Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Getting Your Customized openSUSE Kernel on OBS
Search
shunghsiyu
November 02, 2024
Technology
0
87
Getting Your Customized openSUSE Kernel on OBS
Presented at openSUSE.Asia Summit 2024
shunghsiyu
November 02, 2024
Tweet
Share
More Decks by shunghsiyu
See All by shunghsiyu
管你要 trace 什麼、bpftrace 用下去就對了 — COSCUP 2025
shunghsiyu
0
500
管你要 trace 什麼 bpftrace 用下去就對了 (KaLUG場)
shunghsiyu
0
24
What is an ABI, and Why Should You Care?
shunghsiyu
0
5
Making Sense of Tristate Numbers (tnum)
shunghsiyu
0
7
BPF in Stable Kernels
shunghsiyu
0
110
Peeking into the BPF verifier
shunghsiyu
0
53
ABI 是什麼?跟 API 不一樣嗎?
shunghsiyu
0
150
Value tracking in BPF verifier
shunghsiyu
0
140
Model Checking (what may become part of) the BPF Verifier
shunghsiyu
0
76
Other Decks in Technology
See All in Technology
サラリーマンの小遣いで作るtoCサービス - Cloudflare Workersでスケールする開発戦略
shinaps
2
410
人工衛星のファームウェアをRustで書く理由
koba789
13
7.3k
OCI Oracle Database Services新機能アップデート(2025/06-2025/08)
oracle4engineer
PRO
0
110
品質視点から考える組織デザイン/Organizational Design from Quality
mii3king
0
200
BPaaSにおける人と協働する前提のAIエージェント-AWS登壇資料
kentarofujii
0
130
MCPで変わる Amebaデザインシステム「Spindle」の開発
spindle
PRO
3
3.2k
AWSで推進するデータマネジメント
kawanago
1
1.3k
大「個人開発サービス」時代に僕たちはどう生きるか
sotarok
20
9.8k
初めてAWSを使うときのセキュリティ覚書〜初心者支部編〜
cmusudakeisuke
1
240
dbt開発 with Claude Codeのためのガードレール設計
10xinc
2
1.1k
テストを軸にした生き残り術
kworkdev
PRO
0
190
LLMを搭載したプロダクトの品質保証の模索と学び
qa
0
1k
Featured
See All Featured
No one is an island. Learnings from fostering a developers community.
thoeni
21
3.4k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
32
1.5k
A Modern Web Designer's Workflow
chriscoyier
696
190k
The Cult of Friendly URLs
andyhume
79
6.6k
A Tale of Four Properties
chriscoyier
160
23k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
131
19k
[RailsConf 2023] Rails as a piece of cake
palkan
57
5.8k
The Language of Interfaces
destraynor
161
25k
What's in a price? How to price your products and services
michaelherold
246
12k
Fantastic passwords and where to find them - at NoRuKo
philnash
52
3.4k
10 Git Anti Patterns You Should be Aware of
lemiorhan
PRO
656
61k
Performance Is Good for Brains [We Love Speed 2024]
tammyeverts
12
1.1k
Transcript
How to Maintaining a Linux Kernel Package on openSUSE's Open
Build Service Getting Your Customized openSUSE Kernel on OBS Shung-Hsi Yu, SUSE @shunghsiyu @
[email protected]
About me Shung-Hsi Yu SUSE Based in Taitung, Taiwan Kernel
Engineer BPF Subsystem openSUSE SUSE Enterprise Linux
Agenda - Backgrounds - Problems & Rational - How to
Customize (the Kernel) - Comparisons (of methods) - Takeaways
Backgrounds
Linux Kernel - Core of the system - Talks to
hardware (w/ drivers) - Provide abstractions/features
Open Build Service (OBS) - Build Service - Produce RPM
packages - Compile source code to binaries - Hosts RPM packages
Open Build Service (OBS) Interface - API - osc command-line
tool - WebUI
None
Problems
Additional Feature You want additional security hardening with ABC feature,
however due to performance impact it is disabled in openSUSE’s kernel # CONFIG_ABC is not set
Unsupported Hardware You have XZY device, but openSUSE’s kernel cannot
use it because support is not enabled # CONFIG_XZY is not set
Unsupported Hardware You have XZY device, but openSUSE’s kernel cannot
use it because the driver’s source code is not upstream
Distributing and Installation You have built a kernel on your
laptop, now you need to have it installed on all your machines
Updating the Kernel There a critical security bug the was
fixed, do you have to go through the same again?
Rational
Why Customize? - Missing features / hardware support - Disabled
- Not available - Too many features / hardware support - Security - Size
Why NOT Customize? - Support on your own - Untested
Why use OBS? - Builds RPM packages for you -
Make package distribution easy (and secure) - Works well with openSUSE distros - Support many architectures
How to Customize Overview
#1 - {patches,config}.addon - the “default” way to do customization
- patch and config managed in OBS - OBS keeps it updated (w/ link)
#2 - kernel-$FLAVOR.spec - lightweight customization - single RPM specification
file - repackaging of existing RPM
#3 - fork kernel-source.git - openSUSE/SUSE kernel team’s workflow -
patches and config managed with git repository
How to Customize #1 - {patches,config}.addon
Setup Requirements - osc (cmdline) / web browser - tar
& gzip bzip2 (cmdline) / GUI archiver - (optional) diff
Workflow (changing config) 1. Branch kernel-default project on OBS 2.
Create config.addon.tar.bz2 3. Upload to your branched kernel-default OBS project
Config Modification $ tree config.addon/ config.addon/ ├── arm64 │ └──
default └── x86_64 └── default
Config Modification $ cat config.addon/x86_64/default CONFIG_XYZ=y ...
Workflow (generating patches) 1. Download source code of kernel.git 2.
Extract 3. Modify 4. diff
Workflow (adding patches) 1. Branch kernel-default project on OBS 2.
Create patches.addon.tar.bz2 3. Upload to your branched kernel-default OBS project
Code Modification $ tree . 0001-support-XZY.patch series
Code Modification $ cat 0001-support-XZY.patch --- a/drivers/XYZ/main.c +++ b/drivers/XYZ/main.c @@
-93,7 +93,7 @@ ... $ cat series 0001-support-XZY.patch
How to Customize #2 - kernel-$FLAVOR.spec
Setup Requirements - osc (cmdline) / web browser
Workflow (changing spec) 1. Branch kernel-default-base project on OBS 2.
Modify kernel-default-base.spec 3. (optional) Rename spec file and project
Module Modification $ cat kernel-default-base.spec ... define filesystems autofs4 btrfs
ext4 fuse vfat \ isofs jbd2 mbcache nfsv2 ... %define modules %usb_modules %net_drivers \ %scsi_modules %block_drivers hyperv_modules %virtio_modules %vmware_modules %xen_modules ...
How to Customize #3 - fork kernel-source.git
Setup Requirements - osc - git - quilt - diff
- …
Workflow (adding patches) 1. Clone kernel-source.git 2. cd kernel-source 3.
sequence-patch.sh 4. cd tmp/current 5. add new patch with quilt
Workflow (adding patches) 6. quilt edit 7. refresh_patch.sh 8. cd
patches (kernel-source) 9. log 10. (optional) git push …
Workflow (upload) Push changes to OBS $OBS_BRANCH=home:$USER:branches:Leap:15.6:Update $FLAVOR=default scripts/tar-up.sh scripts/osc_wrapper
upload --enable-debug "$OBS_BRANCH" ./kernel-source/kernel-default.spec
Comparisons
#1 - {config,patches}.addon The Good - good balance between easiness
and flexibility The Bad - some chance of patch failing to apply
#2 - kernel-$FLAVOR.spec The Good - easy, super fast to
build package - identical binaries - low maintenance The Bad - not flexible, can’t add feature / hardware support
#3 - fork kernel-source.git The Good - very flexible -
remove existing patch and or add new upstream patch - scales very well - many collaborators & many custom patches / changes
#3 - fork kernel-source.git The Bad - needs to be
updated manually - needs more resources / tooling - workflow is much more complex - uses command-line-only tools
Takeaways
Takeaways Sometimes you need to customize the Linux Kernel for
feature Using openSUSE’s OBS to do so save you resources and makes distributing easy
Takeaways (cont.) Start with *.addon customization move to other method
if it doesn’t work well
Appendix
Examples home:tiwai:kernel:sle15-sp6-kasan - customize kernel config with config.addon openSUSE:Leap:15.6:Update/kernel-default-base -
customize kernel-default RPM with spec file home:tiwai:kernel:drm-tip - customize kernel config with kernel-source
References - How to maintain kernel-source packages on OBS? -
How to Modify a Package in Open Build Service - openSUSE:Build Service Collaboration - openSUSE:Build Service Concept project linking - Open Build Service Beginnerʼs Guide - SUSE Kernel Site - kernel-source’s README.SUSE
None