Date   

Re: Reproducible Builds in August 2019

Chris Lamb <chris@...>
 

Hi Pavel,

# At some time in April 2018, the Webmin development build server was
# exploited and a vulnerability added to the password_change.cgi
# script. Because the timestamp on the file was set back, it did not
# show up in any Git diffs. This was included in the Webmin 1.890
# release.

That sounds to me like source code was modified locally on the build
server, not any sort of advanced toolchain compromise.
Whilst I would concede it was not a technically advanced attack it is
still an example of a lengthy and on-going compromise of the build
process and, more importantly, something that Reproducible Builds
would/should have been able to detect... hence its inclusion in our news
updates. :)


Best wishes,

--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o


Re: Reproducible Builds in August 2019

Pavel Machek
 

Hi!

Media coverage & events
=======================

A backdoor was found in Webmin [2] a popular web-based application used
by sysadmins to remotely manage Unix-based systems. Whilst more details
can be found on upstream's dedicated exploit page [3], it appears that
the build toolchain was compromised. Especially of note is that the
exploit "did not show up in any Git diffs" and thus would not have
been
Page says:

# At some time in April 2018, the Webmin development build server was
# exploited and a vulnerability added to the password_change.cgi
# script. Because the timestamp on the file was set back, it did not
# show up in any Git diffs. This was included in the Webmin 1.890
# release.

That sounds to me like source code was modified locally on the build
server, not any sort of advanced toolchain compromise.

Best regards,
Pavel
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html


[PATCH 4.19.y-cip 4/4] arm64: dts: renesas: hihope-common: Enable USB3.0

Biju Das <biju.das@...>
 

commit 3ba27637d8019d5bfea4ca25302b0d08bb6a1736 upstream.

This patch enables USB3.0 host/peripheral device node for the HiHope
RZ/G2M board.

Signed-off-by: Biju Das <biju.das@...>
Signed-off-by: Simon Horman <horms+renesas@...>
---
arch/arm64/boot/dts/renesas/hihope-common.dtsi | 29 ++++++++++++++++++++++++++
1 file changed, 29 insertions(+)

diff --git a/arch/arm64/boot/dts/renesas/hihope-common.dtsi b/arch/arm64/boot/dts/renesas/hihope-common.dtsi
index 8373cf8..de1c75f 100644
--- a/arch/arm64/boot/dts/renesas/hihope-common.dtsi
+++ b/arch/arm64/boot/dts/renesas/hihope-common.dtsi
@@ -166,6 +166,11 @@
bias-pull-up;
};
};
+
+ usb30_pins: usb30 {
+ groups = "usb30";
+ function = "usb30";
+ };
};

&rwdt {
@@ -230,3 +235,27 @@

status = "okay";
};
+
+&usb3_peri0 {
+ phys = <&usb3_phy0>;
+ phy-names = "usb";
+
+ companion = <&xhci0>;
+
+ status = "okay";
+};
+
+&usb3_phy0 {
+ status = "okay";
+};
+
+&usb3s0_clk {
+ clock-frequency = <100000000>;
+};
+
+&xhci0 {
+ pinctrl-0 = <&usb30_pins>;
+ pinctrl-names = "default";
+
+ status = "okay";
+};
--
2.7.4


[PATCH 4.19.y-cip 3/4] arm64: dts: renesas: hihope-common: Add USB 2.0 support

Biju Das <biju.das@...>
 

commit 734d277f412ae9e6ea9f2ee7a6b5f1b3deadf2fc upstream.

Add USB 2.0 support to the HiHope RZ/G2M.

Signed-off-by: Fabrizio Castro <fabrizio.castro@...>
Signed-off-by: Simon Horman <horms+renesas@...>
Signed-off-by: Biju Das <biju.das@...>
[Fixes: SDHI3 got accidentally disabled on the original commit]
---
arch/arm64/boot/dts/renesas/hihope-common.dtsi | 77 ++++++++++++++++++++++++++
1 file changed, 77 insertions(+)

diff --git a/arch/arm64/boot/dts/renesas/hihope-common.dtsi b/arch/arm64/boot/dts/renesas/hihope-common.dtsi
index 77d183a..8373cf8 100644
--- a/arch/arm64/boot/dts/renesas/hihope-common.dtsi
+++ b/arch/arm64/boot/dts/renesas/hihope-common.dtsi
@@ -55,6 +55,17 @@
regulator-always-on;
};

+ vbus0_usb2: regulator-vbus0-usb2 {
+ compatible = "regulator-fixed";
+
+ regulator-name = "USB20_VBUS0";
+ regulator-min-microvolt = <5000000>;
+ regulator-max-microvolt = <5000000>;
+
+ gpio = <&gpio6 16 GPIO_ACTIVE_HIGH>;
+ enable-active-high;
+ };
+
vccq_sdhi0: regulator-vccq-sdhi0 {
compatible = "regulator-gpio";

@@ -69,6 +80,14 @@
};
};

+&ehci0 {
+ status = "okay";
+};
+
+&ehci1 {
+ status = "okay";
+};
+
&extal_clk {
clock-frequency = <16666666>;
};
@@ -77,6 +96,28 @@
clock-frequency = <32768>;
};

+&gpio6 {
+ usb1-reset {
+ gpio-hog;
+ gpios = <10 GPIO_ACTIVE_LOW>;
+ output-low;
+ line-name = "usb1-reset";
+ };
+};
+
+&hsusb {
+ dr_mode = "otg";
+ status = "okay";
+};
+
+&ohci0 {
+ status = "okay";
+};
+
+&ohci1 {
+ status = "okay";
+};
+
&pfc {
pinctrl-0 = <&scif_clk_pins>;
pinctrl-names = "default";
@@ -108,6 +149,23 @@
function = "sdhi3";
power-source = <1800>;
};
+
+ usb0_pins: usb0 {
+ groups = "usb0";
+ function = "usb0";
+ };
+
+ usb1_pins: usb1 {
+ mux {
+ groups = "usb1";
+ function = "usb1";
+ };
+
+ ovc {
+ pins = "GP_6_27";
+ bias-pull-up;
+ };
+ };
};

&rwdt {
@@ -153,3 +211,22 @@
fixed-emmc-driver-type = <1>;
status = "okay";
};
+
+&usb_extal_clk {
+ clock-frequency = <50000000>;
+};
+
+&usb2_phy0 {
+ pinctrl-0 = <&usb0_pins>;
+ pinctrl-names = "default";
+
+ vbus-supply = <&vbus0_usb2>;
+ status = "okay";
+};
+
+&usb2_phy1 {
+ pinctrl-0 = <&usb1_pins>;
+ pinctrl-names = "default";
+
+ status = "okay";
+};
--
2.7.4


[PATCH 4.19.y-cip 2/4] arm64: dts: renesas: r8a774a1: Fix USB 2.0 clocks

Biju Das <biju.das@...>
 

commit a573cb676d54ce314f58e129f8d69ff09c9a92cf upstream.

Similarly to what done for the r8a7796 with commit 737e05bf034e
("arm64: dts: renesas: revise properties for R-Car Gen3 SoCs'
usb 2.0"), this patch lists the clock for the USB High-Speed Module
(HS-USB) with the USB2.0 Host (EHCI/OHCI) IP DT node, and it lists
the clock for the USB2.0 Host IP with the HS-USB module DT node.

Fixes: 4c2c2fb99876 ("arm64: dts: renesas: r8a774a1: Add USB2.0 phy and host(EHCI/OHCI) device nodes")
Fixes: ed898d4fc19d ("arm64: dts: renesas: r8a774a1: Add USB-DMAC and HSUSB device nodes")
Signed-off-by: Fabrizio Castro <fabrizio.castro@...>
Signed-off-by: Simon Horman <horms+renesas@...>
Signed-off-by: Biju Das <biju.das@...>
---
arch/arm64/boot/dts/renesas/r8a774a1.dtsi | 16 ++++++++--------
1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/arch/arm64/boot/dts/renesas/r8a774a1.dtsi b/arch/arm64/boot/dts/renesas/r8a774a1.dtsi
index bdf4292..892db7d 100644
--- a/arch/arm64/boot/dts/renesas/r8a774a1.dtsi
+++ b/arch/arm64/boot/dts/renesas/r8a774a1.dtsi
@@ -821,7 +821,7 @@
"renesas,rcar-gen3-usbhs";
reg = <0 0xe6590000 0 0x200>;
interrupts = <GIC_SPI 107 IRQ_TYPE_LEVEL_HIGH>;
- clocks = <&cpg CPG_MOD 704>;
+ clocks = <&cpg CPG_MOD 704>, <&cpg CPG_MOD 703>;
dmas = <&usb_dmac0 0>, <&usb_dmac0 1>,
<&usb_dmac1 0>, <&usb_dmac1 1>;
dma-names = "ch0", "ch1", "ch2", "ch3";
@@ -829,7 +829,7 @@
phys = <&usb2_phy0>;
phy-names = "usb";
power-domains = <&sysc R8A774A1_PD_ALWAYS_ON>;
- resets = <&cpg 704>;
+ resets = <&cpg 704>, <&cpg 703>;
status = "disabled";
};

@@ -1655,11 +1655,11 @@
compatible = "generic-ohci";
reg = <0 0xee080000 0 0x100>;
interrupts = <GIC_SPI 108 IRQ_TYPE_LEVEL_HIGH>;
- clocks = <&cpg CPG_MOD 703>;
+ clocks = <&cpg CPG_MOD 703>, <&cpg CPG_MOD 704>;
phys = <&usb2_phy0>;
phy-names = "usb";
power-domains = <&sysc R8A774A1_PD_ALWAYS_ON>;
- resets = <&cpg 703>;
+ resets = <&cpg 703>, <&cpg 704>;
status = "disabled";
};

@@ -1679,12 +1679,12 @@
compatible = "generic-ehci";
reg = <0 0xee080100 0 0x100>;
interrupts = <GIC_SPI 108 IRQ_TYPE_LEVEL_HIGH>;
- clocks = <&cpg CPG_MOD 703>;
+ clocks = <&cpg CPG_MOD 703>, <&cpg CPG_MOD 704>;
phys = <&usb2_phy0>;
phy-names = "usb";
companion = <&ohci0>;
power-domains = <&sysc R8A774A1_PD_ALWAYS_ON>;
- resets = <&cpg 703>;
+ resets = <&cpg 703>, <&cpg 704>;
status = "disabled";
};

@@ -1706,9 +1706,9 @@
"renesas,rcar-gen3-usb2-phy";
reg = <0 0xee080200 0 0x700>;
interrupts = <GIC_SPI 108 IRQ_TYPE_LEVEL_HIGH>;
- clocks = <&cpg CPG_MOD 703>;
+ clocks = <&cpg CPG_MOD 703>, <&cpg CPG_MOD 704>;
power-domains = <&sysc R8A774A1_PD_ALWAYS_ON>;
- resets = <&cpg 703>;
+ resets = <&cpg 703>, <&cpg 704>;
#phy-cells = <0>;
status = "disabled";
};
--
2.7.4


[PATCH 4.19.y-cip 1/4] phy: renesas: rcar-gen3-usb2: fix imbalance powered flag

Biju Das <biju.das@...>
 

From: Yoshihiro Shimoda <yoshihiro.shimoda.uh@...>

commit 5c9dc6379f539c68a0fdd39e39a9d359545649e9 upstream.

