feat(seanfarm33): gate the forensics symbols, add ramoops/watchdog/lockdown kargs #89

Closed

sean wants to merge 0 commits from feat/seanfarm33-companions into trunk

sean commented

2026-08-15 07:32:01 +00:00

Owner

Companions to sean/linux PR #19 (seanfarm33 config audit; plan purrfect-doodling-garden).

linux-kernel Containerfile: hard gate +5 symbols (SECURITY_LOCKDOWN_LSM, PSTORE_RAM, PSI, LRU_GEN, SOFTLOCKUP_DETECTOR) — the defconfig drift trap only fails the build for gated symbols.

node-bootc: kargs reserve_mem/ramoops.mem_name (kernel-placed pstore region, no memmap address collisions), delayacct, lockdown=integrity; systemd RuntimeWatchdogSec=60s drop-in for softdog. All inert on older kernels — no ordering constraint against the kernel release.

Must merge (and node-bootc rebake) BEFORE the linux seanfarm33 release so the kargs ride the same roll.

Companions to sean/linux PR #19 (seanfarm33 config audit; plan purrfect-doodling-garden). linux-kernel Containerfile: hard gate +5 symbols (SECURITY_LOCKDOWN_LSM, PSTORE_RAM, PSI, LRU_GEN, SOFTLOCKUP_DETECTOR) — the defconfig drift trap only fails the build for gated symbols. node-bootc: kargs reserve_mem/ramoops.mem_name (kernel-placed pstore region, no memmap address collisions), delayacct, lockdown=integrity; systemd RuntimeWatchdogSec=60s drop-in for softdog. All inert on older kernels — no ordering constraint against the kernel release. Must merge (and node-bootc rebake) BEFORE the linux seanfarm33 release so the kargs ride the same roll.

sean added 1 commit

2026-08-15 07:32:01 +00:00

feat(seanfarm33): gate the forensics symbols, add ramoops/watchdog/lockdown kargs

pipeline/ci CI green @ 39e7a8f23a50

Details

39e7a8f23a

Companions to sean/linux PR #19 (the seanfarm33 config audit).

linux-kernel: the defconfig hard gate grows a second row —
SECURITY_LOCKDOWN_LSM, PSTORE_RAM, PSI, LRU_GEN, SOFTLOCKUP_DETECTOR.
The drift trap silently drops dep-unsatisfied options; a kernel that
ships without pstore or the lockup detectors defeats the
panic-and-self-heal posture while looking green.

node-bootc: kargs gain reserve_mem=2M:4096:oops + ramoops.mem_name
(the kernel places the region itself — no hand-picked memmap address
to collide with the initrd), delayacct, and lockdown=integrity. New
systemd drop-in pets /dev/watchdog0 (softdog): a wedge that stops the
pets hard-resets the node. Every arg is inert on an older kernel, so
karg and kernel changes need no ordering.

sean referenced this pull request

2026-08-15 07:50:45 +00:00

chore(images): bump ten VERSIONs for the ASD-STE100 Dockerfile comment rewrite #90

sean referenced this pull request

2026-08-15 10:30:16 +00:00

seanfarm33 train: VERSION bumps + forensics gate/kargs/watchdog (recut off trunk) #92

sean closed this pull request

2026-08-15 10:30:27 +00:00