301 Commits

Author SHA1 Message Date
Noah Wager 25937e80bf UBUNTU: [Packaging] Initialize noble:linux-nvidia-tegra-pvw
Ignore: yes
Signed-off-by: Noah Wager <noah.wager@canonical.com>
2025-07-15 17:21:59 -07:00
Noah Wager 87b62a088a UBUNTU: [Packaging] Initialize noble:linux-nvidia-tegra
Based on Ubuntu-realtime-6.8.1-1002.2

Ignore: yes
Signed-off-by: Noah Wager <noah.wager@canonical.com>
2025-07-09 14:46:01 -07:00
Joseph Salisbury 46cec7c36d UBUNTU: [Packaging] prepare packaging for linux-realtime
Initial creation of real-time kernel for Noble.

Ignore: yes
Signed-off-by: Joseph Salisbury <joseph.salisbury@canonical.com>
2025-06-25 11:05:57 -04:00
Mehmet Basaran 71075d441a UBUNTU: [Packaging] update annotations scripts
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Mehmet Basaran <mehmet.basaran@canonical.com>
2025-06-15 10:34:06 +03:00
Andy Whitcroft 892e5992ab UBUNTU: [Config] Prepare for Canonical Livepatch key rotation
BugLink: https://bugs.launchpad.net/bugs/2111244

Add the new Canonical Livepatch 2025 key ready for the required
key rotation.

Signed-off-by: Andy Whitcroft<apw@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
2025-05-19 16:19:02 +02:00
Stefan Bader 91137688a1 UBUNTU: [Packaging] update annotations scripts
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
2025-05-19 11:20:39 +02:00
Juerg Haefliger 94f464fdee UBUNTU: [Packaging] linux-tools: Fall back to old python perf path
BugLink: https://bugs.launchpad.net/bugs/2089411

linux-tools from older kernels without these patches provide the
perf python library in a different/broken path, so we have to look
there as well. Sigh.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Acked-by: Kevin Becker <kevin.becker@canonical.com>
Acked-by: Agathe Porte <agathe.porte@canonical.com>
Signed-off-by: Koichiro Den <koichiro.den@canonical.com>
2025-02-14 15:49:46 +03:00
Juerg Haefliger 1ecc312721 UBUNTU: [Packaging] linux-tools: Fix python perf library packaging
BugLink: https://bugs.launchpad.net/bugs/2089411

This currently doesn't work for derivatives because there's a level
of indirection missing and the top-level wrapper is looking in the
wrong place for the .so library.

It should be like this:

foo -> linux-tools/<abi>-<flavor>/foo -> <source>-tools-<abi>/foo

The previous commit took care of the missing indirection. This commit
fixes the wrapper to look in the correct directory for the library.

While at it, run it through black and make the wrapper and the .so
library non-executable.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Acked-by: Agathe Porte <agathe.porte@canonical.com>
Signed-off-by: Timo Aaltonen <timo.aaltonen@canonical.com>
(backported from commit e3092e36b13ccf423258b2232cff0c4d5841d426 plucky:linux)
[juergh: Changed $(DEB_SOURCE) -> $(src_pkg_name)]
Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Acked-by: Kevin Becker <kevin.becker@canonical.com>
Acked-by: Agathe Porte <agathe.porte@canonical.com>
Signed-off-by: Koichiro Den <koichiro.den@canonical.com>
2025-02-14 15:49:46 +03:00
Juerg Haefliger 6d1e050a5f UBUNTU: [Packaging] linux-tools: Add missing python perf symlink
BugLink: https://bugs.launchpad.net/bugs/2089411

The python perf library needs a symlink from the unflavored to the
flavored package directory, just like any of the other tools binaries.

