Opened 7 years ago

Closed 6 years ago

#7014 closed task (fixed)

8.1.1 Candidate Builds

Reported by: mstone Owned by: dgilmore
Priority: normal Milestone: 8.1.1 (was Update1.1)
Component: distro Version:
Keywords: Cc: sayamindu, dgilmore, mstone, kimquirk, sj, bernie, carrano, jcardona, mbletsas, dwmw2, Blaketh, dilinger, rsmith, wmb@…, cscott, dsaxena, joe
Blocked By: Blocking:
Deployments affected: Action Needed: finalize
Verified: no

Description

Dennis: please prepare a build with the 703 package-set +

  xkeyboard-config-1.1-17.20071130cvs.olpc2
  olpc-utils-0.73-1.olpc2

I expect that this build will fix

#6945, #6973, #5746, #6631, and #6767.

Everyone else: please help write test procedures which can be used to close these bugs and please review the relevant patches in the olpc-utils and xkeyboard-config source repositories.

Change History (18)

comment:1 Changed 7 years ago by mstone

704 was built by dgilmore on May 15 and it passed a smoke-test by Michael. Unfortunately, Kim Quirk discovered that the KL tag on SKU 11 (Ethiopia) machines contains the value "us, et" rather than the expected "us,et". She also discovered that 704 did not completely fix #6973, as is documented in that ticket. This means that a second attempt is necessary.

comment:2 follow-up: Changed 7 years ago by mstone

  • Cc carrano jcardona mbletsas dwmw2 Blaketh added

Dennis: please prepare build 705 with the 703 package-set +

xkeyboard-config-1.1-19.20071130cvs.olpc2
olpc-utils-0.74-1.olpc2

and please prepare build 706 with the 703 package-set +

xkeyboard-config-1.1-19.20071130cvs.olpc2
olpc-utils-0.74-1.olpc2
kernel-2.6.22-20080523.1.olpc.28f4cb6e780db07.i586
xorg-x11-drv-evdev-1.2.0-3norel.olpc2
xorg-x11-server-1.4-9.olpc2

The latter three source packages (and their binary results) are available from commit 646f72ae79de328b6b2e8ab184e29bf8376886f8 of the joyride package collector on xs-dev.laptop.org or, directly, from dev.l.o:/home/mstone/public_rpms/joyride.

The xorg packages were scratch-built in koji and can be officially built there by someone with appropriate ACLs. The binary kernel was manually constructed by running dilinger's instructions

http://wiki.laptop.org/go/Rebuilding_OLPC_kernel#Building_the_RPM_.28from_scratch.29

inside a fedora-7-i586 mock chroot. (Note the "i586" architecture target!)

The kernel source code is published at http://dev.laptop.org/git?p=users/mstone/olpc-2.6;a=shortlog;h=stable as I lack the credentials necessary to push to the main olpc-2.6 repository.

I expect that build 705 will fix #6945, #6973, #5746, #6631, and #6767.
I am hopeful that build 706 will fix (#6945, #6973, #5746, #6631, #6767) and (#5268, #6079, #1002, #4260).

The kernel I am interested in using for 706 also contains several weeks of "stable" libertas driver updates & related wireless changes. Wireless folks: please let me know promptly which tickets need to be checked in order to evaluate the quality of this kernel.

comment:3 Changed 7 years ago by mstone

  • Cc dilinger added

comment:4 in reply to: ↑ 2 Changed 7 years ago by carrano

The kernel I am interested in using for 706 also contains several weeks of "stable" libertas driver updates & related wireless changes. Wireless folks: please let me know promptly which tickets need to be checked in order to evaluate the quality of this kernel.

This kernel plus firmware release 22.p14 (#6993) will fix: #4616, #6709, #4927, #6589 and #6869#comment:1 and introduce new features to program the active antennae (#6823) and two filters necessary to operate under suspend: the multicast filter (#6818) and the signature based filter (#6527).

(*) Dennis, would you please also include the firmware (#6993) on the next build?

comment:5 Changed 7 years ago by mstone

Please include libertas firmware 22.p14 from #6993 in build 706.

comment:6 follow-up: Changed 7 years ago by mstone

  • Cc rsmith wmb@… cscott added

Testing of 706 has gone fairly well but we discovered both an Amharic keyboard glitch (#6945 cont'd) and an OFW issue (#7112) which need to be resolved. Also, we learned that I had forgotten a collection of sugar patches prepared by Tomeu for issues #3486, #3611, #4084, and #5904.

Dennis: please prepare build 707 with the 706 package-set +

xkeyboard-config-1.1-20.20071130cvs.olpc2

and please prepare build 708 with the 706 package-set +

xkeyboard-config-1.1-20.20071130cvs.olpc2
bootfw-q2d16-1.olpc2
sugar-0.75.15-1.olpc2

Mitch/Richard: could you please fill out the wiki documentation for Q2D16 at http://wiki.laptop.org/go/OLPC_Firmware_q2d16 in order to make Q2D16 official?

Mitch/Richard/Scott/???: who is responsible for the security audit of Q2D16? (I need to follow up with this person in order to complete the appropriate documentation).

comment:7 Changed 7 years ago by mstone

Similarly, who wants to do the security review of the kernel changes from the 703 kernel (f3687aa7e09fd65) to the 706 kernel (28f4cb6e780db07)?

(Commits are published in git://dev.laptop.org/users/mstone/olpc-2.6).

comment:8 follow-up: Changed 7 years ago by cscott

Richard or Mitch should sign off on Q2D16.

dilinger or dwmw2 should sign off on the kernel patches, unless deepak wants to cut his teeth reviewing them.

comment:9 Changed 7 years ago by dsaxena

  • Cc dsaxena added

comment:10 in reply to: ↑ 8 Changed 7 years ago by dsaxena

Replying to cscott:

Richard or Mitch should sign off on Q2D16.

dilinger or dwmw2 should sign off on the kernel patches, unless deepak wants to cut his teeth reviewing them.

I can take a look at them. Do I just ACK the commits on here or is there some other process to follow? I don't have my accounts on the git server setup yet AFAIK, so I can't push any changes to repo if that is required.

comment:11 follow-up: Changed 7 years ago by mstone

Deepak - your review would be much appreciated. Previous review of the PenTablet changes did not discuss security issues.
I'm not sure of the extent to which the libertas commits have been reviewed for security issues. We're mainly looking for sanity checks, privilege escalation attacks, and warning signs like careless pointer dereferencing. Firmware security issues are discussed separately. Finally, if you have not already done so, please send a non-weak RSA SSH key and a username to sysadmin@…. We'll set up accounts on appropriate machines.

comment:12 Changed 7 years ago by mstone

  • Cc joe added

comment:13 Changed 7 years ago by mstone

  • Summary changed from Build Request: 704 to 8.1.1 Candidate Builds

comment:14 in reply to: ↑ 6 Changed 7 years ago by wmb@…

Mitch/Richard: could you please fill out the wiki documentation for Q2D16 at http://wiki.laptop.org/go/OLPC_Firmware_q2d16 in order to make Q2D16 official?

Done.

comment:15 in reply to: ↑ 11 Changed 7 years ago by dsaxena

Replying to mstone:

Deepak - your review would be much appreciated. Previous review of the PenTablet changes did not discuss security issues.
I'm not sure of the extent to which the libertas commits have been reviewed for security issues. We're mainly looking for sanity checks, privilege escalation attacks, and warning signs like careless pointer dereferencing. Firmware security issues are discussed separately. Finally, if you have not already done so, please send a non-weak RSA SSH key and a username to sysadmin@…. We'll set up accounts on appropriate machines.

Looked at the patches and don't see any issues.

comment:16 Changed 7 years ago by mstone

Builds 707 and 708 are now available for testing. Let's start with 708.

comment:17 Changed 6 years ago by coderanger

  • Action Needed set to finalize

comment:18 Changed 6 years ago by gregorio

  • Resolution set to fixed
  • Status changed from new to closed
Note: See TracTickets for help on using tickets.