8f2e9fcadd
linux/hardened-patches/5.5.18: remove
2020-04-21 22:18:03 +02:00
9ed70f4e46
linux/hardened-patches/5.6.5: remove
2020-04-21 22:18:03 +02:00
15807c58ad
linux/hardened-patches/5.4.33: remove
2020-04-21 22:18:02 +02:00
c9cf25bc61
linux: 5.6.5 -> 5.6.6
2020-04-21 21:59:59 +02:00
1e23dcbf22
linux: 5.5.18 -> 5.5.19
2020-04-21 21:59:22 +02:00
18c2b5a9aa
linux: 5.4.33 -> 5.4.34
2020-04-21 21:58:45 +02:00
e074301be8
linux: 4.19.116 -> 4.19.117
2020-04-21 21:58:03 +02:00
803b3d296c
Merge staging-next into staging
2020-04-21 08:29:51 +02:00
523fe98821
linux/hardened-patches/4.19.116: 4.19.116.NixOS-a -> 4.19.116.a
2020-04-20 10:05:36 -04:00
45343beffe
linux/hardened-patches/5.4.33: 5.4.33.NixOS-a -> 5.4.33.a
2020-04-20 10:05:36 -04:00
48d908b731
linux/hardened-patches/5.5.18: init at 5.5.18.a
2020-04-20 10:05:36 -04:00
0fd9293703
linux/hardened-patches/5.6.5: init at 5.6.5.a
2020-04-20 10:05:36 -04:00
e7a65e6c41
linux/hardened-patches/5.5.17: remove
2020-04-20 10:05:36 -04:00
eb41f8122e
linux/hardened-patches/5.6.4: remove
2020-04-20 10:05:36 -04:00
8879086cfc
linux: 5.5.17 -> 5.5.18
2020-04-20 10:05:36 -04:00
4307923b86
linux: 5.6.4 -> 5.6.5
2020-04-20 10:05:36 -04:00
6f1165a0cb
Merge pull request #84522 from emilazy/add-linux-hardened-patches
...
linux_*_hardened: use linux-hardened patch set
2020-04-19 20:01:35 +03:00
d96487b9ca
Merge branch 'master' into staging-next
...
Hydra nixpkgs: ?compare=1582510
2020-04-18 07:42:26 +02:00
33c2a76c5e
Merge remote-tracking branch 'upstream/master' into staging
2020-04-17 18:40:51 -04:00
7fdfe5381d
linux_*_hardened: don't set FORTIFY_SOURCE
...
Upstreamed in anthraxx/linux-hardened@d12c0d5f0c .
2020-04-17 16:13:39 +01:00
ed89b5b3f1
linux_*_hardened: don't set PANIC_ON_OOPS
...
Upstreamed in anthraxx/linux-hardened@366e0216f1 .
2020-04-17 16:13:39 +01:00
0d5f1697b7
linux_*_hardened: don't set SLAB_FREELIST_{RANDOM,HARDENED}
...
Upstreamed in anthraxx/linux-hardened@786126f177 ,
anthraxx/linux-hardened@44822ebeb7 .
2020-04-17 16:13:39 +01:00
4fb796e341
linux_*_hardened: don't set HARDENED_USERCOPY_FALLBACK
...
Upstreamed in anthraxx/linux-hardened@c1fe7a68e3 ,
anthraxx/linux-hardened@2c553a2bb1 .
2020-04-17 16:13:39 +01:00
3eeb5240ac
linux_*_hardened: don't set DEBUG_LIST
...
Upstreamed in anthraxx/linux-hardened@6b20124185 .
2020-04-17 16:13:39 +01:00
0611462e33
linux_*_hardened: don't set {,IO_}STRICT_DEVMEM
...
STRICT_DEVMEM is on by default in upstream 5.6.2; IO_STRICT_DEVMEM is
turned on by anthraxx/linux-hardened@103d23cb66 .
Note that anthraxx/linux-hardened@db1d27e10e
disables DEVMEM by default, so this is only relevant if that default is
overridden to turn it back on.
2020-04-17 16:13:39 +01:00
303bb60fb1
linux_*_hardened: don't set DEBUG_WX
...
Upstreamed in anthraxx/linux-hardened@55ee7417f3 .
2020-04-17 16:13:39 +01:00
33b94e5a44
linux_*_hardened: don't set BUG_ON_DATA_CORRUPTION
...
Upstreamed in anthraxx/linux-hardened@3fcd15014c .
2020-04-17 16:13:39 +01:00
db6b327508
linux_*_hardened: don't set LEGACY_VSYSCALL_NONE
...
Upstreamed in anthraxx/linux-hardened@d300b0fdad .
2020-04-17 16:13:39 +01:00
130f6812be
linux_*_hardened: don't set RANDOMIZE_{BASE,MEMORY}
...
These are on by default for x86 in upstream linux-5.6.2, and turned on
for arm64 by anthraxx/linux-hardened@90f9670bc3 .
2020-04-17 16:13:39 +01:00
8c68055432
linux_*_hardened: don't set MODIFY_LDT_SYSCALL
...
Upstreamed in anthraxx/linux-hardened@05644876fa .
2020-04-17 16:13:39 +01:00
8efe83c22e
linux_*_hardened: don't set DEFAULT_MMAP_MIN_ADDR
...
Upstreamed in anthraxx/linux-hardened@f1fe0a64dd .
2020-04-17 16:13:39 +01:00
3d4c8ae901
linux_*_hardened: don't set VMAP_STACK
...
This has been on by default upstream for as long as it's been an option.
2020-04-17 16:13:39 +01:00
7d5352df31
linux_*_hardened: don't set X86_X32
...
As far as I can tell, this has never defaulted to on upstream, and our
common kernel configuration doesn't turn it on, so the attack surface
reduction here is somewhat homeopathic.
2020-04-17 16:13:39 +01:00
0d4f35efd4
linux_*_hardened: use linux-hardened patch set
...
This is an updated version of the former upstream,
https://github.com/AndroidHardeningArchive/linux-hardened , and provides
a minimal set of additional hardening patches on top of upstream.
The patch already incorporates many of our hardened profile defaults,
and releases are timely (Linux 5.5.15 and 5.6.2 were released on
2020-04-02; linux-hardened patches for them came out on 2020-04-03 and
2020-04-04 respectively).
2020-04-17 16:13:39 +01:00
3d01e802bd
linux: explicitly enable SYSVIPC
...
The linux-hardened patch set removes this default, probably because of
its original focus on Android kernel hardening.
2020-04-17 16:12:29 +01:00
e341107367
linux: 5.4.32 -> 5.4.33
2020-04-17 08:34:01 -04:00
d9258d33be
linux: 4.19.115 -> 4.19.116
2020-04-17 08:34:01 -04:00
f16ae2da3e
linux: Enable `CONFIG_NET_DROP_MONITOR` by default.
...
Needed for subscribing to dropped packets (e.g. via `dropwatch`).
2020-04-14 20:07:51 +02:00
b4a6714571
Merge branch 'staging-next' into staging
2020-04-13 18:54:59 +02:00
a04625379a
Merge branch 'master' into staging-next
2020-04-13 18:50:35 +02:00
f6e64feb14
linux: 5.6.3 -> 5.6.4
2020-04-13 08:36:35 -04:00
bba4a30f8c
linux: 5.5.16 -> 5.5.17
2020-04-13 08:36:27 -04:00
2b6e16abe0
linux: 5.4.31 -> 5.4.32
2020-04-13 08:36:19 -04:00
f47969645b
linux: 4.9.218 -> 4.9.219
2020-04-13 08:36:11 -04:00
e06d2a4682
linux: 4.19.114 -> 4.19.115
2020-04-13 08:36:04 -04:00
f717bfeedb
linux: 4.14.175 -> 4.14.176
2020-04-13 08:35:56 -04:00
3a8f6159cb
linux: 4.4.218 -> 4.4.219
2020-04-13 08:35:32 -04:00
bc6b37e967
fixup! kernel: fix errors in configuration
2020-04-11 14:04:25 +02:00
84cf00f980
treewide: Per RFC45, remove all unquoted URLs
2020-04-10 17:54:53 +01:00
55a5c128d4
Merge branch 'staging-next' into staging
2020-04-10 12:13:27 +02:00
1ab03c3a76
Merge branch 'master' into staging-next
2020-04-10 12:12:56 +02:00
7bd91fe7af
linux: 5.6.2 -> 5.6.3
2020-04-08 08:51:08 -04:00
1c637d2326
linux: 5.5.15 -> 5.5.16
2020-04-08 08:51:07 -04:00
5653337922
linux: 5.4.30 -> 5.4.31
2020-04-08 08:51:07 -04:00
50913242ab
Merge pull request #81500 from primeos/tcp-cong-switch-to-cubic
...
linux config: Set TCP_CONG_CUBIC=yes to restore the default
2020-04-06 17:11:31 +02:00
a737f030cf
Merge pull request #71481 from eadwu/bcachefs/update-10
...
bcachefs: update 10
2020-04-06 15:43:36 +01:00
04a5e5ab7c
linux_testing_bcachefs: 5.3.2020.03.25 -> 5.3.2020.04.04
2020-04-06 10:29:33 -04:00
edaa972160
Merge staging-next into staging
2020-04-03 21:55:10 +02:00
35916a8c4b
Merge pull request #83658 from Emantor/topic/kernel-snd-ca0132
...
linux config: enable Creative Soundblaster DSP loading
2020-04-02 22:41:57 +02:00
c36ec10158
linux: 4.9.217 -> 4.9.218
2020-04-02 14:03:09 -04:00
e2df587f25
linux: 4.4.217 -> 4.4.218
2020-04-02 14:03:02 -04:00
782db49b5a
linux: 4.14.174 -> 4.14.175
2020-04-02 14:02:48 -04:00
4fbd9e3ab8
linux: 5.6.1 -> 5.6.2
2020-04-02 10:03:15 -04:00
f2025f2d6d
linux: 5.5.14 -> 5.5.15
2020-04-02 10:03:07 -04:00
bf0b6ab809
linux: 5.4.29 -> 5.4.30
2020-04-02 10:02:52 -04:00
d47ba3e4b5
linux: 4.19.113 -> 4.19.114
2020-04-02 10:02:40 -04:00
121b17e1ac
kernel: fix errors in configuration
...
With the fix in kernel configuration merging, some kernel configuration items
marked as mandatory now correctly trigger an error when unused (while they
previously were unused).
2020-04-01 22:28:53 +02:00
b9a4e6953d
kernel: fix config generation
...
Addresses https://github.com/NixOS/nixpkgs/issues/71803 :
Kernel options are not merged as described, especially the "optional"
aspects. The error silences legitimate warnings.
2020-04-01 22:25:57 +02:00
ef3f3f2728
linux_latest-libre: 17387 -> 17402
2020-04-01 10:46:07 -04:00
902ebcdd44
linux: 5.5.13 -> 5.5.14
2020-04-01 10:46:06 -04:00
7bae57f249
linux: 5.4.28 -> 5.4.29
2020-04-01 10:46:06 -04:00
7f56fdd997
linux: Init 5.6.1
...
Change linux_latest to 5.6
2020-04-01 10:46:02 -04:00
c76bad0ec0
linux: 5.6-rc5 -> 5.6-rc7
2020-03-29 16:50:02 -04:00
62cdbd678c
linux config: enable SND CA0132 DSP loading
...
Since we select everything as a module, snd_hda_codec_ca0132 is built as
well. DSP loading is not enabled by default, but without it the
soundcard produces timeouts within ALSA and does not emit sound.
Explicitly enable the firmware loading to ensure Soundblaster
Z/Zx/ZxR/Recon devices can be used with NixOS.
The patch to enable this by default in the kernel is staged for 5.8.
2020-03-29 21:11:17 +02:00
ac45e96d2f
Merge pull request #83220 from dasj19/linux-libre-fix
...
linux-libre: added --force flag for deblobbing.
2020-03-29 15:03:22 +01:00
00e7a675f7
linux_testing_bcachefs: 5.2.2019.10.12 -> 5.3.2020.03.25
2020-03-26 12:12:43 -04:00
ec87ed26e6
linux: 5.5.11 -> 5.5.13
2020-03-25 13:03:19 -04:00
bec620d85b
linux: 5.4.27 -> 5.4.28
2020-03-25 13:03:10 -04:00
9105efdcde
linux: 4.19.112 -> 4.19.113
2020-03-25 13:02:56 -04:00
8431497dd2
linux-libre: added --force flag for deblobbing.
2020-03-23 16:07:13 +01:00
f0d17c2a17
linux_latest-libre: 17322 -> 17387
2020-03-22 12:05:45 -04:00
8055a37aca
linux: 5.5.9 -> 5.5.11
2020-03-22 12:05:34 -04:00
05716b70b0
linux: 5.4.25 -> 5.4.27
2020-03-22 12:05:08 -04:00
07ffdf9de3
linux: 4.9.216 -> 4.9.217
2020-03-22 12:04:42 -04:00
04d15d1839
linux: 4.4.216 -> 4.4.217
2020-03-22 12:04:20 -04:00
8e278a8e2d
linux: 4.19.109 -> 4.19.112
2020-03-22 12:03:57 -04:00
1315193c36
linux: 4.14.173 -> 4.14.174
2020-03-22 12:02:43 -04:00
244178e166
Merge pull request #82006 from emilazy/enable-linux-hardened-ia32-emulation
...
linuxPackages_{,_latest,_testing}_hardened: enable 32-bit emulation
2020-03-14 09:20:58 -04:00
f9fcf29ef2
linux: 5.4.24 -> 5.4.25
2020-03-14 04:58:48 -04:00
eff447b321
Merge pull request #70157 from teto/lib_kernel
...
Add lib.kernel
2020-03-12 23:53:42 +01:00
cd167a02b8
linux: 5.6-rc3 -> 5.6-rc5
2020-03-12 05:57:21 -04:00
85c46f5a5a
linux: 5.5.8 -> 5.5.9
2020-03-12 05:57:20 -04:00
930fc70bfc
linux: 4.9.215 -> 4.9.216
2020-03-12 05:57:20 -04:00
3d12317a7e
linux: 4.4.215 -> 4.4.216
2020-03-12 05:57:20 -04:00
24898ff826
linux: 4.19.108 -> 4.19.109
2020-03-12 05:57:20 -04:00
ff6e097af1
linux: 4.14.172 -> 4.14.173
2020-03-12 05:57:19 -04:00
b628400f5e
linuxPackages_{,_latest,_testing}_hardened: enable 32-bit emulation
...
Per discussion in #81943 .
Resolves #79798 .
2020-03-07 18:50:40 +00:00
028bf0f722
linux: 5.5.7 -> 5.5.8
2020-03-06 07:52:25 -05:00
0c9564891c
linux: 5.4.23 -> 5.4.24
2020-03-06 07:52:25 -05:00
2377b03970
linux: 4.19.107 -> 4.19.108
2020-03-06 07:52:19 -05:00
60f4345e37
linux config: Set TCP_CONG_CUBIC=yes to restore the default
...
This will switch the default TCP congestion control algorithm from
new Reno to CUBIC. CUBIC is the default since Linux kernel 2.6.19
(see 597811ec167fa) and most (all?) distributions keep this default
(e.g. Debian and Ubuntu). On NixOS the default was still new Reno
because generate-config.pl changes TCP_CONG_CUBIC from y to m (since we
try to build everything as a module by default).
To check the active and available algorithms:
$ sysctl net.ipv4.tcp_congestion_control
net.ipv4.tcp_congestion_control = cubic
$ sysctl net.ipv4.tcp_available_congestion_control
net.ipv4.tcp_available_congestion_control = cubic reno
Note: E.g. x86_64_defconfig sets TCP_CONG_CUBIC=y indirectly via
CONFIG_TCP_CONG_ADVANCED=y (but CUBIC is also the default if set to no,
see net/ipv4/Kconfig).
2020-03-02 10:57:47 +01:00
0a8af284e5
Merge pull request #81415 from NinjaTrappeur/nin-routing-policy-aarch-kernel
...
linux: add policy routing config flag
2020-03-01 14:50:45 -08:00
6896b1cb1d
linux: add policy routing config flag for aarch64
...
CONFIG_IP_MULTIPLE_TABLES is part of the default x86 kernel config but
absent from the Aarch64 one. Adding explicitely this flag together
with its dependency IP_ADVANCED_ROUTER.
Both of these config flags are needed to use the routing policy
facilities.
2020-03-01 20:25:44 +01:00
1e41aa8030
linux: 5.6-rc2 -> 5.6-rc3
2020-03-01 10:40:36 -05:00
b4af096c4c
linux: 5.5.6 -> 5.5.7
2020-02-28 15:31:15 -05:00
fc8e5c65ca
linux: 5.4.22 -> 5.4.23
2020-02-28 15:30:05 -05:00
24720dd250
linux: 4.9.214 -> 4.9.215
2020-02-28 11:06:35 -05:00
44523d0bda
linux: 4.4.214 -> 4.4.215
2020-02-28 11:05:20 -05:00
28fee3fea5
linux: 4.19.106 -> 4.19.107
2020-02-28 11:04:31 -05:00
9f5fa90435
linux: 4.14.171 -> 4.14.172
2020-02-28 11:03:33 -05:00
faaa55f4c3
linux: 5.5.5 -> 5.5.6
2020-02-24 08:13:14 -05:00
33780083d7
linux: 5.4.21 -> 5.4.22
2020-02-24 08:12:12 -05:00
e6e1f767d2
linux: 4.19.105 -> 4.19.106
2020-02-24 08:11:28 -05:00
86bdbe2c9b
linux: 5.5.4 -> 5.5.5
2020-02-20 08:22:22 -05:00
887d2886e3
linux: 5.4.20 -> 5.4.21
2020-02-20 08:22:21 -05:00
49b4266ad2
linux: 4.19.104 -> 4.19.105
2020-02-20 08:22:21 -05:00
3f448f08aa
linux: 5.6-rc1 -> 5.6-rc2
2020-02-18 16:53:57 -05:00
fe61323050
linux: 5.5.3 -> 5.5.4
2020-02-15 15:43:28 -05:00
f5357bbe1f
linux: 5.4.19 -> 5.4.20
2020-02-15 15:43:28 -05:00
4c407a299f
linux: 4.9.213 -> 4.9.214
2020-02-15 15:43:27 -05:00
e2315d6a7e
linux: 4.4.213 -> 4.4.214
2020-02-15 15:43:27 -05:00
f350e37773
linux: 4.19.103 -> 4.19.104
2020-02-15 15:43:26 -05:00
daee1daf5d
linux: 4.14.170 -> 4.14.171
2020-02-15 15:43:26 -05:00
25f706b26c
linux: 5.5-rc7 -> 5.6-rc1
2020-02-13 07:41:37 -05:00
0b3dd6026e
linux_latest-libre: 17318 -> 17322
2020-02-12 09:11:05 -05:00
da8c2896e8
linux: 5.5.2 -> 5.5.3
2020-02-11 14:42:38 -05:00
05b407ac81
linux: 5.4.18 -> 5.4.19
2020-02-11 14:42:30 -05:00
ae4b390551
linux: 4.19.102 -> 4.19.103
2020-02-11 14:42:18 -05:00
657582e43a
linux_latest-libre: 17262 -> 17318
2020-02-10 07:23:08 -05:00
4d8f7a7905
linux: 5.4.17 -> 5.4.18
2020-02-10 07:23:08 -05:00
54c0c2ee70
linux: 4.19.101 -> 4.19.102
2020-02-10 07:23:07 -05:00
854eb8f3ef
linux: 4.14.169 -> 4.14.170
2020-02-10 07:23:07 -05:00
8130f3c1c2
linux config: revert BPF_JIT_ALWAYS_ON=yes
...
This reverts a small bit of af808bd82#73328 . Fixes #79304 :
tests.installer.simpleUefiSystemdBoot.x86_64-linux
I still don't know why the regression happened, but this feature doesn't
seem important enough to block channel now, though it reportedly helps
to mitigate spectre 2 attack CVE-2017-5715.
2020-02-09 08:22:00 +01:00
419bc0a4cd
Revert "Revert "Merge master into staging-next""
...
In 87a19e9048ac241fb7a50be87c79790be87c7979
2020-02-05 19:41:25 +01:00
0be87c7979
Revert "Merge master into staging-next"
...
I merged master into staging-next but accidentally pushed it to master.
This should get us back to 87a19e9048ac241fb7a576a439239e
2020-02-05 19:18:35 +01:00
ab0e69030e
linux: 5.5.1 -> 5.5.2
2020-02-05 08:30:01 -05:00
447c14e62f
linux: 4.9.212 -> 4.9.213
2020-02-05 08:29:45 -05:00
5b5f9d23f4
linux: 4.4.212 -> 4.4.213
2020-02-05 08:29:30 -05:00
149737a2a4
linux: Enable NVME_HWMON
...
This is available for 5.5+ and enables support for
NVMe drives temperature reporting
2020-02-03 19:08:45 +02:00
508fdb7a7c
linux: 5.5 -> 5.5.1
2020-02-01 09:23:08 -05:00
9b668eb4cc
linux: 5.4.16 -> 5.4.17
2020-02-01 09:18:52 -05:00
0f20047e4c
linux: 4.19.100 -> 4.19.101
2020-02-01 09:18:52 -05:00
38854fa22c
linux: 5.4.15 -> 5.4.16
2020-01-30 16:41:12 -05:00
586fd9a43a
linux: 4.9.211 -> 4.9.212
2020-01-30 16:41:12 -05:00
53c76abcae
linux: 4.4.211 -> 4.4.212
2020-01-30 16:41:12 -05:00
104287202b
linux: 4.19.98 -> 4.19.100
2020-01-30 16:41:11 -05:00
713b0ec29a
linux: 4.14.167 -> 4.14.169
2020-01-30 16:41:11 -05:00
0fc20ed4fb
perf: fix build on 5.5
2020-01-30 12:11:16 +00:00
ff54d08dc8
linux_5_5: init at 5.5
2020-01-29 03:00:29 +01:00
dce0ca29d9
Merge master into staging-next
2020-01-28 10:46:13 +01:00
b856b24bfa
Merge pull request #77490 from dtzWill/fix/kernel-update-sed-e
...
kernel/update.sh: always use -e
2020-01-26 16:42:21 -06:00
8250469517
linux: 5.4.14 -> 5.4.15
2020-01-26 10:18:15 -05:00
5afd503a9c
Merge pull request #77475 from lopsided98/linux-hardkernel-update
...
linux_hardkernel_4_14: 4.14.120-160 -> 4.14.165-172
2020-01-25 18:50:37 -05:00
30ad9a98d4
linux_latest-libre: 17198 -> 17262
2020-01-24 11:18:02 -05:00
461e8d1d59
linux: 5.4.13 -> 5.4.14
2020-01-24 11:17:37 -05:00
35da29dd68
linux: 4.9.210 -> 4.9.211
2020-01-24 11:17:10 -05:00
53616e8c4e
linux: 4.4.210 -> 4.4.211
2020-01-24 11:16:52 -05:00
fd2ddc3288
linux: 4.19.97 -> 4.19.98
2020-01-24 11:16:38 -05:00
0bb5075c62
linux: 4.14.166 -> 4.14.167
2020-01-24 11:15:31 -05:00
07b977df89
linux_hardkernel_4_14: 4.14.120-160 -> 4.14.165-172
2020-01-22 17:56:24 -05:00
d9e2bcb21d
linux: 5.5-rc6 -> 5.5-rc7
2020-01-20 07:47:25 -05:00
64d20fe9cc
linux: 5.4.12 -> 5.4.13
2020-01-18 11:41:44 -05:00
cac9f210cf
linux: 4.19.96 -> 4.19.97
2020-01-18 11:41:12 -05:00
e14d19be43
linux: 4.14.165 -> 4.14.166
2020-01-18 11:40:37 -05:00
bcd8c6b8dc
Merge master into staging-next
2020-01-17 17:08:16 +01:00
fb06094ae3
linux: 5.4.11 -> 5.4.12
2020-01-15 09:12:21 -05:00
155d5292cc
linux: 4.9.209 -> 4.9.210
2020-01-15 09:12:06 -05:00
ea1728f306
linux: 4.4.209 -> 4.4.210
2020-01-15 09:11:44 -05:00
8dcf516adf
linux: 4.19.95 -> 4.19.96
2020-01-15 09:11:26 -05:00
4d3f1ca18c
linux: 4.14.164 -> 4.14.165
2020-01-15 09:10:50 -05:00
2a88c3c302
Merge staging-next into staging
2020-01-15 09:23:28 +01:00
7184df6beb
linux: 5.5-rc5 -> 5.5-rc6
2020-01-13 19:53:27 -05:00
a8144b1ad3
linux_latest-libre: 17192 -> 17198
2020-01-13 19:25:14 -05:00
1d51514ab2
linux-libre.updateScript: fix git commit
...
With nothing staged and no paths given, previously this wouldn't
actually do anything.
2020-01-13 16:44:48 +00:00
345f6712e3
linux-libre.updateScript: don't update if unchanged
...
The revision applies to the whole SVN tree, not just the scripts
directory, so the revision will increment sometimes with no change in
content.
2020-01-13 16:44:48 +00:00
be4d80d721
linux-libre.updateScript: fix COMMIT option
...
Because bash was being run with -u, if COMMIT wasn't set in the
environment the script would just crash here, rather than exiting
successfully.
2020-01-13 16:44:48 +00:00
583e4b8d89
linux_latest-libre: 17190 -> 17192
2020-01-13 07:23:03 -05:00
bc4921a584
Merge pull request #73328 from magenbluten/af_xdp
...
linux config: add support for xdp sockets and ebpf jit
2020-01-13 05:54:57 +01:00
6d65b859ed
linux: 5.5-rc3 -> 5.5-rc5
2020-01-12 17:13:48 -05:00
f2251b483c
linux: Remove 5.3
...
The 5.3.x series has been marked as EOL upstream
2020-01-12 16:45:24 -05:00
0f8090b972
linux_latest-libre: 17185 -> 17190
2020-01-12 16:45:24 -05:00
ebf3c67a1b
linux: 5.4.10 -> 5.4.11
2020-01-12 16:45:24 -05:00
ad4637a2b8
linux: 4.9.208 -> 4.9.209
2020-01-12 16:45:23 -05:00
aab055fc54
linux: 4.4.208 -> 4.4.209
2020-01-12 16:45:23 -05:00
eadba9cd51
linux: 4.19.94 -> 4.19.95
2020-01-12 16:45:23 -05:00
e69455a8be
linux: 4.14.163 -> 4.14.164
2020-01-12 16:45:23 -05:00
33ebfc6cc3
linux_latest-libre: 17179 -> 17185
2020-01-11 09:49:01 -05:00
84a6071bc7
kernel/update.sh: always use -e
2020-01-11 00:00:11 -06:00
1a9e732288
linux_latest-libre: 17177 -> 17179
2020-01-10 20:47:31 -05:00
7ea793e7b9
linux_latest-libre: 17174 -> 17177
2020-01-09 20:33:38 -05:00
895545d2b4
linux: 5.4.8 -> 5.4.10
2020-01-09 20:32:11 -05:00
122c02c7f7
linux: 4.19.93 -> 4.19.94
2020-01-09 20:31:23 -05:00
ca91b1694d
linux: 4.14.162 -> 4.14.163
2020-01-09 20:30:26 -05:00
74e75a8964
linux_latest-libre: 17169 -> 17174
2020-01-08 08:03:28 -05:00
7e3d864873
linux_latest-libre: 17167 -> 17169
2020-01-07 08:45:53 -05:00
d748525498
linux_latest-libre: 17165 -> 17167
2020-01-06 07:14:47 -05:00
0ff48f4fe2
linux_latest-libre: 17163 -> 17165
2020-01-05 16:12:13 -05:00
af5f1eb6c6
linux: 5.4.7 -> 5.4.8
2020-01-05 16:12:00 -05:00
0afc8450fd
linux: 4.19.92 -> 4.19.93
2020-01-05 16:11:32 -05:00
dc0fafb543
linux_latest-libre: 17161 -> 17163
2020-01-04 10:21:11 -05:00
30dd839181
linux: 4.9.207 -> 4.9.208
2020-01-04 10:21:10 -05:00
1b22badc24
linux: 4.4.207 -> 4.4.208
2020-01-04 10:21:10 -05:00
bfb4661982
linux: 4.14.161 -> 4.14.162
2020-01-04 10:21:07 -05:00
f08e3e38d4
Merge master into staging-next
2020-01-02 21:41:13 +01:00
12fa2123ae
linux_latest-libre: 17159 -> 17161
2020-01-02 13:19:00 -05:00
6f5a01faeb
linux_latest-libre: 17153 -> 17159
2020-01-01 16:11:42 -05:00
aa74012d32
linux: 5.4.6 -> 5.4.7
2019-12-31 13:32:18 -05:00
f9eae42640
linux: 4.19.91 -> 4.19.92
2019-12-31 13:32:18 -05:00
62100c3b92
linux: 4.14.160 -> 4.14.161
2019-12-31 13:32:18 -05:00
f9f46dc327
treewide: NIX_*_FLAGS -> string
2019-12-31 00:15:46 +01:00
6d059becd3
Merge gcc-9 into staging ( #68029 )
2019-12-30 16:38:38 +01:00
9bc8e546c9
Merge pull request #75929 from NixOS/staging-next
...