However, it's somewhat special in that the link target name cannot be
determined easily and reliably (python-version- and host-architecture-
specific). To work around that, link the subdirectory that contains it.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Acked-by: Kevin Becker <kevin.becker@canonical.com>
Acked-by: Agathe Porte <agathe.porte@canonical.com>
Signed-off-by: Koichiro Den <koichiro.den@canonical.com>
2025-02-14 15:49:46 +03:00
Luca Boccassi 3a8a3b4039 UBUNTU: [Packaging] do not attempt to generate BTF header on armhf
BugLink: https://bugs.launchpad.net/bugs/2050083

armhf does not have working BTF for now, so create an empty header file
like Debian does for now, to be dropped once that issue is fixed.

Follow-up for aefbe1e1a9a1d3ed84bceac7e9739a92e1345f58

Signed-off-by: Luca Boccassi <bluca@debian.org>

[ add do_tools_bpftool_stub to avoid hardcoding the arch in rules ]
Signed-off-by: Timo Aaltonen <timo.aaltonen@canonical.com>
(cherry-picked from commit 0c32444afa9bd036e66cbc8c05dbd8df8388bc6f oracular:linux)
Signed-off-by: Mehmet Basaran <mehmet.basaran@canonical.com>
2025-01-17 14:47:18 +03:00
Gauthier Jolly 7baf33c435 UBUNTU: [Packaging] disable hv-kvp-daemon if needed
BugLink: https://bugs.launchpad.net/bugs/2091744

The daemon reads from this vmbus, if it is not present, it will just
exit with an error. Adding this line to the service file will prevent
systemd from trying to start the daemon if the device is not present.

(cherry picked from commit 7da99ea3a1a745f6fd0c8632ef89573437888af6 jammy:linux)
Signed-off-by: John Cabaj <john.cabaj@canonical.com>
Acked-by: Magali Lemes <magali.lemes@canonical.com>
Acked-by: Tim Whisonant <tim.whisonant@canonical.com>
Signed-off-by: Mehmet Basaran <mehmet.basaran@canonical.com>
2025-01-17 14:45:05 +03:00
Juerg Haefliger 366c11c324 UBUNTU: [Packaging] Add list of used source files to buildinfo package
BugLink: https://bugs.launchpad.net/bugs/2086606

For CVE triaging, it's helpful to have a list of all the kernel source
files used for a particular build. Generate the list and add it to
the buildinfo package.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Acked-by: Agathe Porte <agathe.porte@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
2025-01-17 14:44:02 +03:00
Luca Boccassi ec19eb348a UBUNTU: [Packaging] add linux-bpf-dev package
BugLink: https://bugs.launchpad.net/bugs/2050083

Add a new binary linux-bpf-dev package that ships a generated vmlinux.h
header. This can be used by packages building CO-RE BPF programs instead
of generating it at build time based on the kernel running on the package
build system, which might or might not match the kernel that is actually
shipped. It ensures that a matching header can always be used.

Matches changes in Debian, including the package name and header installation
location, so that we do not have to ifdef:

https://salsa.debian.org/kernel-team/linux/-/commit/f52d006f3915ac4358dc8c98aa417477ebee026e

This is already used by systemd to build various CO-RE programs, and
right now on Ubuntu due to the lack of this package the header is
generated from sysfs in the build system where the systemd packages are
built.

Signed-off-by: Luca Boccassi <bluca@debian.org>
Signed-off-by: Timo Aaltonen <timo.aaltonen@canonical.com>
(cherry-picked from commit 6032cf45d201ec539a8efa493989366bde75fd96 oracular:linux)
Signed-off-by: Luca Boccassi <bluca@debian.org>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Agathe Porte <agathe.porte@canonical.com>
Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>
2025-01-17 14:42:59 +03:00
Manuel Diewald 2e00a6fe44 UBUNTU: [Packaging] resync git-ubuntu-log
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Manuel Diewald <manuel.diewald@canonical.com>
2024-11-30 19:17:26 +01:00
Bethany Jamison bd9b792a77 UBUNTU: [Packaging] perf: reenable libtraceevent
BugLink: https://bugs.launchpad.net/bugs/2076190

Reenable libtraceevent in perf to revert (92550b568d) due to
LP: #2076190

The control file actually still contains libtraceevent-dev which
presumably was the build dependency that was attempted to avoid.
Possibly also libtracefs-dev but not sure here.

Signed-off-by: Bethany Jamison <bethany.jamison@canonical.com>
Acked-by: Thibault Ferrante <thibault.ferrante@canonical.com>
Acked-by: Mehmet Basaran <mehmet.basaran@canonical.com>
[smb: Adjusted BugLink and patch as it would not apply]
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
2024-09-27 11:41:20 +02:00
Noah Wager 7415dcccfe UBUNTU: [Packaging] Check do_lib_rust before linking Rust lib files
BugLink: https://bugs.launchpad.net/bugs/2072592

Packages with falsy do_lib_rust still try to symlink the lib-rust
package even though do_lib_rust prevents it from being generated. This
results in a bad symlink in the headers (rust -> ../linux-lib-rust). It
should check do_lib_rust before trying to link that directory.

Signed-off-by: Noah Wager <noah.wager@canonical.com>
Acked-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Acked-by: Agathe Porte <agathe.porte@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>
2024-08-13 12:11:38 +02:00
Stefan Bader dbdbb61efc UBUNTU: [DEP-8] Add missing fakeroot dependency
BugLink: https://bugs.launchpad.net/bugs/2070042

Since noble the current dependencies for the ubuntu-regression-suite no
longer cause fakeroot to be available and test setup breaks. Explicitly
add fakeroot to the test dependencies.

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Paolo Pisati <paolo.pisati@canonical.com>
Acked-by: Manuel Diewald <manuel.diewald@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
2024-07-05 10:12:37 +02:00
Magali Lemes d3e18e2b69 UBUNTU: [Packaging] Remove fips-checks script
BugLink: https://bugs.launchpad.net/bugs/2055083

This script is now part of `cranky` and there is no need for it to live
in debian/ anymore, so remove it.

Signed-off-by: Magali Lemes <magali.lemes@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-05-01 15:55:10 +02:00
Andrea Righi fa1cbadd64 UBUNTU: [Packaging] add Real-time Linux Analysis tool (rtla) to linux-tools
BugLink: https://bugs.launchpad.net/bugs/2059080

Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-05-01 15:54:19 +02:00
Andrea Righi 51c8aee421 UBUNTU: [Packaging] provide a wrapper module for python-perf
BugLink: https://bugs.launchpad.net/bugs/2051560

Provide a virtual python module wrapper to load the actual versioned
python perf module, based on the running kernel version.

Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-05-01 15:54:19 +02:00
Andrea Righi 48357b9b6d UBUNTU: [Packaging] enable perf python module
BugLink: https://bugs.launchpad.net/bugs/2051560

The perf python module is required by some tools (e.g., tuned) and we
are not currently providing it.

Enable it to be able to support tools that require this module.

Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-05-01 15:54:19 +02:00
Roxana Nicolescu 782e3646d1 UBUNTU: [Packaging] update annotations scripts
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>
2024-05-01 15:52:58 +02:00
Andrea Righi 63060a7e2a UBUNTU: [Packaging] re-introduce linux-doc as an empty package
In commit fd8ee93c3a38 ("UBUNTU: [Packaging] drop useless linux-doc") we
decided to remove the linux-doc package, saving in this way a lot of
space required to produce the documentation content (that can be easily
found online).

However, this change broke some user-space packages that are still
requiring linux-doc as a dependency.

Therefore, re-introduce an empty linux-doc package to prevent the
breakgage and at the same time avoid to re-introduce the expensive build
dependencies.

Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
[esmil: handle linux-doc like the linux-source package]
Signed-off-by: Emil Renner Berthing <emil.renner.berthing@canonical.com>
2024-04-04 23:49:02 +02:00
Paolo Pisati 81914dd14e Revert "UBUNTU: [Packaging] Add debian/control sanity check"
This reverts commit 8482350050.

Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-04-04 23:49:02 +02:00
Masahiro Yamada 056f4386aa UBUNTU: [Packaging] remove debian/scripts/misc/arch-has-odm-enabled.sh
On Ubuntu, /bin/sh is a symlink to /bin/dash by default.

While this is a rare use case, when /bin/sh is a symlink to /bin/bash,
the annotation check fails due to a mismatch of CONFIG_UBUNTU_ODM_DRIVERS.

debian/scripts/misc/arch-has-odm-enabled.sh always fails with bash.

You can see it if you directly execute it.

[with dash]

  $ dash debian/scripts/misc/arch-has-odm-enabled.sh amd64
  cat: debian/scripts/misc/../../../debian.master/rules.d/hooks.mk: No such file or directory
  $ echo $?
  0

[with bash]

  $ bash debian/scripts/misc/arch-has-odm-enabled.sh amd64
  cat: debian/scripts/misc/../../../debian.master/rules.d/hooks.mk: No such file or directory
  debian/scripts/misc/arch-has-odm-enabled.sh: line 26: return: can only `return' from a function or sourced script
  $ echo $?
  2

Bash provides stricter checks, hence the 'return' statement outside
a function leads to an error.

While it is trivial to fix, I wonder if we need this script in the
first place. Its purpose is to make CONFIG_UBUNTU_ODM_DRIVERS a
user-unconfigurable option.

Given debian.*/config/annotations specifying the CONFIG set for each
arch/flavour, why not handle CONFIG_UBUNTU_ODM_DRIVERS just like
other normal CONFIG options? Users are still allow to toggle it from
menuconfig etc., but I do not see a significant issue, as any trouble
comes to users' responsibility when they change CONFIG options by
themselves.

Signed-off-by: Masahiro Yamada <masahiro.yamada@canonical.com>
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-04-04 23:49:01 +02:00
Paolo Pisati 261e2c579d Revert "UBUNTU: [Packaging] Transition laptop-23.10 to generic"
This reverts commit cf2a72258261f649b13deae589ccef59ce0dcc23.

Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:29 +01:00
Masahiro Yamada 8be287f598 UBUNTU: [packaging] remove debian/stamps/keep-dir
Ubuntu kernel touches a stamp file in debian/stamps/ without creating
the directory.

Since git cannot track an empty directory, debian/stamps/keep-dir was
added to keep the debian/stamps/ directory.

Import the 'stamp' macro from Debian kernel to create the stamps
directory.

[1]: https://salsa.debian.org/kernel-team/linux/-/blob/debian/6.5.10-1/debian/rules.real#L40

Signed-off-by: Masahiro Yamada <masahiro.yamada@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:29 +01:00
Masahiro Yamada dcb2aa91c9 UBUNTU: [packaging] do not include debian/ directory in a binary package
Both Debian kernel and Ubuntu kernel provide a linux-source package,
but a difference is that Debian's one does not include the debian/
directory, while Ubuntu's one includes debian/ and debian.*/ directories.

Including a debian/ directory in a binary package is odd.

If you want to rebuild the kernel in the Ubuntu way, you can get the
source package by 'apt-get source'. It is not what the linux-source
package should offer.

Signed-off-by: Masahiro Yamada <masahiro.yamada@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:28 +01:00
Juerg Haefliger 77d2bcae15 UBUNTU: [Packaging] rules: Put usbip manpages in the correct directory
BugLink: https://bugs.launchpad.net/bugs/2054094

*.8 manpages need to go into man8/.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:27 +01:00
Juerg Haefliger 8482350050 UBUNTU: [Packaging] Add debian/control sanity check
BugLink: https://bugs.launchpad.net.bugs/2043994

