Hi everyone,As discussed during this year's Arch summit, Thomas is seeking help / support from projects that could benefit from his patch set which aims to enable reproducible kernel packages for Linux distributions (see the forwarded mail below).
As far as I can tell, this is something we would be interested in. I think it would be nice if we could "officially" claim our interest as "Arch Linux" to hopefully provide some assistance to Thomas for his incoming discussion with upstream.
Does any of the kernel packages maintainers on our side wants to jump in (or anyone else interested with some kernel knowledge, I guess)?
-------- Forwarded Message -------- Subject: Looking for feedback on CONFIG_MODULE_HASHES for Linux Date: Thu, 13 Nov 2025 21:10:58 +0100From: Thomas Weißschuh via rb-general <[email protected]> Reply-To: General discussions about reproducible builds <[email protected]>
To: [email protected] CC: Thomas Weißschuh <[email protected]> Hi everyone,I am the author of the CONFIG_MODULE_HASHES patchset [0] for the Linux kernel
which aims to enable reproducible kernel packages for Linux distributions. My goal is to reignite development and continue with the upstream process. To have a better base to argue with I'd like to get some confirmation thatdistributions have looked at the patches and do intent to adapt this scheme when it is available in the mainline kernel. That should help me get some leverage
with the upstream maintainers. The current form of the patches can be found at [1], they are only slightlyadapted from the previous submission to LKML. Remaining open topics before the
next submission are proper IMA support and stripping of modules.Future changes may introduce more hash algorithms and performance improvements,
but these should not be relvant for now.So if you are packaging Linux for your distribution, have looked at my patches
and are eager to use them, please let me know. My plan is to talk with theupstream maintainers at the upcoming Linux Plumbers Conference on 11th of December.
Thanks, Thomas[0] https://lore.kernel.org/lkml/[email protected]/ [1] https://git.kernel.org/pub/scm/linux/kernel/git/thomas.weissschuh/linux.git/log/?h=b4/module-hashes
OpenPGP_0xFDC3040B92ACA748.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
