Stable Linux mainline builds for Ubuntu

#1

Post by mariuz » Fri, Aug 25, 2023, 10:44 AM UTC

Stable Linux mainline builds for Ubuntu
stgraber.org

Re: Stable Linux mainline builds for Ubuntu

#2

Post by NiekvdMaas » Fri, Aug 25, 2023, 1:27 PM UTC

See also https://github.com/bkw777/mainline which offers a UI to install the mainline kernels from mainline kernels PPA.

Re: Stable Linux mainline builds for Ubuntu

#3

Post by rafaelturk » Fri, Aug 25, 2023, 1:41 PM UTC

checking your github repo tels me that: This branch is 2273 commits ahead, 14587 commits behind torvalds:master. ????

Re: Stable Linux mainline builds for Ubuntu

#4

Post by Hasz » Fri, Aug 25, 2023, 1:54 PM UTC

If I wanted to keep Secureboot enabled, would signing with a MOK and enrolling that key be sufficient?

Re: Stable Linux mainline builds for Ubuntu

#5

Post by Filligree » Fri, Aug 25, 2023, 2:06 PM UTC

Hasz wrote: post #4

If I wanted to keep Secureboot enabled, would signing with a MOK and enrolling that key be sufficient?

You say that as though it's easy. I've yet to find an explanation that's shorter than a book.

Re: Stable Linux mainline builds for Ubuntu

#6

Post by lasermike026 » Fri, Aug 25, 2023, 2:11 PM UTC

I wonder what instabilities he has experienced?

Re: Stable Linux mainline builds for Ubuntu

#7

Post by sigotirandolas » Fri, Aug 25, 2023, 2:12 PM UTC

rafaelturk wrote: post #3

checking your github repo tels me that: This branch is 2273 commits ahead, 14587 commits behind torvalds:master. ????

I was also confused since to my understanding "mainline" is usually the release candidates, i.e. Linus's master branch. Here "(stable) mainline" appears to mean the latest stable release without distribution-specific patches, what I'd call a "vanilla kernel".

Re: Stable Linux mainline builds for Ubuntu

#8

Post by jchw » Fri, Aug 25, 2023, 2:13 PM UTC

Filligree wrote: post #5

Hasz wrote: post #4

If I wanted to keep Secureboot enabled, would signing with a MOK and enrolling that key be sufficient?

You say that as though it's easy. I've yet to find an explanation that's shorter than a book.

The truth is, it doesn't necessarily have to be a book long, but much like setting up PKI, it certainly can be.

What we really need is simple tooling that handles just the case of "I want to sign kernels for my own machine(s)".

Of course, some tools do exist for this case, but I'm not aware of one that is totally generic. Lanzaboote for NixOS seems interesting (disclaimer: have not tried.)

Re: Stable Linux mainline builds for Ubuntu

#9

Post by maurom » Fri, Aug 25, 2023, 2:29 PM UTC

Hasz wrote: post #4

If I wanted to keep Secureboot enabled, would signing with a MOK and enrolling that key be sufficient?

It would seem so. Been doing that since a while on my laptop for locally compiled stable kernels from kernel.org.

My hacky script has more lines to fetch the signer name from the kernel (once it's been signed) than to just sign the vmlinuz image.

Re: Stable Linux mainline builds for Ubuntu

#10

Post by andrewmackrodt » Fri, Aug 25, 2023, 2:32 PM UTC

Hasz wrote: post #4

If I wanted to keep Secureboot enabled, would signing with a MOK and enrolling that key be sufficient?

I used to use https://github.com/berglh/ubuntu-sb-kernel-signing and the mainline tool from cappelikan ppa, I think it worked on even with DKMS modules such as the Nvidia driver. I've since switched to xanmod with secure boot disabled do my memory is a bit hazy on that last point.