[Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel
Brent.Rowsell at windriver.com
Wed Nov 21 17:21:49 UTC 2018
This is a big change. I suggest adding it to the next TSC call.
From: Saul Wold [mailto:sgw at linux.intel.com]
Sent: Wednesday, November 21, 2018 12:11 PM
To: Victor Rodriguez <vm.rod25 at gmail.com>; Rowsell, Brent <Brent.Rowsell at windriver.com>
Cc: starlingx-discuss at lists.starlingx.io
Subject: Re: [Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel
There are a couple of things not mentioned that I have heard talked about on both sides of this discussion.
My understanding is that the kernel version is based on the RHEL/CentOS version as it's a known tested combination at the Distro level, even though there are patches to the kernel and user-space.
On the other side, the 3.10 RHEL kernel (with all the RHEL patches) may not address all the known CVEs, so there is a concern about overall security. Intel is looking at the newer kernel and porting the StarlingX patches (as needed) for the Clear and Multi-OS parts of the project.
The overall question becomes can StarlingX take the 4.19LTS kernel as a newer base kernel for the project, it reduces the overall patch load and address some security issues.
I believe you understand these objectives.
On 11/20/18 6:42 PM, Victor Rodriguez wrote:
> On Tue, Nov 20, 2018 at 8:25 PM Rowsell, Brent
> <Brent.Rowsell at windriver.com> wrote:
>> There are two kernels, standard and rt.
>> Both are centos 7.5 based with a small set of patches applied on top along with modified kernel config options.
> Thanks for the clarification
>> Not quite understanding what you are asking. Are you proposing to replace the kernel in the starlingX project or just in your local environment ?
> For my local environment. I would not like to use CentOS kernel 3.10
> but instead LTS 4.19
>> What is the objective here ?
> To have a more stable and secure kernel on my production system, there
> are security fixes that would like to have on my kernel that LTS
> I know RHEL/CentOS is based on kernel 3.10 but other OSs are ot like
>> -----Original Message-----
>> From: Victor Rodriguez [mailto:vm.rod25 at gmail.com]
>> Sent: Tuesday, November 20, 2018 9:20 PM
>> To: starlingx-discuss at lists.starlingx.io
>> Subject: [Starlingx-discuss] Migrate Starling X kernel patches to LTS
>> Hi team
>> I am a new user/developer of starling X and after searching into the kernel metapatches at:
>> Some questions came to me :
>> As far as I can see we are under kernel 3.10 from RHEL RT fork right?
>> There are some ( actually many ) security and functional changes that
>> exist in the LTS kernel ( like 4.19 as an example), because of that I
>> would like to use a more stable kernel into my starling x system
>> Is there any specific reason why use that specific for from RHEL?
>> What does starling X think about the migration of these patches ( some of them are already applied into the latest versions of Linux Kernel)?
>> What kind of test should I perform to check that my vanilla kernel + STX patches work as expected?
>> All feedback is more than welcome
>> BTW thanks to Mario and Saul for the help on understand more these
>> Victor Rodriguez
>> Starlingx-discuss mailing list
>> Starlingx-discuss at lists.starlingx.io
> Starlingx-discuss mailing list
> Starlingx-discuss at lists.starlingx.io
More information about the Starlingx-discuss