Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[AUTOPATCHER-kernel] Kernel upgrade to version 6.6.64.2 - branch 3.0-dev #11832

Merged
merged 5 commits into from
Jan 9, 2025

Conversation

CBL-Mariner-Bot
Copy link
Collaborator

@CBL-Mariner-Bot CBL-Mariner-Bot commented Jan 9, 2025

[AUTOPATCHER-kernel] Kernel upgrade to version 6.6.64.2 - branch 3.0-dev
Upgrade pipeline run -> https://dev.azure.com/mariner-org/mariner/_build/results?buildId=707767&view=results

buddy build -> https://dev.azure.com/mariner-org/mariner/_build/results?buildId=707783&view=results

This upgrade addresses the bugs:
https://microsoft.visualstudio.com/OS/_workitems/edit/55483604 - odd behavior on ARM (not released but seen on previous attempts to upgrade past 6.6.57.1)
https://microsoft.visualstudio.com/OS/_workitems/edit/55328451 - NFLOG not operating as expected
https://microsoft.visualstudio.com/OS/_workitems/edit/55330190?src=WorkItemMention&src-action=artifact_link - E2E test failures

@@ -507,7 +507,6 @@ CONFIG_PHYSICAL_ALIGN=0x1000000
CONFIG_DYNAMIC_MEMORY_LAYOUT=y
CONFIG_RANDOMIZE_MEMORY=y
CONFIG_RANDOMIZE_MEMORY_PHYSICAL_PADDING=0xa
# CONFIG_ADDRESS_MASKING is not set
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@@ -7366,6 +7365,8 @@ CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y
CONFIG_SECURITY_LANDLOCK=y
CONFIG_SECURITY_IPE=y
CONFIG_IPE_BOOT_POLICY=""
CONFIG_IPE_POLICY_SIG_SECONDARY_KEYRING=y
CONFIG_IPE_POLICY_SIG_PLATFORM_KEYRING=y
Copy link
Contributor

@rlmenge rlmenge Jan 9, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Both SECONDARY and PLATFORM keyring changes a result of microsoft/CBL-Mariner-Linux-Kernel@f87bb12

[Commit aafd2ae5]: ipe: allow secondary and platform keyrings to install/update policies

@@ -7374,7 +7375,6 @@ CONFIG_IPE_PROP_DM_VERITY=y
CONFIG_IPE_PROP_DM_VERITY_SIGNATURE=y
CONFIG_IPE_PROP_FS_VERITY=y
CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SIG=y
CONFIG_IPE_PROP_INTENDED_PATHNAME=y
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"IPE_PROP_INTENDED_PATHNAME" is no longer included in the AzL kernel ipe source to better align with upstream offerings. Commit was removed in feature branch: microsoft/CBL-Mariner-Linux-Kernel@f87bb12

for reference, commit which contained this feature was [d356a4ff68] ipe: add intended_pathname property

@@ -527,7 +527,6 @@ CONFIG_ARM64_EPAN=y
# end of ARMv8.7 architectural features

CONFIG_ARM64_SVE=y
CONFIG_ARM64_SME=y
Copy link
Contributor

@rlmenge rlmenge Jan 9, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Result of microsoft/CBL-Mariner-Linux-Kernel@22aaaa7

ARM Scalable Matrix Extension (SME) is being dubbed "BROKEN" for now due to many issues including the corruption of the FPSIMD/SVE/SME state of arbitrary tasks.

More on ARM SME can be read at
KConfig
linux kernel upstream documentation
ARM blog

@@ -8777,10 +8776,8 @@ CONFIG_COMMON_CLK_MT8192=y
# CONFIG_COMMON_CLK_MT8192_VENCSYS is not set
CONFIG_COMMON_CLK_MT8195=y
CONFIG_COMMON_CLK_MT8195_APUSYS=y
CONFIG_COMMON_CLK_MT8195_AUDSYS=y
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

result of microsoft/CBL-Mariner-Linux-Kernel@3d02397

This config does nothing in the source

CONFIG_COMMON_CLK_MT8195_IMP_IIC_WRAP=y
CONFIG_COMMON_CLK_MT8195_MFGCFG=y
CONFIG_COMMON_CLK_MT8195_MSDC=y
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

result of microsoft/CBL-Mariner-Linux-Kernel@3d02397

This config does nothing in the source

Copy link
Contributor

@rlmenge rlmenge left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Boots in ARM64 cobalt VM
image

[Update] as well amd hyperv
image

@rlmenge rlmenge merged commit 183fb9b into 3.0-dev Jan 9, 2025
13 checks passed
@rlmenge rlmenge deleted the cblmargh/kernel-upgrade-3.0-dev-6.6.64.2 branch January 9, 2025 20:27
jslobodzian pushed a commit that referenced this pull request Jan 22, 2025
JocelynBerrendonner pushed a commit to JocelynBerrendonner/azurelinux that referenced this pull request Jan 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants