kernel November 2024

kernel@lists.fedoraproject.org

5 participants
39 discussions

[OS-BUILD PATCH 0/2] random: Add hook to override device reads and getrandom(2)
by Herbert Xu (via Email Bridge) 12 Feb '25

12 Feb '25

From: Herbert Xu on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2757 Upstream Status: RHEL only Restore the changes to /dev/random which were reverted after 5.18. This reverts commit 900f11e054896bae7b0146055698656e3d1e20a6 and 297bcb88233101e8d5062729ff3a5f989bad1c3b. This also brings the code up-to-date with respect to centos-stream commit 9de3a7339793d3c516b9305a8854267156f90c53 so that changes that were made after the kernel-ark revert have been brought in. Signed-off-by: Herbert Xu <herbert.xu(a)redhat.com> --- crypto/drbg.c | 18 ++++- crypto/rng.c | 149 +++++++++++++++++++++++++++++++++++++++++++----- drivers/char/random.c | 122 ++++++++++++++++++++++++++++++++++++++++ include/linux/crypto.h | 1 + include/linux/random.h | 10 +++ 5 files changed, 281 insertions(+), 19 deletions(-)

5 8

[OS-BUILD PATCHv3 0/0] random: Override random with FIPS RNG in FIPS mode
by Herbert Xu (via Email Bridge) 30 Jan '25

30 Jan '25

From: Herbert Xu on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1304 NOTE: Truncated patchset since committer email 'herbert(a)gondor.apana.org.au' does not match the submitter's GitLab public email address 'herbert.xu(a)redhat.com'. Upstream: RHEL only Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1984784 The RHEL FIPS certification effort ran into an show-stopper with /dev/urandom and getrandom(2) not being FIPS-compliant. At this point there is no realistic chance of making them FIPS-compliant upstream. It has also been deemed unrealistic to change user-space to use the FIPS-compliant RNG through the Crypto API. Therefore this patch series overrides /dev/*random as well as getrandom(2) with the Crypto API RNG so that FIPS certification can proceed. Signed-off-by: Herbert Xu <herbert.xu(a)redhat.com> --- crypto/rng.c | 73 ++++++++++++++++++++++++++++++- drivers/char/random.c | 115 +++++++++++++++++++++++++++++++++++++++++++++++++ include/linux/random.h | 7 ++ 3 files changed, 194 insertions(+), 1 deletions(-)

3 5

[OS-BUILD PATCHv2] [redhat] configs: Compress kernel with zstd cleanup
by Jeremy Linton (via Email Bridge) 13 Dec '24

13 Dec '24

From: Jeremy Linton <jlinton(a)redhat.com> [redhat] configs: Compress kernel with zstd cleanup Zstd compressed kernels consume less disk space and decompress faster than gziped ones. For example, kernel 6.12rc3 aarch64's on disk size is ~22% smaller and boots ~16% faster on a RPi4. Since this was already on for some x86 flavors, lets propogate the setting to all appropriate architectures and kernel flavors. Signed-off-by: Jeremy Linton <jlinton(a)redhat.com> diff --git a/redhat/configs/common/generic/CONFIG_KERNEL_GZIP b/redhat/configs/common/generic/CONFIG_KERNEL_GZIP index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_KERNEL_GZIP +++ b/redhat/configs/common/generic/CONFIG_KERNEL_GZIP @@ -1 +1 @@ -CONFIG_KERNEL_GZIP=y +# CONFIG_KERNEL_GZIP is not set diff --git a/redhat/configs/fedora/generic/CONFIG_KERNEL_UNCOMPRESSED b/redhat/configs/common/generic/CONFIG_KERNEL_UNCOMPRESSED rename from redhat/configs/fedora/generic/CONFIG_KERNEL_UNCOMPRESSED rename to redhat/configs/common/generic/CONFIG_KERNEL_UNCOMPRESSED index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/CONFIG_KERNEL_UNCOMPRESSED +++ b/redhat/configs/common/generic/CONFIG_KERNEL_UNCOMPRESSED diff --git a/redhat/configs/common/generic/CONFIG_KERNEL_ZSTD b/redhat/configs/common/generic/CONFIG_KERNEL_ZSTD index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_KERNEL_ZSTD +++ b/redhat/configs/common/generic/CONFIG_KERNEL_ZSTD @@ -1 +1 @@ -# CONFIG_KERNEL_ZSTD is not set +CONFIG_KERNEL_ZSTD=y diff --git a/redhat/configs/common/generic/powerpc/CONFIG_KERNEL_GZIP b/redhat/configs/common/generic/powerpc/CONFIG_KERNEL_GZIP new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/common/generic/powerpc/CONFIG_KERNEL_GZIP @@ -0,0 +1 @@ +CONFIG_KERNEL_GZIP=y diff --git a/redhat/configs/common/generic/s390x/CONFIG_KERNEL_GZIP b/redhat/configs/common/generic/s390x/CONFIG_KERNEL_GZIP new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/common/generic/s390x/CONFIG_KERNEL_GZIP @@ -0,0 +1 @@ +CONFIG_KERNEL_GZIP=y diff --git a/redhat/configs/common/generic/s390x/CONFIG_KERNEL_ZSTD b/redhat/configs/common/generic/s390x/CONFIG_KERNEL_ZSTD new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/common/generic/s390x/CONFIG_KERNEL_ZSTD @@ -0,0 +1 @@ +# CONFIG_KERNEL_ZSTD is not set diff --git a/redhat/configs/fedora/generic/x86/CONFIG_KERNEL_GZIP b/redhat/configs/fedora/generic/x86/CONFIG_KERNEL_GZIP deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/fedora/generic/x86/CONFIG_KERNEL_GZIP +++ /dev/null @@ -1 +0,0 @@ -# CONFIG_KERNEL_GZIP is not set diff --git a/redhat/configs/fedora/generic/x86/CONFIG_KERNEL_ZSTD b/redhat/configs/fedora/generic/x86/CONFIG_KERNEL_ZSTD deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/fedora/generic/x86/CONFIG_KERNEL_ZSTD +++ /dev/null @@ -1 +0,0 @@ -CONFIG_KERNEL_ZSTD=y diff --git a/redhat/configs/rhel/generic/s390x/CONFIG_KERNEL_UNCOMPRESSED b/redhat/configs/rhel/generic/s390x/CONFIG_KERNEL_UNCOMPRESSED deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/rhel/generic/s390x/CONFIG_KERNEL_UNCOMPRESSED +++ /dev/null @@ -1 +0,0 @@ -# CONFIG_KERNEL_UNCOMPRESSED is not set diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template index blahblah..blahblah 100644 --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -673,6 +673,8 @@ Provides: installonlypkg(kernel) # BuildRequires: kmod, bash, coreutils, tar, git-core, which BuildRequires: bzip2, xz, findutils, m4, perl-interpreter, perl-Carp, perl-devel, perl-generators, make, diffutils, gawk, %compression +# Kernel EFI/Compression set by CONFIG_KERNEL_ZSTD +BuildRequires: zstd BuildRequires: gcc, binutils, redhat-rpm-config, hmaccalc, bison, flex, gcc-c++ %if 0%{?fedora} BuildRequires: rust, rust-src, bindgen -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3460

4 19

Kernel 6.12 Test Week Invitation
by Sumantro Mukherjee 01 Dec '24

01 Dec '24

Hey All, I would like to invite all of you to participate in the Kernel 6.12 Test week is happening from 2024-12-01 to 2024-12-08. It's fairly simple, head over to the wiki [0] and read in detail about the test week and simply run the test case mentioned in[1] and enter your results. As usual, the Fedora QA team will hangout at #fedora-test-day(a)libera.chat for questions and discussion. [0]http://fedoraproject.org/wiki/Test_Day:2024-12-01_Kernel_6.12_Test_Week [1]https://testdays.fedoraproject.org/events/205 -- //sumantro Fedora QE TRIED AND PERSONALLY TESTED, ERGO TRUSTED <https://redhat.com/trusted>

2 1

[OS-BUILD PATCH] redhat: Drop bpftool from kernel spec
by Viktor Malik (via Email Bridge) 25 Nov '24

25 Nov '24

From: Viktor Malik <vmalik(a)redhat.com> redhat: Drop bpftool from kernel spec We are going to build bpftool as a separate package. There are 2 main reasons for this change: (1) bpftool version is independent of the kernel and having it in the kernel spec causes all kinds of problems and (2) bpftool is loosely coupled to the libbpf library which is also packaged separately. Note that bpftool is still built during kernel build in 2 places: - Bootstrap bpftool for generating vmlinux.h which goes into kernel-devel. - As a part of kernel BPF selftests build. Here, we opt to use the bpftool from kernel sources rather than the system one because upstream selftests sometimes require unreleased bpftool features to build successfully. Signed-off-by: Viktor Malik <vmalik(a)redhat.com> diff --git a/redhat/Makefile b/redhat/Makefile index blahblah..blahblah 100644 --- a/redhat/Makefile +++ b/redhat/Makefile @@ -335,12 +335,6 @@ KABI_TARBALL:=$(REDHAT)/kernel-abi-stablelists-$(SPECKABIVERSION).tar.xz KABIDW := $(REDHAT)/kabi-dwarf KABIDW_TARBALL:=$(REDHAT)/kernel-kabi-dw-$(SPECKABIVERSION).tar.xz -# Taken from tools/lib/bpf/Makefile -SPECBPFTOOLVERSION:=$(shell \ - grep -oE '^LIBBPF_([0-9.]+)' $(TOPDIR)/tools/lib/bpf/libbpf.map | \ - sort -rV | head -n1 | cut -d'_' -f2 | \ - awk -F. -v OFS=. '{$$1 += 6 ; print}') - # load Makefile variable settings from user-specified configuration file, # ~/.rhpkg.mk or $TOPDIR/.rhpkg.mk ifeq ("$(RHDISTGIT_CACHE)", "") diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template index blahblah..blahblah 100644 --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @@ -228,8 +228,6 @@ Summary: The Linux kernel %define with_libperf %{?_without_libperf: 0} %{?!_without_libperf: 1} # tools %define with_tools %{?_without_tools: 0} %{?!_without_tools: 1} -# bpf tool -%define with_bpftool %{?_without_bpftool: 0} %{?!_without_bpftool: 1} # kernel-debuginfo %define with_debuginfo %{?_without_debuginfo: 0} %{?!_without_debuginfo: 1} # kernel-abi-stablelists @@ -389,7 +387,6 @@ Summary: The Linux kernel %define with_perf 0 %define with_libperf 0 %define with_tools 0 -%define with_bpftool 0 %define with_kernel_abi_stablelists 0 %define with_selftests 0 %define with_ipaclones 0 @@ -402,7 +399,6 @@ Summary: The Linux kernel %define with_perf 0 %define with_libperf 0 %define with_tools 0 -%define with_bpftool 0 %define with_kernel_abi_stablelists 0 %define with_selftests 0 %define with_ipaclones 0 @@ -418,7 +414,6 @@ Summary: The Linux kernel %define with_perf 0 %define with_libperf 0 %define with_tools 0 -%define with_bpftool 0 %define with_kernel_abi_stablelists 0 %define with_selftests 0 %define with_ipaclones 0 @@ -444,11 +439,6 @@ Summary: The Linux kernel %define use_vdso 1 %endif -# selftests require bpftool to be built. If bpftools is disabled, then disable selftests -%if %{with_bpftool} == 0 -%define with_selftests 0 -%endif - %ifnarch noarch %define with_kernel_abi_stablelists 0 %endif @@ -479,7 +469,6 @@ Summary: The Linux kernel %define with_tools 0 %define with_perf 0 %define with_libperf 0 -%define with_bpftool 0 %define with_selftests 0 %define with_debug 0 %endif @@ -573,7 +562,6 @@ Summary: The Linux kernel %define with_perf 0 %define with_libperf 0 %define with_tools 0 -%define with_bpftool 0 %define with_selftests 0 %define _enable_debug_packages 0 %endif @@ -713,12 +701,8 @@ BuildRequires: libnl3-devel %if %{with_tools} || %{signmodules} || %{signkernel} BuildRequires: openssl-devel %endif -%if %{with_bpftool} -BuildRequires: python3-docutils -BuildRequires: zlib-devel binutils-devel llvm-devel -%endif %if %{with_selftests} -BuildRequires: clang llvm-devel fuse-devel +BuildRequires: clang llvm-devel fuse-devel zlib-devel binutils-devel %ifarch x86_64 BuildRequires: lld %endif @@ -1243,42 +1227,6 @@ analysing the logical and timing behavior of Linux. # with_tools %endif -%if %{with_bpftool} - -%if 0%{?fedora} -# bpftoolverion doesn't bump with stable updates so let's stick with -# upstream kernel version for the package name. We still get correct -# output with bpftool -V. -%define bpftoolversion %specrpmversion -%else -%define bpftoolversion %%SPECBPFTOOLVERSION%% -%endif - -%package -n bpftool -Summary: Inspection and simple manipulation of eBPF programs and maps -Version: %{bpftoolversion} -%description -n bpftool -This package contains the bpftool, which allows inspection and simple -manipulation of eBPF programs and maps. - -%package -n bpftool-debuginfo -Summary: Debug information for package bpftool -Version: %{bpftoolversion} -Group: Development/Debug -Requires: %{name}-debuginfo-common-%{_target_cpu} = %{specrpmversion}-%{release} -AutoReqProv: no -%description -n bpftool-debuginfo -This package provides debug information for the bpftool package. - -%{expand:%%global _find_debuginfo_opts %{?_find_debuginfo_opts} -p '.*%%{_sbindir}/bpftool(\.debug)?|XXX' -o bpftool-debuginfo.list} - -# Setting "Version:" above overrides the internal {version} macro, -# need to restore it here -%define version %{specrpmversion} - -# with_bpftool -%endif - %if %{with_selftests} %package selftests-internal @@ -3040,17 +2988,6 @@ if [ -f $DevelDir/vmlinux.h ]; then fi echo "${RPM_VMLINUX_H}" > ../vmlinux_h_path -%if %{with_bpftool} -%global bpftool_make \ - %{__make} EXTRA_CFLAGS="${RPM_OPT_FLAGS}" EXTRA_CXXFLAGS="${RPM_OPT_FLAGS}" EXTRA_LDFLAGS="%{__global_ldflags}" DESTDIR=$RPM_BUILD_ROOT %{?make_opts} VMLINUX_H="${RPM_VMLINUX_H}" V=1 -%{log_msg "build bpftool"} -pushd tools/bpf/bpftool -%{bpftool_make} -popd -%else -%{log_msg "bpftools disabled ... disabling selftests"} -%endif - %if %{with_selftests} %{log_msg "start build selftests"} # Unfortunately, samples/bpf/Makefile expects that the headers are installed @@ -3070,9 +3007,6 @@ fi %{log_msg "build samples/bpf"} %{make} %{?