Subject	BPF keyring and signed loader ML-DSA support
Author	daniel@iogearbox.net
Date	2026-08-25 14:25:20 +0000 UTC
Version	Version 1 Version 2
Cc	a.s.protopopov@gmail.com ast@kernel.org bpf@vger.kernel.org brauner@kernel.org daniel@iogearbox.net dhowells@redhat.com jarkko@kernel.org john.fastabend@gmail.com keyrings@vger.kernel.org kpsingh@kernel.org memxor@gmail.com

Patches (11)

Name	Content [All]
[PATCH bpf-next v2 01/11] bpf: Add a bpf keyring for program signature validation	[Body]
[PATCH bpf-next v2 02/11] bpf: Refuse caller-supplied keyrings when the bpf one is active	[Body]
[PATCH bpf-next v2 03/11] bpf: Raise the bound on a program's signature size	[Body]
[PATCH bpf-next v2 04/11] bpftool: Support ML-DSA program signing	[Body]
[PATCH bpf-next v2 05/11] selftests/bpf: Add a test for the sealed bpf keyring	[Body]
[PATCH bpf-next v2 06/11] selftests/bpf: Rebuild signed lskels when signing key changes	[Body]
[PATCH bpf-next v2 07/11] selftests/bpf: Rename the verify_sig_setup.sh setup into setup-rsa	[Body]
[PATCH bpf-next v2 08/11] selftests/bpf: Add an end-to-end ML-DSA signed loader test	[Body]
[PATCH bpf-next v2 09/11] selftests/bpf: Allow appending to guest kernel cmdline in vmtest.sh	[Body]
[PATCH bpf-next v2 10/11] selftests/bpf: Add tests for bpf keyring in signed loader	[Body]
[PATCH bpf-next v2 11/11] Documentation/bpf: Document the bpf keyring and improve examples	[Body]

Sessions