Hi guys,

As mentioned in the other thread about new kernel (basically to fix the
dccp cve issue), I had a look at the 4.4.x branch, but thought also
about a rebase to 4.9.x (also upstream LTS at kernel.org)

For AltArch (centos 7 i386), Johnny built a 4.9.13 kernel and so I
reused it for armhfp
It also makes sense to rebase to 4.9.x for rpi2/rpi3 as the rpi
foundation also rebased to 4.9 and so confirmed to me that they don't
maintain 4.4.x (even if they still accept Pull Requests).

So we have now 4.9.13 available for both rpi and generic.

The following /etc/yum.repos.d/testing-kernel.repo would do it :

[kernel-testing]
name=CentOS Kernels for armhfp testing
baseurl=https://buildlogs.centos.org/centos/7/kernel/$basearch/kernel-$kvariant/
enabled=0
gpgcheck=0

[firmware]
name=firmware
baseurl=https://armv7.dev.centos.org/repodir/arm-kernels/linux-firmware-20170213/
enabled=1
gpgcheck=0

After that a simple yum update --enablerepo=kernel-testing would bring
it to the node

For rpi, nothing to be done
For the other boards, I've added an update-boot tool to automatically
modify extlinux.conf. but you need the updated centos-userland-release pkg :
https://armv7.dev.centos.org/repodir/c71611-updates-1/centos-userland-release/7-3.1611.el7.centos.0.2/armv7hl/centos-userland-release-7-3.1611.el7.centos.0.2.armv7hl.rpm

Worth noting that the actual 4.9.13 will *not* call it in the %post rpm
transaction (yet) but if that tool works for everybody, we'll add it for
newer kernels.

Any feedback is welcome, but for the kernel I'd like to push that asap
to signing/release (so the more feedback, the faster we'll have it
released) ;-)

Cheers,