Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service

2022-06-18 Thread Ben Hutchings
On Sat, 2022-06-18 at 16:21 +0200, Ben Hutchings wrote: [...] > Incidentally, this is a failure rate of 75 out of 4,967,591 signatures, > or 0.0015% [...] Or maybe not so incidentally: 4,967,591 / 2^16 ~= 75 Ben. -- Ben Hutchings The Peter principle: In a hierarchy, every employee te

Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service

2022-06-18 Thread Ben Hutchings
On Thu, 2022-06-16 at 01:28 +0200, Ben Hutchings wrote: [...] > linux-image-4.19.0-17-amd64 4.19.194-1 > lib/modules/4.19.0-17-amd64/kernel/drivers/dma/dw/dw_dmac_core.ko > linux-image-4.19.0-17-amd64 4.19.194-2 > lib/modules/4.19.0-17-amd64/kernel/drivers/dma/dw/dw_dmac_core.ko &

Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service

2022-06-15 Thread Ben Hutchings
On Mon, 2022-06-13 at 18:23 +0200, Ben Hutchings wrote: [...] > I can confirm that this module does not load, and this means it has an > invalid signature. The detached signature present in the source > package seems to be truncated (408 bytes long, where for all other > modules

Bug#711592: Current x86 linux kernel is misconfigured.

2022-06-13 Thread Ben Hutchings
ly fixed in stretch and buster (wchan shows function names for most sleeping threads, subject to privilege check) - broken again in bullseye - fully fixed in 5.16.14-1 (wchan shows function names for all sleeping threads, subject to privilege check) Given that, I think this can be closed with v

Bug#1012547: linux: disable user namespaces per default

2022-06-13 Thread Ben Hutchings
On Mon, 2022-06-13 at 17:46 +0200, Diederik de Haas wrote: > On Monday, 13 June 2022 16:56:35 CEST Ben Hutchings wrote: > > We made the decision that the benefits of sandboxing with user > > namespaces are likely to outweigh the risks, on most systems. Nothing > > you&#x

Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service

2022-06-13 Thread Ben Hutchings
d, but for a different module (xt_l2tp). Since the truncated signatures are in the source packages, this is a problem introduced by the code signing service and will need to be fixed there. Ben. -- Ben Hutchings It's easier to fight for one's principles than to live up to them. signature.asc Description: This is a digitally signed message part

Bug#1012547: linux: disable user namespaces per default

2022-06-13 Thread Ben Hutchings
ion that the benefits of sandboxing with user namespaces are likely to outweigh the risks, on most systems. Nothing you've said convinces me to alter that assessment. Ben. -- Ben Hutchings It's easier to fight for one's principles than to live up to them. signature.asc Descript

Bug#1012601: wireless-regdb: alternative broken on debian-installer install

2022-06-13 Thread Ben Hutchings
e in this case. > (or push real links to /etc/alternatives/regulatory.db would work too) I don't think it's right to include symlinks in the package that are supposed to be managed by update-alternatives. I would rather fix this up in the postinst script. Ben. -- Ben Hutchings It&#x

Re: Moving iw under the kernel team

2022-06-02 Thread Ben Hutchings
sg2.html > > Hi again, > > I just noticed that iw 5.19 is out and I'd like to package it. Looks > like a good occasion to move the repo under the kernel team. > > I'm totally fine with a NACK, but it would be a pity to skip what I > believe is an improveme

Bug#1012210: linux-image-5.10.0-14-amd64: Kernels of Bullseye and Testing (5.10 and 5.17) hang at boot

2022-06-02 Thread Ben Hutchings
rk with the kernel parameter "intel_iommu=on".  Can you test whether that makes a difference with the Debian kernels? Ben. > or the negated value, not sure at the moment, what a y or n should mean > in this config and if the assignments of 0 or 1 are correct everywhere. -- Ben

Bug#1012152: firmware-amd-graphics: All firmware are included in initrd even in dep mode

2022-06-01 Thread Ben Hutchings
es. One thing we could perhaps do in initramfs-tools is to add a configuration variable that lets you override which firmware files get included (like MODULES=list, but for firmware). Would that work for you? Ben. -- Ben Hutchings Horngren's Observation: Among economists, the

"What's new in the Linux kernel" at DebConf

2022-05-21 Thread Ben Hutchings
ould welcome other kernel team members to work with me on the list of interesting changes and to be co-speakers. Ben. -- Ben Hutchings This sentence contradicts itself - no actually it doesn't. signature.asc Description: This is a digitally signed message part

Re: Debian Experimental Kernel

2022-05-18 Thread Ben Hutchings
On Tue, 2022-05-17 at 15:36 +0200, Tobias Koeck wrote: > Hi everyone, > > is there a plan to package the 5.18-rc7+ kernel package into the > experimental branch? Yes, we have been working on an update to 5.18. Hopefully that will be ready to upload later this week. Ben. -- Ben Hu

Bug#1010916: linux-image-5.17.0-2-amd64 - KVM?

