Skip to content

Conversation

@github-actions
Copy link

@github-actions github-actions bot commented Nov 4, 2025

Summary

This PR has been automatically created after successful completion of all CI stages.

Commit Message(s)

Add automated kernel CI workflow with kselftest and PR creation

Implements a 5-stage GitHub Actions pipeline for automated kernel testing and PR creation.
Uses kernel-container-build automated-testing-v1 branch for build/test tooling.
Add a condition for github action to run

Currently, this github action has been tested only
on 9.2 CIQ LTS kernel so just add that branch as a
condition to run the test.
Add PR body generation script

Script to generate detailed PR descriptions with kselftest results.
Add [skip ci] and [ci skip] support to workflow

- Workflow now checks commit message for [skip ci] or [ci skip]
- If either flag is present, the entire workflow is skipped
- Allows developers to push changes without triggering CI when not needed
Create a PR only if curly braces are present in the Branch name

Signed-off-by: Shreeya Patel <[email protected]>
Use target branch name into the PR subject line

Signed-off-by: Shreeya Patel <[email protected]>
Fix force pushes logic

Signed-off-by: Shreeya Patel <[email protected]>
Add .container_build_image and remove -c flag from workflow

- Created .container_build_image with lts-9.2-kernel-builder
- Updated workflow to remove -c option from build_kernel.sh call
- Build script will now automatically use the image specified in .container_build_image
Remove complex merge base logic

Signed-off-by: Shreeya Patel <[email protected]>
Fix PR creation commit message extraction

Signed-off-by: Shreeya Patel <[email protected]>
Minor fixes 1

Signed-off-by: Shreeya Patel <[email protected]>
Minor fixes 2

Signed-off-by: Shreeya Patel <[email protected]>
Fix branch name

Signed-off-by: Shreeya Patel <[email protected]>
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

jira VULN-136577
cve CVE-2025-39730
commit-author Trond Myklebust <[email protected]>
commit ef93a685e01a281b5e2a25ce4e3428cf9371a205
Fix markdown formatting

Signed-off-by: Shreeya Patel <[email protected]>
Fix counting of total commits

Signed-off-by: Shreeya Patel <[email protected]>
Review fixes 1

Signed-off-by: Shreeya Patel <[email protected]>
Review fixes 2

Signed-off-by: Shreeya Patel <[email protected]>
Fix from Roxana

Signed-off-by: Shreeya Patel <[email protected]>

Test Results

✅ Build Stage

✅ Boot Verification

✅ Kernel Selftests

⚠️ Test Comparison

  • Status: Skipped
  • Reason: No baseline test results available from ciqlts9_2
  • Note: Manual review recommended to ensure no regressions

🤖 This PR was automatically generated by GitHub Actions
Run ID: 19608093078

@shreeya-patel98
Copy link
Collaborator

Need to use the target branch name in the commit message instead of the current branch name.

@shreeya-patel98 shreeya-patel98 force-pushed the {shreeya}_ciqlts9_2 branch 2 times, most recently from f0e27bd to cf2ca5a Compare November 6, 2025 11:21
@github-actions github-actions bot changed the title [{shreeya}_ciqlts9_2] NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() [ciqlts9_2] NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() Nov 6, 2025
@shreeya-patel98
Copy link
Collaborator

Finally worked 💃 🎉

@PlaidCat
Copy link
Collaborator

Is this to actually be reviewed?

@shreeya-patel98
Copy link
Collaborator

Is this to actually be reviewed?

@PlaidCat no please ignore it, I was doing my testing with this one.

@shreeya-patel98 shreeya-patel98 force-pushed the {shreeya}_ciqlts9_2 branch 2 times, most recently from 62c2a04 to 7d840a5 Compare November 17, 2025 19:39
@github-actions
Copy link
Author

JIRA PR Check Results

1 commit(s) with issues found:

Commit

Summary: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

❌ Errors:

  • VULN-136577: Status is 'To Do', expected 'In Progress'

⚠️ Warnings:

  • VULN-136577: No time logged - please log time manually

Summary: Checked 13 commit(s) total.

@github-actions
Copy link
Author

JIRA PR Check Results

1 commit(s) with issues found:

Commit

Summary: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

❌ Errors:

  • VULN-136577: Status is 'To Do', expected 'In Progress'

⚠️ Warnings:

  • VULN-136577: No time logged - please log time manually

Summary: Checked 14 commit(s) total.

@github-actions github-actions bot changed the title [ciqlts9_2] NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() [ciqlts9_2] Multiple patches tested (15 commits) Nov 17, 2025
@github-actions
Copy link
Author

JIRA PR Check Results

1 commit(s) with issues found:

Commit

Summary: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

❌ Errors:

  • VULN-136577: Status is 'To Do', expected 'In Progress'

⚠️ Warnings:

  • VULN-136577: No time logged - please log time manually

Summary: Checked 16 commit(s) total.

@github-actions github-actions bot changed the title [ciqlts9_2] Multiple patches tested (15 commits) [ciqlts9_2] Multiple patches tested (16 commits) Nov 17, 2025
@shreeya-patel98 shreeya-patel98 changed the title [ciqlts9_2] Multiple patches tested (16 commits) [TESTING] [ciqlts9_2] Multiple patches tested (16 commits) Nov 20, 2025
@github-actions
Copy link
Author

JIRA PR Check Results

1 commit(s) with issues found:

Commit

Summary: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

❌ Errors:

  • VULN-136577: Status is 'To Do', expected 'In Progress'

⚠️ Warnings:

  • VULN-136577: No time logged - please log time manually

Summary: Checked 19 commit(s) total.

@shreeya-patel98 shreeya-patel98 changed the title [TESTING] [ciqlts9_2] Multiple patches tested (16 commits) [ciqlts9_2] Multiple patches tested (19 commits) Nov 21, 2025
Implements a 5-stage GitHub Actions pipeline for automated kernel testing and PR creation.
Uses kernel-container-build automated-testing-v1 branch for build/test tooling.

Stage 1: Build (15-30 min)
- Checkout kernel source + kernel-container-build repo (automated-testing-v1)
- Build kernel in CIQ builder container with kABI checking
- Convert built container to QCOW2 VM image
- Upload: kernel-build.log, QCOW2 image

Stage 2: Boot Verification (2-5 min)
- Download QCOW2 image
- Boot kernel in QEMU (KVM or TCG) and validate login prompt appears
- Upload: boot logs

Stage 3: Kernel Selftests (20-40 min)
- Download QCOW2 image
- Execute comprehensive kselftests in QEMU with dual serial consoles
- Upload: kselftest TAP logs, dmesg output

Stage 4: Compare Results (1-2 min)
Purpose: Detect test regressions by comparing against base branch

Steps:
1. Checkout with full history (fetch-depth: 0) for git merge-base ops
2. Download current kselftest logs
3. Smart base branch detection:
   - For PRs: Uses PR's target branch
   - For pushes: Sorts branches by commit date, checks 30 most recent, finds closest common ancestor via git merge-base
   - Outputs: base_branch (reused by PR stage)
4. Download baseline logs from base branch (searches last 5 successful runs)
5. Compare results:
   - Counts passing/failing tests (before/after)
   - Fails if >±3 tests changed
   - Outputs: comparison_status, comparison_message

Stage 5: Create Pull Request (1-2 min)
Purpose: Auto-create/update PR after all tests pass

Prerequisites: Only runs if build + boot + kselftest passed, no regressions detected

Steps:
1. Check all stages passed and comparison_status != failed
2. Checkout (shallow: fetch-depth: 50) for commit messages
3. Download all artifacts (build/boot/test logs)
4. Extract statistics (pass/fail counts, build times)
5. Get commit info:
   - Single commit: Use commit message
   - Multiple commits: Create summary
6. Create/Update PR:
   - Reuses base_branch from compare-results (no duplication!)
   - Generate PR body with test results via create-pr-body.sh
   - Creates new PR or updates existing one

Signed-off-by: Shreeya Patel <[email protected]>
Currently, this github action has been tested only
on 9.2 CIQ LTS kernel so just add that branch as a
condition to run the test.

Signed-off-by: Shreeya Patel <[email protected]>
Script to generate detailed PR descriptions with kselftest results.

Signed-off-by: Shreeya Patel <[email protected]>
- Workflow now checks commit message for [skip ci] or [ci skip]
- If either flag is present, the entire workflow is skipped
- Allows developers to push changes without triggering CI when not needed

Usage:
  git commit -m "docs: update README [skip ci]"
  git commit -m "wip: work in progress [ci skip]"

Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
- Created .container_build_image with lts-9.2-kernel-builder
- Updated workflow to remove -c option from build_kernel.sh call
- Build script will now automatically use the image specified in .container_build_image

Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
jira VULN-136577
cve CVE-2025-39730
commit-author Trond Myklebust <[email protected]>
commit ef93a68

The function needs to check the minimal filehandle length before it can
access the embedded filehandle.

	Reported-by: zhangjian <[email protected]>
Fixes: 20fa190 ("nfs: add export operations")
	Signed-off-by: Trond Myklebust <[email protected]>
(cherry picked from commit ef93a68)
	Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
Signed-off-by: Shreeya Patel <[email protected]>
@github-actions
Copy link
Author

JIRA PR Check Results

1 commit(s) with issues found:

Commit

Summary: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()

❌ Errors:

  • VULN-136577: Status is 'To Do', expected 'In Progress'

⚠️ Warnings:

  • VULN-136577: No time logged - please log time manually

Summary: Checked 19 commit(s) total.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants