No Fedora doesn't support delivering livepatches to the kernel but it's
useful to validate the infrastructure around livepatch.
Signed-off-by: Laura Abbott <labbott@redhat.com>
This installs local headers and also runs various checks. Some
of this isn't completely relevant with the split out headers
but overall it's the right approach for validation.
Now that we are packaging the certificates, there's no reason
to have the extra check. pesign will take care of doing the
right thing behind the scenes
We've been doing a workaround of using a uuid for the build-id for
userspace binaries to let us get parallel debuginfo (the trick we
use for the kernel doesn't extend to userspace binaries). This
works but isn't ideal for reproducibility. Given we don't actually
care about this debuginfo, just remove it from the buildroot completely.
The "regular" definition of the with_kabichk macro does not need to
be commented out while it is temporarily (re-)defined as 0 on the
next line. This avoids a "Macro expanded in comment" warning.
Remove comments on the same line as %endif directives. Instead, make
a couple of these conditionals easier to read (and consistent with
the surrounding ones) by deleting a few blank lines.
The test was failing (after hanging for several hours) because of a
hard-coded assumption about which file descriptor would be returned
by memfd_create(). The actual file descriptor gets printed by the
test program though, so read this and use it instead. (Adjust the
test program so that this is not printed until the file is ready.)
Resolve compiler warnings about implicit function declarations, by
using the #include statements listed in the kernel.org man-pages.
This reverts commit 89c7d2ae30a43ba2960ce14cddd50f8d8a7da92f, which
was causing kernel modules to be installed in a location other than
/lib/modules/$(uname -r), preventing modprobe from locating them.
CI builds no longer contain the Pagure UID in the package release:
https://github.com/CentOS-PaaS-SIG/upstream-fedora-pipeline/pull/199