Re: [OS-BUILD PATCHv11 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-03-19 Thread via Email Bridge
From: Daniel P. Berrangé on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1821357524

I don't think the directory name should influence the output UKI name. ie for
any of those directories, if i put a `fips.addon` file there, the output
binary addon should be `fips.addon.efi`.

Also if a 'fips.addon' file is present in both `/common/fips.addon` and
`/fedora/x86/fips.addon`, every target build should use the
`/common/fips.addon` as input, except for Fedora x86, should should use the
override. ie for any given addon name, the most highly specified directory
should win as input
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv11 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-03-19 Thread Emanuele Giuseppe Esposito (via Email Bridge)
From: Emanuele Giuseppe Esposito on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1821347736

Answering here because you @berrange and @prudo1 are making the same point:
the `common` folder.

So the idea is:
```
redhat/addons/virt
  common
common.addon // creates common-virt-rhel-x86, common-virt-rhel-aarch64,
common-virt-fedora-x86, common-virt-fedora-aarch64
  rhel
common
  rhel.addon // creates rhel-virt-rhel-x86, rhel-virt-rhel-aarch64
x86
  x86.addon // creates x86-virt-rhel-x86
aarch64
  aarch64.addon // creates aarch64-virt-rhel-aarch64
  fedora
[same story as rhel]
```

makes sense?
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCH] gitlab-ci: do not merge ark-latest for gating pipelines

2024-03-19 Thread Michael Hofmann (via Email Bridge)
From: Michael Hofmann on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3028#note_1821333677

lots 😂, basically all the scheduled container image builds are broken because
of this:
- eln: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-
pipelines/cki-trusted-contributors/-/jobs/6422778884
- rawhide: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-
pipelines/cki-trusted-contributors/-/jobs/6423188908
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv11 1/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-03-19 Thread Emanuele Giuseppe Esposito (via Email Bridge)
From: Emanuele Giuseppe Esposito on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1821326977

leftover from debugging
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv11 1/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-03-19 Thread Emanuele Giuseppe Esposito (via Email Bridge)
From: Emanuele Giuseppe Esposito on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1821326487

yes they need it, I think it's for the PE headers. Anyways, it's super
lightweight. But if not provided it will anyways default. And actually you
reminded me that it will be picked by default at these same locations, so no
need to add this option, neither to keep track of the arch.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv11 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-03-19 Thread via Email Bridge
From: Daniel P. Berrangé on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1821195372

Seeing `fips.addon` file duplicated multiple times makes me think we would
benefit from a `redhat/addons/fedora/virt/common/` directory for addons that
are not going to be architecture specific.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv11 1/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-03-19 Thread Philipp Rudo (via Email Bridge)
From: Philipp Rudo on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1821173690

+arch = path[-1]
+uki = path[-2]
+distro = path[-3]
+for addon_f in filenames:
+if addon_f.endswith('.addon'):
+addon_name = addon_f.replace(".addon","")
+addon_full_name =
f'{addon_name}-{uki}.{distro}.{arch}.addon.efi

I'm not sure if this directory structure is too simple. Thing is that for the
crashkernel= parameter the value is a size. We will need to provide multiple
addons for the parameter for different sizes so users can choose the best
matching one. With the directory structure you are suggesting this means that
we will need to maintain 4 sets of identical addons ((fedora, rhel)*(x86,
aarch64)). Wich will be a constant source of errors.

For configs there is the common/ directory that contains the configs that are
identical for rhel and fedora. In addtions configs contained directly in the
$flavor directory are identical for all arches (unless they explicitely
overwrite it...). Can we do the same for addons as well? That would reduce the
number of redundant definitions and makes managing the addons a lot easier.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv11 1/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-03-19 Thread Philipp Rudo (via Email Bridge)
From: Philipp Rudo on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1821173923

Is this print intentional or a leftover from debugging?
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv11 1/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-03-19 Thread Philipp Rudo (via Email Bridge)
From: Philipp Rudo on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1821173795

+cmd = [
+f'{UKIFY_PATH}', 'build',
+f'--stub={CURRENT_SYSTEMD_STUB}'
Do addons need a stub? I thought addons are just data which get parsed by the
stub contained in the UKI.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCHv11 0/2] redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons

2024-03-19 Thread Philipp Rudo (via Email Bridge)
From: Philipp Rudo on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2917#note_1821173591

You need to do more to make me truly happy. But having the -debug sub-rpm is a
step in the right direction ;-)

Although I don't see a point in shipping unsigned addons at all. Creating the
addons is a simple call to ukify. Signing them is much more painful. You not
only need to create and install your MOK but, when you want to make it
properly, setup a full signing environment where the key is stored securely.
This adds a lot of complexity and additional hardware requirements only to
make sure that the MOK doesn't fall in the wrong hands. So the real value RH
adds for our customers is to sign the addons so they don't need to maintain
such an environment.

Anyway, when the consensus is to ship the -debug addons unsigned I won't block
it. We can still sign them later on when needed once we have real life
experience with UKI from the field.
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: [OS-BUILD PATCH] gitlab-ci: do not merge ark-latest for gating pipelines

2024-03-19 Thread Tales Aparecida (via Email Bridge)
From: Tales Aparecida on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3028#note_1820954518

Do you have a ticket or an example of the problem to post a link in here?
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: kernel leftovers in /boot/efi/EFI/Linux/

2024-03-19 Thread Germano Massullo

the patch worked, thank you
https://germano.fedorapeople.org/bugreport/kernel_leftovers/kernel_leftovers_fixed.txt
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: kernel leftovers in /boot/efi/EFI/Linux/

2024-03-19 Thread Gerd Hoffmann
> > https://github.com/kraxel/systemd/commit/6eed67a291bf896befb4d407dc57f9a7fca9c332
> 
> can't comment on the function, but there is a typo in the commit
> message IMO
> 
> and *not* exist early -> and *not* exit early

Thanks, fixed.

take care,
  Gerd
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: kernel leftovers in /boot/efi/EFI/Linux/

2024-03-19 Thread Gerd Hoffmann
On Tue, Mar 19, 2024 at 01:46:54AM +0100, Germano Massullo wrote:
> I created a Copr repository with the patch
> https://copr.fedorainfracloud.org/coprs/germano/systemd_fix_uki-copy_deinstall_patch/

Oh, I was thinking about just patching the file directly on the
installed system (90-uki-copy.install is simply copied on install,
so the patch should apply just fine) instead of doing a full
systemd package update ...

take care,
  Gerd
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[OS-BUILD PATCH] redhat: Fix RT kernel kvm subpackage requires

2024-03-19 Thread Juri Lelli (via Email Bridge)
From: Juri Lelli 

redhat: Fix RT kernel kvm subpackage requires

kernel-rt-kvm package currently depends on kernel-rt meta-package, so it
fails to install if kernel-rt is not installed as well. All the other
kernel-rt-* packages however only depend on the kernel-uname-r so they
do not require the kernel-rt meta-package.

Layered products doesn't use kernel-rt meta-package to side load
kernels, as it would bring in unwanted additional dependency. They
install kernel-rt-* packages and this is then currently a problem for
kernel-rt-kvm.

kernel-rt-kvm doesn't actually require kernel-rt meta-package, but only
the correct kernel-rt (core) version. So, fix its dependencies
accordingly.

Signed-off-by: Juri Lelli 

diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template
index blahblah..blahblah 100644
--- a/redhat/kernel.spec.template
+++ b/redhat/kernel.spec.template
@@ -1504,7 +1504,7 @@ The meta-package for the %{1} kernel\
 %package %{?1:%{1}-}kvm\
 Summary: KVM modules for package kernel%{?1:-%{1}}\
 Group: System Environment/Kernel\
-Requires: kernel%{?1:-%{1}} = %{version}-%{release}\
+Requires: kernel-uname-r = %{KVERREL}%{uname_suffix %{?1:%{1}}}\
 Provides: installonlypkg(kernel-module)\
 Provides: kernel%{?1:-%{1}}-kvm-%{_target_cpu} = %{version}-%{release}\
 AutoReq: no\

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3029
--
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue