Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Getting Your Customized openSUSE Kernel on OBS
Search
shunghsiyu
November 02, 2024
Technology
0
78
Getting Your Customized openSUSE Kernel on OBS
Presented at openSUSE.Asia Summit 2024
shunghsiyu
November 02, 2024
Tweet
Share
More Decks by shunghsiyu
See All by shunghsiyu
管你要 trace 什麼、bpftrace 用下去就對了 — COSCUP 2025
shunghsiyu
0
420
管你要 trace 什麼 bpftrace 用下去就對了 (KaLUG場)
shunghsiyu
0
23
What is an ABI, and Why Should You Care?
shunghsiyu
0
5
Making Sense of Tristate Numbers (tnum)
shunghsiyu
0
7
BPF in Stable Kernels
shunghsiyu
0
100
Peeking into the BPF verifier
shunghsiyu
0
52
ABI 是什麼?跟 API 不一樣嗎?
shunghsiyu
0
150
Value tracking in BPF verifier
shunghsiyu
0
140
Model Checking (what may become part of) the BPF Verifier
shunghsiyu
0
75
Other Decks in Technology
See All in Technology
2025新卒研修・Webアプリケーションセキュリティ #弁護士ドットコム
bengo4com
3
9.7k
いかにして命令の入れ替わりについて心配するのをやめ、メモリモデルを愛するようになったか(改)
nullpo_head
7
2.7k
Amazon S3 Vectorsは大規模ベクトル検索を低コスト化するサーバーレスなベクトルデータベースだ #jawsugsaga / S3 Vectors As A Serverless Vector Database
quiver
2
1k
UDDのススメ - 拡張版 -
maguroalternative
1
640
Claude Codeは仕様駆動の夢を見ない
gotalab555
23
7.3k
あとはAIに任せて人間は自由に生きる
kentaro
3
750
Infrastructure as Prompt実装記 〜Bedrock AgentCoreで作る自然言語インフラエージェント〜
yusukeshimizu
2
160
開発と脆弱性と脆弱性診断についての話
su3158
0
140
工業高校で学習したとあるエンジニアのキャリアの話
shirayanagiryuji
0
120
形式手法特論:位相空間としての並行プログラミング #kernelvm / Kernel VM Study Tokyo 18th
ytaka23
3
1.5k
リモートワークで心掛けていること 〜AI活用編〜
naoki85
0
190
ウォンテッドリーのアラート設計と Datadog 移行での知見
donkomura
0
230
Featured
See All Featured
A designer walks into a library…
pauljervisheath
207
24k
Optimizing for Happiness
mojombo
379
70k
Measuring & Analyzing Core Web Vitals
bluesmoon
9
560
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
kevinliebholz
34
6k
Java REST API Framework Comparison - PWX 2021
mraible
33
8.8k
Gamification - CAS2011
davidbonilla
81
5.4k
Producing Creativity
orderedlist
PRO
347
40k
Balancing Empowerment & Direction
lara
2
570
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
33
2.4k
Typedesign – Prime Four
hannesfritz
42
2.8k
Practical Orchestrator
shlominoach
190
11k
How to train your dragon (web standard)
notwaldorf
96
6.2k
Transcript
How to Maintaining a Linux Kernel Package on openSUSE's Open
Build Service Getting Your Customized openSUSE Kernel on OBS Shung-Hsi Yu, SUSE @shunghsiyu @
[email protected]
About me Shung-Hsi Yu SUSE Based in Taitung, Taiwan Kernel
Engineer BPF Subsystem openSUSE SUSE Enterprise Linux
Agenda - Backgrounds - Problems & Rational - How to
Customize (the Kernel) - Comparisons (of methods) - Takeaways
Backgrounds
Linux Kernel - Core of the system - Talks to
hardware (w/ drivers) - Provide abstractions/features
Open Build Service (OBS) - Build Service - Produce RPM
packages - Compile source code to binaries - Hosts RPM packages
Open Build Service (OBS) Interface - API - osc command-line
tool - WebUI
None
Problems
Additional Feature You want additional security hardening with ABC feature,
however due to performance impact it is disabled in openSUSE’s kernel # CONFIG_ABC is not set
Unsupported Hardware You have XZY device, but openSUSE’s kernel cannot
use it because support is not enabled # CONFIG_XZY is not set
Unsupported Hardware You have XZY device, but openSUSE’s kernel cannot
use it because the driver’s source code is not upstream
Distributing and Installation You have built a kernel on your
laptop, now you need to have it installed on all your machines
Updating the Kernel There a critical security bug the was
fixed, do you have to go through the same again?
