Commit Graph

4162 Commits

Author SHA1 Message Date
Tim Steinbach 2c2362cea5
linux/hardened/patches/4.14: 4.14.182.a -> 4.14.183.a 2020-06-05 09:45:19 -04:00
Tim Steinbach 7557c83ea4
linux_latest-libre: 17506 -> 17527 2020-06-05 09:45:08 -04:00
Tim Steinbach 4c5251436b
linux: 5.6.15 -> 5.6.16 2020-06-05 09:37:49 -04:00
Tim Steinbach 6599499cd7
linux: 5.4.43 -> 5.4.44 2020-06-05 09:37:38 -04:00
Tim Steinbach c511f3bab6
linux: 4.9.225 -> 4.9.226 2020-06-05 09:37:26 -04:00
Tim Steinbach 4bf8aa6b71
linux: 4.4.225 -> 4.4.226 2020-06-05 09:37:11 -04:00
Tim Steinbach 0c574f3357
linux: 4.19.125 -> 4.19.126 2020-06-05 09:37:03 -04:00
Tim Steinbach 877920254a
linux: 4.14.182 -> 4.14.183 2020-06-05 09:36:43 -04:00
Anders Kaseorg 0f2e569505 linux: CONFIG_MOUSE_ELAN_I2C_SMBUS=y
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-06-04 18:22:23 +02:00
Frederik Rietdijk 08900c0554 Merge master into staging-next 2020-06-04 15:25:54 +02:00
Tim Steinbach 746fe02a5a
linux_latest-libre: 17445 -> 17506 2020-05-30 11:23:42 -04:00
Frederik Rietdijk 03de4c02fb Merge staging-next into staging 2020-05-28 22:05:36 +02:00
Tim Steinbach dc9b007637
linux/hardened/patches/5.6: 5.6.14.a -> 5.6.15.a 2020-05-28 09:35:07 -04:00
Tim Steinbach a1ec9f649e
linux/hardened/patches/5.4: 5.4.42.a -> 5.4.43.a 2020-05-28 09:35:07 -04:00
Tim Steinbach 827df89616
linux/hardened/patches/4.19: 4.19.124.a -> 4.19.125.a 2020-05-28 09:35:06 -04:00
Tim Steinbach 964a5b99f7
linux/hardened/patches/4.14: 4.14.181.a -> 4.14.182.a 2020-05-28 09:35:06 -04:00
Tim Steinbach 3b94b3f0ac
linux: 5.6.14 -> 5.6.15 2020-05-28 09:35:06 -04:00
Tim Steinbach 5c4bd56c45
linux: 5.4.42 -> 5.4.43 2020-05-28 09:35:05 -04:00
Tim Steinbach 583e50cc79
linux: 4.9.224 -> 4.9.225 2020-05-28 09:35:05 -04:00
Tim Steinbach c1299ef40c
linux: 4.4.224 -> 4.4.225 2020-05-28 09:35:04 -04:00
Tim Steinbach d5c4986dfa
linux: 4.19.124 -> 4.19.125 2020-05-28 09:35:04 -04:00
Tim Steinbach 90d6c2b642
linux: 4.14.181 -> 4.14.182 2020-05-28 09:35:01 -04:00
Frederik Rietdijk d578248611 Merge staging-next into staging 2020-05-24 10:10:06 +02:00
Tim Steinbach cb2686adc3
linux-hardened: Remove 5.5 2020-05-23 10:36:10 -04:00
Frederik Rietdijk 8a77c900dd Merge staging-next into staging 2020-05-23 10:25:19 +02:00
Tim Steinbach 062cd3e87c
linux: Remove 5.5
The 5.5.x series is now EOL
2020-05-22 19:02:51 -04:00
Tim Steinbach 8b66da57ed
linux/hardened/patches/5.6: 5.6.13.a -> 5.6.14.a 2020-05-22 10:51:24 -04:00
Tim Steinbach f759c5af51
linux/hardened/patches/5.4: 5.4.41.a -> 5.4.42.a 2020-05-22 10:51:22 -04:00
Tim Steinbach b7de919a94
linux/hardened/patches/4.19: 4.19.123.a -> 4.19.124.a 2020-05-22 10:51:20 -04:00
Tim Steinbach 0c9c846768
linux/hardened/patches/4.14: 4.14.180.a -> 4.14.181.a 2020-05-22 10:51:14 -04:00
Florian Klink cfb4d0dfe3
Merge pull request #84032 from teto/fix_kernel_merge
Fix kernel configuration merge
2020-05-22 13:32:22 +02:00
Tim Steinbach c768dcfcfc
linux: 5.6.13 -> 5.6.14 2020-05-20 08:27:14 -04:00
Tim Steinbach 2364627a39
linux: 5.4.41 -> 5.4.42 2020-05-20 08:27:07 -04:00
Tim Steinbach d2f98da120
linux: 4.9.223 -> 4.9.224 2020-05-20 08:27:00 -04:00
Tim Steinbach ed3766309f
linux: 4.4.223 -> 4.4.224 2020-05-20 08:26:51 -04:00
Tim Steinbach 439a9043a1
linux: 4.19.123 -> 4.19.124 2020-05-20 08:26:43 -04:00
Tim Steinbach b3e7b6d556
linux: 4.14.180 -> 4.14.181 2020-05-20 08:26:30 -04:00
Tim Steinbach 8b5a3127b3
linux: 5.7-rc4 -> 5.7-rc6 2020-05-19 10:11:10 -04:00
Puck Meerburg 2b5d59cbdc linux: Enable fbcon deferred takeover when possible
This config value ensures that when booting through e.g. UEFI, the
existing framebuffer contents stay put until the first character is
printed. As the default NixOS stage-1 immediately outputs a welcome
message on init, this does not impact it, but it will allow for a cleaner boot when
configured as such.
2020-05-17 17:43:34 +00:00
Tim Steinbach 2c74af6d97
linux/hardened/patches/5.6: 5.6.12.a -> 5.6.13.a 2020-05-15 20:23:17 -04:00
Tim Steinbach 6fd700adf1
linux/hardened/patches/5.4: 5.4.40.a -> 5.4.41.a 2020-05-15 20:23:15 -04:00
Tim Steinbach d18d18a45d
linux/hardened/patches/4.19: 4.19.122.a -> 4.19.123.a 2020-05-15 20:23:09 -04:00
Tim Steinbach 7ef8639163
linux: 5.6.12 -> 5.6.13 2020-05-14 09:19:09 -04:00
Tim Steinbach e3ba43b826
linux: 5.4.40 -> 5.4.41 2020-05-14 09:19:02 -04:00
Tim Steinbach e9dbf2e508
linux: 4.19.122 -> 4.19.123 2020-05-14 09:18:52 -04:00
Matthew Bauer 233e60ca24
Merge pull request #87691 from matthewbauer/linux-rpi3-arm32
linux-rpi: use bcm2709 on arm32 rpi3
2020-05-13 10:35:21 -05:00
Matthew Bauer c78ad0f7f8 linux-rpi: use bcm2709 on arm32 rpi3
“bcmrpi3_defconfig” isn’t provided for arm32, so we need to use
bcm2709_config. When on arm64, we can still use bcmrpi3_defconfig
2020-05-12 13:07:00 -05:00
Tim Steinbach 0c9b897241
linux-hardened: Fix kernel version detection 2020-05-12 08:37:08 -04:00
Tim Steinbach 511b503b0d
linux/hardened/patches/5.6: 5.6.11.a -> 5.6.12.a 2020-05-12 08:35:52 -04:00
Tim Steinbach 2646e949b0
linux/hardened/patches/5.4: 5.4.39.a -> 5.4.40.a 2020-05-12 08:35:50 -04:00
Tim Steinbach fc545e4d23
linux/hardened/patches/4.19: 4.19.121.a -> 4.19.122.a 2020-05-12 08:35:48 -04:00
Tim Steinbach 677ddfef7c
linux/hardened/patches/4.14: 4.14.179.a -> 4.14.180.a 2020-05-12 08:35:46 -04:00
Tim Steinbach 0010ae4960
linux: 5.6.11 -> 5.6.12 2020-05-11 08:43:23 -04:00
Tim Steinbach 98c79eb588
linux: 5.4.39 -> 5.4.40 2020-05-11 08:43:15 -04:00
Tim Steinbach 39426327ce
linux: 4.9.222 -> 4.9.223 2020-05-11 08:43:06 -04:00
Tim Steinbach ddd1363bff
linux: 4.4.222 -> 4.4.223 2020-05-11 08:42:56 -04:00
Tim Steinbach 36a1ca4daa
linux: 4.19.121 -> 4.19.122 2020-05-11 08:42:49 -04:00
Tim Steinbach 6d183ed8d8
linux: 4.14.179 -> 4.14.180 2020-05-11 08:42:38 -04:00
Emily 4688ec0eb2 linux: explicitly enable AIO
This is disabled by default in the linux-hardened patchset, but is
required by e.g. LVM.

Fixes #87260.
2020-05-10 23:23:38 +01:00
Emily 5a5a2d0342 linux/hardened/update.py: pass encoding to subprocess 2020-05-08 15:49:36 +01:00
Emily b2ad58536c linux/hardened/update.py: commit updates in order 2020-05-08 15:49:36 +01:00
Emily 88486c4e76 linux/hardened/update.py: get versions with nix(1) 2020-05-08 15:49:36 +01:00
Emily e77d174fcd linux/hardened/update.py: add type annotations 2020-05-08 15:49:35 +01:00
Emily d6fe0a4e2d linux/hardened: move files into directory 2020-05-08 15:49:35 +01:00
Emily abe4bef033 linux/update-hardened.py: use pathlib 2020-05-08 15:49:35 +01:00
Emily 83c4ac2eb3 linux/update-hardened.py: reformat
$ isort --multi-line=3 --trailing-comma --force-grid-wrap=0 --use-parentheses …
$ black --line-length=80 …

(per the black documentation)
2020-05-08 15:49:35 +01:00
Tim Steinbach 711667dc3e
linux/hardened-patches/4.14: 4.14.178.a -> 4.14.179.a 2020-05-07 20:56:39 -04:00
Tim Steinbach 3d44729f1e
linux/hardened-patches/4.19: 4.19.120.a -> 4.19.121.a 2020-05-07 20:56:38 -04:00
Tim Steinbach ced789fa62
linux/hardened-patches/5.4: 5.4.38.a -> 5.4.39.a 2020-05-07 20:56:38 -04:00
Tim Steinbach 603741e751
linux/hardened-patches/5.6: 5.6.10.a -> 5.6.11.a 2020-05-07 20:56:38 -04:00
Tim Steinbach f82e836e1d
linux: 5.6.10 -> 5.6.11 2020-05-06 15:58:09 -04:00
Tim Steinbach bcbc507143
linux: 5.4.38 -> 5.4.39 2020-05-06 15:57:20 -04:00
Tim Steinbach ac287ce319
linux: 4.19.120 -> 4.19.121 2020-05-06 15:56:35 -04:00
Vladimír Čunát 54eb2d1018
Merge branch 'staging-next'
Status on Hydra for linuxes seems good enough:
https://hydra.nixos.org/eval/1585703?filter=linux&compare=1585482&full=#tabs-now-fail
2020-05-06 08:20:05 +02:00
Jörg Thalheim ee8cde8d1c
Merge pull request #86391 from kwohlfahrt/gpio-utils 2020-05-06 06:57:14 +01:00
Tim Steinbach 32585ddcec
linux: 4.9.221 -> 4.9.222 2020-05-05 14:35:55 -04:00
Tim Steinbach 7f75ff0777
linux: 4.4.221 -> 4.4.222 2020-05-05 14:35:46 -04:00
Tim Steinbach 018f49380e
linux: 4.14.178 -> 4.14.179 2020-05-05 14:35:33 -04:00
Frederik Rietdijk 9875bbae75 Merge master into staging-next 2020-05-05 19:51:09 +02:00
Kai Wohlfahrt 89d3a605e3 gpio-tools: init in kernel 5.4
Linux provides some tools to interact with the gpiochip interface (which
replaces the deprecated sysfs GPIO interface). Expose these as a
package.

The tool has not changed much recently, so there is no need to package a
version for each kernel.
2020-05-04 15:02:55 +01:00
Tim Steinbach b6456e528e
linux: 5.7-rc3 -> 5.7-rc4 2020-05-04 08:41:50 -04:00
Tim Steinbach d51998798f
linux/hardened-patches/4.14: 4.14.177.a -> 4.14.178.a 2020-05-03 13:17:07 -04:00
Tim Steinbach 4df77514e7
linux/hardened-patches/4.19: 4.19.119.a -> 4.19.120.a 2020-05-03 13:17:03 -04:00
Tim Steinbach c5d56b1790
linux/hardened-patches/5.4: 5.4.36.a -> 5.4.38.a 2020-05-03 13:16:59 -04:00
Tim Steinbach e7b54c19de
linux/hardened-patches/5.6: 5.6.8.a -> 5.6.10.a 2020-05-03 13:16:49 -04:00
Linus Heckemann 88e07d3a96
Merge pull request #86598 from Valodim/aarch64-hidraw
linux: CONFIG_HIDRAW=y
2020-05-03 11:04:56 +02:00
Vincent Breitmoser bdd2d3ccb2 linux: CONFIG_HIDRAW=y 2020-05-02 17:43:43 +02:00
Tim Steinbach c46b55e640
linux: 5.6.8 -> 5.6.10 2020-05-02 14:46:24 -04:00
Tim Steinbach ba19c248b7
linux: 5.4.36 -> 5.4.38 2020-05-02 14:46:24 -04:00
Tim Steinbach 13e51bb636
linux: 4.9.220 -> 4.9.221 2020-05-02 14:46:23 -04:00
Tim Steinbach 7e200a0177
linux: 4.4.220 -> 4.4.221 2020-05-02 14:46:23 -04:00
Tim Steinbach 92c2abe85f
linux: 4.19.119 -> 4.19.120 2020-05-02 14:46:23 -04:00
Tim Steinbach 163e5a8d0c
linux: 4.14.177 -> 4.14.178 2020-05-02 14:46:22 -04:00
Frederik Rietdijk afb1041148 Merge master into staging-next 2020-05-02 09:39:00 +02:00
Tim Steinbach 61b97c17d6
linux: 5.7-rc2 -> 5.7-rc3 2020-05-01 11:43:43 -04:00
Frederik Rietdijk 484ee79050 Merge staging-next into staging 2020-05-01 08:57:10 +02:00
Tim Steinbach 5fa90ed9e2
linux/hardened-patches/4.19: 4.19.118.a -> 4.19.119.a 2020-04-30 10:05:58 -04:00
Tim Steinbach 22c0c49d61
linux/hardened-patches/5.4: 5.4.35.a -> 5.4.36.a 2020-04-30 10:05:56 -04:00
Tim Steinbach 53ea32be28
linux/hardened-patches/5.6: 5.6.7.a -> 5.6.8.a 2020-04-30 10:05:50 -04:00
Tim Steinbach bbf8ce13eb
linux: 5.6.7 -> 5.6.8 2020-04-29 15:38:11 -04:00
Tim Steinbach 100e81982d
linux: 5.4.35 -> 5.4.36 2020-04-29 15:38:11 -04:00
Tim Steinbach ca44d3eb1e
linux: 4.19.118 -> 4.19.119 2020-04-29 15:38:11 -04:00
Florian Klink f046de4210
Merge pull request #86168 from lblasc/sof-firmware
Sound Open Firmware support, sof-firmware: init at 1.4.2, update kernel config
2020-04-29 12:36:53 +02:00
Luka Blaskovic 6fc9fd53db linux config: enable Sound Open Firmware support 2020-04-29 07:31:49 +00:00
Arian van Putten d103dc4998 linux: do not depend on systemd indirectly
utillinux depends on systemd because:

* uuidd supports socket activation
* lslogins can show recent journal entries
* fstrim comes with a service file (and we use this in NixOS)
* logger can write journal entries
(See https://www.openembedded.org/pipermail/openembedded-core/2015-February/102069.html)

systemd doesn't depend on utillinux but on utillinuxMinimal which is a
version of utillinux without these features to avoid cyclic
dependencies.

With this change, the linux kernel (of which i don't fully understand
why it would depend on util-linux in the first place, but this was added in
https://github.com/NixOS/nixpkgs/pull/32137/files without too much
explanation) depends on the minimal version of util-linux too.

This makes it that every time we change build flags in systemd
the linux kernel doesn't have to wastefully rebuild.
2020-04-28 15:34:44 +02:00
Tim Steinbach a9fa6028ad
linux/hardened-patches/4.19: 4.19.117.a -> 4.19.118.a 2020-04-26 12:23:07 -04:00
Tim Steinbach 4af476e2b3
linux/hardened-patches/5.4: 5.4.34.a -> 5.4.35.a 2020-04-26 12:23:05 -04:00
Tim Steinbach 334627d92f
linux/hardened-patches/5.6: 5.6.6.a -> 5.6.7.a 2020-04-26 12:23:03 -04:00
Tim Steinbach be48bf2ba8
linux/hardened-patches/4.14: 4.14.176.a -> 4.14.177.a 2020-04-26 12:23:01 -04:00
Tim Steinbach 4883dde6b7
linux: 4.9.219 -> 4.9.220 2020-04-26 12:22:41 -04:00
Tim Steinbach 6efb2ba2bf
linux: 4.4.219 -> 4.4.220 2020-04-26 12:22:05 -04:00
Tim Steinbach 6617a79ba3
linux: 4.14.176 -> 4.14.177 2020-04-26 12:21:32 -04:00
Austin Seipp d403911451
linux_testing: 5.6-rc7 -> 5.7-rc2
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2020-04-24 10:58:31 -05:00
Emily 2c1db9649e linux_*_hardened: index patches by major kernel version
This will avoid breaking the build whenever a non-major kernel update
happens. In the update script, we map each kernel version to the latest
patch for the latest kernel version less than or equal to what we
have packaged.
2020-04-23 18:50:26 +01:00
Jörg Thalheim 6dfd563633
linux_latest-hardened: fix evaluation 2020-04-23 16:45:06 +01:00
Jörg Thalheim 1bceaa1cee
linux_hardened: fix evaluation 2020-04-23 15:52:14 +01:00
Tim Steinbach 45c22565f6
linux: 5.6.6 -> 5.6.7 2020-04-23 08:17:15 -04:00
Tim Steinbach 2f10053834
linux: 5.4.34 -> 5.4.35 2020-04-23 08:17:06 -04:00
Tim Steinbach 62a608fd63
linux: 4.19.117 -> 4.19.118 2020-04-23 08:16:58 -04:00
Frederik Rietdijk cff0669a48 Merge master into staging-next 2020-04-23 08:11:16 +02:00
Tim Steinbach 629068fe5b
linux_latest-libre: 17402 -> 17445 2020-04-22 19:40:01 -04:00
kraem fca903c7dd
linux/hardened-patches/4.19.117: init at 4.19.117.a 2020-04-22 02:12:28 +02:00
kraem 99f30a5635
linux/hardened-patches/5.4.34: init at 5.4.34.a 2020-04-22 02:12:25 +02:00
kraem 3c81b3df4e
linux/hardened-patches/5.5.19: init at 5.5.19.a 2020-04-22 02:12:21 +02:00
kraem c8b5e37764
linux/hardened-patches/5.6.6: init at 5.6.6.a 2020-04-22 02:12:17 +02:00
kraem efafc50f5c
linux/hardened-patches/4.19.116: remove 2020-04-21 22:18:03 +02:00
kraem 8f2e9fcadd
linux/hardened-patches/5.5.18: remove 2020-04-21 22:18:03 +02:00
kraem 9ed70f4e46
linux/hardened-patches/5.6.5: remove 2020-04-21 22:18:03 +02:00
kraem 15807c58ad
linux/hardened-patches/5.4.33: remove 2020-04-21 22:18:02 +02:00
kraem c9cf25bc61
linux: 5.6.5 -> 5.6.6 2020-04-21 21:59:59 +02:00
kraem 1e23dcbf22
linux: 5.5.18 -> 5.5.19 2020-04-21 21:59:22 +02:00
kraem 18c2b5a9aa
linux: 5.4.33 -> 5.4.34 2020-04-21 21:58:45 +02:00
kraem e074301be8
linux: 4.19.116 -> 4.19.117 2020-04-21 21:58:03 +02:00
Frederik Rietdijk 803b3d296c Merge staging-next into staging 2020-04-21 08:29:51 +02:00
kraem 523fe98821 linux/hardened-patches/4.19.116: 4.19.116.NixOS-a -> 4.19.116.a 2020-04-20 10:05:36 -04:00
kraem 45343beffe linux/hardened-patches/5.4.33: 5.4.33.NixOS-a -> 5.4.33.a 2020-04-20 10:05:36 -04:00
kraem 48d908b731 linux/hardened-patches/5.5.18: init at 5.5.18.a 2020-04-20 10:05:36 -04:00
kraem 0fd9293703 linux/hardened-patches/5.6.5: init at 5.6.5.a 2020-04-20 10:05:36 -04:00
kraem e7a65e6c41 linux/hardened-patches/5.5.17: remove 2020-04-20 10:05:36 -04:00
kraem eb41f8122e linux/hardened-patches/5.6.4: remove 2020-04-20 10:05:36 -04:00
kraem 8879086cfc linux: 5.5.17 -> 5.5.18 2020-04-20 10:05:36 -04:00
kraem 4307923b86 linux: 5.6.4 -> 5.6.5 2020-04-20 10:05:36 -04:00
Yegor Timoshenko 6f1165a0cb
Merge pull request #84522 from emilazy/add-linux-hardened-patches
linux_*_hardened: use linux-hardened patch set
2020-04-19 20:01:35 +03:00
Vladimír Čunát d96487b9ca
Merge branch 'master' into staging-next
Hydra nixpkgs: ?compare=1582510
2020-04-18 07:42:26 +02:00
John Ericson 33c2a76c5e Merge remote-tracking branch 'upstream/master' into staging 2020-04-17 18:40:51 -04:00
Emily 7fdfe5381d linux_*_hardened: don't set FORTIFY_SOURCE
Upstreamed in anthraxx/linux-hardened@d12c0d5f0c.
2020-04-17 16:13:39 +01:00
Emily ed89b5b3f1 linux_*_hardened: don't set PANIC_ON_OOPS
Upstreamed in anthraxx/linux-hardened@366e0216f1.
2020-04-17 16:13:39 +01:00
Emily 0d5f1697b7 linux_*_hardened: don't set SLAB_FREELIST_{RANDOM,HARDENED}
Upstreamed in anthraxx/linux-hardened@786126f177,
anthraxx/linux-hardened@44822ebeb7.
2020-04-17 16:13:39 +01:00
Emily 4fb796e341 linux_*_hardened: don't set HARDENED_USERCOPY_FALLBACK
Upstreamed in anthraxx/linux-hardened@c1fe7a68e3,
anthraxx/linux-hardened@2c553a2bb1.
2020-04-17 16:13:39 +01:00
Emily 3eeb5240ac linux_*_hardened: don't set DEBUG_LIST
Upstreamed in anthraxx/linux-hardened@6b20124185.
2020-04-17 16:13:39 +01:00
Emily 0611462e33 linux_*_hardened: don't set {,IO_}STRICT_DEVMEM
STRICT_DEVMEM is on by default in upstream 5.6.2; IO_STRICT_DEVMEM is
turned on by anthraxx/linux-hardened@103d23cb66.

Note that anthraxx/linux-hardened@db1d27e10e
disables DEVMEM by default, so this is only relevant if that default is
overridden to turn it back on.
2020-04-17 16:13:39 +01:00
Emily 303bb60fb1 linux_*_hardened: don't set DEBUG_WX
Upstreamed in anthraxx/linux-hardened@55ee7417f3.
2020-04-17 16:13:39 +01:00
Emily 33b94e5a44 linux_*_hardened: don't set BUG_ON_DATA_CORRUPTION
Upstreamed in anthraxx/linux-hardened@3fcd15014c.
2020-04-17 16:13:39 +01:00
Emily db6b327508 linux_*_hardened: don't set LEGACY_VSYSCALL_NONE
Upstreamed in anthraxx/linux-hardened@d300b0fdad.
2020-04-17 16:13:39 +01:00
Emily 130f6812be linux_*_hardened: don't set RANDOMIZE_{BASE,MEMORY}
These are on by default for x86 in upstream linux-5.6.2, and turned on
for arm64 by anthraxx/linux-hardened@90f9670bc3.
2020-04-17 16:13:39 +01:00
Emily 8c68055432 linux_*_hardened: don't set MODIFY_LDT_SYSCALL
Upstreamed in anthraxx/linux-hardened@05644876fa.
2020-04-17 16:13:39 +01:00
Emily 8efe83c22e linux_*_hardened: don't set DEFAULT_MMAP_MIN_ADDR
Upstreamed in anthraxx/linux-hardened@f1fe0a64dd.
2020-04-17 16:13:39 +01:00
Emily 3d4c8ae901 linux_*_hardened: don't set VMAP_STACK
This has been on by default upstream for as long as it's been an option.
2020-04-17 16:13:39 +01:00
Emily 7d5352df31 linux_*_hardened: don't set X86_X32
As far as I can tell, this has never defaulted to on upstream, and our
common kernel configuration doesn't turn it on, so the attack surface
reduction here is somewhat homeopathic.
2020-04-17 16:13:39 +01:00
Emily 0d4f35efd4 linux_*_hardened: use linux-hardened patch set
This is an updated version of the former upstream,
https://github.com/AndroidHardeningArchive/linux-hardened, and provides
a minimal set of additional hardening patches on top of upstream.

The patch already incorporates many of our hardened profile defaults,
and releases are timely (Linux 5.5.15 and 5.6.2 were released on
2020-04-02; linux-hardened patches for them came out on 2020-04-03 and
2020-04-04 respectively).
2020-04-17 16:13:39 +01:00
Emily 3d01e802bd linux: explicitly enable SYSVIPC
The linux-hardened patch set removes this default, probably because of
its original focus on Android kernel hardening.
2020-04-17 16:12:29 +01:00
Tim Steinbach e341107367
linux: 5.4.32 -> 5.4.33 2020-04-17 08:34:01 -04:00
Tim Steinbach d9258d33be
linux: 4.19.115 -> 4.19.116 2020-04-17 08:34:01 -04:00
Niklas Hambüchen f16ae2da3e linux: Enable `CONFIG_NET_DROP_MONITOR` by default.
Needed for subscribing to dropped packets (e.g. via `dropwatch`).
2020-04-14 20:07:51 +02:00
Jan Tojnar b4a6714571
Merge branch 'staging-next' into staging 2020-04-13 18:54:59 +02:00
Jan Tojnar a04625379a
Merge branch 'master' into staging-next 2020-04-13 18:50:35 +02:00
Tim Steinbach f6e64feb14
linux: 5.6.3 -> 5.6.4 2020-04-13 08:36:35 -04:00
Tim Steinbach bba4a30f8c
linux: 5.5.16 -> 5.5.17 2020-04-13 08:36:27 -04:00
Tim Steinbach 2b6e16abe0
linux: 5.4.31 -> 5.4.32 2020-04-13 08:36:19 -04:00
Tim Steinbach f47969645b
linux: 4.9.218 -> 4.9.219 2020-04-13 08:36:11 -04:00
Tim Steinbach e06d2a4682
linux: 4.19.114 -> 4.19.115 2020-04-13 08:36:04 -04:00
Tim Steinbach f717bfeedb
linux: 4.14.175 -> 4.14.176 2020-04-13 08:35:56 -04:00
Tim Steinbach 3a8f6159cb
linux: 4.4.218 -> 4.4.219 2020-04-13 08:35:32 -04:00
Matthieu Coudron bc6b37e967 fixup! kernel: fix errors in configuration 2020-04-11 14:04:25 +02:00
Michael Reilly 84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
Jan Tojnar 55a5c128d4
Merge branch 'staging-next' into staging 2020-04-10 12:13:27 +02:00
Jan Tojnar 1ab03c3a76
Merge branch 'master' into staging-next 2020-04-10 12:12:56 +02:00
Tim Steinbach 7bd91fe7af
linux: 5.6.2 -> 5.6.3 2020-04-08 08:51:08 -04:00
Tim Steinbach 1c637d2326
linux: 5.5.15 -> 5.5.16 2020-04-08 08:51:07 -04:00
Tim Steinbach 5653337922
linux: 5.4.30 -> 5.4.31 2020-04-08 08:51:07 -04:00
Eelco Dolstra 50913242ab
Merge pull request #81500 from primeos/tcp-cong-switch-to-cubic
linux config: Set TCP_CONG_CUBIC=yes to restore the default
2020-04-06 17:11:31 +02:00
Jörg Thalheim a737f030cf
Merge pull request #71481 from eadwu/bcachefs/update-10
bcachefs: update 10
2020-04-06 15:43:36 +01:00
Edmund Wu 04a5e5ab7c
linux_testing_bcachefs: 5.3.2020.03.25 -> 5.3.2020.04.04 2020-04-06 10:29:33 -04:00
Frederik Rietdijk edaa972160 Merge staging-next into staging 2020-04-03 21:55:10 +02:00
Florian Klink 35916a8c4b Merge pull request #83658 from Emantor/topic/kernel-snd-ca0132
linux config: enable Creative Soundblaster DSP loading
2020-04-02 22:41:57 +02:00
Tim Steinbach c36ec10158
linux: 4.9.217 -> 4.9.218 2020-04-02 14:03:09 -04:00
Tim Steinbach e2df587f25
linux: 4.4.217 -> 4.4.218 2020-04-02 14:03:02 -04:00
Tim Steinbach 782db49b5a
linux: 4.14.174 -> 4.14.175 2020-04-02 14:02:48 -04:00
Tim Steinbach 4fbd9e3ab8
linux: 5.6.1 -> 5.6.2 2020-04-02 10:03:15 -04:00
Tim Steinbach f2025f2d6d
linux: 5.5.14 -> 5.5.15 2020-04-02 10:03:07 -04:00
Tim Steinbach bf0b6ab809
linux: 5.4.29 -> 5.4.30 2020-04-02 10:02:52 -04:00
Tim Steinbach d47ba3e4b5
linux: 4.19.113 -> 4.19.114 2020-04-02 10:02:40 -04:00
Matthieu Coudron 121b17e1ac kernel: fix errors in configuration
With the fix in kernel configuration merging, some kernel configuration items
marked as mandatory now correctly trigger an error when unused (while they
previously were unused).
2020-04-01 22:28:53 +02:00
Matthieu Coudron b9a4e6953d kernel: fix config generation
Addresses https://github.com/NixOS/nixpkgs/issues/71803:
Kernel options are not merged as described, especially the "optional"
aspects. The error silences legitimate warnings.
2020-04-01 22:25:57 +02:00
Tim Steinbach ef3f3f2728
linux_latest-libre: 17387 -> 17402 2020-04-01 10:46:07 -04:00
Tim Steinbach 902ebcdd44
linux: 5.5.13 -> 5.5.14 2020-04-01 10:46:06 -04:00
Tim Steinbach 7bae57f249
linux: 5.4.28 -> 5.4.29 2020-04-01 10:46:06 -04:00
Tim Steinbach 7f56fdd997
linux: Init 5.6.1
Change linux_latest to 5.6
2020-04-01 10:46:02 -04:00
Tim Steinbach c76bad0ec0
linux: 5.6-rc5 -> 5.6-rc7 2020-03-29 16:50:02 -04:00
Rouven Czerwinski 62cdbd678c linux config: enable SND CA0132 DSP loading
Since we select everything as a module, snd_hda_codec_ca0132 is built as
well. DSP loading is not enabled by default, but without it the
soundcard produces timeouts within ALSA and does not emit sound.
Explicitly enable the firmware loading to ensure Soundblaster
Z/Zx/ZxR/Recon devices can be used with NixOS.
The patch to enable this by default in the kernel is staged for 5.8.
2020-03-29 21:11:17 +02:00
Jörg Thalheim ac45e96d2f
Merge pull request #83220 from dasj19/linux-libre-fix
linux-libre: added --force flag for deblobbing.
2020-03-29 15:03:22 +01:00
Edmund Wu 00e7a675f7
linux_testing_bcachefs: 5.2.2019.10.12 -> 5.3.2020.03.25 2020-03-26 12:12:43 -04:00
Tim Steinbach ec87ed26e6
linux: 5.5.11 -> 5.5.13 2020-03-25 13:03:19 -04:00
Tim Steinbach bec620d85b
linux: 5.4.27 -> 5.4.28 2020-03-25 13:03:10 -04:00
Tim Steinbach 9105efdcde
linux: 4.19.112 -> 4.19.113 2020-03-25 13:02:56 -04:00
Daniel Șerbănescu 8431497dd2 linux-libre: added --force flag for deblobbing. 2020-03-23 16:07:13 +01:00
Tim Steinbach f0d17c2a17
linux_latest-libre: 17322 -> 17387 2020-03-22 12:05:45 -04:00
Tim Steinbach 8055a37aca
linux: 5.5.9 -> 5.5.11 2020-03-22 12:05:34 -04:00
Tim Steinbach 05716b70b0
linux: 5.4.25 -> 5.4.27 2020-03-22 12:05:08 -04:00
Tim Steinbach 07ffdf9de3
linux: 4.9.216 -> 4.9.217 2020-03-22 12:04:42 -04:00
Tim Steinbach 04d15d1839
linux: 4.4.216 -> 4.4.217 2020-03-22 12:04:20 -04:00
Tim Steinbach 8e278a8e2d
linux: 4.19.109 -> 4.19.112 2020-03-22 12:03:57 -04:00
Tim Steinbach 1315193c36
linux: 4.14.173 -> 4.14.174 2020-03-22 12:02:43 -04:00
Graham Christensen 244178e166
Merge pull request #82006 from emilazy/enable-linux-hardened-ia32-emulation
linuxPackages_{,_latest,_testing}_hardened: enable 32-bit emulation
2020-03-14 09:20:58 -04:00
Tim Steinbach f9fcf29ef2
linux: 5.4.24 -> 5.4.25 2020-03-14 04:58:48 -04:00
Silvan Mosberger eff447b321
Merge pull request #70157 from teto/lib_kernel
Add lib.kernel
2020-03-12 23:53:42 +01:00
Tim Steinbach cd167a02b8
linux: 5.6-rc3 -> 5.6-rc5 2020-03-12 05:57:21 -04:00
Tim Steinbach 85c46f5a5a
linux: 5.5.8 -> 5.5.9 2020-03-12 05:57:20 -04:00
Tim Steinbach 930fc70bfc
linux: 4.9.215 -> 4.9.216 2020-03-12 05:57:20 -04:00
Tim Steinbach 3d12317a7e
linux: 4.4.215 -> 4.4.216 2020-03-12 05:57:20 -04:00
Tim Steinbach 24898ff826
linux: 4.19.108 -> 4.19.109 2020-03-12 05:57:20 -04:00
Tim Steinbach ff6e097af1
linux: 4.14.172 -> 4.14.173 2020-03-12 05:57:19 -04:00
Emily b628400f5e linuxPackages_{,_latest,_testing}_hardened: enable 32-bit emulation
Per discussion in #81943.

Resolves #79798.
2020-03-07 18:50:40 +00:00
Tim Steinbach 028bf0f722
linux: 5.5.7 -> 5.5.8 2020-03-06 07:52:25 -05:00
Tim Steinbach 0c9564891c
linux: 5.4.23 -> 5.4.24 2020-03-06 07:52:25 -05:00
Tim Steinbach 2377b03970
linux: 4.19.107 -> 4.19.108 2020-03-06 07:52:19 -05:00
Michael Weiss 60f4345e37
linux config: Set TCP_CONG_CUBIC=yes to restore the default
This will switch the default TCP congestion control algorithm from
new Reno to CUBIC. CUBIC is the default since Linux kernel 2.6.19
(see 597811ec167fa) and most (all?) distributions keep this default
(e.g. Debian and Ubuntu). On NixOS the default was still new Reno
because generate-config.pl changes TCP_CONG_CUBIC from y to m (since we
try to build everything as a module by default).

To check the active and available algorithms:
$ sysctl net.ipv4.tcp_congestion_control
net.ipv4.tcp_congestion_control = cubic
$ sysctl net.ipv4.tcp_available_congestion_control
net.ipv4.tcp_available_congestion_control = cubic reno

Note: E.g. x86_64_defconfig sets TCP_CONG_CUBIC=y indirectly via
CONFIG_TCP_CONG_ADVANCED=y (but CUBIC is also the default if set to no,
see net/ipv4/Kconfig).
2020-03-02 10:57:47 +01:00
Florian Klink 0a8af284e5
Merge pull request #81415 from NinjaTrappeur/nin-routing-policy-aarch-kernel
linux: add policy routing config flag
2020-03-01 14:50:45 -08:00
Félix Baylac-Jacqué 6896b1cb1d
linux: add policy routing config flag for aarch64
CONFIG_IP_MULTIPLE_TABLES is part of the default x86 kernel config but
absent from the Aarch64 one. Adding explicitely this flag together
with its dependency IP_ADVANCED_ROUTER.

Both of these config flags are needed to use the routing policy
facilities.
2020-03-01 20:25:44 +01:00
Tim Steinbach 1e41aa8030
linux: 5.6-rc2 -> 5.6-rc3 2020-03-01 10:40:36 -05:00
Tim Steinbach b4af096c4c
linux: 5.5.6 -> 5.5.7 2020-02-28 15:31:15 -05:00
Tim Steinbach fc8e5c65ca
linux: 5.4.22 -> 5.4.23 2020-02-28 15:30:05 -05:00
Tim Steinbach 24720dd250
linux: 4.9.214 -> 4.9.215 2020-02-28 11:06:35 -05:00
Tim Steinbach 44523d0bda
linux: 4.4.214 -> 4.4.215 2020-02-28 11:05:20 -05:00
Tim Steinbach 28fee3fea5
linux: 4.19.106 -> 4.19.107 2020-02-28 11:04:31 -05:00
Tim Steinbach 9f5fa90435
linux: 4.14.171 -> 4.14.172 2020-02-28 11:03:33 -05:00
Tim Steinbach faaa55f4c3
linux: 5.5.5 -> 5.5.6 2020-02-24 08:13:14 -05:00
Tim Steinbach 33780083d7
linux: 5.4.21 -> 5.4.22 2020-02-24 08:12:12 -05:00
Tim Steinbach e6e1f767d2
linux: 4.19.105 -> 4.19.106 2020-02-24 08:11:28 -05:00
Tim Steinbach 86bdbe2c9b
linux: 5.5.4 -> 5.5.5 2020-02-20 08:22:22 -05:00
Tim Steinbach 887d2886e3
linux: 5.4.20 -> 5.4.21 2020-02-20 08:22:21 -05:00
Tim Steinbach 49b4266ad2
linux: 4.19.104 -> 4.19.105 2020-02-20 08:22:21 -05:00
Tim Steinbach 3f448f08aa
linux: 5.6-rc1 -> 5.6-rc2 2020-02-18 16:53:57 -05:00
Tim Steinbach fe61323050
linux: 5.5.3 -> 5.5.4 2020-02-15 15:43:28 -05:00
Tim Steinbach f5357bbe1f
linux: 5.4.19 -> 5.4.20 2020-02-15 15:43:28 -05:00
Tim Steinbach 4c407a299f
linux: 4.9.213 -> 4.9.214 2020-02-15 15:43:27 -05:00
Tim Steinbach e2315d6a7e
linux: 4.4.213 -> 4.4.214 2020-02-15 15:43:27 -05:00
Tim Steinbach f350e37773
linux: 4.19.103 -> 4.19.104 2020-02-15 15:43:26 -05:00
Tim Steinbach daee1daf5d
linux: 4.14.170 -> 4.14.171 2020-02-15 15:43:26 -05:00
Tim Steinbach 25f706b26c
linux: 5.5-rc7 -> 5.6-rc1 2020-02-13 07:41:37 -05:00
Tim Steinbach 0b3dd6026e
linux_latest-libre: 17318 -> 17322 2020-02-12 09:11:05 -05:00
Tim Steinbach da8c2896e8
linux: 5.5.2 -> 5.5.3 2020-02-11 14:42:38 -05:00
Tim Steinbach 05b407ac81
linux: 5.4.18 -> 5.4.19 2020-02-11 14:42:30 -05:00
Tim Steinbach ae4b390551
linux: 4.19.102 -> 4.19.103 2020-02-11 14:42:18 -05:00
Tim Steinbach 657582e43a
linux_latest-libre: 17262 -> 17318 2020-02-10 07:23:08 -05:00
Tim Steinbach 4d8f7a7905
linux: 5.4.17 -> 5.4.18 2020-02-10 07:23:08 -05:00
Tim Steinbach 54c0c2ee70
linux: 4.19.101 -> 4.19.102 2020-02-10 07:23:07 -05:00
Tim Steinbach 854eb8f3ef
linux: 4.14.169 -> 4.14.170 2020-02-10 07:23:07 -05:00
Vladimír Čunát 8130f3c1c2
linux config: revert BPF_JIT_ALWAYS_ON=yes
This reverts a small bit of af808bd82 from PR #73328.  Fixes #79304:
tests.installer.simpleUefiSystemdBoot.x86_64-linux

I still don't know why the regression happened, but this feature doesn't
seem important enough to block channel now, though it reportedly helps
to mitigate spectre 2 attack CVE-2017-5715.
2020-02-09 08:22:00 +01:00
Frederik Rietdijk 419bc0a4cd Revert "Revert "Merge master into staging-next""
In 87a19e9048 I merged staging-next into master using the GitHub gui as intended.
In ac241fb7a5 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master.
Thinking this may cause trouble, I reverted it in 0be87c7979. This was however wrong, as it "removed" master.

This reverts commit 0be87c7979.
2020-02-05 19:41:25 +01:00
Frederik Rietdijk 0be87c7979 Revert "Merge master into staging-next"
I merged master into staging-next but accidentally pushed it to master.
This should get us back to 87a19e9048.

This reverts commit ac241fb7a5, reversing
changes made to 76a439239e.
2020-02-05 19:18:35 +01:00
Tim Steinbach ab0e69030e
linux: 5.5.1 -> 5.5.2 2020-02-05 08:30:01 -05:00
Tim Steinbach 447c14e62f
linux: 4.9.212 -> 4.9.213 2020-02-05 08:29:45 -05:00
Tim Steinbach 5b5f9d23f4
linux: 4.4.212 -> 4.4.213 2020-02-05 08:29:30 -05:00
misuzu 149737a2a4 linux: Enable NVME_HWMON
This is available for 5.5+ and enables support for
NVMe drives temperature reporting
2020-02-03 19:08:45 +02:00
Tim Steinbach 508fdb7a7c
linux: 5.5 -> 5.5.1 2020-02-01 09:23:08 -05:00
Tim Steinbach 9b668eb4cc
linux: 5.4.16 -> 5.4.17 2020-02-01 09:18:52 -05:00
Tim Steinbach 0f20047e4c
linux: 4.19.100 -> 4.19.101 2020-02-01 09:18:52 -05:00
Tim Steinbach 38854fa22c
linux: 5.4.15 -> 5.4.16 2020-01-30 16:41:12 -05:00
Tim Steinbach 586fd9a43a
linux: 4.9.211 -> 4.9.212 2020-01-30 16:41:12 -05:00
Tim Steinbach 53c76abcae
linux: 4.4.211 -> 4.4.212 2020-01-30 16:41:12 -05:00
Tim Steinbach 104287202b
linux: 4.19.98 -> 4.19.100 2020-01-30 16:41:11 -05:00
Tim Steinbach 713b0ec29a
linux: 4.14.167 -> 4.14.169 2020-01-30 16:41:11 -05:00
Jörg Thalheim 0fc20ed4fb
perf: fix build on 5.5 2020-01-30 12:11:16 +00:00
Franz Pletz ff54d08dc8
linux_5_5: init at 5.5 2020-01-29 03:00:29 +01:00
Frederik Rietdijk dce0ca29d9 Merge master into staging-next 2020-01-28 10:46:13 +01:00
Will Dietz b856b24bfa
Merge pull request #77490 from dtzWill/fix/kernel-update-sed-e
kernel/update.sh: always use -e
2020-01-26 16:42:21 -06:00
Tim Steinbach 8250469517
linux: 5.4.14 -> 5.4.15 2020-01-26 10:18:15 -05:00
Samuel Dionne-Riel 5afd503a9c
Merge pull request #77475 from lopsided98/linux-hardkernel-update
linux_hardkernel_4_14: 4.14.120-160 -> 4.14.165-172
2020-01-25 18:50:37 -05:00
Tim Steinbach 30ad9a98d4
linux_latest-libre: 17198 -> 17262 2020-01-24 11:18:02 -05:00
Tim Steinbach 461e8d1d59
linux: 5.4.13 -> 5.4.14 2020-01-24 11:17:37 -05:00
Tim Steinbach 35da29dd68
linux: 4.9.210 -> 4.9.211 2020-01-24 11:17:10 -05:00
Tim Steinbach 53616e8c4e
linux: 4.4.210 -> 4.4.211 2020-01-24 11:16:52 -05:00
Tim Steinbach fd2ddc3288
linux: 4.19.97 -> 4.19.98 2020-01-24 11:16:38 -05:00
Tim Steinbach 0bb5075c62
linux: 4.14.166 -> 4.14.167 2020-01-24 11:15:31 -05:00
Ben Wolsieffer 07b977df89 linux_hardkernel_4_14: 4.14.120-160 -> 4.14.165-172 2020-01-22 17:56:24 -05:00
Tim Steinbach d9e2bcb21d
linux: 5.5-rc6 -> 5.5-rc7 2020-01-20 07:47:25 -05:00
Tim Steinbach 64d20fe9cc
linux: 5.4.12 -> 5.4.13 2020-01-18 11:41:44 -05:00
Tim Steinbach cac9f210cf
linux: 4.19.96 -> 4.19.97 2020-01-18 11:41:12 -05:00
Tim Steinbach e14d19be43
linux: 4.14.165 -> 4.14.166 2020-01-18 11:40:37 -05:00
Frederik Rietdijk bcd8c6b8dc Merge master into staging-next 2020-01-17 17:08:16 +01:00
Tim Steinbach fb06094ae3
linux: 5.4.11 -> 5.4.12 2020-01-15 09:12:21 -05:00
Tim Steinbach 155d5292cc
linux: 4.9.209 -> 4.9.210 2020-01-15 09:12:06 -05:00
Tim Steinbach ea1728f306
linux: 4.4.209 -> 4.4.210 2020-01-15 09:11:44 -05:00
Tim Steinbach 8dcf516adf
linux: 4.19.95 -> 4.19.96 2020-01-15 09:11:26 -05:00
Tim Steinbach 4d3f1ca18c
linux: 4.14.164 -> 4.14.165 2020-01-15 09:10:50 -05:00
Frederik Rietdijk 2a88c3c302 Merge staging-next into staging 2020-01-15 09:23:28 +01:00
Tim Steinbach 7184df6beb
linux: 5.5-rc5 -> 5.5-rc6 2020-01-13 19:53:27 -05:00
Tim Steinbach a8144b1ad3
linux_latest-libre: 17192 -> 17198 2020-01-13 19:25:14 -05:00
Alyssa Ross 1d51514ab2 linux-libre.updateScript: fix git commit
With nothing staged and no paths given, previously this wouldn't
actually do anything.
2020-01-13 16:44:48 +00:00
Alyssa Ross 345f6712e3 linux-libre.updateScript: don't update if unchanged
The revision applies to the whole SVN tree, not just the scripts
directory, so the revision will increment sometimes with no change in
content.
2020-01-13 16:44:48 +00:00
Alyssa Ross be4d80d721 linux-libre.updateScript: fix COMMIT option
Because bash was being run with -u, if COMMIT wasn't set in the
environment the script would just crash here, rather than exiting
successfully.
2020-01-13 16:44:48 +00:00
Tim Steinbach 583e4b8d89
linux_latest-libre: 17190 -> 17192 2020-01-13 07:23:03 -05:00
Lassulus bc4921a584
Merge pull request #73328 from magenbluten/af_xdp
linux config: add support for xdp sockets and ebpf jit
2020-01-13 05:54:57 +01:00
Tim Steinbach 6d65b859ed
linux: 5.5-rc3 -> 5.5-rc5 2020-01-12 17:13:48 -05:00
Tim Steinbach f2251b483c
linux: Remove 5.3
The 5.3.x series has been marked as EOL upstream
2020-01-12 16:45:24 -05:00
Tim Steinbach 0f8090b972
linux_latest-libre: 17185 -> 17190 2020-01-12 16:45:24 -05:00
Tim Steinbach ebf3c67a1b
linux: 5.4.10 -> 5.4.11 2020-01-12 16:45:24 -05:00
Tim Steinbach ad4637a2b8
linux: 4.9.208 -> 4.9.209 2020-01-12 16:45:23 -05:00
Tim Steinbach aab055fc54
linux: 4.4.208 -> 4.4.209 2020-01-12 16:45:23 -05:00
Tim Steinbach eadba9cd51
linux: 4.19.94 -> 4.19.95 2020-01-12 16:45:23 -05:00
Tim Steinbach e69455a8be
linux: 4.14.163 -> 4.14.164 2020-01-12 16:45:23 -05:00
Tim Steinbach 33ebfc6cc3
linux_latest-libre: 17179 -> 17185 2020-01-11 09:49:01 -05:00
Will Dietz 84a6071bc7
kernel/update.sh: always use -e 2020-01-11 00:00:11 -06:00
Tim Steinbach 1a9e732288
linux_latest-libre: 17177 -> 17179 2020-01-10 20:47:31 -05:00
Tim Steinbach 7ea793e7b9
linux_latest-libre: 17174 -> 17177 2020-01-09 20:33:38 -05:00
Tim Steinbach 895545d2b4
linux: 5.4.8 -> 5.4.10 2020-01-09 20:32:11 -05:00
Tim Steinbach 122c02c7f7
linux: 4.19.93 -> 4.19.94 2020-01-09 20:31:23 -05:00
Tim Steinbach ca91b1694d
linux: 4.14.162 -> 4.14.163 2020-01-09 20:30:26 -05:00
Tim Steinbach 74e75a8964
linux_latest-libre: 17169 -> 17174 2020-01-08 08:03:28 -05:00
Tim Steinbach 7e3d864873
linux_latest-libre: 17167 -> 17169 2020-01-07 08:45:53 -05:00
Tim Steinbach d748525498
linux_latest-libre: 17165 -> 17167 2020-01-06 07:14:47 -05:00
Tim Steinbach 0ff48f4fe2
linux_latest-libre: 17163 -> 17165 2020-01-05 16:12:13 -05:00
Tim Steinbach af5f1eb6c6
linux: 5.4.7 -> 5.4.8 2020-01-05 16:12:00 -05:00
Tim Steinbach 0afc8450fd
linux: 4.19.92 -> 4.19.93 2020-01-05 16:11:32 -05:00
Tim Steinbach dc0fafb543
linux_latest-libre: 17161 -> 17163 2020-01-04 10:21:11 -05:00
Tim Steinbach 30dd839181
linux: 4.9.207 -> 4.9.208 2020-01-04 10:21:10 -05:00
Tim Steinbach 1b22badc24
linux: 4.4.207 -> 4.4.208 2020-01-04 10:21:10 -05:00
Tim Steinbach bfb4661982
linux: 4.14.161 -> 4.14.162 2020-01-04 10:21:07 -05:00
Frederik Rietdijk f08e3e38d4 Merge master into staging-next 2020-01-02 21:41:13 +01:00
Tim Steinbach 12fa2123ae
linux_latest-libre: 17159 -> 17161 2020-01-02 13:19:00 -05:00
Tim Steinbach 6f5a01faeb
linux_latest-libre: 17153 -> 17159 2020-01-01 16:11:42 -05:00
Tim Steinbach aa74012d32
linux: 5.4.6 -> 5.4.7 2019-12-31 13:32:18 -05:00
Tim Steinbach f9eae42640
linux: 4.19.91 -> 4.19.92 2019-12-31 13:32:18 -05:00
Tim Steinbach 62100c3b92
linux: 4.14.160 -> 4.14.161 2019-12-31 13:32:18 -05:00
Robin Gloster f9f46dc327
treewide: NIX_*_FLAGS -> string 2019-12-31 00:15:46 +01:00
Frederik Rietdijk 6d059becd3 Merge gcc-9 into staging (#68029) 2019-12-30 16:38:38 +01:00
Frederik Rietdijk 9bc8e546c9
Merge pull request #75929 from NixOS/staging-next
Staging next
2019-12-30 16:27:24 +01:00
Frederik Rietdijk bfa5af85b7 Merge staging-next into staging 2019-12-30 16:25:56 +01:00
Tim Steinbach bdf02de121
linux_latest-libre: 17151 -> 17153 2019-12-30 08:56:30 -05:00
Robin Gloster 2157dcd141
treewide: installFlags is a list 2019-12-30 13:22:43 +01:00
Frederik Rietdijk fb66525297 Merge master into staging-next 2019-12-29 10:19:39 +01:00
Tim Steinbach 0332bc2cd0
Merge pull request #76623 from clefru/linux-bump
linux-testing: 5.5-rc2 -> 5.5-rc3
2019-12-28 21:56:01 -05:00
Clemens Fruhwirth 2af9828ea6 linux-testing: 5.5-rc2 -> 5.5-rc3 2019-12-28 21:38:34 +01:00
Tim Steinbach 3e6bdc0600
linux_latest-libre: 17145 -> 17151 2019-12-26 20:06:27 -05:00
Franz Pletz 77b6c3cd06
Merge remote-tracking branch 'origin/master' into gcc-9 2019-12-26 14:17:36 +01:00
Jan Tojnar ca39dd3a8a
Merge branch 'master' into staging-next 2019-12-25 05:15:06 +01:00
Tim Steinbach da4ec2dd2d
linux_latest-libre: 17142 -> 17145 2019-12-23 19:24:07 -05:00
Tim Steinbach 4afb87fe58
linux_latest-libre: 17119 -> 17142 2019-12-22 19:56:04 -05:00
Tim Steinbach 36997b3850
linux: 5.4.5 -> 5.4.6 2019-12-22 19:55:51 -05:00
Tim Steinbach bb74e9cdeb
linux: 4.9.206 -> 4.9.207 2019-12-22 19:55:37 -05:00
Tim Steinbach 5bf13fcc2e
linux: 4.4.206 -> 4.4.207 2019-12-22 19:55:24 -05:00
Tim Steinbach 1e473389d4
linux: 4.19.90 -> 4.19.91 2019-12-22 19:55:15 -05:00
Tim Steinbach 78183b2e98
linux: 4.14.159 -> 4.14.160 2019-12-22 19:55:01 -05:00
Tim Steinbach baa243d508
linux: Fix request-key for 4.4 and 4.9 2019-12-22 19:51:16 -05:00
Linus Heckemann a69064eebc linux: run make install in parallel
This improves build times significantly, from 20min to 9min on the
aarch64 community box.
2019-12-19 09:24:20 +01:00
Frederik Rietdijk f79e10061f Merge master into staging-next 2019-12-19 09:19:50 +01:00
Tim Steinbach 9b5b7220d8
linux_latest-libre: 17117 -> 17119 2019-12-18 16:13:14 -05:00
Tim Steinbach a80cdb8bad
linux_latest-libre: 17112 -> 17117 2019-12-18 11:24:08 -05:00
Tim Steinbach ae163fb867
linux: 5.4.3 -> 5.4.5 2019-12-18 11:23:51 -05:00
Tim Steinbach 0ea28ae456
linux: 5.3.16 -> 5.3.18 2019-12-18 11:23:39 -05:00
Tim Steinbach 819a164974
linux: 4.19.89 -> 4.19.90 2019-12-18 11:23:16 -05:00
Tim Steinbach 38e3b0e39f
linux: 4.14.158 -> 4.14.159 2019-12-18 11:22:59 -05:00
Frederik Rietdijk 7aedd744d8 Merge master into staging-next 2019-12-16 20:28:10 +01:00
Alyssa Ross d770ae1202
linux-libre.updateScript: fix attr in commit msg 2019-12-16 16:38:19 +00:00
Alyssa Ross 987a59e295 linux-libre_latest: 16794 -> 17112 2019-12-16 16:30:22 +00:00
Alyssa Ross 2d3e4088db linux-libre: set update-libre.sh as update script
This doesn't actually update the kernel, just the linux-libre
deblobbing scripts, but it should mean that automatic updaters keep
the deblobbing scripts up to date.  So even if deblobbing scripts for
a new kernel version are not available immediately after release, they
should be updated automatically soon enough once available.
2019-12-16 16:30:22 +00:00
Alyssa Ross 80a823eeca linux/update.sh: update linux-libre too
update-libre.sh doesn't commit by default so that it can be used as an
updateScript, where I don't think auto-committing is the norm.

The generated commit messages say "linux-libre_latest" rather than
"linux-libre", because even though linux-libre will also be rebuilt,
it's linux-libre_latest that is more likely to need it.
2019-12-16 16:30:22 +00:00
Tim Steinbach 821ff387da
linux-testing: 5.5-rc1 -> 5.5-rc2 2019-12-16 11:24:53 -05:00
Jan Tojnar aa3cb8b00e
Merge branch 'staging-next' into staging 2019-12-14 23:09:23 +01:00
Jan Tojnar 429561978b
Merge branch 'master' into staging-next 2019-12-14 23:09:06 +01:00
Tim Steinbach 4974c6fd23
linux: 5.4.2 -> 5.4.3 2019-12-13 08:29:19 -05:00
Tim Steinbach b7c613e3e6
linux: 5.3.15 -> 5.3.16 2019-12-13 08:28:57 -05:00
Tim Steinbach 00875c0735
linux: 4.19.88 -> 4.19.89 2019-12-13 08:28:26 -05:00
Kai Wohlfahrt ea55a2d8a9 linux: patch request-key binary path
This is necessary for id mapping to work with NFS + Kerberos, and also
touches #68106 and 634638.
2019-12-12 12:23:30 +00:00
Frederik Rietdijk f3618342ec Merge staging-next into staging 2019-12-10 19:01:27 +01:00
Austin Seipp 452efe57a9
linux_testing: 5.4-rc7 -> 5.5-rc1
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2019-12-09 10:05:01 -06:00
Anders Kaseorg 04577a28d6 kernel generate-config.pl: Show all errors, not just the first
This makes it less frustrating to add a large group of kernel options
via boot.kernelPatches.*.extraConfig.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2019-12-08 21:17:24 +01:00
Anthony Cowley 8a4603f9c4 linux: fix amdgpu memory mapping with kernel >= 5.3
These configuration options are needed for the ROCm GPU compute stack
on kernels >= 5.3.
2019-12-08 18:52:43 +01:00
Tim Steinbach 98045e752a
linux: 5.4.1 -> 5.4.2 2019-12-07 07:11:52 -05:00
Tim Steinbach 0e517dbb52
linux: 5.3.14 -> 5.3.15 2019-12-07 07:11:52 -05:00
Tim Steinbach 7e403ffcc2
linux: 4.9.205 -> 4.9.206 2019-12-07 07:11:51 -05:00
Tim Steinbach d90b95f2f6
linux: 4.4.205 -> 4.4.206 2019-12-07 07:11:51 -05:00
Tim Steinbach 9ad3dbf43c
linux: 4.19.87 -> 4.19.88 2019-12-07 07:11:51 -05:00
Tim Steinbach b80f9b6867
linux: 4.14.157 -> 4.14.158 2019-12-07 07:11:46 -05:00
Izorkin 928fdab4a1 linux: add in kernel 5.4 lockdown feature 2019-12-07 12:06:23 +01:00
Jörg Thalheim b7f504812b perf: build with python3 2019-12-01 18:53:03 +01:00
Tim Steinbach c4dc27cfaf
linux: 4.19.86 -> 4.19.87 2019-12-01 07:26:02 -05:00
Tim Steinbach 9d38dd4a0a
linux: 4.14.156 -> 4.14.157 2019-12-01 07:25:59 -05:00
Tim Steinbach 64f3388615
linux: 5.4 -> 5.4.1 2019-11-30 08:12:53 -05:00
Tim Steinbach 0e2e1afae8
linux: 5.3.13 -> 5.3.14 2019-11-30 08:12:09 -05:00
Tim Steinbach 77ce626d10
linux: 4.9.203 -> 4.9.205 2019-11-30 08:11:12 -05:00
Tim Steinbach 9d07976ab4
linux: 4.4.203 -> 4.4.205 2019-11-30 08:10:15 -05:00
Tim Steinbach 0e670a2e67
linux: Add CRYPTO_AEGIS128_SIMD for aarch64
See comments: 9b67ea9106
2019-11-28 09:21:06 -05:00
Tim Steinbach ba80ebc1b3
linux: 4.4.202 -> 4.4.203 2019-11-26 07:58:49 -05:00
Tim Steinbach 9b67ea9106
linux: Add 5.4
Change linux_latest to 5.4
2019-11-25 09:21:27 -05:00
Tim Steinbach 8b93e0c2c4
linux: 5.3.12 -> 5.3.13 2019-11-25 09:14:39 -05:00
Tim Steinbach e0816be801
linux: 4.9.202 -> 4.9.203 2019-11-25 09:14:39 -05:00
Tim Steinbach 7967988054
linux: 4.19.85 -> 4.19.86 2019-11-25 09:14:39 -05:00
Tim Steinbach d65b1c6e97
linux: 4.14.155 -> 4.14.156 2019-11-25 09:14:38 -05:00
Tim Steinbach a96f98be6e
linux: 5.3.11 -> 5.3.12 2019-11-21 13:29:44 -05:00
Tim Steinbach 9265a8e98d
linux: 4.19.84 -> 4.19.85 2019-11-21 13:29:44 -05:00
Tim Steinbach 74b376f252
linux: 4.14.154 -> 4.14.155 2019-11-21 13:29:40 -05:00
magenbluten af808bd826 linux config: add support for xdp sockets and ebpf jit
xdp socket support (AF_XDP) is the new way of implementing high
performance networking on linux. on arch linux and debian this is
already enabled (checked via the links from the nixos manual).

moreover, these flags are suggested by the bpf documentation at cilium:

https://cilium.readthedocs.io/en/latest/bpf/#compiling-the-kernel

additionally the flag `BPF_JIT_ALWAYS_ON` on was suggested to help
spectre attack mitigations:

290af86629
2019-11-17 17:20:23 +01:00
Frederik Rietdijk 3864800226 Merge master into staging-next 2019-11-17 10:31:52 +01:00
Tim Steinbach ef31491067 linux: 4.9.201 -> 4.9.202 2019-11-16 13:18:51 -05:00
Tim Steinbach 6f97eeb1da linux: 4.4.201 -> 4.4.202 2019-11-16 13:18:34 -05:00
Frederik Rietdijk c6e31d0767 Merge master into staging-next 2019-11-14 13:31:39 +01:00
Tim Steinbach 25d44f7605 linux: 4.9.200 -> 4.9.201 2019-11-12 16:24:52 -05:00
Tim Steinbach 083c1d6b22 linux: 4.4.200 -> 4.4.201 2019-11-12 16:24:18 -05:00
Tim Steinbach b1b1f5aa58 linux: 4.19.83 -> 4.19.84 2019-11-12 16:23:46 -05:00
Tim Steinbach dc7772f1c9 linux: 4.14.153 -> 4.14.154 2019-11-12 16:23:03 -05:00
Tim Steinbach f078de4c0a linux-testing: 5.4-rc6 -> 5.4-rc7 2019-11-12 16:22:03 -05:00
Tim Steinbach 44d80a5c56 linux: Remove 5.2
5.2.x kernels are EOL
2019-11-12 16:17:01 -05:00
Tim Steinbach 3dfff501b5 linux: 5.3.10 -> 5.3.11 2019-11-12 16:02:03 -05:00
Frederik Rietdijk 73b88e17dd Merge staging-next into staging 2019-11-11 12:09:26 +01:00
Tim Steinbach d9e90f0d06 linux: 5.3.9 -> 5.3.10 2019-11-10 11:09:18 -05:00
Tim Steinbach 51017f08e6 linux: 4.9.199 -> 4.9.200 2019-11-10 11:09:17 -05:00
Tim Steinbach 460ef6ae3f linux: 4.4.199 -> 4.4.200 2019-11-10 11:09:17 -05:00
Tim Steinbach f8913cead6 linux: 4.19.82 -> 4.19.83 2019-11-10 11:09:17 -05:00
Tim Steinbach 20329aebb6 linux: 4.14.152 -> 4.14.153 2019-11-10 11:09:17 -05:00
Matthew Bauer b23aa70952
Merge pull request #70173 from eadwu/raspberrypi/1.20190925
raspberrypi: 1.20190925
2019-11-07 17:13:24 -05:00
Matthew Bauer 0aaab30d2a
Merge pull request #69741 from eadwu/linux_rpi/fix-overrides
linux_rpi: fix overrides
2019-11-07 17:09:32 -05:00
Tim Steinbach 873ffd8d29
linux: 4.9.198 -> 4.9.199 2019-11-06 13:38:36 -05:00
Tim Steinbach 042cf21f74
linux: 4.4.198 -> 4.4.199 2019-11-06 13:38:23 -05:00
Tim Steinbach 308aba8351
linux: 4.19.81 -> 4.19.82 2019-11-06 13:38:04 -05:00
Tim Steinbach 2316150e64
linux: 4.14.151 -> 4.14.152 2019-11-06 13:37:46 -05:00
adisbladis 9a5ef400fc
linux: 5.3.8 -> 5.3.9 2019-11-06 18:16:55 +00:00
Frederik Rietdijk c4e30cf98c Merge staging-next into staging 2019-11-05 14:18:08 +01:00
Franz Pletz d98aee819f
linuxPackages.perf: fix build with gcc9 2019-11-05 01:55:45 +01:00
Tim Steinbach c97ca709c1
linux: 5.4-rc5 -> 5.4-rc6 2019-11-04 09:38:27 -05:00
John Ericson 2811b032d6 treewide: Make still dont* Variables are optional in most cases
Go beyond the obvious setup hooks now, with a bit of sed, with a skipped case:

 - cc-wrapper's `dontlink`, because it already is handled.

Also, in nix files escaping was manually added.

EMP
2019-11-01 14:44:44 -04:00
Tim Steinbach 9d3687ff15
linux: 5.4-rc4 -> 5.4-rc5 2019-10-29 11:59:37 -04:00
Tim Steinbach eafc9de306
linux: 5.3.7 -> 5.3.8 2019-10-29 09:20:57 -04:00
Tim Steinbach 56115337fd
linux: 4.9.197 -> 4.9.198 2019-10-29 09:20:56 -04:00
Tim Steinbach ccc929b92f
linux: 4.4.197 -> 4.4.198 2019-10-29 09:20:56 -04:00
Tim Steinbach 39aa4c606b
linux: 4.19.80 -> 4.19.81 2019-10-29 09:20:56 -04:00
Tim Steinbach a68c650a34
linux: 4.14.150 -> 4.14.151 2019-10-29 09:20:56 -04:00
Tim Steinbach 0973f67fd0
linux: Enable KEYBOARD_APPLESPI
This is available for 5.3+ and enables support for
Apple trackpads and keyboards

Closes #71552
2019-10-23 09:03:16 -04:00
Tim Steinbach db32ff0333
linux: 5.4-rc3 -> 5.4-rc4 2019-10-21 11:46:36 -04:00
Tim Steinbach 5f1464aea4
linux: 5.3.6 -> 5.3.7 2019-10-18 12:33:12 -04:00
Tim Steinbach 246713b1e2
linux: 4.9.196 -> 4.9.197 2019-10-18 12:33:12 -04:00
Tim Steinbach 3cfb72d064
linux: 4.4.196 -> 4.4.197 2019-10-18 12:33:12 -04:00
Tim Steinbach a735d99cc6
linux: 4.19.79 -> 4.19.80 2019-10-18 12:33:12 -04:00
Tim Steinbach 29574320a8
linux: 4.14.149 -> 4.14.150 2019-10-18 12:33:11 -04:00
Jörg Thalheim 334921ad31
Merge pull request #66841 from Izorkin/kernel-nftables
nftables: enable all features in kernel
2019-10-16 13:39:55 +01:00
Robin Gloster 5a1232908c
Merge pull request #70528 from eadwu/bcachefs/update-9
bcachefs/update-9
2019-10-16 00:28:17 +02:00
Robin Gloster 1d651d1340
Merge pull request #71111 from Mic92/linux-cleanup
linux: remove deprecated kernel config options
2019-10-15 21:50:27 +02:00
Izorkin c1fd98f626 nftables: enable all features 2019-10-15 19:19:43 +03:00
Austin Seipp cab3652660
linux_testing: 5.4-rc2 -> 5.4-rc3
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2019-10-14 10:33:03 -05:00