2022-05-16 Thread Ben Hutchings
tion about what went wrong. Could you please look back through the log to find an "oops" log that includes "not tainted"? Ben. -- Ben Hutchings Man invented language to satisfy his deep need to complain. - Lily Tomlin signature.asc Description: This is a digitally signed message part

Bug#1011091: Systems with more than 4 memory slots not supported yet, not instantiating SPD

2022-05-16 Thread Ben Hutchings
se contact the upstream maintainers about this at . Ben. -- Ben Hutchings Man invented language to satisfy his deep need to complain. - Lily Tomlin signature.asc Description: This is a digitally signed message part

Re: Patch for initramfs-tools-core (/usr/share/initramfs-tools/hooks/resume)

2022-04-18 Thread Ben Hutchings
he main one - see <https://salsa.debian.org/help/user/project/repository/forking_workflow.md>. Once you've done that, you should be able to push a branch to your repository and open an MR - see <https://salsa.debian.org/help/user/project/merge_requests/creating_merge_requests.md>. Ben.

Bug#1009807: Kernels with no compression support no longer work

2022-04-18 Thread Ben Hutchings
tramfs, then you should make sure the initramfs- tools and kernel configurations agree on which compression method to use. Ben. -- Ben Hutchings To err is human; to really foul things up requires a computer. signature.asc Description: This is a digitally signed message part

Bug#1008928: linux: Missing build dependency for linux 5.15 arm64

2022-04-11 Thread Ben Hutchings
ld dependency should be resolved by the > build-dep installation via the respective *.dsc file. There is already a build-dependency: gcc-arm-linux-gnueabihf [arm64] How are you trying to build the package? Can you reproduce this with the current version in unstable? Ben. -- Ben Hutchings

Re: Patch for initramfs-tools-core (/usr/share/initramfs-tools/hooks/resume)

2022-04-11 Thread Ben Hutchings
;; > + > + /dev/zd[0-9]*) > + report_verbose "Rejecting $resume_auto since it is > zvol" > + ephemeral=true > + ;; > esac > > $ephemeral

Re: iproute2 team maintainership

2022-04-10 Thread Ben Hutchings
On Sun, 2022-04-10 at 23:00 +0100, Luca Boccassi wrote: > On Sun, 2022-04-10 at 23:58 +0200, Ben Hutchings wrote: > > On Sun, 2022-04-10 at 21:48 +0100, Luca Boccassi wrote: > > > On Sun, 2022-04-10 at 20:31 +0200, Ben Hutchings wrote: > > > > On Fri, 2022-04-01 at 22

initramfs-tools 0.141 release

2022-04-10 Thread Ben Hutchings
w. Ben. Alper Nebi Yasak (1): hook-functions: Include io-domain in dw_mmc-rockchip hidden dependencies Ariel D'Alessandro (1): hook-functions: Add nvmem-imx-ocotp driver module to network boot Ben Hutchings (21): Only run shellcheck in Salsa CI Fix shellcheck war

Re: iproute2 team maintainership

2022-04-10 Thread Ben Hutchings
On Sun, 2022-04-10 at 21:48 +0100, Luca Boccassi wrote: > On Sun, 2022-04-10 at 20:31 +0200, Ben Hutchings wrote: > > On Fri, 2022-04-01 at 22:05 +0100, Luca Boccassi wrote: > > > Hello Kernel Team, > > > > > > I have been maintaining iproute2 for more than f

Re: iproute2 team maintainership

2022-04-10 Thread Ben Hutchings
all, > it's maintained upstream in the kernel infrastructure too, and it's > very closely related. > > (previous maintainers CC'ed as FYI) > > Thoughts? Yes, I think this would be a good fit for the kernel team. Ben. -- Ben Hutchings The program is absolutely rig

Bug#998627: linux: please enable the new NTFS3 driver in 5.15

2022-03-20 Thread Ben Hutchings
s and small fixes, none of them being addressed by the supposed maintainer of the filesystem (who last posted at the end of November). I think that we would be doing our users a disservice by enabling ntfs3 in this state. Ben. -- Ben Hutchings If the facts do not conform to your theory, t

Bug#711021: mount.nfs timeout for GETPORT is much too short

2022-03-19 Thread Ben Hutchings
It has a default timeout (ct_wait field) that can be set with CLNT_CONTROL(..., CLSET_TIMEOUT, ...), but nfs-utils doesn't seem to do that. So it seems like there is a default timeout of 0! Ben. -- Ben Hutchings Beware of programmers who carry screwdrivers. - Leonard Brandwein signature.

Bug#913310: nfs-common: Systemd does not correctly read /etc/default/nfs-common

2022-03-19 Thread Ben Hutchings
tFile=' row in 'nfs-client' and 'nfs- server' so environment varialbles are not read. They don't need it. Each daemon has its own unit that (in this version) does use EnvironmentFile. What is the actual problem you are trying to solve? Ben. -- Ben Hutchings Beware of programmers who carry screwdrivers. - Leonard Brandwein signature.asc Description: This is a digitally signed message part

Bug#884871: nfs-kernel-server: svcgssd starts anyways when "disabled" in /etc/default/nfs-kernel-server

2022-03-19 Thread Ben Hutchings
/etc/default/nfs-kernel-server  config file, it clearly "disables svcgssd" : [...] These flags only affect the init scripts, not systemd. Use systemctl to disable or enable daemons under systemd. Ben. -- Ben Hutchings Beware of programmers who carry screwdrivers. - Leonard Brandwei

Re: Back-ported 5.16 kernel signing delays

2022-03-15 Thread Ben Hutchings
e only 2 people on the team, and they are volunteers like the rest of us. The only likely solution to this is for more people to step up and join that team. Ben. -- Ben Hutchings Never put off till tomorrow what you can avoid all together. signature.asc Description: This is a digitally signed message part

Bug#762939: nfs-common: /etc/init.d/nfs-common starts #!/bin/bash

2022-03-13 Thread Ben Hutchings
  It'd be nice to use /bin/sh. [...] This is true, but it sources /etc/default/nfs-common which could contain bashisms. I don't think this is worth the risk. Ben. -- Ben Hutchings It's easier to fight for one's principles than to live up to them. signature.asc Description: This is a digitally signed message part

Bug#944661: nfs-kernel-server: Please support specifying ionice-ness

2022-03-13 Thread Ben Hutchings
] I/O scheduling priority can already be set through systemd service configuration. I don't anticipate adding any new features to the Debian-specific init scripts. Ben. -- Ben Hutchings It's easier to fight for one's principles than to live up to them. signature.asc Description: This is a digitally signed message part

Re: CVE-2022-0847 "Dirty pipe" kernel vulnerability mitigation in buster-backports?

2022-03-08 Thread Ben Hutchings
e constraints. The > latest available version is 5.10.92 [1]. The vulnerability was fixed in > 5.10.102 [2]. I am assuming the current kernel is vulnerable? [...] The fix was included in Debian version 5.10.92-2. I'll update the version in buster-backports shortly. Ben. -- Ben

Re: Dependencies of linux-headers- packages

2022-03-07 Thread Ben Hutchings
ome support for use in cross-compilation but I don't know how well it works now. Ben. -- Ben Hutchings Q. Which is the greater problem in the world today, ignorance or apathy? A. I don't know and I couldn't care less. From ed870df3c0ab3d60aa60cf509ee6c3d10ab41276 Mon Sep 17 00:00:00

Bug#1005228: linux-image-4.19.0-18-amd64: Short freeze on virtual machine with message: "rcu: INFO: rcu_sched self-detected stall on CPU"

2022-02-28 Thread Ben Hutchings
/ch-common-tasks.html#s-common-official (This is normally also available online but that server is currently down.) Ben. -- Ben Hutchings The first rule of tautology club is the first rule of tautology club. From 139819f9b8009144f15a6659ce767023a0583ef8 Mon Sep 17 00:00:00 2001 From: Ben Hutchings

Re: [PATCH v2] builddeb: Support signing kernels with the module signing key

2022-02-09 Thread Ben Hutchings
followed > > the Debian instructions that we would then sign the kernel using the > > keys they previously generated. > > > If I am not wrong, extracting the key path from > CONFIG_MODULE_SIG_KEY is not Debian's way. > > > I checked the kernel configuration on bullseye, > CONFIG_MODULE_SIG_KEY is empty, > while the module signing itself is enabled. [...] For Debian's own packages, we didn't want to use ephemeral module signing keys (which break reproducibility) or to expose signing keys to the regular build machines. Instead, Debian has a separate signing service that handles the few packages that need it. The closest thing to "the Debian way" for signing custom kernels would be that wiki page. But personally, I think making each computer build and sign its own kernel and modules undermines any value that Secure Boot could provide. Ben. -- Ben Hutchings Who are all these weirdos? - David Bowie, on joining IRC signature.asc Description: This is a digitally signed message part

Re: Improvement ideas for kernel and the surrounding oekosystem

2022-01-31 Thread Ben Hutchings
nux (upstream deb-pkg) - xen - kfreebsd-N - grub - flash-kernel - all those obscure boot loaders we hoped were gone It's going to take some time and effort to change all of those, so we would need good arguments for why all the other maintainers should bother with it, and we would need to plan for a gradual transition. Ben. -- Ben Hutchings Computers are not intelligent. They only think they are. signature.asc Description: This is a digitally signed message part

Bug#1004465: libklibc-dev: headers not installed

2022-01-30 Thread Ben Hutchings
e automatically > searched for the listed files/directories relative to debian/tmp/ > as well as in the top directory. [...] That's not what broke things, it's the change to an out-of-tree build. Ben. -- Ben Hutchings Hoare's Law of Large Problems: Inside ever

Re: Kernel related problem (randomly failing tests), where to discuss?

2022-01-23 Thread Ben Hutchings
as root on a VM. But currently neither salsa-ci nor ci.debian.net implements this, so those tests will be skipped. Another option in autopkgtests is to depend on qemu and start the VM yourself. This is not easy to do, but I implemented it for initramfs- tools. Ben. -- Ben Hutchings I&#x

Bug#1003903: RM: crda -- ROM; obsolete due to kernel changes

2022-01-17 Thread Ben Hutchings
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: debian-kernel@lists.debian.org crda is used to load the data from wireless-regdb into the Linux kernel. Linux 4.15 implemented direct loading of the data by the kernel, and this is not an optional feature (whereas continued support for crda i