The powered flag should be set for any other phys anyway. Also
the flag should be locked by the channel. Otherwise, after we have
revised the device tree for the usb phy, the following warning
happened during a second system suspend. And if the driver doesn't
lock the flag, an imbalance is possible when enabling the regulator
during system resume. So, this patch fixes the issues.

< The warning >
[ 56.026531] unbalanced disables for USB20_VBUS0
[ 56.031108] WARNING: CPU: 3 PID: 513 at drivers/regulator/core.c:2593 _regula
tor_disable+0xe0/0x1c0
[ 56.040146] Modules linked in: rcar_du_drm rcar_lvds drm_kms_helper drm drm_p
anel_orientation_quirks vsp1 videobuf2_vmalloc videobuf2_dma_contig videobuf2_me
mops videobuf2_v4l2 videobuf2_common videodev snd_soc_rcar renesas_usbhs snd_soc
_audio_graph_card media snd_soc_simple_card_utils crct10dif_ce renesas_usb3 snd_
soc_ak4613 rcar_fcp pwm_rcar usb_dmac phy_rcar_gen3_usb3 pwm_bl ipv6
[ 56.074047] CPU: 3 PID: 513 Comm: kworker/u16:19 Not tainted 5.2.0-rc3-00001-
g5f20a19 #6
[ 56.082129] Hardware name: Renesas Salvator-X board based on r8a7795 ES2.0+ (
DT)
[ 56.089524] Workqueue: events_unbound async_run_entry_fn
[ 56.094832] pstate: 40000005 (nZcv daif -PAN -UAO)
[ 56.099617] pc : _regulator_disable+0xe0/0x1c0
[ 56.104054] lr : _regulator_disable+0xe0/0x1c0
[ 56.108489] sp : ffff0000121c3ae0
[ 56.111796] x29: ffff0000121c3ae0 x28: 0000000000000000
[ 56.117102] x27: 0000000000000000 x26: ffff000010fe0e60
[ 56.122407] x25: 0000000000000002 x24: 0000000000000001
[ 56.127712] x23: 0000000000000002 x22: ffff8006f99d4000
[ 56.133017] x21: ffff8006f99cc000 x20: ffff8006f9846800
[ 56.138322] x19: ffff8006f9846800 x18: ffffffffffffffff
[ 56.143626] x17: 0000000000000000 x16: 0000000000000000
[ 56.148931] x15: ffff0000112f96c8 x14: ffff0000921c37f7
[ 56.154235] x13: ffff0000121c3805 x12: ffff000011312000
[ 56.159540] x11: 0000000005f5e0ff x10: ffff0000112f9f20
[ 56.164844] x9 : ffff0000112d3018 x8 : 00000000000001ad
[ 56.170149] x7 : 00000000ffffffcc x6 : ffff8006ff768180
[ 56.175453] x5 : ffff8006ff768180 x4 : 0000000000000000
[ 56.180758] x3 : ffff8006ff76ef10 x2 : ffff8006ff768180
[ 56.186062] x1 : 3d2eccbaead8fb00 x0 : 0000000000000000
[ 56.191367] Call trace:
[ 56.193808] _regulator_disable+0xe0/0x1c0
[ 56.197899] regulator_disable+0x40/0x78
[ 56.201820] rcar_gen3_phy_usb2_power_off+0x3c/0x50
[ 56.206692] phy_power_off+0x48/0xd8
[ 56.210263] usb_phy_roothub_power_off+0x30/0x50
[ 56.214873] usb_phy_roothub_suspend+0x1c/0x50
[ 56.219311] hcd_bus_suspend+0x13c/0x168
[ 56.223226] generic_suspend+0x4c/0x58
[ 56.226969] usb_suspend_both+0x1ac/0x238
[ 56.230972] usb_suspend+0xcc/0x170
[ 56.234455] usb_dev_suspend+0x10/0x18
[ 56.238199] dpm_run_callback.isra.6+0x20/0x68
[ 56.242635] __device_suspend+0x110/0x308
[ 56.246637] async_suspend+0x24/0xa8
[ 56.250205] async_run_entry_fn+0x40/0xf8
[ 56.254210] process_one_work+0x1e0/0x320
[ 56.258211] worker_thread+0x40/0x450
[ 56.261867] kthread+0x124/0x128
[ 56.265094] ret_from_fork+0x10/0x18
[ 56.268661] ---[ end trace 86d7ec5de5c517af ]---
[ 56.273290] phy phy-ee080200.usb-phy.10: phy poweroff failed --> -5

Reported-by: Geert Uytterhoeven <geert+renesas@...>
Fixes: 549b6b55b005 ("phy: renesas: rcar-gen3-usb2: enable/disable independent irqs")
Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@...>
Reviewed-by: Geert Uytterhoeven <geert+renesas@...>
Tested-by: Geert Uytterhoeven <geert+renesas@...>
Reviewed-by: Simon Horman <horms+renesas@...>
Signed-off-by: Kishon Vijay Abraham I <kishon@...>
Signed-off-by: Biju Das <biju.das@...>
---
drivers/phy/renesas/phy-rcar-gen3-usb2.c | 19 +++++++++++++++----
1 file changed, 15 insertions(+), 4 deletions(-)

diff --git a/drivers/phy/renesas/phy-rcar-gen3-usb2.c b/drivers/phy/renesas/phy-rcar-gen3-usb2.c
index 132ca20..fdc81b5 100644
--- a/drivers/phy/renesas/phy-rcar-gen3-usb2.c
+++ b/drivers/phy/renesas/phy-rcar-gen3-usb2.c
@@ -16,6 +16,7 @@
#include <linux/interrupt.h>
#include <linux/io.h>
#include <linux/module.h>
+#include <linux/mutex.h>
#include <linux/of.h>
#include <linux/of_address.h>
#include <linux/of_device.h>
@@ -109,6 +110,7 @@ struct rcar_gen3_chan {
struct rcar_gen3_phy rphys[NUM_OF_PHYS];
struct regulator *vbus;
struct work_struct work;
+ struct mutex lock; /* protects rphys[...].powered */
enum usb_dr_mode dr_mode;
bool extcon_host;
bool is_otg_channel;
@@ -440,15 +442,16 @@ static int rcar_gen3_phy_usb2_power_on(struct phy *p)
struct rcar_gen3_chan *channel = rphy->ch;
void __iomem *usb2_base = channel->base;
u32 val;
- int ret;
+ int ret = 0;

+ mutex_lock(&channel->lock);
if (!rcar_gen3_are_all_rphys_power_off(channel))
- return 0;
+ goto out;

if (channel->vbus) {
ret = regulator_enable(channel->vbus);
if (ret)
- return ret;
+ goto out;
}

val = readl(usb2_base + USB2_USBCTR);
@@ -457,7 +460,10 @@ static int rcar_gen3_phy_usb2_power_on(struct phy *p)
val &= ~USB2_USBCTR_PLL_RST;
writel(val, usb2_base + USB2_USBCTR);

+out:
+ /* The powered flag should be set for any other phys anyway */
rphy->powered = true;
+ mutex_unlock(&channel->lock);

return 0;
}
@@ -468,14 +474,18 @@ static int rcar_gen3_phy_usb2_power_off(struct phy *p)
struct rcar_gen3_chan *channel = rphy->ch;
int ret = 0;

+ mutex_lock(&channel->lock);
rphy->powered = false;

if (!rcar_gen3_are_all_rphys_power_off(channel))
- return 0;
+ goto out;

if (channel->vbus)
ret = regulator_disable(channel->vbus);

+out:
+ mutex_unlock(&channel->lock);
+
return ret;
}

@@ -642,6 +652,7 @@ static int rcar_gen3_phy_usb2_probe(struct platform_device *pdev)
if (!phy_usb2_ops)
return -EINVAL;

+ mutex_init(&channel->lock);
for (i = 0; i < NUM_OF_PHYS; i++) {
channel->rphys[i].phy = devm_phy_create(dev, NULL,
phy_usb2_ops);
--
2.7.4


[PATCH 4.19.y-cip 0/4] Add USB support

Biju Das <biju.das@...>
 

This patch series add USB2.0/USB3.0 support for Hihope RZ/G2M platform.

This patch series is based on linux-4.19.y-cip and all the patches
in this series are cherry-picked from linux rc tree.

Biju Das (3):
arm64: dts: renesas: r8a774a1: Fix USB 2.0 clocks
arm64: dts: renesas: hihope-common: Add USB 2.0 support
arm64: dts: renesas: hihope-common: Enable USB3.0

Yoshihiro Shimoda (1):
phy: renesas: rcar-gen3-usb2: fix imbalance powered flag

arch/arm64/boot/dts/renesas/hihope-common.dtsi | 106 +++++++++++++++++++++++++
arch/arm64/boot/dts/renesas/r8a774a1.dtsi | 16 ++--
drivers/phy/renesas/phy-rcar-gen3-usb2.c | 19 ++++-
3 files changed, 129 insertions(+), 12 deletions(-)

--
2.7.4


Reproducible Builds in August 2019

Chris Lamb <chris@...>
 

==================================
Reproducible Builds in August 2019
==================================

Welcome to the August 2019 report from the Reproducible
Builds [0] project!

