@kernellogger @securepaul thanks!

@securepaul this absolutely useful as i have absolutely no idea what i'm doing :-) i'll experiment with your and Thorsten's suggestions and try to find my own way...

@kernellogger for me the last draw was this FDE or whatever crap where you either have deb based kernel or snap based. too confusing for a developer like me - especially since the snap based had all the stuff I was interested (e.g. TPM2 boot) is the snap version. And as we know the Snap Store itself is as proprietary as Apple's App Store...

@kernellogger i'm sure i've seen worse don't worry ;-)

@kernellogger If you can append to kernel.spec, e.g. to kernel-local file, then that does the job. Thanks I give a shot.

I exactly picked one of @ljs patch sets because it is from alien subsystem. Using the stuff that I review myself and send to Linus eventually, could make me blind. This way I believe I can develop a robust workflow :-)

I mean 9/10 I just do trivial BuildRoot build but sometimes it is nice to be able to do proper packages and eat your own dog food (or should it be cat food given the patch set)...

@kernellogger dumb question perhaps: what is kernel-ark?

@vbabka i would be too, they get something to think about with decade(s) granularity :-)

@kernellogger I don't know. And also: I don't know what dist-git is :-) I spotted that maybe in some error message along the way.

So fedpkg is not the way to go for kernel dev?

Anyway I found many:

1. https://docs.fedoraproject.org/en-US/quick-docs/kernel-build-custom/
2. https://docs.fedoraproject.org/en-US/quick-docs/kernel-testing-patches/ (I'd pay a note taht this page specifically speaks about kernel dev task and uses fedpkg. Thus one will asssumee that a kernel developer should stick to fedpkg, right?)
3. https://fedoraproject.org/wiki/Building_a_custom_kernel

Pretty hard to get from A to B IMHO ;-) I wish there was a tutorial page on "how do upstream kernel development with Fedora and build compatible packages with opt-in secure boot. Here's how you do it."

Ubuntu had smooth procedure where you had actual kernel git with packaging patches on top. This broke of course with snap kernel images so does not hold any more.

@mikebabcock also, usually better standardization in any networked protocol leads to better mechanisms to detect issues and bunch of other good properties. always for the better at least :-)

Learning to compile distro kernel for Fedora. I took a random patch set from mm just to learn this process [1]. Has taken couple of days because I don't know anything about RPM and have compiled so far only distro kernel for Ubuntu. I'm recent convertant to Fedora because between 2004-2021 I used Ubuntu util I had had enough ;-)

Glitches or things to reconsider:

- I have now kernel compilation ongoing with "fedpkg mockbuilld". I hope this is the right command. I got the kernel by "fedpkg clone --anonymous kernel ".
- I have no idea how to point out linux-next so had to backport a single patch from kselftest to v6.12-rc4. Any pointers how to use that nice fedpkg command AND have linux-next is appreciated.
- I hope this will ensure that the kernel will signed with my MOK key: [2].

[1] https://lore.kernel.org/all/cover.1729440856.git.lorenzo.stoakes@oracle.com/
[2]
I have a key created:

$ sudo certutil -L -d /etc/pki/pesign

Certificate Nickname Trust Attributes
SSL,S/MIME,JAR/XPI

Machine Owner Certificate Pu,Pu,Pu

And I hope this will pick it for the kernel build:

--- a/kernel-local
+++ b/kernel-local
@@ -1,2 +1,3 @@
# This file is intentionally left empty in the stock kernel. Its a nicety
# added for those wanting to do custom rebuilds with altered config opts.
+%define pe_signing_cert "Machine Owner Certificate"

#fedora #linux #kernel #rpm

I don't think it will take long for Trump to officially, or without indirection, endorse Adolf Hitler. At least if he wins this will be inevitable.

So anyone who thinks that he will ensures the diplomatic relations with Israel, I'd think twice...

PS. Unrelated to ongoing horrible war in the mIddle east...

https://www.theatlantic.com/politics/archive/2024/10/trump-military-generals-hitler/680327/

@baconandcoconut Ended up to this because it has been average on being "super inclusive" without having to waste time on doing that ;---)

@mikebabcock icann does not solve network problems :-) they standardize naming which is always for the better.

@baconandcoconut BR, <first name>

https://www.icann.org/en/blogs/details/new-icann-publications-explain-blockchains-and-name-system-technologies-17-10-2024-en #icann #blockchain #dns #ens #pns

This could be my next desktop albeit there is a proprietary OS installed instead of Linux: https://system76.com/desktops/thelio-astra

Mary Trump is warning about Donald’s dementia--yet corporate media still refuses to cover it! My new article about what Mary-- a psychologist and someone who has known Donald all her life--is seeing that demands more media attention given the stakes: https://deanobeidallah.substack.com/p/mary-trump-is-warning-about-donalds

Filled out my ballot over the weekend — a rather time-consuming task in Colorado, as we have a lot of things to vote.

Now I just have to endure a few more weeks while the rest of the country catches up. And hope I don't find myself living in a fascist nation...

⚡️North Korean troops to arrive in Kursk tomorrow, military intelligence says. “We are waiting for the first units tomorrow in the Kursk direction,” military intelligence chief Kyrylo Budanov said, though he did not specify how many would be deployed. https://kyivindependent.com/north-korean-troops-to-arrive-in-kursk-tomorrow-military-intelligence-says/

🐦🔗: https://nitter.oksocial.net/KyivIndependent/status/1848819197377155078#m

[2024/10/22 20:10]

I feel seen...