On Tue, Nov 3, 2020 at 11:49 AM Daniel P. Berrangé <berrange(a)redhat.com> wrote:
In QEMU there's a desire to make use of BPF programs for implementing
some networking features. The current patches are proposing adding
prebuilt BPF byte code to the QEMU repo, with source available, but
not actually building from source during a build.
I was wondering if we had any specific guidance or rules covering the
shipping BPF programs in particular ?
To me it feels like BPF programs should fall under normal Fedora
practice that expects everything to be built from master source.
We do have the exception that allows firmware to be shipped as
pre-built blobs, but I'm thinking that BPF programs could not
be considered as firmware.
Has this been discussed before, if so can someone point to the
results, as I'm not finding anything specific to BPF programs and
Fedora packaging via Google.
Regards,
Daniel
If there are no specialized Packaging Guidelines for something, then
the general guidelines apply - so in this case, compiling from source
is required, since Fedora packages MUST NOT ship precompiled binaries.
Side note: Regarding BPF programs - I seem to remember that recent
kernel security features (the Lockdown patches?) restricted and/or
disabled the ability to run BPF programs at all. Have you considered
that by default, those BPF programs might not be able to run under the
Fedora default configuration?
Fabio