Bug#1003427: COMPRESS=zstd and COMPRESS=lz4 hard-coded to bad COMPRESSLEVELs

2022-01-09 Thread Ben Hutchings
ear that in master, zstd with compression level 9 is now the default. The -T0 option is still unconditional though... I have no idea whether the lz4 options should be changed. I'm not sure it's actually a good choice for anyone. Ben. -- Ben Hutchings I say we take off; nuk

Re: Getting the latest and greatest Linux perf features on every Debian kernel

2022-01-09 Thread Ben Hutchings
On Fri, 2021-11-12 at 11:39 -0300, Arnaldo Carvalho de Melo wrote: > Em Thu, Nov 11, 2021 at 10:34:33PM -0800, Ian Rogers escreveu: > > Hi, > > > Debian currently tries to match the Linux perf tool to the version of > > the kernel that it is being run upon. Reaching out

Re: Getting the latest and greatest Linux perf features on every Debian kernel

2022-01-09 Thread Ben Hutchings
salsa.debian.org, where you can send merge requests. If linux-perf is to be a separate source package, I think it should be maintained in the same way. > 4) some how get the previous Debian linux-perf-[45].* packages removed [...] They will be removed from the Debian archive through a periodic c

Bug#998716: linux-image-5.14.0-2-amd64: The package size has grown a lot compared to 5.8/5.10 releases

2021-11-30 Thread Ben Hutchings
m where ABI- compatible out-of-tree modules are automatically linked into a new version's modules directory without rebuilding them. In that case we would still need to implement item (2) above. Ben. -- Ben Hutchings This sentence contradicts itself - no actually it doesn't. signature.asc Description: This is a digitally signed message part

Bug#998716: linux-image-5.14.0-2-amd64: The package size has grown a lot compared to 5.8/5.10 releases

2021-11-30 Thread Ben Hutchings
On Tue, 2021-11-30 at 05:19 +0200, Горбешко Богдан wrote: > On 30.11.2021 01:57, Ben Hutchings wrote: > > > > About 59 MiB, so again most of the increase. > > > > It appears that BTF in modules was enabled in Linux 5.11 by > &

Bug#998716: linux-image-5.14.0-2-amd64: The package size has grown a lot compared to 5.8/5.10 releases

2021-11-29 Thread Ben Hutchings
being enabled. Without doing some full rebuilds it's not possible to separate these. That leaves about 10 MiB of the increase in installed module size not yet explained. Ben. -- Ben Hutchings This sentence contradicts itself - no actually it doesn't. signature.asc Description: This is a digitally signed message part

Bug#983357: Bug#988776: Bug#983357: Netinst crashes xen domU when loading kernel

2021-08-25 Thread Ben Hutchings
e are at <https://kernel-team.pages.debian.net/kernel-handbook/ch-common-tasks.html#s-common-official>. I agree that you should check whether this fixes the coldplug error before we try rebuilding the installer. Ben. -- Ben Hutchings Design a system any fool can use, and only a fool will w

Bug#983357: Bug#988776: Bug#983357: Netinst crashes xen domU when loading kernel

2021-08-25 Thread Ben Hutchings
On Tue, 2021-08-24 at 15:19 -0400, Chuck Zmudzinski wrote: > On 8/24/2021 1:12 PM, Ben Hutchings wrote: [...] > > I think a proper fix would be one of: > > > > a. If the Xen virtual keyboard driver is advertising capabilities it > > doesn't have, stop

Bug#983357: Bug#988776: Bug#983357: Netinst crashes xen domU when loading kernel

2021-08-24 Thread Ben Hutchings
On Tue, Aug 24, 2021 at 03:27:19PM -0400, Phillip Susi wrote: > > Ben Hutchings writes: > > > I think a proper fix would be one of: > > > > a. If the Xen virtual keyboard driver is advertising capabilities it > >doesn't have, stop it doing that. > &

Bug#983357: Bug#988776: Bug#983357: Netinst crashes xen domU when loading kernel

2021-08-24 Thread Ben Hutchings
ng capabilities it doesn't have, stop it doing that. b. Change the implementation of modalias attributes to allow longer values. It's not clear to me whether the Xen driver is advertising correctly or not. If it is, then the solution should be b, but that may be too disruptive a change to the kernel. So a reasonable workaround might be: c. Change the input subsystem to limit the length of the capabilities part of the modalias. Ben. -- Ben Hutchings 73.46% of all statistics are made up. signature.asc Description: This is a digitally signed message part

Bug#991943: klibc: please consider including machine-readable copyright file

2021-08-12 Thread Ben Hutchings
th the proposed copyright file. I have fixed > > > them; please find the attached patch to the packaging. > > > > Of course, once again I’ve forgotten something: > > > > Files: debian/* > > Copyright: > >  2005 Jeff Bailey > >  2005-2014 maxi

Bug#991941: linux: Don't use nouveau with Nvidia GeForce 8500 GT or alert in dmesg that firmware is needed

2021-08-09 Thread Ben Hutchings
hat's expected. The kernel driver and firmware are two different things that work together. Installing the firmware should allow nouveau to work properly. Are you saying that even with firmware-misc-nonfree installed, you still get a black screen when you don't use "nomodeset"?

Bug#990411: systemd: set kernel.unprivileged_bpf_disabled = 1

2021-08-02 Thread Ben Hutchings
roc_dointvec_minmax, - .extra1 = SYSCTL_ONE, + .extra1 = SYSCTL_ZERO, .extra2 = SYSCTL_ONE, }, { --- END --- Ben. -- Ben Hutchings It is easier to write an incorrect program than to understand a correct one. si

Bug#991500: Missing modalias metadata needed for automatic installation

2021-07-25 Thread Ben Hutchings
Source: firmware-nonfree Version: 20210315-2 Severity: serious Tags: pending X-Debbugs-Cc: k...@debian.org, debian-b...@lists.debian.org The binary firmware packages built from firmware-nonfree currently include metanfo.xml files with a list of filenames of the firmware in them. These files are i

Bug#991297: rtw_8821ce does not work in debian 11

2021-07-20 Thread Ben Hutchings
orted [...] This means the driver doesn't support this variant of the hardware. It's not a firmware problem. That appears to be fixed in 5.12 by: commit 5d6651fe85837b11564a2e2c3c6279c057d078d6 Author: Guo-Feng Fan Date: Tue Feb 2 13:50:12 2021 +0800 rtw88: 8821c: supp

Re: buster: cannot boot into kernel 4.19.0-17

2021-07-20 Thread Ben Hutchings
ny-initramfs-core tlp > xml-core cryptsetup is needed (and cryptsetup-initramfs depends on it). Ben. -- Ben Hutchings Kids! Bringing about Armageddon can be dangerous. Do not attempt it in your own home. - Terry Pratchett and Neil Gaiman, `Good Omens' signature.asc Description: This i

Bug#991019: linux-image-5.10.0-7-armmp: a20 olinuxino-MICRO panic accessing sata disk after the boot.

2021-07-19 Thread Ben Hutchings
ing in a empty microSD card. > > This is the last line of the sceen output: > end Kernel panic - not syncing; stack-protector: Kernel stack is > corrupted in generic_file_buffered_read+0xc2c/0xc30 We would need to see the full output to start investigating this. If you're using

Re: buster: cannot boot into kernel 4.19.0-17

2021-07-19 Thread Ben Hutchings
On Mon, 2021-07-19 at 20:37 +0200, Ben Hutchings wrote: > On Wed, 2021-07-14 at 10:38 +0200, Julian Schreck wrote: > > Dear Sir or Madam, > > after an update of my packages (in debian stable for amd64 [1]), which > > included a newer kernel (from 4.19.0-16 to > > 4.1

Re: buster: cannot boot into kernel 4.19.0-17

2021-07-19 Thread Ben Hutchings
I'm not sure. > Note: My disk is encrypted. [...] Make sure you still have cryptsetup-initramfs installed. Ben. -- Ben Hutchings Absolutum obsoletum. (If it works, it's out of date.) - Stafford Beer signature.asc Description: This is a digitally signed message part

Re: User NS usage and attack surface mitigation on debian

2021-06-20 Thread Ben Hutchings
uid 0 inside the user namespace, and may have some capabilities there" - then yes, it is possible for root to create a user namespace belonging to another user. (I don't know exactly how to do that, though.) Ben. -- Ben Hutchings The program is absolutely right; therefore, the computer must be wrong. signature.asc Description: This is a digitally signed message part

Re: release notes mentioning dropped support?

2021-06-15 Thread Ben Hutchings
ackage: linux-image-marvell > > +Pin: release a=buster > > +Pin-Priority: 900 > > + > > + Obviously, the security support for this configuration will > > + end with the End Of Life of buster. > > Obviously, the security support for this configurat

"tweewide: Fix most Shebang lines" in stable updates

2021-06-14 Thread Ben Hutchings
is carries some risk of regression for users building custom kernels or out-of-tree module. So perhaps we should revert it for stretch and buster? Ben. -- Ben Hutchings Teamwork is essential - it allows you to blame someone else. signature.asc Description: This is a digitally signed message part

Re: release notes mentioning dropped support?

2021-06-11 Thread Ben Hutchings
y the limits vary. flash-kernel is responsible for copying the kernel and initramfs to these partitions. When the kernel is too large, it will report an error, which should abort the package installation. To avoid this, users should keep the buster sources enabled and, before upgrading, add an APT preferences file containing something like: Package: linux-image-marvell Pin: release a=buster Pin-Priority: 900 (not tested). Obviously this will only work as long as buster is supported. Ben. -- Ben Hutchings Knowledge is power. France is bacon. signature.asc Description: This is a digitally signed message part

Re: Linux freeze 5.10.0.7

2021-06-06 Thread Ben Hutchings
e -a > > Linux teal 5.10.0-6-amd64 #1 SMP Debian 5.10.28-1 (2021-04-09) x86_64 > > GNU/Linux > > > > Laptop: Lenovo Ideapad 5 14ARE05 > > You've reached the team responsible for the installer. Please file a > bug report against the Linux kernel, I suppose by r

Re: vmlinuz-5.10.0-7-686-pae task blocked for more...

2021-06-05 Thread Ben Hutchings
__mutex_lock_slowpath+0x12/0x20 > Jun 4 17:48:14 m3n kernel: [ 605.618355] mutex_lock+0x2f/0x40 > Jun 4 17:48:14 m3n kernel: [ 605.618360] rtnl_lock+0x12/0x20 [...] This seems to be a problem with networking, not graphics. Ben. -- Ben Hutchings Quantity is no substitute for quality, but it's the only one we've got. signature.asc Description: This is a digitally signed message part

Bug#989010: linux-image-5.10.0-7-amd64: No display (post, grub, boot messages and desktop) after the upgrade to 5.10.38

2021-06-05 Thread Ben Hutchings
expect to receive lots of bug reports about it, not just one. We're still waiting for the requested logs from you. Ben. -- Ben Hutchings Kids! Bringing about Armageddon can be dangerous. Do not attempt it in your own home. - Terry Pratchett and Neil Gaiman, `Good Omens' signa

Bug#989509: buster-pu: package klibc/2.0.6-1+deb10u1

2021-06-05 Thread Ben Hutchings
-Nru klibc-2.0.6/debian/changelog klibc-2.0.6/debian/changelog --- klibc-2.0.6/debian/changelog2019-02-01 06:00:57.0 +0100 +++ klibc-2.0.6/debian/changelog2021-06-05 20:20:42.0 +0200 @@ -1,3 +1,19 @@ +klibc (2.0.6-1+deb10u1) buster; urgency=medium + + [ Ben Hutchings ] +

Bug#989505: Multiple security issues (CVE-2021-31870, CVE-2021-31871, CVE-2021-31872, CVE-2021-31873)

2021-06-05 Thread Ben Hutchings
Source: klibc Version: 2.0.6-1 Severity: important Tags: security klibc version 2.0.9 fixed various security issues. These are fixed in unstable but not yet in buster. They were triaged as no-dsa by the security team, so they should be fixed in a stable update instead. Ben. -- System Informati

Bug#989143: initramfs-tools: doesn’t actually compress with zstd

2021-06-05 Thread Ben Hutchings
On Sat, 2021-06-05 at 16:49 +0200, Christoph Anton Mitterer wrote: > On Sat, 2021-06-05 at 16:23 +0200, Ben Hutchings wrote: > > You have intel-microcode installed, which prepends an uncompressed > > initramfs.  Not a bug. > > Couldn't it then just skip the compression

Bug#822112: still applies to current kernels

2021-05-17 Thread Ben Hutchings
On Mon, 2021-05-17 at 20:01 +0200, Ben Hutchings wrote: > Control: tag -1 wontfix > > On Wed, 2021-05-12 at 06:16 +0300, Martin-Éric Racine wrote: > > This still applies to current kernels. > > > > The problem seems to be that kernels after version 3 implement a > &

Bug#822112: still applies to current kernels

2021-05-17 Thread Ben Hutchings
l driver. This breaks dosemu and some old user-space graphics drivers. To allow this, set the kernel parameter: iomem=relaxed Ben. -- Ben Hutchings Never attribute to conspiracy what can adequately be explained by stupidity. signature.asc Description: This is a digitally signed message part

Bug#988300: linux-kbuild-5.10: can not build nvidia-kernel-340xx-dkms

2021-05-11 Thread Ben Hutchings
the nvidia-kernel-340xx-dkms. > > The problem is, that the build of the kernel module stops and the > make.log says the following: [...] Could this be the same bug as #987575? Which version of nvidia-legacy-340xx-kernel-dkms is installed, and do you have any other out-of-tree module p

Bug#943425: [klibc] Debian #943425: klibc: [s390x] setjmp/longjmp do not save/restore all registers in use

2021-05-05 Thread Ben Hutchings
On Wed, 2021-05-05 at 20:24 +0200, Ben Hutchings wrote: > On Wed, 2021-05-05 at 17:32 +, Thorsten Glaser wrote: > [...] > > > > > @klibc list: as indicated earlier, I can provide a patch if needed > > > > > (though it should be obvious). > > > >

Bug#943425: [klibc] Debian #943425: klibc: [s390x] setjmp/longjmp do not save/restore all registers in use

2021-05-05 Thread Ben Hutchings
ibly NMU klibc in Debian? Please send patches. If you have a test base that could catch bugs like this (without writing lists of registers in the test itself), that would be really useful. Ben. -- Ben Hutchings It is easier to change the specification to fit the program than vice versa. sig

Bug#695182: linux-image-3.2.0-4-686-pae: Write couple of 1GB files for OOM crash

2021-05-02 Thread Ben Hutchings
kernel.org/show_bug.cgi?id=196157>. Ben. -- Ben Hutchings For every complex problem there is a solution that is simple, neat, and wrong. signature.asc Description: This is a digitally signed message part

Bug#823224: ld: arch/powerpc/lib/crtsavres.o: No such file: No such file or directory

2021-05-02 Thread Ben Hutchings
Control: found -1 5.10.28-1 On Sun, 2021-05-02 at 08:55 +0200, Salvatore Bonaccorso wrote: > Hi, > > On Thu, Oct 19, 2017 at 11:04:27PM +0100, Ben Hutchings wrote: > > On Thu, 2017-10-19 at 22:18 +0200, John Paul Adrian Glaubitz wrote: > > > Hi Mathieu! > > > &

Bug#987808: unblock: klibc/2.0.8-6

2021-04-29 Thread Ben Hutchings
CVE-2021-31871) + + -- Ben Hutchings Fri, 30 Apr 2021 03:05:23 +0200 + +klibc (2.0.8-5) experimental; urgency=medium + + * alpha: Fix definitions of _NSIG and struct sigaction + * ia64: Fix definition of struct sigaction + + -- Ben Hutchings Fri, 28 Aug 2020 17:41:47 +0100 + +klibc (2.0.

Bug#987575: linux-kbuild-5.10: please add Breaks: sl-modem-dkms (<< 2.9.11~20110321-16.0)

2021-04-26 Thread Ben Hutchings
rt the build: https://salsa.debian.org/kernel-team/linux/-/merge_requests/353 Ben. -- Ben Hutchings It is easier to change the specification to fit the program than vice versa. signature.asc Description: This is a digitally signed message part

Re: [Question] diff between debian kernel and stable kernel

2021-04-19 Thread Ben Hutchings
O is under a non-free license. The nvidia and riva drivers contain obfuscated source code. The other files contain executable code as static data, without any source for it. So they don't comply with DFSG. Ben. -- Ben Hutchings Humour is the best antidote to reality. signature.asc Description: This is a digitally signed message part

Bug#987115: linux-image-5.10.0-5-amd64: Sound volume fades out on right channel on AMD Family 17h HD Audio using snd_hda_intel

2021-04-19 Thread Ben Hutchings
[...] This sounds very much like a hardware fault. Is the behaviour any different with an older kernel version? Ben. -- Ben Hutchings Humour is the best antidote to reality. signature.asc Description: This is a digitally signed message part

Bug#986863: linux: Serial terminal for RPi 4 and p400 corrupted during bootup

2021-04-16 Thread Ben Hutchings
requency changes, the UART baud rate will also change." (from <https://www.raspberrypi.org/documentation/configuration/uart.md>). Ben. -- Ben Hutchings Once a job is fouled up, anything done to improve it makes it worse. signature.asc Description: This is a digitally signed message part

Bug#986741: Please enable CONFIG_IP_PNP_DHCP=y in cloud image

2021-04-12 Thread Ben Hutchings
[Added Noah to cc.] On Sun, 2021-04-11 at 18:44 -0700, Josh Triplett wrote: > On Sun, Apr 11, 2021 at 10:45:27PM +0200, Ben Hutchings wrote: > > Control: reassign -1 initramfs-tools > > Control: tag -1 - wontfix > > Control: forcemerge 789067 -1 > > > > On Sat

Bug#986741: Please enable CONFIG_IP_PNP_DHCP=y in cloud image

2021-04-11 Thread Ben Hutchings
legacy boot parameters. Moving this to initramfs-tools and merging it with the existing bug there. Ben. -- Ben Hutchings Life would be so much easier if we could look at the source code. signature.asc Description: This is a digitally signed message part

Bug#985801: linux: Missing Breaks relation to fwupdate

2021-03-23 Thread Ben Hutchings
Source: linux Version: 5.10.24-1 Severity: important X-Debbugs-Cc: debian-...@lists.debian.org fwupdate in buster uses a Debian-specific install script that checks that /sys/firmware/efi/vars exists and does not install files in the ESP otherwise. This kernel interface has been deprecated for som

Bug#984650: update-initramfs fails when /etc/systemd/network/99-default.link is symlink to /dev/null

2021-03-07 Thread Ben Hutchings
updating the status. Also reassigning this to udev, as that is the package that actually does the copying of /etc/systemd/network. Ben. -- Ben Hutchings For every complex problem there is a solution that is simple, neat, and wrong. signature.asc Description: This is a digitally signed message part

Bug#984650: update-initramfs fails when /etc/systemd/network/99-default.link is symlink to /dev/null

2021-03-06 Thread Ben Hutchings
ev/null is always empty and would be copied as an empty file. This is the correct target for symlinks when you want to disable a systemd unit. /dev/zero is an infinite stream of binary zeroes and would result in the behaviour you saw. Ben. -- Ben Hutchings Knowledge is power. France is

Bug#981492: linux-source-5.10: Module-only builds failing since 39a8b293

2021-02-14 Thread Ben Hutchings
Control: tag -1 patch moreinfo Does this fix it? Ben. -- Ben Hutchings 73.46% of all statistics are made up. --- a/scripts/Makefile.modfinal +++ b/scripts/Makefile.modfinal @@ -28,7 +28,7 @@ quiet_cmd_cc_o_c = CC [M] $@ $(call if_changed_dep,cc_o_c) ARCH_POSTLINK := $(wildcard $(srctree

Bug#890343: linux: make fq_codel default for default_qdisc

2021-01-20 Thread Ben Hutchings
derivatives that want different defaults. procps is the wrong place, not just because it's out of our hands, but because systemd applies sysctl configuration now and procps is optional. Ben. > AFAIK, there are no guidelines or policy anywhere in Debian about > whether or not a packag

Re: looking to use loop-AES with initramfs tools and root

2021-01-07 Thread Ben Hutchings
tsetup. > So, I guess cryptsetup-initramfs is a good place to look into in order > to achieve my goal right? So long as this is just for a local package, sure. I can't speak for the cryptsetup maintainer, but I wouldn't expect patches to support the old loop-aes to be accepted into

Bug#978758: linux-image-5.5.0-0.bpo.2-amd64: Fails to suspend with „Some devices failed to suspend, or early wake event detected”

2020-12-31 Thread Ben Hutchings
; > When I invoke suspend using: > # systemctl suspend > machine starts suspending but after turning off monitor and disks > spinning, it wakes up again. > It used to work on the same machine - I'm not sure after which > upgrade it failed. [...] Does it work with the bu

Bug#977126: linux: No armel kernel can be booted by grub-efi-arm:armel

2020-12-13 Thread Ben Hutchings
doc/README.qemu-arm It won't - it has very different hardware. Even the CPU will be incompatible (ARMv7 whereas marvell is built for v5). Ben. linux-image-marvell seems capable of handling PCI serial ports. Storage options for QEMU VM seems only "ich9-ahci" and "sdhci-pci"...

Bug#977245: openssh-server: Kernel error after big rsync or scp

2020-12-13 Thread Ben Hutchings
tl. Please advise. You'll need to capture the kernel log using a serial console <https://www.kernel.org/doc/html/latest/admin-guide/serial-console.html> or netconsole <https://www.kernel.org/doc/html/latest/networking/netconsole.html>. Ben. -- Ben Hutchings The two most common thing

Bug#977126: linux: No armel kernel can be booted by grub-efi-arm:armel

2020-12-13 Thread Ben Hutchings
e (is there anything else??). The usual practice is to use u-boot or some other board-specific boot loader, which can be configured by the flash-kernel package. I don't think that works in QEMU. Ben. > So I resorted to the UEFI booting. > Currently I proposes to use linux-image-armmp

Bug#939633: More severe #939633 for RP4 on 5.8?

2020-12-13 Thread Ben Hutchings
, and need to be fixed there. No- one's deliberately breaking this in Debian, and you had better stop making accusations like that. Ben. -- Ben Hutchings The two most common things in the universe are hydrogen and stupidity. signature.asc Description: This is a digitally signed message part

Bug#974646: ver2_02 is in firmware-misc-nonfree, ver2_01 is not

2020-12-13 Thread Ben Hutchings
s a kernel bug. We need to pick this upstream commit that updates the requested firmware versions: commit 5bf7919d530a2e1456ae602fccf365c213a4db4f Author: José Roberto de Souza Date: Thu Aug 13 13:00:28 2020 -0700 drm/i915: Update TGL and RKL DMC firmware versions Ben. -- Ben Hut

Bug#977126: linux: No armel kernel can be booted by grub-efi-arm:armel

2020-12-13 Thread Ben Hutchings
its size further by enabling EFI support. The rpi flavour doesn't have those constraints, though. What would be the benefit of booting it in UEFI mode? Ben. -- Ben Hutchings The two most common things in the universe are hydrogen and stupidity. signature.asc Description: This is a digitally signed message part

Bug#977245: openssh-server: Kernel error after big rsync or scp

2020-12-13 Thread Ben Hutchings
s. Right, we can't do anything useful without that. Also, are you using the on-board Ethernet or a separate adapter in the RockPro64? Ben. -- Ben Hutchings The two most common things in the universe are hydrogen and stupidity. signature.asc Description: This is a digitally signed message part

Bug#898446: Please reconsider enabling the user namespaces by default

2020-12-13 Thread Ben Hutchings
On Tue, 2020-11-17 at 17:19 +, Ben Hutchings wrote: > On Tue, 2020-11-17 at 11:18 -0500, Antoine Beaupré wrote: > [...] > > Could we get a little more hard data about the attack vectors here? I > > totally trust the security team's "gut feeling" on this, but it

Bug#974939: machine does not boot

2020-11-23 Thread Ben Hutchings
On Mon, 2020-11-23 at 10:04 +, Toni Mueller wrote: > > Hi Ben! > > On Tue, Nov 17, 2020 at 11:26:53AM +, Ben Hutchings wrote: > > On Mon, 2020-11-16 at 19:41 +, Toni wrote: > > > Package: src:linux > > > Version: 4.19.152-1 > > > Severit

Bug#972709: Wishlist/RFC: Change to CONFIG_PREEMPT_NONE in linux-image-cloud-*

2020-11-22 Thread Ben Hutchings
nsive benchmarks of kernel > CONFIG_PREEMPT* options. The one at > https://www.codeblueprint.co.uk/2019/12/23/linux-preemption-latency-throughput.html > > seems to be very thorough, [...] Not particularly. I'm used to latency benchmarks showing e.g. average, 90th percentile, 9

Bug#898446: Please reconsider enabling the user namespaces by default

2020-11-17 Thread Ben Hutchings
the > our tradeoff's evaluation is well adjusted here, especially considering > a lot of user_ns consumers are bypassing those restrictions by running > as root anyways... I tend to agree with this. Ben. > It seems that, in those cases, we're getting the worst of both worlds...

Bug#974939: machine does not boot

2020-11-17 Thread Ben Hutchings
nd > Cannot process volume group ev0 [...] If you wait for about 30 seconds you should get a shell with the prompt "(initramfs)". At the shell prompt, run: ls -l /dev/nvme* Are the expected partitions listed? Ben. -- Ben Hutchings Usenet is essentially a HUGE grou

<    1   2   3   4   5   6   7   8   9   10   >