On Tue, Jul 21, 2026 at 11:09:11AM +0000, Zbigniew Jędrzejewski-Szmek wrote: > On Tue, Jul 21, 2026 at 12:49:59PM +0200, Arjun Shankar wrote: > > > > Wiki - https://fedoraproject.org/wiki/Changes/ShadowStack > > > > == Early Testing (Optional) == > > > > A COPR repository with the updated glibc (Shadow Stack enabled) is > > > > available for Fedora 43, 44, and Rawhide for early testing: > > > > https://copr.fedorainfracloud.org/coprs/submachine/glibc-x86_64-SHSTK-Testing/ > > > > > > This repo is not useful for testing of Rawhide now, because it's too old. > > > Packages have been rebuilt against newer glibc and installation fails > > > with: > > > - installed package sqlite-libs-3.53.3-1.fc45.x86_64 requires > > > libm.so.6(GLIBC_2.44)(64bit), > > > but none of the providers can be installed > > > > I updated it, and it should now be up-to-date for Fedora 44 and 45 > > now. I have dropped 43 and updated the change proposal to reflect > > this. > > I saw that, thanks! > > Second request: please enable the i686 build too. I have glibc.i686 installed > for various reasons and the lack of the i686 build causes a problem with > the upgrade. > > (Maybe this will help others trying to test this: qemu-10.x in F44 does > not have support for shadowstacks. After recompiling qemu from rawhide, > upgrading, and doing 'systemctl restart libvirtd', I get user_shstk > in /proc/cpuinfo on the guest.)
With the feature enabled, machine says: Jul 21 13:21:49 rawhide systemd[1]: Failed to initialize kmod context: Operation not supported Jul 21 13:21:49 rawhide systemd-modules-load[525]: Failed to initialize libkmod context: Operation not supported Jul 21 13:21:49 rawhide systemd[1]: systemd-modules-load.service: Failed with result 'exit-code'. Jul 21 13:21:49 rawhide systemd[1]: Failed to start systemd-modules-load.service - Load Kernel Modules. Without modules, networking is broken, etc. :( When I reboot with 'nousershstk', the message disappears and things seems to work again, so this seems to be directly related to the shadowstack feature. Ah, with debugging enabled: Shared library 'libkmod.so.2' no available: /lib64/libzstd.so.1: rebuild shared object with SHSTK support enabled It seems that libzstd doesn't support this for some reason. It is deep in the stack of pretty much everything ;( Zbyszek -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
