Debian Official Debug Kernel for All - Proactive Security Testing and Infrastructure Challenges

Explore the critical need for official debug kernels in Debian through this conference talk examining security implications and infrastructure challenges. Learn about the current gap in Debian's security strategy compared to enterprise distributions like RHEL and Fedora, which rely on official kernel-debug packages with sanitizers like KASAN and UBSAN enabled. Understand how the absence of standardized debug kernels creates barriers to consistent security research, collaborative debugging, and automated security testing integration with systems like Syzbot. Discover the infrastructure constraints facing Debian's non-profit, community-driven model when considering debug kernel implementation across multiple architectures and release channels. Examine proposed solutions including phased rollouts, separate debug repositories, build system optimizations, and sustainable implementation strategies that balance proactive security testing capabilities with resource limitations. Gain insights into the technical and logistical considerations for enhancing Debian's contribution to Linux kernel security through improved debugging infrastructure.