Go to file
Paul Bolle 86ea590a63 Drop secure boot Kconfig symbols too
Commit cc1db7f347 ("Updates for secure boot") and commit 8e8de459e7
("Forgot to remove dropped patches") removed the patches that added
Kconfig symbols EFI_SIGNATURE_LIST_PARSER and LOAD_UEFI_KEYS. Remove
these symbols from the configuration generation directory and from the
shipped .config files.

Signed-off-by: Paul Bolle <pebolle@tiscali.nl>
2019-01-14 13:45:41 -08:00
configs Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
scripts More fixup of the headers script 2019-01-08 15:37:03 -08:00
tests Add memory/filesystem tests 2018-10-05 09:51:31 -04:00
.gitignore Linux v5.0-rc2 2019-01-14 09:18:40 -08:00
0001-iio-Use-event-header-from-kernel-tree.patch Fix for incorrect return checking in cpupower (rhbz 1374212) 2016-09-14 09:42:37 -07:00
0001-Make-get_cert_list-not-complain-about-cert-lists-tha.patch Updates for secure boot 2019-01-07 15:09:43 -06:00
0002-Add-efi_status_to_str-and-rework-efi_status_to_err.patch Update MODSIGN fixes with dhowell's first round of feedback. 2018-01-09 17:11:55 -05:00
0003-Make-get_cert_list-use-efi_status_to_str-to-print-er.patch Updates for secure boot 2019-01-07 15:09:43 -06:00
ACPI-irq-Workaround-firmware-issue-on-X-Gene-based-m400.patch Work around firmware issue on X-Gene based m400 (rhbz 1574718) 2018-05-10 09:43:52 -04:00
ACPI-scan-Fix-regression-related-to-X-Gene-UARTs.patch Linux v4.18-2978-g1eb46908b35d 2018-08-15 10:58:06 -07:00
Add-option-to-automatically-enforce-module-signature.patch Refresh SB patchset to fix bisectability issue 2016-10-27 10:49:53 -04:00
Allwinner-A64-timer-workaround.patch Raspberry Pi DT updates, Update AllWinner A64 timer errata workaround 2019-01-13 04:44:19 +00:00
arm64-Add-option-of-13-for-FORCE_MAX_ZONEORDER.patch Enable sound SoC on aarch64, Update some ARM patches to latest upstream, small cleanups 2017-04-26 11:33:46 +01:00
ARM-dts-bcm283x-Several-DTS-improvements.patch Raspberry Pi DT updates, Update AllWinner A64 timer errata workaround 2019-01-13 04:44:19 +00:00
arm-sdhci-esdhc-imx-fixes.patch Linux v4.19-1676-g0d1b82cd8ac2 2018-10-23 10:47:47 -05:00
ARM-tegra-usb-no-reset.patch Linux v4.1-11235-gc63f887bdae8 2015-06-29 11:24:25 -04:00
ath9k-rx-dma-stop-check.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
bcm2835-cpufreq-add-CPU-frequency-control-driver.patch Linux v4.20-10595-g8e143b90e4d4 2019-01-02 08:15:21 -08:00
bcm2835-mmc-sdhci-iproc-handle-mmc_of_parse-errors-during-probe.patch Another fix for issue affecting Raspberry Pi 3-series WiFi (rhbz 1652093) 2018-12-24 02:47:39 +00:00
bcm2837-dts-add-Raspberry-Pi-3-A.patch A few Raspberry Pi cleanups, add gpio line names 2019-01-10 12:57:15 +00:00
build_configs.sh configs: Create symlinks to used scripts 2017-11-13 09:39:16 -08:00
check_configs.awk Add script to check config generation 2016-12-22 14:11:05 -08:00
config_generation configs: Create symlinks to used scripts 2017-11-13 09:39:16 -08:00
crash-driver.patch Fix crash driver to use linux/uaccess.h 2018-12-31 14:40:58 -08:00
CVE-2019-3701.patch Fix CVE-2019-3701 (rhbz 1663729 1663730) 2019-01-09 09:50:29 -06:00
die-floppy-die.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
disable-i8042-check-on-apple-mac.patch Linux v4.2-9700-g7d9071a09502 2015-09-08 08:34:33 -04:00
drm-i915-hush-check-crtc-state.patch Linux v4.12-10317-gaf3c8d9 2017-07-10 08:40:53 -07:00
efi-Add-EFI_SECURE_BOOT-bit.patch Refresh SB patchset to fix bisectability issue 2016-10-27 10:49:53 -04:00
efi-Disable-secure-boot-if-shim-is-in-insecure-mode.patch Refresh SB patchset to fix bisectability issue 2016-10-27 10:49:53 -04:00
efi-lockdown.patch lockdown update for S390 2019-01-10 08:38:14 -06:00
efi-secureboot.patch Linux v4.20-9163-g195303136f19 2018-12-30 09:30:50 -08:00
efi-use-32-bit-alignment-for-efi_guid_t.patch efi fix for arm-32 systems 2019-01-10 08:26:34 +00:00
filter-aarch64.sh Cleanup some old config options, remove DRM drivers hidden behind DRM_LEGACY, tweak module filters a little (fpga, iio, few other bits), minor find optimisation 2018-08-16 20:01:58 +01:00
filter-armv7hl.sh Cleanup some old config options, remove DRM drivers hidden behind DRM_LEGACY, tweak module filters a little (fpga, iio, few other bits), minor find optimisation 2018-08-16 20:01:58 +01:00
filter-i686.sh Add hid-asus for i686 too 2018-11-05 11:48:37 -06:00
filter-modules.sh Updates for hid-asus 2018-11-03 08:23:31 -05:00
filter-ppc64le.sh Cleanup some old config options, remove DRM drivers hidden behind DRM_LEGACY, tweak module filters a little (fpga, iio, few other bits), minor find optimisation 2018-08-16 20:01:58 +01:00
filter-s390x.sh Rename kernel-drivers to kernel-modules 2014-05-01 21:10:48 -04:00
filter-x86_64.sh Rename kernel-drivers to kernel-modules 2014-05-01 21:10:48 -04:00
firmware-Drop-WARN-from-usermodehelper_read_trylock-.patch Linux v4.2-rc2 2015-07-13 10:53:53 -04:00
generate_all_configs.sh Change method of configuration generation 2016-12-06 12:07:10 -08:00
generate_bls_conf.sh Drop the id field from generated BLS snippets 2018-07-12 12:58:27 -04:00
generate_debug_configs.sh Change method of configuration generation 2016-12-06 12:07:10 -08:00
gitrev Linux v5.0-rc1-43-g1bdbe2274920 2019-01-11 07:57:17 -08:00
input-kill-stupid-messages.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00
input-rmi4-remove-the-need-for-artifical-IRQ.patch Linux v4.18-rc2-132-gf57494321cbf 2018-06-28 08:34:35 -07:00
Input-synaptics-pin-3-touches-when-the-firmware-repo.patch Linux v4.2-rc2 2015-07-13 10:53:53 -04:00
Kbuild-Add-an-option-to-enable-GCC-VTA.patch Linux v4.2-rc2 2015-07-13 10:53:53 -04:00
kernel-aarch64-debug.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-aarch64.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-armv7hl-debug.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-armv7hl-lpae-debug.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-armv7hl-lpae.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-armv7hl.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-i686-debug.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-i686.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-local Change method of configuration generation 2016-12-06 12:07:10 -08:00
kernel-ppc64le-debug.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-ppc64le.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-s390x-debug.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-s390x.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-x86_64-debug.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel-x86_64.config Drop secure boot Kconfig symbols too 2019-01-14 13:45:41 -08:00
kernel.spec Linux v5.0-rc2 2019-01-14 09:18:40 -08:00
KEYS-Allow-unrestricted-boot-time-addition-of-keys-t.patch Add missing patch for signed modules rebase 2017-05-05 16:20:02 -05:00
lib-cpumask-Make-CPUMASK_OFFSTACK-usable-without-deb.patch Linux v4.1-11355-g6aaf0da8728c 2015-06-30 13:01:28 -04:00
lis3-improve-handling-of-null-rate.patch Linux v4.2-rc1 2015-07-06 16:34:35 -04:00
Makefile Change method of configuration generation 2016-12-06 12:07:10 -08:00
merge.pl configs: Create symlinks to used scripts 2017-11-13 09:39:16 -08:00
mod-extra.list mod-extra.list: add ETF qdisc to the the the extra modules package 2018-12-28 14:08:09 -08:00
mod-extra.sh Prep mod-extra.sh for signed modules 2012-09-25 13:22:00 -04:00
mod-sign.sh simplify the signing stuff now that sign-file takes pub/priv key args 2013-03-28 16:33:21 -04:00
namespaces-no-expert.patch Linux v4.18-11682-g815f0ddb346c 2018-08-23 10:08:57 -04:00
no-pcspkr-modalias.patch Linux v4.13-9219-g015a9e66b9b8 2017-09-08 17:21:55 -05:00
PatchList.txt drop old watchdog patch 2017-01-31 16:47:17 +00:00
process_configs.sh configs: Update scripts and spec file with layout changes 2017-11-13 09:39:17 -08:00
qcom-msm89xx-fixes.patch Linux v4.19-9448-g673c790e7282 2018-10-29 13:54:19 -05:00
README.txt Spelling and minor readme fixes 2018-10-23 16:31:51 +01:00
rebase-notes.txt Add a note to turn off CONFIG_AF_KCM 2018-08-17 12:33:32 -07:00
remove-binary-diff.pl Linux v4.9-rc3 2016-10-31 06:27:33 -07:00
scsi-sd_revalidate_disk-prevent-NULL-ptr-deref.patch Linux v4.9-7150-gcdb98c2 2016-12-14 12:50:48 -06:00
silence-fbcon-logo.patch Linux v4.14-rc1 2017-09-18 14:14:22 -05:00
sources Linux v5.0-rc2 2019-01-14 09:18:40 -08:00
TODO re-enable RCU_FAST_NO_HZ, enable NO_HZ_FULL on x86_64 2014-09-17 13:10:12 -05:00
usb-phy-tegra-Add-38.4MHz-clock-table-entry.patch fix i.MX6 gpu module loading, fix Jetson TX1 usb 2016-04-28 13:42:42 +01:00
x509.genkey Switch to using modsign-post-KS upstream with x509 certs 2012-09-25 13:22:04 -04:00
xen-pciback-Don-t-disable-PCI_COMMAND-on-PCI-device-.patch Linux v4.1-rc2-79-g0e1dc4274828 2015-05-07 09:22:47 -04:00

		Kernel package tips & tricks.
		~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The kernel is one of the more complicated packages in the distro, and
for the newcomer, some of the voodoo in the spec file can be somewhat scary.
This file attempts to document some of the magic.


Speeding up make prep
---------------------
The kernel is nearly 500MB of source code, and as such, 'make prep'
takes a while. The spec file employs some trickery so that repeated
invocations of make prep don't take as long.  Ordinarily the %prep
phase of a package will delete the tree it is about to untar/patch.
The kernel %prep keeps around an unpatched version of the tree,
and makes a symlink tree clone of that clean tree and than applies
the patches listed in the spec to the symlink tree.
This makes a huge difference if you're doing multiple make preps a day.
As an added bonus, doing a diff between the clean tree and the symlink
tree is slightly faster than it would be doing two proper copies of the tree.


Build logs.
-----------
There's a convenience helper script in scripts/grab-logs.sh
that will grab the build logs from koji for the kernel version reported
by make verrel


Config hierarchy.
-----------------
Instead of having to maintain a config file for every arch variant we build on,
the kernel spec uses a nested system of configs. Each option CONFIG_FOO is
represented by a single file named CONFIG_FOO which contains the state (=y, =m,
=n). These options are collected in the folder base-generic. Architecture
specific options are set in nested folders. An option set in a nested folder
will override the same option set in one of the higher levels.

The individual CONFIG_FOO files only exist in the pkg-git repository. The RPM
contains kernel-foo.config files which are the result of combining all the
CONFIG_FOO files. The files are combined by running build_configs.sh. This
script _must_ be run each time one of the options is changed.

Example flow:

# Enable the option CONFIG_ABC123 as a module for all arches
echo "CONFIG_ABC123=m" > configs/base-generic/CONFIG_ABC1234
# enable the option CONFIG_XYZ321 for only x86
echo "# CONFIG_XYZ321 is not set" > configs/base-generic/CONFIG_XYZ321
echo "CONFIG_XYZ321=m" > configs/base-generic/x86/CONFIG_XYZ321
# regenerate the combined config files
./build_configs.sh

The file config_generation gives a listing of what folders go into each
config file generated.

Debug options.
--------------
This is a little complicated, as the purpose & meaning of this changes
depending on where we are in the release cycle.
If we are building for a current stable release, 'make release' has
typically been run already, which sets up the following..
- Two builds occur, a 'kernel' and a 'kernel-debug' flavor.
- kernel-debug will get various heavyweight debugging options like
  lockdep etc turned on.

If we are building for rawhide, 'make debug' has been run, which changes
the status quo to:
- We only build one kernel 'kernel'
- The debug options are always turned on.
This is done to increase coverage testing, as not many people actually
run kernel-debug.

The debug options are managed in a separate heierarchy under base-debug. This
works in a similar manner to base-generic. More deeply nested folders, again,
override options. The file config_generation gives a listing of what folders
go into each config file generated.