May 2021 - kernel - Fedora Mailing-Lists

[OS-BUILD PATCH] redhat/configs: Enable mlx5 IPsec and TLS offloads

by Alaa Hleihel (via Email Bridge)

From: Alaa Hleihel <ahleihel(a)redhat.com> redhat/configs: Enable mlx5 IPsec and TLS offloads Enable the needed configs for turning on the mlx5 IPsec and TLS offloads. Bugzilla: http://bugzilla.redhat.com/1957636 Bugzilla: http://bugzilla.redhat.com/1869674 Upstream: RHEL-only Signed-off-by: Alaa Hleihel <ahleihel(a)redhat.com> diff a/redhat/configs/ark/generic/CONFIG_MLX5_EN_TLS b/redhat/configs/ark/generic/CONFIG_MLX5_EN_TLS --- a/redhat/configs/ark/generic/CONFIG_MLX5_EN_TLS +++ /dev/null @@ -1 +0,0 @@ -# CONFIG_MLX5_EN_TLS is not set diff a/redhat/configs/common/generic/CONFIG_MLX5_EN_TLS b/redhat/configs/common/generic/CONFIG_MLX5_EN_TLS --- /dev/null +++ b/redhat/configs/common/generic/CONFIG_MLX5_EN_TLS @@ -0,0 +1 @@ +CONFIG_MLX5_EN_TLS=y diff a/redhat/configs/common/generic/CONFIG_MLX5_IPSEC b/redhat/configs/common/generic/CONFIG_MLX5_IPSEC --- a/redhat/configs/common/generic/CONFIG_MLX5_IPSEC +++ b/redhat/configs/common/generic/CONFIG_MLX5_IPSEC @@ -1 +1 @@ -# CONFIG_MLX5_IPSEC is not set +CONFIG_MLX5_IPSEC=y diff a/redhat/configs/common/generic/CONFIG_MLX5_TLS b/redhat/configs/common/generic/CONFIG_MLX5_TLS --- a/redhat/configs/common/generic/CONFIG_MLX5_TLS +++ b/redhat/configs/common/generic/CONFIG_MLX5_TLS @@ -1 +1 @@ -# CONFIG_MLX5_TLS is not set +CONFIG_MLX5_TLS=y -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1123

2 years, 11 months

3
3
0 / 0

[OS-BUILD PATCH] [redhat] Disable CONFIG_NETFILTER_XTABLES_COMPAT

by psutter1 (via Email Bridge)

From: Phil Sutter <psutter(a)redhat.com> [redhat] Disable CONFIG_NETFILTER_XTABLES_COMPAT This setting seems to have slipped through review process: Before this symbol was introduced, the relevant feature was always enabled. Since it is there now, we should use the opportunity to disable it and avoid any further security holes it may contain in addition to the already fixed ones. diff a/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT b/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT --- a/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT +++ b/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES_COMPAT @@ -1 +1 @@ -CONFIG_NETFILTER_XTABLES_COMPAT=y +# CONFIG_NETFILTER_XTABLES_COMPAT is not set -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1126

2 years, 11 months

4
3
0 / 0

[OS-BUILD PATCH 0/0] mm: FOLL_UNSHARE and COR fault

by Andrea Arcangeli (via Email Bridge)

From: Andrea Arcangeli on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1124 NOTE: Truncated patchset due to missing @redhat.com email address on your GitLab profile at https://gitlab.com/-/profile. Once that is fixed, close and reopen the merge request to retrigger sending the emails. Tested: fixed https://github.com/aagit/kernel-testcases- for-v5.11/blob/main/vmsplice-v5.11.c no-regression https://github.com/aagit/kernel-testcases- for-v5.11/blob/main/page_count_do_wp_page.c Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1958742 Upstream Status: RHEL-only 3b807e3e4d34 (Andrea Arcangeli) mm: FOLL_UNSHARE|FOLL_MM_SYNC: CentOS Stream kABI 2a5c44451e60 (Andrea Arcangeli) mm: use_mm: fix for arches checking mm_users to optimize TLB flushes 488425ad09ab (Andrea Arcangeli) mm: thp: optimize total_mapcount() with head_compound_mapcount d2a5d1e916ad (Andrea Arcangeli) mm: thp: page_mapcount_lock: optimize the lock_page_memcg c2256f6642e4 (Andrea Arcangeli) mm: thp: page_mapcount_lock: optimize the migrate path 7e6dfb703d3e (Andrea Arcangeli) mm: cacheline alignment for page_table_lock and mmap_lock 8468ed6b2b93 (Andrea Arcangeli) mm: gup: pack has_pinned in MMF_HAS_PINNED f6c91952e805 (Andrea Arcangeli) mm: gup: allow FOLL_PIN to scale in SMP 61c4edba6dbc (Andrea Arcangeli) mm: gup: document FOLL_MM_SYNC ea651b9dc415 (Andrea Arcangeli) mm: gup: FOLL_UNSHARE|FOLL_MM_SYNC: zeropage and MAP_PRIVATE pagecache 92ebfc1323e3 (Andrea Arcangeli) mm: gup: FOLL_UNSHARE|FOLL_MM_SYNC: enable COR on PageKsm 23928d6acc9e (Andrea Arcangeli) mm: gup: introduce FOLL_MM_SYNC and FAULT_FLAG_MM_SYNC e124d38951e9 (Andrea Arcangeli) mm: COW: skip the page lock in the COW copy path ace0bed51c7d (Andrea Arcangeli) mm: COW: restore full accuracy in page reuse 66bc25dc1340 (Andrea Arcangeli) mm: gup: FOLL_UNSHARE: optimize mmu notifier b982d1124362 (Andrea Arcangeli) mm: gup: FOLL_UNSHARE a7051d10b1aa (Andrea Arcangeli) mm: gup: gup_page_unshare() eacdacdef0ff (Andrea Arcangeli) mm: gup: COR: copy-on-read fault 549c420a5d41 (Andrea Arcangeli) mm: thp: introduce irqsafe methods to check if anonymous pages are shared 114b743e88c4 (Andrea Arcangeli) mm: thp: introduce page_mapcount_seq irqsafe version 54a91db05c7c (Andrea Arcangeli) mm: thp: introduce page_trans_huge_anon_shared ff10b15e05db (Andrea Arcangeli) mm: thp: stabilize the THP mapcount in page_remove_anon_compound_rmap 207e26b93bf8 (Andrea Arcangeli) mm: thp: replace the page lock with the seqlock for the THP mapcount 95cbac18cf57 (Andrea Arcangeli) mm: thp: make the THP mapcount atomic with a seqlock fs/proc/task_mmu.c | 51 ++++---- include/linux/huge_mm.h | 128 ++++++++++++++++++++ include/linux/ksm.h | 7 ++ include/linux/mm.h | 20 +++- include/linux/mm_types.h | 18 ++- include/linux/sched/coredump.h | 1 + kernel/fork.c | 1 - kernel/kthread.c | 2 + mm/gup.c | 133 ++++++++++++++++++++- mm/huge_memory.c | 160 +++++++++++++++++-------- mm/ksm.c | 25 ++++ mm/memory.c | 261 +++++++++++++++++++++++++++++++++++------ mm/rmap.c | 24 +++- mm/swapfile.c | 14 ++- mm/util.c | 32 ++++- 15 files changed, 746 insertions(+), 131 deletions(-)