Staging next
2019-12-30 16:27:24 +01:00
bfa5af85b7
Merge staging-next into staging
2019-12-30 16:25:56 +01:00
bdf02de121
linux_latest-libre: 17151 -> 17153
2019-12-30 08:56:30 -05:00
2157dcd141
treewide: installFlags is a list
2019-12-30 13:22:43 +01:00
fb66525297
Merge master into staging-next
2019-12-29 10:19:39 +01:00
0332bc2cd0
Merge pull request #76623 from clefru/linux-bump
...
linux-testing: 5.5-rc2 -> 5.5-rc3
2019-12-28 21:56:01 -05:00
2af9828ea6
linux-testing: 5.5-rc2 -> 5.5-rc3
2019-12-28 21:38:34 +01:00
3e6bdc0600
linux_latest-libre: 17145 -> 17151
2019-12-26 20:06:27 -05:00
77b6c3cd06
Merge remote-tracking branch 'origin/master' into gcc-9
2019-12-26 14:17:36 +01:00
ca39dd3a8a
Merge branch 'master' into staging-next
2019-12-25 05:15:06 +01:00
da4ec2dd2d
linux_latest-libre: 17142 -> 17145
2019-12-23 19:24:07 -05:00
4afb87fe58
linux_latest-libre: 17119 -> 17142
2019-12-22 19:56:04 -05:00
36997b3850
linux: 5.4.5 -> 5.4.6
2019-12-22 19:55:51 -05:00
bb74e9cdeb
linux: 4.9.206 -> 4.9.207
2019-12-22 19:55:37 -05:00
5bf13fcc2e
linux: 4.4.206 -> 4.4.207
2019-12-22 19:55:24 -05:00
1e473389d4
linux: 4.19.90 -> 4.19.91
2019-12-22 19:55:15 -05:00
78183b2e98
linux: 4.14.159 -> 4.14.160
2019-12-22 19:55:01 -05:00
baa243d508
linux: Fix request-key for 4.4 and 4.9
2019-12-22 19:51:16 -05:00
a69064eebc
linux: run make install in parallel
...
This improves build times significantly, from 20min to 9min on the
aarch64 community box.
2019-12-19 09:24:20 +01:00
f79e10061f
Merge master into staging-next
2019-12-19 09:19:50 +01:00
9b5b7220d8
linux_latest-libre: 17117 -> 17119
2019-12-18 16:13:14 -05:00
a80cdb8bad
linux_latest-libre: 17112 -> 17117
2019-12-18 11:24:08 -05:00
ae163fb867
linux: 5.4.3 -> 5.4.5
2019-12-18 11:23:51 -05:00
0ea28ae456
linux: 5.3.16 -> 5.3.18
2019-12-18 11:23:39 -05:00
819a164974
linux: 4.19.89 -> 4.19.90
2019-12-18 11:23:16 -05:00
38e3b0e39f
linux: 4.14.158 -> 4.14.159
2019-12-18 11:22:59 -05:00
7aedd744d8
Merge master into staging-next
2019-12-16 20:28:10 +01:00
d770ae1202
linux-libre.updateScript: fix attr in commit msg
2019-12-16 16:38:19 +00:00
987a59e295
linux-libre_latest: 16794 -> 17112
2019-12-16 16:30:22 +00:00
2d3e4088db
linux-libre: set update-libre.sh as update script
...
This doesn't actually update the kernel, just the linux-libre
deblobbing scripts, but it should mean that automatic updaters keep
the deblobbing scripts up to date. So even if deblobbing scripts for
a new kernel version are not available immediately after release, they
should be updated automatically soon enough once available.
2019-12-16 16:30:22 +00:00
80a823eeca
linux/update.sh: update linux-libre too
...
update-libre.sh doesn't commit by default so that it can be used as an
updateScript, where I don't think auto-committing is the norm.
The generated commit messages say "linux-libre_latest" rather than
"linux-libre", because even though linux-libre will also be rebuilt,
it's linux-libre_latest that is more likely to need it.
2019-12-16 16:30:22 +00:00
821ff387da
linux-testing: 5.5-rc1 -> 5.5-rc2
2019-12-16 11:24:53 -05:00
aa3cb8b00e
Merge branch 'staging-next' into staging
2019-12-14 23:09:23 +01:00
429561978b
Merge branch 'master' into staging-next
2019-12-14 23:09:06 +01:00
4974c6fd23
linux: 5.4.2 -> 5.4.3
2019-12-13 08:29:19 -05:00
b7c613e3e6
linux: 5.3.15 -> 5.3.16
2019-12-13 08:28:57 -05:00
00875c0735
linux: 4.19.88 -> 4.19.89
2019-12-13 08:28:26 -05:00
ea55a2d8a9
linux: patch request-key binary path
...
This is necessary for id mapping to work with NFS + Kerberos, and also
touches #68106 and 634638.
2019-12-12 12:23:30 +00:00
f3618342ec
Merge staging-next into staging
2019-12-10 19:01:27 +01:00
452efe57a9
linux_testing: 5.4-rc7 -> 5.5-rc1
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2019-12-09 10:05:01 -06:00
04577a28d6
kernel generate-config.pl: Show all errors, not just the first
...
This makes it less frustrating to add a large group of kernel options
via boot.kernelPatches.*.extraConfig.
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2019-12-08 21:17:24 +01:00
8a4603f9c4
linux: fix amdgpu memory mapping with kernel >= 5.3
...
These configuration options are needed for the ROCm GPU compute stack
on kernels >= 5.3.
2019-12-08 18:52:43 +01:00
98045e752a
linux: 5.4.1 -> 5.4.2
2019-12-07 07:11:52 -05:00
0e517dbb52
linux: 5.3.14 -> 5.3.15
2019-12-07 07:11:52 -05:00
7e403ffcc2
linux: 4.9.205 -> 4.9.206
2019-12-07 07:11:51 -05:00
d90b95f2f6
linux: 4.4.205 -> 4.4.206
2019-12-07 07:11:51 -05:00
9ad3dbf43c
linux: 4.19.87 -> 4.19.88
2019-12-07 07:11:51 -05:00
b80f9b6867
linux: 4.14.157 -> 4.14.158
2019-12-07 07:11:46 -05:00
928fdab4a1
linux: add in kernel 5.4 lockdown feature
2019-12-07 12:06:23 +01:00
b7f504812b
perf: build with python3
2019-12-01 18:53:03 +01:00
c4dc27cfaf
linux: 4.19.86 -> 4.19.87
2019-12-01 07:26:02 -05:00
9d38dd4a0a
linux: 4.14.156 -> 4.14.157
2019-12-01 07:25:59 -05:00
64f3388615
linux: 5.4 -> 5.4.1
2019-11-30 08:12:53 -05:00
0e2e1afae8
linux: 5.3.13 -> 5.3.14
2019-11-30 08:12:09 -05:00
77ce626d10
linux: 4.9.203 -> 4.9.205
2019-11-30 08:11:12 -05:00
9d07976ab4
linux: 4.4.203 -> 4.4.205
2019-11-30 08:10:15 -05:00
0e670a2e67
linux: Add CRYPTO_AEGIS128_SIMD for aarch64
...
See comments: 9b67ea9106
2019-11-28 09:21:06 -05:00
ba80ebc1b3
linux: 4.4.202 -> 4.4.203
2019-11-26 07:58:49 -05:00
9b67ea9106
linux: Add 5.4
...
Change linux_latest to 5.4
2019-11-25 09:21:27 -05:00
8b93e0c2c4
linux: 5.3.12 -> 5.3.13
2019-11-25 09:14:39 -05:00
e0816be801
linux: 4.9.202 -> 4.9.203
2019-11-25 09:14:39 -05:00
7967988054
linux: 4.19.85 -> 4.19.86
2019-11-25 09:14:39 -05:00
d65b1c6e97
linux: 4.14.155 -> 4.14.156
2019-11-25 09:14:38 -05:00
a96f98be6e
linux: 5.3.11 -> 5.3.12
2019-11-21 13:29:44 -05:00
9265a8e98d
linux: 4.19.84 -> 4.19.85
2019-11-21 13:29:44 -05:00
74b376f252
linux: 4.14.154 -> 4.14.155
2019-11-21 13:29:40 -05:00
af808bd826
linux config: add support for xdp sockets and ebpf jit
...
xdp socket support (AF_XDP) is the new way of implementing high
performance networking on linux. on arch linux and debian this is
already enabled (checked via the links from the nixos manual).
moreover, these flags are suggested by the bpf documentation at cilium:
https://cilium.readthedocs.io/en/latest/bpf/#compiling-the-kernel
additionally the flag `BPF_JIT_ALWAYS_ON` on was suggested to help
spectre attack mitigations:
290af86629
2019-11-17 17:20:23 +01:00
3864800226
Merge master into staging-next
2019-11-17 10:31:52 +01:00
ef31491067
linux: 4.9.201 -> 4.9.202
2019-11-16 13:18:51 -05:00
6f97eeb1da
linux: 4.4.201 -> 4.4.202
2019-11-16 13:18:34 -05:00
c6e31d0767
Merge master into staging-next
2019-11-14 13:31:39 +01:00
25d44f7605
linux: 4.9.200 -> 4.9.201
2019-11-12 16:24:52 -05:00
083c1d6b22
linux: 4.4.200 -> 4.4.201
2019-11-12 16:24:18 -05:00
b1b1f5aa58
linux: 4.19.83 -> 4.19.84
2019-11-12 16:23:46 -05:00
dc7772f1c9
linux: 4.14.153 -> 4.14.154
2019-11-12 16:23:03 -05:00
f078de4c0a
linux-testing: 5.4-rc6 -> 5.4-rc7
2019-11-12 16:22:03 -05:00
44d80a5c56
linux: Remove 5.2
...
5.2.x kernels are EOL
2019-11-12 16:17:01 -05:00
3dfff501b5
linux: 5.3.10 -> 5.3.11
2019-11-12 16:02:03 -05:00
73b88e17dd
Merge staging-next into staging
2019-11-11 12:09:26 +01:00
d9e90f0d06
linux: 5.3.9 -> 5.3.10
2019-11-10 11:09:18 -05:00
51017f08e6
linux: 4.9.199 -> 4.9.200
2019-11-10 11:09:17 -05:00
460ef6ae3f
linux: 4.4.199 -> 4.4.200
2019-11-10 11:09:17 -05:00
f8913cead6
linux: 4.19.82 -> 4.19.83
2019-11-10 11:09:17 -05:00
20329aebb6
linux: 4.14.152 -> 4.14.153
2019-11-10 11:09:17 -05:00
b23aa70952
Merge pull request #70173 from eadwu/raspberrypi/1.20190925
...
raspberrypi: 1.20190925
2019-11-07 17:13:24 -05:00
0aaab30d2a
Merge pull request #69741 from eadwu/linux_rpi/fix-overrides
...
linux_rpi: fix overrides
2019-11-07 17:09:32 -05:00
873ffd8d29
linux: 4.9.198 -> 4.9.199
2019-11-06 13:38:36 -05:00
042cf21f74
linux: 4.4.198 -> 4.4.199
2019-11-06 13:38:23 -05:00
308aba8351
linux: 4.19.81 -> 4.19.82
2019-11-06 13:38:04 -05:00
2316150e64
linux: 4.14.151 -> 4.14.152
2019-11-06 13:37:46 -05:00
9a5ef400fc
linux: 5.3.8 -> 5.3.9
2019-11-06 18:16:55 +00:00
c4e30cf98c
Merge staging-next into staging
2019-11-05 14:18:08 +01:00
d98aee819f
linuxPackages.perf: fix build with gcc9
2019-11-05 01:55:45 +01:00
c97ca709c1
linux: 5.4-rc5 -> 5.4-rc6
2019-11-04 09:38:27 -05:00
2811b032d6
treewide: Make still dont* Variables are optional in most cases
...
Go beyond the obvious setup hooks now, with a bit of sed, with a skipped case:
- cc-wrapper's `dontlink`, because it already is handled.
Also, in nix files escaping was manually added.
EMP
2019-11-01 14:44:44 -04:00
9d3687ff15
linux: 5.4-rc4 -> 5.4-rc5
2019-10-29 11:59:37 -04:00
eafc9de306
linux: 5.3.7 -> 5.3.8
2019-10-29 09:20:57 -04:00
56115337fd
linux: 4.9.197 -> 4.9.198
2019-10-29 09:20:56 -04:00
ccc929b92f
linux: 4.4.197 -> 4.4.198
2019-10-29 09:20:56 -04:00
39aa4c606b
linux: 4.19.80 -> 4.19.81
2019-10-29 09:20:56 -04:00
a68c650a34
linux: 4.14.150 -> 4.14.151
2019-10-29 09:20:56 -04:00
0973f67fd0
linux: Enable KEYBOARD_APPLESPI
...
