Subject NFS: isolate mTLS client credentials by network namespace
Author cel@kernel.org
Date 2026-09-25 19:16:23 +0000 UTC
Version
Cc anna@kernel.org brauner@kernel.org cel@kernel.org corbet@lwn.net davem@davemloft.net dhowells@redhat.com edumazet@google.com horms@kernel.org kernel-tls-handshake@lists.linux.dev keyrings@vger.kernel.org kuba@kernel.org linux-doc@vger.kernel.org linux-nfs@vger.kernel.org netdev@vger.kernel.org pabeni@redhat.com rdunlap@infradead.org sagi@grimberg.me skhan@linuxfoundation.org trondmy@kernel.org
Patches (5)
Name Content [All]
[PATCH RFC v2 1/5] NFS: name the init_nfs_fs() error labels [Body]
[PATCH RFC v2 2/5] NFS: allocate the .nfs keyring per network namespace [Body]
[PATCH RFC v2 3/5] SUNRPC: pass a keyring serial number to the TLS handshake [Body]
[PATCH RFC v2 4/5] NFS: name the namespace .nfs keyring in the x509 handshake [Body]
[PATCH RFC v2 5/5] NFS: add a key type that reveals the namespace .nfs keyring serial number [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-09-25
Passed
ID (for dev) 2457592c-4e9f-424e-80aa-d58b0c679618
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] passed [Log]
[KASAN] Boot test: Base 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] passed [Log]
[KASAN] Build Patched 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] [patched] passed [Log]
[KASAN] Fuzz 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] 014d795c73837ea2339a4ea8e8f82c6e959b845d [Config] [patched] passed [Log] [Artifacts]