On Sat, 2022-06-18 at 16:21 +0200, Ben Hutchings wrote:
[...]
> Incidentally, this is a failure rate of 75 out of 4,967,591 signatures,
> or 0.0015%
[...]
Or maybe not so incidentally: 4,967,591 / 2^16 ~= 75
Ben.
--
Ben Hutchings
The Peter principle: In a hierarchy, every employee te
On Thu, 2022-06-16 at 01:28 +0200, Ben Hutchings wrote:
[...]
> linux-image-4.19.0-17-amd64 4.19.194-1
> lib/modules/4.19.0-17-amd64/kernel/drivers/dma/dw/dw_dmac_core.ko
> linux-image-4.19.0-17-amd64 4.19.194-2
> lib/modules/4.19.0-17-amd64/kernel/drivers/dma/dw/dw_dmac_core.ko
&
On Mon, 2022-06-13 at 18:23 +0200, Ben Hutchings wrote:
[...]
> I can confirm that this module does not load, and this means it has an
> invalid signature. The detached signature present in the source
> package seems to be truncated (408 bytes long, where for all other
> modules
ly fixed in stretch and buster (wchan shows function names for
most sleeping threads, subject to privilege check)
- broken again in bullseye
- fully fixed in 5.16.14-1 (wchan shows function names for all sleeping
threads, subject to privilege check)
Given that, I think this can be closed with v
On Mon, 2022-06-13 at 17:46 +0200, Diederik de Haas wrote:
> On Monday, 13 June 2022 16:56:35 CEST Ben Hutchings wrote:
> > We made the decision that the benefits of sandboxing with user
> > namespaces are likely to outweigh the risks, on most systems. Nothing
> > you
d, but for a different module
(xt_l2tp).
Since the truncated signatures are in the source packages, this is a
problem introduced by the code signing service and will need to be
fixed there.
Ben.
--
Ben Hutchings
It's easier to fight for one's principles than to live up to them.
signature.asc
Description: This is a digitally signed message part
ion that the benefits of sandboxing with user
namespaces are likely to outweigh the risks, on most systems. Nothing
you've said convinces me to alter that assessment.
Ben.
--
Ben Hutchings
It's easier to fight for one's principles than to live up to them.
signature.asc
Descript
e in this case.
> (or push real links to /etc/alternatives/regulatory.db would work too)
I don't think it's right to include symlinks in the package that are
supposed to be managed by update-alternatives. I would rather fix this
up in the postinst script.
Ben.
--
Ben Hutchings
It
sg2.html
>
> Hi again,
>
> I just noticed that iw 5.19 is out and I'd like to package it. Looks
> like a good occasion to move the repo under the kernel team.
>
> I'm totally fine with a NACK, but it would be a pity to skip what I
> believe is an improveme
rk with the kernel parameter "intel_iommu=on". Can you test
whether that makes a difference with the Debian kernels?
Ben.
> or the negated value, not sure at the moment, what a y or n should mean
> in this config and if the assignments of 0 or 1 are correct everywhere.
--
Ben
es.
One thing we could perhaps do in initramfs-tools is to add a
configuration variable that lets you override which firmware files get
included (like MODULES=list, but for firmware). Would that work for
you?
Ben.
--
Ben Hutchings
Horngren's Observation:
Among economists, the
ould
welcome other kernel team members to work with me on the list of
interesting changes and to be co-speakers.
Ben.
--
Ben Hutchings
This sentence contradicts itself - no actually it doesn't.
signature.asc
Description: This is a digitally signed message part
On Tue, 2022-05-17 at 15:36 +0200, Tobias Koeck wrote:
> Hi everyone,
>
> is there a plan to package the 5.18-rc7+ kernel package into the
> experimental branch?
Yes, we have been working on an update to 5.18. Hopefully that will be
ready to upload later this week.
Ben.
--
Ben Hu
tion about
what went wrong. Could you please look back through the log to find an
"oops" log that includes "not tainted"?
Ben.
--
Ben Hutchings
Man invented language to satisfy his deep need to complain.
- Lily Tomlin
signature.asc
Description: This is a digitally signed message part
se contact the upstream maintainers about this at
.
Ben.
--
Ben Hutchings
Man invented language to satisfy his deep need to complain.
- Lily Tomlin
signature.asc
Description: This is a digitally signed message part
he main one - see
<https://salsa.debian.org/help/user/project/repository/forking_workflow.md>.
Once you've done that, you should be able to push a branch to your
repository and open an MR - see
<https://salsa.debian.org/help/user/project/merge_requests/creating_merge_requests.md>.
Ben.
tramfs, then you should make sure the initramfs-
tools and kernel configurations agree on which compression method to
use.
Ben.
--
Ben Hutchings
To err is human; to really foul things up requires a computer.
signature.asc
Description: This is a digitally signed message part
ld dependency should be resolved by the
> build-dep installation via the respective *.dsc file.
There is already a build-dependency:
gcc-arm-linux-gnueabihf [arm64]
How are you trying to build the package? Can you reproduce this with
the current version in unstable?
Ben.
--
Ben Hutchings
;;
> +
> + /dev/zd[0-9]*)
> + report_verbose "Rejecting $resume_auto since it is
> zvol"
> + ephemeral=true
> + ;;
> esac
>
> $ephemeral
On Sun, 2022-04-10 at 23:00 +0100, Luca Boccassi wrote:
> On Sun, 2022-04-10 at 23:58 +0200, Ben Hutchings wrote:
> > On Sun, 2022-04-10 at 21:48 +0100, Luca Boccassi wrote:
> > > On Sun, 2022-04-10 at 20:31 +0200, Ben Hutchings wrote:
> > > > On Fri, 2022-04-01 at 22
w.
Ben.
Alper Nebi Yasak (1):
hook-functions: Include io-domain in dw_mmc-rockchip hidden dependencies
Ariel D'Alessandro (1):
hook-functions: Add nvmem-imx-ocotp driver module to network boot
Ben Hutchings (21):
Only run shellcheck in Salsa CI
Fix shellcheck war
On Sun, 2022-04-10 at 21:48 +0100, Luca Boccassi wrote:
> On Sun, 2022-04-10 at 20:31 +0200, Ben Hutchings wrote:
> > On Fri, 2022-04-01 at 22:05 +0100, Luca Boccassi wrote:
> > > Hello Kernel Team,
> > >
> > > I have been maintaining iproute2 for more than f
all,
> it's maintained upstream in the kernel infrastructure too, and it's
> very closely related.
>
> (previous maintainers CC'ed as FYI)
>
> Thoughts?
Yes, I think this would be a good fit for the kernel team.
Ben.
--
Ben Hutchings
The program is absolutely rig
s
and small fixes, none of them being addressed by the supposed
maintainer of the filesystem (who last posted at the end of November).
I think that we would be doing our users a disservice by enabling ntfs3
in this state.
Ben.
--
Ben Hutchings
If the facts do not conform to your theory, t
It has a
default timeout (ct_wait field) that can be set with CLNT_CONTROL(...,
CLSET_TIMEOUT, ...), but nfs-utils doesn't seem to do that. So it
seems like there is a default timeout of 0!
Ben.
--
Ben Hutchings
Beware of programmers who carry screwdrivers. - Leonard Brandwein
signature.
tFile=' row in 'nfs-client' and 'nfs-
server' so environment varialbles are not read.
They don't need it. Each daemon has its own unit that (in this
version) does use EnvironmentFile.
What is the actual problem you are trying to solve?
Ben.
--
Ben Hutchings
Beware of programmers who carry screwdrivers. - Leonard Brandwein
signature.asc
Description: This is a digitally signed message part
/etc/default/nfs-kernel-server config file, it clearly
"disables svcgssd" :
[...]
These flags only affect the init scripts, not systemd. Use systemctl
to disable or enable daemons under systemd.
Ben.
--
Ben Hutchings
Beware of programmers who carry screwdrivers. - Leonard Brandwei
e only 2
people on the team, and they are volunteers like the rest of us. The
only likely solution to this is for more people to step up and join
that team.
Ben.
--
Ben Hutchings
Never put off till tomorrow what you can avoid all together.
signature.asc
Description: This is a digitally signed message part
It'd be nice to use /bin/sh.
[...]
This is true, but it sources /etc/default/nfs-common which could
contain bashisms. I don't think this is worth the risk.
Ben.
--
Ben Hutchings
It's easier to fight for one's principles than to live up to them.
signature.asc
Description: This is a digitally signed message part
]
I/O scheduling priority can already be set through systemd service
configuration. I don't anticipate adding any new features to the
Debian-specific init scripts.
Ben.
--
Ben Hutchings
It's easier to fight for one's principles than to live up to them.
signature.asc
Description: This is a digitally signed message part
e constraints. The
> latest available version is 5.10.92 [1]. The vulnerability was fixed in
> 5.10.102 [2]. I am assuming the current kernel is vulnerable?
[...]
The fix was included in Debian version 5.10.92-2. I'll update the
version in buster-backports shortly.
Ben.
--
Ben
ome support for use in cross-compilation but I
don't know how well it works now.
Ben.
--
Ben Hutchings
Q. Which is the greater problem in the world today,
ignorance or apathy?
A. I don't know and I couldn't care less.
From ed870df3c0ab3d60aa60cf509ee6c3d10ab41276 Mon Sep 17 00:00:00
/ch-common-tasks.html#s-common-official
(This is normally also available online but that server is currently
down.)
Ben.
--
Ben Hutchings
The first rule of tautology club is the first rule of tautology club.
From 139819f9b8009144f15a6659ce767023a0583ef8 Mon Sep 17 00:00:00 2001
From: Ben Hutchings
followed
> > the Debian instructions that we would then sign the kernel using the
> > keys they previously generated.
>
>
> If I am not wrong, extracting the key path from
> CONFIG_MODULE_SIG_KEY is not Debian's way.
>
>
> I checked the kernel configuration on bullseye,
> CONFIG_MODULE_SIG_KEY is empty,
> while the module signing itself is enabled.
[...]
For Debian's own packages, we didn't want to use ephemeral module
signing keys (which break reproducibility) or to expose signing keys to
the regular build machines. Instead, Debian has a separate signing
service that handles the few packages that need it.
The closest thing to "the Debian way" for signing custom kernels would
be that wiki page. But personally, I think making each computer build
and sign its own kernel and modules undermines any value that Secure
Boot could provide.
Ben.
--
Ben Hutchings
Who are all these weirdos? - David Bowie, on joining IRC
signature.asc
Description: This is a digitally signed message part
nux (upstream deb-pkg)
- xen
- kfreebsd-N
- grub
- flash-kernel
- all those obscure boot loaders we hoped were gone
It's going to take some time and effort to change all of those, so we
would need good arguments for why all the other maintainers should
bother with it, and we would need to plan for a gradual transition.
Ben.
--
Ben Hutchings
Computers are not intelligent. They only think they are.
signature.asc
Description: This is a digitally signed message part
e automatically
> searched for the listed files/directories relative to debian/tmp/
> as well as in the top directory.
[...]
That's not what broke things, it's the change to an out-of-tree build.
Ben.
--
Ben Hutchings
Hoare's Law of Large Problems:
Inside ever
as root on a VM. But currently
neither salsa-ci nor ci.debian.net implements this, so those tests will
be skipped.
Another option in autopkgtests is to depend on qemu and start the VM
yourself. This is not easy to do, but I implemented it for initramfs-
tools.
Ben.
--
Ben Hutchings
I
Package: ftp.debian.org
Severity: normal
X-Debbugs-Cc: debian-kernel@lists.debian.org
crda is used to load the data from wireless-regdb into the Linux
kernel. Linux 4.15 implemented direct loading of the data by the
kernel, and this is not an optional feature (whereas continued support
for crda i
ear that in master, zstd with compression level 9
is now the default. The -T0 option is still unconditional though...
I have no idea whether the lz4 options should be changed. I'm not sure
it's actually a good choice for anyone.
Ben.
--
Ben Hutchings
I say we take off; nuk
On Fri, 2021-11-12 at 11:39 -0300, Arnaldo Carvalho de Melo wrote:
> Em Thu, Nov 11, 2021 at 10:34:33PM -0800, Ian Rogers escreveu:
> > Hi,
>
> > Debian currently tries to match the Linux perf tool to the version of
> > the kernel that it is being run upon. Reaching out
salsa.debian.org, where
you can send merge requests. If linux-perf is to be a separate source
package, I think it should be maintained in the same way.
> 4) some how get the previous Debian linux-perf-[45].* packages removed
[...]
They will be removed from the Debian archive through a periodic
c
m where ABI-
compatible out-of-tree modules are automatically linked into a new
version's modules directory without rebuilding them. In that case we
would still need to implement item (2) above.
Ben.
--
Ben Hutchings
This sentence contradicts itself - no actually it doesn't.
signature.asc
Description: This is a digitally signed message part
On Tue, 2021-11-30 at 05:19 +0200, Горбешко Богдан wrote:
> On 30.11.2021 01:57, Ben Hutchings wrote:
> >
> > About 59 MiB, so again most of the increase.
> >
> > It appears that BTF in modules was enabled in Linux 5.11 by
> &
being enabled. Without
doing some full rebuilds it's not possible to separate these.
That leaves about 10 MiB of the increase in installed module size not
yet explained.
Ben.
--
Ben Hutchings
This sentence contradicts itself - no actually it doesn't.
signature.asc
Description: This is a digitally signed message part
e are at
<https://kernel-team.pages.debian.net/kernel-handbook/ch-common-tasks.html#s-common-official>.
I agree that you should check whether this fixes the coldplug error
before we try rebuilding the installer.
Ben.
--
Ben Hutchings
Design a system any fool can use, and only a fool will w
On Tue, 2021-08-24 at 15:19 -0400, Chuck Zmudzinski wrote:
> On 8/24/2021 1:12 PM, Ben Hutchings wrote:
[...]
> > I think a proper fix would be one of:
> >
> > a. If the Xen virtual keyboard driver is advertising capabilities it
> > doesn't have, stop
On Tue, Aug 24, 2021 at 03:27:19PM -0400, Phillip Susi wrote:
>
> Ben Hutchings writes:
>
> > I think a proper fix would be one of:
> >
> > a. If the Xen virtual keyboard driver is advertising capabilities it
> >doesn't have, stop it doing that.
> &
ng capabilities it
doesn't have, stop it doing that.
b. Change the implementation of modalias attributes to allow longer
values.
It's not clear to me whether the Xen driver is advertising correctly or
not. If it is, then the solution should be b, but that may be too
disruptive a change to the kernel. So a reasonable workaround might
be:
c. Change the input subsystem to limit the length of the
capabilities part of the modalias.
Ben.
--
Ben Hutchings
73.46% of all statistics are made up.
signature.asc
Description: This is a digitally signed message part
th the proposed copyright file. I have fixed
> > > them; please find the attached patch to the packaging.
> >
> > Of course, once again I’ve forgotten something:
> >
> > Files: debian/*
> > Copyright:
> > 2005 Jeff Bailey
> > 2005-2014 maxi
hat's expected. The kernel driver and firmware are two different
things that work together. Installing the firmware should allow
nouveau to work properly.
