Граф коммитов

217 Коммитов

Автор SHA1 Сообщение Дата
Dan Streetman e7314b913e use systemd-bootstrap-rpm-macros 2024-01-30 16:23:16 -05:00
Rachel Menge 892de68450
Update kernel to 6.6.12.1 (#7472)
Update kernel to 6.6.12.1. Note that support for CONFIG_DEBUG_CREDENTIALS was removed [207f135d819344c03333246f784f6666e652e081].
2024-01-26 12:10:25 -08:00
Pawel Winogrodzki e47fbe8056
Ported cross-compilation `binutils` and `kernel-headers` from `main`. (#7351) 2024-01-25 09:58:25 -08:00
rlmenge 2f2f16f62f
[3.0] Add cpupower.service to kernel-tools (#6833)
The 'cpupower' systemd startup script is useful for users to change the behavior of cpufreq at runtime rather than relying on the config default set at compile time. Specifically, it allows users to change the scaling governor. By default Azure Linux sets the scaling governor to performance mode via CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE. This was confirmed by flashing the latest CBL-Mariner 2.0 iso onto an Intel NUC. It by default used the performance scaling governor and the cpufreq driver was intel_pstates. The powersave governor was available but not used. More on CPU frequency scaling can be seen at kernel.org

While useful, introducing the cpupower.service script in Mariner 2.0 would break the assumption for how users can affect the cpu frenquency. Adding the service file would change the cpu frequency for users who have taken action to change from the default "performance" governor to some other governor (powersave, ondemand, etc.). Set in 3.0 to encourage users to have the most performant state.

Just as a note that there are many places the cpu frequency setting can be altered:
- bios
- governor in kernel configs (CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y in Mariner)
- governor in kernel command line (cpufreq.default_governor not set in Mariner)
- cpufreq direct call in userspace
- tuned (which we don't ship with by default)
2023-12-15 10:54:04 -08:00
rlmenge e81b5921c7
Upgrade kernel to 6.6.2.1 (#7009)
6.6 was declared the latest LTS. Therefore, upgrade to it.

Notable changes to the spec included a few perf changes.
libtraceevent is now a buildrequires as it is no longer shipped within the source [4171925aa9f3f7bf57b100238f148b50c45c3b1b]. Additionally, perf/examples/bpf was removed [5056c99e8d97e1129ff29826971eefbe345b6837] and the bpf include directory reworked[3b573bf318d894b4290e194c4d7dbcba8c1f6ead].

Finally, the configs for both x86_64 and aarch64 were brought to parity with 6.1.
2023-12-13 22:53:10 -08:00
rlmenge 6c8b27c94e
[3.0] Update ARM configs to match 2.0 (#6872)
For this commit, I analyzed all configs which were set to "y"/"m"
in the 5.15 kernel but "is not set" or missing in 6.1. I
determined whether they were supported, refactored, or depricated
in 6.1. In the first two cases, I enable the missing config or
its new equivalent.

This analysis was done by using a Mariner container, copying the
6.1 kernel source and running 'make menuconfig' until the missing
configs could all be explained via a commit in the kernel source.
2023-12-08 14:20:04 -08:00
Cameron E Baird 7d73aa4755
fix: Package both grub2 configuration dirs in grub2-configuration.rpm (#6497) 2023-12-04 15:47:40 -08:00
Cameron E Baird 0f621872e7
Remove loglevel=3 for legacy boot flow (#6888) 2023-12-04 11:05:13 -08:00
rlmenge ed10707465
[3.0] Remove kernel-azure (#6845) 2023-12-04 09:53:06 -08:00
rlmenge ec6a1e5d9d
[3.0] Upgrade kernel to 6.1.58.1 (#6603) 2023-11-06 22:46:38 -08:00
Jon Slobodzian fd0dc591df Merge branch 'main' into 3.0-dev 2023-11-01 15:47:22 -07:00
Andrew Phelps 808fcde44c
remove livepatch specs and workflow (#6619)
* remove livepatch specs and workflow

* fix licenses and remove signed livepatch

* remove livepatch sources from cgmanifest.json
2023-10-28 21:46:49 -07:00
Gary Swalling b05435d5ba
Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469)
Backport 30 patches to bring grub 2.06 up to SBAT level 2 and resolve vulnerabilities for CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, and CVE-2022-28736.
2023-10-26 12:45:44 -07:00
rlmenge a7ebe53518
Enable CONFIG_BINFMT_MISC in ARM64 (#6582) 2023-10-24 16:13:53 -07:00
CBL-Mariner-Bot 0576375e83
[AUTOPATCHER-kernel] Kernel upgrade to version 5.15.135.1 - branch main (#6448)
* Kernel upgrade to 5.15.135.1 version
---------

Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>
2023-10-17 11:08:22 -07:00
CBL-Mariner-Bot fca71a0288
[AUTOPATCHER-kernel] Kernel upgrade to version 5.15.133.1 - branch main (#6286)
* Remove NET_CLS_RSVP and CONFIG_NET_CLS_RSVP6 that don't apply to the new version

Co-authored-by: Neha Agarwal <nehaagarwal@microsoft.com>
2023-09-29 11:25:31 -07:00
Cameron E Baird f7721321ac
feat: Enable grub2-mkconfig generation of grub config (#5989)
* Implement grub2-mkconfig generation

* Introduce grub2-rpm-macros

* Remove mkconfig systemd behavior, move it to grub template. Make grub2-rpm-macros a subpackage under grub2

* Pack AzureLinux-specific grub configuration directory in its own subpackage

* Enable mkconfig flow for kernel-hci

* +kernel-hci-signed

* stop packaging macros in configuration rpm

Signed-Off-By: Cameron Baird <cameronbaird@microsoft.com>
2023-09-25 12:56:58 -07:00
jslobodzian eb08b37916
Bump package version to recompile binaries with fixed gcc stack prote… (#6253)
* Bump package version to recompile binaries with fixed gcc stack protection (CVE-2023-4039)

* Bump debuginfo versions in toolchain manifests

* Bump kernel headers to match kernel

* Update SPECS/gettext/gettext.spec

Taking suggestion

Co-authored-by: Muhammad Falak R Wani <falakreyaz@gmail.com>

* Update for code review comments

* Fix for code review comment in qt5-qtdeclarative changelog

* Fix dash version for signed spec files

---------

Co-authored-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
2023-09-21 17:10:15 -04:00
CBL-Mariner-Bot e94787c454
[AUTOPATCHER-kernel] Kernel upgrade to version 5.15.131.1 - branch main (#6196)
* Kernel upgrade to 5.15.131.1 version

* Update configs

* Update mariner-required-configs

---------

Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>
2023-09-11 10:47:11 -07:00
CBL-Mariner-Bot d39240a8c4
Kernel upgrade to 5.15.126.1 version (#5991) 2023-08-16 13:26:30 -07:00
rlmenge 8b6982a318
Build nbd module (#5972)
Enable the nbd module for AMD by setting CONFIG_BLK_DEV_NBD=m. 
This module is already available for ARM64.
2023-08-10 14:48:49 -07:00
CBL-Mariner-Bot 19c3e1bde9
[AUTOPATCHER-kernel] Kernel upgrade to version 5.15.125.1 - branch main (#5964)
* Kernel upgrade to 5.15.125.1 version

* Add new configs set to defaults

* Update required configs json

---------

Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>
2023-08-10 09:38:02 -07:00
Lanze Liu b9ca4e444b
kernel-hci: Update config to enable DM multipath Kernel configurations. (#5951) 2023-08-08 16:13:44 -04:00
CBL-Mariner-Bot 9c98773ff3
[AUTOPATCHER-kernel] Kernel upgrade to version 5.15.123.1 - branch main (#5916)
* Kernel upgrade to 5.15.123.1 version

* Apply config changes to ARM64

* Add required configs

---------

Co-authored-by: Saul Paredes <saulparedes@microsoft.com>
2023-08-07 14:24:52 -07:00
J Camposeco e4346e4140
kernel: update mellanox configuratoins for bluefield2 (#5896)
* Enabling Mellanox configs

* Remove POWER_MLXBF

* update required configs

* Add new configs

* update PR number in rewuired config json
2023-08-01 13:31:46 -07:00
Vince Perri 7f85fab85b
kernel-hci: Add net/mlx5 patch (27) switching warn message to debug (#5885)
* kernel-hci: Add 0028-net-mlx5-Bridge-use-debug-not-warn-if-entry-not-found.patch

* Bump release number and add to changelog

* Fix changelog

* Update entangled spec
2023-07-31 13:15:34 -04:00
CBL-Mariner-Bot 674f033b6f
Kernel upgrade to 5.15.122.1 version (#5887) 2023-07-26 15:17:31 -07:00
Andrew Phelps cb3a2a93e7
Revert "Add CONFIGs for Mellanox Bluefield SOC in ARM64 (#5789)" (#5852)
This reverts commit 800a2e0bb3.
2023-07-19 13:35:15 -07:00
J Camposeco 800a2e0bb3
Add CONFIGs for Mellanox Bluefield SOC in ARM64 (#5789)
* Add Mellanox Bluefield Configs

* Fix typo

* remove exit 1 to test build

* Add Mellanox Bluefield Configs

* remove exit 1 to test build

* Add Mellanox Bluefield Configs

* remove exit 1 to test build

* Add Mellanox Bluefield Configs

* Fix typo

* Bump release version for kernel/kernel-headers/kernel-signed

* Fix Typo in changelog

* Updating manifests

* Revert exit path and update PR link
2023-07-10 16:15:49 -07:00
CBL-Mariner-Bot a0f61bff4e
[AUTOPATCHER-kernel] Kernel upgrade to version 5.15.118.1 - branch main (#5760)
* Kernel upgrade to 5.15.118.1 version

* Apply config changes to AMD64

* update kernel config

* update signatures

* remove extra whitespace

* update arm64 config for kernel-azure

* Updated Mariner required configs

---------

Co-authored-by: Thien Trung Vuong <tvuong@microsoft.com>
Co-authored-by: Betty Lakes <bettylakes@microsoft.com>
2023-07-05 15:02:40 -07:00
rlmenge 541e1a26de
Enable CONFIG_IP_VS_MH module (#5657)
* Enable CONFIG_IP_VS_MH module

* Update required configs

* Tighten requirement for ip-ms-vs
2023-06-26 13:43:17 -07:00
CBL-Mariner-Bot ccdbe97466
[AUTOPATCHER-kernel] Kernel upgrade to version 5.15.116.1 - branch main - (#5670)
* Kernel upgrade to 5.15.116.1 version

* Apply config changes to AMD64

* Apply config changes to ARM64

* Update 0002 patch to kernel-hci.

* Update kernel-hci configs

---------

Co-authored-by: lanzeliu <lanzeliu@microsoft.com>
Co-authored-by: Rachel Menge <rachelmenge@microsoft.com>
2023-06-15 14:50:21 -07:00
Daniel McIlvaney 81627c8324
Patch CVE-2022-3775 in grub2 (#5654)
Co-authored-by: Dan Streetman <ddstreet@ieee.org>
2023-06-09 16:29:04 -07:00
rlmenge 0af13f0fb3
Add nvme_multipath and change default (#5584) 2023-05-31 09:44:59 -07:00
CBL-Mariner-Bot dd9e4c0bf9
Kernel upgrade to 5.15.112.1 version (#5571) 2023-05-24 12:59:02 -07:00
CBL-Mariner-Bot 9a0c977803
Kernel upgrade to 5.15.111.1 version (#5508) 2023-05-15 20:12:02 -07:00
rlmenge 723b736a7c
Revert "Enable nvme multipath (#5418)" (#5504)
This reverts commit 72bd8e8273.
2023-05-15 15:21:14 -07:00
rlmenge fa5aa23509
Enable CONFIG_EDAC_SKX (#5487) 2023-05-15 11:51:42 -07:00
Elaheh Dehghani e477d1dd3f
Add mstflint kerner driver as a patch to kernel-hci (#5497) 2023-05-12 20:16:20 -07:00
Elaheh Dehghani fe939b118e
Revert "add mstflint kernel module for secure boot" (#5499)
This reverts commit d5b23411f1.
This reverts commit 66490e4416.
2023-05-12 18:02:54 -07:00
rlmenge 0531b3d827
Enable HW monitoring and tracing configs (#5417)
* Enable HWMON and THERMAL HWMON
* Add more HW debugging options
2023-05-05 08:38:09 -07:00
rlmenge 72bd8e8273
Enable nvme multipath (#5418) 2023-05-04 19:31:11 -07:00
CBL-Mariner-Bot f2ffd83572
Kernel upgrade to 5.15.110.1 version (#5433) 2023-05-02 11:09:31 -07:00
Andrew Phelps 570cb9efcc
mstflint: fix signature issue (#5427) 2023-04-29 15:33:01 -07:00
rlmenge bfe0579fde
Enable DRM_AMDGPU module in kernel-drivers-gpu (#5416) 2023-04-28 15:37:12 -07:00
rlmenge 32a1e22857
Enable Kernel modules for TLS, Dell drivers, and supporting config options (#5406) 2023-04-27 13:18:16 -07:00
Andrew Phelps 74c602eea8
remove old livepatches (#5386) 2023-04-26 23:24:20 -07:00
Elaheh Dehghani 0a39dc19cc
Use kernel header to query the kernel version (#5370)
* use kernel-header to quesry kernel version
2023-04-24 18:50:17 -07:00
Elaheh Dehghani 233cc938f8
add mstflint kernel module for secure boot (#5139) 2023-04-20 09:17:26 -07:00
rlmenge df5db4247e
Disable recomputing build-ids for kernel debuginfo packages (#5301)
* Disable regenerating build-ids for kernel debuginfo package

* Add additional comments

* Proprogate change to other kernels
2023-04-19 08:12:46 -07:00