lp:~xnox/ubuntu/+source/linux/+git/focal

Author: Dimitri John Ledkov
Author Date: 2021-06-15 15:40:04 UTC

UBUNTU: [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys

BugLink: https://bugs.launchpad.net/bugs/1932029
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
(cherry picked from commit 741f622c4dbc162b82f8c9045f9c6c6446f57eb5)
(xnox: cherry-pick is from impish:linux)
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>

Author: Dimitri John Ledkov
Author Date: 2021-06-15 15:40:04 UTC

UBUNTU: [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys

BugLink: https://bugs.launchpad.net/bugs/1932029
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
Signed-off-by: Andrea Righi <andrea.righi@canonical.com>
(cherry picked from commit 741f622c4dbc162b82f8c9045f9c6c6446f57eb5)
(xnox: cherry-pick is from impish:linux)
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>

Author: Stefan Bader
Author Date: 2021-09-24 13:50:10 UTC

UBUNTU: Ubuntu-5.4.0-89.100

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

Author: Stefan Bader
Author Date: 2021-09-24 13:50:10 UTC

UBUNTU: Ubuntu-5.4.0-89.100

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

Author: David Rientjes
Author Date: 2021-09-23 23:51:00 UTC

KVM: SVM: Periodically schedule when unregistering regions on destroy

There may be many encrypted regions that need to be unregistered when a
SEV VM is destroyed. This can lead to soft lockups. For example, on a
host running 4.15:

watchdog: BUG: soft lockup - CPU#206 stuck for 11s! [t_virtual_machi:194348]
CPU: 206 PID: 194348 Comm: t_virtual_machi
RIP: 0010:free_unref_page_list+0x105/0x170
...
Call Trace:
 [<0>] release_pages+0x159/0x3d0
 [<0>] sev_unpin_memory+0x2c/0x50 [kvm_amd]
 [<0>] __unregister_enc_region_locked+0x2f/0x70 [kvm_amd]
 [<0>] svm_vm_destroy+0xa9/0x200 [kvm_amd]
 [<0>] kvm_arch_destroy_vm+0x47/0x200
 [<0>] kvm_put_kvm+0x1a8/0x2f0
 [<0>] kvm_vm_release+0x25/0x30
 [<0>] do_exit+0x335/0xc10
 [<0>] do_group_exit+0x3f/0xa0
 [<0>] get_signal+0x1bc/0x670
 [<0>] do_signal+0x31/0x130

Although the CLFLUSH is no longer issued on every encrypted region to be
unregistered, there are no other changes that can prevent soft lockups for
very large SEV VMs in the latest kernel.

Periodically schedule if necessary. This still holds kvm->lock across the
resched, but since this only happens when the VM is destroyed this is
assumed to be acceptable.

Signed-off-by: David Rientjes <rientjes@google.com>
Message-Id: <alpine.DEB.2.23.453.2008251255240.2987727@chino.kir.corp.google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
(cherry picked from commit 7be74942f184fdfba34ddd19a0d995deb34d4a03)
CVE-2020-36311
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

Author: Stefan Bader
Author Date: 2021-09-24 08:40:49 UTC

UBUNTU: Ubuntu-hwe-5.11-5.11.0-37.41~20.04.2

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

Author: Stefan Bader
Author Date: 2021-09-24 08:40:49 UTC

UBUNTU: Ubuntu-hwe-5.11-5.11.0-37.41~20.04.2

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

Author: Dimitri John Ledkov
Author Date: 2021-09-20 11:52:49 UTC

UBUNTU: [Packaging] Re-enable dbgsyms

BugLink: https://bugs.launchpad.net/bugs/1939287

During v5.13 cycle, debug symbols building got fixed by running
install step during build, instead of binary. Allowing to build
multiple flavours with debug symbols without breaching disk space on
Launchpad builder.

The packaging change that disabled dbgsyms unconditionally however
remained in the hwe-5.13 packaging, but can now be safely reverted to
reenable debug symbols builds.

Fixes: a175d9b3c0 ("UBUNTU: [Packaging] Initial packaging import from linux-hwe-5.13")
Link: https://bugs.launchpad.net/bugs/1930713
Acked-by: Tim Gardner <tim.gardner@canonical.com>
Acked-by: Andrea Righi <andrea.righi@canonical.com>
Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>

Author: Thadeu Lima de Souza Cascardo
Author Date: 2021-09-17 18:35:10 UTC

UBUNTU: Ubuntu-5.4.0-86.97

Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>

Author: Andrea Righi
Author Date: 2021-08-24 13:51:26 UTC

UBUNTU: Ubuntu-hwe-5.13-5.13.0-14.14~20.04.3

Signed-off-by: Andrea Righi <andrea.righi@canonical.com>

Author: Stefan Bader
Author Date: 2021-08-13 12:19:52 UTC

UBUNTU: Ubuntu-hwe-5.8-5.8.0-65.73

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>