_smp_mflags} ARCH=$Arch V=1 M=samples/bpf/ VMLINUX_H="${RPM_VMLINUX_H}" || true -# Prevent bpf selftests to build bpftool repeatedly: -export BPFTOOL=$(pwd)/tools/bpf/bpftool/bpftool - pushd tools/testing/selftests # We need to install here because we need to call make with ARCH set which # doesn't seem possible to do in the install section. @@ -3110,7 +3044,6 @@ done %buildroot_save_unstripped "usr/libexec/kselftests/bpf/test_progs" %buildroot_save_unstripped "usr/libexec/kselftests/bpf/test_progs-no_alu32" popd -export -n BPFTOOL %{log_msg "end build selftests"} %endif @@ -3360,12 +3293,6 @@ rm -f %{buildroot}%{_bindir}/timerlat popd %endif -%if %{with_bpftool} -pushd tools/bpf/bpftool -%{bpftool_make} prefix=%{_prefix} bash_compdir=%{_sysconfdir}/bash_completion.d/ mandir=%{_mandir} install doc-install -popd -%endif - %if %{with_selftests} pushd samples install -d %{buildroot}%{_libexecdir}/ksamples @@ -3908,29 +3835,6 @@ fi\ # with_tools %endif -%if %{with_bpftool} -%files -n bpftool -%{_sbindir}/bpftool -%{_sysconfdir}/bash_completion.d/bpftool -%{_mandir}/man8/bpftool-cgroup.8.gz -%{_mandir}/man8/bpftool-gen.8.gz -%{_mandir}/man8/bpftool-iter.8.gz -%{_mandir}/man8/bpftool-link.8.gz -%{_mandir}/man8/bpftool-map.8.gz -%{_mandir}/man8/bpftool-prog.8.gz -%{_mandir}/man8/bpftool-perf.8.gz -%{_mandir}/man8/bpftool.8.gz -%{_mandir}/man8/bpftool-net.8.gz -%{_mandir}/man8/bpftool-feature.8.gz -%{_mandir}/man8/bpftool-btf.8.gz -%{_mandir}/man8/bpftool-struct_ops.8.gz - -%if %{with_debuginfo} -%files -f bpftool-debuginfo.list -n bpftool-debuginfo -%defattr(-,root,root) -%endif -%endif - %if %{with_selftests} %files selftests-internal %{_libexecdir}/ksamples diff --git a/redhat/scripts/genspec/genspec.sh b/redhat/scripts/genspec/genspec.sh index blahblah..blahblah 100755 --- a/redhat/scripts/genspec/genspec.sh +++ b/redhat/scripts/genspec/genspec.sh @@ -57,7 +57,6 @@ test -f "$SOURCES/$SPECFILE" && s/%%SPECVERSION%%/$SPECVERSION/ s/%%SPECRPMVERSION%%/$SPECRPMVERSION/ s/%%SPECKABIVERSION%%/$SPECKABIVERSION/ - s/%%SPECBPFTOOLVERSION%%/$SPECBPFTOOLVERSION/ s/%%SPECTARFILE_RELEASE%%/$SPECTARFILE_RELEASE/ s/%%SPECPACKAGE_NAME%%/$SPECPACKAGE_NAME/ s/%%SPECGEMINI%%/$SPECGEMINI/ diff --git a/redhat/scripts/genspec/headerspec.sh b/redhat/scripts/genspec/headerspec.sh index blahblah..blahblah 100755 --- a/redhat/scripts/genspec/headerspec.sh +++ b/redhat/scripts/genspec/headerspec.sh @@ -27,7 +27,6 @@ test -f "$SOURCES/kernel-headers.spec" && s/%%SPECVERSION%%/$SPECVERSION/ s/%%SPECRPMVERSION%%/$SPECRPMVERSION/ s/%%SPECKABIVERSION%%/$SPECKABIVERSION/ - s/%%SPECBPFTOOLVERSION%%/$SPECBPFTOOLVERSION/ s/%%SPECTARFILE_RELEASE%%/$SPECTARFILE_RELEASE/ s/%%SPECPACKAGE_NAME%%/$SPECPACKAGE_NAME/ s/%%SPECGEMINI%%/$SPECGEMINI/ diff --git a/redhat/self-test/data/create-data.sh b/redhat/self-test/data/create-data.sh index blahblah..blahblah 100755 --- a/redhat/self-test/data/create-data.sh +++ b/redhat/self-test/data/create-data.sh @@ -51,7 +51,6 @@ do # the tree is changed. # RHEL_RELEASE can change build-to-build. # SHELL can change depending on user's environment - # SPECBPFTOOLVERSION is derived from tools/lib/bpf/Makefile and may change. # RHGITURL may change depending on the user's method of cloning # RHDISTDATADIR will change based on these tests # VARS is a list of variables added for the 'dist-dump-variables' target @@ -61,7 +60,6 @@ do grep -v -w UPSTREAM |\ grep -v -w RHEL_RELEASE |\ grep -v -w SHELL |\ - grep -v -w SPECBPFTOOLVERSION |\ grep -v -w RHGITURL |\ grep -v -w RHDISTDATADIR |\ grep -v -w VARS |\ -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3338

5 7

The kernel-ark os-build branch has been rebased
by Justin Forbes 18 Nov '24

18 Nov '24

Please rebase any pending MRs and repush. As we have done since 5.15, we have done this again for os-build, we expect to keep it up as a cadence with every upstream release. This means we will do it again when 6.13 releases, and again with 6.14... It is difficult to manage a regularly rebased tree, because any outstanding MR is invalidated and has to also be rebased. But not doing somewhat regular rebases can also be difficult in the spirit of the openness that Fedora is based upon. While there are plenty of ways to see which patches we carry compared to upstream, some of those patches are fairly old, and would not apply cleanly at all to a modern tree after several releases were merged in with them. As we have gotten into a flow of things with merge requests, we can get to the point of very few outstanding MRs towards the end of a release cycle, and that makes it an opportune time to rebase the tree. This also means that the patches we carry should be no more than 1 release out of date, making them easier to apply to various other trees. I do realize that this is a minor inconvenience every 2-3 months, but I believe the results are worth it. Thanks, Justin

1 0

✅ PASS (MISSED 10 of 103): Test report for 6.11.9-100.fc39 (fedora-latest)
by cki-project＠redhat.com 18 Nov '24

18 Nov '24

Hi, we tested your kernel and here are the results: Overall result: PASSED Merge: OK Compile: OK Test: OK Tested-by: CKI Project <cki-project(a)redhat.com> Kernel information: Brew / Koji Task ID: 125956756 You can find all the details about the test run at https://datawarehouse.cki-project.org/kcidb/checkouts/redhat:koji-125956756 Tests that were not ran because of internal issues: Boot test [s390x] CKI/restraint [s390x] machineinfo [s390x] Reboot test [s390x] SELinux Custom Module Setup [s390x] Storage - swraid scsi_raid [s390x] stress: stress-ng - cpu [s390x] stress: stress-ng - cpu-cache [s390x] stress: stress-ng - interrupt [s390x] stress: stress-ng - memory [s390x] If you find a failure unrelated to your changes, please ask the test maintainer to review it. This will prevent the failures from being incorrectly reported in the future. Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________

1 0

✅ PASS: Test report for 6.11.8-100.fc39 (fedora-latest)
by cki-project＠redhat.com 15 Nov '24

15 Nov '24

Hi, we tested your kernel and here are the results: Overall result: PASSED Merge: OK Compile: OK Test: OK Tested-by: CKI Project <cki-project(a)redhat.com> Kernel information: Brew / Koji Task ID: 125861908 You can find all the details about the test run at https://datawarehouse.cki-project.org/kcidb/checkouts/redhat:koji-125861908 If you find a failure unrelated to your changes, please ask the test maintainer to review it. This will prevent the failures from being incorrectly reported in the future. Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________

1 0

[OS-BUILD PATCHv2] redhat/configs: delete renamed CONFIG_MLX5_EN_MACSEC
by Michal Schmidt (via Email Bridge) 15 Nov '24

15 Nov '24

From: Michal Schmidt <mschmidt(a)redhat.com> redhat/configs: delete renamed CONFIG_MLX5_EN_MACSEC CONFIG_MLX5_EN_MACSEC was renamed to CONFIG_MLX5_MACSEC in commit 7390762a0737 ("net/mlx5e: Move MACsec flow steering operations to be used as core library"). Remove the old name from redhat/configs. The feature is already correctly enabled under the new name. Signed-off-by: Michal Schmidt <mschmidt(a)redhat.com> diff --git a/redhat/configs/common/generic/CONFIG_MLX5_EN_MACSEC b/redhat/configs/common/generic/CONFIG_MLX5_EN_MACSEC deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/common/generic/CONFIG_MLX5_EN_MACSEC +++ /dev/null @@ -1 +0,0 @@ -CONFIG_MLX5_EN_MACSEC=y -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3144

3 4

[OS-BUILD PATCHv3] redhat/configs: Enable CONFIG_MITIGATION_SLS for RHEL
by Waiman Long (via Email Bridge) 15 Nov '24

15 Nov '24

From: Waiman Long <longman(a)redhat.com> redhat/configs: Enable CONFIG_MITIGATION_SLS for RHEL Like Fedora, CONFIG_MITIGATION_SLS had been enabled for RHEL9 since 9.3. Update the kernel-ark setting to match current RHEL9 setting. Signed-off-by: Waiman Long <longman(a)redhat.com> diff --git a/redhat/configs/fedora/generic/x86/CONFIG_MITIGATION_SLS b/redhat/configs/common/generic/x86/CONFIG_MITIGATION_SLS rename from redhat/configs/fedora/generic/x86/CONFIG_MITIGATION_SLS rename to redhat/configs/common/generic/x86/CONFIG_MITIGATION_SLS index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/x86/CONFIG_MITIGATION_SLS +++ b/redhat/configs/common/generic/x86/CONFIG_MITIGATION_SLS diff --git a/redhat/configs/rhel/generic/x86/CONFIG_MITIGATION_SLS b/redhat/configs/rhel/generic/x86/CONFIG_MITIGATION_SLS deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/rhel/generic/x86/CONFIG_MITIGATION_SLS +++ /dev/null @@ -1 +0,0 @@ -# CONFIG_MITIGATION_SLS is not set -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3222

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

kernel November 2024