Kernel bump #138

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

snir911 merged 12 commits into confidential-devhub:main from snir911:kernel-bump

Jan 7, 2026

Collaborator

snir911 commented Dec 17, 2025 •

edited

Loading

Issue reference: KATA-4538

snir911 force-pushed the kernel-bump branch 8 times, most recently from 90c2b72 to 5916ca5 Compare

December 24, 2025 10:59

snir911 force-pushed the kernel-bump branch from 5916ca5 to 2488c3a Compare

December 24, 2025 14:30

snir911 mentioned this pull request

local: install Nvidia driver & misc fixes #136

Draft

snir911 force-pushed the kernel-bump branch from 2488c3a to a2f3a60 Compare

December 30, 2025 09:21

Collaborator

esposem commented Jan 5, 2026

LGTM!

Collaborator

dbkreling commented Jan 5, 2026

LGTM. It seems all our failures in the Enterprise Contract are related to untrusted tasks (which we can track in another PR - perhaps a Mintmaker one)

dbkreling approved these changes

View reviewed changes

c3d reviewed

View reviewed changes

scripts/coco/podvm/podvm_maker.sh Show resolved Hide resolved

c3d reviewed

View reviewed changes

example_run.sh Outdated Show resolved Hide resolved

c3d reviewed

View reviewed changes

example_run.sh Outdated Show resolved Hide resolved

c3d reviewed

View reviewed changes

example_run.sh Show resolved Hide resolved

c3d reviewed

View reviewed changes

scripts/coco/podvm/podvm_maker.sh Show resolved Hide resolved

c3d reviewed

View reviewed changes

.tekton/build-dm-verity-image-debug.yaml Show resolved Hide resolved

c3d reviewed

View reviewed changes

task/build-dm-verity-image/0.1/build-dm-verity-image.yaml Show resolved Hide resolved

c3d reviewed

View reviewed changes

.tekton/build-dm-verity-image-debug.yaml Outdated Show resolved Hide resolved

c3d reviewed

View reviewed changes

task/build-dm-verity-image/0.1/build-dm-verity-image.yaml Outdated Show resolved Hide resolved

c3d reviewed

View reviewed changes

helpers/rhel10-dm-root.ks Show resolved Hide resolved

c3d reviewed

View reviewed changes

.tekton/build-dm-verity-image-debug.yaml Show resolved Hide resolved

c3d approved these changes

View reviewed changes

c3d left a comment

With a few suggested changes in spelling / grammar, this looks good to me.

snir911 force-pushed the kernel-bump branch from 3cabc07 to 110042b Compare

January 6, 2026 08:45

Collaborator Author

snir911 commented Jan 6, 2026

@c3d, thanks, I have addressed your comments

c3d commented Jan 6, 2026 •

edited

Loading

@c3d, thanks, I have addressed your comments

@snir911 Maybe you did not push something? I still see for example sbin in:

semanage fcontext -a -t bin_t /usr/bin/ip && restorecon -v /usr/sbin/ip

Collaborator Author

snir911 commented Jan 6, 2026

@c3d if not fixed, i commented on this

snir911 force-pushed the kernel-bump branch from 110042b to 7fa1760 Compare

January 6, 2026 14:14

snir911 added 12 commits

January 7, 2026 10:00


          local: verity: pick latest EFI file

1efbbdd

you need to make sure /boot/efi/EFI/redhat/BOOTX64.CSV points to
the right one


          konflux: verity: pick latest EFI file

2c24733

you need to make sure /boot/efi/EFI/redhat/BOOTX64.CSV points to
the right one


          helpers: make sure grub is removed correctly

0617baa

if grub2-tools-extra is missing the command will fail


          konflux: bump kernel version of the image

c466ba2


          debug: fix: don't append newline to image digest result

d96be07

This causes the release pipeline to be unable to figure out which digest
the sbom blob url is associated with.


          konflux: allow explicit registertion using subscription-manager

62e075b

for the disk modifications script


          konflux: bump base iso to RHEL 10.1

d1dc195

The rhel-10.1-x86_64-dvd.iso image
sha256sum: 5925e05c32d8324a72e146a29293d60707571817769de73df63eab8dbd6d3196
(stock kernel: 6.12.0-124.8.1.el10_1)


          konflux: adapt to the new Selinux equivalency rules of RHEL 10.1

715cc62


          local: allow explicit registertion using subscription-manager

c725bf7

by exporting ORG_ID & ACTIVATION_KEY for example run


          local: bump kernel version of the image (and ISO in use)

2e0da4c

KERNEL_VERSION 6.12.0-124.21.1.el10_1

To be used with RHEL 10.1 ISO:
rhel-10.1-x86_64-dvd.iso image
sha256sum: 5925e05c32d8324a72e146a29293d60707571817769de73df63eab8dbd6d3196
(stock kernel: 6.12.0-124.8.1.el10_1)


          local: adapt to the new Selinux equivalency rules of RHEL 10.1

fd0e99c


          local: update default payload to 1.11.1

snir911 force-pushed the kernel-bump branch from 7fa1760 to 2668273 Compare

January 7, 2026 08:01

snir911 merged commit a4c6e5c into confidential-devhub:main

7 checks passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet