4.3 rebase in F23 updates-testing
by Josh Boyer
Hello,
The 4.3.3 kernel has been pushed to updates-testing for F23. As of
right now, it has a +12 karma score. Given that it is a major release
rebase, we're going to wait at least a few days to see how it fares.
If you are so inclined, testing would be appreciated. As usual,
please give karma as appropriate but we would appreciate it if you
only give negative karma for new, not reported issues and with a bug
link associated. If a bug is fixed, we have marked it as such. If it
isn't, we haven't and giving negative karma for those known issues
simply prevents fixes from getting into the hands of other users.
Of particular note with this update is the improved Skylake Intel
graphics support. If you have a new machine, you might find it works
better with 4.3 than the previous F23 kernels. (You may also find it
breaks something, which is also interesting. YMMV.)
Thanks.
josh
8 years, 3 months
F23 4.3 rebase plan
by Josh Boyer
Hi All,
Really no different from any of the last major version rebases we've
done. We'll likely rebase F23 to the 4.3.y kernel around the time
4.3.1 or 4.3.2 is released upstream. Until then, the stabilization
branch is tracking what should eventually be merged into F23.
F22 will follow sometime thereafter. F21 will not be rebased to 4.2
or 4.3 and will go EOL with 4.1.13. Please migrate off of F21 as soon
as possible.
If you have questions, please let us know.
josh
8 years, 3 months
Building dell_rbu module
by Major Hayden
Hey folks,
I've rebuilt quite a few Fedora kernels to enable the dell_rbu module for firmware updates on various Dell servers, workstations, and laptops that are running Fedora 21 and 22. Would it be possible to have it enabled in the normal kernel builds?
I found a bugzilla ticket[1] referenced in the kernel config[2] that points to some installation issues in Fedora 20. I can't tell if the bug was within dell_rbu or perhaps in systemd-udevd from the ticket. However, I've had success loading the module on various Dell equipment over the last 18 months or so.
If we enable it, could we ensure that it's not enabled by default? I wondered if a kernel subpackage would be helpful but that seems a bit like overkill.
Thanks!
[1] https://bugzilla.redhat.com/show_bug.cgi?id=997149
[2] http://pkgs.fedoraproject.org/cgit/kernel.git/tree/config-x86-generic?h=f22
--
Major Hayden
8 years, 3 months
RFC: sign kernel modules on all archs in Fedora
by Thorsten Leemhuis
Lo!
On 10.12.2015 20:59, Josh Boyer wrote(¹):
> […]
> Thinking about it some, there isn't really a reason CONFIG_MODULE_SIG
> couldn't be enabled on other architectures. Signed modules are
> independent of UEFI secure boot support. If we did that, we might
> want to come up with something that maps arches which have it enabled
> to a single RPM macro.
>
> Anyway, that's likely future work.
Find attached two patches to go down that route.
The first creates a new macro in the spec file to make "signing modules"
and "signing kernels for UEFI secure boot" independent from each other.
This is pretty straightforward and could be applied as is, as afterwards
it if more obvious what happens. I fired a scratch build to verify
mod-sign and pesign are still called just like before on %{ix86} x86_64.
Results can be found via
http://koji.fedoraproject.org/koji/taskinfo?taskID=12376294 The arm
build log shows that mod-sign and pesign are still not called.
The second patch enables module signing for all archs. Scratch builds
for primary archs:
http://koji.fedoraproject.org/koji/taskinfo?taskID=12376883
Scratch build for ppc:
http://ppc.koji.fedoraproject.org/koji/taskinfo?taskID=3033583
I for now didn't run any of those kernels to verify if things still work
as I'm unsure what we want to do (hence the RFC in the Subject): On
which archs do we want to enable module signing? Are there any reasons
to not enable it on some archs? Is the overhead considered to big for
armv7? Does it work everywhere?
My current stance to those questions: If there are no good reasons to
not use module signing on some archs simply enable it everywhere.
Cu
thl
(¹) that was in
https://lists.fedoraproject.org/archives/list/kernel%40lists.fedoraprojec...
8 years, 3 months