[ciq-6.18.y-next] Multiple patches tested (40 commits)

.container_build_image

@@ -0,0 +1 @@
+rocky-9-kernel-builder

.github/workflows/build-check_aarch64-64k-debug.yml

@@ -0,0 +1,37 @@
+name: aarch64-64k-debug CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build-arm64
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-aarch64-64k-debug.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_aarch64-64k.yml

@@ -0,0 +1,37 @@
+name: aarch64-64k CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build-arm64
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-aarch64-64k.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_aarch64-debug.yml

@@ -0,0 +1,37 @@
+name: aarch64-debug CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build-arm64
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-aarch64-debug.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_aarch64.yml

@@ -0,0 +1,37 @@
+name: aarch64 CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build-arm64
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-aarch64.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_x86_64-debug.yml

@@ -0,0 +1,37 @@
+name: x86_64-debug CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-x86_64-debug.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_x86_64.yml

@@ -0,0 +1,37 @@
+name: x86_64 CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-x86_64.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/kernel-build-and-test-multiarch-trigger.yml

@@ -0,0 +1,14 @@
+name: Trigger Automated kernel build and test (multi-arch)
+
+on:
+  push:
+    branches:
+      - '*_ciq-6.18.y'
+      - '*_ciq-6.18.y-next'
+
+jobs:
+  kernelCI:
+    uses: ctrliq/kernel-src-tree/.github/workflows/kernel-build-and-test-multiarch-trigger.yml@main
+    with:
+      skip_kabi: true
+    secrets: inherit

arch/x86/kernel/setup.c

@@ -997,6 +997,8 @@ void __init setup_arch(char **cmdline_p)
 	if (efi_enabled(EFI_BOOT))
 		efi_init();
 
+	efi_set_secure_boot(boot_params.secure_boot);
+
 	reserve_ibft_region();
 	x86_init.resources.dmi_setup();
 
@@ -1160,20 +1162,6 @@ void __init setup_arch(char **cmdline_p)
 	/* Allocate bigger log buffer */
 	setup_log_buf(1);
 
-	if (efi_enabled(EFI_BOOT)) {
-		switch (boot_params.secure_boot) {
-		case efi_secureboot_mode_disabled:
-			pr_info("Secure boot disabled\n");
-			break;
-		case efi_secureboot_mode_enabled:
-			pr_info("Secure boot enabled\n");
-			break;
-		default:
-			pr_info("Secure boot could not be determined\n");
-			break;
-		}
-	}
-
 	reserve_initrd();
 
 	acpi_table_upgrade();

ciq/SOURCES/README.rst

@@ -0,0 +1,9 @@
+=====================
+CIQ Kernel Source Tree
+=====================
+
+The kernel spec and supporting sources are maintained under ``ciq/`` in the
+source tree rather than in a separate dist-git repository.
+
+Build artifacts (tarballs, SRPMs) are generated using the scripts in
+``ciq/SOURCES/``. See ``generate_tarball.sh`` to create the source tarball.

ciq/SOURCES/bundle_bindgen.sh

@@ -0,0 +1,39 @@
+#!/bin/sh
+
+# Bundle the bindgen-cli source code to be included in the kernel build.
+# https://crates.io/crates/bindgen-cli
+#
+# The bindgen tool, required to build Rust code in the Linux kernel, is
+# currently only packaged in Fedora/ELN. In order to build CLK kernels
+# on Rocky Linux we need to build bindgen as part of the kernel build.
+
+SOURCES=$1
+
+BINDGEN_CLI=bindgen-cli
+BINDGEN_CLI_VERSION="0.71.1"
+BINDGEN_CLI_CRATE=bindgen-cli.crate
+CRATESIO_API_ENDPOINT=https://crates.io/api/v1/crates/bindgen-cli/${BINDGEN_CLI_VERSION}/download
+
+curl -sL $CRATESIO_API_ENDPOINT -o $SOURCES/$BINDGEN_CLI_CRATE
+tar -xf $SOURCES/$BINDGEN_CLI_CRATE -C $SOURCES
+mv $SOURCES/$BINDGEN_CLI-$BINDGEN_CLI_VERSION $SOURCES/$BINDGEN_CLI
+
+# vendor bindgen-cli
+cd $SOURCES/$BINDGEN_CLI
+mkdir .cargo
+cat > .cargo/config.toml <<EOF
+[source.crates-io]
+replace-with = "vendored-sources"
+
+[source.vendored-sources]
+directory = "vendor"
+EOF
+
+cargo vendor --locked --quiet
+
+cd ..
+tar czf $BINDGEN_CLI.tar.gz $BINDGEN_CLI
+
+# clean up
+rm -f $SOURCES/$BINDGEN_CLI_CRATE
+rm -rf $SOURCES/$BINDGEN_CLI

ciq/SOURCES/ciq_sb_kernel.crt

@@ -0,0 +1,35 @@
+-----BEGIN CERTIFICATE-----
+MIIGKTCCBBGgAwIBAgIQBuHLnP2DI5tJ8WThx9fEQDANBgkqhkiG9w0BAQwFADBo
+MQswCQYDVQQGEwJVUzEPMA0GA1UECBMGTmV2YWRhMQ0wCwYDVQQHEwRSZW5vMRYw
+FAYDVQQKEw1DdHJsIElRLCBJbmMuMSEwHwYDVQQDExhDdHJsIElRLCBJbmMuIElz
+c3VpbmcgQ0EwHhcNMjMwODIxMjAxNzEyWhcNMjgwODE5MjAxNzEyWjBMMQswCQYD
+VQQGEwJVUzEPMA0GA1UECBMGTmV2YWRhMRUwEwYDVQQKEwxDVFJMIElRLCBJTkMx
+FTATBgNVBAMTDENUUkwgSVEsIElOQzCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCC
+AYoCggGBAKi3bPwtjk01ULYuyZYjnooCshJv+e0L+4i01zu7dXYf/Z9D1d+DoD30
+o8ZgOJ9Xn6kl/0sKNKxETbwGOt1j3uZcJ1okcCMZEUTtBAfbbZ/R2aPjZRGiZVkI
+shOKINMEWMumbJAyUJfBLt8DlojGX/gw1/53eTgZ8mcuPaRvDdrwm9u4OTQVEAN0
+JlTft9JFzRiqkTAdcaIjLtKJ9zmTTX5KAre61rNtLs8ihWUR+yY/RYaVpY/rZy6P
+dPfkkbo1nf6Ck5F4e+NY/hEudeAjjNC0dCTOWB+2CKTAqJyJQXTuyGSRubZre6Dd
+aYNQHQc1yegHBqk0z9XMXspSLpMxcwEJqe8KoX6zvO39YK8yJoU1z0vAI7Y4Ls7e
+ILoykYaMCLiZjqKT01nOPIz7ml7f9uXfogPMmyu29j6xV2pvJ92/8fLa3dX+RN1c
+muS3f/Yyed6Qj4GHPUxnlwY5yjDtzNs95zOdlnuStjRMFWBi1Kn9wfux1O+LCf6c
+P0HlDQ32YQIDAQABo4IBaTCCAWUwHwYDVR0jBBgwFoAUkyKuYIju74ifnwWqc0Kd
+LwiHqc0wDgYDVR0PAQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYI
+KwYBBQUHAwMwSQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybC5lbnRlcnByaXNl
+LnNlY3RpZ28uY29tL0N0cmxJUUluY0lzc3VpbmdDQS5jcmwwgYQGCCsGAQUFBwEB
+BHgwdjBEBggrBgEFBQcwAoY4aHR0cDovL2NydC5lbnRlcnByaXNlLnNlY3RpZ28u
+Y29tL0N0cmxJUUluY0lzc3VpbmdDQS5jcnQwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
+Y3NwLmVudGVycHJpc2Uuc2VjdGlnby5jb20wHgYDVR0RBBcwFYETaXRfc2VjdXJp
+dHlAY2lxLmNvbTAdBgNVHQ4EFgQUgOMDv07QE1FaAYKmTq+zh/BYqi4wDQYJKoZI
+hvcNAQEMBQADggIBADL5fpy9bWjc2E+VEj8+Rj93qS6/duMxbA3hhOX9bbG8jCOR
+Hy9Pi6tDzi4zVkix/evmk2vdasEbeIBJZ4lNkko5CHkRut85JGjuPTkmb9TSG0Fw
+5GgfhVcDP70Jx7hH/9wFcdZABRW5yTRQudKCLOpC5IySMDwNNJWP1s4iex+i5YDD
+6rhAP75w8alQMyUy0gScLkpbk7Vdr3Bd9Dkd2XkRht5PzZFLN+J+RtfqbKPlAYi5
+6ccrHVilSoJslG4+Kz2TPyEQ02atsuvgQMKg3eNnFxnWV5sijR2GILM5DKlmKUf5
+WGhaH4Ky/SNGqEBf6gXBIkHMGivHaGygfJK2Lq+X5L2UOe4nTEBDqo5Jnd1b1rBa
+odASb91BtwPE7hzsBF9iPIaDevxlS4WW7WMJCCnAwg4zSnBe48NtqyPDrZfRQwbY
+V4DdrP77ZnG76D4ih6E6EHP9V93T2noSAnz1pvNt/z07MGWTYqUEnstwttHhTgDo
+i6n6d1U5c3uHQuS0QsvLJoRiVhlna1b1RQXJQkpMm7eXYyXD2A72qffrQ5YK/+yB
+WLHvPk+wawC0AVtnUHElASb6NSCBNO5Xz7vA4TfUjvS2yOgAbfAzA2uhc8yKW2o8
+lodjo+qZvFfW9SZ0RPwfCiCzpbkfMSdg/+DiD/OvS80OHvG1wG2unGJleGe2
+-----END CERTIFICATE-----

ciq/SOURCES/ciq_sb_kernel_aarch64.crt

@@ -0,0 +1,36 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----