2 years, 11 months

3
6
0 / 0

[OS-BUILD PATCH] Fix branch creation for releases based on tags

by GitLab Bridge on behalf of jeremycline

From: Jeremy Cline <jcline(a)redhat.com> The release scripts are supposed create a set of branches if the release is based of a tag rather than a snapshot. davidlt noted on IRC that branches were missing for recent tags, namely rc3 and rc4. The reason is that the check for a signed tag expects $UPSTREAM_REF to be the tag. Resolve $UPSTREAM_REF to a tag (if it exists) prior to verifying the tag. Signed-off-by: Jeremy Cline <jcline(a)redhat.com> --- redhat/scripts/ci/ark-create-release.sh | 2 +- redhat/scripts/ci/ark-rebase-patches.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/redhat/scripts/ci/ark-create-release.sh b/redhat/scripts/ci/ark-create-release.sh index fd57e533ddb4..83b102ceb54f 100755 --- a/redhat/scripts/ci/ark-create-release.sh +++ b/redhat/scripts/ci/ark-create-release.sh @@ -37,7 +37,7 @@ git checkout os-build git checkout os-build ./redhat/scripts/ci/ark-update-configs.sh "$UPSTREAM_REF" "$PROJECT_ID" -if git tag -v "$UPSTREAM_REF" > /dev/null 2>&1; then +if git tag -v "$(git describe --exact-match "$UPSTREAM_REF")"; then git checkout -b ark/"$UPSTREAM_REF" ark/patches/"$UPSTREAM_REF" RELEASE_BRANCHES=" ark/$UPSTREAM_REF ark/patches/$UPSTREAM_REF" else diff --git a/redhat/scripts/ci/ark-rebase-patches.sh b/redhat/scripts/ci/ark-rebase-patches.sh index 2ac22bcba3bd..4a02176bde88 100755 --- a/redhat/scripts/ci/ark-rebase-patches.sh +++ b/redhat/scripts/ci/ark-rebase-patches.sh @@ -102,7 +102,7 @@ else exit 2 fi -if git tag -v "$UPSTREAM_REF" > /dev/null 2>&1; then +if git tag -v "$(git describe --exact-match "$UPSTREAM_REF")"; then printf "Creating branch \"ark/patches/%s\"\n" "$UPSTREAM_REF" git branch ark/patches/"$UPSTREAM_REF" printf "Don't forget to run 'git push <remote> ark/patches/%s'\n" "$UPSTREAM_REF" -- 2.26.2

2 years, 11 months

2
1
0 / 0

[OS-BUILD PATCH] redhat: add initial rpminspect configuration

by Herton R. Krzesinski (via Email Bridge)

From: Herton R. Krzesinski <herton(a)redhat.com> redhat: add initial rpminspect configuration CI has been doing rpminspect runs against built rpm packages. We have to add specific configuration for rpminspect, that can vary depending on the kernel branch. For example, older releases didn't have the kernel meta-package, but today kernel have it and requires kernel-core/kernel-modules which are the ones which contains files. This configuration is supposed as a tweak only for the cases where it makes sense having it here, to ship with dist-git, instead of changing rpminspect-data-* packages. Signed-off-by: Herton R. Krzesinski <herton(a)redhat.com> diff a/redhat/Makefile b/redhat/Makefile --- a/redhat/Makefile +++ b/redhat/Makefile @@ -260,6 +260,7 @@ sources-rh: $(TARBALL) generate-testpatch-tmp setup-source dist-configs-check keys/rhel*.x509 \ kabi/check-kabi \ configs/$(PACKAGE_NAME)-*.config \ + rpminspect.yaml \ update_scripts.sh \ mod-blacklist.sh \ mod-internal.list \ diff a/redhat/kernel.spec.template b/redhat/kernel.spec.template --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -766,6 +766,7 @@ Source3001: kernel-local Source3003: Patchlist.changelog Source4000: README.rst +Source4001: rpminspect.yaml ## Patches needed for building this package diff a/redhat/rpminspect.yaml b/redhat/rpminspect.yaml --- /dev/null +++ b/redhat/rpminspect.yaml @@ -0,0 +1,10 @@ +# additional rpminspect configuration for this branch + +--- +emptyrpm: + expected_empty: + - kernel + - kernel-debug + - kernel-lpae + - kernel-zfcpdump + - kernel-zfcpdump-modules -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1122

2 years, 11 months

2
1
0 / 0

[OS-BUILD PATCH] Keep sctp and l2tp modules in modules-extra

by Don Zickus (via Email Bridge)

From: Don Zickus <dzickus(a)redhat.com> Keep sctp and l2tp modules in modules-extra There are two modules: sctp_diag and l2tp_ip6 that are in kernel-modules that accidentally dragged the rest of the sctp and l2tp mdoules in there. Instead all those modules should stay in modules-extra. Move the offending modules into modules-extra. Cc: mleitner(a)redhat.com Cc: lxin(a)redhat.com Cc: jbenc(a)redhat.com Signed-off-by: Don Zickus <dzickus(a)redhat.com> diff a/redhat/rhel_files/mod-extra.list.rhel b/redhat/rhel_files/mod-extra.list.rhel --- a/redhat/rhel_files/mod-extra.list.rhel +++ b/redhat/rhel_files/mod-extra.list.rhel @@ -79,6 +79,7 @@ l2tp_core.ko l2tp_debugfs.ko l2tp_eth.ko l2tp_ip.ko +l2tp_ip6.ko l2tp_netlink.ko l2tp_ppp.ko lec.ko @@ -132,6 +133,7 @@ sch_red.ko sch_sfb.ko sch_teql.ko sctp.ko +sctp_diag.ko sctp_probe.ko sidewinder.ko sja1000.ko -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1117

2 years, 11 months

5
14
0 / 0

✅ PASS: Test report for kernel 5.11.19-200.fc33 (fedora-33)

by CKI Project

Hello, We ran automated tests on the following kernel build: Kernel package: kernel-5.11.19-200.fc33 Task URL: https://koji.fedoraproject.org/koji/taskinfo?taskID=67427860 The results of these automated tests are provided below. Overall result: PASSED Tests: OK All kernel binaries, config files, and logs are available for download here: https://arr-cki-prod-datawarehouse-public.s3.amazonaws.com/index.html?pre... Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. For the full detail on our testing procedures, please scroll to the bottom of this message. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________ Hardware testing ---------------- We booted each kernel and ran the following tests: aarch64: Host 1: ✅ Boot test ✅ xfstests - ext4 ✅ xfstests - xfs ✅ Storage: swraid mdadm raid_module test 🚧 ✅ xfstests - btrfs 🚧 ✅ Storage blktests 🚧 ✅ Storage block - filesystem fio test 🚧 ✅ Storage block - queue scheduler test 🚧 ✅ Storage nvme - tcp 🚧 ✅ Storage: lvm device-mapper test 🚧 ✅ stress: stress-ng Host 2: ✅ Boot test ✅ ACPI table test ✅ LTP ✅ CIFS Connectathon ✅ Loopdev Sanity ✅ Memory: fork_mem ✅ Memory function: memfd_create ✅ AMTU (Abstract Machine Test Utility) ✅ Ethernet drivers sanity ppc64le: Host 1: ✅ Boot test ✅ xfstests - ext4 ✅ xfstests - xfs ✅ Storage: swraid mdadm raid_module test 🚧 ✅ xfstests - btrfs 🚧 ✅ Storage blktests 🚧 ✅ Storage block - filesystem fio test 🚧 ✅ Storage block - queue scheduler test 🚧 ✅ Storage nvme - tcp 🚧 ✅ Storage: lvm device-mapper test Host 2: ⚡ Internal infrastructure issues prevented one or more tests (marked with ⚡⚡⚡) from running on this architecture. This is not the fault of the kernel that was tested. ⚡⚡⚡ Boot test ⚡⚡⚡ LTP ⚡⚡⚡ CIFS Connectathon ⚡⚡⚡ Loopdev Sanity ⚡⚡⚡ Memory: fork_mem ⚡⚡⚡ Memory function: memfd_create ⚡⚡⚡ AMTU (Abstract Machine Test Utility) ⚡⚡⚡ Ethernet drivers sanity Host 3: ✅ Boot test ✅ LTP ✅ CIFS Connectathon ✅ Loopdev Sanity ✅ Memory: fork_mem ✅ Memory function: memfd_create ✅ AMTU (Abstract Machine Test Utility) ✅ Ethernet drivers sanity s390x: Host 1: ✅ Boot test ✅ Storage: swraid mdadm raid_module test 🚧 ✅ Storage blktests 🚧 ✅ Storage nvme - tcp 🚧 ✅ stress: stress-ng Host 2: ✅ Boot test ✅ LTP ✅ CIFS Connectathon ✅ Loopdev Sanity ✅ Memory: fork_mem ✅ Memory function: memfd_create ✅ AMTU (Abstract Machine Test Utility) ✅ Ethernet drivers sanity x86_64: Host 1: ✅ Boot test ✅ xfstests - ext4 ✅ xfstests - xfs ✅ xfstests - nfsv4.2 ✅ Storage: swraid mdadm raid_module test 🚧 ❌ xfstests - btrfs 🚧 ✅ xfstests - cifsv3.11 🚧 ✅ Storage blktests 🚧 ✅ Storage block - filesystem fio test 🚧 ✅ Storage block - queue scheduler test 🚧 ✅ Storage nvme - tcp 🚧 ✅ Storage: lvm device-mapper test 🚧 ✅ stress: stress-ng Host 2: ✅ Boot test ✅ ACPI table test ✅ LTP ✅ CIFS Connectathon ✅ Loopdev Sanity ✅ Memory: fork_mem ✅ Memory function: memfd_create ✅ AMTU (Abstract Machine Test Utility) ✅ Ethernet drivers sanity Test sources: https://gitlab.com/cki-project/kernel-tests 💚 Pull requests are welcome for new tests or improvements to existing tests! Aborted tests ------------- Tests that didn't complete running successfully are marked with ⚡⚡⚡. If this was caused by an infrastructure issue, we try to mark that explicitly in the report. Waived tests ------------ If the test run included waived tests, they are marked with 🚧. Such tests are executed but their results are not taken into account. Tests are waived when their results are not reliable enough, e.g. when they're just introduced or are being fixed. Testing timeout --------------- We aim to provide a report within reasonable timeframe. Tests that haven't finished running yet are marked with ⏱.

