Commit graph

16659 commits

Author SHA1 Message Date
github-actions[bot] fb42f8d317
Merge staging-next into staging 2021-10-21 00:02:26 +00:00
github-actions[bot] 872437b0f0
Merge master into staging-next 2021-10-21 00:01:47 +00:00
Maximilian Bosch bb5aa0109b
linux: build hardened kernel with matching releases
Until now we merged kernel updates even if no hardened versions were
available yet. On one hand we don't want to delay patch-level updates,
on the other hand users of hardened kernels have frequent breakage now[1].

This change aims to provide a solution this issue:

* The hardened patchset now references the kernel version it's released
  for (including a sha256 hash for the fixed-output path of the source
  tarball).
* The `hardenedKernelFor`-function doesn't just append hardened patches
  now, but also overrides version & src to match the kernel version the
  patch was built & tested for.

Refs #140281

[1] https://hydra.nixos.org/job/nixos/trunk-combined/nixpkgs.linuxPackages_hardened.kernel.x86_64-linux/all
2021-10-20 23:51:52 +02:00
Maximilian Bosch 65930caffe
linux: create maintainer team
Now there are a few more folks who should get pinged on kernel changes:

    $ nix-instantiate -E 'with import ./. {}; (map (x: x.github) linux.meta.maintainers)' --eval  --strict
    [ "TredwellGit" "mweinelt" "ma27" "nequissimus" "alyssais" "thoughtpolice" ]

Refs #140281
2021-10-20 23:49:33 +02:00
github-actions[bot] eebbebca41
Merge staging-next into staging 2021-10-20 12:02:09 +00:00
github-actions[bot] cdc8393c04
Merge master into staging-next 2021-10-20 12:01:31 +00:00
TredwellGit 75dbbe37be linux/hardened/patches/5.4: 5.4.152-hardened1 -> 5.4.154-hardened1 2021-10-20 11:40:40 +00:00
TredwellGit cf9f5f74dd linux/hardened/patches/5.14: 5.14.11-hardened1 -> 5.14.13-hardened1 2021-10-20 11:40:39 +00:00
TredwellGit e94db0f89c linux/hardened/patches/5.10: 5.10.72-hardened1 -> 5.10.74-hardened1 2021-10-20 11:40:38 +00:00
TredwellGit a33fc5384b linux/hardened/patches/4.19: 4.19.210-hardened1 -> 4.19.212-hardened1 2021-10-20 11:40:37 +00:00
TredwellGit cf0d47c505 linux/hardened/patches/4.14: 4.14.250-hardened1 -> 4.14.251-hardened1 2021-10-20 11:40:36 +00:00
TredwellGit 25ef63bb78 linux: 5.4.154 -> 5.4.155 2021-10-20 11:40:01 +00:00
TredwellGit a96f1a866a linux: 5.14.13 -> 5.14.14 2021-10-20 11:39:55 +00:00
TredwellGit a3edfb9ee5 linux: 5.10.74 -> 5.10.75 2021-10-20 11:39:50 +00:00
TredwellGit e4f4df78fa linux: 4.19.212 -> 4.19.213 2021-10-20 11:39:33 +00:00
TredwellGit c4d7df2b7b linux: 4.14.251 -> 4.14.252 2021-10-20 11:39:09 +00:00
Sandro 8018eea2df
Merge pull request #142242 from ju1m/nmon 2021-10-20 13:22:04 +02:00
Yureka 6ac494fefb systemd: add musl patches
Fixes build of pkgsMusl.systemdMinimal (and pkgsMusl.systemd if combined with
other fixes).
These patches are applied conditionally on purpose: They are not checked to
be properly guarded. They should not block future systemd upgrades.
Also see the original RFC section around musl systemd:
https://github.com/NixOS/rfcs/blob/master/rfcs/0023-musl-libc.md#systemd
2021-10-20 11:38:57 +02:00
Julien Moutinho 85a18cf3fe nmon: fix cross-compiling 2021-10-19 21:13:48 +02:00
github-actions[bot] 2564b3d967
Merge staging-next into staging 2021-10-19 18:01:48 +00:00
Vladimír Čunát 01df3cd7dd
Merge branch 'master' into staging-next 2021-10-19 19:24:43 +02:00
Maciej Krüger b33ac6e5c0
Merge pull request #137646 from mkg20001/pam-audit 2021-10-19 15:28:51 +02:00
Maximilian Bosch 05344c4785
Merge pull request #142000 from LibreCybernetics/update-linux
Kernels 2021-10-17
2021-10-18 22:58:46 +02:00
Alyssa Ross 28e55bce8c
systemd: 249.4 -> 249.5
Some of Andi's patches have been upstreamed, so we don't need to apply
them ourselves any more.
2021-10-18 13:23:41 +00:00
Florian Klink 8c692a36b9
Merge pull request #142077 from flokli/systemd-typo-comment
systemd: fix typo in comment
2021-10-18 14:45:44 +02:00
github-actions[bot] 867080b0b6
Merge staging-next into staging 2021-10-18 12:01:57 +00:00
github-actions[bot] 8863d12326
Merge master into staging-next 2021-10-18 12:01:18 +00:00
Florian Klink 6b1bac2a23 systemd: fix typo in comment 2021-10-18 13:15:55 +02:00
Jörg Thalheim 54bf57aa1b zfs: add docs why we strip symbols manual 2021-10-18 09:49:40 +02:00
Florian Klink e67c29e52f
Merge pull request #141881 from ttuegel/systemd-remove-logind-patch
systemd: Remove compatibility patch for Plasma
2021-10-17 19:14:46 +02:00
Fabián Heredia Montiel 8b9b630e10 linux-rt_5_10: 5.10.65-rt53 -> 5.10.73-rt54 2021-10-17 09:27:46 -05:00
Fabián Heredia Montiel 664c8144e4 linux: 5.4.153 -> 5.4.154 2021-10-17 09:27:39 -05:00
Fabián Heredia Montiel a69ff911a3 linux: 5.14.12 -> 5.14.13 2021-10-17 09:27:35 -05:00
Fabián Heredia Montiel 6b68a5efc1 linux: 5.10.73 -> 5.10.74 2021-10-17 09:27:33 -05:00
Fabián Heredia Montiel dc4916976e linux: 4.9.286 -> 4.9.287 2021-10-17 09:27:29 -05:00
Fabián Heredia Montiel e2efd3de26 linux: 4.4.288 -> 4.4.289 2021-10-17 09:27:27 -05:00
Fabián Heredia Montiel 5275780c12 linux: 4.19.211 -> 4.19.212 2021-10-17 09:27:26 -05:00
Fabián Heredia Montiel 62cd542b26 linux: 4.14.250 -> 4.14.251 2021-10-17 09:27:22 -05:00
Yureka 2cc29125a7 lvm2: package 2.02.x for musl 2021-10-17 15:55:49 +02:00
github-actions[bot] 49b132183a
Merge staging-next into staging 2021-10-17 12:01:42 +00:00
github-actions[bot] 4454997349
Merge master into staging-next 2021-10-17 12:01:09 +00:00
Jörg Thalheim eefdd9ffb2 zfs: strip debug symbols
initrd-linux: -12427.8 KiB
linux: -12419.3 KiB
nc2k9ym14spzz2pgq6hn84k8k9zgf686: ∅ → ε, +102451.2 KiB
nixos-system-turingmachine: 21.11.20211015.a2dcfa2 → 21.11.20211017.c6f77b7
visjwxsjqmh8c9lxnrxsw5w19zszflm6: ε → ∅, -102451.0 KiB
zfs-kernel: -12419.3 KiB
2021-10-17 07:04:22 +02:00
github-actions[bot] c443efc2b2
Merge staging-next into staging 2021-10-17 00:01:56 +00:00
Ryan Burns 3220fbe696 Merge branch 'master' into staging-next 2021-10-16 16:07:38 -07:00
Jonathan Ringer 85d1b34f32 linuxPackages.nvidia_x11_beta: 470.42.01 -> 495.29.05 2021-10-16 13:54:56 -07:00
Maximilian Bosch e02259066f
Merge pull request #141499 from TredwellGit/linux
Kernels 2021-10-13
2021-10-16 20:39:25 +02:00
Maximilian Bosch 7d7e87a079
Merge pull request #141854 from Ma27/unbreak-linux-libre
linux-libre: unbreak
2021-10-16 18:27:53 +02:00
Thomas Tuegel 1c95c92c59
systemd: regenerate patch list according to instructions 2021-10-16 08:49:53 -05:00
Thomas Tuegel deffa7350d
systemd: remove compatibility patch for legacy Plasma 2021-10-16 08:44:35 -05:00
Yureka 1d1b097b86 cryptsetup: 2.4.0 -> 2.4.1 2021-10-16 10:15:23 +02:00