[AUTOPATCHER-kernel] Kernel upgrade to version 6.6.43.1 - branch 3.0-dev (#9976)

2024-07-30 20:49:24 -07:00 · 2024-07-30 20:49:24 -07:00 · e1fbaab983
--- a/SPECS-SIGNED/kernel-signed/kernel-signed.spec
+++ b/SPECS-SIGNED/kernel-signed/kernel-signed.spec
@ -9,8 +9,8 @@
 %define uname_r %{version}-%{release}
 Summary:        Signed Linux Kernel for %{buildarch} systems
 Name:           kernel-signed-%{buildarch}
-Version:        6.6.39.1
-Release:        2%{?dist}
+Version:        6.6.43.1
+Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@ -145,6 +145,9 @@ echo "initrd of kernel %{uname_r} removed" >&2
 %exclude /module_info.ld

 %changelog
+* Tue Jul 30 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 6.6.43.1-1
+- Auto-upgrade to 6.6.43.1
+
 * Tue Jul 30 2024 Chris Co <chrco@microsoft.com> - 6.6.39.1-2
 - Bump release to match kernel

--- a/SPECS-SIGNED/kernel-uki-signed/kernel-uki-signed.spec
+++ b/SPECS-SIGNED/kernel-uki-signed/kernel-uki-signed.spec
@ -5,8 +5,8 @@
 %define kernelver %{version}-%{release}
 Summary:        Signed Unified Kernel Image for %{buildarch} systems
 Name:           kernel-uki-signed-%{buildarch}
-Version:        6.6.39.1
-Release:        2%{?dist}
+Version:        6.6.43.1
+Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@ -65,6 +65,9 @@ popd
 /lib/modules/%{kernelver}/vmlinuz-uki.efi

 %changelog
+* Tue Jul 30 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 6.6.43.1-1
+- Auto-upgrade to 6.6.43.1
+
 * Tue Jul 30 2024 Chris Co <chrco@microsoft.com> - 6.6.39.1-2
 - Bump release to match kernel

--- a/SPECS/hyperv-daemons/hyperv-daemons.signatures.json
+++ b/SPECS/hyperv-daemons/hyperv-daemons.signatures.json
@ -7,6 +7,6 @@
    "hypervkvpd.service": "c1bb207cf9f388f8f3cf5b649abbf8cfe4c4fcf74538612946e68f350d1f265f",
    "hypervvss.rules": "94cead44245ef6553ab79c0bbac8419e3ff4b241f01bcec66e6f508098cbedd1",
    "hypervvssd.service": "22270d9f0f23af4ea7905f19c1d5d5495e40c1f782cbb87a99f8aec5a011078d",
-    "kernel-6.6.39.1.tar.gz": "c52edd4b3fb4ca5de815eeeee72afe4e02041ca94383d763a24d9d42fb46b7ee"
+    "kernel-6.6.43.1.tar.gz": "978e302c77d8ffbb7f6e6fafd1bc77c9fc84a7839d1ec3251f1c48d61eaf5c39"
  }
 }
--- a/SPECS/hyperv-daemons/hyperv-daemons.spec
+++ b/SPECS/hyperv-daemons/hyperv-daemons.spec
@ -10,7 +10,7 @@

 Summary:        Hyper-V daemons suite
 Name:           hyperv-daemons
-Version:        6.6.39.1
+Version:        6.6.43.1
 Release:        1%{?dist}
 License:        GPLv2+
 Vendor:         Microsoft Corporation
@ -221,6 +221,9 @@ fi
 %{_sbindir}/lsvmbus

 %changelog
+* Tue Jul 30 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 6.6.43.1-1
+- Auto-upgrade to 6.6.43.1
+
 * Fri Jul 26 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 6.6.39.1-1
 - Auto-upgrade to 6.6.39.1

