|
[ANNOUNCE] v4.4.231-cip47-rt30
Hi!
v4.4.231-cip47-rt30 should be available at kernel.org.
Trees are available
Hi!
v4.4.231-cip47-rt30 should be available at kernel.org.
Trees are available
|
By
Pavel Machek
·
#5013
·
|
|
Re: [PATCH 4.9 18/22] x86/fpu: Disable bottom halves while loading FPU registers
The conflict was due to a missing rename back in 4.4: e4a81bfcaae1
("x86/fpu: Rename fpu::fpstate_active to fpu::initialized").
I've fixed up the patch and queued it for 4.4, thanks for pointing
The conflict was due to a missing rename back in 4.4: e4a81bfcaae1
("x86/fpu: Rename fpu::fpstate_active to fpu::initialized").
I've fixed up the patch and queued it for 4.4, thanks for pointing
|
By
Sasha Levin <sashal@...>
·
#5012
·
|
|
Re: [PATCH 4.9 18/22] x86/fpu: Disable bottom halves while loading FPU registers
You are asking about something we did back in 2018. I can't remember
what I did last week :)
If you provide a backport that works, I'll be glad to take it. The
current patch does not apply cleanly
You are asking about something we did back in 2018. I can't remember
what I did last week :)
If you provide a backport that works, I'll be glad to take it. The
current patch does not apply cleanly
|
By
Greg Kroah-Hartman <gregkh@...>
·
#5011
·
|
|
Re: [PATCH 4.9 18/22] x86/fpu: Disable bottom halves while loading FPU registers
Any reason why the backport stopped back than at 4.9? I just debugged this out of a 4.4 kernel, and it is needed there as well. I'm happy to propose a backport, would just appreciate a hint if the BH
Any reason why the backport stopped back than at 4.9? I just debugged this out of a 4.4 kernel, and it is needed there as well. I'm happy to propose a backport, would just appreciate a hint if the BH
|
By
Jan Kiszka
·
#5010
·
|
|
[isar-cip-core PATCH v3 6/6] doc: Add README for secureboot
From: Quirin Gylstorff <quirin.gylstorff@...>
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...>
---
doc/README.secureboot.md | 229 +++++++++++++++++++++++++++++++++++++++
1
From: Quirin Gylstorff <quirin.gylstorff@...>
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...>
---
doc/README.secureboot.md | 229 +++++++++++++++++++++++++++++++++++++++
1
|
By
Quirin Gylstorff
·
#5009
·
|
|
[isar-cip-core PATCH v3 5/6] secure-boot: Add Debian snakeoil keys for ease-of-use
From: Quirin Gylstorff <quirin.gylstorff@...>
Use the Debian snakeoil keys to have a demo case available without
the OVMF setup. Copy the used keys from the build to the deploy
directory to
From: Quirin Gylstorff <quirin.gylstorff@...>
Use the Debian snakeoil keys to have a demo case available without
the OVMF setup. Copy the used keys from the build to the deploy
directory to
|
By
Quirin Gylstorff
·
#5008
·
|
|
[isar-cip-core PATCH v3 4/6] secure-boot: Add secure boot with unified kernel image
From: Quirin Gylstorff <quirin.gylstorff@...>
A unified kernel image contains the os-release, kernel,
kernel commandline, initramfs and efi-stub in one binary.
This binary can be boot by
From: Quirin Gylstorff <quirin.gylstorff@...>
A unified kernel image contains the os-release, kernel,
kernel commandline, initramfs and efi-stub in one binary.
This binary can be boot by
|
By
Quirin Gylstorff
·
#5007
·
|
|
[isar-cip-core PATCH v3 3/6] secure-boot: select boot partition in initramfs
From: Quirin Gylstorff <quirin.gylstorff@...>
As the usage of a unified kernel image freeze the kernel commmandline
during build time the rootfs selection for swupdate can no longer be
done
From: Quirin Gylstorff <quirin.gylstorff@...>
As the usage of a unified kernel image freeze the kernel commmandline
during build time the rootfs selection for swupdate can no longer be
done
|
By
Quirin Gylstorff
·
#5006
·
|
|
[isar-cip-core PATCH v3 0/6] secureboot with efibootguard
From: Quirin Gylstorff <quirin.gylstorff@...>
This patchset adds secureboot with efibootguard to cip-core.
The image build signs the efibootguard bootloader (bootx64.efi) and generates
a
From: Quirin Gylstorff <quirin.gylstorff@...>
This patchset adds secureboot with efibootguard to cip-core.
