Currently nvidia drivers are not compatible with IBT. When kernel has IBT turned on, it tries to compile code with correct compiler flags and post-process object files with kernel objtool. This is futile, given that prebuilt nvidia object file is incompatible. But also this currently breaks LRM builds as they have not yet been adjusted to depend and call objtool.
Unsetting CONFIG_X86_KERNEL_IBT= will allow to turn IBT on for the majority of kernel modules, whilst continuing to build nvidia modules without IBT. This will in turn allow running systems in ibt=warn mode with nvidia drivers. Or with fatal enforcement alas without nvidia modules.
This is a temporary stage until nvidia drivers gain IBT support.
tseliot
commented
2 years ago
Currently nvidia drivers are not compatible with IBT. When kernel has IBT turned on, it tries to compile code with correct compiler flags and post-process object files with kernel objtool. This is futile, given that prebuilt nvidia object file is incompatible. But also this currently breaks LRM builds as they have not yet been adjusted to depend and call objtool.
Unsetting CONFIG_X86_KERNEL_IBT= will allow to turn IBT on for the majority of kernel modules, whilst continuing to build nvidia modules without IBT. This will in turn allow running systems in ibt=warn mode with nvidia drivers. Or with fatal enforcement alas without nvidia modules.
This is a temporary stage until nvidia drivers gain IBT support.