Franz Pletz
ccb0ba56ef
linux_hardended: enable gcc latent entropy plugin
2018-01-04 05:02:39 +01:00
Tim Steinbach
b720e9c23a
linux-copperhead: 4.14.10.a -> 4.14.11.a
2018-01-02 19:38:01 -05:00
Tim Steinbach
1e129a3f99
linux: 4.14.10 -> 4.14.11
2018-01-02 19:31:31 -05:00
Tim Steinbach
56f91dcb7b
linux: 4.9.73 -> 4.9.74
2018-01-02 19:31:14 -05:00
Tim Steinbach
1eb53a3830
linux: 4.4.108 -> 4.4.109
2018-01-02 19:30:58 -05:00
Tim Steinbach
469e1e5dcb
linux: 4.14.9 -> 4.14.10
2017-12-30 18:06:01 -05:00
Tim Steinbach
ed39ff393d
linux: 4.9.72 -> 4.9.73
2017-12-30 18:06:01 -05:00
Tim Steinbach
02bc3f4e3a
linux-copperhead: 4.14.9.b -> 4.14.10.a
2017-12-30 18:06:01 -05:00
David Guibert
1e77d0b975
kernel 4.14 require libelf to compile modules.
...
[...]
make modules -C /nix/store/h1vzl6bq4wif3m8dd1bw2p3fv4shjg3n-linux-4.14.9-dev/lib/modules/4.14.9/build EXTRA_CFLAGS=-Werror-implicit-function-declaration M=/tmp/nix-build-spl-kernel-2017-11-16-4.14.9.drv-0/source/build
/nix/store/h1vzl6bq4wif3m8dd1bw2p3fv4shjg3n-linux-4.14.9-dev/lib/modules/4.14.9/source/Makefile:939: *** "Cannot generate ORC metadata for CONFIG_UNWINDER_ORC=y, please install libelf-dev, libelf-devel or elfutils-libelf-devel". Stop.
This patch introduces kernel.moduleBuildDependencies to avoid the logic "stdenv.lib.optional (stdenv.lib.versionAtLeast kernel.version "4.14") libelf" in multiple places.
[dezgeg did some minor tweaks on top]
2017-12-29 23:08:17 +02:00
Tim Steinbach
5128f43b28
linux-copperhead: 4.14.8.b -> 4.14.9.a
2017-12-27 21:40:39 -05:00
Tim Steinbach
15b2a76399
linux: 4.4.107 -> 4.4.108
2017-12-27 21:31:14 -05:00
Vladimír Čunát
b0047e7782
linux: 4.9.71 -> 4.9.72 (security)
...
Fixes CVE-2017-16996, just as the preceding 4.14 update.
2017-12-26 16:42:34 +01:00
Andreas Rammhold
63e3eae02f
linux: 4.14.8 -> 4.14.9
...
Besides fixes for the recent BPF issues there is also a patch included
that fixes booting on aarch64 (e.g. RPi3) ;-)
2017-12-26 15:24:49 +01:00
Tim Steinbach
cbf0b680a5
linux-copperhead: 4.14.7.a -> 4.14.8.b
2017-12-20 13:22:15 -05:00
Tim Steinbach
26fb53a325
linux: 4.4.106 -> 4.4.107
2017-12-20 12:27:26 -05:00
Tim Steinbach
a4c93273e2
linux: 4.14.7 -> 4.14.8
2017-12-20 12:27:26 -05:00
Tim Steinbach
f95ba8ee5e
linux: 4.9.70 -> 4.9.71
2017-12-20 12:27:26 -05:00
Tim Steinbach
6e7944b55e
linux-copperhead: 4.14.6.a -> 4.14.7.a
2017-12-18 13:56:21 -05:00
Tim Steinbach
cbd337b2d0
linux: 4.14.6 -> 4.14.7
2017-12-18 06:57:49 -05:00
aszlig
5c83aed32d
linux-testing: 4.15-rc3 -> 4.15-rc4
...
