[Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel

[Rowsell, Brent]

Saul,

This is a big change. I suggest adding it to the next TSC call. 


Brent 

-----Original Message-----
From: Saul Wold [mailto:sgw at linux.intel.com] 
Sent: Wednesday, November 21, 2018 12:11 PM
To: Victor Rodriguez <vm.rod25 at gmail.com>; Rowsell, Brent <Brent.Rowsell at windriver.com>
Cc: starlingx-discuss at lists.starlingx.io
Subject: Re: [Starlingx-discuss] Migrate Starling X kernel patches to LTS kernel

Victor, Brent:

There are a couple of things not mentioned that I have heard talked about on both sides of this discussion.

My understanding is that the kernel version is based on the RHEL/CentOS version as it's a known tested combination at the Distro level, even though there are patches to the kernel and user-space.

On the other side, the 3.10 RHEL kernel (with all the RHEL patches) may not address all the known CVEs, so there is a concern about overall security.  Intel is looking at the newer kernel and porting the StarlingX patches (as needed) for the Clear and Multi-OS parts of the project.

The overall question becomes can StarlingX take the 4.19LTS kernel as a newer base kernel for the project, it reduces the overall patch load and address some security issues.

I believe you understand these objectives.

Sau!


On 11/20/18 6:42 PM, Victor Rodriguez wrote:
> On Tue, Nov 20, 2018 at 8:25 PM Rowsell, Brent 
> <Brent.Rowsell at windriver.com> wrote:
>>
>> There are two kernels, standard and rt.
>> Both are centos 7.5 based with a small set of patches applied on top along with modified kernel config options.
>>
> 
> Thanks for the clarification
> 
>> Not quite understanding what you are asking. Are you proposing to replace the kernel in the starlingX project or just in your local environment  ?
> 
> For my local environment. I would not like to use CentOS kernel 3.10 
> but instead LTS 4.19
> 
>> What is the objective here ?
> 
> To have a more stable and secure kernel on my production system, there 
> are security fixes that would like to have on my kernel that LTS 
> provides
> 
> I know RHEL/CentOS is based on kernel 3.10 but other OSs are ot like 
> ubuntu/debian/fedora
> 
> Regards
> 
>>
>> Brent
>>
>> -----Original Message-----
>> From: Victor Rodriguez [mailto:vm.rod25 at gmail.com]
>> Sent: Tuesday, November 20, 2018 9:20 PM
>> To: starlingx-discuss at lists.starlingx.io
>> Subject: [Starlingx-discuss] Migrate Starling X kernel patches to LTS 
>> kernel
>>
>> Hi team
>>
>> I am a new user/developer of starling X and after searching into the kernel metapatches at:
>>
>> https://git.starlingx.io/cgit/stx-integ/tree/kernel
>>
>> Some questions came to me :
>>
>> As far as I can see we are under kernel 3.10 from RHEL RT fork right?
>> There are some ( actually many ) security and functional changes that 
>> exist in the LTS kernel ( like 4.19 as an example), because of that I 
>> would like to use a more stable kernel into my starling x system
>>
>> Is there any specific reason why use that specific for from RHEL?
>>
>> What does starling X think about the migration of these patches ( some of them are already applied into the latest versions of Linux Kernel)?
>>
>> What kind of test should I perform to check that my vanilla kernel + STX patches work as expected?
>>
>> All feedback is more than welcome
>>
>> BTW thanks to Mario and Saul for the help on understand more these 
>> patches
>>
>> Regards
>>
>> Victor Rodriguez
>>
>> _______________________________________________
>> Starlingx-discuss mailing list
>> Starlingx-discuss at lists.starlingx.io
>> http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
> 
> _______________________________________________
> Starlingx-discuss mailing list
> Starlingx-discuss at lists.starlingx.io
> http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
>