The image build signs the efibootguard bootloader (bootx64.efi) and generates
a
|
By
Quirin Gylstorff
·
#5005
·
|
|
[isar-cip-core PATCH v3 2/6] isar-patch: Add initramfs-config patch
From: Quirin Gylstorff <quirin.gylstorff@...>
Adapt the initramfs generation to set for example the root device
in the initramfs
Signed-off-by: Quirin Gylstorff
From: Quirin Gylstorff <quirin.gylstorff@...>
Adapt the initramfs generation to set for example the root device
in the initramfs
Signed-off-by: Quirin Gylstorff
|
By
Quirin Gylstorff
·
#5004
·
|
|
[isar-cip-core PATCH v3 1/6] kernel: add fat for qemu-amd64
From: Quirin Gylstorff <quirin.gylstorff@...>
Add a fat configuration to access FAT Partitions on the qemu-amd64
target.
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...>
---
From: Quirin Gylstorff <quirin.gylstorff@...>
Add a fat configuration to access FAT Partitions on the qemu-amd64
target.
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...>
---
|
By
Quirin Gylstorff
·
#5003
·
|
|
[isar-cip-core PATCH v3 3/5] recipes-core: add swupdate
From: Quirin Gylstorff <quirin.gylstorff@...>
Add swupdate for A/B software updates. Currently the Round Robin
handler in lua supports efibootguard as bootloader. The u-boot
implementation is
From: Quirin Gylstorff <quirin.gylstorff@...>
Add swupdate for A/B software updates. Currently the Round Robin
handler in lua supports efibootguard as bootloader. The u-boot
implementation is
|
By
Quirin Gylstorff
·
#5002
·
|
|
[isar-cip-core PATCH v3 5/5] swupdate: create swu file from wic image
From: Quirin Gylstorff <quirin.gylstorff@...>
Create a swu file for swupdate to update devices in the field.
This is done in the same step as the complete image build
to avoid diverging
From: Quirin Gylstorff <quirin.gylstorff@...>
Create a swu file for swupdate to update devices in the field.
This is done in the same step as the complete image build
to avoid diverging
|
By
Quirin Gylstorff
·
#5001
·
|
|
[isar-cip-core PATCH v3 4/5] wic: Add wks files for A/B Partition update
From: Quirin Gylstorff <quirin.gylstorff@...>
Add wks for:
- simatic-ipc227e
- qemu-amd64
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...>
---
kas/opt/ebg-swu.yml
From: Quirin Gylstorff <quirin.gylstorff@...>
Add wks for:
- simatic-ipc227e
- qemu-amd64
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...>
---
kas/opt/ebg-swu.yml
|
By
Quirin Gylstorff
·
#5000
·
|
|
[isar-cip-core PATCH v3 1/5] recipes-bsp: Add efibootguard
From: Quirin Gylstorff <quirin.gylstorff@...>
Add the bootloader efibootguard for A/B partition update
on x86 with EFI.
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...>
---
From: Quirin Gylstorff <quirin.gylstorff@...>
Add the bootloader efibootguard for A/B partition update
on x86 with EFI.
Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...>
---
|
By
Quirin Gylstorff
·
#4999
·
|
|
[isar-cip-core PATCH v3 2/5] patches: add libubootenv
From: Quirin Gylstorff <quirin.gylstorff@...>
swupdate 2020.04 requires libubootenv as build dependency.
libubootenv is a library that provides a hardware independent
way to access to U-Boot
From: Quirin Gylstorff <quirin.gylstorff@...>
swupdate 2020.04 requires libubootenv as build dependency.
libubootenv is a library that provides a hardware independent
way to access to U-Boot
|
By
Quirin Gylstorff
·
#4998
·
|
|
[isar-cip-core PATCH v3 0/5] A/B Rootfs update with software update
From: Quirin Gylstorff <quirin.gylstorff@...>
This patchset adds efibootguard, swupdate to allow A/B updates in
cip-core. The update mechanism is currently only implemented for
From: Quirin Gylstorff <quirin.gylstorff@...>
This patchset adds efibootguard, swupdate to allow A/B updates in
cip-core. The update mechanism is currently only implemented for
|
By
Quirin Gylstorff
·
#4997
·
|
|
Re: Resource describing the Deby workflow?
Is tlsdate a better alternative?
--
Mohammed Billoo
MAB Labs, LLC
www.mab-labs.com
Is tlsdate a better alternative?
--
Mohammed Billoo
MAB Labs, LLC
www.mab-labs.com
|
By
Mohammed Billoo <mab@...>
·
#4996
·
|
|
Re: Resource describing the Deby workflow?
Hi!
Notice that in this case SSL is not adding as much security as you
think it does.
SSL attempts to protect against active attackers, and those can
manipulate NTP easily.
Best
Hi!
Notice that in this case SSL is not adding as much security as you
think it does.
SSL attempts to protect against active attackers, and those can
manipulate NTP easily.
Best
|
By
Pavel Machek
·
#4995
·
|
|
Re: CIP IRC weekly meeting today
Hello all,
The IRC logger was down yesterday, so please see a dirty copy/paste from the meeting below.
Kind regards, Chris
/start
Hello all,
The IRC logger was down yesterday, so please see a dirty copy/paste from the meeting below.
Kind regards, Chris
/start
|
By
Chris Paterson
·
#4994
·
|