2 years, 11 months

1
0
0 / 0

Creating new Resue Kernel??

by Michael D. Setzer II

Just updated machine to an SDD drive, and then upgrade to Fedora 33. Still had old recue kernel so removed the files. Expected it to build new kernel after upgrade kernel, but no entries created. Use to use this to created new ones before, but the script doesn't exist on the Fedora 33. /etc/kernel/postinst.d/51-dracut-rescue-postinst.sh $(uname -r) /boot/vmlinuz-$(uname -r) Found a somewhat similar file, but no instructions. /usr/lib/kernel/install.d/51-dracut-rescue.install Is there a process that needs to be one. Have a machine I am planning on moving to a new motherboard, and wanted to setup its rescue kernel, since new motherboard might have hardware that isn't in the current setup? Thanks.

2 years, 11 months

2
1
0 / 0

aarch64 build failures in rawhide

by Florian Weimer

We want to use kernel rebuilds as a gating test for toolchain updates. Unfortunately, per Information for package kernel <https://koji.fedoraproject.org/koji/packageinfo?packageID=8> the last successful rawhide kernel build was on 2021-04-28. The question is what we should do about build failures like this. Should we use non-rawhide kernels for our gating tests? (The bug appears to be in BTF generation: it is not valid to assume that static functions or variables are emitted under their declared names, or that they have any particular calling convention or data layout. It's probably best to drop the static if symbols are used for BTF extraction. An alternative would be to use __attribute__ ((used)) instead, but then the linker won't check for name collisions, which would result in incorrect BTF.) Thanks, Florian

2 years, 11 months

4
4
0 / 0

[OS-BUILD PATCH 0/0] [redhat] New configs in init/Kconfig

by CKI Gitlab (via Email Bridge)

From: CKI Gitlab on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1119 NOTE: Truncated patchset due to missing @redhat.com email address on your GitLab profile at https://gitlab.com/-/profile. Once that is fixed, close and reopen the merge request to retrigger sending the emails. Hi, As part of the ongoing rebase effort, the following configuration options need to be reviewed. As a reminder, the ARK configuration flow involves moving unreviewed configuration options from the pending directory to the ark directory. In the diff below, options are removed from the pending directory and added to the ark hierarchy. The final options that need to be ACKed are the files that are being added to the ark hierarchy. If the value for a file that is added should be changed, please reply with a better option. CONFIG_MODPROBE_PATH: When kernel code requests a module, it does so by calling the "modprobe" userspace utility. This option allows you to set the path where that binary is found. This can be changed at runtime via the sysctl file /proc/sys/kernel/modprobe. Setting this to the empty string removes the kernel's ability to request modules (but userspace can still load modules explicitly). Symbol: MODPROBE_PATH [=/sbin/modprobe] Type : string Defined at init/Kconfig:2302 Prompt: Path to modprobe binary Depends on: MODULES [=y] Location: -> Enable loadable module support (MODULES [=y]) --- Cc: Prarit Bhargava <prarit(a)redhat.com> Signed-off-by: Fedora Kernel Team <kernel-team(a)fedoraproject.org>

2 years, 11 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

kernel May 2021