time of the kernel image? The thing I really do not want to have is > > > additional

Re: Generating a cloud / VM kernel package

2017-08-27 Thread Noah Meyerhans
On Sat, Aug 26, 2017 at 05:18:45PM +0100, Ben Hutchings wrote: > > Thomas, can you elaborate why you think this a good idea? Is this about > > boot time of the kernel image? The thing I really do not want to have is > > additional kernel source uploads to the archive for just those cloud > >

Re: Generating a cloud / VM kernel package

2017-08-27 Thread Thomas Goirand
On 08/26/2017 12:15 PM, Martin Zobel-Helas wrote: > a) we need to decide then if we need one kernel flavour for each cloud > provider or if we can agree on a basic set of kernel compile options > that every cloud provider can use. I don't think that's needed at all. > b) most kernels Debian

Re: Generating a cloud / VM kernel package

2017-08-26 Thread Ben Hutchings
On Sat, 2017-08-26 at 11:48 +0200, Thomas Goirand wrote: > Dear Kernel maintainers, > > As you may know, it's been years that Ubuntu is shipping a kernel > designed for the cloud. Such a kernel is simply a version of the kernel > that is stripped down for running on VMs. The point here is that

Re: Generating a cloud / VM kernel package

2017-08-26 Thread Thomas Lange
For security reasons we could use the default Debian kernel and generate a long list of kernel modules which are blacklisted in the cloud environment. -- regards Thomas

Re: Generating a cloud / VM kernel package

2017-08-26 Thread Martin Zobel-Helas
Hi, On Sat Aug 26, 2017 at 11:48:22 +0200, Thomas Goirand wrote: > Dear Kernel maintainers, > > As you may know, it's been years that Ubuntu is shipping a kernel > designed for the cloud. Such a kernel is simply a version of the kernel > that is stripped down for running on VMs. The point here

Generating a cloud / VM kernel package

2017-08-26 Thread Thomas Goirand
Dear Kernel maintainers, As you may know, it's been years that Ubuntu is shipping a kernel designed for the cloud. Such a kernel is simply a version of the kernel that is stripped down for running on VMs. The point here is that VMs do not need all the drivers that we typically build for the