Repository navigation
Authorize the signer PCI interrupt fix - #11
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Authorize signer source c42c1966e2b82d7d40e9fe7c190ef21191414263, which backports merged Hermit kernel PR #2611 to configure legacy PCI interrupts as level triggered and active low. The test VM currently shares IRQ 10 between its network and virtiofs devices with the old edge/high configuration. MTU remains 9000.
Advance the disposable deployment policy to revision 11 and the prepared production policy to revision 4. Key fingerprints, workflow identities, branch constraints, and application policy stay unchanged. Production keys and Play publishing remain inactive; the rebuilt image still needs the disposable live signing reliability test before production cutover.
Validation: actual prepared-kernel PCI IRQ discovery and simulated IOAPIC register programming tests pass, including shared lines, unchanged ISA lines, reserved IRQ rejection, and destination/vector preservation. Existing timer and eventfd regressions pass. Hermit release image built successfully (SHA-256 ee1cb0f77add54c8f6ac65609aa45896f61a50e34f94e05748535968c0adb6c6). The preceding image also completed the migrated live flow with 12 independent cryptographic checks and 26 published asset digest checks.