vms-934: build VMS modules IN-TREE under drivers/ovmx/ (clears TAINT_OUT_OF_TREE)

[baron-3dl]

vms-934 — in-tree home for the VMS modules (owns-kernel, parent vms-19e)

Unblocked by vms-448 (from-source pinned kernel). Restarts the owns-kernel pole.

Before: vms.ko/vmsfs.ko were built OUT-OF-TREE (standalone src/kernel/ Makefiles) and loaded with TAINT_OUT_OF_TREE (bit 12, 0x1000) set — the boot logged loading out-of-tree module taints kernel.

After: they build IN-TREE under drivers/ovmx/ of our from-source kernel, so modpost stamps modinfo intree=Y and loading them does not set the out-of-tree taint bit. "In-tree" = OUR tree; no mainline/Linus acceptance implied. The canonical source stays in src/kernel/ + src/kernel-core/ and still drives the standalone out-of-tree build for the QEMU test harness — this is a build-time overlay, not a fork.

drivers/ovmx/ layout (overlaid into the kernel tree at build time)

drivers/ovmx/
├── Kconfig            menuconfig OVMX  →  tristate CONFIG_OVMX_VMS / CONFIG_OVMX_VMSFS
├── Makefile           obj-$(CONFIG_OVMX_VMS) += vms/ ; obj-$(CONFIG_OVMX_VMSFS) += vmsfs/
├── vms/               vms.ko : src/kernel/*.{c,h} (Linux glue) + src/kernel-core/*.{c,h} (exec core), flattened
│   └── Kbuild
└── vmsfs/             vmsfs.ko : src/kernel/vmsfs/*.{c,h} + src/kernel-core/vmsfs/*.{c,h}, flattened
    └── Kbuild

The overlay wires source "drivers/ovmx/Kconfig" into the kernel's drivers/Kconfig and obj-$(CONFIG_OVMX) += ovmx/ into drivers/Makefile. Core .c are flattened into each module dir (all local #include are basename-only, so a flat dir + -I$(src) resolves every header). Object sets mirror the standalone Makefiles' vms-y/vmsfs-y.

intree / no-taint proof

• Build-time, fail-closed: the kernel-build stage builds the modules via make modules and asserts modinfo -F intree == Y; the builder stage re-asserts intree=Y + vermagic on the exact .ko the initramfs carries.
• tests/qemu/test_intree_modules.sh (new CI step in the Persistent Boot Smoke job):
  • STATIC: extracts vms.ko/vmsfs.ko from the boot initramfs and asserts modinfo -F intree == Y (acceptance authenticity: INV-1 system-identity SSOT + logical-driven login banners (vms-e652) #1, on the bytes that boot). intree=Y is exactly the kernel condition under which add_taint_module() skips TAINT_OUT_OF_TREE (acceptance docs: executive retrofit dispatch plan (vms-6b8) #2).
  • BOOT-TIME: boots at loglevel=7 (the normal boot's loglevel=3 quiet would hide the warning), proves the modules load (%OVMX-I-EXEC = vms.ko attached, %OVMX-I-MOUNTED = vmsfs.ko mounted the ODS-2 disk), and asserts no out-of-tree module / taints kernel line.

Files

• distro/kernel/drivers-ovmx/{Kconfig,Makefile,vms/Kbuild,vmsfs/Kbuild} (new)
• distro/kernel/overlay-ovmx-drivers.sh (new, idempotent)
• distro/kernel/ovmx-x86_64.config — CONFIG_OVMX=y, CONFIG_OVMX_VMS=m, CONFIG_OVMX_VMSFS=m
• distro/Dockerfile.bootable — overlay + config gate + in-tree build/harvest; builder consumes in-tree .ko; runner gains kmod
• tests/qemu/test_intree_modules.sh (new) + .github/workflows/ci.yml (step + path filter)

Boot-image change → exercises Build & Test + Persistent Boot Smoke + the executive gates. Conductor reaps.

🤖 Generated with Claude Code