This is available for 5.3+ and enables support for
Apple trackpads and keyboards
Closes #71552
2019-10-23 09:03:16 -04:00
db32ff0333
linux: 5.4-rc3 -> 5.4-rc4
2019-10-21 11:46:36 -04:00
5f1464aea4
linux: 5.3.6 -> 5.3.7
2019-10-18 12:33:12 -04:00
246713b1e2
linux: 4.9.196 -> 4.9.197
2019-10-18 12:33:12 -04:00
3cfb72d064
linux: 4.4.196 -> 4.4.197
2019-10-18 12:33:12 -04:00
a735d99cc6
linux: 4.19.79 -> 4.19.80
2019-10-18 12:33:12 -04:00
29574320a8
linux: 4.14.149 -> 4.14.150
2019-10-18 12:33:11 -04:00
334921ad31
Merge pull request #66841 from Izorkin/kernel-nftables
...
nftables: enable all features in kernel
2019-10-16 13:39:55 +01:00
5a1232908c
Merge pull request #70528 from eadwu/bcachefs/update-9
...
bcachefs/update-9
2019-10-16 00:28:17 +02:00
1d651d1340
Merge pull request #71111 from Mic92/linux-cleanup
...
linux: remove deprecated kernel config options
2019-10-15 21:50:27 +02:00
c1fd98f626
nftables: enable all features
2019-10-15 19:19:43 +03:00
cab3652660
linux_testing: 5.4-rc2 -> 5.4-rc3
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2019-10-14 10:33:03 -05:00
14a6713aef
linux: remove deprecated kernel config options
...
Our oldest kernel is 4.4. That's why we can remove configurations that only
applies to kernels older than that.
2019-10-14 11:43:18 +01:00
b5697c6954
Merge branch 'master' into staging-next
...
Hydra nixpkgs: ?compare=1548439
2019-10-13 13:31:33 +02:00
591b1ec17a
linux_testing_bcachefs: 5.2.2019.10.01 -> 5.2.2019.10.12
2019-10-12 18:23:57 -04:00
50c36c4df1
linux: 5.3.5 -> 5.3.6
2019-10-12 11:05:45 -04:00
198eb547e2
linux: 5.2.20 -> 5.2.21
2019-10-12 11:05:09 -04:00
83162506c6
linux: 4.19.78 -> 4.19.79
2019-10-12 11:04:27 -04:00
6ed5bf160c
linux: 4.14.148 -> 4.14.149
2019-10-12 11:03:46 -04:00
6c8aed6391
Merge branch 'master' into staging-next
2019-10-12 00:50:21 +02:00
ecb95c8bcb
linux: 5.4-rc1 -> 5.4-rc2
2019-10-08 13:18:51 -04:00
e14ccd7285
linux-testing: 5.3-rc8 -> 5.4-rc1
2019-10-08 13:08:02 -04:00
a0c34f54cc
Merge master into staging-next
2019-10-08 11:56:52 +02:00
fba9144f92
Merge pull request #69222 from d-goldin/fix_linux_5_determinism
...
linux_5_2, linux_5_3: fixing nondeterminism
2019-10-08 03:18:40 +02:00
0482c461da
linux: 5.3.4 -> 5.3.5
2019-10-07 17:54:26 -04:00
3610e490b3
linux: 5.2.19 -> 5.2.20
2019-10-07 17:54:00 -04:00
59dc2fa757
linux: 4.9.195 -> 4.9.196
2019-10-07 17:53:31 -04:00
efe13de995
linux: 4.4.195 -> 4.4.196
2019-10-07 17:53:10 -04:00
3eeea86ac3
linux: 4.19.77 -> 4.19.78
2019-10-07 17:52:45 -04:00
66b338d2c8
linux: 4.14.147 -> 4.14.148
2019-10-07 17:51:49 -04:00
2a116c3bb9
bcachefs: 2019-10-01 ( #70217 )
...
bcachefs: 2019-10-01
2019-10-05 22:48:10 +03:00
d5832fbfac
linux: 5.3.2 -> 5.3.4
2019-10-05 10:37:52 -04:00
e0907d2494
linux: 5.2.18 -> 5.2.19
2019-10-05 10:37:27 -04:00
808633dc81
linux: 4.9.194 -> 4.9.195
2019-10-05 10:36:49 -04:00
63ec681edb
linux: 4.4.194 -> 4.4.195
2019-10-05 10:36:19 -04:00
f47dd4a456
linux: 4.19.76 -> 4.19.77
2019-10-05 10:35:57 -04:00
eb4da7a8c1
linux: 4.14.146 -> 4.14.147
2019-10-05 10:35:23 -04:00
bdccffa81c
linux_5_2, linux_5_3: fixing nondeterminism
...
In 5.2 kernel a new mechanism was introduced which embeds the kernel
headers in the kernel image and exposes them in procfs for simplified
use by userland tools.
It was introduced in
43d8ce9d65f7b101d330https://lkml.org/lkml/2019/10/4/1036 and
https://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild.git/commit/?h=fixes&id=2cc99c9cdc8fde5e92e34f9655829449cebd3e00
I commented out the documentation part of the patch to make it cleanly apply to
5.2 and 5.3, see remark in the patch itself.
2019-10-05 09:34:35 +02:00
kraem
Frederik Rietdijk
Yegor Timoshenko
Vladimír Čunát
John Ericson
Emily
Tim Steinbach
Niklas Hambüchen
Jan Tojnar
Matthieu Coudron
Michael Reilly
Eelco Dolstra
Jörg Thalheim
Edmund Wu
Florian Klink
Rouven Czerwinski
Daniel Șerbănescu
Graham Christensen
Silvan Mosberger
Michael Weiss
Félix Baylac-Jacqué
misuzu
Jörg Thalheim
Franz Pletz
Will Dietz
Samuel Dionne-Riel
Ben Wolsieffer
Alyssa Ross
Lassulus
Robin Gloster
Frederik Rietdijk
Tim Steinbach
Clemens Fruhwirth
Linus Heckemann
Kai Wohlfahrt
Austin Seipp
Anders Kaseorg
Anthony Cowley
Izorkin
magenbluten
Matthew Bauer
adisbladis
Vladyslav M
Dima