Are you saying that even with firmware-misc-nonfree installed, you
still get a black screen when you don't use "nomodeset"?
roc_dointvec_minmax,
- .extra1 = SYSCTL_ONE,
+ .extra1 = SYSCTL_ZERO,
.extra2 = SYSCTL_ONE,
},
{
--- END ---
Ben.
--
Ben Hutchings
It is easier to write an incorrect program
than to understand a correct one.
si
Source: firmware-nonfree
Version: 20210315-2
Severity: serious
Tags: pending
X-Debbugs-Cc: k...@debian.org, debian-b...@lists.debian.org
The binary firmware packages built from firmware-nonfree currently
include metanfo.xml files with a list of filenames of the firmware in
them. These files are i
orted
[...]
This means the driver doesn't support this variant of the hardware.
It's not a firmware problem.
That appears to be fixed in 5.12 by:
commit 5d6651fe85837b11564a2e2c3c6279c057d078d6
Author: Guo-Feng Fan
Date: Tue Feb 2 13:50:12 2021 +0800
rtw88: 8821c: supp
ny-initramfs-core tlp
> xml-core
cryptsetup is needed (and cryptsetup-initramfs depends on it).
Ben.
--
Ben Hutchings
Kids! Bringing about Armageddon can be dangerous. Do not attempt it
in your own home. - Terry Pratchett and Neil Gaiman, `Good Omens'
signature.asc
Description: This i
ing in a empty microSD card.
>
> This is the last line of the sceen output:
> end Kernel panic - not syncing; stack-protector: Kernel stack is
> corrupted in generic_file_buffered_read+0xc2c/0xc30
We would need to see the full output to start investigating this. If
you're using
On Mon, 2021-07-19 at 20:37 +0200, Ben Hutchings wrote:
> On Wed, 2021-07-14 at 10:38 +0200, Julian Schreck wrote:
> > Dear Sir or Madam,
> > after an update of my packages (in debian stable for amd64 [1]), which
> > included a newer kernel (from 4.19.0-16 to
> > 4.1
I'm not sure.
> Note: My disk is encrypted.
[...]
Make sure you still have cryptsetup-initramfs installed.
Ben.
--
Ben Hutchings
Absolutum obsoletum. (If it works, it's out of date.) - Stafford Beer
signature.asc
Description: This is a digitally signed message part
uid 0 inside the
user namespace, and may have some capabilities there" - then yes, it is
possible for root to create a user namespace belonging to another user.
(I don't know exactly how to do that, though.)
Ben.
--
Ben Hutchings
The program is absolutely right; therefore, the computer must be wrong.
signature.asc
Description: This is a digitally signed message part
ackage: linux-image-marvell
> > +Pin: release a=buster
> > +Pin-Priority: 900
> > +
> > + Obviously, the security support for this configuration will
> > + end with the End Of Life of buster.
>
> Obviously, the security support for this configurat
is carries some risk of regression for users building
custom kernels or out-of-tree module. So perhaps we should revert it
for stretch and buster?
Ben.
--
Ben Hutchings
Teamwork is essential - it allows you to blame someone else.
signature.asc
Description: This is a digitally signed message part
y the limits vary. flash-kernel is responsible for copying
the kernel and initramfs to these partitions. When the kernel is too
large, it will report an error, which should abort the package
installation.
To avoid this, users should keep the buster sources enabled and, before
upgrading, add an APT preferences file containing something like:
Package: linux-image-marvell
Pin: release a=buster
Pin-Priority: 900
(not tested). Obviously this will only work as long as buster is
supported.
Ben.
--
Ben Hutchings
Knowledge is power. France is bacon.
signature.asc
Description: This is a digitally signed message part
e -a
> > Linux teal 5.10.0-6-amd64 #1 SMP Debian 5.10.28-1 (2021-04-09) x86_64
> > GNU/Linux
> >
> > Laptop: Lenovo Ideapad 5 14ARE05
>
> You've reached the team responsible for the installer. Please file a
> bug report against the Linux kernel, I suppose by r
__mutex_lock_slowpath+0x12/0x20
> Jun 4 17:48:14 m3n kernel: [ 605.618355] mutex_lock+0x2f/0x40
> Jun 4 17:48:14 m3n kernel: [ 605.618360] rtnl_lock+0x12/0x20
[...]
This seems to be a problem with networking, not graphics.
Ben.
--
Ben Hutchings
Quantity is no substitute for quality, but it's the only one we've got.
signature.asc
Description: This is a digitally signed message part
expect to receive lots of bug reports about it, not
just one.
We're still waiting for the requested logs from you.
Ben.
--
Ben Hutchings
Kids! Bringing about Armageddon can be dangerous. Do not attempt it
in your own home. - Terry Pratchett and Neil Gaiman, `Good Omens'
signa
-Nru klibc-2.0.6/debian/changelog klibc-2.0.6/debian/changelog
--- klibc-2.0.6/debian/changelog2019-02-01 06:00:57.0 +0100
+++ klibc-2.0.6/debian/changelog2021-06-05 20:20:42.0 +0200
@@ -1,3 +1,19 @@
+klibc (2.0.6-1+deb10u1) buster; urgency=medium
+
+ [ Ben Hutchings ]
+
Source: klibc
Version: 2.0.6-1
Severity: important
Tags: security
klibc version 2.0.9 fixed various security issues. These are fixed in
unstable but not yet in buster. They were triaged as no-dsa by the
security team, so they should be fixed in a stable update instead.
Ben.
-- System Informati
On Sat, 2021-06-05 at 16:49 +0200, Christoph Anton Mitterer wrote:
> On Sat, 2021-06-05 at 16:23 +0200, Ben Hutchings wrote:
> > You have intel-microcode installed, which prepends an uncompressed
> > initramfs. Not a bug.
>
> Couldn't it then just skip the compression
On Mon, 2021-05-17 at 20:01 +0200, Ben Hutchings wrote:
> Control: tag -1 wontfix
>
> On Wed, 2021-05-12 at 06:16 +0300, Martin-Éric Racine wrote:
> > This still applies to current kernels.
> >
> > The problem seems to be that kernels after version 3 implement a
> &
l driver. This breaks dosemu
and some old user-space graphics drivers. To allow this, set the
kernel parameter: iomem=relaxed
Ben.
--
Ben Hutchings
Never attribute to conspiracy what can adequately be explained
by stupidity.
signature.asc
Description: This is a digitally signed message part
the nvidia-kernel-340xx-dkms.
>
> The problem is, that the build of the kernel module stops and the
> make.log says the following:
[...]
Could this be the same bug as #987575?
Which version of nvidia-legacy-340xx-kernel-dkms is installed, and do
you have any other out-of-tree module p
On Wed, 2021-05-05 at 20:24 +0200, Ben Hutchings wrote:
> On Wed, 2021-05-05 at 17:32 +, Thorsten Glaser wrote:
> [...]
> > > > > @klibc list: as indicated earlier, I can provide a patch if needed
> > > > > (though it should be obvious).
> >
> >
ibly NMU klibc in Debian?
Please send patches. If you have a test base that could catch bugs
like this (without writing lists of registers in the test itself), that
would be really useful.
Ben.
--
Ben Hutchings
It is easier to change the specification to fit the program
than vice versa.
sig
kernel.org/show_bug.cgi?id=196157>.
Ben.
--
Ben Hutchings
For every complex problem
there is a solution that is simple, neat, and wrong.
signature.asc
Description: This is a digitally signed message part
Control: found -1 5.10.28-1
On Sun, 2021-05-02 at 08:55 +0200, Salvatore Bonaccorso wrote:
> Hi,
>
> On Thu, Oct 19, 2017 at 11:04:27PM +0100, Ben Hutchings wrote:
> > On Thu, 2017-10-19 at 22:18 +0200, John Paul Adrian Glaubitz wrote:
> > > Hi Mathieu!
