mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-08-06 18:44:12 +00:00
packaging: kernel: Remove sev/snp/tdx specific stuff
Now we're using a "confidential" image that has support for all of those. Fixes: #9010 -- part II #8982 -- part II #8978 -- part II Signed-off-by: Fabiano Fidêncio <fabiano.fidencio@intel.com>
This commit is contained in:
parent
14f4480f12
commit
6c3338271b
@ -480,7 +480,7 @@ install_kernel_confidential() {
|
|||||||
install_kernel_helper \
|
install_kernel_helper \
|
||||||
"assets.kernel.confidential.version" \
|
"assets.kernel.confidential.version" \
|
||||||
"kernel-confidential" \
|
"kernel-confidential" \
|
||||||
"-x confidential -u ${kernel_url}"
|
"-x -u ${kernel_url}"
|
||||||
}
|
}
|
||||||
|
|
||||||
install_kernel_dragonball_experimental() {
|
install_kernel_dragonball_experimental() {
|
||||||
@ -507,7 +507,7 @@ install_kernel_nvidia_gpu_confidential() {
|
|||||||
install_kernel_helper \
|
install_kernel_helper \
|
||||||
"assets.kernel.confidential.version" \
|
"assets.kernel.confidential.version" \
|
||||||
"kernel-nvidia-gpu-confidential" \
|
"kernel-nvidia-gpu-confidential" \
|
||||||
"-x confidential -g nvidia -u ${kernel_url} -H deb"
|
"-x -g nvidia -u ${kernel_url} -H deb"
|
||||||
}
|
}
|
||||||
|
|
||||||
install_qemu_helper() {
|
install_qemu_helper() {
|
||||||
|
@ -110,7 +110,7 @@ Options:
|
|||||||
-t <hypervisor> : Hypervisor_target.
|
-t <hypervisor> : Hypervisor_target.
|
||||||
-u <url> : Kernel URL to be used to download the kernel tarball.
|
-u <url> : Kernel URL to be used to download the kernel tarball.
|
||||||
-v <version> : Kernel version to use if kernel path not provided.
|
-v <version> : Kernel version to use if kernel path not provided.
|
||||||
-x <type> : Confidential guest protection type, such as sev, snp, tdx, or "confidential" (for all of those).
|
-x : All the confidential guest protection type for a specific architecture.
|
||||||
EOF
|
EOF
|
||||||
exit "$exit_code"
|
exit "$exit_code"
|
||||||
}
|
}
|
||||||
@ -142,12 +142,8 @@ get_tee_kernel() {
|
|||||||
mkdir -p ${kernel_path}
|
mkdir -p ${kernel_path}
|
||||||
|
|
||||||
if [ -z "${kernel_url}" ]; then
|
if [ -z "${kernel_url}" ]; then
|
||||||
if [[ "${conf_guest}" == "tdx" ]]; then
|
|
||||||
kernel_url=$(get_from_kata_deps "assets.kernel-tdx-experimental.url")
|
|
||||||
else
|
|
||||||
kernel_url=$(get_from_kata_deps "assets.kernel.${tee}.url")
|
kernel_url=$(get_from_kata_deps "assets.kernel.${tee}.url")
|
||||||
fi
|
fi
|
||||||
fi
|
|
||||||
|
|
||||||
local kernel_tarball="${version}.tar.gz"
|
local kernel_tarball="${version}.tar.gz"
|
||||||
|
|
||||||
@ -262,7 +258,7 @@ get_kernel_frag_path() {
|
|||||||
info "Add kernel config for GPU due to '-g ${gpu_vendor}'"
|
info "Add kernel config for GPU due to '-g ${gpu_vendor}'"
