Author |
Message |
ozsouth
Joined: 01 Jan 2010 Posts: 608 Location: S.E Australia
|
Posted: Mon 20 May 2019, 04:14 Post subject:
Zombieload mitigated kernel |
|
I've made a 64bit Xenial/Bionic compatible 4.19.44 kernel via Puppy kernel-kit, with the no firmware option. Is partially Zombieload mitigated. Is Spectre/Meltdown mitigated (except 3a). Needs firmware by making own (or using another) fdrv . Uses performance cpu governor by default (max speed). This is the first kernel I've made with the Bionic64 DOTconfig - tested OK in Bionicpup64 (& Slacko64 with path modified to /usr/lib64 in zdrv) - a bit slower than original. Use at own risk.
See: https://archive.org/download/Puppy_Linux_Huge-Kernels/huge-4.19.44-64oz.tar.bz2
Last edited by ozsouth on Thu 30 May 2019, 05:28; edited 5 times in total
|
Back to top
|
|
 |
peebee

Joined: 21 Sep 2008 Posts: 4099 Location: Worcestershire, UK
|
Posted: Mon 20 May 2019, 04:44 Post subject:
|
|
64-bit 5.1.x now available:
http://www.murga-linux.com/puppy/viewtopic.php?p=1028625#1028625
_________________
LxPup = Puppy + LXDE
Main version used daily: LxPupSc; Assembler of UPups, ScPup & ScPup64, LxPup, LxPupSc & LxPupSc64
|
Back to top
|
|
 |
musher0
Joined: 04 Jan 2009 Posts: 14554 Location: Gatineau (Qc), Canada
|
Posted: Mon 20 May 2019, 05:25 Post subject:
|
|
Nobody's building 32-bit kernels anymore, eh?
_________________ musher0
~~~~~~~~~~
Je suis né pour aimer et non pas pour haïr. (Sophocle) /
I was born to love and not to hate. (Sophocles)
|
Back to top
|
|
 |
ozsouth
Joined: 01 Jan 2010 Posts: 608 Location: S.E Australia
|
Posted: Mon 20 May 2019, 05:46 Post subject:
|
|
@musher - peebee has built some 32bit. Trying 4.9.177 pae later.
The zombieload mitigation kernels have just been released, so we make what we can test (& use) first, then others. I have a Slacko64 4.14.120 kernel compiling now (takes me 3+ hours). Am posting using Peebee's 5.1.3 64bit kernel in Slacko64-700rc3 - works so well I may not bother posting 4.14.120. (EDIT - won't post - didn't work well. Sticking with my 4.19.44 as slow FAT access with others).
Last edited by ozsouth on Tue 21 May 2019, 00:44; edited 2 times in total
|
Back to top
|
|
 |
peebee

Joined: 21 Sep 2008 Posts: 4099 Location: Worcestershire, UK
|
Posted: Mon 20 May 2019, 07:01 Post subject:
|
|
musher0 wrote: | Nobody's building 32-bit kernels anymore, eh? |
You can use 64-bit kernels with 32-bit systems so long as your processor is 64-bit - try it and see!
_________________
LxPup = Puppy + LXDE
Main version used daily: LxPupSc; Assembler of UPups, ScPup & ScPup64, LxPup, LxPupSc & LxPupSc64
|
Back to top
|
|
 |
musher0
Joined: 04 Jan 2009 Posts: 14554 Location: Gatineau (Qc), Canada
|
Posted: Mon 20 May 2019, 08:21 Post subject:
|
|
peebee wrote: | musher0 wrote: | Nobody's building 32-bit kernels anymore, eh? |
You can use 64-bit kernels with 32-bit systems so long as your processor is 64-bit - try it and see! | Hi peebee.
I know that. I meant the real McCoy.
BFN.
_________________ musher0
~~~~~~~~~~
Je suis né pour aimer et non pas pour haïr. (Sophocle) /
I was born to love and not to hate. (Sophocles)
|
Back to top
|
|
 |
ozsouth
Joined: 01 Jan 2010 Posts: 608 Location: S.E Australia
|
Posted: Mon 20 May 2019, 22:28 Post subject:
|
|
I've made a 32bit 4.9.177 i686 pae kernel via Puppy kernel-kit, with firmware included. No fdrv needed. Is partially Zombieload mitigated. Is Spectre/Meltdown mitigated (except 3a). Tested OK in upupbb-18.05 (posting from it) - a bit slower than original. Use at own risk.
See: https://archive.org/download/Puppy_Linux_Huge-Kernels/huge-4.9.177-4Goz.tar.bz2
Last edited by ozsouth on Thu 30 May 2019, 05:28; edited 1 time in total
|
Back to top
|
|
 |
ozsouth
Joined: 01 Jan 2010 Posts: 608 Location: S.E Australia
|
Posted: Thu 30 May 2019, 01:31 Post subject:
|
|
I've made a 64bit Slacko compatible 4.19.46 kernel via Puppy kernel-kit, with the no firmware option. Is partially Zombieload mitigated. Is Spectre/Meltdown mitigated (except 3a). Needs firmware by making own (or using another) fdrv . Tested OK in Slacko64-700rc3 & ScPup64-19.01. Use at own risk.
See: https://archive.org/download/Puppy_Linux_Huge-Kernels/huge-4.19.46-s64oz.tar.bz2
Last edited by ozsouth on Thu 30 May 2019, 08:24; edited 3 times in total
|
Back to top
|
|
 |
peebee

Joined: 21 Sep 2008 Posts: 4099 Location: Worcestershire, UK
|
Posted: Thu 30 May 2019, 03:42 Post subject:
|
|
ozsouth wrote: | I've made a 64bit Slacko compatible 4.19.46 kernel via Puppy kernel-kit, with the no firmware option. Is Zombieload mitigated. |
Hi ozsouth
Are you able to say which config items enabled Zombieload mitigation?
With the FatDog configs, I get:
mds:Vulnerable: Clear CPU buffers attempted, no microcode; SMT disabled
on my Intel Xeon desktop........
Thanks
peebee
_________________
LxPup = Puppy + LXDE
Main version used daily: LxPupSc; Assembler of UPups, ScPup & ScPup64, LxPup, LxPupSc & LxPupSc64
|
Back to top
|
|
 |
ozsouth
Joined: 01 Jan 2010 Posts: 608 Location: S.E Australia
|
Posted: Thu 30 May 2019, 05:17 Post subject:
|
|
Peebee - I get the same result as you. I had read Greg K-H suggesting SMT disabling in kernels released after 15th May was the CURRENT mitigation, along with microcode updates. Perhaps I should say PARTIALLY mitigated. As I understand it, this is as good as it gets for now.
|
Back to top
|
|
 |
musher0
Joined: 04 Jan 2009 Posts: 14554 Location: Gatineau (Qc), Canada
|
Posted: Thu 30 May 2019, 10:42 Post subject:
|
|
Thanks, ozsouth.
_________________ musher0
~~~~~~~~~~
Je suis né pour aimer et non pas pour haïr. (Sophocle) /
I was born to love and not to hate. (Sophocles)
|
Back to top
|
|
 |
ozsouth
Joined: 01 Jan 2010 Posts: 608 Location: S.E Australia
|
Posted: Wed 12 Jun 2019, 23:09 Post subject:
|
|
I've made a 64bit 4.14.123 Slacko64 compatible kernel via Puppy kernel-kit, with no firmware - fdrv needed. Is partially Zombieload mitigated (needs microcode). Is Spectre/Meltdown mitigated (except 3a). Tested OK in Slacko64, ScPup64 & also upupbb-18.05 (with lib path change in zdrv). Use at own risk. See:
https://archive.org/download/Puppy_Linux_Huge-Kernels/huge-4.14.123-64oz.tar.bz2
** SUPERSEDED - see below **
Last edited by ozsouth on Tue 18 Jun 2019, 19:07; edited 3 times in total
|
Back to top
|
|
 |
ozsouth
Joined: 01 Jan 2010 Posts: 608 Location: S.E Australia
|
Posted: Fri 14 Jun 2019, 07:02 Post subject:
AUFS versions for kernel-kit |
|
As of 21/7/19, the following aufs versions need to be quoted in build.conf when making current kernels.
(My 4.14.123 64 bit kernel & later aware of this).
4.9.94+
4.14.73+
4.19.17+
5.x-rcN
5.2-20190715
.
Last edited by ozsouth on Wed 24 Jul 2019, 08:56; edited 2 times in total
|
Back to top
|
|
 |
ozsouth
Joined: 01 Jan 2010 Posts: 608 Location: S.E Australia
|
Posted: Tue 18 Jun 2019, 10:26 Post subject:
|
|
I've made a 64bit 4.14.127 Slacko64 compatible kernel via Puppy kernel-kit, with no firmware - fdrv needed. Is partially Zombieload mitigated (needs microcode - see this howto: http://murga-linux.com/puppy/viewtopic.php?p=1030115#1030115). Is Spectre/Meltdown mitigated. Is TCP_SACK mitigated. Tested OK in Slacko64 & ScPup64. Use at own risk.
Kernel here: https://archive.org/download/Puppy_Linux_Huge-Kernels/huge-4.14.127-64oz.tar.bz2
NOTE: Cannot be used in ubuntu clones unless path /usr/lib64 changed to /usr/lib in kernel-modules.sfs-... file (add .sfs to end) via this:
http://murga-linux.com/puppy/viewtopic.php?p=1028687#1028687
.
|
Back to top
|
|
 |
ozsouth
Joined: 01 Jan 2010 Posts: 608 Location: S.E Australia
|
Posted: Thu 27 Jun 2019, 08:48 Post subject:
|
|
I've made a 64bit 4.14.131 Slacko64 compatible kernel via Puppy kernel-kit, with no firmware - fdrv needed. Is partially Zombieload mitigated (needs microcode - see this howto: http://murga-linux.com/puppy/viewtopic.php?p=1030115#1030115). Is Spectre/Meltdown mitigated. Is TCP_SACK mitigated. Tested OK in Slacko64 & ScPup64. Use at own risk. Kernel here:
https://archive.org/download/Puppy_Linux_Huge-Kernels/huge-4.14.131-64oz.tar.bz2
NOTE: Cannot be used in ubuntu clones or with 32bit pups on 64 bit cpu unless path /usr/lib64 changed to /usr/lib in kernel-modules.sfs-... file (add .sfs to end) via this: http://murga-linux.com/puppy/viewtopic.php?p=1028687#1028687
|
Back to top
|
|
 |
|