Looking for feedback on CONFIG_MODULE_HASHES for Linux

[Robin Candau]

On 11/13/25 9:10 PM, Thomas Weißschuh via rb-general wrote:
> Hi everyone,
> 

Hey Thomas,

> I am the author of the CONFIG_MODULE_HASHES patchset [0] for the Linux kernel
> which aims to enable reproducible kernel packages for Linux distributions.
> My goal is to reignite development and continue with the upstream process.
> To have a better base to argue with I'd like to get some confirmation that
> distributions have looked at the patches and do intent to adapt this scheme when
> it is available in the mainline kernel. That should help me get some leverage
> with the upstream maintainers.
> 
> The current form of the patches can be found at [1], they are only slightly
> adapted from the previous submission to LKML. Remaining open topics before the
> next submission are proper IMA support and stripping of modules.
> Future changes may introduce more hash algorithms and performance improvements,
> but these should not be relvant for now.
> 
> So if you are packaging Linux for your distribution, have looked at my patches
> and are eager to use them, please let me know. My plan is to talk with the
> upstream maintainers at the upcoming Linux Plumbers Conference on 11th of December.
> 

Thanks for the work!
I forwarded your mail on the Arch Linux side, hoping that we can provide 
you whatever we can to assist with your incoming discussion with 
upstream on that front.

> 
> Thanks,
> Thomas
> 
> [0] https://lore.kernel.org/lkml/20250429-module-hashes-v3-0-00e9258def9e@weissschuh.net/
> [1] https://git.kernel.org/pub/scm/linux/kernel/git/thomas.weissschuh/linux.git/log/?h=b4/module-hashes


-- 
Regards,
Robin Candau / Antiz
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xFDC3040B92ACA748.asc
Type: application/pgp-keys
Size: 3151 bytes
Desc: OpenPGP public key
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20251114/36657999/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20251114/36657999/attachment.sig>