Hi! Interesting. So Intel hardware is buggy, and it is unsuitable in certain virtualization configurations. It is a hardware problem, and there's little we could do about it. Best

Hi all, Kindly be reminded to attend the weekly meeting through IRC to discuss technical topics with CIP kernel today. Our channel is the following: irc:irc.libera.chat:6667/cip The IRC meeting

Thank you for the review. I see. Thank you for the details. If we treat cgroup_ns as only cgroup_ns that are owned by init_user_ns, we don't have to have an extra check. Thanks. I got

Hi ! It's this week's CVE report. This week reported 9 new CVEs. * New CVEs CVE-2021-44879: f2fs: fix to do sanity check on inode type during garbage collection CVSS v3 score is not provided In

" This adds Debian build profile support and requires to update the SWUpdate recipe to use this. Along this update, we can drop the build profile 'nodoc' which is no longer necessary as the build

From: Quirin Gylstorff <quirin.gylstorff@...> This Updates the ISAR revision cf3f18a649ff42726677a58b224b9bb58ea4ba46 and converts the swupdate recipes to the usage of

From: Quirin Gylstorff <quirin.gylstorff@...> refspec is now cf3f18a649ff42726677a58b224b9bb58ea4ba46 This adds Debian build profile support The option 'nodoc' is no longer necessary as the

Why can this be dropped now? Jan -- Siemens AG, Technology Competence Center Embedded Linux

Yes, folding would be better. I used two patches to provide one to a downstream layer. Quirin

I think I will have to fold patch 1 and 2 - otherwise swupdate will break after applying patch 1, no? Jan -- Siemens AG, Technology Competence Center Embedded Linux

From: Quirin Gylstorff <quirin.gylstorff@...> refspec is now cf3f18a649ff42726677a58b224b9bb58ea4ba46 This adds Debian build profile support Signed-off-by: Quirin Gylstorff

From: Quirin Gylstorff <quirin.gylstorff@...> This Updates the ISAR revision cf3f18a649ff42726677a58b224b9bb58ea4ba46 and converts the swupdate recipes to the usage of

From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- recipes-core/swupdate/swupdate.inc | 12 ++----------

Thanks for sharing this Masami, I've been looking into pre-cgroup_ns backport too. The condition to allow modifying release_agent is two-fold: a) caller is capabable(CAP_SYS_ADMIN), b) cgroup_ns is

Hello Pavel, FYI the best place to check out results from CIP trees is https://kernelci.ciplatform.org/. (which redirects to CIP specific results from kernelci.org) KernelCI is currently monitoring

Hi! I pushed a test commit to ci/pavel/linux-test. This is not first commit in the 14 days. Where can I get the results? I don't see them at https://linux.kernelci.org/test/ . pavel@amd:~/cip/4$

Hi! I'm trying to understand how to work with kernelci. I thought I'd start with understanding 4.4.302 results, so I went to examine some. a) qemu failing I got

From: "Eric W. Biederman" <ebiederm@...> commit 24f6008564183aa120d07c03d9289519c2fe02af upstream. The cgroup release_agent is called with call_usermodehelper. The

How about ia32 and aarch64 (even if the debian package does not support them yet)? Why making this configurable? Why making this a list? Do you see use cases beyond current EBG releases and recipes

From: Quirin Gylstorff <quirin.gylstorff@...> This preparing isar-cip-core to integrate the upcomming ISAR features sstate and sbuild. Sbuild doesn't allow the extraction of build