{"id":2221586,"url":"http://patchwork.ozlabs.org/api/1.1/patches/2221586/?format=json","web_url":"http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/20260409204629.459523-1-john.cabaj@canonical.com/","project":{"id":15,"url":"http://patchwork.ozlabs.org/api/1.1/projects/15/?format=json","name":"Ubuntu Kernel","link_name":"ubuntu-kernel","list_id":"kernel-team.lists.ubuntu.com","list_email":"kernel-team@lists.ubuntu.com","web_url":null,"scm_url":null,"webscm_url":null},"msgid":"<20260409204629.459523-1-john.cabaj@canonical.com>","date":"2026-04-09T20:46:29","name":"[SRU,R:linux-signed] UBUNTU: [Packaging] removing \"-fde\" suffixes from packaging","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"85a7f1dc0b4c7b0e10e4c6061ac6de2f6b353512","submitter":{"id":85032,"url":"http://patchwork.ozlabs.org/api/1.1/people/85032/?format=json","name":"John Cabaj","email":"john.cabaj@canonical.com"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/20260409204629.459523-1-john.cabaj@canonical.com/mbox/","series":[{"id":499359,"url":"http://patchwork.ozlabs.org/api/1.1/series/499359/?format=json","web_url":"http://patchwork.ozlabs.org/project/ubuntu-kernel/list/?series=499359","date":"2026-04-09T20:46:29","name":"[SRU,R:linux-signed] UBUNTU: [Packaging] removing \"-fde\" suffixes from packaging","version":1,"mbox":"http://patchwork.ozlabs.org/series/499359/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2221586/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2221586/checks/","tags":{},"headers":{"Return-Path":"<kernel-team-bounces@lists.ubuntu.com>","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (4096-bit key;\n unprotected) header.d=canonical.com header.i=@canonical.com\n header.a=rsa-sha256 header.s=20251003 header.b=HGhMoYd5;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com\n (client-ip=185.125.189.65; helo=lists.ubuntu.com;\n envelope-from=kernel-team-bounces@lists.ubuntu.com;\n receiver=patchwork.ozlabs.org)"],"Received":["from lists.ubuntu.com (lists.ubuntu.com [185.125.189.65])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fsBn06HS3z1y05\n\tfor <incoming@patchwork.ozlabs.org>; Fri, 10 Apr 2026 06:46:44 +1000 (AEST)","from localhost ([127.0.0.1] helo=lists.ubuntu.com)\n\tby lists.ubuntu.com with esmtp (Exim 4.86_2)\n\t(envelope-from <kernel-team-bounces@lists.ubuntu.com>)\n\tid 1wAwGo-0000m1-5f; Thu, 09 Apr 2026 20:46:34 +0000","from smtp-relay-internal-1.internal ([10.131.114.114]\n helo=smtp-relay-internal-1.canonical.com)\n by lists.ubuntu.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)\n (Exim 4.86_2) (envelope-from <john.cabaj@canonical.com>)\n id 1wAwGm-0000lm-99\n for kernel-team@lists.ubuntu.com; Thu, 09 Apr 2026 20:46:32 +0000","from mail-qv1-f70.google.com (mail-qv1-f70.google.com\n [209.85.219.70])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by smtp-relay-internal-1.canonical.com (Postfix) with ESMTPS id 2D5263F13F\n for <kernel-team@lists.ubuntu.com>; Thu,  9 Apr 2026 20:46:32 +0000 (UTC)","by mail-qv1-f70.google.com with SMTP id\n 6a1803df08f44-8a275472d89so22392876d6.1\n for <kernel-team@lists.ubuntu.com>; Thu, 09 Apr 2026 13:46:32 -0700 (PDT)","from smtp.gmail.com\n (h208-73-92-250.mdtnwi.broadband.dynamic.tds.net. [208.73.92.250])\n by smtp.gmail.com with ESMTPSA id\n 6a1803df08f44-8ac84d0c6d5sm5196436d6.49.2026.04.09.13.46.30\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Thu, 09 Apr 2026 13:46:30 -0700 (PDT)"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=canonical.com;\n s=20251003; t=1775767592;\n bh=hFEI6jWx1PDdcHwy2iycjAc9e/SlS07ER/Vx7MNn8Jc=;\n h=From:To:Cc:Subject:Date:Message-ID:MIME-Version;\n b=HGhMoYd5I/1ulKR5n5u0fYEaToee4po3JQJUmK4NSSyT8RrTYXPyDvjIqUbyixsO3\n o5sxfoa9VM0IDqj7fzjQlaJVHU3BI+rwJGGCQd/qep7qQxWDhfxABzugvFVq/XimGd\n H8Wbi0bcSgrO2ulYixRya73NOo0vgMdV9913cBSqh36bKSBUFUdLhqR1dclELDEgym\n cDz3Ukud8JylLwkrfuQ/m47F33QJ5DIyfE06KoCa7Gb/kfY5ZQReTjucdmCZ6DYlM1\n 8InMbksB9XFpyHr2IrMf+V/D2ccKzwkaRT2TeE0NxWcKWeNKqcIrpjd7qeFZ5dBNAa\n rIjluxMbkdm91PwCglJ9+dH46SJRiuWkT9xso9Qj+OtgvV9ik68/d4gLYwnt2L1kM4\n ilImb4tcYRy46WzUsqzwHscTeK3EwdJ3XoZdOE6C6NvubGOH9vcBrZJp7MHPxuufvj\n FHoqNHTEJg2bdxaV8JSuh3DnSeUBaBN+o/rd3JNS3zcEkIqAwp9ObGL2xBX8AQrkeV\n cS3HEfShXSJhIOm78lbovMPBisgdkYuhGgl2cK9W7ds+E/IgkwWuA4f0SRV4DprfuK\n vabPcOe0nlZgNv5ufK5CDO0+Vxte2sworKWuMBe3qOgTz+Mu+AVukt9rhKmH5Sg8rJ\n oWNGxCvrI3OkRGeZlxgo44qw=","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1775767591; x=1776372391;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=hFEI6jWx1PDdcHwy2iycjAc9e/SlS07ER/Vx7MNn8Jc=;\n b=GreIOKC/mpi34g8XzKFOH3FkTkKfNPRk4nWBk9bw4SyIEtBbVm8pfmuCCQyHTlQJU7\n VO0yhaTCpMpI5ba4VXb0RAiehwOa7le48MjgoBbQlO/Jvn0GZ7w6UzpXqmhXk+D/dcIU\n X48CuRqUCBO6IvV3KX23p3nhd/iTdTwVb9kXb0GiJh/VcBxcC2sCr3bXyJpn3cyrHFsE\n /x7HsRCPzNx6Ma6aIYlAYcDVOkocA+dprBl0ldciiAeZnh0ge0onV/Us0/MxgHtHMxXe\n juVEzmGdlzd9G2idwzMTKKJyJ1vsLboIBhCcTt1OzwafmUuer98JWTakVCtDOETeHHUL\n piOw==","X-Gm-Message-State":"AOJu0YwL5YVgWtiHqa0h8xIAP+qyNprjFG10OdD9GYoEl34EHwNCZDbL\n 31XeCD0wCDQsdbKCFwGqDXhm0sJt6sVRMJxpONMxrWooZpv6JMGr0WJVWMAPJrXUu8uZgSMmaRM\n fdF0Ws1a4W2CbEKlfNcDDYCTyg27QK6jyv7/pN7k2F7ul3msdP71c/sgJrc1ySVX46lIX/zvb6R\n UQ3GwJlnsUh9cA4w==","X-Gm-Gg":"AeBDieuVZw6mlFXzhCKpxnPXetiNcWVx2upAYOkSoST8DaC5DFOubSnW2VEnR/ZUR/o\n UM2rfA/+LJ2r0V+q/R5Yd3m9Ri+6yd/0g790goGLkW3sr1Au8HBeiP4OdeQ4MVQvNmlaUjjpEnY\n VBXDDFxAGRtxqZc0spMVAiJL5AYnTIvN/shhfsxw1nMyaSMVcch/k0lpKNachTK7uVd+5dxirPD\n K6rVRzfUERMuVvb0RUOf5oc0NfNJYRaXTKzczR2GLXc6pdZBKvxf3F7NpjKDHbuhYkWQsBmU8+g\n o/crxAqkkBboxtcSdi6fwnwKAvHASDsEvMeSyR2CNsfVGMf7knykEez0FfcQWTtgSrH/KD49ehN\n g99G+nTlzMNIP3u4mFsbQPKKYhHQvu307KotUicwxnCfYEgE7FhkaA2Wn81oCTQeMIalOEX/3DU\n gV4/jByTKthg==","X-Received":["by 2002:ad4:5de4:0:b0:8a0:4e92:c455 with SMTP id\n 6a1803df08f44-8ac860c7ef4mr6113606d6.2.1775767591164;\n Thu, 09 Apr 2026 13:46:31 -0700 (PDT)","by 2002:ad4:5de4:0:b0:8a0:4e92:c455 with SMTP id\n 6a1803df08f44-8ac860c7ef4mr6113346d6.2.1775767590780;\n Thu, 09 Apr 2026 13:46:30 -0700 (PDT)"],"From":"John Cabaj <john.cabaj@canonical.com>","To":"kernel-team@lists.ubuntu.com","Subject":"[SRU][R:linux-signed][PATCH] UBUNTU: [Packaging] removing \"-fde\"\n suffixes from packaging","Date":"Thu,  9 Apr 2026 15:46:29 -0500","Message-ID":"<20260409204629.459523-1-john.cabaj@canonical.com>","X-Mailer":"git-send-email 2.43.0","MIME-Version":"1.0","X-BeenThere":"kernel-team@lists.ubuntu.com","X-Mailman-Version":"2.1.20","Precedence":"list","List-Id":"Kernel team discussions <kernel-team.lists.ubuntu.com>","List-Unsubscribe":"<https://lists.ubuntu.com/mailman/options/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe>","List-Archive":"<https://lists.ubuntu.com/archives/kernel-team>","List-Post":"<mailto:kernel-team@lists.ubuntu.com>","List-Help":"<mailto:kernel-team-request@lists.ubuntu.com?subject=help>","List-Subscribe":"<https://lists.ubuntu.com/mailman/listinfo/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe>","Content-Type":"text/plain; charset=\"utf-8\"","Content-Transfer-Encoding":"base64","Errors-To":"kernel-team-bounces@lists.ubuntu.com","Sender":"\"kernel-team\" <kernel-team-bounces@lists.ubuntu.com>"},"content":"This appears to be a holdover from when \"-fde\" kernels were\nprovided by a separate kernel, fully dependent on its existance\n(eg. linux-azure kernel containing linux-azure-fde packaging).\n\nFor historical reference, this lead to issues of \"-fde\" kernels\nnot being properly tested and otherwise losing visibility in\nseveral important areas of our infrastructure.\n\nIn the case of linux-azure-fde, it's now provided as a completely\nseparate kernel tree, rather than some type of indirect flavour.\nFor the purposes of the packaging here, I propose we remove any\nhardcoding of \"-fde\" to a kernel package name. The \"fde\"\nconsiderations should be made at the base kernel level,\nand packaging provided by a distinct \"fde\" kernel.\n\nSigned-off-by: John Cabaj <john.cabaj@canonical.com>\n---\n debian/scripts/generate_control.py | 4 ++--\n debian/scripts/signed-install      | 3 ---\n 2 files changed, 2 insertions(+), 5 deletions(-)","diff":"diff --git a/debian/scripts/generate_control.py b/debian/scripts/generate_control.py\nindex 3147a9c..836cb85 100755\n--- a/debian/scripts/generate_control.py\n+++ b/debian/scripts/generate_control.py\n@@ -131,7 +131,7 @@ def gen_binpkgs(signing: Signing, args: Namespace):\n             dedent(\n                 f\"\"\"\\\n \n-            Package: linux-image-{args.abi_version}-{flavour}-fde\n+            Package: linux-image-{args.abi_version}-{flavour}\n             Architecture: {\" \".join(archs)}\n             Depends: ${{unsigned:Depends}}\n             Recommends: ${{cvm:Recommends}}\n@@ -212,7 +212,7 @@ def gen_dbgsym_binpkgs(signing: Signing, args: Namespace):\n             dedent(\n                 f\"\"\"\\\n \n-            Package: linux-image-{args.abi_version}-{flavour}-fde-dbgsym\n+            Package: linux-image-{args.abi_version}-{flavour}-dbgsym\n             Section: devel\n             Architecture: {\" \".join(archs)}\n             Depends: linux-image-unsigned-{args.abi_version}-{flavour}-dbgsym\ndiff --git a/debian/scripts/signed-install b/debian/scripts/signed-install\nindex e1827a1..438dd54 100755\n--- a/debian/scripts/signed-install\n+++ b/debian/scripts/signed-install\n@@ -12,9 +12,6 @@ do\n \tsigned=\"SIGNED/$instfile-$verflav\"\n \n \tcase \" $options \" in\n-\t*' --cvm '*)\n-\t\tpackage=\"linux-image-$verflav-fde\"\n-\t\t;;\n \t*' --uc '*)\n \t\tpackage=\"linux-image-uc-$verflav\"\n \t\t;;\n","prefixes":["SRU","R:linux-signed"]}