On Fri, 12 Apr 2019, Michael Ranweiler wrote: > Hi Manoj - were you going to spin a new test kernel with the extra patches > or did you want to stick where we are? It's getting late, so I wanted to > make sure that one of those versions could go in. The extra 3 aren't, I > think, critical, or could be added later, though it'd be good to have them. > Also wanted to get them posted - should I go ahead and do that?
The latest test kernel that is available in the PPA https://launchpad.net/~ubuntu-power-triage/+archive/ubuntu/lp1822870 includes all that patches in the tarball and the patch "51c3c62b58b3 powerpc: Avoid code patching freed init sections."' In comment #11 Ellerman@ibm verified that this kernel passes his tests in the simulator. We would like to keep the patchset to the min number of required critical patches. The patches to clean up code etc could trigger the kernel team to reject the SRU because these are not critical fixes. If you are satisfied with the set of patches that are currently in the PPA kernel I can submit these for SRU review. Here is the list of patches in the PPA kernel, please note the shaids wont match with yours (upstream) because this is from the Ubuntu 4.15 kernel source. 8db52d2ad2ce (HEAD -> spectre-1822870) powerpc: Avoid code patching freed init sections 9358c01bc816 KVM: PPC: Book3S: Add count cache flush parameters to kvmppc_get_cpu_char() 4c3a23aaf32f powerpc/security: Fix spectre_v2 reporting 9e74ec03431a powerpc/fsl: Add nospectre_v2 command line argument 60ec56d8b314 powerpc/fsl: Fix spectre_v2 mitigations reporting 5c2a9f5f9d9e powerpc/powernv: Query firmware for count cache flush settings ce74f68a8bfd powerpc/pseries: Query hypervisor for count cache flush settings e4ebd9989cdc powerpc/64s: Add support for software count cache flush 1d49623704bf powerpc/64s: Add new security feature flags for count cache flush 7aa198fb1644 powerpc/asm: Add a patch_site macro & helpers for patching instructions 4b97b64ac5cd powerpc/lib/feature-fixups: use raw_patch_instruction() 6508ea530cb7 powerpc/lib/code-patching: refactor patch_instruction() f06866d8777e powerpc/64: Make meltdown reporting Book3S 64 specific a40b1c85cc50 powerpc/64: Call setup_barrier_nospec() from setup_arch() c9c86099ae24 powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC 82cf510fab3f powerpc/64: Make stf barrier PPC_BOOK3S_64 specific. b4d6e3d336c3 powerpc/64: Disable the speculation barrier from the command line 4b94b84138dd powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 6d63c784648f powerpc/64s: Enhance the information in cpu_show_spectre_v1() e556e8721b0f powerpc/64: Use barrier_nospec in syscall entry b09734c0aef5 powerpc: Use barrier_nospec in copy_from_user() 59abe6f37d98 powerpc/64s: Enable barrier_nospec based on firmware settings f9c9cbba5139 powerpc/64s: Patch barrier_nospec in modules b7860091936e powerpc/64s: Add support for ori barrier_nospec patching > > Thanks! > > Mike > > Mike Ranweiler > mranw...@us.ibm.com > > > -----Michael Ranweiler/Rochester/IBM wrote: -----To: Manoj Iyer > <manoj.i...@canonical.com> > From: Michael Ranweiler/Rochester/IBM > Date: 04/11/2019 12:21AM > Cc: 1822...@bugs.launchpad.net > Subject: Re: Could you please test the PPA kernel? > > Manoj, > > I tested it, but we're missing a patch. So I will attach that after I've > had a chance to retest the series - sorry for this, we reviewed the list, > but this one got dropped. > > Thanks, > > Mike > > Mike Ranweiler > mranw...@us.ibm.com > > > -----Manoj Iyer <manoj.i...@canonical.com> wrote: -----To: Michael Ranweiler > <mranw...@us.ibm.com> > From: Manoj Iyer <manoj.i...@canonical.com> > Date: 04/10/2019 03:48PM > Cc: 1822...@bugs.launchpad.net > Subject: Could you please test the PPA kernel? > > Michael, > > I have test kernel with the patches cherry-picked/backported to 4.15 > bionic. We do not have a dd2.3 hw in-house, could you please validate that > this kernel works for you and report back in the bug report? > > https://launchpad.net/~ubuntu-power-triage/+archive/ubuntu/lp1822870/ > > Once I get the validation results I can send a pull request to the kernel > team. > > Thanks > -- > ============================ > Manoj Iyer > Ubuntu/Canonical > ============================ > > > > -- ============================ Manoj Iyer Ubuntu/Canonical ============================ -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1822870 Title: Backport support for software count cache flush Spectre v2 mitigation. (CVE) (required for POWER9 DD2.3) Status in The Ubuntu-power-systems project: In Progress Status in linux package in Ubuntu: In Progress Bug description: For the different kernels: The HWE a563fd9c62f0 UBUNTU: Ubuntu-hwe-4.18.0-17.18~18.04.1 appears to have all patches. Disco appears to be missing only this patch: 92edf8df0ff2ae86cc632eeca0e651fd8431d40d powerpc/security: Fix spectre_v2 reporting Cosmic (which is supported until July) is missing a number of patches: cf175dc315f90185128fb061dc05b6fbb211aa2f powerpc/64: Disable the speculation barrier from the command line 6453b532f2c8856a80381e6b9a1f5ea2f12294df powerpc/64: Make stf barrier PPC_BOOK3S_64 specific. 179ab1cbf883575c3a585bcfc0f2160f1d22a149 powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC af375eefbfb27cbb5b831984e66d724a40d26b5c powerpc/64: Call setup_barrier_nospec() from setup_arch() 406d2b6ae3420f5bb2b3db6986dc6f0b6dbb637b powerpc/64: Make meltdown reporting Book3S 64 specific 06d0bbc6d0f56dacac3a79900e9a9a0d5972d818 powerpc/asm: Add a patch_site macro & helpers for patching instructions dc8c6cce9a26a51fc19961accb978217a3ba8c75 powerpc/64s: Add new security feature flags for count cache flush ee13cb249fabdff8b90aaff61add347749280087 powerpc/64s: Add support for software count cache flush ba72dc171954b782a79d25e0f4b3ed91090c3b1e powerpc/pseries: Query hypervisor for count cache flush settings 99d54754d3d5f896a8f616b0b6520662bc99d66b powerpc/powernv: Query firmware for count cache flush settings 7d8bad99ba5a22892f0cad6881289fdc3875a930 powerpc/fsl: Fix spectre_v2 mitigations reporting 92edf8df0ff2ae86cc632eeca0e651fd8431d40d powerpc/security: Fix spectre_v2 reporting This appears to already be in -next. For the bionic 18.04.1 (4.15) kernel only this patch is already part of master-next: a6b3964ad71a61bb7c61d80a60bea7d42187b2eb powerpc/64s: Add barrier_nospec The others are ported, there were only 3 that were not clean. Those are: 2eea7f067f495e33b8b116b35b5988ab2b8aec55 powerpc/64s: Add support for ori barrier_nospec patching This failed because commit a048a07d7f4535baa4cbad6bc024f175317ab938 is missing, but it does not look like that is required here. cb3d6759a93c6d0aea1c10deb6d00e111c29c19c powerpc/64s: Enable barrier_nospec based on firmware settings This failed because debugfs was already included, I can see that previously added, I didn't see where it was previously removed. 06d0bbc6d0f56dacac3a79900e9a9a0d5972d818 powerpc/asm: Add a patch_site macro & helpers for patching instructions This failed because 8183d99f4a22c is not included - but doesn't seem necessary. All other patches applied with, at most, some fuzz. Has had a little testing - boots, check debugfs, etc. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-power-systems/+bug/1822870/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
