Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

kernel: Check potentially interesting new kernel features #3201

Open
6 tasks
foersleo opened this issue Jun 14, 2023 · 5 comments
Open
6 tasks

kernel: Check potentially interesting new kernel features #3201

foersleo opened this issue Jun 14, 2023 · 5 comments
Assignees
@foersleo
Labels
area/core Issues core to the OS (variant independent) status/needs-info Further information is requested status/research This issue is being researched type/enhancement New feature or request

Comments

@foersleo
Copy link
Contributor


During the discussions around kernel-6.1 enablement (#3121) a few new kernel features have been mentioned to be potentially interesting to us. Have a look into trade-offs between overhead and benefit of disabling/enabling the following features:

  • FIPS selftest
  • PREEMPT_DYNAMIC on arm64
  • EFI_ZBOOT
  • MODULE_DECOMPRESS
  • I915 driver
  • XEN_BACKEND
@foersleo foersleo added type/enhancement New feature or request status/needs-triage Pending triage or re-evaluation labels Jun 14, 2023
@foersleo foersleo self-assigned this Jun 14, 2023
@insanpraja
Copy link

Love to have bottlerocket on XCP-NG.

@foersleo
Copy link
Contributor Author

foersleo commented Jul 7, 2023

@insanpraja: Could you elaborate on what you are interested in? As far as I can tell Bottlerocket could make sense as a guest on XCP-NG, which I'd assume should work today (I have not tested that, but Bottlerocket works on xen-based EC2 instances, which I'd assume would be a comparable platform). Is there any specific kernel features that you are missing in order to run Bottlerocket on XCP-NG?

@insanpraja
Copy link

as per documentation, there are no instruction to deploy or install bottlerocket in XCP-NG, but I suppose we could follow/hack our way through VMware instruction guide?

Thanks!

@foersleo
Copy link
Contributor Author

foersleo commented Jul 7, 2023

That is right, the officially supported variants are currently targeting AWS EC2, VMware and a variant for bare metal hosts. Usually the metal variant is the most universal, but needs a tailor made deployment mechanism for whatever target platform.

We are also currently working towards isolating a base image and provide an easy mechanism for the community to build custom versions on top of bottle rocket. Those efforts are tracked in #2669.

If you have a specific ask, feel free to open a new issue. The request for xcp-ng support seems to be not really connected to this issue here. If you have changes to contribute to the project we are also happy to learn about those and work with you to get them integrated.

@bcressey
Copy link
Contributor

I'm excited about EFI_ZBOOT and poked at it a bit. Some issues:

  • no kdump / kexec support
  • no x86_64 support - would be nice to always use the same mechanism
  • complicated Secure Boot support - need to sign both the "outer" and "inner" images, and pesign only signs the outer one

@stmcginnis stmcginnis added status/needs-info Further information is requested status/research This issue is being researched area/core Issues core to the OS (variant independent) and removed status/needs-triage Pending triage or re-evaluation labels Aug 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@foersleo foersleo

Labels
area/core Issues core to the OS (variant independent) status/needs-info Further information is requested status/research This issue is being researched type/enhancement New feature or request
Projects
Bottlerocket Engineering Roadmap
Status: No status
Milestone
No milestone
Development

No branches or pull requests
4 participants
@bcressey @stmcginnis @foersleo @insanpraja