From: Justin M. Forbes <jforbes(a)fedoraproject.org>
Add new drm kunit tests to mod-internal.list
The drm subsystem added a number of new kunit tests in the 6.1 cycle.
These need to be added to mod-internal.list for depmod to succeed.
Signed-off-by: Justin M. Forbes <jforbes(a)fedoraproject.org>
diff --git a/redhat/mod-internal.list b/redhat/mod-internal.list
index blahblah..blahblah 100644
--- a/redhat/mod-internal.list
+++ b/redhat/mod-internal.list
@@ -6,6 +6,16 @@ cpumask_kunit
cros_kunit
dev_addr_lists_test
dmatest
+drm_buddy_test
+drm_cmdline_parser_test
+drm_damage_helper_test
+drm_dp_mst_helper_test
+drm_format_helper_test
+drm_format_test
+drm_framebuffer_test
+drm_mm_test
+drm_plane_helper_test
+drm_rect_test
ext4-inode-test
fat_test
iio-test-format
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2059
Hi, we tested your kernel and here are the results:
Overall result: FAILED
Merge: OK
Compile: OK
Test: FAILED
Kernel information:
Brew / Koji Task ID: 92677238
You can find all the details about the test run at
https://datawarehouse.cki-project.org/kcidb/checkouts/55410
One or more kernel tests failed:
Unrecognized or new issues:
x86_64 - Storage - blktests - nvme-tcp
Logs: https://datawarehouse.cki-project.org/kcidb/tests/5395264
We also see the following known issues which are not related to your changes:
Issue: xfstests - _check_xfs_filesystem: filesystem on /dev/nvme0n1p4 is inconsistent (r)
URL: https://bugzilla.redhat.com/show_bug.cgi?id=1989409
Affected tests:
aarch64 - xfstests - btrfs
Issue: NFS Connectathon: SELinux prevents rpcbind
URL: https://gitlab.com/redhat/centos-stream/tests/kernel/kernel-tests/-/issues/…
Affected tests:
s390x - NFS Connectathon
x86_64 - NFS Connectathon
Issue: avc: denied { name_bind } for pid=897864 comm="rpcbind" src=63924 scontext=system_u:system_r:rpcbind_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=udp_socket permissive=1
URL: https://bugzilla.redhat.com/show_bug.cgi?id=1983604#c3
Affected tests:
x86_64 - xfstests - nfsv4.2
If you find a failure unrelated to your changes, please tag it at https://datawarehouse.cki-project.org .
This will prevent the failures from being incorrectly reported in the future.
If you don't have permissions to tag an issue, you can contact the CKI team or
test maintainers.
Please reply to this email if you have any questions about the tests that we
ran or if you have any suggestions on how to make future tests more effective.
,-. ,-.
( C ) ( K ) Continuous
`-',-.`-' Kernel
( I ) Integration
`-'
______________________________________________________________________________
From: Frantisek Hrbata <fhrbata(a)redhat.com>
redhat: fix elf got hardening for vm tools
Bugzilla: INTERNAL
Upstream Status: RHEL only
Following commit
commit 5d1c6696a0dfd1309c9e239956a1bae45823f9dc
Author: Herton R. Krzesinski <herton(a)redhat.com>
Date: Wed Jun 8 09:01:27 2022 -0300
redhat: change tools_make macro to avoid full override of variables in Makefile
changed behavior of tools_make macro
%global tools_make \
- %{make} CFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags}" %{?make_opts}
+ CFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags}" %{make} %{?make_opts}
Since tools/vm/Makefile assigns CFLAGS and LDFLAGS, it overrides the
env variables from tools_make command and we lose some hardening
options. For example GOT RO about which rpmispect is complaining.
Result: BAD
1) /usr/bin/page_owner_sort lost full GNU_RELRO security protection on aarch64
Waiver Authorization: Security
Suggested Remedy:
Ensure executables are linked with with '-z relro -z now'
Result: BAD
2) /usr/bin/slabinfo lost full GNU_RELRO security protection on aarch64
Waiver Authorization: Security
Suggested Remedy:
Ensure executables are linked with with '-z relro -z now'
Fix this by explicitly overwrite CFLAGS and LDFLAGS for tools/vm/Makefile
with command arguments. This basically brings back the previous behavior
of tools_make for vm tools. This is ugly, because page-types actually
needs the LDFLAGS defined in the makefile, because it links against
libapi.a. But we are not building this and the problem was there before
this change too. Probably best way would be to fix the
tools/vm/Makefile.
Signed-off-by: Frantisek Hrbata <fhrbata(a)redhat.com>
diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100755
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -2327,7 +2327,7 @@ pushd tools/gpio/
popd
# build VM tools
pushd tools/vm/
-%{tools_make} slabinfo page_owner_sort
+%{tools_make} CFLAGS="${RPM_OPT_FLAGS}" LDFLAGS="%{__global_ldflags}" slabinfo page_owner_sort
popd
pushd tools/tracing/rtla
%{tools_make}
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2055
From: Justin M. Forbes <jforbes(a)fedoraproject.org>
Add fortify_kunit to mod-internal.list
Another kunit test which has been added and needs to end up in
mod-internal so that depmod succeeds.
Signed-off-by: Justin M. Forbes <jforbes(a)fedoraproject.org>
diff --git a/redhat/mod-internal.list b/redhat/mod-internal.list
index blahblah..blahblah 100644
--- a/redhat/mod-internal.list
+++ b/redhat/mod-internal.list
@@ -8,6 +8,7 @@ dev_addr_lists_test
dmatest
ext4-inode-test
fat_test
+fortify_kunit
iio-test-format
iio-test-rescale
kfence_test
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2054
Hi, we tested your kernel and here are the results:
Overall result: PASSED
Merge: OK
Compile: OK
Test: OK
Tested-by: CKI Project <cki-project(a)redhat.com>
Kernel information:
Brew / Koji Task ID: 92621181
You can find all the details about the test run at
https://datawarehouse.cki-project.org/kcidb/checkouts/55262
One or more kernel tests failed:
We also see the following known issues which are not related to your changes:
Issue: Storage blktests - blk: scsi/007: Reading from scsi_debug failed
URL: https://bugzilla.redhat.com/show_bug.cgi?id=2027550
Affected tests:
x86_64 - Storage - blktests - blk
Issue: Storage block - storage fio numa: Performance comparison: min:40535 * 1.15 < max:81259
URL: https://bugzilla.redhat.com/show_bug.cgi?id=2032094
Affected tests:
ppc64le - Storage - block - storage fio numa
x86_64 - Storage - block - storage fio numa
Issue: NFS Connectathon: SELinux prevents rpcbind
URL: https://gitlab.com/redhat/centos-stream/tests/kernel/kernel-tests/-/issues/…
Affected tests:
aarch64 - NFS Connectathon
s390x - NFS Connectathon
x86_64 - NFS Connectathon
Issue: avc: denied { name_bind } for pid=897864 comm="rpcbind" src=63924 scontext=system_u:system_r:rpcbind_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=udp_socket permissive=1
URL: https://bugzilla.redhat.com/show_bug.cgi?id=1983604#c3
Affected tests:
x86_64 - xfstests - nfsv4.2
Issue: xfstests - _check_xfs_filesystem: filesystem on /dev/nvme0n1p4 is inconsistent (r)
URL: https://bugzilla.redhat.com/show_bug.cgi?id=1989409
Affected tests:
aarch64 - xfstests - btrfs
If you find a failure unrelated to your changes, please tag it at https://datawarehouse.cki-project.org .
This will prevent the failures from being incorrectly reported in the future.
If you don't have permissions to tag an issue, you can contact the CKI team or
test maintainers.
Please reply to this email if you have any questions about the tests that we
ran or if you have any suggestions on how to make future tests more effective.
,-. ,-.
( C ) ( K ) Continuous
`-',-.`-' Kernel
( I ) Integration
`-'
______________________________________________________________________________
From: Andrew Halaney <ahalaney(a)redhat.com>
redhat/configs/common: Turn on CONFIG_IKCONFIG_PROC
Some users expect to check /proc/config.gz instead of
/boot/config-$(uname -r), and both are valid approaches. In fact, one
could argue it is easier to trust the contents of /proc/config.gz than
it is to trust the config install at /boot/.
