linux-kernel - Re: [PATCH v5] configs: Introduce debug.config for CI-like setup

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20211115141042.GH641268@paulmck-ThinkPad-P17-Gen-1>
Date:   Mon, 15 Nov 2021 06:10:42 -0800
From:   "Paul E. McKenney" <paulmck@...nel.org>
To:     Qian Cai <quic_qiancai@...cinc.com>
Cc:     Andrew Morton <akpm@...ux-foundation.org>,
        Marco Elver <elver@...gle.com>,
        Dmitry Vyukov <dvyukov@...gle.com>,
        Daniel Thompson <daniel.thompson@...aro.org>,
        Masahiro Yamada <masahiroy@...nel.org>,
        Naresh Kamboju <naresh.kamboju@...aro.org>,
        Stephen Rothwell <sfr@...b.auug.org.au>,
        linux-kbuild@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH v5] configs: Introduce debug.config for CI-like setup

On Mon, Nov 15, 2021 at 08:47:54AM -0500, Qian Cai wrote:
> Some general debugging features like kmemleak, KASAN, lockdep, UBSAN etc
> help fix many viruses like a microscope. On the other hand, those features
> are scatter around and mixed up with more situational debugging options
> making them difficult to consume properly. This cold help amplify the
> general debugging/testing efforts and help establish sensitive default
> values for those options across the broad. This could also help different
> distros to collaborate on maintaining debug-flavored kernels.
> 
> The config is based on years' experiences running daily CI inside the
> largest enterprise Linux distro company to seek regressions on
> linux-next builds on different bare-metal and virtual platforms. It can be
> used for example,
> 
> $ make ARCH=arm64 defconfig debug.config
> 
> Since KASAN and KCSAN can't be enabled together, we will need to create a
> separate one for KCSAN later as well.
> 
> Signed-off-by: Qian Cai <quic_qiancai@...cinc.com>
> ---
> v5:
> - Removed CONFIG_RCU_CPU_STALL_TIMEOUT as an old bug had already been fixed
>   and now the default is sane.

Given this change, from an RCU perspective:

Acked-by: Paul E. McKenney <paulmck@...nel.org>

> - Updated the changelog for the motivation.
> - Rebased to v5.16-rc1.
> 
>  kernel/configs/debug.config | 105 ++++++++++++++++++++++++++++++++++++
>  1 file changed, 105 insertions(+)
>  create mode 100644 kernel/configs/debug.config
> 
> diff --git a/kernel/configs/debug.config b/kernel/configs/debug.config
> new file mode 100644
> index 000000000000..e9ffb0cc1eec
> --- /dev/null
> +++ b/kernel/configs/debug.config
> @@ -0,0 +1,105 @@
> +# The config is based on running daily CI for enterprise Linux distros to
> +# seek regressions on linux-next builds on different bare-metal and virtual
> +# platforms. It can be used for example,
> +#
> +# $ make ARCH=arm64 defconfig debug.config
> +#
> +# Keep alphabetically sorted inside each section.
> +#
> +# printk and dmesg options
> +#
> +CONFIG_DEBUG_BUGVERBOSE=y
> +CONFIG_DYNAMIC_DEBUG=y
> +CONFIG_PRINTK_CALLER=y
> +CONFIG_PRINTK_TIME=y
> +CONFIG_SYMBOLIC_ERRNAME=y
> +#
> +# Compile-time checks and compiler options
> +#
> +CONFIG_DEBUG_INFO=y
> +CONFIG_DEBUG_SECTION_MISMATCH=y
> +CONFIG_FRAME_WARN=2048
> +CONFIG_SECTION_MISMATCH_WARN_ONLY=y
> +#
> +# Generic Kernel Debugging Instruments
> +#
> +# CONFIG_UBSAN_ALIGNMENT is not set
> +# CONFIG_UBSAN_DIV_ZERO is not set
> +# CONFIG_UBSAN_TRAP is not set
> +# CONFIG_WARN_ALL_UNSEEDED_RANDOM is not set
> +CONFIG_DEBUG_FS=y
> +CONFIG_DEBUG_FS_ALLOW_ALL=y
> +CONFIG_DEBUG_IRQFLAGS=y
> +CONFIG_UBSAN=y
> +CONFIG_UBSAN_BOOL=y
> +CONFIG_UBSAN_BOUNDS=y
> +CONFIG_UBSAN_ENUM=y
> +CONFIG_UBSAN_SHIFT=y
> +CONFIG_UBSAN_UNREACHABLE=y
> +#
> +# Memory Debugging
> +#
> +# CONFIG_DEBUG_PAGEALLOC is not set
> +# CONFIG_DEBUG_KMEMLEAK_DEFAULT_OFF is not set
> +# CONFIG_DEBUG_RODATA_TEST is not set
> +# CONFIG_DEBUG_WX is not set
> +# CONFIG_KFENCE is not set
> +# CONFIG_PAGE_POISONING is not set
> +# CONFIG_SLUB_STATS is not set
> +CONFIG_PAGE_EXTENSION=y
> +CONFIG_PAGE_OWNER=y
> +CONFIG_DEBUG_KMEMLEAK=y
> +CONFIG_DEBUG_KMEMLEAK_AUTO_SCAN=y
> +CONFIG_DEBUG_OBJECTS=y
> +CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
> +CONFIG_DEBUG_OBJECTS_FREE=y
> +CONFIG_DEBUG_OBJECTS_PERCPU_COUNTER=y
> +CONFIG_DEBUG_OBJECTS_RCU_HEAD=y
> +CONFIG_DEBUG_OBJECTS_TIMERS=y
> +CONFIG_DEBUG_OBJECTS_WORK=y
> +CONFIG_DEBUG_PER_CPU_MAPS=y
> +CONFIG_DEBUG_STACK_USAGE=y
> +CONFIG_DEBUG_VIRTUAL=y
> +CONFIG_DEBUG_VM=y
> +CONFIG_DEBUG_VM_PGFLAGS=y
> +CONFIG_DEBUG_VM_RB=y
> +CONFIG_DEBUG_VM_VMACACHE=y
> +CONFIG_GENERIC_PTDUMP=y
> +CONFIG_KASAN=y
> +CONFIG_KASAN_GENERIC=y
> +CONFIG_KASAN_INLINE=y
> +CONFIG_KASAN_VMALLOC=y
> +CONFIG_PTDUMP_DEBUGFS=y
> +CONFIG_SCHED_STACK_END_CHECK=y
> +CONFIG_SLUB_DEBUG_ON=y
> +#
> +# Debug Oops, Lockups and Hangs
> +#
> +# CONFIG_BOOTPARAM_HUNG_TASK_PANIC is not set
> +# CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC is not set
> +CONFIG_DEBUG_ATOMIC_SLEEP=y
> +CONFIG_DETECT_HUNG_TASK=y
> +CONFIG_PANIC_ON_OOPS=y
> +CONFIG_PANIC_TIMEOUT=0
> +CONFIG_SOFTLOCKUP_DETECTOR=y
> +#
> +# Lock Debugging (spinlocks, mutexes, etc...)
> +#
> +# CONFIG_PROVE_RAW_LOCK_NESTING is not set
> +CONFIG_PROVE_LOCKING=y
> +#
> +# Debug kernel data structures
> +#
> +CONFIG_BUG_ON_DATA_CORRUPTION=y
> +#
> +# RCU Debugging
> +#
> +CONFIG_PROVE_RCU=y
> +CONFIG_PROVE_RCU_LIST=y
> +#
> +# Tracers
> +#
> +CONFIG_BRANCH_PROFILE_NONE=y
> +CONFIG_DYNAMIC_FTRACE=y
> +CONFIG_FTRACE=y
> +CONFIG_FUNCTION_TRACER=y
> -- 
> 2.30.2
>