--- a/SPECS/kernel-headers/kernel-headers.signatures.json
+++ b/SPECS/kernel-headers/kernel-headers.signatures.json
@ -1,5 +1,5 @@
 {
  "Signatures": {
-    "kernel-6.6.39.1.tar.gz": "c52edd4b3fb4ca5de815eeeee72afe4e02041ca94383d763a24d9d42fb46b7ee"
+    "kernel-6.6.43.1.tar.gz": "978e302c77d8ffbb7f6e6fafd1bc77c9fc84a7839d1ec3251f1c48d61eaf5c39"
  }
 }
--- a/SPECS/kernel-headers/kernel-headers.spec
+++ b/SPECS/kernel-headers/kernel-headers.spec
@ -13,8 +13,8 @@

 Summary:        Linux API header files
 Name:           kernel-headers
-Version:        6.6.39.1
-Release:        2%{?dist}
+Version:        6.6.43.1
+Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@ -75,6 +75,9 @@ done
 %endif

 %changelog
+* Tue Jul 30 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 6.6.43.1-1
+- Auto-upgrade to 6.6.43.1
+
 * Tue Jul 30 2024 Chris Co <chrco@microsoft.com> - 6.6.39.1-2
 - Bump release to match kernel

--- a/SPECS/kernel/config
+++ b/SPECS/kernel/config
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86_64 6.6.39.1 Kernel Configuration
+# Linux/x86_64 6.6.43.1 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"
 CONFIG_CC_IS_GCC=y
@ -2495,6 +2495,16 @@ CONFIG_DM_VERITY_FEC=y
 # CONFIG_DM_INTEGRITY is not set
 # CONFIG_DM_ZONED is not set
 # CONFIG_DM_AUDIT is not set
+CONFIG_DM_IMA_MEASURE_CACHE=y
+CONFIG_DM_IMA_MEASURE_CRYPT=y
+CONFIG_DM_IMA_MEASURE_INTEGRITY=y
+CONFIG_DM_IMA_MEASURE_LINEAR=y
+CONFIG_DM_IMA_MEASURE_MIRROR=y
+CONFIG_DM_IMA_MEASURE_MULTIPATH=y
+CONFIG_DM_IMA_MEASURE_RAID=y
+CONFIG_DM_IMA_MEASURE_SNAPSHOT=y
+CONFIG_DM_IMA_MEASURE_STRIPED=y
+CONFIG_DM_IMA_MEASURE_VERITY=y
 CONFIG_TARGET_CORE=m
 CONFIG_TCM_IBLOCK=m
 CONFIG_TCM_FILEIO=m
@ -7339,6 +7349,7 @@ CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
 # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
 # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
 CONFIG_SECURITY_LANDLOCK=y
+# CONFIG_SECURITY_IPE is not set
 CONFIG_INTEGRITY=y
 CONFIG_INTEGRITY_SIGNATURE=y
 CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
@ -7799,7 +7810,6 @@ CONFIG_SGL_ALLOC=y
 CONFIG_IOMMU_HELPER=y
 CONFIG_CHECK_SIGNATURE=y
 CONFIG_CPUMASK_OFFSTACK=y
-# CONFIG_FORCE_NR_CPUS is not set
 CONFIG_CPU_RMAP=y
 CONFIG_DQL=y
 CONFIG_GLOB=y
--- a/SPECS/kernel/config_aarch64
+++ b/SPECS/kernel/config_aarch64
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 6.6.39.1 Kernel Configuration
+# Linux/arm64 6.6.43.1 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0"
 CONFIG_CC_IS_GCC=y
@ -3025,6 +3025,16 @@ CONFIG_DM_VERITY_FEC=y
 # CONFIG_DM_INTEGRITY is not set
 # CONFIG_DM_ZONED is not set
 # CONFIG_DM_AUDIT is not set
+CONFIG_DM_IMA_MEASURE_CACHE=y
+CONFIG_DM_IMA_MEASURE_CRYPT=y
+CONFIG_DM_IMA_MEASURE_INTEGRITY=y
+CONFIG_DM_IMA_MEASURE_LINEAR=y
+CONFIG_DM_IMA_MEASURE_MIRROR=y
+CONFIG_DM_IMA_MEASURE_MULTIPATH=y
+CONFIG_DM_IMA_MEASURE_RAID=y
+CONFIG_DM_IMA_MEASURE_SNAPSHOT=y
+CONFIG_DM_IMA_MEASURE_STRIPED=y
+CONFIG_DM_IMA_MEASURE_VERITY=y
 CONFIG_TARGET_CORE=m
 CONFIG_TCM_IBLOCK=m
 CONFIG_TCM_FILEIO=m
@ -10401,6 +10411,7 @@ CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
 # CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
 # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
 CONFIG_SECURITY_LANDLOCK=y
+# CONFIG_SECURITY_IPE is not set
 CONFIG_INTEGRITY=y
 CONFIG_INTEGRITY_SIGNATURE=y
 CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
@ -10923,7 +10934,6 @@ CONFIG_CMA_ALIGNMENT=8
 # CONFIG_DMA_MAP_BENCHMARK is not set
 CONFIG_SGL_ALLOC=y
 CONFIG_CHECK_SIGNATURE=y
-# CONFIG_FORCE_NR_CPUS is not set
 CONFIG_CPU_RMAP=y
 CONFIG_DQL=y
 CONFIG_GLOB=y
--- a/SPECS/kernel/kernel-uki.spec
+++ b/SPECS/kernel/kernel-uki.spec
@ -17,8 +17,8 @@