In these monthly reports we outline the most important things that have
happened in the world of Reproducible Builds and we have been up to.
You can find a HTML version of this report at the following URI:

https://reproducible-builds.org/reports/2019-08/

As a quick recap of our project, whilst anyone can inspect the source
code of free software for malicious flaws, most software is distributed
to end users or systems as precompiled binaries. The motivation behind
the reproducible builds effort is to ensure zero changes have been
introduced during these compilation processes. This is achieved by
promising identical results are always generated from a given source
thus allowing multiple third-parties to come to a consensus on whether a
build was changed or even compromised.

In August's month's report, we cover:

* Media coverage & events — *Webmin, CCCamp, etc.*
* Distribution work — *The first fully-reproducible package sets,
openSUSE update, etc*
* Upstream news — *libfaketime updates, gzip, ensuring good
definitions, etc.*
* Software development — *More work on diffoscope, new variations in
our testing framework, etc.*
* Misc news — *From our mailing list, etc.*
* Getting in touch — *How to contribute, etc.*

If you are interested in contributing to our project, please visit our
*Contribute* [1] page on our website.

[ 0] https://reproducible-builds.org
[ 1] https://reproducible-builds.org/contribute/


Media coverage & events
=======================

A backdoor was found in Webmin [2] a popular web-based application used
by sysadmins to remotely manage Unix-based systems. Whilst more details
can be found on upstream's dedicated exploit page [3], it appears that
the build toolchain was compromised. Especially of note is that the
exploit "did not show up in any Git diffs" and thus would not have been
found via an audit of the source code. The backdoor would allow a remote
attacker to execute arbitrary commands with superuser privileges on the
machine running Webmin. Once a machine is compromised, an attacker could
then use it to launch attacks on other systems managed through Webmin or
indeed any other connected system. Techniques such as reproducible
builds can help detect exactly these kinds of attacks that can lay
dormant for years. (LWN comments [4])

In a talk titled *There and Back Again, Reproducibly!* [5] Holger Levsen
and Vagrant Cascadian presented at the 2019 edition of the Linux
Developer Conference [6] in São Paulo, Brazil on Reproducible Builds.

LWN [7] posted and hosted an interesting summary and discussion on
*Hardening the "file" utility for Debian* [8]. In July, Chris Lamb had
cross-posted his reply to the "Re: file(1) now with seccomp support
enabled [9]" thread, originally started on the "debian-devel" [10]
mailing list. In this post, Chris refers to our "strip-nondeterminism"
tool not being able to accommodate the additional security hardening in
"file(1)" [11] and the changes made to the tool in order to do fix this
issue which was causing a huge number of regressions in our testing
framework [12].

The Chaos Communication Camp [13] — an international, five-day open-air
event for hackers that provides a relaxed atmosphere for free exchange
of technical, social, and political ideas — hosted its 2019 edition [14]
where there were many discussions and meet-ups at least partly related
to Reproducible Builds. This including the titular Reproducible Builds
Meetup [15] session which was attended by around twenty-five people
where half of them were new to the project as well as a session
dedicated to all Arch Linux related issues [16].

[ 2] http://www.webmin.com/
[ 3] http://www.webmin.com/exploit.html
[ 4] https://lwn.net/Articles/796951/
[ 5] https://cfp.linuxdev-br.net/2019/talk/VH9CCY/
[ 6] https://linuxdev-br.net/
[ 7] https://lwn.net
[ 8] https://lwn.net/Articles/796108
[ 9] https://lists.reproducible-builds.org/pipermail/rb-general/2019-July/001612.html
[10] https://lists.debian.org/debian-devel/2019/07/msg00391.html
[11] http://darwinsys.com/file/
[12] http://tests.reproducible-builds.org/
[13] https://en.wikipedia.org/wiki/Chaos_Communication_Camp
[14] https://events.ccc.de/camp/2019/
[15] https://events.ccc.de/camp/2019/wiki/Session:Reproducible_Builds_Meetup
[16] https://events.ccc.de/camp/2019/wiki/Session:Arch_Linux_Meetup


Distribution work
=================

In Debian, the first "package sets" — ie. defined subsets of the entire
archive — have become 100% reproducible including as the so-called
"essential" set for the bullseye distribution on the "amd64" [17] and
the "armhf" [18] architectures. This is thanks to work by Chris Lamb on
"bash" [19], "readline" [20] and other low-level libraries and tools.
Perl still has issues on "i386" [21] and "arm64" [22], however.

Dmitry Shachnev filed a bug report [23] against the "debhelper" utility
that speaks to issues around using the date from the "debian/changelog"
file as the source for the "SOURCE_DATE_EPOCH" [24] environment variable
as this can lead to non-intuitive results when package is automatically
rebuilt via so-called binary (NB. not "source" [25]) NMUs. A related
issue was later filed against "qtbase5-dev" [26] by Helmut Grohne as
this exact issue led to an issue with co-installability
across architectures.

Lastly, 115 reviews of Debian packages were added, 45 were updated and
244 were removed this month, appreciably adding to our knowledge about
identified issues [27]. Many issue types were updated by Chris Lamb,
including "embeds_build_data_via_node_preamble" [28],
"embeds_build_data_via_node_rollup" [29],
"captures_build_path_in_beam_cma_cmt_files" [30],
"captures_varying_number_of_build_path_directory_components" [31]
(discussed later), "timezone_specific_files_due_to_haskell_devscripts"
[32], etc.

Bernhard M. Wiedemann posted his monthly Reproducible Builds status
update [33] for the openSUSE [34] distribution. New issues were found
from enabling Link Time Optimization [35] (LTO) in this distribution's
*Tumbleweed* [36] branch. This affected, for example, "nvme-cli" [37] as
well as "perl-XML-Parser" and "pcc" [38] with packaging issues.

[17] https://tests.reproducible-builds.org/debian/bullseye/amd64/pkg_set_essential.html
[18] https://tests.reproducible-builds.org/debian/bullseye/armhf/pkg_set_essential.html
[19] https://bugs.debian.org/935127
[20] https://bugs.debian.org/935363
[21] https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/i386/diffoscope-results/perl.html
[22] https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/arm64/diffoscope-results/perl.html
[23] https://bugs.debian.org/934405
[24] https://reproducible-builds.org/docs/source-date-epoch/
[25] https://wiki.debian.org/NonMaintainerUpload
[26] https://bugs.debian.org/934511
[27] https://tests.reproducible-builds.org/debian/index_issues.html
[28] https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/5d91c741
[29] https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/e6b686f3
[30] https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/850df406
[31] https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/c0c72250
[32] https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/a1a65bba
[33] https://lists.opensuse.org/opensuse-factory/2019-08/msg00186.html
[34] https://opensuse.org/
[35] https://gcc.gnu.org/wiki/LinkTimeOptimization
[36] https://software.opensuse.org/distributions/tumbleweed
[37] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91307
[38] https://bugzilla.opensuse.org/show_bug.cgi?id=1146634


Upstream news
=============

* "libfaketime" [39] is a tool to trick programs into believing that
the current system time is actually one specified by the user. This
month, Bernhard M. Wiedemann requested the ability to track and
intercept calls that change file timestamps [40] which can help
better debug or fix reproducibility issues in software.

* Chris Lamb requested that the "molior" build tool [41] prefers to use
the term "repeatable build" [42] in order to avoid confusion over the
term "reproducible."

* The "gzip [43]" program is commonly used to compress artifacts such
as the the source code archives generated by Sourcehut [44] hosting
platform, but depending on the specific program used, the output may
be different. Daniel Edgecumbe has submitted patches [45] to the
BusyBox [46] suite of tools to ensure the output of its version of
"gzip" matches the output of GNU gzip [47] when using the same
options regardless of the configuration of BusyBox. In the process,
an off-by-one error [48] in the default settings was also fixed.

* There was more progress on ensuring that the "gem" tool in rubygems
respects [49] the "SOURCE_DATE_EPOCH" [50] environment variable.

* A request to include ".buildinfo" files [51] in the OpenWRT [52]
operating system that targets embedded devices such as routes, etc.
was accepted and merged upstream.

[39] https://github.com/wolfcw/libfaketime
[40] https://github.com/wolfcw/libfaketime/issues/183
[41] https://github.com/molior-dbs/molior
[42] https://github.com/molior-dbs/molior/issues/3
[43] https://www.gzip.org/
[44] https://todo.sr.ht/~sircmpwn/git.sr.ht/232
[45] http://lists.busybox.net/pipermail/busybox/2019-September/087438.html
[46] https://busybox.net/
[47] https://www.gnu.org/software/gzip/
[48] https://en.wikipedia.org/wiki/Off-by-one_error
[49] https://github.com/rubygems/rubygems/issues/2290#issuecomment-522206365
[50] https://reproducible-builds.org/docs/source-date-epoch/
[51] https://github.com/openwrt/openwrt/pull/2121
[52] https://openwrt.org/


Software development
====================

The Reproducible Builds project detects, dissects and attempts to fix as
many currently-unreproducible packages as possible. We endeavour to send
all of our patches upstream where appropriate. In August we wrote a
large number of such patches, including:

* Bernhard M. Wiedemann:

* "buildad" [53] (date)
* "dracut" [54] (CPU influences build result)
* "fwupd" [55] (unreproducible LTO [56] data)
* "gnutls" [57] (date / copyright year)
* "katacontainers-image-initrd/osbuilder" [58] (shell date; new
variant with nanoseconds)
* "kernel-obs-build" [59] (date from "/etc/shadow")
* "kernel-vanilla" [60] (drop number of CPUs)
* "libfaketime" [61] (toolchain: fix various builds under
"libfaketime" [62])
* "nethack" [63] (date and "tar(1)" [64]))
* "pcc" [65] (unreproducible when building with LTO [66])
* "python-ipyparallel" [67] (Fails to build with a single CPU
/ "-j1")
* "python-pytest-httpserver" [68] (renew SSL certs to fix FTBFS
after September 2019)
* "python-python3-saml" [69] (Fails to build in 2020)
* "sblim-cmpi-base" [70] (Disable parallel "make" [71]) due to
broken build dependencies)

[53] https://github.com/containers/buildah/pull/1805
[54] https://github.com/dracutdevs/dracut/issues/617
[55] https://bugzilla.opensuse.org/show_bug.cgi?id=1143905
[56] https://gcc.gnu.org/wiki/LinkTimeOptimization
[57] https://gitlab.com/gnutls/gnutls/merge_requests/1058
[58] https://github.com/kata-containers/osbuilder/pull/340
[59] https://lists.opensuse.org/opensuse-kernel/2019-08/msg00001.html
[60] https://lists.opensuse.org/opensuse-kernel/2019-08/msg00000.html
[61] https://github.com/wolfcw/libfaketime/issues/183
[62] https://github.com/wolfcw/libfaketime
[63] https://build.opensuse.org/request/show/722212
[64] https://en.wikipedia.org/wiki/Tar_(computing
[65] https://bugzilla.opensuse.org/show_bug.cgi?id=1146634
[66] https://gcc.gnu.org/wiki/LinkTimeOptimization
[67] https://github.com/ipython/ipyparallel/issues/380
[68] https://github.com/csernazs/pytest-httpserver/pull/22
[69] https://github.com/onelogin/python3-saml/pull/156
[70] https://build.opensuse.org/request/show/726294

* Chris Lamb:

* #872728 [72] filed against "desktop-file-utils" [73] (closed)
* #933783 [74] filed against "virulencefinder" [75].
* #933790 [76] filed against "norsnet" [77].
* #933834 [78] filed against "haskell-devscripts" [79].
* #933838 [80] filed against "superlu-dist" [81].
* #934120 [82] filed against "python-bleach" [83].
* #934697 [84] filed against "re2c" [85] (filed upstream [86]).
* #934698 [87] filed against "libchamplain" [88] (filed
upstream [89])
* #934699 [90] filed against "scons" [91].
* #934767 [92] filed against "ecbuild" [93].
* #934918 [94] filed against "python-etcd3gw" [95].
* #934919 [96] filed against "omnidb" [97].
* #935127 [98] filed against "bash" [99].
* #935361 [100] filed against "node-autoprefixer" [101].
* #935362 [102] filed against "gdbm" [103].
* #935363 [104] filed against "readline" [105].
* #935790 [106] filed against "node-package-preamble" [107].
* #935846 [108] filed against "musescore-snapshot" [109].
* #936452 [110] filed against "ust-fs-extra" [111].
* #936453 [112] filed against "litl" [113].

[71] https://en.wikipedia.org/wiki/Make_(software
[72] https://bugs.debian.org/872728
[73] https://tracker.debian.org/pkg/desktop-file-utils
[74] https://bugs.debian.org/933783
[75] https://tracker.debian.org/pkg/virulencefinder
[76] https://bugs.debian.org/933790
[77] https://tracker.debian.org/pkg/norsnet
[78] https://bugs.debian.org/933834
[79] https://tracker.debian.org/pkg/haskell-devscripts
[80] https://bugs.debian.org/933838
[81] https://tracker.debian.org/pkg/superlu-dist
[82] https://bugs.debian.org/934120
[83] https://tracker.debian.org/pkg/python-bleach
[84] https://bugs.debian.org/934697
[85] https://tracker.debian.org/pkg/re2c
[86] https://github.com/skvadrik/re2c/pull/258
[87] https://bugs.debian.org/934698
[88] https://tracker.debian.org/pkg/libchamplain
[89] https://gitlab.gnome.org/GNOME/libchamplain/merge_requests/9
[90] https://bugs.debian.org/934699
[91] https://tracker.debian.org/pkg/scons
[92] https://bugs.debian.org/934767
[93] https://tracker.debian.org/pkg/ecbuild
[94] https://bugs.debian.org/934918
[95] https://tracker.debian.org/pkg/python-etcd3gw
[96] https://bugs.debian.org/934919
[97] https://tracker.debian.org/pkg/omnidb
[98] https://bugs.debian.org/935127
[99] https://tracker.debian.org/pkg/bash
[100] https://bugs.debian.org/935361
[101] https://tracker.debian.org/pkg/node-autoprefixer
[102] https://bugs.debian.org/935362
[103] https://tracker.debian.org/pkg/gdbm
[104] https://bugs.debian.org/935363
[105] https://tracker.debian.org/pkg/readline
[106] https://bugs.debian.org/935790
[107] https://tracker.debian.org/pkg/node-package-preamble
[108] https://bugs.debian.org/935846
[109] https://tracker.debian.org/pkg/musescore-snapshot
[110] https://bugs.debian.org/936452
[111] https://tracker.debian.org/pkg/rust-fs-extra
[112] https://bugs.debian.org/936453
[113] https://tracker.debian.org/pkg/litl

* Mathieu Parent: "php-pear" [114] — Fixes over 150 packages with
date issues.

[114] https://github.com/pear/pear-core/pull/96


diffoscope
----------

"diffoscope" [115] is our in-depth and content-aware diff utility that
can locate and diagnose reproducibility issues. It is run countless
times a day on our testing infrastructure [116] and is essential for
identifying fixes and causes of non-deterministic behaviour.

This month, Chris Lamb made the following changes:

* Improvements:

* Don't fallback to an unhelpful raw hexdump when, for example,
"readelf(1)" reports an minor issue in a section in an ELF
binary. For example, when the ".frames" section is of the
"NOBITS" type its contents are apparently "unreliable" and thus
"readelf(1)" returns 1. (#58 [117], #931962 [118])
* Include either standard error or standard output (not just the
latter) when an external command fails. [119]

* Bug fixes:

* Skip calls to "unsquashfs" when we are neither root nor running
under "fakeroot". (#63 [120])
* Ensure that all of our artificially-created
"subprocess.CalledProcessError" [121] instances have "output"
instances that are "bytes" objects, not "str". [122]
* Correct a reference to "parser.diff"; "diff" in this context is a
Python function in the module. [123]
* Avoid a possible traceback caused by a "str"/"bytes" type
confusion when handling the output of failing external
commands. [124]

* Testsuite improvements:

* Test for "4.4" in the output of "squashfs -version", even though
the Debian package version is
"1:4.3+git190823-1". [125]
* Apply a patch from László Böszörményi to update the "squashfs"
test output and additionally bump the required version for the
test itself. (#62 [126] & #935684 [127])
* Add the "wabt" Debian package to the test-dependencies so that we
run the WebAssembly [128] tests on our continuous integration
platform, etc. [129]

* Improve debugging:

* Add the containing module name to the (eg.) "Using StaticLibFile
for ..." debugging messages. [130]
* Strip off trailing "original size modulo 2^32 671" (etc.) from
"gzip" compressed data as this is just a symptom of the contents
itself changing that will be reflected elsewhere. (#61 [131])
* Avoid a lack of space between "... with return code 1" and
"Standard output". [132]
* Improve debugging output when instantantiating our "Comparator"
object types. [133]
* Add a literal "eg." to the comment on stripping "original size
modulo..." text to emphasise that the actual numbers are not
fixed. [134]

* Internal code improvements:

* No need to parse the section group from the class name; we can
pass it via "type" built-in "kwargs" argument. [135]
* Add support to "Difference.from_command_exc" and friends to
ignore specific returncodes from the called program and treat
them as "no" difference. [136]
* Simplify parsing of optional "command_args" argument to
"Difference.from_command_exc". [137]
* Set "long_description_content_type" to "text/x-rst" to appease
the PyPI.org [138] linter. [139]
* Reposition a comment regarding an exception within the indented
block to match Python code convention. [140]

[115] https://diffoscope.org
[116] https://tests.reproducible-builds.org/debian/reproducible.html
[117] https://salsa.debian.org/reproducible-builds/diffoscope/issues/58
[118] https://bugs.debian.org/931962
[119] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/4689755
[120] https://salsa.debian.org/reproducible-builds/diffoscope/issues/63
[121] https://docs.python.org/3/library/subprocess.html
[122] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/eb02809
[123] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/8eb9e39
[124] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/b803d43
[125] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/7cecd8a
[126] https://salsa.debian.org/reproducible-builds/diffoscope/issues/62
[127] https://bugs.debian.org/935684
[128] https://webassembly.org/
[129] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/84ad96d
[130] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/2f101b8
[131] https://salsa.debian.org/reproducible-builds/diffoscope/issues/61
[132] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/ffa22f8
[133] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/1647da8
[134] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/18e3526
[135] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/5261096
[136] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/d3c7ac8
[137] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/cc9a730
[138] https://pypi.org/
[139] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/7583af2
[140] https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/ec86443

In addition, Mattia Rizzolo made the following changes:

* Now that we install wabt, expect its tools to be available. [141]
* Bump the Debian backport check. [142]

Lastly, Vagrant Cascadian updated diffoscope to versions 120 [143], 121
[144] and 122 [145] in the GNU Guix [146] distribution.

[141] https://salsa.debian.org/reproducible-builds/diffoscope/commit/f2e72a8
[142] https://salsa.debian.org/reproducible-builds/diffoscope/commit/9591cfb
[143] https://git.savannah.gnu.org/cgit/guix.git/commit/?id=c91364d36cf6c8fc4c696d151eb9fca7832cf898
[144] https://git.savannah.gnu.org/cgit/guix.git/commit/?id=8c1379ba404b4db2f0afcf431a4ff720b72a7a19
[145] https://git.savannah.gnu.org/cgit/guix.git/commit/?id=b126f41b301a5ac13835bf20026ae6d1d5ae2bee
[146] https://guix.gnu.org/


strip-nondeterminism
--------------------

strip-nondeterminism [147] is our tool to remove specific non-
deterministic results from a completed build. This month, Chris Lamb
made the following changes.

* Add support for enabling and disabling specific normalizers via the
command line. (#10 [148])
* Drop accidentally-committed warning emitted on every fixture-based
test. [149]
* Reintroduce the ".ar" normalizer [150] but disable it by
default so that it can be enabled with "--normalizers=+ar" or
similar. (#3 [151])
* In verbose mode, print the normalizers that "strip-nondeterminism"
will apply. [152]

In addition, there was some movement on an issue in the "Archive::Zip"
Perl module [153] that "strip-nondeterminism" uses regarding the lack of
support for "bzip" compression [154] that was originally filed in 2016
[155] by Andrew Ayer [156].

[147] https://tracker.debian.org/pkg/strip-nondeterminism
[148] https://salsa.debian.org/reproducible-builds/strip-nondeterminism/issues/10
[149] https://salsa.debian.org/reproducible-builds/strip-nondeterminism.git/commit/e1def58
[150] https://salsa.debian.org/reproducible-builds/strip-nondeterminism.git/commit/bb13f8b
[151] https://salsa.debian.org/reproducible-builds/strip-nondeterminism#3
[152] https://salsa.debian.org/reproducible-builds/strip-nondeterminism.git/commit/2637e1c
[153] https://metacpan.org/pod/Archive::Zip
[154] https://en.wikipedia.org/wiki/Bzip2
[155] https://github.com/redhotpenguin/perl-Archive-Zip/issues/26
[156] https://www.agwa.name/


Test framework
--------------

We operate a comprehensive Jenkins [157] based testing framework that
powers tests.reproducible-builds.org [158].

