Subject	BPF keyring and signed loader ML-DSA support
Author	daniel@iogearbox.net
Date	2026-08-21 21:41:01 +0000 UTC
Version	Version 1
Cc	a.s.protopopov@gmail.com ast@kernel.org bpf@vger.kernel.org brauner@kernel.org daniel@iogearbox.net john.fastabend@gmail.com kpsingh@kernel.org memxor@gmail.com

Patches (11)

Name	Content [All]
[PATCH bpf-next 01/11] bpf: Add a bpf keyring for program signature validation	[Body]
[PATCH bpf-next 02/11] bpf: Refuse caller-supplied keyrings when the bpf one is active	[Body]
[PATCH bpf-next 03/11] bpf: Raise the bound on a program's signature size	[Body]
[PATCH bpf-next 04/11] bpftool: Support ML-DSA program signing	[Body]
[PATCH bpf-next 05/11] selftests/bpf: Add a test for the sealed bpf keyring	[Body]
[PATCH bpf-next 06/11] selftests/bpf: Rebuild signed lskels when signing key changes	[Body]
[PATCH bpf-next 07/11] selftests/bpf: Rename the verify_sig_setup.sh setup into setup-rsa	[Body]
[PATCH bpf-next 08/11] selftests/bpf: Add an end-to-end ML-DSA signed loader test	[Body]
[PATCH bpf-next 09/11] selftests/bpf: Allow appending to guest kernel cmdline in vmtest.sh	[Body]
[PATCH bpf-next 10/11] selftests/bpf: Add tests for bpf keyring in signed loader	[Body]
[PATCH bpf-next 11/11] Documentation/bpf: Document the bpf keyring and improve examples	[Body]

Sessions