There's a cost to kernel size (mainly the gzipped size of the config
file), but ~50 KB isn't much compared to the size of the ~30 MB kernel
image I just compiled using the fedora aarch64 configs.
bloat-o-meter output below doesn't show the increase because the config
is injected with .incbin and uses symbol labels to grab it in C code:
[ahalaney@halaney-x13s kernel-ark]$ ./scripts/bloat-o-meter vmlinux.original vmlinux.ikconfig_proc
add/remove: 7/1 grow/shrink: 0/0 up/down: 320/-8 (312)
Function old new delta
ikconfig_init - 100 +100
config_gz_proc_ops - 88 +88
ikconfig_read_current - 68 +68
ikconfig_cleanup - 40 +40
e843419@0969_0000fd78_82f4 - 8 +8
e843419@08a0_0000e7d2_a58 - 8 +8
e843419@074e_0000bea9_8988 - 8 +8
e843419@0170_000025c9_53a8 8 - -8
Total: Before=31935449, After=31935761, chg +0.00%
[ahalaney@halaney-x13s kernel-ark]$ echo "31935761 - 31935449" | bc
312
[ahalaney@halaney-x13s kernel-ark]$
But you can still grab that bit too with a little more work:
[ahalaney@halaney-x13s kernel-ark]$ nm vmlinux.ikconfig_proc| grep kernel_config_data
ffff800008c78540 D kernel_config_data
ffff800008c8257e D kernel_config_data_end
[ahalaney@halaney-x13s kernel-ark]$ echo 'ibase=16; 8C8257E - 8C78540' | bc
41022
[ahalaney@halaney-x13s kernel-ark]$ ls -la kernel/config_data.gz
-rw-r--r-- 1 ahalaney ahalaney 41022 Sep 30 15:43 kernel/config_data.gz
[ahalaney@halaney-x13s kernel-ark]$
All in all that's not that much of a difference in the image size, so
let's enable this feature.
Signed-off-by: Andrew Halaney <ahalaney(a)redhat.com>
diff --git a/redhat/configs/common/generic/CONFIG_IKCONFIG b/redhat/configs/common/generic/CONFIG_IKCONFIG
index blahblah..blahblah 100644
--- a/redhat/configs/common/generic/CONFIG_IKCONFIG
+++ b/redhat/configs/common/generic/CONFIG_IKCONFIG
@@ -1 +1 @@
-# CONFIG_IKCONFIG is not set
+CONFIG_IKCONFIG=y
diff --git a/redhat/configs/common/generic/CONFIG_IKCONFIG_PROC b/redhat/configs/common/generic/CONFIG_IKCONFIG_PROC
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/common/generic/CONFIG_IKCONFIG_PROC
@@ -0,0 +1 @@
+CONFIG_IKCONFIG_PROC=y
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2041
From: Ondrej Mosnáček on gitlab.com
Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1950
Two small spec file tweaks to reduce the disk space footprint of the kernel
build. This is useful for custom/local builds - for example it makes it more
feasible to build the kernel on tmpfs (to reduce HDD/SSD wear and speed up the
build a bit) or on small VM instances.
Please consider merging so I don't have to carry this in a local branch
:slight_smile:
---
redhat/kernel.spec.template | 7 ++++++-
1 files changed, 6 insertions(+), 1 deletions(-)
From: Al Stone on gitlab.com
Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2042
NOTE: Truncated patchset since you are most likely targeting the
wrong branch in GitLab. Open the merge request URL in your web
browser, click the Edit button at the top of the page and change
the target branch at the top of that page.
Signed-off-by: Al Stone <ahs3(a)redhat.com>
---
redhat/configs/common/generic/arm/aarch64/CONFIG_I2C_VIRTIO | 1 +
redhat/configs/common/generic/arm/aarch64/CONFIG_ISC_IMX | 1 +
redhat/configs/common/generic/arm/aarch64/CONFIG_ISC_IMX_LPI2C | 1 +
redhat/configs/common/generic/CONFIG_ISC_IMX | 1 +
redhat/configs/common/generic/CONFIG_ISC_IMX_LPI2C | 1 +
Makefile.rhelver | 2 +-
6 files changed, 6 insertions(+), 1 deletions(-)