[PR PATCH] linux5.10: enable fsverity on x86_64

[PR PATCH] linux5.10: enable fsverity on x86_64

[ailiop-git]

[-- Attachment #1: Type: text/plain, Size: 1606 bytes --]

There is a new pull request by ailiop-git against master on the void-packages repository

https://github.com/ailiop-git/void-packages linux5.10
https://github.com/void-linux/void-packages/pull/28925

linux5.10: enable fsverity on x86_64
<!-- Mark items with [x] where applicable -->

#### General
- [ ] This is a new package and it conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements)

#### Have the results of the proposed changes been tested?
- [ ] I use the packages affected by the proposed changes on a regular basis and confirm this PR works for me
- [ ] I generally don't use the affected packages but briefly tested this PR

<!--
If GitHub CI cannot be used to validate the build result (for example, if the
build is likely to take several hours), make sure to
[skip CI](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration).
When skipping CI, uncomment and fill out the following section.
Note: for builds that are likely to complete in less than 2 hours, it is not
acceptable to skip CI.
-->
<!-- 
#### Does it build and run successfully? 
(Please choose at least one native build and, if supported, at least one cross build. More are better.)
- [ ] I built this PR locally for my native architecture, (ARCH-LIBC)
- [ ] I built this PR locally for these architectures (if supported. mark crossbuilds):
  - [ ] aarch64-musl
  - [ ] armv7l
  - [ ] armv6l-musl
-->


A patch file from https://github.com/void-linux/void-packages/pull/28925.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-linux5.10-28925.patch --]
[-- Type: text/x-diff, Size: 1107 bytes --]

From 90bbbf9f8ef6ae1406d9af8f3a819fab3086e598 Mon Sep 17 00:00:00 2001
From: Anthony Iliopoulos <ailiop@altatus.com>
Date: Sat, 20 Feb 2021 16:04:59 +0100
Subject: [PATCH] linux5.10: enable fsverity on x86_64

---
 srcpkgs/linux5.10/files/x86_64-dotconfig | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/srcpkgs/linux5.10/files/x86_64-dotconfig b/srcpkgs/linux5.10/files/x86_64-dotconfig
index 5cfcbb3f348..9ea29850efc 100644
--- a/srcpkgs/linux5.10/files/x86_64-dotconfig
+++ b/srcpkgs/linux5.10/files/x86_64-dotconfig
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86_64 5.10.13 Kernel Configuration
+# Linux/x86_64 5.10.17 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 10.2.1 20201203"
 CONFIG_CC_IS_GCC=y
@@ -9061,7 +9061,9 @@ CONFIG_MANDATORY_FILE_LOCKING=y
 CONFIG_FS_ENCRYPTION=y
 CONFIG_FS_ENCRYPTION_ALGS=m
 CONFIG_FS_ENCRYPTION_INLINE_CRYPT=y
-# CONFIG_FS_VERITY is not set
+CONFIG_FS_VERITY=y
+# CONFIG_FS_VERITY_DEBUG is not set
+CONFIG_FS_VERITY_BUILTIN_SIGNATURES=y
 CONFIG_FSNOTIFY=y
 CONFIG_DNOTIFY=y
 CONFIG_INOTIFY_USER=y

Re: linux5.10: enable fsverity on x86_64

[ericonr]

[-- Attachment #1: Type: text/plain, Size: 158 bytes --]

New comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/pull/28925#issuecomment-782738817

Comment:
Why only x86_64? 

Re: linux5.10: enable fsverity on x86_64

[ailiop-git]

[-- Attachment #1: Type: text/plain, Size: 720 bytes --]

New comment by ailiop-git on void-packages repository

https://github.com/void-linux/void-packages/pull/28925#issuecomment-782741239

Comment:
> Why only x86_64?

This is the only arch I tested currently (although I do not expect any problems for the rest).

We're also missing dotconfigs for quite a few of the supported archs on v5.10, and if/when those are added I'm afraid that the intention of switching on the option will be lost anyway. I think ideally we need to consolidate kernel options that can be enabled across archs into a separate config file that can be merged with any target arch at build time.

So for the moment being, enabling on specific archs when requested (and tested) seemed reasonable.

Re: linux5.10: enable fsverity on x86_64

[github-actions]

[-- Attachment #1: Type: text/plain, Size: 305 bytes --]

New comment by github-actions[bot] on void-packages repository

https://github.com/void-linux/void-packages/pull/28925#issuecomment-1116868176

Comment:
Pull Requests become stale 90 days after last activity and are closed 14 days after that.  If this pull request is still relevant bump it or assign it.

Re: [PR PATCH] [Closed]: linux5.10: enable fsverity on x86_64

[github-actions]

[-- Attachment #1: Type: text/plain, Size: 1447 bytes --]

There's a closed pull request on the void-packages repository

linux5.10: enable fsverity on x86_64
https://github.com/void-linux/void-packages/pull/28925

Description:
<!-- Mark items with [x] where applicable -->

#### General
- [ ] This is a new package and it conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements)

#### Have the results of the proposed changes been tested?
- [ ] I use the packages affected by the proposed changes on a regular basis and confirm this PR works for me
- [ ] I generally don't use the affected packages but briefly tested this PR

<!--
If GitHub CI cannot be used to validate the build result (for example, if the
build is likely to take several hours), make sure to
[skip CI](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration).
When skipping CI, uncomment and fill out the following section.
Note: for builds that are likely to complete in less than 2 hours, it is not
acceptable to skip CI.
-->
<!-- 
#### Does it build and run successfully? 
(Please choose at least one native build and, if supported, at least one cross build. More are better.)
- [ ] I built this PR locally for my native architecture, (ARCH-LIBC)
- [ ] I built this PR locally for these architectures (if supported. mark crossbuilds):
  - [ ] aarch64-musl
  - [ ] armv7l
  - [ ] armv6l-musl
-->