Debian Official Debug Kernel for All?
summary
Proposal adds official Debian debug-kernel flavors starting with amd64 and arm64, delivering a lightweight, midweight, and heavyweight config family that includes KASAN and kfence, lockdep, UBSAN, and kcov coverage support. A pilot in experimental repository precedes CI automation and Syzbot integration; sanitizer builds increase compile time roughly threefold and inflate archive size, while memory-safety bugs account for over 70% of vulnerabilities. A coverage visualizer demo produces heat‑map traces from instrumented kernels and proves the build+toolchain workflow works end-to-end.
AI-written summary · about
chapters (16)
- 0:00Introduction to debug kernels
- 1:26Problem with Debian debug kernels
- 3:35User pain points and bug reports
- 5:45Proposed debug kernel flavors
- 7:13Demo of B Visual Kernel
- 8:24Siegebot and proactive QA
- 10:15Debian kernel team challenges
- 12:06Proactive security approach
- 12:50Roadmap and challenges ahead
- 15:24Discussion with Fedora developers
- 18:12Debug kernel options and trade-offs
- 20:40Performance impact of debug options
- 22:52Evaluating vendor kernels with siegebot
- 24:20Requirements for B Visual Kernel
- 25:26Kernel image size concerns
- 26:07Conclusion and Q&A
related talks
59mSanitizing the Linux Kernel — On KASAN and other Dynamic Bug-finding Tools
29mThwarting Unknown Bugs: Hardening Features in the Mainline Linux Kernel
09mLinux Kernel Bug Fixing Project
38mHardening the Barebox Bootloader
06mQ&A
38mSafe Systems with Linux
08mWIP: QKSAN: Towards Multiple Sanitizers for In-vehicle COTS OS Kernels
43mTowards Secure Unified Kernel Images for Generic Linux Distributions and Every...