google / safeside

Understand and mitigate software-observable side-channels
BSD 3-Clause "New" or "Revised" License
494 stars 54 forks source link

Fix builds+CI when kernel headers are unavailable #137

Closed mmdriley closed 3 years ago

mmdriley commented 3 years ago

Install kernel headers opportunistically on Linux hosts, and allow builds on Linux to continue even if headers aren't installed. In that case, the kernel modules will be skipped.

This fixes CI on ppc64le, where the build runs an Ubuntu image in an LXD container and the host is running a kernel with no corresponding headers package in the Ubuntu repositories.

Fixes #135

mmdriley commented 3 years ago

We don't run any tests with the kernel modules. I actually had something wired up to try running the Meltdown sample in CI... but Travis uses GCE n2-standard instances, and those have Cascade Lake CPUs that are not vulnerable to Meltdown. :/