 Summary:        Unified Kernel Image
 Name:           kernel-uki
-Version:        6.6.39.1
-Release:        2%{?dist}
+Version:        6.6.43.1
+Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@ -70,6 +70,9 @@ ln -s /boot/vmlinuz-uki-%{kernelver}.efi %{buildroot}/lib/modules/%{kernelver}/v
 /lib/modules/%{kernelver}/vmlinuz-uki.efi

 %changelog
+* Tue Jul 30 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 6.6.43.1-1
+- Auto-upgrade to 6.6.43.1
+
 * Tue Jul 30 2024 Chris Co <chrco@microsoft.com> - 6.6.39.1-2
 - Bump release to match kernel

--- a/SPECS/kernel/kernel.signatures.json
+++ b/SPECS/kernel/kernel.signatures.json
@ -1,11 +1,11 @@
 {
  "Signatures": {
    "cbl-mariner-ca-20211013.pem": "5ef124b0924cb1047c111a0ecff1ae11e6ad7cac8d1d9b40f98f99334121f0b0",
-    "config": "c13f4a39fd20c8c8a41ff5bcd65e8d06a19ac751492d7b2bc86b001de8c7216b",
-    "config_aarch64": "5c165356f2ce8df461d04c048b9f9bb5cb318d344865d61a5d1cf7b93e34089a",
+    "config": "58629bd6a1f25f39ddd6698dad7ac2d968f1c5cc849234c2a26b7182bca257e7",
+    "config_aarch64": "6a832c6d76c42e1d165c09e7ea1348cddfd46a2ea5e580a3e110807981e767fe",
    "cpupower": "d7518767bf2b1110d146a49c7d42e76b803f45eb8bd14d931aa6d0d346fae985",
    "cpupower.service": "b057fe9e5d0e8c36f485818286b80e3eba8ff66ff44797940e99b1fd5361bb98",
    "sha512hmac-openssl.sh": "02ab91329c4be09ee66d759e4d23ac875037c3b56e5a598e32fd1206da06a27f",
-    "kernel-6.6.39.1.tar.gz": "c52edd4b3fb4ca5de815eeeee72afe4e02041ca94383d763a24d9d42fb46b7ee"
+    "kernel-6.6.43.1.tar.gz": "978e302c77d8ffbb7f6e6fafd1bc77c9fc84a7839d1ec3251f1c48d61eaf5c39"
  }
 }
--- a/SPECS/kernel/kernel.spec
+++ b/SPECS/kernel/kernel.spec
@ -29,8 +29,8 @@

 Summary:        Linux Kernel
 Name:           kernel
-Version:        6.6.39.1
-Release:        2%{?dist}
+Version:        6.6.43.1
+Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@ -407,6 +407,9 @@ echo "initrd of kernel %{uname_r} removed" >&2
 %{_sysconfdir}/bash_completion.d/bpftool

