Debian: kernel: clean patches from debian release

Clean the patches listed in debian/patches/series:
(1) For section [# Changes to support package build system]

Below 2 patches are kept for adding kernel version information
in debian style:
debian/version.patch
debian/uname-version-timestamp.patch

Below 4 patches are kept for working together with debian kernel
building style, or else building errors occur:
debian/kernelvariables.patch
debian/tools-perf-version.patch
debian/perf-traceevent-support-asciidoctor-for-documentatio.patch
debian/kbuild-look-for-module.lds-under-arch-directory-too.patch

(2) For section [# Lockdown missing pieces].
Only 2 patches are kept for the necessary function of kernel modules
signing. Refer to commit [Debian: enable lockdown feature patches].
They are patches under features/all/lockdown/:
efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch
efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch

Test Plan:
 - PASS: Build kernels and oot kernel modules and boot up on qemu.
 - PASS: Boot up the image on hardware using iso installation.
         Some of the kernel modules are loaded by default and test
         insmod ko for the other oot modules by hand.
 - PASS: Redo kernel modules signing test:
         boot up qemu in the way with secure boot enabled, sig_enforce
         is unset by default. Insmod unsigned / missigned kernel
         modules. It should fail.
 - PASS: Above tests are done for both std and rt kernel.

Story: 2009221
Task: 45745

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Change-Id: I8daec7581434edb2640450e16b0f4a91732d6027
This commit is contained in:
Li Zhou
2022-07-07 16:20:16 +08:00
parent 5db5ea4570
commit 91db13f5e9
4 changed files with 118 additions and 0 deletions

View File

@@ -0,0 +1,58 @@
From 85c4b1dcae0d31aad6c826d5544ce198c9c77268 Mon Sep 17 00:00:00 2001
From: Li Zhou <li.zhou@windriver.com>
Date: Thu, 7 Jul 2022 10:41:12 +0800
Subject: [PATCH] kernel-rt: clean patches from debian release
Clean the patches listed in debian/patches/series:
(1) For section [# Changes to support package build system]
Below 2 patches are kept for adding kernel version information
in debian style:
debian/version.patch
debian/uname-version-timestamp.patch
Below 4 patches are kept for working together with debian kernel
building style, or else building errors occur:
debian/kernelvariables.patch
debian/tools-perf-version.patch
debian/perf-traceevent-support-asciidoctor-for-documentatio.patch
debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
(2) For section [# Lockdown missing pieces].
Only 2 patches are kept for the necessary function of kernel modules
signing.
Signed-off-by: Li Zhou <li.zhou@windriver.com>
---
debian/patches/series | 10 ----------
1 file changed, 10 deletions(-)
diff --git a/debian/patches/series b/debian/patches/series
index 6b96a60..d91da94 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -2,15 +2,7 @@
debian/version.patch
debian/uname-version-timestamp.patch
debian/kernelvariables.patch
-debian/ia64-hardcode-arch-script-output.patch
-debian/mips-disable-werror.patch
-debian/mips-boston-disable-its.patch
-debian/mips-ieee754-relaxed.patch
-debian/arch-sh4-fix-uimage-build.patch
debian/tools-perf-version.patch
-debian/tools-perf-install.patch
-debian/wireless-add-debian-wireless-regdb-certificates.patch
-debian/documentation-drop-sphinx-version-check.patch
debian/perf-traceevent-support-asciidoctor-for-documentatio.patch
debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
@@ -19,5 +11,3 @@ debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
# Lockdown missing pieces
features/all/lockdown/efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch
features/all/lockdown/efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch
-features/all/lockdown/mtd-disable-slram-and-phram-when-locked-down.patch
-features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch
--
2.17.1

View File

@@ -12,3 +12,4 @@
0012-kernel-rt-add-rt-to-abiname.patch
0013-Debian-update-5.10-Kernel-to-5.10.112.patch
0014-kernel-rt-fix-proc-version-content.patch
0015-kernel-rt-clean-patches-from-debian-release.patch

View File

@@ -0,0 +1,58 @@
From 073427e88d24bf573734e22d0e23d65f95b0a479 Mon Sep 17 00:00:00 2001
From: Li Zhou <li.zhou@windriver.com>
Date: Wed, 6 Jul 2022 14:51:17 +0800
Subject: [PATCH] kernel-std: clean patches from debian release
Clean the patches listed in debian/patches/series:
(1) For section [# Changes to support package build system]
Below 2 patches are kept for adding kernel version information
in debian style:
debian/version.patch
debian/uname-version-timestamp.patch
Below 4 patches are kept for working together with debian kernel
building style, or else building errors occur:
debian/kernelvariables.patch
debian/tools-perf-version.patch
debian/perf-traceevent-support-asciidoctor-for-documentatio.patch
debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
(2) For section [# Lockdown missing pieces].
Only 2 patches are kept for the necessary function of kernel modules
signing.
Signed-off-by: Li Zhou <li.zhou@windriver.com>
---
debian/patches/series | 10 ----------
1 file changed, 10 deletions(-)
diff --git a/debian/patches/series b/debian/patches/series
index 6b96a60..d91da94 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -2,15 +2,7 @@
debian/version.patch
debian/uname-version-timestamp.patch
debian/kernelvariables.patch
-debian/ia64-hardcode-arch-script-output.patch
-debian/mips-disable-werror.patch
-debian/mips-boston-disable-its.patch
-debian/mips-ieee754-relaxed.patch
-debian/arch-sh4-fix-uimage-build.patch
debian/tools-perf-version.patch
-debian/tools-perf-install.patch
-debian/wireless-add-debian-wireless-regdb-certificates.patch
-debian/documentation-drop-sphinx-version-check.patch
debian/perf-traceevent-support-asciidoctor-for-documentatio.patch
debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
@@ -19,5 +11,3 @@ debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
# Lockdown missing pieces
features/all/lockdown/efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch
features/all/lockdown/efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch
-features/all/lockdown/mtd-disable-slram-and-phram-when-locked-down.patch
-features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch
--
2.17.1

View File

@@ -11,3 +11,4 @@
0011-Debian-Hardcode-net.naming-scheme-in-CONFIG_CMDLINE.patch
0012-Debian-update-5.10-Kernel-to-5.10.112.patch
0013-kernel-std-fix-proc-version-content.patch
0014-kernel-std-clean-patches-from-debian-release.patch