Bug#1067821: bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1
On 29/03/2024 19.40, Adam D. Barratt wrote: libnvidia-pkcs11-openssl3 is a reverse dependency of libcuda1 (seems to get dlopen()ed by it), so we cannot avoid the openssl dependency without risking cuda breakage in sid. Would uploading the 535 stack to testing-proposed-updates be helpful? Would we be better to ship the 525 packages that are already in p-u and revisit 535 for 12.7, Then let's stick to the 525 from -pu for now and hope the 64bit time_t transition is over next time. ;-) or skip those updates as well and just include 535 when we can? The 525 packages are also in stable-updates for fixing module build breakage caused by some backported changes in src:linux in the last point release. So skipping them is no option ;-) Andreas PS: nvidia-modprobe should be independent of the driver stack and t64 transition and could be included in 12.6
Bug#1067821: bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1
On Thu, 2024-03-28 at 18:40 +0100, Andreas Beckmann wrote: > On 27/03/2024 21.10, Adam D. Barratt wrote: > > Please go ahead, bearing in mind that the window for 12.6 closes > > over > > the coming weekend. > > The whole nvidia stack has now been uploaded, > src:nvidia-graphics-drivers is sitting in NEW. It's now in stable-new. We have a bit of an issue in terms of accepting / shipping the 535 bookworm stack, however. The upload of 535 to unstable is blocked from migration to testing by openssl, which is in turn blocked by dpkg, which is manually blocked for the time64 transition. Would we be better to ship the 525 packages that are already in p-u and revisit 535 for 12.7, or skip those updates as well and just include 535 when we can? Regards, Adam
Bug#1067821: bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1
On 27/03/2024 21.10, Adam D. Barratt wrote: Please go ahead, bearing in mind that the window for 12.6 closes over the coming weekend. The whole nvidia stack has now been uploaded, src:nvidia-graphics-drivers is sitting in NEW. Andreas
Processed: Re: Bug#1067821: bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1
Processing control commands: > tags -1 + confirmed Bug #1067821 [release.debian.org] bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1 Added tag(s) confirmed. -- 1067821: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067821 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#1067821: bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1
Control: tags -1 + confirmed On Wed, 2024-03-27 at 09:51 +0100, Andreas Beckmann wrote: > In order to receive further upstream support (i.e. CVE fixes), we > need > to switch src:nvidia-graphics-drivers from the 525 series (EoL > 12/2023) > to the 535 series, a new LTSB branch sufficient for the lifetime of > bookworm. (The first 535 beta appeared during deep freeze of > bookworm.) > This driver supports a superset of the GPUs supported by the 525 > drivers, no GPUs have been dropped. > [...] > I'm currently doing interoperability tests with > src:nvidia-open-gpu-kernel-modules. (These two source packages > need to be updated together due to the strict firmware > dependency.) An upload to bookworm will only happen after the > package is in sid. Please go ahead, bearing in mind that the window for 12.6 closes over the coming weekend. Regards, Adam
Bug#1067821: bookworm-pu: package nvidia-graphics-drivers/535.161.08-1~deb12u1
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu [ Reason ] In order to receive further upstream support (i.e. CVE fixes), we need to switch src:nvidia-graphics-drivers from the 525 series (EoL 12/2023) to the 535 series, a new LTSB branch sufficient for the lifetime of bookworm. (The first 535 beta appeared during deep freeze of bookworm.) This driver supports a superset of the GPUs supported by the 525 drivers, no GPUs have been dropped. New metapackage: nvidia-driver-full Removed package: libnvidia-compiler (internal library) New package: libnvidia-pkcs11-openssl3 (internal library) [ Impact ] A proprietary driver with unfixed CVEs. [ Tests ] Only installability and module build tests, everything else would require use of nvidia hardware and driver. [ Risks ] Switching nvidia driver branches and updating to new upstream releases in stable has been done in the past. [ Checklist ] [*] *all* changes are documented in the d/changelog The final changelog entries for uploads to sid and bookworm are still missing, but I expect no further changes than that. [*] I reviewed all changes and I approve them (Excluding the blobs.) [*] attach debdiff against the package in (old)stable (Excluding the blobs.) [ ] the issue is verified as fixed in unstable I'm currently doing interoperability tests with src:nvidia-open-gpu-kernel-modules. (These two source packages need to be updated together due to the strict firmware dependency.) An upload to bookworm will only happen after the package is in sid. [ Changes ] debian/README.source | 4 +- debian/changelog | 548 ++--- debian/control | 85 +++- debian/control.in | 83 +++- debian/control.md5sum | 6 +- debian/copyright | 525 +--- debian/firmware-nvidia-gsp.install.in | 1 + debian/gbp.conf| 2 +- debian/libcuda1.lintian-overrides.in | 2 +- debian/libcuda1.symbols| 17 + debian/libnvcuvid1.symbols | 8 + debian/libnvidia-compiler.install.in | 1 - debian/libnvidia-compiler.symbols.in | 25 - debian/libnvidia-encode1.symbols | 8 + debian/libnvidia-glcore.lintian-overrides.in | 1 + debian/libnvidia-glvkspirv.symbols.in | 5 + debian/libnvidia-ml1.symbols | 36 +- debian/libnvidia-ngx1.symbols | 4 + debian/libnvidia-nvvm4.symbols | 20 +- debian/libnvidia-pkcs11-openssl3.install.in| 1 + ...libnvidia-pkcs11-openssl3.lintian-overrides.in} | 10 +- debian/libnvidia-pkcs11-openssl3.symbols.in| 2 + .../libnvidia-ptxjitcompiler1.lintian-overrides.in | 4 +- debian/libnvidia-rtcore.lintian-overrides.in | 2 +- debian/libnvoptix1.install.in | 1 + debian/not-installed.in| 2 + debian/nv-readme-open.ids | 5 + debian/nv-readme.ids | 17 + debian/nvidia-alternative.postinst.in | 1 + debian/nvidia-opencl-icd.lintian-overrides.in | 2 +- debian/patches/man-fixes-nvidia-smi.patch | 69 +-- ...-minimum-supported-kernel-version-to-3.10.patch | 4 +- ...-remove-empty-lines-from-uts_release-outp.patch | 6 +- debian/patches/module/0034-fix-typos.patch | 24 +- ...35-fix-build-w-kernel-6.1.76-6.6.15-6.7.3.patch | 99 debian/patches/module/bashisms.patch | 2 +- debian/patches/module/cc_version_check-gcc5.patch | 2 +- .../module/conftest-prefer-arch-headers.patch | 2 +- debian/patches/module/conftest-verbose.patch | 14 +- debian/patches/module/ppc64el.patch| 19 - debian/patches/module/series.in| 2 - debian/patches/module/use-kbuild-compiler.patch| 2 +- debian/patches/module/use-kbuild-flags.patch | 2 +- debian/rules | 27 +- debian/watch | 4 +- 45 files changed, 1156 insertions(+), 550 deletions(-) Besides the three new/removed packages there are only minor packaging changes this time. [ Other info ] This is a rebuild of the package from sid with no further changes. This update will require updates of nvidia-settings, nvidia-xconfig, nvidia-persistenced, nvidia-modprobe to keep the major version in sync (and therefore avoid user confusion). These packages will most likely be untouched on further updates of src:nvidia-graphics-drivers 535.*. There will be no update of
