Re: [PATCH bpf-next v4 00/11] BPF keyring and signed loader ML-DSA support

[patchwork-bot+netdevbpf@kernel.org]

Hello:

This series was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <ast@kernel.org>:

On Fri, 28 Aug 2026 19:52:16 +0200 you wrote:
> Add a dedicated BPF keyring which is integrated for BPF signing. It
> is modelled after the dm-verity keyring which was added in commit
> 033724b ("dm-verity: add dm-verity keyring") and which can eventually
> be used also via systemd through the same enrollment method as in
> dm-verity's case. It is selected with a new well-known keyring_id
> VERIFY_USE_BPF_KEYRING and gives an operator a place to enroll a
> BPF-only signing key at boot, specifically scoped to signed BPF
> program loading. Next, to demonstrate that BPF signing is algorithm
> agnostic, we add a few small tooling changes to support ML-DSA and
> integrate everything into BPF selftest for BPF CI to ensure nothing
> breaks with future changes. For more details, see individual commits.
> 
> [...]

Here is the summary with links:
  - [bpf-next,v4,01/11] bpf, keys: Add a bpf keyring for program signature validation
    https://git.kernel.org/bpf/bpf-next/c/264d8fd2794f
  - [bpf-next,v4,02/11] bpf: Refuse caller-supplied keyrings when the bpf one is active
    https://git.kernel.org/bpf/bpf-next/c/abaa0835b4f3
  - [bpf-next,v4,03/11] bpf: Raise the bound on a program's signature size
    https://git.kernel.org/bpf/bpf-next/c/300b348e6d5e
  - [bpf-next,v4,04/11] bpftool: Support ML-DSA program signing
    https://git.kernel.org/bpf/bpf-next/c/d37168c99361
  - [bpf-next,v4,05/11] selftests/bpf: Add a test for the sealed bpf keyring
    https://git.kernel.org/bpf/bpf-next/c/6754aeca6022
  - [bpf-next,v4,06/11] selftests/bpf: Rebuild signed lskels when signing key changes
    https://git.kernel.org/bpf/bpf-next/c/e7ada0800ce2
  - [bpf-next,v4,07/11] selftests/bpf: Rename the verify_sig_setup.sh setup into setup-rsa
    https://git.kernel.org/bpf/bpf-next/c/1841d6cbc5c7
  - [bpf-next,v4,08/11] selftests/bpf: Add an end-to-end ML-DSA signed loader test
    https://git.kernel.org/bpf/bpf-next/c/478cf384def8
  - [bpf-next,v4,09/11] selftests/bpf: Allow appending to guest kernel cmdline in vmtest.sh
    https://git.kernel.org/bpf/bpf-next/c/b638a82d64f1
  - [bpf-next,v4,10/11] selftests/bpf: Add tests for bpf keyring in signed loader
    https://git.kernel.org/bpf/bpf-next/c/1c8cb8bf7329
  - [bpf-next,v4,11/11] Documentation/bpf: Document the bpf keyring and improve examples
    https://git.kernel.org/bpf/bpf-next/c/8588fa592985

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html