]> xenbits.xensource.com Git - people/wipawel/livepatch-build-tools/commit
livepatch-build: Embed hypervisor build id into every hotpatch
authorPawel Wieczorkiewicz <wipawel@amazon.de>
Wed, 3 Oct 2018 15:14:40 +0000 (15:14 +0000)
committerPawel Wieczorkiewicz <wipawel@amazon.de>
Thu, 8 Aug 2019 09:54:02 +0000 (09:54 +0000)
commitb1ce159e7b7aa286b0f8040f12d5380cf15a8a60
tree7bded5964cf312dbf14cfe554272a9bcb8264761
parentd645f3748b2c57195c971fe8b139271b7996c319
livepatch-build: Embed hypervisor build id into every hotpatch

This change is part of a independant stacked hotpatch modules
feature. This feature allows to bypass dependencies between modules
upon loading, but still verifies Xen build ID matching.

With stacked hotpatch modules it is essential that each and every
hotpatch is verified against the hypervisor build id upon upload.
It must not be possible to successfully upload hotpatches built for
incorrect version of the hypervisor.

To achieve that always embed an additional ELF section:
'.livpatch.xen_depends' containing the hypervisor build id.

The hypervisor build id must be always provided as a command line
parameter: --xen-depends.

Signed-off-by: Pawel Wieczorkiewicz <wipawel@amazon.de>
Reviewed-by: Andra-Irina Paraschiv <andraprs@amazon.com>
Reviewed-by: Bjoern Doebel <doebel@amazon.de>
Reviewed-by: Norbert Manthey <nmanthey@amazon.de>
livepatch-build