 %changelog
+* Tue Jul 30 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 6.6.43.1-1
+- Auto-upgrade to 6.6.43.1
+
 * Tue Jul 30 2024 Chris Co <chrco@microsoft.com> - 6.6.39.1-2
 - Enable DMI_SYSFS as module
 - Enable EROFS_FS as module
--- a/cgmanifest.json
+++ b/cgmanifest.json
@ -6500,8 +6500,8 @@
        "type": "other",
        "other": {
          "name": "hyperv-daemons",
-          "version": "6.6.39.1",
-          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-3/6.6.39.1.tar.gz"
+          "version": "6.6.43.1",
+          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-3/6.6.43.1.tar.gz"
        }
      }
    },
@ -8101,8 +8101,8 @@
        "type": "other",
        "other": {
          "name": "kernel",
-          "version": "6.6.39.1",
-          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-3/6.6.39.1.tar.gz"
+          "version": "6.6.43.1",
+          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-3/6.6.43.1.tar.gz"
        }
      }
    },
@ -8111,8 +8111,8 @@
        "type": "other",
        "other": {
          "name": "kernel-headers",
-          "version": "6.6.39.1",
-          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-3/6.6.39.1.tar.gz"
+          "version": "6.6.43.1",
+          "downloadUrl": "https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-3/6.6.43.1.tar.gz"
        }
      }
    },
--- a/toolkit/resources/manifests/package/pkggen_core_aarch64.txt
+++ b/toolkit/resources/manifests/package/pkggen_core_aarch64.txt
@ -1,5 +1,5 @@
 filesystem-1.1-21.azl3.aarch64.rpm
-kernel-headers-6.6.39.1-2.azl3.noarch.rpm
+kernel-headers-6.6.43.1-1.azl3.noarch.rpm
 glibc-2.38-6.azl3.aarch64.rpm
 glibc-devel-2.38-6.azl3.aarch64.rpm
 glibc-i18n-2.38-6.azl3.aarch64.rpm
--- a/toolkit/resources/manifests/package/pkggen_core_x86_64.txt
+++ b/toolkit/resources/manifests/package/pkggen_core_x86_64.txt
@ -1,5 +1,5 @@
 filesystem-1.1-21.azl3.x86_64.rpm
-kernel-headers-6.6.39.1-2.azl3.noarch.rpm
+kernel-headers-6.6.43.1-1.azl3.noarch.rpm
 glibc-2.38-6.azl3.x86_64.rpm
 glibc-devel-2.38-6.azl3.x86_64.rpm
 glibc-i18n-2.38-6.azl3.x86_64.rpm
--- a/toolkit/resources/manifests/package/toolchain_aarch64.txt
+++ b/toolkit/resources/manifests/package/toolchain_aarch64.txt
@ -152,7 +152,7 @@ intltool-0.51.0-7.azl3.noarch.rpm
 itstool-2.0.7-1.azl3.noarch.rpm
 kbd-2.2.0-2.azl3.aarch64.rpm
 kbd-debuginfo-2.2.0-2.azl3.aarch64.rpm
-kernel-headers-6.6.39.1-2.azl3.noarch.rpm
+kernel-headers-6.6.43.1-1.azl3.noarch.rpm
 kmod-30-1.azl3.aarch64.rpm
 kmod-debuginfo-30-1.azl3.aarch64.rpm
 kmod-devel-30-1.azl3.aarch64.rpm
--- a/toolkit/resources/manifests/package/toolchain_x86_64.txt
+++ b/toolkit/resources/manifests/package/toolchain_x86_64.txt
@ -157,8 +157,8 @@ intltool-0.51.0-7.azl3.noarch.rpm
 itstool-2.0.7-1.azl3.noarch.rpm
 kbd-2.2.0-2.azl3.x86_64.rpm
 kbd-debuginfo-2.2.0-2.azl3.x86_64.rpm
-kernel-cross-headers-6.6.39.1-2.azl3.noarch.rpm
-kernel-headers-6.6.39.1-2.azl3.noarch.rpm
+kernel-cross-headers-6.6.43.1-1.azl3.noarch.rpm
+kernel-headers-6.6.43.1-1.azl3.noarch.rpm
 kmod-30-1.azl3.x86_64.rpm
 kmod-debuginfo-30-1.azl3.x86_64.rpm
 kmod-devel-30-1.azl3.x86_64.rpm
--- a/toolkit/scripts/toolchain/container/Dockerfile
+++ b/toolkit/scripts/toolchain/container/Dockerfile
@ -63,7 +63,7 @@ RUN wget -nv --no-clobber --timeout=30 --continue --input-file=$LFS/tools/toolch
 # Disable downloading from remote sources by default. The 'toolchain-local-wget-list' generated for the above line will download from $(SOURCE_URL)
 # The 'toolchain-remote-wget-list' is still available and can be used as an alternate to $(SOURCE_URL) if desired.
 #RUN wget -nv --no-clobber --timeout=30 --continue --input-file=$LFS/tools/toolchain-remote-wget-list --directory-prefix=$LFS/sources; exit 0
-RUN wget -nv --no-clobber --timeout=30 --continue https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-3/6.6.39.1.tar.gz -O kernel-6.6.39.1.tar.gz --directory-prefix=$LFS/sources; exit 0
+RUN wget -nv --no-clobber --timeout=30 --continue https://github.com/microsoft/CBL-Mariner-Linux-Kernel/archive/rolling-lts/mariner-3/6.6.43.1.tar.gz -O kernel-6.6.43.1.tar.gz --directory-prefix=$LFS/sources; exit 0
 USER root