This month Vagrant Cascadian suggested and subsequently implemented
[159] that we additionally test a varying build directory of different
string lengths (eg. "/path/to/123" vs "/path/to/123456" but we also vary
the number of directory *components* within this, eg. "/path/to/dir" vs.
"/path/to/parent/subdir". Curiously, whilst it was *a priori* believed
that was rather unlikely to yield differences, Chris Lamb has managed to
identify approximately twenty packages [160] that are affected by
this issue.

It was also noticed that our testing of the Coreboot free software
firmware [161] fails to build the toolchain since we switched to
building on the Debian "buster" distribution. The last successful build
was on August 7th [162] but all newer builds have failed.

[157] https://jenkins.io/
[158] https://tests.reproducible-builds.org
[159] https://salsa.debian.org/qa/jenkins.debian.net/commit/94469490
[160] https://tests.reproducible-builds.org/debian/issues/unstable/captures_varying_number_of_build_path_directory_components_issue.html
[161] https://tests.reproducible-builds.org/coreboot/coreboot.html
[162] https://jenkins.debian.net/job/reproducible_coreboot/356 was t

In addition, the following code changes were performed in the
last month:

* Chris Lamb: Ensure that the size the log for the second build in HTML
pages was also correctly formatted (eg. "12KB" vs
"12345"). [163]

* Holger Levsen:

* Many changes related to updating our build nodes to the "buster"
distribution for Debian. [164][165][...
[166][167][168][169][170]
* Attempt to automatically fixup spurious build
failures. [171]
* Update the maintainer address for the Debian team tasked with
maintaining [172] the MATE desktop [173]. [174]
* Try not to build all the release tags of tools such as diffoscope
[175], etc.. [176]
* Use a newer kernel to support building the latest Arch Linux
[177] packages. [178]
* Re-add checks for "zombie" and log file size sanity
checks. [179][180][181][182]
* Vary the choice of kernel on the "amd64" again by using the
kernel from Debian "backports" [183]. [184]
* Drop some ancient Debian "jessie"-related
configuration. [185][186][187]

* Mathieu Parent: Update the contact details for the Debian PHP Group
[188]. [189]

* Mattia Rizzolo:
* Update our Postfix [190] email server configuration. [...
[191][192][193]
* Use the "safe_load" function of PyYAML [194] when parsing YAML-
formatted [195] files. [196]

[163] https://salsa.debian.org/reproducible-builds/jenkins.debian.net.git/commit/080d7ba3
[164] https://salsa.debian.org/qa/jenkins.debian.net/commit/a97c97ec
[165] https://salsa.debian.org/qa/jenkins.debian.net/commit/6fb3ee7b
[166] https://salsa.debian.org/qa/jenkins.debian.net/commit/1fad75e4
[167] https://salsa.debian.org/qa/jenkins.debian.net/commit/7fef98af
[168] https://salsa.debian.org/qa/jenkins.debian.net/commit/da55be7a
[169] https://salsa.debian.org/qa/jenkins.debian.net/commit/28941bc2
[170] https://salsa.debian.org/qa/jenkins.debian.net/commit/309a1d66
[171] https://salsa.debian.org/qa/jenkins.debian.net/commit/82bee189
[172] https://wiki.debian.org/Teams/pkg-mate
[173] https://mate-desktop.org/
[174] https://salsa.debian.org/qa/jenkins.debian.net/commit/e6f7c6d4
[175] https://diffoscope.org
[176] https://salsa.debian.org/qa/jenkins.debian.net/commit/974b699e
[177] https://www.archlinux.org/
[178] https://salsa.debian.org/qa/jenkins.debian.net/commit/7e575590
[179] https://salsa.debian.org/qa/jenkins.debian.net/commit/f17552ad
[180] https://salsa.debian.org/qa/jenkins.debian.net/commit/30049d46
[181] https://salsa.debian.org/qa/jenkins.debian.net/commit/9fbf8d2c
[182] https://salsa.debian.org/qa/jenkins.debian.net/commit/42d7c71a
[183] https://backports.debian.org/
[184] https://salsa.debian.org/qa/jenkins.debian.net/commit/b2870778
[185] https://salsa.debian.org/qa/jenkins.debian.net/commit/96cbb81e
[186] https://salsa.debian.org/qa/jenkins.debian.net/commit/7e37c5a4
[187] https://salsa.debian.org/qa/jenkins.debian.net/commit/87840dae
[188] https://wiki.debian.org/Teams/DebianPHPGroup
[189] https://salsa.debian.org/qa/jenkins.debian.net/commit/03510cdf
[190] http://www.postfix.org/
[191] https://salsa.debian.org/qa/jenkins.debian.net/commit/61ceaf5d
[192] https://salsa.debian.org/qa/jenkins.debian.net/commit/8780a849
[193] https://salsa.debian.org/qa/jenkins.debian.net/commit/3b964081
[194] https://pyyaml.org/wiki/PyYAMLDocumentation
[195] https://en.wikipedia.org/wiki/YAML
[196] https://salsa.debian.org/qa/jenkins.debian.net/commit/fa720775


The usual node maintenance was performed by Holger Levsen [...
[197][198] and Vagrant Cascadian [199].

[197] https://salsa.debian.org/qa/jenkins.debian.net/commit/961d70a6
[198] https://salsa.debian.org/qa/jenkins.debian.net/commit/25f295b7
[199] https://salsa.debian.org/qa/jenkins.debian.net/commit/30f567ff


Misc news
=========

There was a yet more effort put into our our website [200] this month,
including misc copyediting by Chris Lamb [201], Mathieu
Parent referencing his fix for "php-pear" [202] and Vagrant
Cascadian updating a link to his homepage. [203].

On our mailing list [204] this month Santiago Torres Arias started a
*Setting up a MS-hosted rebuilder with in-toto metadata* [205] thread
regarding Microsoft's interest in setting up a rebuilder for Debian
packages touching on issues of transparency logs and the integration of
in-toto [206] by the Secure Systems Lab [207] at New York University
[208]. In addition, Lars Wirzenius [209] continued conversation
regarding various questions about reproducible builds [210] and their
bearing on building a distributed continuous integration system.

Lastly, in a thread titled *Reproducible Builds technical introduction
tutorial* [211] Jathan asked whether anyone had some "easy" Reproducible
Builds tutorials in slides, video or written document format.

[200] https://reproducible-builds.org/
[201] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/a911e9d
[202] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/e47ade1
[203] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/7f8bc7e
[204] https://lists.reproducible-builds.org/pipermail/rb-general/
[205] https://lists.reproducible-builds.org/pipermail/rb-general/2019-August/001640.html
[206] https://in-toto.io/
[207] https://ssl.engineering.nyu.edu/
[208] https://engineering.nyu.edu/
[209] https://liw.fi/
[210] https://lists.reproducible-builds.org/pipermail/rb-general/2019-August/001634.html
[211] https://lists.reproducible-builds.org/pipermail/rb-general/2019-August/001639.html


Getting in touch
================

If you are interested in contributing the Reproducible Builds project,
please visit our *Contribute* [212] page on our website. However, you
can get in touch with us via:

* IRC: "#reproducible-builds" on "irc.oftc.net".

* Twitter: @ReproBuilds [213]

* Mailing list: "rb-general@..." [214]

[212] https://reproducible-builds.org/contribute/
[213] https://twitter.com/ReproBuilds
[214] https://lists.reproducible-builds.org/listinfo/rb-general

This month's report was written by Bernhard M. Wiedemann, Chris Lamb,
Eli Schwartz, Holger Levsen, Jelle van der Waa, Mathieu Parent and
Vagrant Cascadian. Wiedemann, Chris Lamb, Holger Levsen, Mathieu Parent
and Vagrant Cascadian. It was subsequently reviewed by a bunch of
Reproducible Builds folks on IRC and the mailing list.


Best wishes,

--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o


Re: Related to spectre-meltdown-checker test

Hung Tran
 

Hello Fujita-san, Chris,

I believe Spectre patches are NOT provided by ARM.
They are contributed by community.
According to test result from Chris, only Spectre Variant 2 is migrated on G2M 4.19.
Other vulnerabilities are still remain.

Regards,
Hung.

-----Original Message-----
From: cip-dev-bounces@... [mailto:cip-dev-bounces@...] On Behalf Of Chris Paterson
Sent: Friday, September 6, 2019 4:28 PM
To: Kazuhiro Fujita <kazuhiro.fujita.jg@...>; cip-dev@...
Subject: Re: [cip-dev] Related to spectre-meltdown-checker test

From: cip-dev-bounces@...
<cip-dev-bounces@... project.org> On Behalf Of Chris Paterson
Sent: 06 September 2019 10:10

Hello,

From: cip-dev-bounces@...
<cip-dev-bounces@... project.org> On Behalf Of Kazuhiro
Fujita

Hello all,

As far as we checked, status of mitigation of Spectre/Meltdown on
Arm processors seems as below:

- For 4.4 kernel, patches have not been provided by Arm.
4.4-cip has not been mitigated.
- For 4.19 kernel, patches are provided by Arm and upstreamed.
4.19-cip inherited the patches.

Is there anyone who knows whether above is correct or not?
I don't, but for the record here are the most recent results from the
Spectre/Meltdown checker:

Kernel: 4.19.66-cip9_aa6c3bd08
RZ/G1E (Arm Cortex-A7):
https://lava.ciplatform.org/results/3483/0_spectre-meltdown-checker-te
st
RZ/G1M (Arm Cortex-A15):
https://lava.ciplatform.org/results/3481/0_spectre-meltdown-checker-te
st
RZ/G2E (Arm Cortex-A53):
https://lava.ciplatform.org/results/3475/0_spectre-meltdown-checker-te
st
RZ/G2M (Arm Cortex-A57 + Cortex-A53):
https://lava.ciplatform.org/results/3473/0_spectre-meltdown-checker-te
st

Kernel: 4.4
Kernel: 4.4.188-cip36_7b0f2e14

RZ/G1E (Arm Cortex-A7):
https://lava.ciplatform.org/results/3487/0_spectre-meltdown-checker-te
st
RZ/G1M (Arm Cortex-A15):
https://lava.ciplatform.org/results/3485/0_spectre-meltdown-checker-te
st

Kind regards, Chris


Thanks,
Fujita


-----Original Message-----
From: cip-dev-bounces@...
<cip-dev-bounces@... project.org> On Behalf Of Nobuhiro
Iwamatsu
Sent: Wednesday, August 28, 2019 11:26 AM
To: Chris Paterson <Chris.Paterson2@...>
Cc: cip-dev@...
Subject: [cip-dev] [PATCH 3/3] Add spectre-meltdown-checker test

Signed-off-by: Nobuhiro Iwamatsu
<nobuhiro1.iwamatsu@...>
---
lava_templates/r8a7743-iwg20d-q7_smc.yaml | 69
+++++++++++++++++++
lava_templates/r8a7745-iwg22d-sodimm_smc.yaml | 69
+++++++++++++++++++
lava_templates/r8a774c0-ek874_smc.yaml | 69
+++++++++++++++++++
submit_tests.sh | 1 +
4 files changed, 208 insertions(+) create mode 100644
lava_templates/r8a7743-iwg20d-q7_smc.yaml
create mode 100644 lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
create mode 100644 lava_templates/r8a774c0-ek874_smc.yaml

diff --git a/lava_templates/r8a7743-iwg20d-q7_smc.yaml
b/lava_templates/r8a7743-iwg20d-q7_smc.yaml
new file mode 100644
index 0000000..0e10584
--- /dev/null
+++ b/lava_templates/r8a7743-iwg20d-q7_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris
+Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or
+modify it
under the terms of the GNU Affero General Public License as
published
by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful,
+but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
Public
License for more details.
+# You should have received a copy of the GNU Affero General
+Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a7743-iwg20d-q7
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: uimage
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/cip-core/iwg20m/core-image-minimal-iwg20m.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'ciphost login:'
+ username: root
+ prompts:
+ - 'cip-project#'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
b/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
new file mode 100644
index 0000000..180d94a
--- /dev/null
+++ b/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris
+Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or
+modify it
under the terms of the GNU Affero General Public License as
published
by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful,
+but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
Public
License for more details.
+# You should have received a copy of the GNU Affero General
+Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a7745-iwg22d-sodimm
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: uimage
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/ciptesting/cip-lava/rfs/core-image-minimal-iwg22m-
20181126155628.rootfs.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'iwg22m login: '
+ username: root
+ prompts:
+ - 'root@iwg22m'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/lava_templates/r8a774c0-ek874_smc.yaml
b/lava_templates/r8a774c0-ek874_smc.yaml
new file mode 100644
index 0000000..e244a0e
--- /dev/null
+++ b/lava_templates/r8a774c0-ek874_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris
+Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or
+modify it
under the terms of the GNU Affero General Public License as
published
by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful,
+but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
Public
License for more details.
+# You should have received a copy of the GNU Affero General
+Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a774c0-ek874
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: image
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/ciptesting/cip-lava/rfs/core-image-bsp-ek874.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'ek874 login:'
+ username: root
+ prompts:
+ - 'root@ek874'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/submit_tests.sh b/submit_tests.sh index
5f83182..b1a275e 100755
--- a/submit_tests.sh
+++ b/submit_tests.sh
@@ -150,6 +150,7 @@ find_jobs () {

print_kernel_info
create_job healthcheck
+ create_job smc
done < $jobfile
done
}
--
2.20.1

_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev
_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev
_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev
_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev


Re: Related to spectre-meltdown-checker test

Chris Paterson
 

From: cip-dev-bounces@... <cip-dev-bounces@...
project.org> On Behalf Of Chris Paterson
Sent: 06 September 2019 10:10

Hello,

From: cip-dev-bounces@... <cip-dev-bounces@...
project.org> On Behalf Of Kazuhiro Fujita

Hello all,

As far as we checked, status of mitigation of Spectre/Meltdown on Arm
processors seems as below:

- For 4.4 kernel, patches have not been provided by Arm.
4.4-cip has not been mitigated.
- For 4.19 kernel, patches are provided by Arm and upstreamed.
4.19-cip inherited the patches.

Is there anyone who knows whether above is correct or not?
I don't, but for the record here are the most recent results from the
Spectre/Meltdown checker:

Kernel: 4.19.66-cip9_aa6c3bd08
RZ/G1E (Arm Cortex-A7):
https://lava.ciplatform.org/results/3483/0_spectre-meltdown-checker-test
RZ/G1M (Arm Cortex-A15):
https://lava.ciplatform.org/results/3481/0_spectre-meltdown-checker-test
RZ/G2E (Arm Cortex-A53):
https://lava.ciplatform.org/results/3475/0_spectre-meltdown-checker-test
RZ/G2M (Arm Cortex-A57 + Cortex-A53):
https://lava.ciplatform.org/results/3473/0_spectre-meltdown-checker-test

Kernel: 4.4
Kernel: 4.4.188-cip36_7b0f2e14

RZ/G1E (Arm Cortex-A7):
https://lava.ciplatform.org/results/3487/0_spectre-meltdown-checker-test
RZ/G1M (Arm Cortex-A15):
https://lava.ciplatform.org/results/3485/0_spectre-meltdown-checker-test

Kind regards, Chris


Thanks,
Fujita


-----Original Message-----
From: cip-dev-bounces@... <cip-dev-bounces@...
project.org> On Behalf Of Nobuhiro Iwamatsu
Sent: Wednesday, August 28, 2019 11:26 AM
To: Chris Paterson <Chris.Paterson2@...>
Cc: cip-dev@...
Subject: [cip-dev] [PATCH 3/3] Add spectre-meltdown-checker test

Signed-off-by: Nobuhiro Iwamatsu
<nobuhiro1.iwamatsu@...>
---
lava_templates/r8a7743-iwg20d-q7_smc.yaml | 69
+++++++++++++++++++
lava_templates/r8a7745-iwg22d-sodimm_smc.yaml | 69
+++++++++++++++++++
lava_templates/r8a774c0-ek874_smc.yaml | 69
+++++++++++++++++++
submit_tests.sh | 1 +
4 files changed, 208 insertions(+)
create mode 100644 lava_templates/r8a7743-iwg20d-q7_smc.yaml
create mode 100644 lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
create mode 100644 lava_templates/r8a774c0-ek874_smc.yaml

diff --git a/lava_templates/r8a7743-iwg20d-q7_smc.yaml
b/lava_templates/r8a7743-iwg20d-q7_smc.yaml
new file mode 100644
index 0000000..0e10584
--- /dev/null
+++ b/lava_templates/r8a7743-iwg20d-q7_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published
by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
Public
License for more details.
+# You should have received a copy of the GNU Affero General Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a7743-iwg20d-q7
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: uimage
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/cip-core/iwg20m/core-image-minimal-iwg20m.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'ciphost login:'
+ username: root
+ prompts:
+ - 'cip-project#'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
b/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
new file mode 100644
index 0000000..180d94a
--- /dev/null
+++ b/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published
by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
Public
License for more details.
+# You should have received a copy of the GNU Affero General Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a7745-iwg22d-sodimm
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: uimage
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/ciptesting/cip-lava/rfs/core-image-minimal-iwg22m-
20181126155628.rootfs.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'iwg22m login: '
+ username: root
+ prompts:
+ - 'root@iwg22m'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/lava_templates/r8a774c0-ek874_smc.yaml
b/lava_templates/r8a774c0-ek874_smc.yaml
new file mode 100644
index 0000000..e244a0e
--- /dev/null
+++ b/lava_templates/r8a774c0-ek874_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published
by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
Public
License for more details.
+# You should have received a copy of the GNU Affero General Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a774c0-ek874
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: image
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/ciptesting/cip-lava/rfs/core-image-bsp-ek874.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'ek874 login:'
+ username: root
+ prompts:
+ - 'root@ek874'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/submit_tests.sh b/submit_tests.sh
index 5f83182..b1a275e 100755
--- a/submit_tests.sh
+++ b/submit_tests.sh
@@ -150,6 +150,7 @@ find_jobs () {

print_kernel_info
create_job healthcheck
+ create_job smc
done < $jobfile
done
}
--
2.20.1

_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev
_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev
_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev


Re: Related to spectre-meltdown-checker test

Chris Paterson
 

Hello,

From: cip-dev-bounces@... <cip-dev-bounces@...
project.org> On Behalf Of Kazuhiro Fujita

Hello all,

As far as we checked, status of mitigation of Spectre/Meltdown on Arm
processors seems as below:

- For 4.4 kernel, patches have not been provided by Arm.
4.4-cip has not been mitigated.
- For 4.19 kernel, patches are provided by Arm and upstreamed.
4.19-cip inherited the patches.

Is there anyone who knows whether above is correct or not?
I don't, but for the record here are the most recent results from the Spectre/Meltdown checker:

Kernel: 4.19.66-cip9_aa6c3bd08
RZ/G1E (Arm Cortex-A7): https://lava.ciplatform.org/results/3483/0_spectre-meltdown-checker-test
RZ/G1M (Arm Cortex-A15): https://lava.ciplatform.org/results/3481/0_spectre-meltdown-checker-test
RZ/G2E (Arm Cortex-A53): https://lava.ciplatform.org/results/3475/0_spectre-meltdown-checker-test
RZ/G2M (Arm Cortex-A57 + Cortex-A53): https://lava.ciplatform.org/results/3473/0_spectre-meltdown-checker-test

Kernel: 4.4
RZ/G1E (Arm Cortex-A7): https://lava.ciplatform.org/results/3487/0_spectre-meltdown-checker-test
RZ/G1M (Arm Cortex-A15): https://lava.ciplatform.org/results/3485/0_spectre-meltdown-checker-test

Kind regards, Chris


Thanks,
Fujita


-----Original Message-----
From: cip-dev-bounces@... <cip-dev-bounces@...
project.org> On Behalf Of Nobuhiro Iwamatsu
Sent: Wednesday, August 28, 2019 11:26 AM
To: Chris Paterson <Chris.Paterson2@...>
Cc: cip-dev@...
Subject: [cip-dev] [PATCH 3/3] Add spectre-meltdown-checker test

Signed-off-by: Nobuhiro Iwamatsu <nobuhiro1.iwamatsu@...>
---
lava_templates/r8a7743-iwg20d-q7_smc.yaml | 69
+++++++++++++++++++
lava_templates/r8a7745-iwg22d-sodimm_smc.yaml | 69
+++++++++++++++++++
lava_templates/r8a774c0-ek874_smc.yaml | 69
+++++++++++++++++++
submit_tests.sh | 1 +
4 files changed, 208 insertions(+)
create mode 100644 lava_templates/r8a7743-iwg20d-q7_smc.yaml
create mode 100644 lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
create mode 100644 lava_templates/r8a774c0-ek874_smc.yaml

diff --git a/lava_templates/r8a7743-iwg20d-q7_smc.yaml
b/lava_templates/r8a7743-iwg20d-q7_smc.yaml
new file mode 100644
index 0000000..0e10584
--- /dev/null
+++ b/lava_templates/r8a7743-iwg20d-q7_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
Public
License for more details.
+# You should have received a copy of the GNU Affero General Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a7743-iwg20d-q7
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: uimage
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/cip-core/iwg20m/core-image-minimal-iwg20m.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'ciphost login:'
+ username: root
+ prompts:
+ - 'cip-project#'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
b/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
new file mode 100644
index 0000000..180d94a
--- /dev/null
+++ b/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
Public
License for more details.
+# You should have received a copy of the GNU Affero General Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a7745-iwg22d-sodimm
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: uimage
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/ciptesting/cip-lava/rfs/core-image-minimal-iwg22m-
20181126155628.rootfs.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'iwg22m login: '
+ username: root
+ prompts:
+ - 'root@iwg22m'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/lava_templates/r8a774c0-ek874_smc.yaml
b/lava_templates/r8a774c0-ek874_smc.yaml
new file mode 100644
index 0000000..e244a0e
--- /dev/null
+++ b/lava_templates/r8a774c0-ek874_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General
Public
License for more details.
+# You should have received a copy of the GNU Affero General Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a774c0-ek874
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: image
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/ciptesting/cip-lava/rfs/core-image-bsp-ek874.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'ek874 login:'
+ username: root
+ prompts:
+ - 'root@ek874'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/submit_tests.sh b/submit_tests.sh
index 5f83182..b1a275e 100755
--- a/submit_tests.sh
+++ b/submit_tests.sh
@@ -150,6 +150,7 @@ find_jobs () {

print_kernel_info
create_job healthcheck
+ create_job smc
done < $jobfile
done
}
--
2.20.1

_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev
_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev


Re: [PATCH linux-4.19.y-cip] gitlab-ci: Start testing the r8a774a1-hihope-rzg2m-ex device

Chris Paterson
 

Hello Iwamatsu-san,

From: nobuhiro1.iwamatsu@...
<nobuhiro1.iwamatsu@...>
Sent: 06 September 2019 04:35

Hi Chris,

-----Original Message-----
From: Chris Paterson [mailto:chris.paterson2@...]
Sent: Friday, September 6, 2019 1:23 AM
To: cip-dev@...
Cc: Chris Paterson <chris.paterson2@...>; iwamatsu nobuhiro(岩
松 信洋 ○SWC□OST) <nobuhiro1.iwamatsu@...>
Subject: [PATCH linux-4.19.y-cip] gitlab-ci: Start testing the
r8a774a1-hihope-rzg2m-ex device

Signed-off-by: Chris Paterson <chris.paterson2@...>
Cc: Nobuhiro Iwamatsu <nobuhiro1.iwamatsu@...>
---

Please apply this patch either with or before the "Add HopeRun RZ/G2[M]
main/sub boards" series:
https://patchwork.kernel.org/project/cip-dev/list/?series=167529

This will mean that the RZ/G2M board is tested in the LAVA lab as the
code for it is added.

It is safe to add this patch before the above series if that's easier.
Applied, thanks.
I pushed ci/linux-4.19.y-cip. If test was OK, I will push to linux-4.19.y-cip.
Looks good to me.

Pipeline: https://gitlab.com/cip-project/cip-kernel/linux-cip/pipelines/80609721
RZ/G2M boot test: https://lava.ciplatform.org/scheduler/job/3472
RZ/G2M SMC test: https://lava.ciplatform.org/scheduler/job/3473

Thanks, Chris


Best regards,
Nobuhiro


Related to spectre-meltdown-checker test

Kazuhiro FUJITA
 

Hello all,

As far as we checked, status of mitigation of Spectre/Meltdown on Arm processors seems as below:

- For 4.4 kernel, patches have not been provided by Arm.
4.4-cip has not been mitigated.
- For 4.19 kernel, patches are provided by Arm and upstreamed.
4.19-cip inherited the patches.

Is there anyone who knows whether above is correct or not?

Thanks,
Fujita

-----Original Message-----
From: cip-dev-bounces@... <cip-dev-bounces@...
project.org> On Behalf Of Nobuhiro Iwamatsu
Sent: Wednesday, August 28, 2019 11:26 AM
To: Chris Paterson <Chris.Paterson2@...>
Cc: cip-dev@...
Subject: [cip-dev] [PATCH 3/3] Add spectre-meltdown-checker test

Signed-off-by: Nobuhiro Iwamatsu <nobuhiro1.iwamatsu@...>
---
lava_templates/r8a7743-iwg20d-q7_smc.yaml | 69 +++++++++++++++++++
lava_templates/r8a7745-iwg22d-sodimm_smc.yaml | 69 +++++++++++++++++++
lava_templates/r8a774c0-ek874_smc.yaml | 69 +++++++++++++++++++
submit_tests.sh | 1 +
4 files changed, 208 insertions(+)
create mode 100644 lava_templates/r8a7743-iwg20d-q7_smc.yaml
create mode 100644 lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
create mode 100644 lava_templates/r8a774c0-ek874_smc.yaml

diff --git a/lava_templates/r8a7743-iwg20d-q7_smc.yaml
b/lava_templates/r8a7743-iwg20d-q7_smc.yaml
new file mode 100644
index 0000000..0e10584
--- /dev/null
+++ b/lava_templates/r8a7743-iwg20d-q7_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public
License for more details.
+# You should have received a copy of the GNU Affero General Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a7743-iwg20d-q7
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: uimage
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/cip-core/iwg20m/core-image-minimal-iwg20m.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'ciphost login:'
+ username: root
+ prompts:
+ - 'cip-project#'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
b/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
new file mode 100644
index 0000000..180d94a
--- /dev/null
+++ b/lava_templates/r8a7745-iwg22d-sodimm_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public
License for more details.
+# You should have received a copy of the GNU Affero General Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a7745-iwg22d-sodimm
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: uimage
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/ciptesting/cip-lava/rfs/core-image-minimal-iwg22m-
20181126155628.rootfs.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'iwg22m login: '
+ username: root
+ prompts:
+ - 'root@iwg22m'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/lava_templates/r8a774c0-ek874_smc.yaml
b/lava_templates/r8a774c0-ek874_smc.yaml
new file mode 100644
index 0000000..e244a0e
--- /dev/null
+++ b/lava_templates/r8a774c0-ek874_smc.yaml
@@ -0,0 +1,69 @@
+# Copyright (C) 2019, Renesas Electronics Europe GmbH, Chris Paterson
<chris.paterson2@...>
+# SPDX-License-Identifier: AGPL-3.0
+# This program is free software: you can redistribute it and/or modify it
under the terms of the GNU Affero General Public License as published by
the Free Software Foundation, version 3.
+# This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public
License for more details.
+# You should have received a copy of the GNU Affero General Public
License along with this program. If not, see
<http://www.gnu.org/licenses/>.
+
+device_type: r8a774c0-ek874
+job_name: JOB_NAME
+
+timeouts:
+ job:
+ minutes: 15
+ action:
+ minutes: 10
+ connection:
+ minutes: 5
+priority: medium
+visibility: public
+
+notify:
+ criteria:
+ status: finished
+ verbosity: verbose
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@...
+
+# ACTION_BLOCK
+actions:
+- deploy:
+ timeout:
+ minutes: 10
+ to: tftp
+ os: oe
+ kernel:
+ url: KERNEL_URL
+ type: image
+ nfsrootfs:
+ url: https://s3-us-west-2.amazonaws.com/download.cip-
project.org/ciptesting/cip-lava/rfs/core-image-bsp-ek874.tar.gz
+ compression: gz
+ dtb:
+ url: DTB_URL
+
+# BOOT_BLOCK
+- boot:
+ auto_login:
+ login_prompt: 'ek874 login:'
+ username: root
+ prompts:
+ - 'root@ek874'
+ method: u-boot
+ commands: nfs
+ timeout:
+ minutes: 5
+
+# Spectre meltdown checker
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 10
+ definitions:
+ - repository: https://github.com/Linaro/test-definitions.git
+ from: git
+ path: automated/linux/spectre-meltdown-checker-test/spectre-
meltdown-checker-test.yaml
+ name: spectre-meltdown-checker-test
+ timeout:
+ minutes: 10
+
diff --git a/submit_tests.sh b/submit_tests.sh
index 5f83182..b1a275e 100755
--- a/submit_tests.sh
+++ b/submit_tests.sh
@@ -150,6 +150,7 @@ find_jobs () {

print_kernel_info
create_job healthcheck
+ create_job smc
done < $jobfile
done
}
--
2.20.1

_______________________________________________
cip-dev mailing list
cip-dev@...
https://lists.cip-project.org/mailman/listinfo/cip-dev


Re: [PATCH linux-4.19.y-cip] gitlab-ci: Start testing the r8a774a1-hihope-rzg2m-ex device

Nobuhiro Iwamatsu
 

Hi Chris,

-----Original Message-----
From: Chris Paterson [mailto:chris.paterson2@...]
Sent: Friday, September 6, 2019 1:23 AM
To: cip-dev@...
Cc: Chris Paterson <chris.paterson2@...>; iwamatsu nobuhiro(岩
松 信洋 ○SWC□OST) <nobuhiro1.iwamatsu@...>
Subject: [PATCH linux-4.19.y-cip] gitlab-ci: Start testing the
r8a774a1-hihope-rzg2m-ex device

Signed-off-by: Chris Paterson <chris.paterson2@...>
Cc: Nobuhiro Iwamatsu <nobuhiro1.iwamatsu@...>
---

Please apply this patch either with or before the "Add HopeRun RZ/G2[M]
main/sub boards" series:
https://patchwork.kernel.org/project/cip-dev/list/?series=167529

This will mean that the RZ/G2M board is tested in the LAVA lab as the
code for it is added.

It is safe to add this patch before the above series if that's easier.
Applied, thanks.
I pushed ci/linux-4.19.y-cip. If test was OK, I will push to linux-4.19.y-cip.

Best regards,
Nobuhiro


[PATCH linux-4.4.y-cip-rt] gitlab-ci: Start testing RT configs

Chris Paterson
 

x86: siemens_i386-rt.config

Signed-off-by: Chris Paterson <chris.paterson2@...>
Cc: Pavel Machek <pavel@...>
---
.gitlab-ci.yml | 17 +++++++++++++++++
1 file changed, 17 insertions(+)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 6348d1c47f6e..d4cd0c9bd2f3 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -262,6 +262,23 @@ x86_toshiba_defconfig:
paths:
- output

+# RT build configurations
+rt_x86_siemens_i386-rt.config:
+ stage: build
+ image: registry.gitlab.com/cip-project/cip-testing/linux-cip-ci:build-$DOCKER_IMAGE_TAG
+ variables:
+ BUILD_ARCH: x86
+ CONFIG: siemens_i386-rt.config
+ CONFIG_LOC: cip-kernel-config
+ BUILD_ONLY: "true"
+ script:
+ - /opt/build_kernel.sh
+ artifacts:
+ name: "$CI_JOB_NAME"
+ when: on_success
+ paths:
+ - output
+
# Extra build configurations
arm_shmobile_defconfig:
stage: build
--
2.17.1


[PATCH linux-4.19.y-cip-rt] gitlab-ci: Start testing the r8a774a1-hihope-rzg2m-ex device

Chris Paterson
 

Signed-off-by: Chris Paterson <chris.paterson2@...>
Cc: Pavel Machek <pavel@...>
---

Please apply this patch either with or before the "Add HopeRun RZ/G2[M]
main/sub boards" series:
https://patchwork.kernel.org/project/cip-dev/list/?series=167529

This will mean that the RZ/G2M board is tested in the LAVA lab as the code
for it is added.

It is safe to add this patch before the above series if that's easier.

.gitlab-ci.yml | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 78748f84ada5..e2e1f7dcf203 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -109,8 +109,8 @@ arm64_renesas_defconfig:
BUILD_ARCH: arm64
CONFIG: renesas_defconfig
CONFIG_LOC: cip-kernel-config
- DEVICES: r8a774c0-ek874
- DTBS: r8a774c0-ek874.dtb
+ DEVICES: r8a774c0-ek874 r8a774a1-hihope-rzg2m-ex
+ DTBS: r8a774c0-ek874.dtb r8a774a1-hihope-rzg2m-ex.dtb
script:
- /opt/build_kernel.sh
artifacts:
@@ -241,8 +241,8 @@ arm64_defconfig:
BUILD_ARCH: arm64
CONFIG: defconfig
CONFIG_LOC: intree
- DEVICES: r8a774c0-ek874
- DTBS: r8a774c0-ek874.dtb
+ DEVICES: r8a774c0-ek874 r8a774a1-hihope-rzg2m-ex
+ DTBS: r8a774c0-ek874.dtb r8a774a1-hihope-rzg2m-ex.dtb
script:
- /opt/build_kernel.sh
artifacts:
--
2.17.1


[PATCH linux-4.19.y-cip-rt] gitlab-ci: Start testing RT configs

Chris Paterson
 

arm: socfpga_defconfig
x86: siemens_i386-rt.config

Signed-off-by: Chris Paterson <chris.paterson2@...>
Cc: Pavel Machek <pavel@...>
---
.gitlab-ci.yml | 33 +++++++++++++++++++++++++++++++++
1 file changed, 33 insertions(+)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 62562c8b6fbb..78748f84ada5 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -183,6 +183,39 @@ x86_toshiba_atom_baytrail_cip.config:
paths:
- output

+# RT build configurations
+rt_arm_socfpga_defconfig:
+ stage: build
+ image: registry.gitlab.com/cip-project/cip-testing/linux-cip-ci:build-$DOCKER_IMAGE_TAG
+ variables:
+ BUILD_ARCH: arm
+ CONFIG: socfpga_defconfig
+ CONFIG_LOC: cip-kernel-config
+ BUILD_ONLY: "true"
+ script:
+ - /opt/build_kernel.sh
+ artifacts:
+ name: "$CI_JOB_NAME"
+ when: on_success
+ paths:
+ - output
+
+rt_x86_siemens_i386-rt.config:
+ stage: build
+ image: registry.gitlab.com/cip-project/cip-testing/linux-cip-ci:build-$DOCKER_IMAGE_TAG
+ variables:
+ BUILD_ARCH: x86
+ CONFIG: siemens_i386-rt.config
+ CONFIG_LOC: cip-kernel-config
+ BUILD_ONLY: "true"
+ script:
+ - /opt/build_kernel.sh
+ artifacts:
+ name: "$CI_JOB_NAME"
+ when: on_success
+ paths:
+ - output
+
# Extra build configurations
arm_shmobile_defconfig:
stage: build
--
2.17.1


[PATCH linux-4.19.y-cip] gitlab-ci: Start testing the r8a774a1-hihope-rzg2m-ex device

Chris Paterson
 

Signed-off-by: Chris Paterson <chris.paterson2@...>
Cc: Nobuhiro Iwamatsu <nobuhiro1.iwamatsu@...>
---

Please apply this patch either with or before the "Add HopeRun RZ/G2[M]
main/sub boards" series:
https://patchwork.kernel.org/project/cip-dev/list/?series=167529

This will mean that the RZ/G2M board is tested in the LAVA lab as the code
for it is added.

It is safe to add this patch before the above series if that's easier.


.gitlab-ci.yml | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 62562c8b6fbb..aec930a72edc 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -109,8 +109,8 @@ arm64_renesas_defconfig:
BUILD_ARCH: arm64
CONFIG: renesas_defconfig
CONFIG_LOC: cip-kernel-config
- DEVICES: r8a774c0-ek874
- DTBS: r8a774c0-ek874.dtb
+ DEVICES: r8a774c0-ek874 r8a774a1-hihope-rzg2m-ex
+ DTBS: r8a774c0-ek874.dtb r8a774a1-hihope-rzg2m-ex.dtb
script:
- /opt/build_kernel.sh
artifacts:
@@ -208,8 +208,8 @@ arm64_defconfig:
BUILD_ARCH: arm64
CONFIG: defconfig
CONFIG_LOC: intree
- DEVICES: r8a774c0-ek874
- DTBS: r8a774c0-ek874.dtb
+ DEVICES: r8a774c0-ek874 r8a774a1-hihope-rzg2m-ex
+ DTBS: r8a774c0-ek874.dtb r8a774a1-hihope-rzg2m-ex.dtb
script:
- /opt/build_kernel.sh
artifacts:
--
2.17.1


Re: [PATCH 4.19.y-cip repost 0/6] Add eMMC/uSD/LEDs support to HiHope RZ/G2M

Nobuhiro Iwamatsu
 

Hi Fabrizio,

-----Original Message-----
From: Fabrizio Castro [mailto:fabrizio.castro@...]
Sent: Thursday, September 5, 2019 5:37 PM
To: cip-dev@...
Cc: Chris Paterson <Chris.Paterson2@...>; Biju Das
<biju.das@...>; Fabrizio Castro
<fabrizio.castro@...>; iwamatsu nobuhiro(岩松 信洋 ○SW
C□OST) <nobuhiro1.iwamatsu@...>; pavel@...
Subject: [cip-dev][PATCH 4.19.y-cip repost 0/6] Add eMMC/uSD/LEDs
support to HiHope RZ/G2M

Dear All,

This series is to add eMMC/uSD/LEDs support to the HiHope RZ/G2M board,
and depends on series:
https://patchwork.kernel.org/cover/11126905/
Applied, thanks.

Thanks,
Fab
Best regards,
Nobuhiro


Re: [PATCH 4.19.y-cip 00/22] Add Watchdog/CMT/TMU/Thermal support

Nobuhiro Iwamatsu
 

Hi Biju,

-----Original Message-----
From: cip-dev-bounces@...
[mailto:cip-dev-bounces@...] On Behalf Of Biju Das
Sent: Tuesday, September 3, 2019 12:58 AM
To: cip-dev@...
Cc: Biju Das <biju.das@...>
Subject: [cip-dev] [PATCH 4.19.y-cip 00/22] Add
Watchdog/CMT/TMU/Thermal support

This patch series add Watchdog/CMT/TMU/Thermal support for hihope RZ/G2M
platform.

This patch series is based on linux-4.19.y-cip and all the patches in
this series are cherry-picked from linux rc tree.

This patch series is depend on the below patch series
https://patchwork.kernel.org/project/cip-dev/list/?series=167529


Biju Das (5):
arm64: dts: renesas: hihope-common: Add RWDT support
arm64: dts: renesas: r8a774a1: Add CPU topology on r8a774a1 SoC
arm64: dts: renesas: r8a774a1: Add CPU capacity-dmips-mhz
arm64: dts: renesas: r8a774a1: Create thermal zone to support IPA
arm64: dts: renesas: r8a774a1: Add dynamic power coefficient

Fabrizio Castro (5):
watchdog: renesas_wdt: Fix typos
arm64: dts: renesas: r8a774a1: Add CMT device nodes
clk: renesas: r8a774a1: Add TMU clock
arm64: dts: renesas: r8a774a1: Add TMU device nodes
arm64: dts: renesas: r8a774a1: Add operating points

Hoan Nguyen An (2):
watchdog: renesas_wdt: Use 'dev' instead of dereferencing it
repeatedly
thermal: rcar_gen3_thermal: Fix init value of IRQCTL register

Jiada Wang (2):
thermal: rcar_gen3_thermal: fix interrupt type
thermal: rcar_gen3_thermal: Fix to show correct trip points number

Marek Vasut (1):
thermal: rcar_gen3_thermal: Register hwmon sysfs interface

Wolfram Sang (3):
watchdog: renesas_wdt: stop when unregistering
watchdog: renesas_wdt: don't keep timer value during suspend/resume
watchdog: renesas_wdt: drop superfluous glob pattern

Yoshihiro Kaneko (3):
thermal: rcar_gen3_thermal: Update value of Tj_1
thermal: rcar_gen3_thermal: Update calculation formula of IRQTEMP
thermal: rcar_gen3_thermal: Update temperature conversion method

Yoshihiro Shimoda (1):
watchdog: renesas_wdt: Add a few cycles delay
Applied, thanks.

Best regards,
Nobuhiro

6421 - 6440 of 9641