> > >
&
CVE-2021-31871)
+
+ -- Ben Hutchings Fri, 30 Apr 2021 03:05:23 +0200
+
+klibc (2.0.8-5) experimental; urgency=medium
+
+ * alpha: Fix definitions of _NSIG and struct sigaction
+ * ia64: Fix definition of struct sigaction
+
+ -- Ben Hutchings Fri, 28 Aug 2020 17:41:47 +0100
+
+klibc (2.0.
rt the
build:
https://salsa.debian.org/kernel-team/linux/-/merge_requests/353
Ben.
--
Ben Hutchings
It is easier to change the specification to fit the program
than vice versa.
signature.asc
Description: This is a digitally signed message part
O is under a non-free license. The nvidia and
riva drivers contain obfuscated source code. The other files contain
executable code as static data, without any source for it. So they
don't comply with DFSG.
Ben.
--
Ben Hutchings
Humour is the best antidote to reality.
signature.asc
Description: This is a digitally signed message part
[...]
This sounds very much like a hardware fault. Is the behaviour any
different with an older kernel version?
Ben.
--
Ben Hutchings
Humour is the best antidote to reality.
signature.asc
Description: This is a digitally signed message part
requency changes, the UART baud rate will also change."
(from
<https://www.raspberrypi.org/documentation/configuration/uart.md>).
Ben.
--
Ben Hutchings
Once a job is fouled up, anything done to improve it makes it worse.
signature.asc
Description: This is a digitally signed message part
[Added Noah to cc.]
On Sun, 2021-04-11 at 18:44 -0700, Josh Triplett wrote:
> On Sun, Apr 11, 2021 at 10:45:27PM +0200, Ben Hutchings wrote:
> > Control: reassign -1 initramfs-tools
> > Control: tag -1 - wontfix
> > Control: forcemerge 789067 -1
> >
> > On Sat
legacy boot parameters. Moving this to initramfs-tools and merging
it with the existing bug there.
Ben.
--
Ben Hutchings
Life would be so much easier if we could look at the source code.
signature.asc
Description: This is a digitally signed message part
Source: linux
Version: 5.10.24-1
Severity: important
X-Debbugs-Cc: debian-...@lists.debian.org
fwupdate in buster uses a Debian-specific install script that checks
that /sys/firmware/efi/vars exists and does not install files in the
ESP otherwise.
This kernel interface has been deprecated for som
updating the status. Also reassigning this to udev, as that is
the package that actually does the copying of /etc/systemd/network.
Ben.
--
Ben Hutchings
For every complex problem
there is a solution that is simple, neat, and wrong.
signature.asc
Description: This is a digitally signed message part
ev/null is always empty
and would be copied as an empty file. This is the correct target for
symlinks when you want to disable a systemd unit. /dev/zero is an
infinite stream of binary zeroes and would result in the behaviour you
saw.
Ben.
--
Ben Hutchings
Knowledge is power. France is
Control: tag -1 patch moreinfo
Does this fix it?
Ben.
--
Ben Hutchings
73.46% of all statistics are made up.
--- a/scripts/Makefile.modfinal
+++ b/scripts/Makefile.modfinal
@@ -28,7 +28,7 @@ quiet_cmd_cc_o_c = CC [M] $@
$(call if_changed_dep,cc_o_c)
ARCH_POSTLINK := $(wildcard $(srctree
derivatives that
want different defaults.
procps is the wrong place, not just because it's out of our hands, but
because systemd applies sysctl configuration now and procps is
optional.
Ben.
> AFAIK, there are no guidelines or policy anywhere in Debian about
> whether or not a packag
tsetup.
> So, I guess cryptsetup-initramfs is a good place to look into in order
> to achieve my goal right?
So long as this is just for a local package, sure.
I can't speak for the cryptsetup maintainer, but I wouldn't expect
patches to support the old loop-aes to be accepted into
;
> When I invoke suspend using:
> # systemctl suspend
> machine starts suspending but after turning off monitor and disks
> spinning, it wakes up again.
> It used to work on the same machine - I'm not sure after which
> upgrade it failed.
[...]
Does it work with the bu
doc/README.qemu-arm
It won't - it has very different hardware. Even the CPU will be
incompatible (ARMv7 whereas marvell is built for v5).
Ben.
linux-image-marvell seems capable of handling PCI serial ports.
Storage options for QEMU VM seems only "ich9-ahci" and "sdhci-pci"...
tl. Please advise.
You'll need to capture the kernel log using a serial console
<https://www.kernel.org/doc/html/latest/admin-guide/serial-console.html>
or netconsole
<https://www.kernel.org/doc/html/latest/networking/netconsole.html>.
Ben.
--
Ben Hutchings
The two most common thing
e (is there anything else??).
The usual practice is to use u-boot or some other board-specific boot
loader, which can be configured by the flash-kernel package. I don't
think that works in QEMU.
Ben.
> So I resorted to the UEFI booting.
> Currently I proposes to use linux-image-armmp
, and need to be fixed there. No-
one's deliberately breaking this in Debian, and you had better stop
making accusations like that.
Ben.
--
Ben Hutchings
The two most common things in the universe are hydrogen and stupidity.
signature.asc
Description: This is a digitally signed message part
s a kernel bug.
We need to pick this upstream commit that updates the requested
firmware versions:
commit 5bf7919d530a2e1456ae602fccf365c213a4db4f
Author: José Roberto de Souza
Date: Thu Aug 13 13:00:28 2020 -0700
drm/i915: Update TGL and RKL DMC firmware versions
Ben.
--
Ben Hut
its size further by enabling EFI support.
The rpi flavour doesn't have those constraints, though. What would be
the benefit of booting it in UEFI mode?
Ben.
--
Ben Hutchings
The two most common things in the universe are hydrogen and stupidity.
signature.asc
Description: This is a digitally signed message part
s.
Right, we can't do anything useful without that.
Also, are you using the on-board Ethernet or a separate adapter in the
RockPro64?
Ben.
--
Ben Hutchings
The two most common things in the universe are hydrogen and stupidity.
signature.asc
Description: This is a digitally signed message part
On Tue, 2020-11-17 at 17:19 +, Ben Hutchings wrote:
> On Tue, 2020-11-17 at 11:18 -0500, Antoine Beaupré wrote:
> [...]
> > Could we get a little more hard data about the attack vectors here? I
> > totally trust the security team's "gut feeling" on this, but it
On Mon, 2020-11-23 at 10:04 +, Toni Mueller wrote:
>
> Hi Ben!
>
> On Tue, Nov 17, 2020 at 11:26:53AM +, Ben Hutchings wrote:
> > On Mon, 2020-11-16 at 19:41 +, Toni wrote:
> > > Package: src:linux
> > > Version: 4.19.152-1
> > > Severit
nsive benchmarks of kernel
> CONFIG_PREEMPT* options. The one at
> https://www.codeblueprint.co.uk/2019/12/23/linux-preemption-latency-throughput.html
>
> seems to be very thorough,
[...]
Not particularly. I'm used to latency benchmarks showing e.g. average,
90th percentile, 9
the
> our tradeoff's evaluation is well adjusted here, especially considering
> a lot of user_ns consumers are bypassing those restrictions by running
> as root anyways...
I tend to agree with this.
Ben.
> It seems that, in those cases, we're getting the worst of both worlds...
nd
> Cannot process volume group ev0
[...]
If you wait for about 30 seconds you should get a shell with the prompt
"(initramfs)". At the shell prompt, run:
ls -l /dev/nvme*
Are the expected partitions listed?
Ben.
--
Ben Hutchings
Usenet is essentially a HUGE grou
201 - 300 of 8501 matches
Mail list logo