Jarkko Sakkinen
Posts
4328Following
312Followers
445Entrepreneur at Siltakatu Solutions Oy
OpenPGP: 3AB05486C7752FE1
Jarkko Sakkinen
jarkko
Time for yet another LSM upstream meeting :-) My favorite meeting of the month.
0
0
1
Jarkko Sakkinen
jarkko
I think the bright side in the current times is that the relationship towards both Sweden and Estonia has been tightened up, and I can feel that there is more mutual respect towards each other :-)
🇪🇪 🇸🇪 🇫🇮
🇪🇪 🇸🇪 🇫🇮
0
0
2
Jarkko Sakkinen
jarkko
I dared to apply this to my -next:
https://lore.kernel.org/keyrings/Z_e9CVsmiXD3QYkg@kernel.org/
It's a good timing, given that we are at -rc1. key_put() is exactly type of code where:
1. You need to be extremely conservative.
2. Still there's a chance for breakage.
3. struct key is widely accessed kernel object in various context's. Thus, it is practically impossible to consider every possible use case.
I'll put this to my v6.16 PR if it turns out to not cause too much devastation :-)
#linux #kernel #keyring
https://lore.kernel.org/keyrings/Z_e9CVsmiXD3QYkg@kernel.org/
It's a good timing, given that we are at -rc1. key_put() is exactly type of code where:
1. You need to be extremely conservative.
2. Still there's a chance for breakage.
3. struct key is widely accessed kernel object in various context's. Thus, it is practically impossible to consider every possible use case.
I'll put this to my v6.16 PR if it turns out to not cause too much devastation :-)
#linux #kernel #keyring
0
0
0
Jarkko Sakkinen
jarkko
Flying to Berlin in near future to meet up friends from Tallinn :-) It's cheaper than train + boat.
0
0
1
Jarkko Sakkinen
jarkko
"marvel's mignight suns" is a cool game but why they have to talk so much, and why i need to hang out.
i don't hang out IRL either 🤷
i don't hang out IRL either 🤷
0
0
0
Jarkko Sakkinen
jarkko
thank you mr showerhead for giving this freedom my US comrades (pun intended).
https://www.whitehouse.gov/presidential-actions/2025/04/maintaining-acceptable-water-pressure-in-showerheads/
https://www.whitehouse.gov/presidential-actions/2025/04/maintaining-acceptable-water-pressure-in-showerheads/
0
0
0
Jarkko Sakkinen
jarkko
Edited 10 days ago
container hack for build: unshare + chroot. unshare guarantees unmounts, given a ephemeral file system namespace :-)
#!/bin/sh
set -eu
rootfs_dir=$1
adm_user=$2
if [ "$#" -eq 3 ]; then
proxy_address=""
cmdline=$3
else
proxy_address=$3
cmdline=$4
fi
sudo unshare --mount --pid --fork sh -c "
mount --bind /sys '$rootfs_dir/sys'
mount --bind /dev '$rootfs_dir/dev'
mount -t proc proc '$rootfs_dir/proc'
mount -t devpts devpts '$rootfs_dir/dev/pts'
chroot '$rootfs_dir' su - '$adm_user' -c 'export PUAVO_CACHE_PROXY=\"$proxy_address\"; $cmdline'
"
@oleksandr or at most only cosmetic changes for this patch per se.
0
0
0
Jarkko Sakkinen
jarkko
@oleksandr not likely but i'll have to hear if this needs additional fixes
1
0
0
@Conan_Kudo BTW, so we do have machine keyring and MOK keys. What is the problem?
1
0
0