[CIQ 6.12] Rebase to v6.12.77

.github/workflows/build-check_aarch64-64k-debug.yml

@@ -0,0 +1,37 @@
+name: aarch64-64k-debug CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build-arm64
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-aarch64-64k-debug.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_aarch64-64k.yml

@@ -0,0 +1,37 @@
+name: aarch64-64k CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build-arm64
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-aarch64-64k.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_aarch64-debug.yml

@@ -0,0 +1,37 @@
+name: aarch64-debug CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build-arm64
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-aarch64-debug.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_aarch64.yml

@@ -0,0 +1,37 @@
+name: aarch64 CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build-arm64
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-aarch64.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_x86_64-debug.yml

@@ -0,0 +1,37 @@
+name: x86_64-debug CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-x86_64-debug.config .config
+          make olddefconfig
+          make -j$(nproc)

.github/workflows/build-check_x86_64.yml

@@ -0,0 +1,37 @@
+name: x86_64 CI
+on:
+  pull_request:
+    branches:
+      - '**'
+      - '!mainline'
+
+jobs:
+  kernel-build-job:
+    runs-on:
+      labels: kernel-build
+    container:
+      image: rockylinux/rockylinux:9
+      env:
+        ROCKY_ENV: rocky9
+      ports:
+        - 80
+      options: --cpus 8
+    steps:
+      - name: Install tools and Libraries
+        run: |
+          dnf update -y
+          dnf install 'dnf-command(config-manager)' -y
+          dnf config-manager --set-enabled devel
+          dnf groupinstall 'Development Tools' -y
+          dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: "${{ github.event.pull_request.head.sha }}"
+          fetch-depth: 0
+      - name: Build the Kernel
+        run: |
+          git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
+          cp ciq/configs/kernel-x86_64.config .config
+          make olddefconfig
+          make -j$(nproc)

arch/x86/kernel/setup.c

@@ -904,6 +904,8 @@ void __init setup_arch(char **cmdline_p)
 	if (efi_enabled(EFI_BOOT))
 		efi_init();
 
+	efi_set_secure_boot(boot_params.secure_boot);
+
 	reserve_ibft_region();
 	x86_init.resources.dmi_setup();
 
@@ -1070,20 +1072,6 @@ void __init setup_arch(char **cmdline_p)
 	/* Allocate bigger log buffer */
 	setup_log_buf(1);
 
-	if (efi_enabled(EFI_BOOT)) {
-		switch (boot_params.secure_boot) {
-		case efi_secureboot_mode_disabled:
-			pr_info("Secure boot disabled\n");
-			break;
-		case efi_secureboot_mode_enabled:
-			pr_info("Secure boot enabled\n");
-			break;
-		default:
-			pr_info("Secure boot could not be determined\n");
-			break;
-		}
-	}
-
 	reserve_initrd();
 
 	acpi_table_upgrade();

ciq/SOURCES/README.rst

@@ -0,0 +1,9 @@
+=====================
+CIQ Kernel Source Tree
+=====================
+
+The kernel spec and supporting sources are maintained under ``ciq/`` in the
+source tree rather than in a separate dist-git repository.
+
+Build artifacts (tarballs, SRPMs) are generated using the scripts in
+``ciq/SOURCES/``. See ``generate_tarball.sh`` to create the source tarball.

ciq/SOURCES/ciq_sb_kernel.crt

@@ -0,0 +1,35 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

ciq/SOURCES/ciq_sb_kernel_aarch64.crt

@@ -0,0 +1,36 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

ciq/SOURCES/ciq_sb_uki.crt

@@ -0,0 +1,36 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----