Rational
Why Customize? - Missing features / hardware support - Disabled
- Not available - Too many features / hardware support - Security - Size
Why NOT Customize? - Support on your own - Untested
Why use OBS? - Builds RPM packages for you -
Make package distribution easy (and secure) - Works well with openSUSE distros - Support many architectures
How to Customize Overview
#1 - {patches,config}.addon - the “default” way to do customization
- patch and config managed in OBS - OBS keeps it updated (w/ link)
#2 - kernel-$FLAVOR.spec - lightweight customization - single RPM specification
file - repackaging of existing RPM
#3 - fork kernel-source.git - openSUSE/SUSE kernel team’s workflow -
patches and config managed with git repository
How to Customize #1 - {patches,config}.addon
Setup Requirements - osc (cmdline) / web browser - tar
& gzip bzip2 (cmdline) / GUI archiver - (optional) diff
Workflow (changing config) 1. Branch kernel-default project on OBS 2.
Create config.addon.tar.bz2 3. Upload to your branched kernel-default OBS project
Config Modification $ tree config.addon/ config.addon/ ├── arm64 │ └──
default └── x86_64 └── default
Config Modification $ cat config.addon/x86_64/default CONFIG_XYZ=y ...
Workflow (generating patches) 1. Download source code of kernel.git 2.
Extract 3. Modify 4. diff
Workflow (adding patches) 1. Branch kernel-default project on OBS 2.
Create patches.addon.tar.bz2 3. Upload to your branched kernel-default OBS project
Code Modification $ tree . 0001-support-XZY.patch series
Code Modification $ cat 0001-support-XZY.patch --- a/drivers/XYZ/main.c +++ b/drivers/XYZ/main.c @@
-93,7 +93,7 @@ ... $ cat series 0001-support-XZY.patch
How to Customize #2 - kernel-$FLAVOR.spec
Setup Requirements - osc (cmdline) / web browser
Workflow (changing spec) 1. Branch kernel-default-base project on OBS 2.
Modify kernel-default-base.spec 3. (optional) Rename spec file and project
Module Modification $ cat kernel-default-base.spec ... define filesystems autofs4 btrfs
ext4 fuse vfat \ isofs jbd2 mbcache nfsv2 ... %define modules %usb_modules %net_drivers \ %scsi_modules %block_drivers hyperv_modules %virtio_modules %vmware_modules %xen_modules ...
How to Customize #3 - fork kernel-source.git
Setup Requirements - osc - git - quilt - diff
- …
Workflow (adding patches) 1. Clone kernel-source.git 2. cd kernel-source 3.
sequence-patch.sh 4. cd tmp/current 5. add new patch with quilt
Workflow (adding patches) 6. quilt edit 7. refresh_patch.sh 8. cd
patches (kernel-source) 9. log 10. (optional) git push …
Workflow (upload) Push changes to OBS $OBS_BRANCH=home:$USER:branches:Leap:15.6:Update $FLAVOR=default scripts/tar-up.sh scripts/osc_wrapper
upload --enable-debug "$OBS_BRANCH" ./kernel-source/kernel-default.spec
Comparisons
#1 - {config,patches}.addon The Good - good balance between easiness
and flexibility The Bad - some chance of patch failing to apply
#2 - kernel-$FLAVOR.spec The Good - easy, super fast to
build package - identical binaries - low maintenance The Bad - not flexible, can’t add feature / hardware support
#3 - fork kernel-source.git The Good - very flexible -
remove existing patch and or add new upstream patch - scales very well - many collaborators & many custom patches / changes
#3 - fork kernel-source.git The Bad - needs to be
updated manually - needs more resources / tooling - workflow is much more complex - uses command-line-only tools
Takeaways
Takeaways Sometimes you need to customize the Linux Kernel for
feature Using openSUSE’s OBS to do so save you resources and makes distributing easy
Takeaways (cont.) Start with *.addon customization move to other method
if it doesn’t work well
Appendix
Examples home:tiwai:kernel:sle15-sp6-kasan - customize kernel config with config.addon openSUSE:Leap:15.6:Update/kernel-default-base -
customize kernel-default RPM with spec file home:tiwai:kernel:drm-tip - customize kernel config with kernel-source
References - How to maintain kernel-source packages on OBS? -
How to Modify a Package in Open Build Service - openSUSE:Build Service Collaboration - openSUSE:Build Service Concept project linking - Open Build Service Beginnerʼs Guide - SUSE Kernel Site - kernel-source’s README.SUSE
None