huge-kernels for woof-ce puppies

Core libraries and systems
Message
Author
ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

Zombieload mitigated kernel

#61 Post by ozsouth »

I've made a 64bit Xenial/Bionic compatible 4.19.44 kernel via Puppy kernel-kit, with the no firmware option. Is partially Zombieload mitigated. Is Spectre/Meltdown mitigated (except 3a). Needs firmware by making own (or using another) fdrv . Uses performance cpu governor by default (max speed). This is the first kernel I've made with the Bionic64 DOTconfig - tested OK in Bionicpup64 (& Slacko64 with path modified to /usr/lib64 in zdrv) - a bit slower than original. Use at own risk.
See: https://archive.org/download/Puppy_Linu ... oz.tar.bz2
Last edited by ozsouth on Thu 30 May 2019, 09:28, edited 5 times in total.

User avatar
peebee
Posts: 4370
Joined: Sun 21 Sep 2008, 12:31
Location: Worcestershire, UK
Contact:

#62 Post by peebee »

ImageLxPup = Puppy + LXDE
Main version used daily: LxPupSc; Assembler of UPups, ScPup & ScPup64, LxPup, LxPupSc & LxPupSc64

musher0
Posts: 14629
Joined: Mon 05 Jan 2009, 00:54
Location: Gatineau (Qc), Canada

#63 Post by musher0 »

Nobody's building 32-bit kernels anymore, eh?
musher0
~~~~~~~~~~
"You want it darker? We kill the flame." (L. Cohen)

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#64 Post by ozsouth »

@musher - peebee has built some 32bit. Trying 4.9.177 pae later.
The zombieload mitigation kernels have just been released, so we make what we can test (& use) first, then others. I have a Slacko64 4.14.120 kernel compiling now (takes me 3+ hours). Am posting using Peebee's 5.1.3 64bit kernel in Slacko64-700rc3 - works so well I may not bother posting 4.14.120. (EDIT - won't post - didn't work well. Sticking with my 4.19.44 as slow FAT access with others).
Last edited by ozsouth on Tue 21 May 2019, 04:44, edited 2 times in total.

User avatar
peebee
Posts: 4370
Joined: Sun 21 Sep 2008, 12:31
Location: Worcestershire, UK
Contact:

#65 Post by peebee »

musher0 wrote:Nobody's building 32-bit kernels anymore, eh?
You can use 64-bit kernels with 32-bit systems so long as your processor is 64-bit - try it and see!
ImageLxPup = Puppy + LXDE
Main version used daily: LxPupSc; Assembler of UPups, ScPup & ScPup64, LxPup, LxPupSc & LxPupSc64

musher0
Posts: 14629
Joined: Mon 05 Jan 2009, 00:54
Location: Gatineau (Qc), Canada

#66 Post by musher0 »

peebee wrote:
musher0 wrote:Nobody's building 32-bit kernels anymore, eh?
You can use 64-bit kernels with 32-bit systems so long as your processor is 64-bit - try it and see!
Hi peebee.

I know that. I meant the real McCoy.

BFN.
musher0
~~~~~~~~~~
"You want it darker? We kill the flame." (L. Cohen)

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#67 Post by ozsouth »

I've made a 32bit 4.9.177 i686 pae kernel via Puppy kernel-kit, with firmware included. No fdrv needed. Is partially Zombieload mitigated. Is Spectre/Meltdown mitigated (except 3a). Tested OK in upupbb-18.05 (posting from it) - a bit slower than original. Use at own risk.
See: https://archive.org/download/Puppy_Linu ... oz.tar.bz2
Last edited by ozsouth on Thu 30 May 2019, 09:28, edited 1 time in total.

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#68 Post by ozsouth »

I've made a 64bit Slacko compatible 4.19.46 kernel via Puppy kernel-kit, with the no firmware option. Is partially Zombieload mitigated. Is Spectre/Meltdown mitigated (except 3a). Needs firmware by making own (or using another) fdrv . Tested OK in Slacko64-700rc3 & ScPup64-19.01. Use at own risk.
See: https://archive.org/download/Puppy_Linu ... oz.tar.bz2
Last edited by ozsouth on Thu 30 May 2019, 12:24, edited 3 times in total.

User avatar
peebee
Posts: 4370
Joined: Sun 21 Sep 2008, 12:31
Location: Worcestershire, UK
Contact:

#69 Post by peebee »

ozsouth wrote:I've made a 64bit Slacko compatible 4.19.46 kernel via Puppy kernel-kit, with the no firmware option. Is Zombieload mitigated.
Hi ozsouth

Are you able to say which config items enabled Zombieload mitigation?

With the FatDog configs, I get:
mds:Vulnerable: Clear CPU buffers attempted, no microcode; SMT disabled

on my Intel Xeon desktop........

Thanks
peebee
ImageLxPup = Puppy + LXDE
Main version used daily: LxPupSc; Assembler of UPups, ScPup & ScPup64, LxPup, LxPupSc & LxPupSc64

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#70 Post by ozsouth »

Peebee - I get the same result as you. I had read Greg K-H suggesting SMT disabling in kernels released after 15th May was the CURRENT mitigation, along with microcode updates. Perhaps I should say PARTIALLY mitigated. As I understand it, this is as good as it gets for now.

musher0
Posts: 14629
Joined: Mon 05 Jan 2009, 00:54
Location: Gatineau (Qc), Canada

#71 Post by musher0 »

ozsouth wrote:I've made a 32bit 4.9.177 i686 pae kernel via Puppy kernel-kit, with firmware included. No fdrv needed. Is partially Zombieload mitigated. Is Spectre/Meltdown mitigated (except 3a). Tested OK in upupbb-18.05 (posting from it) - a bit slower than original. Use at own risk.
See: https://archive.org/download/Puppy_Linu ... oz.tar.bz2
Thanks, ozsouth.
musher0
~~~~~~~~~~
"You want it darker? We kill the flame." (L. Cohen)

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#72 Post by ozsouth »

I've made a 64bit 4.14.123 Slacko64 compatible kernel via Puppy kernel-kit, with no firmware - fdrv needed. Is partially Zombieload mitigated (needs microcode). Is Spectre/Meltdown mitigated (except 3a). Tested OK in Slacko64, ScPup64 & also upupbb-18.05 (with lib path change in zdrv). Use at own risk. See:
https://archive.org/download/Puppy_Linu ... oz.tar.bz2
** SUPERSEDED - see below **
Last edited by ozsouth on Tue 18 Jun 2019, 23:07, edited 3 times in total.

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

AUFS versions for kernel-kit

#73 Post by ozsouth »

As of 14Jan2020, the following special aufs versions need to be quoted in build.conf when making latest kernels.
All unlisted main branches (i.e. 4.4 , 5.1 etc) just use that version number.
4.1.13+
4.9.94+
4.14.73+
4.19.63+
5.2.5+
5.3.16
5.4.3
.
Last edited by ozsouth on Tue 14 Jan 2020, 05:40, edited 6 times in total.

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#74 Post by ozsouth »

I've made a 64bit 4.14.127 Slacko64 compatible kernel via Puppy kernel-kit, with no firmware - fdrv needed. Is partially Zombieload mitigated (needs microcode - see this howto: http://murga-linux.com/puppy/viewtopic. ... 15#1030115). Is Spectre/Meltdown mitigated. Is TCP_SACK mitigated. Tested OK in Slacko64 & ScPup64. Use at own risk.
Kernel here: https://archive.org/download/Puppy_Linu ... oz.tar.bz2

NOTE: Cannot be used in ubuntu clones unless path /usr/lib64 changed to /usr/lib in kernel-modules.sfs-... file (add .sfs to end) via this:
http://murga-linux.com/puppy/viewtopic. ... 87#1028687
.

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#75 Post by ozsouth »

I've made a 64bit 4.14.131 Slacko64 compatible kernel via Puppy kernel-kit, with no firmware - fdrv needed. Is partially Zombieload mitigated (needs microcode - see this howto: http://murga-linux.com/puppy/viewtopic. ... 15#1030115). Is Spectre/Meltdown mitigated. Is TCP_SACK mitigated. Tested OK in Slacko64 & ScPup64. Use at own risk. Kernel here:
https://archive.org/download/Puppy_Linu ... oz.tar.bz2
NOTE: Cannot be used in ubuntu clones or with 32bit pups on 64 bit cpu unless path /usr/lib64 changed to /usr/lib in kernel-modules.sfs-... file (add .sfs to end) via this: http://murga-linux.com/puppy/viewtopic. ... 87#1028687

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#76 Post by ozsouth »

Kernel 4.14 End-Of-Life has been extended 4 years, to Jan 2024 - excellent!

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

32bit kernel

#77 Post by ozsouth »

I've made a 32bit 4.14.134 i686 pae kernel via Puppy kernel-kit, with firmware - no fdrv needed. Is mostly Spectre/Meltdown mitigated. Is TCP_SACK mitigated. Tested OK in DpupStretch_7.5. Use at own risk. Kernel here: https://archive.org/download/Puppy_Linu ... oz.tar.bz2
Last edited by ozsouth on Wed 09 Oct 2019, 10:18, edited 2 times in total.

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#78 Post by ozsouth »

I've made a 32bit 4.14.133 NO PAE (for older systems) kernel via Puppy kernel-kit, with firmware - no fdrv needed. Is mostly Spectre/Meltdown mitigated. Is TCP_SACK mitigated. Tested OK in Tahrpup 6.0.5. Use at own risk.
Kernel here: https://archive.org/download/Puppy_Linu ... AE.tar.bz2

User avatar
kschewe
Posts: 16
Joined: Fri 02 Aug 2019, 13:46
Location: Winnipeg Canada

#79 Post by kschewe »

ozsouth wrote:I've made a 32bit 4.14.133 NO PAE (for older systems) kernel via Puppy kernel-kit, with firmware - no fdrv needed. Is mostly Spectre/Meltdown mitigated. Is TCP_SACK mitigated. Tested OK in Tahrpup 6.0.5. Use at own risk.
Kernel here: https://archive.org/download/Puppy_Linu ... AE.tar.bz2
I tested it in bionicpup lite and it works.
Sadly its missing drivers for my old beast ha

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#80 Post by ozsouth »

I've made a 64bit 4.14.158 Slacko64 compatible kernel via Puppy kernel-kit, with no firmware - fdrv needed. Is partially Zombieload mitigated (needs microcode - see this howto: http://murga-linux.com/puppy/viewtopic. ... 15#1030115
Is Spectre/Meltdown mitigated. Is TCP_SACK mitigated. Tested OK in ScPup64. Use at own risk.
Kernel here: https://archive.org/download/Puppy_Linu ... oz.tar.bz2
NOTE: Cannot be used in ubuntu clones or with 32bit pups on 64 bit cpu unless path /usr/lib64 changed to /usr/lib in kernel-modules.sfs-... file (add .sfs to end) via this: http://murga-linux.com/puppy/viewtopic. ... 87#1028687

Post Reply