Only the main linux source packages should produce linux-source-PKGVER
binary packages. Add a simple check that fails if debian/control looks
fishy.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:27 +01:00
Juerg Haefliger bb79fba482 UBUNTU: [Packaging] Transition laptop-23.10 to generic
The linux-laptop kernel no longer serves any purpose and is removed in
Noble. The generic kernel now supports the ARM X13s laptop.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:27 +01:00
Juerg Haefliger ab8844993c UBUNTU: [Packaging] Build linux-source package only for the main kernel
BugLink: https://bugs.launchpad.net/bugs/2052439

The linux-source package only makes sense for the main linux kernel.
Building it for derivatives is useless and just confuses users. By
default it is enabled globally in 0-common-vars.mk so make sure it is
turned off afterwards for non-linux source packages.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:27 +01:00
Juerg Haefliger c2451215f5 UBUNTU: [Packaging] Move linux-source package stub to debian/control.d
BugLink: https://bugs.launchpad.net/bugs/2052439

The linux-source-<version> package may only be built for the main linux
source package. Similar to linux-libc-dev, move the packaging stub to
debian/control.d and only include it if the source package name is
indeed 'linux'.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:27 +01:00
Juerg Haefliger 75135fd286 UBUNTU: [Packaging] Build indep tools packages only for the main kernel
BugLink: https://bugs.launchpad.net/bugs/2048183

The indep tools packages provide symlinks and other generic files and
as such may only be built for the main source package. Ensure that
by turning on the package build only for the main linux source package.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:27 +01:00
Juerg Haefliger a2e24f00c1 UBUNTU: [Packaging] Move indep tools package stubs to debian/control.d
BugLink: https://bugs.launchpad.net/bugs/2048183

The following packages may only be built for the main linux source
package. Similar to linux-libc-dev, move the packaging stubs to
debian/control.d and only include them if the source package name is
indeed 'linux':
  - linux-tools-common
  - linux-cloud-tools-common
  - linux-host-tools

Also change the package names in the rules to linux-* to further make
sure that we don't accidentially build linux-<variant>-* packages should
a derivative's control file contain incorrect package stanzas.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:26 +01:00
Paolo Pisati c71e9eab76 UBUNTU: [Packaging] riscv64: enable linux-libc-dev build
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:25 +01:00
Juerg Haefliger 781aec4c13 UBUNTU: [Packaging] Remove update-dkms-versions and move dkms-versions
Remove the update-dkms-versions script from the tree, it's replaced by
'cranky update-dkms-versions', move the dkms-versions file and fix all
references to the old location.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
2024-03-11 09:41:24 +01:00
Juerg Haefliger 59e862f342 UBUNTU: [Packaging] Remove do_full_source variable (fixup)
This was missed in the below commit, fix it.

Fixes: af3f324f1cb3 ("UBUNTU: [Packaging] Remove do_full_source variable")
Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
2024-03-11 09:41:24 +01:00
Dimitri John Ledkov 5f068dd3bc UBUNTU: [Packaging] Remove in-tree abi checks
linux-buildinfo packages are now externally compared by swm, with
results approving or rejecting updates based on the stable
tracker. Those checks also allow hints and overrides to accept
intentional changes.

Also these are done on the correct pair-wise comparisons, especially
when two streams are being cranked.

The above eliminates the need to identify previous build abi,
download, extract it, vendor it in, and assert it at build time.

Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
2024-03-11 09:41:23 +01:00
Paolo Pisati 9ba024da19 UBUNTU: debian/dkms-versions -- temporarily disable v4l2loopback
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:21 +01:00
Paolo Pisati 35dbc104d3 UBUNTU: debian/dkms-versions -- temporarily disable ipu6 and isvsc dkms
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:21 +01:00
Paolo Pisati 79b0d6bafa UBUNTU: debian/dkms-versions -- temporarily disable zfs dkms
Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>
2024-03-11 09:41:21 +01:00
Andrea Righi 699c70c42e UBUNTU: [Packaging] resync getabis
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-03-11 09:41:20 +01:00
Andrea Righi 275ec10505 UBUNTU: [Packaging] temporarily disable riscv64 builds
Disable riscv64 build for now, since the ABI files are completely
removed every time we start a new kernel release.

