t/linux: update to 5.15.125

This kernel contains additional handling and workarounds for Gather Data
Sampling aka Downfall (CVE-2022-40982) on Intel CPUs,
Inception (CVE-2023-20569) and Phantom (CVE-2022-23825) on AMD CPUs.

Performant workarounds for these issues also requires updated microcode
for both CPU vendors. Microcode for Intel has already been updated,
AMD's is not merged in linux-firmware yet.

Change-Id: I441c8c7b39a8eec0c42d1aac0375d0d15ec1703d
Reviewed-on: https://review.monogon.dev/c/monogon/+/2048
Reviewed-by: Leopold Schabel <leo@monogon.tech>
Tested-by: Jenkins CI
2 files changed
tree: e6f40f9ee469f824bd3f9bfceae3c6074f95990b
  1. .github/
  2. build/
  3. cloud/
  4. go/
  5. intellij/
  6. metropolis/
  7. net/
  8. third_party/
  9. tools/
  10. .bazelignore
  11. .bazelproject
  12. .bazelrc
  13. .bazelrc.sandboxroot
  14. .bazelversion
  15. .git-ignore-revs
  16. .gitignore
  17. BUILD.bazel
  18. CODING_STANDARDS.md
  19. go.mod
  20. go.sum
  21. LICENSE
  22. README.md
  23. SETUP.md
  24. shell.nix
  25. WORKSPACE
README.md

Monogon Monorepo

This is the main repository containing the source code for the Monogon Platform.

This is pre-release software - take a look, and check back later!

Environment

Our build environment is self-contained and requires only minimal host dependencies:

  • A Linux machine or VM.
  • Bazelisk >= v1.15.0
  • A reasonably recent kernel with user namespaces enabled.
  • Working KVM with access to /dev/kvm (if you want to run tests).

Our docs assume that Bazelisk is available as bazel on your PATH.

Refer to SETUP.md for detailed instructions.

Monogon OS

Run a single node demo cluster

Build CLI and node image:

bazel build //metropolis/cli/dbg //:launch -c dbg

Launch an ephemeral test node:

bazel test //:launch -c dbg --test_output=streamed

Run a kubectl command while the test is running:

bazel-bin/metropolis/cli/dbg/dbg_/dbg kubectl describe node

Test suite

Run full test suite:

bazel test -c dbg //...