linux-kernel-latest v5.2.3-1 (r4.0)

[qubesos-bot]

Update of linux-kernel-latest to v5.2.3-1 for Qubes r4.0, see comments below for details.

Built from: QubesOS/qubes-linux-kernel@d9f5315

Changes since previous version:
QubesOS/qubes-linux-kernel@d9f5315 Drop AFTER_LINK patch
QubesOS/qubes-linux-kernel@150288e Update to kernel-5.2.3
QubesOS/qubes-linux-kernel@9ec4071 Update WireGuard to 0.0.20190702

Referenced issues:

If you're release manager, you can issue GPG-inline signed command:

• Upload linux-kernel-latest d9f5315adac43fce54a01cc65226c4de9b4b680b r4.0 current repo (available 7 days from now)
• Upload linux-kernel-latest d9f5315adac43fce54a01cc65226c4de9b4b680b r4.0 current (dists) repo, you can choose subset of distributions, like vm-fc24 vm-fc25 (available 7 days from now)
• Upload linux-kernel-latest d9f5315adac43fce54a01cc65226c4de9b4b680b r4.0 security-testing repo

Above commands will work only if packages in current-testing repository were built from given commit (i.e. no new version superseded it).

[qubesos-bot]

Package for dom0 was built (build log) and uploaded to current-testing repository

[marmarek]

Report that VM kernel is broken: https://groups.google.com/d/msgid/qubes-users/d56aaeced965b2ebc33809adfe9f7052%40disroot.org
cc @fepitre

[m-v-b]

Hello @marmarek and @fepitre,

I debugged this issue a bit, and I currently think that this issue is related to the following commit introduced with Linux v5.2: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=df9bde015a72ffd978e39a750662c7cf579b1715

How did I arrive at this conclusion? In summary, the libxenvchan_client_init function fails due to the inability to mmap the /dev/xen/gntdev device node, which causes qubes-db daemon initialization to fail, breaking AppVM bootstrap. I think that the aforementioned commit unintendedly changed/broke the behaviour of the code, but I did not confirm this yet, so this is only a guess for now.

To confirm my guess, I am in the process of building a kernel with this commit reverted, and I will report back with my findings after testing the kernel I am building.

I hope that this helps!

Vefa

[marmarek]

Thanks!
I'm looking at it right now and I have similar conclusion for now (not verified yet).
Lets track it with a proper issue: QubesOS/qubes-issues#5199

[marmarek]

Superseded by #1268