Commit graph

4630 commits

Author SHA1 Message Date
Tim Steinbach 114cb322ac linux/hardened/patches/4.19: 4.19.183-hardened1 -> 4.19.184-hardened1 2021-04-05 10:02:50 -04:00
Tim Steinbach fcd5f88906 linux/hardened/patches/4.14: 4.14.227-hardened1 -> 4.14.228-hardened1 2021-04-05 10:02:50 -04:00
Tim Steinbach 41d954afb5 linux: 5.4.108 -> 5.4.109 2021-04-05 10:02:50 -04:00
Tim Steinbach 8d0a705894 linux: 5.11.10 -> 5.11.11 2021-04-05 10:02:50 -04:00
Tim Steinbach ccff62d486 linux: 5.10.26 -> 5.10.27 2021-04-05 10:02:50 -04:00
Tim Steinbach 69da7b41ae linux: 4.9.263 -> 4.9.264 2021-04-05 10:02:50 -04:00
Tim Steinbach e1dda91015 linux: 4.4.263 -> 4.4.264 2021-04-05 10:02:50 -04:00
Tim Steinbach 94c5559e27 linux: 4.19.183 -> 4.19.184 2021-04-05 10:02:50 -04:00
Tim Steinbach 5538128395 linux: 4.14.227 -> 4.14.228 2021-04-05 10:02:50 -04:00
Alyssa Ross 25208eeaba linux: remove xen_dom0 feature entirely
Xen is now enabled unconditionally on kernels that support it, so the
xen_dom0 feature doesn't do anything.  The isXen attribute will now
produce a deprecation warning and unconditionally return true.
Passing in a custom value for isXen is no longer supported.
2021-04-05 09:25:39 +00:00
Martin Weinelt 37fbf3de41
linux_rpi: 5.10.11 -> 5.10.17 2021-04-05 05:39:36 +02:00
Martin Weinelt 791c91ff52
Merge pull request #113363 from mweinelt/rpi 2021-04-05 05:07:37 +02:00
Alyssa Ross 5f24024de6 linux: enable Xen everywhere it can be
I don't think there's any reason to have a seperate kernel variant
because of this, with all the maintenance burden that imposes.  Debian
and Fedora both enable all these options on their normal kernels.

Alias the Linux Xen attributes, so this change should be seemless for
people who were using the Xen kernels up to now.

All the Xen options are marked as optional anyway, so it should be
fine to try to enable them on non-x86 platforms as well.

Fixes: https://github.com/NixOS/nixpkgs/issues/115182
2021-04-04 14:26:21 +00:00
github-actions[bot] 3e45982f7a
Merge master into staging-next 2021-04-04 12:06:01 +00:00
Vladimír Čunát 7a3f21c1e4
linux: don't compress by ZSTD on 32-bit
It doesn't build on i686 and I don't consider it worth deep
investigation.  I tried a VM test, too (nixosTests.knot).
2021-04-03 16:11:17 +02:00
github-actions[bot] 636e58e31b
Merge staging-next into staging 2021-04-02 00:21:46 +00:00
Alyssa Ross f67748ecda
Fix some typos in comments 2021-04-01 18:34:27 +00:00
Atemu 615cad0967 zen-kernels: 5.11.8 -> 5.11.11 2021-03-31 20:24:45 +02:00
github-actions[bot] 5abd5f5ab0
Merge staging-next into staging 2021-03-31 18:15:02 +00:00
Tim Steinbach efd9121787 linux/hardened/patches/5.11: 5.11.9-hardened1 -> 5.11.10-hardened1 2021-03-31 11:25:46 -04:00
Tim Steinbach 5368c6d11e linux/hardened/patches/5.10: 5.10.25-hardened1 -> 5.10.26-hardened1 2021-03-31 11:25:46 -04:00
Tim Steinbach 2a47ac7922 linux-rt_5_10: 5.10.21-rt34 -> 5.10.25-rt35 2021-03-31 11:25:46 -04:00
Tim Steinbach 623687ca7f linux: 5.11.9 -> 5.11.10 2021-03-31 11:25:46 -04:00
Martin Weinelt f5eed9579b
Merge pull request #117645 from zhaofengli/linux-srv6
linux: Enable SRv6 options
2021-03-29 05:00:08 +02:00
Tim Steinbach 6052a427a1 linux/hardened/patches/5.4: 5.4.107-hardened1 -> 5.4.108-hardened1 2021-03-26 18:50:13 -04:00
Tim Steinbach 036646460b linux/hardened/patches/5.11: 5.11.8-hardened1 -> 5.11.9-hardened1 2021-03-26 18:50:13 -04:00
Tim Steinbach 98d48280b7 linux/hardened/patches/4.19: 4.19.182-hardened1 -> 4.19.183-hardened1 2021-03-26 18:50:13 -04:00
Tim Steinbach 435366bdd3 linux/hardened/patches/4.14: 4.14.226-hardened1 -> 4.14.227-hardened1 2021-03-26 18:50:13 -04:00
Tim Steinbach 6765e61ed4 linux: 5.10.25 -> 5.10.26 2021-03-26 18:50:13 -04:00
Tim Steinbach 1c7273cc17 linux: 5.4.107 -> 5.4.108 2021-03-26 18:50:13 -04:00
Tim Steinbach 9ce0fb815c linux: 5.11.8 -> 5.11.9 2021-03-26 18:50:13 -04:00
Tim Steinbach 57ea233d16 linux: 4.9.262 -> 4.9.263 2021-03-26 18:50:13 -04:00
Tim Steinbach c9dcff241e linux: 4.4.262 -> 4.4.263 2021-03-26 18:50:13 -04:00
Tim Steinbach dcd01727b4 linux: 4.19.182 -> 4.19.183 2021-03-26 18:50:13 -04:00
Tim Steinbach a17346234a linux: 4.14.226 -> 4.14.227 2021-03-26 18:50:13 -04:00
Tim Steinbach bd2bb9e381 linux-hardened: Enable KFENCE
"Kernel Electric-Fence (KFENCE) is a low-overhead sampling-based memory safety
error detector. KFENCE detects heap out-of-bounds access, use-after-free, and
invalid-free errors."
2021-03-26 18:48:37 -04:00
Tim Steinbach a7d6642cf3 linux-testing: 5.11-rc5 -> 5.12-rc4
- Sound SOC support was refactored in
torvalds/linux@43df5242af

- GMA3600 is part of GMA500 as of
torvalds/linux@26499e0518
2021-03-26 18:48:37 -04:00
Zhaofeng Li 6981b50e9d linux: Enable SRv6 options 2021-03-26 10:54:12 -07:00
Tim Steinbach 09406084bd linux-hardened: Fix page poisoning for 5.11
`PAGE_POISONING_NO_SANITY` was removed in
https://git.kernel.org/linus/8f424750baaafcef229791882e879da01c9473b5

`PAGE_POISONING_ZERO` was removed in
https://git.kernel.org/linus/f289041ed4cf9a3f6e8a32068fef9ffb2acc5662
2021-03-24 09:19:44 -04:00
Timo Kaufmann e2740dbc69
Merge pull request #117107 from Atemu/update/zen-kernels
zen-kernels: 5.11.5 -> 5.11.8
2021-03-23 14:05:12 +00:00
Tim Steinbach e31c3509c5 linux/hardened/patches/5.4: 5.4.106-hardened1 -> 5.4.107-hardened1 2021-03-23 09:19:18 -04:00
Tim Steinbach b8ebd38d64 linux/hardened/patches/5.11: 5.11.7-hardened1 -> 5.11.8-hardened1 2021-03-23 09:19:18 -04:00
Tim Steinbach c57b8eb8fe linux/hardened/patches/5.10: 5.10.24-hardened1 -> 5.10.25-hardened1 2021-03-23 09:19:18 -04:00
Tim Steinbach c1fb1f8ef7 linux/hardened/patches/4.19: 4.19.181-hardened1 -> 4.19.182-hardened1 2021-03-23 09:19:18 -04:00
Tim Steinbach 6b71132fcf linux-rt_5_4: 5.4.102-rt53 -> 5.4.106-rt54 2021-03-23 09:19:18 -04:00
Tim Steinbach 1e72305d0f linux: 5.4.106 -> 5.4.107 2021-03-23 09:19:18 -04:00
Tim Steinbach 3a1c01b3fe linux: 5.11.7 -> 5.11.8 2021-03-23 09:19:18 -04:00
Tim Steinbach 6283fc9d51 linux: 5.10.24 -> 5.10.25 2021-03-23 09:19:18 -04:00
Tim Steinbach 583c99ef13 linux: 4.19.181 -> 4.19.182 2021-03-23 09:19:18 -04:00
Atemu b8d9d14be4 zen-kernels: 5.11.5 -> 5.11.8 2021-03-21 09:19:17 +01:00
Atemu efb1815d1b
zen-kernels: 5.11.1 -> 5.11.5 (#115920) 2021-03-21 00:50:02 +01:00
Tim Steinbach fcab19deb7 linux/hardened/patches/5.4: 5.4.105-hardened1 -> 5.4.106-hardened1 2021-03-18 12:25:26 -04:00
Tim Steinbach ed933906b5 linux/hardened/patches/5.11: 5.11.6-hardened1 -> 5.11.7-hardened1 2021-03-18 12:25:26 -04:00
Tim Steinbach d013e2e97b linux/hardened/patches/5.10: 5.10.23-hardened1 -> 5.10.24-hardened1 2021-03-18 12:25:26 -04:00
Tim Steinbach 89de81439d linux/hardened/patches/4.19: 4.19.180-hardened1 -> 4.19.181-hardened1 2021-03-18 12:25:26 -04:00
Tim Steinbach 06a9710282 linux/hardened/patches/4.14: 4.14.225-hardened1 -> 4.14.226-hardened1 2021-03-18 12:25:26 -04:00
Tim Steinbach d401f1ed14 linux: 5.4.105 -> 5.4.106 2021-03-18 12:25:26 -04:00
Tim Steinbach db12849a93 linux: 5.11.6 -> 5.11.7 2021-03-18 12:25:26 -04:00
Tim Steinbach 76d908f148 linux: 5.10.23 -> 5.10.24 2021-03-18 12:25:26 -04:00
Tim Steinbach 6dc3abd325 linux: 4.9.261 -> 4.9.262 2021-03-18 12:25:26 -04:00
Tim Steinbach 52e4fd9bbb linux: 4.4.261 -> 4.4.262 2021-03-18 12:25:26 -04:00
Tim Steinbach 176eaa21b4 linux: 4.19.180 -> 4.19.181 2021-03-18 12:25:26 -04:00
Tim Steinbach dacd92f316 linux/hardened/patches/5.11: init at 5.11.6-hardened1 2021-03-15 09:59:13 -04:00
ajs124 e3664fc11b linux/hardened/patches/5.4: 5.4.104-hardened1 -> 5.4.105-hardened1 2021-03-15 09:59:13 -04:00
ajs124 5c700b8700 linux/hardened/patches/5.10: 5.10.22-hardened1 -> 5.10.23-hardened1 2021-03-15 09:59:13 -04:00
ajs124 1150408383 linux/hardened/patches/4.19: 4.19.179-hardened1 -> 4.19.180-hardened1 2021-03-15 09:59:13 -04:00
ajs124 27029eaf8f linux/hardened/patches/4.14: 4.14.224-hardened1 -> 4.14.225-hardened1 2021-03-15 09:59:13 -04:00
ajs124 d6f3315bf9 linux: 5.11.5 -> 5.11.6 2021-03-15 09:59:13 -04:00
ajs124 7760c71c9c linux: 5.10.22 -> 5.10.23 2021-03-15 09:59:13 -04:00
Tim Steinbach 7513be6e65 linux: 5.4.104 -> 5.4.105 2021-03-15 09:59:13 -04:00
Tim Steinbach bd46e9531b linux: 4.9.260 -> 4.9.261 2021-03-15 09:59:13 -04:00
Tim Steinbach 82b3f86735 linux: 4.4.260 -> 4.4.261 2021-03-15 09:59:13 -04:00
Tim Steinbach 3473cf548a linux: 4.19.179 -> 4.19.180 2021-03-15 09:59:13 -04:00
Tim Steinbach 39e961fc2f linux: 4.14.224 -> 4.14.225 2021-03-15 09:59:13 -04:00
Tim Steinbach 867edccac8 linux/hardened/patches/5.4: 5.4.103-hardened1 -> 5.4.104-hardened1 2021-03-11 08:23:02 -05:00
Tim Steinbach f584b58e73 linux/hardened/patches/5.10: 5.10.21-hardened1 -> 5.10.22-hardened1 2021-03-11 08:23:02 -05:00
Tim Steinbach d4983c9b06 linux-rt_5_11: 5.11.2-rt9 -> 5.11.4-rt11 2021-03-11 08:23:02 -05:00
Tim Steinbach ad53b90dea linux-rt_5_10: 5.10.17-rt32 -> 5.10.21-rt34 2021-03-11 08:23:02 -05:00
Tim Steinbach f11ec11612 linux: 5.4.103 -> 5.4.104 2021-03-11 08:23:02 -05:00
Tim Steinbach 047625cc6f linux: 5.10.21 -> 5.10.22 2021-03-11 08:23:02 -05:00
Jonathan Teh 29e7b1ff82 linux: enable NVMe Multipath
Enable NVME_MULTIPATH so that a single /dev/nvmeXnY device will show
up for each NVMe namespaces, even if it is accessible through multiple
controllers. Can be disabled at boot with `nvme_core.multipath=0`.

This is default enabled in Debian [1], Ubuntu 20.04 [2] , Arch [3] and
Fedora 33 [4].

[1]: https://salsa.debian.org/kernel-team/linux/-/blob/debian/5.10.19-1/debian/config/config#L4362
[2]: https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/tree/debian.master/config/config.common.ubuntu?h=Ubuntu-5.4.0-67.75#n6722
[3]: https://git.archlinux.org/svntogit/packages.git/tree/trunk/config?h=packages/linux#n2423
[4]: https://src.fedoraproject.org/rpms/kernel/blob/f33/f/kernel-x86_64-fedora.config#_4338
2021-03-10 17:40:30 +00:00
Tim Steinbach 921dffb59e linux/hardened/patches/5.4: 5.4.101-hardened1 -> 5.4.103-hardened1 2021-03-09 10:50:15 -05:00
Tim Steinbach 48644e1496 linux/hardened/patches/5.10: 5.10.19-hardened1 -> 5.10.21-hardened1 2021-03-09 10:50:15 -05:00
Tim Steinbach 61ca55c170 linux/hardened/patches/4.19: 4.19.177-hardened1 -> 4.19.179-hardened1 2021-03-09 10:50:15 -05:00
Tim Steinbach 1361d73395 linux/hardened/patches/4.14: 4.14.222-hardened1 -> 4.14.224-hardened1 2021-03-09 10:50:15 -05:00
Tim Steinbach 7e71fcdba4 linux-rt_5_4: 5.4.93-rt51 -> 5.4.102-rt53 2021-03-09 10:50:15 -05:00
Tim Steinbach 6fb3bd79be linux: 5.11.4 -> 5.11.5 2021-03-09 10:50:15 -05:00
Tim Steinbach e3a6b728a3 linux/hardened/patches/5.4: 5.4.100-hardened1 -> 5.4.101-hardened1 2021-03-09 10:50:15 -05:00
Tim Steinbach 0221fe13da linux/hardened/patches/5.10: 5.10.18-hardened1 -> 5.10.19-hardened1 2021-03-09 10:50:15 -05:00
Tim Steinbach 4fb927e50e linux_latest-libre: 17873 -> 17920 2021-03-09 10:50:15 -05:00
Tim Steinbach 6e5bce6b5a linux: 5.4.100 -> 5.4.103 2021-03-09 10:50:15 -05:00
Tim Steinbach 861b11a390 linux: 5.11.2 -> 5.11.4 2021-03-09 10:50:15 -05:00
Tim Steinbach 8a706422fa linux: 5.10.18 -> 5.10.21 2021-03-09 10:50:15 -05:00
Tim Steinbach 57455d7566 linux: 4.9.258 -> 4.9.260 2021-03-09 10:50:15 -05:00
Tim Steinbach cecaeca80b linux: 4.4.258 -> 4.4.260 2021-03-09 10:50:15 -05:00
Tim Steinbach 929d751e5b linux: 4.19.177 -> 4.19.179 2021-03-09 10:50:15 -05:00
Tim Steinbach 196b232131 linux: 4.14.222 -> 4.14.224 2021-03-09 10:50:15 -05:00
Linus Heckemann c762b1eaab
Merge pull request #90065 from wizeman/u/fix-config-merge
linux: make sure all config options have the same value
2021-03-08 21:34:59 +01:00
Tim Steinbach ecce29eba2
kernel: RANDOM_TRUST_CPU for >= 4.19 2021-03-08 11:49:08 -05:00
Rouven Czerwinski 368bdd13f6 linux: enable RANDOM_TRUST_CPU
Allows the RDRAND instruction to seed the kernel RNG. This should lead
to faster CRNG initialization, since the kernel can use the processors
capabilities directly. This is default enabled in Debian [1] and Fedora
[2] as well.

[1]: https://salsa.debian.org/kernel-team/linux/-/blob/debian/5.10.13-1/debian/config/config#L459
[2]: https://src.fedoraproject.org/rpms/kernel/blob/rawhide/f/kernel-x86_64-fedora.config#_4907
2021-03-08 09:34:22 -05:00