Commit Graph

240 Commits

Author SHA1 Message Date
Michael Tremer 9a9607f567 kernel: Update to 6.6
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-11-01 08:27:25 +00:00
Michael Tremer 6445c5f1dd kernel: Enable cgroup memory controller
This is required for the Pakfire build environment and was disabled.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-09-26 17:18:15 +00:00
Michael Tremer 98a495db26 kernel: Let kernel packages provide "kernel(VERSION)"
This is useful for Pakfire to lock the running kernel so that it cannot
be uninstalled.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-09-21 15:36:58 +00:00
Arne Fitzenreiter bbc2926ab4 kernel: update to 6.5.3
and also enable CONFIG_INPUT_EVDEV to handle ACPI power
button.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-09-16 07:38:19 +00:00
Michael Tremer 1e49c2558d kernel: Enable IBT on x86
This change has recently been made in IPFire 2 and is being backported
in this patch.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-19 10:05:25 +00:00
Michael Tremer 7e654e7aea kernel: Disable the entire sound subsystem
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-19 09:56:28 +00:00
Michael Tremer d19e461f60 kernel: Update to Linux 6.4
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-19 09:44:16 +00:00
Michael Tremer 3ad05a2328 kernel: Update to Linux 6.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-19 09:31:07 +00:00
Michael Tremer 689ec88b04 kernel: Replace Python 2 interpreter by Python 3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-06-04 11:33:05 +00:00
Stefan Schantl 636e102cc4 kernel: Proper build the helper binaries with our C and LDFLAGS
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2023-03-21 18:25:40 +00:00
Stefan Schantl 93e1e52703 kernel: Use our LDFLAGS for gcc plugins
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-03-16 06:48:53 +00:00
Michael Tremer 57fb3e8c1a kernel: Install intel-microcode only on x86_64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-03-04 13:45:41 +00:00
Michael Tremer 4bc0fa31f2 kernel: Do not depend on net-tools
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-03-04 13:43:02 +00:00
Michael Tremer ee731e2df6 kernel: Update to 6.2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-02-21 12:51:09 +00:00
Michael Tremer 050acc6dd5 kernel: Disable the entire RC subsystem
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-01-08 12:15:10 +00:00
Michael Tremer 7846dc8149 kernel: Enable support for Annapura Labs Alpine platform
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-01-08 12:13:56 +00:00
Michael Tremer 03ed32f92d kernel: Disable any unvetted ciphers/hashes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-01-08 12:09:41 +00:00
Michael Tremer d1ee2bc941 kernel: Update to 6.1.4
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-01-08 11:54:45 +00:00
Michael Tremer db9c9155e5 kernel: Set all options as systemd wants them
This aligns our kernel configuration to what systemd requires:
  https://git.ipfire.org/?p=thirdparty/systemd.git;a=blob;f=README;hb=ea575e176aac9fa8f430bb30a3e8abd8da767a10

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-01-06 14:54:31 +00:00
Michael Tremer 17283c115b kernel: Enable Framebuffer emulation layer for DRM
This will allow the kernel to use the DRM subsystem to render the
graphical console.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-31 12:04:14 +00:00
Michael Tremer c512372764 kernel: Require wireless-regdb at runtime
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-19 15:48:54 +00:00
Michael Tremer d69f4f2315 kernel: Build without Python 2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-19 15:48:12 +00:00
Michael Tremer 2d9a877874 kernel: Disable the RANDSTRUCT plugin
This does not seem to have the benefit we are expecting and comes with a
huge compile time cost that I would like to disable this for now.

As a disitribution kernel we do/have to publish the seed which makes
this entire feature very questionable.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-19 13:02:29 +00:00
Michael Tremer 6dce0e4cc7 kernel: Create a -debuginfo package for the tools
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-16 17:48:22 +00:00
Michael Tremer 6fe31a44d0 kernel: Disable all sorts of useless Device Mapper targets
This patch also compiles all sorts of device mapper stuff as modules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 17:35:29 +00:00
Michael Tremer 365cb5203a kernel: Disable support for floppy drives and block ramdisks
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 17:29:37 +00:00
Michael Tremer 507ff9c38a kernel: Enable modern features of the block layer
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 17:25:35 +00:00
Michael Tremer 01543109ec kernel: Disable the Distributed Lock Manager
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 16:57:38 +00:00
Michael Tremer 2e239be91e kernel: Enable support for ExFAT & NTFS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 16:53:26 +00:00
Michael Tremer 344efdbfdc kernel: Enable support for Hyper-V across the board
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 16:48:45 +00:00
Michael Tremer c067772a08 kernel: Disable I3C
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 61842ff050 kernel: Update Ethernet driver configuration
Enable what hasn't been enabled before, and disable PIO mode where
possible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 5e011eb59e kernel: Merge aarch64 & x86_64
This only sync configuration that seems to have been different between
those two architectures for no reason.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer dcfddfafcd kernel: Compile EHCI/OHCI/UHCI support as modules
The USB core will always be compiled into the kernel (because I believe
that we have virtually no systems which won't have a USB bus).

The others will only be loaded when necessary.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 839abee5ac kernel: Compile the entire SCSI subsystem as modules
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 561285e4cf kernel: Compile the ATA subsystem as a module
It probably was a good assumption to compile this in, but since more
hardware is using NVMe, I think this might not be used on all systems
any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer e73f228b5d kernel: Compile the MMC subsystem as a module
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 575d0a8754 kernel: Disable the multimedia subsystem
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 6dd0eca704 kernel: Enable all supported platforms for ARM
These are the platforms that are currently supported in IPFire 2 and
their depending drivers.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 163e20d8cd kernel: Disable overloading ACPI methods
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 49242a5661 kernel: Wipe all memory when rebooting on EFI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 88d75a2b81 kernel: Wipe all caller-used registers on exit from the function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 2d64b6c3a0 kernel: Make the scheduler aware of SMT
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 72a46760aa kernel: Trust the CPU's RNG
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 56edf0870a kernel: Enable all TPM devices
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer e61ec8d305 kernel: Enable IOMMU and set it to strict mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer c36f92723a kernel: Improve memory hardening with KFENCE
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 8cdd5bc1fa kernel: Enable Kernel Lockdown in Confidentiality Mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 445b5561bc kernel: Set HZ=100
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00
Michael Tremer 9c77f06c78 kernel: Enable cpufreq support for AMD processors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-15 15:51:22 +00:00