|
||||||
# If conf_guest is set we need to update the CONFIG_LOCALVERSION
|
# If conf_guest is set we need to update the CONFIG_LOCALVERSION
|
||||||
# to match the suffix created in install_kata
|
# to match the suffix created in install_kata
|
||||||
# -nvidia-gpu-{snp|tdx}, the linux headers will be named the very
|
# -nvidia-gpu-confidential, the linux headers will be named the very
|
||||||
# same if build with make deb-pkg for TDX or SNP.
|
# same if build with make deb-pkg for TDX or SNP.
|
||||||
local gpu_configs=$(mktemp).conf
|
local gpu_configs=$(mktemp).conf
|
||||||
local gpu_subst_configs="${gpu_path}/${gpu_vendor}.${arch_target}.conf.in"
|
local gpu_subst_configs="${gpu_path}/${gpu_vendor}.${arch_target}.conf.in"
|
||||||
@ -457,7 +453,7 @@ build_kernel() {
|
|||||||
arch_target=$(arch_to_kernel "${arch_target}")
|
arch_target=$(arch_to_kernel "${arch_target}")
|
||||||
pushd "${kernel_path}" >>/dev/null
|
pushd "${kernel_path}" >>/dev/null
|
||||||
make -j $(nproc ${CI:+--ignore 1}) ARCH="${arch_target}" ${CROSS_BUILD_ARG}
|
make -j $(nproc ${CI:+--ignore 1}) ARCH="${arch_target}" ${CROSS_BUILD_ARG}
|
||||||
if [ "${conf_guest}" == "sev" ] || [ "${conf_guest}" == "confidential" ]; then
|
if [ "${conf_guest}" == "confidential" ]; then
|
||||||
make -j $(nproc ${CI:+--ignore 1}) INSTALL_MOD_STRIP=1 INSTALL_MOD_PATH=${kernel_path} modules_install
|
make -j $(nproc ${CI:+--ignore 1}) INSTALL_MOD_STRIP=1 INSTALL_MOD_PATH=${kernel_path} modules_install
|
||||||
fi
|
fi
|
||||||
[ "$arch_target" != "powerpc" ] && ([ -e "arch/${arch_target}/boot/bzImage" ] || [ -e "arch/${arch_target}/boot/Image.gz" ])
|
[ "$arch_target" != "powerpc" ] && ([ -e "arch/${arch_target}/boot/bzImage" ] || [ -e "arch/${arch_target}/boot/Image.gz" ])
|
||||||
@ -545,7 +541,7 @@ install_kata() {
|
|||||||
}
|
}
|
||||||
|
|
||||||
main() {
|
main() {
|
||||||
while getopts "a:b:c:deEfg:hH:k:mp:t:u:v:x:" opt; do
|
while getopts "a:b:c:deEfg:hH:k:mp:t:u:v:x" opt; do
|
||||||
case "$opt" in
|
case "$opt" in
|
||||||
a)
|
a)
|
||||||
arch_target="${OPTARG}"
|
arch_target="${OPTARG}"
|
||||||
@ -601,11 +597,7 @@ main() {
|
|||||||
kernel_version="${OPTARG}"
|
kernel_version="${OPTARG}"
|
||||||
;;
|
;;
|
||||||
x)
|
x)
|
||||||
conf_guest="${OPTARG}"
|
conf_guest="confidential"
|
||||||
case "$conf_guest" in
|
|
||||||
confidential|sev|snp|tdx) ;;
|
|
||||||
*) die "Confidential guest type '$conf_guest' not supported" ;;
|
|
||||||
esac
|
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
done
|
done
|
||||||
@ -645,12 +637,8 @@ main() {
|
|||||||
kernel_version=$(get_from_kata_deps "assets.kernel-dragonball-experimental.version")
|
kernel_version=$(get_from_kata_deps "assets.kernel-dragonball-experimental.version")
|
||||||
elif [[ "${conf_guest}" != "" ]]; then
|
elif [[ "${conf_guest}" != "" ]]; then
|
||||||
#If specifying a tag for kernel_version, must be formatted version-like to avoid unintended parsing issues
|
#If specifying a tag for kernel_version, must be formatted version-like to avoid unintended parsing issues
|
||||||
if [[ "${conf_guest}" == "tdx" ]]; then
|
|
||||||
kernel_version=$(get_from_kata_deps "assets.kernel-tdx-experimental.version" 2>/dev/null || true)
|
|
||||||
else
|
|
||||||
kernel_version=$(get_from_kata_deps "assets.kernel.${conf_guest}.version" 2>/dev/null || true)
|
kernel_version=$(get_from_kata_deps "assets.kernel.${conf_guest}.version" 2>/dev/null || true)
|
||||||
[ -n "${kernel_version}" ] || kernel_version=$(get_from_kata_deps "assets.kernel.${conf_guest}.tag")
|
[ -n "${kernel_version}" ] || kernel_version=$(get_from_kata_deps "assets.kernel.${conf_guest}.tag")
|
||||||
fi
|
|
||||||
else
|
else
|
||||||
kernel_version=$(get_from_kata_deps "assets.kernel.version")
|
kernel_version=$(get_from_kata_deps "assets.kernel.version")
|
||||||
fi
|
fi
|
||||||
|
@ -1 +1 @@
|
|||||||
124
|
125
|
||||||
|
Loading…
Reference in New Issue
Block a user