cip/linux-4.4.y-st-rc build: 186 builds: 4 failed, 182 passed, 4 errors, 38 warnings (v4.4-st20-938-gc773c630d0e4f) Full Build Summary: https://kernelci.org/build/cip/branch/linux-4.4.y-st-rc/kernel/v

cip/linux-4.4.y-st-rc baseline-nfs: 26 runs, 2 regressions (v4.4-st20-938-gc773c630d0e4f) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | regressions -----------

cip/linux-4.4.y-st-rc kselftest-futex: 5 runs, 1 regressions (v4.4-st20-938-gc773c630d0e4f) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | regressions ---------

cip/linux-4.4.y-st-rc ltp-ipc: 6 runs, 1 regressions (v4.4-st20-938-gc773c630d0e4f) Regressions Summary ------------------- platform | arch | lab | compiler | defconfig | regressions -----------------

From: Quirin Gylstorff <quirin.gylstorff@...> Systemd >= 251 is required for systemd-cryptenroll. This version is part of backports. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- conf/dis

From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- Kconfig | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/Kconfig b/Kconfig index cd24c

From: Quirin Gylstorff <quirin.gylstorff@...> This allows testing the tpm2 encryption with qemu. Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- start-qemu.sh | 27 ++++++++++++++++++++++---

From: Quirin Gylstorff <quirin.gylstorff@...> This creates a new luks encrypted ext4 partition with a the key stored in the tpm2. The initial key is randomly generated and removed from the LUKS partit

From: Quirin Gylstorff <quirin.gylstorff@...> If /var shall be encrypted encrypt_partition needs to be executed before the overlay script. If the prerequisite is not available the overlay script will

From: Quirin Gylstorff <quirin.gylstorff@...> Signed-off-by: Quirin Gylstorff <quirin.gylstorff@...> --- doc/README.tpm2.encryption.md | 39 +++++++++++++++++++++++++++++++++++ 1 file changed, 39 inser

From: Srinuvasan A <srinuvasan.a@...> Update the secureboot document based on the current implementation. Note: Now secureboot directly boot the linux hence no need to provide the efi file path in efi

From: Srinuvasan A <srinuvasan.a@...> Update SWUpdate document based on the current implementation. Signed-off-by: Srinuvasan A <srinuvasan.a@...> --- doc/README.swupdate.md | 32 ++++++++++++++++++---

Hi ! It's this week's CVE report. This week reported 22 new CVEs and 4 updated CVEs. * New CVEs CVE-2023-23039: drivers: tty: vcc: Fix use-after-free in vcc_open() CVSS v3 score is not provided. An is

Hi all, Kindly be reminded to attend the weekly meeting through IRC to discuss technical topics with CIP kernel today. Our channel is the following: irc:irc.libera.chat:6667/cip The IRC meeting is sch

Hi all, at least some of the isar-cip-core users are in a need for formal release of the layer. The plan so far is to follow the Debian point-release cycles, means basically having one every 3 months.

This patch adds support to run swupdate images for RISC-V64 on qemu. As firmware, we use OpenSBI with u-boot payload in s-mode. Signed-off-by: Felix Moessbauer <felix.moessbauer@...> --- start-qemu.sh

Changes since v2: The v2 adds the required infrastructure to test the swupdate support in qemu-riscv64. This includes the following additions: - update of cip kernel config for qemu-riscv64 machine (f

This commit backports an upstream patch for efibootguard that fixes the riscv64 install location. As it is not yet in an EBG release, we add it as a patch here. No internal logic of EBG is changed, he

This patch adds the mapping between the efi architecture and the distro architecture for riscv64. Signed-off-by: Felix Moessbauer <felix.moessbauer@...> --- scripts/lib/wic/plugins/source/efibootguard

This patch enables the swupdate KConfig entry for the qemu-riscv64 board. For that, we also duplicate the qemu-arm64-efibootguard.wks template for qemu-riscv64. As this is the first riscv64 board, we