 RUN mkdir -pv $LFS/{etc,var} $LFS/usr/{bin,lib,sbin} && \
--- a/toolkit/scripts/toolchain/container/toolchain-sha256sums
+++ b/toolkit/scripts/toolchain/container/toolchain-sha256sums
@ -28,7 +28,7 @@ a3c2b80201b89e68616f4ad30bc66aee4927c3ce50e33929ca819d5c43538898  gmp-6.3.0.tar.
 1db2aedde89d0dea42b16d9528f894c8d15dae4e190b59aecc78f5a951276eab  grep-3.11.tar.xz
 6b9757f592b7518b4902eb6af7e54570bdccba37a871fddb2d30ae3863511c13  groff-1.23.0.tar.gz
 7454eb6935db17c6655576c2e1b0fabefd38b4d0936e0f87f48cd062ce91a057  gzip-1.13.tar.xz
-c52edd4b3fb4ca5de815eeeee72afe4e02041ca94383d763a24d9d42fb46b7ee  kernel-6.6.39.1.tar.gz
+978e302c77d8ffbb7f6e6fafd1bc77c9fc84a7839d1ec3251f1c48d61eaf5c39  kernel-6.6.43.1.tar.gz
 5d24e40819768f74daf846b99837fc53a3a9dcdf3ce1c2003fe0596db850f0f0  libarchive-3.7.1.tar.gz
 f311f8f3dad84699d0566d1d6f7ec943a9298b28f714cae3c931dfd57492d7eb  libcap-2.69.tar.xz
 b8b45194989022a79ec1317f64a2a75b1551b2a55bea06f67704cb2a2e4690b0  libpipeline-1.5.7.tar.gz
--- a/toolkit/scripts/toolchain/container/toolchain_build_temp_tools.sh
+++ b/toolkit/scripts/toolchain/container/toolchain_build_temp_tools.sh
@ -86,7 +86,7 @@ rm -rf gcc-13.2.0

 touch $LFS/logs/temptoolchain/status_gcc_pass1_complete

-KERNEL_VERSION="6.6.39.1"
+KERNEL_VERSION="6.6.43.1"
 echo Linux-${KERNEL_VERSION} API Headers
 tar xf kernel-${KERNEL_VERSION}.tar.gz
 pushd CBL-Mariner-Linux-Kernel-rolling-lts-mariner-3-${KERNEL_VERSION}