Moreover, building riscv64 in generic consistently increase the overall
build time of the packages (3 days or more), slowing down the testing
process of the new published kernels.

Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-03-11 09:41:20 +01:00
Dimitri John Ledkov bd433ee34b UBUNTU: [Packaging] Remove all custom retpoline-extract code
BugLink: https://bugs.launchpad.net/bugs/2046440

Now that retpoline & SLS mitigration checks are enforced during build
via objtool patch, drop all custom retpoline packaging, abi files, and
checks.

Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-03-11 09:41:19 +01:00
Andrea Righi cf3dc60ae8 UBUNTU: debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-03-11 09:41:17 +01:00
Marcelo Henrique Cerri ac9b3fe07b UBUNTU: [Packaging] Add a new fips-checks script
BugLink: https://bugs.launchpad.net/bugs/1945989

Add a new script responsible for checking if any FIPS relevant commit
was added since the last version. If a new change is found, a
corresponding entry should exist in the justifications file otherwise
the check will fail.

The justifications file is located at "${DEBIAN}/fips.justifications"
and should follow the following format for each commit justification:

<commit short message>

  <commit justification>

Signed-off-by: Marcelo Henrique Cerri <marcelo.cerri@canonical.com>
Acked-by: Tim Gardner <tim.gardner@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Kelsey Skunberg <kelsey.skunberg@canonical.com>
(ported from commit 68d02506ae6b236d7df155cdcaa64456e9153d5e focal)
[magalilemes: added arch/arm64/crypto and lib/crypto/{sha1,aes}.c to
crypto_files; changed the way tag_prefix is set]
Signed-off-by: Magali Lemes <magali.lemes@canonical.com>
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-03-11 09:41:11 +01:00
Andrea Righi a5f37d1d4f UBUNTU: debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-03-11 09:41:10 +01:00
Roxana Nicolescu 6c70187239 UBUNTU: [Debian] autoreconstruct - Do not generate chmod -x for deleted files
BugLink: https://bugs.launchpad.net/bugs/2045562

Debian source format 1.0 cannot remove files, create symlinks and change
permission in the .diff.gz tarball. Therefore any changes in these 3
categories cannot be represented without any tricks. To solve this,
the `reconstruct` script is used every time we build the source package.
The script is generated by `gen-auto-reconstruct` script by the `cranky
close`. It checks if there has been any changes in the 3 categories
mentioned above between the upstream version (i.e v6.5) and the current one.
The problem with the script is that in case a file A was removed since the
upstream version was released, the `reconstruct` script will contains
these commands in this exact order:
        rm -f A
        chmod -x A
The second command will fail because file A does not exist anymore.
This is solved by generating the `chmod +/-x` commands before `rm`.
Which results in:
        chmod -x A
        rm -f A
But because the reconstruct script is used during `clean` rule which is
triggered pretty much during every cranky step which is run in the
source repo, the first command will always file because file is not
present anymore in the tree. To solve this, any `chmod` change is added
only if the file has not been deleted. Therefore if file A has been
deleted, the `reconstruct` script will contain only this:
        rm -f A

Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>
Acked-by: Manuel Diewald <manuel.diewald@canonical.com>
Acked-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-03-11 09:41:09 +01:00
Juerg Haefliger c53bae33f9 UBUNTU: [Packaging] rules: Remove unused dkms make variables
The make variables nvidia_desktop_series and nvidia_server_series are no longer
used since [1], so remove them.

[1] fa6c8ea55822 ("UBUNTU: [Debian] remove nvidia dkms build support")

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Acked-by: Andrea Righi <andrea.righi@canonical.com>
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
2024-03-11 09:41:09 +01:00