Built successfully on x86_64-linux.
I've verified the contents of the tarball by comparing its contents
against the tag of my local checkout. Furthermore, I've checked the GPG
signature of the tag.
Signed-off-by: aszlig <aszlig@nix.build>
2017-12-18 05:54:47 +01:00
Tim Steinbach
a192ac5959
linux-copperhead: Fix hash
2017-12-16 12:20:24 -05:00
Tim Steinbach
5850e74eee
linux: 4.9.69 -> 4.9.70
2017-12-16 12:11:19 -05:00
Tim Steinbach
9846d74cd2
linux: 4.4.105 -> 4.4.106
2017-12-16 12:11:04 -05:00
Tim Steinbach
849074e5cd
linux-copperhead: 4.14.5.a -> 4.14.6.a
2017-12-15 12:39:20 -05:00
Tim Steinbach
66e36666d6
linux: 4.14.5 -> 4.14.6
2017-12-14 08:18:42 -05:00
Tim Steinbach
e6676bd66d
linux: 4.9.68 -> 4.9.69
2017-12-14 08:18:06 -05:00
Tim Steinbach
41371512e2
linux-copperhead: 4.14.4.a -> 4.14.5.a
2017-12-11 13:56:04 -05:00
aszlig
05f159b624
linux-testing: 4.15-rc2 -> 4.15-rc3
...
Built successfully on x86_64-linux.
I've verified the contents of the tarball by comparing its contents
against the tag of my local checkout. Furthermore, I've checked the GPG
signature of the tag.
Signed-off-by: aszlig <aszlig@nix.build>
2017-12-11 10:36:51 +01:00
Tim Steinbach
3bb52f9259
linux: 4.14.4 -> 4.14.5
2017-12-10 13:13:48 -05:00
Tim Steinbach
bd6424010d
linux: 4.9.67 -> 4.9.68
2017-12-10 13:10:45 -05:00
Tim Steinbach
48b0e5ddbc
linux: 4.4.104 -> 4.4.105
2017-12-09 14:58:43 -05:00
Tim Steinbach
146355628b
linux-copperhead: 4.14.3.a -> 4.14.4.a
2017-12-09 14:58:43 -05:00
Tim Steinbach
93e68fd249
linux: 4.14.3 -> 4.14.4
2017-12-05 08:06:47 -05:00
Tim Steinbach
c0b09e9f6c
linux: 4.9.66 -> 4.9.67
2017-12-05 08:06:47 -05:00
Tim Steinbach
06edc9c16f
linux: 4.4.103 -> 4.4.104
2017-12-05 08:06:47 -05:00
Vladimír Čunát
13797ff522
linux-4.13: mark as insecure (+required generic changes)
...
extraMeta was being fed as passthru without being processed by stdenv,
so without those changes, adding the security attribute would be useless.
2017-12-04 09:33:39 +01:00
aszlig
d747c27387
linux-testing: 4.15-rc1 -> 4.15-rc2
...
Built successfully on x86_64-linux.
I've verified the contents of the tarball by comparing its contents
against the tag of my local checkout. Furthermore, I've checked the GPG
signature of the tag.
Signed-off-by: aszlig <aszlig@nix.build>
2017-12-04 05:24:37 +01:00
adisbladis
74857c9dce
Revert "linux_4_13: Remove, no longer supported."
...
This reverts commit b39ab30ba7
.
There are some show stopper issues in the 4.14 kernel that are still
not resolved.
https://github.com/NixOS/nixpkgs/issues/31640
2017-12-04 09:59:11 +08:00
Tuomas Tynkkynen
b39ab30ba7
linux_4_13: Remove, no longer supported.
2017-12-03 23:20:08 +02:00
Tim Steinbach
4e7deb7100
linux-copperhead: 4.14.2.a -> 4.14.3.a
2017-12-02 14:01:14 -05:00
Tim Steinbach
a57a32e07c
linux: 4.4.102 -> 4.4.103
2017-12-01 10:07:28 -05:00
Tim Steinbach
777f49bfff
linux: 4.9.65 -> 4.9.66
2017-12-01 10:04:09 -05:00
Tim Steinbach
2863022480
linux: 4.14.2 -> 4.14.3
2017-12-01 10:00:48 -05:00
Vladimír Čunát
addd20e6f9
Merge branch 'master' into staging
2017-11-28 18:19:34 +01:00
Philipp Steinpass
e8fcced76e
linux-testing: 4.14-rc8 -> 4.15-rc1
...
Closes #32137
2017-11-28 15:19:23 +02:00
Tuomas Tynkkynen
acbaefa615
Revert "linux-testing: 4.14-rc8 -> 4.15-rc1"
...
This reverts commit 9335f1dda2
.
Doesn't compile, a working version is at #32137 .
2017-11-28 15:18:49 +02:00
Tim Steinbach
9335f1dda2
linux-testing: 4.14-rc8 -> 4.15-rc1
2017-11-27 16:34:06 -05:00
Vladimír Čunát
6705f30e2c
Merge branch 'master' into staging
2017-11-27 15:09:53 +01:00
John Ericson
e755a8a27d
treewide: Use targetPrefix
instead of prefix
for platform name prefixes
...
Certain tools, e.g. compilers, are customarily prefixed with the name of
their target platform so that multiple builds can be used at once
without clobbering each other on the PATH. I was using identifiers named
`prefix` for this purpose, but that conflicts with the standard use of
`prefix` to mean the directory where something is installed. To avoid
conflict and confusion, I renamed those to `targetPrefix`.
2017-11-27 03:15:50 -05:00
Tim Steinbach
3fc7f924af
linux-copperhead: 4.14.1.a -> 4.14.2.a
2017-11-26 12:07:04 -05:00
Tim Steinbach
c3ce21dd98
linux: 4.14.1 -> 4.14.2
2017-11-24 08:28:12 -05:00
Tim Steinbach
4f7fb7125a
linux: 4.13.15 -> 4.13.16
2017-11-24 08:28:12 -05:00
Tim Steinbach
3774309986
linux: 4.9.64 -> 4.9.65
2017-11-24 08:28:12 -05:00
Tim Steinbach
9d86ddc685
linux: 4.4.100 -> 4.4.102
2017-11-24 08:28:12 -05:00
Tim Steinbach
843ee55b66
linux-copperhead: 4.13.14.a -> 4.14.1.a
2017-11-22 08:03:56 -05:00
Matthieu Coudron
28f9262092
kernel: improve modDirVersion error message
...
Now prints the current modDirVersion. Close #31887 .
2017-11-21 20:42:41 +01:00
Raymond Gauthier
7cdd12e4e9
kernel config: Enable MEDIA_CONTROLLER
...
With this disabled, cameras would not get a `/dev/mediaX` entry matching
the `/dev/videoX` which broke any application (e.g: `uvcdynctrl -l`,
`media-ctl -p`) depending on this interface.
2017-11-21 16:33:31 +02:00
Tim Steinbach
3300ec2b92
linux: 4.4.99 -> 4.4.100
2017-11-21 08:08:40 -05:00
Tim Steinbach
03a3ab5db1
linux: 4.9.63 -> 4.9.64
2017-11-21 08:06:47 -05:00
Tim Steinbach
e3877445aa
linux: 4.14 -> 4.14.1
2017-11-21 08:04:26 -05:00
Tim Steinbach
332ac0bdec
linux: 4.13.14 -> 4.13.15
2017-11-21 08:02:12 -05:00
Tim Steinbach
58cc833df4
linux-copperhead: 4.13.13.a -> 4.13.14.a
2017-11-20 11:44:03 -05:00
Tim Steinbach
170f5c7543
linux-beagleboard: 4.9.59-r73 -> 4.9.61-r76
2017-11-18 17:33:40 -05:00
Tim Steinbach
ac470a67f8
linux: 4.4.98 -> 4.4.99
2017-11-18 17:19:50 -05:00
Tim Steinbach
c6f1290250
linux: 4.9.62 -> 4.9.63
2017-11-18 17:16:14 -05:00
Tim Steinbach
790f096a45
linux: 4.13.13 -> 4.13.14
2017-11-18 17:12:18 -05:00
Tuomas Tynkkynen
eb85761137
kernel: Fix out-of-tree modules on aarch64
...
https://hydra.nixos.org/build/62813493
2017-11-17 17:06:52 +02:00
Tim Steinbach
55851579d9
linux-copperhead: 4.13.12.a -> 4.13.13.a
2017-11-16 13:58:47 -05:00
Tim Steinbach
8b3293d947
linux: 4.4.97 -> 4.4.98
2017-11-15 16:44:20 -05:00
Tim Steinbach
ff16004273
linux: 4.9.61 -> 4.9.62
2017-11-15 16:44:20 -05:00
Joachim Fasting
870c86d0ee
linux_hardened: structleak covers structs passed by address
2017-11-15 22:10:50 +01:00
Joachim Fasting
8ecae36963
linux_hardened: enable slab freelist hardening
2017-11-15 22:10:44 +01:00
Tim Steinbach
bd9b124f2a
linux: 4.13.12 -> 4.13.13
2017-11-15 07:32:24 -05:00
Florian Klink
f919c7faec
linux_4_14: fix iwlwifi fw reset
...
Currently, moving to kernel_4_14 breaks at least Intel Wireless 8260 and
8265 cards due to a API change in the firmware, which is not yet honored
in the driver.
2017-11-15 11:30:24 +00:00
Tim Steinbach
53730c5a92
linux: Add 4.14
2017-11-13 08:34:36 -05:00
Matthieu Coudron
38737386d5
linux_mptcp: makes linux_mptcp.override works
...
I needed to override some parameters because of an error I had:
"Error: modDirVersion specified in the Nix expression is wrong, it should be: 4.9.60+"
but the following override would not be taken into account
pkg.override ({
modDirVersion="4.9.60+";
src=pkgs.lib.cleanSource /home/teto/mptcp;
})
because the override would be overriden by the nixpkgs parameters
because of concatenation order:
https://nixos.org/nix/manual/#sec-language-operators
2017-11-13 11:19:26 +01:00
Drew Hess
67ba83a934
kernel: add beagleboard.org kernel
...
And update the existing platform variant to use it
2017-11-09 18:28:14 +02:00
Tim Steinbach
4cb8c5dc3c
linux-copperhead: 4.13.11.a -> 4.13.12.a
2017-11-08 14:34:31 -05:00
Tim Steinbach
087d1e8d36
linux: 4.13.11 -> 4.13.12
2017-11-08 14:34:31 -05:00
Tim Steinbach
db1e2444a5
linux: 4.9.60 -> 4.9.61
2017-11-08 14:34:31 -05:00
Tim Steinbach
bd4b9062ea
linux: 4.4.96 -> 4.4.97
2017-11-08 14:34:31 -05:00
makefu
292f60504c
linux.kernel: enable build of stk1160 modules
2017-11-08 12:41:54 +02:00
Tuomas Tynkkynen
bf585f2881
linux_rpi: 1.20170811 -> 1.20171029
2017-11-06 20:49:48 +02:00
Tim Steinbach
30f6d630f1
linux: 4.14.0-rc7 -> 4.14.0-rc8
2017-11-05 16:47:03 -05:00
Tuomas Tynkkynen
0d9f2f0bb4
platforms.nix: Clean up more 'uboot' legacy
...
For a while now, the only thing the 'uboot' attribute does is to tell
whether to add ubootTools to kernel/initrd builds. That can be
determined with platform.kernelTarget == "uImage" just as well.
2017-11-05 17:06:59 +02:00
Franz Pletz
b032b3544f
linux_mptcp: 0.92.1 -> 0.93
2017-11-05 14:56:06 +01:00
Tuomas Tynkkynen
b50693d16c
kernel, initrd: Remove legacy ubootChooser
2017-11-05 15:11:12 +02:00
Tim Steinbach
449a053152
linux-copperhead: 4.13.10.a -> 4.13.11.a
2017-11-02 19:54:31 -04:00
Matthieu Coudron
7dce131b86
kernelmptcp: 0.91.3 -> 0.92.1
2017-11-02 13:14:57 +01:00
Franz Pletz
68b5ec06b9
linux: 4.9.59 -> 4.9.60
2017-11-02 11:28:40 +01:00
Franz Pletz
6021ca25db
linux: 4.4.95 -> 4.4.96
2017-11-02 11:28:27 +01:00
Franz Pletz
c37c896ee0
linux: 4.13.10 -> 4.13.11
2017-11-02 11:28:14 +01:00
Franz Pletz
0a5ecde808
linux: 4.4.80 -> 4.4.95
2017-10-30 17:57:00 +01:00
Franz Pletz
36be7d3e85
Revert parts of "linux: remove unused kernel patches"
...
This reverts commit 05b8cae9ec
that
removed the cgroup v2 patch for the 4.4 kernel.
2017-10-30 17:57:00 +01:00
Franz Pletz
517606d1d4
Revert "linux_4_4: remove"
...
This reverts commit 9f3f575ab3
.
Support from upstream has been extended to Feb 2022.
2017-10-30 17:57:00 +01:00
Tim Steinbach
70f35a99a4
linux: 4.14-rc6 -> 4.14-rc7
2017-10-30 08:30:29 -04:00
Tim Steinbach
e76d8af375
linux-copperhead: 4.13.9.a -> 4.13.10.a
2017-10-28 13:42:32 -04:00
Tim Steinbach
2c373d818d
linux: 4.13.9 -> 4.13.10
2017-10-27 07:48:05 -04:00
Tim Steinbach
85e79da31b
linux: 4.9.58 -> 4.9.59
2017-10-27 07:47:56 -04:00
Tim Steinbach
4ea79d3f36
linux: 4.14-rc5 -> 4.14-rc6
2017-10-23 08:49:39 -04:00
Tim Steinbach
e9aa686d3b
linux-copperhead: 4.13.8.a -> 4.13.9.a
2017-10-22 14:41:01 -04:00
Tim Steinbach
69ebd73571
linux: 4.13.8 -> 4.13.9
2017-10-22 14:35:49 -04:00
Tim Steinbach
c529454c60
linux: 4.9.57 -> 4.9.58
2017-10-22 14:35:32 -04:00
Tim Steinbach
0b409b37d4
linux-copperhead: 4.13.7.a -> 4.13.8.a
2017-10-19 08:02:26 -04:00
Tim Steinbach
67343e2f30
linux: 4.13.7 -> 4.13.8
2017-10-18 08:38:39 -04:00
Tim Steinbach
1b0e69966b
linux: 4.9.56 -> 4.9.57
2017-10-18 08:38:27 -04:00
Tim Steinbach
00669df0c1
linux: 4.14-rc4 -> 4.14-rc5
2017-10-16 09:26:36 -04:00
Tim Steinbach
19997f0100
linux-copperhead: 4.13.6.a -> 4.13.7.a
2017-10-15 15:28:16 -04:00
Tim Steinbach
8c618fce30
linux: 4.13.6 -> 4.13.7
...
CVE-2017-5123
2017-10-14 10:29:04 -04:00
Tim Steinbach
cc5dd66c03
linux: 4.9.55 -> 4.9.56
2017-10-12 20:02:15 -04:00
Tim Steinbach
64a727b160
linux-copperhead: 4.13.5.a -> 4.13.6.a
2017-10-12 13:09:36 -04:00
Tim Steinbach
5a8f9a8b6c
linux: 4.13.5 -> 4.13.6
2017-10-12 07:58:46 -04:00
Tim Steinbach
8940265231
linux: 4.9.54 -> 4.9.55
2017-10-12 07:58:33 -04:00
Tim Steinbach
5dda1324be
linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT
2017-10-11 13:50:20 -04:00
Tim Steinbach
2262b2332d
linux: 4.14-rc3 -> 4.14-rc4
2017-10-10 13:07:42 -04:00
Eelco Dolstra
67c3eab348
linux: 4.9.53 -> 4.9.54
2017-10-10 12:41:50 +02:00
Frederik Rietdijk
acfec163b1
Merge remote-tracking branch 'upstream/master' into HEAD
2017-10-07 12:15:17 +02:00
Vladimír Čunát
ef41fc7f51
Merge branch 'master' into staging
...
Hydra: ?compare=1399476
2017-10-07 10:17:42 +02:00
Tuomas Tynkkynen
a06d64ea69
kernel config: Explicitly enable device mapper
...
A no-op change on x86 but enables it on ARM.
2017-10-07 11:05:05 +03:00
Tim Steinbach
3e5b594732
linux-copperhead: 4.13.4.a -> 4.13.5.a
2017-10-05 16:06:19 -04:00
Tim Steinbach
0bd1f7a92f
linux: 4.13.4 -> 4.13.5
2017-10-05 09:50:00 -04:00
Tim Steinbach
aee224c8a5
linux: 4.9.52 -> 4.9.53
2017-10-05 09:49:40 -04:00
Orivej Desh
f137004179
Merge branch 'master' into staging
...
* master: (81 commits)
Add NixOS 17.09 AMIs
gradle: 4.2 -> 4.2.1
maintainers.nix: use my GitHub handle as maintainer name
fcitx-engines.rime: init at 0.3.2
brise: init at 2017-09-16
librime: init at 1.2.9
marisa: init at 0.2.4
opencc: build shared library and programs
josm: 12712 -> 12914
exa: 0.7.0 -> 0.8.0
krb5: add deprecation date for old configuration
rustRegistry: 2017-09-10 -> 2017-10-03
go-ethereum: Fix libusb segmentation faults on Darwin
tor-browser-bundle-bin: 7.0.5 -> 7.0.6
libsodium: 1.0.13 -> 1.0.15
tor-browser-bundle: geoip support
tor-browser-bundle: support transports obfs2,obfs3
tor-browser-bundle: bump https-everywhere to 2017.9.12
tint2: limit platforms to Linux since macOS is not supported and fails the tests
eclipse-plugin-vrapper: init at 0.72.0
...
2017-10-03 17:46:39 +00:00
Tim Steinbach
1e85d28fdc
linux: 4.14-rc2 -> 4.14-rc3
2017-10-02 09:29:51 -04:00
Orivej Desh
fda26c8476
Merge branch 'master' into staging
...
* master: (271 commits)
pysmbc: clarify license
pysmbc: fix license
bazel: 0.5.4 -> 0.6.0 (#29990 )
googler: init at 3.3
go: declare support for aarch64
firefox-beta-bin: 56.0b5 -> 57.0b4
spotify: 1.0.64.401.g9d720389-21 -> 1.0.64.407.g9bd02c2d-26
gogs: 0.11.19 -> 0.11.29
grafana: 4.5.1 -> 4.5.2
mopidy-iris: 3.4.1 -> 3.4.9
nextcloud: 12.0.2 -> 12.0.3
haskell-json-autotype: jailbreak to fix build within LTS 9.x
kore: fix up
kore: init at 2.0.0
glusterfs service: fix issues with useRpcbind
tig: 2.2.2 -> 2.3.0
haskell-hspec-core: enable test suite again
hackage-packages.nix: automatic Haskell package set update
librsvg: fix thumbnailer path
awscli: 1.11.108 -> 1.11.162
...
2017-10-02 00:22:12 +00:00
Tim Steinbach
e479b5ea6f
linux-copperhead: 4.13.3.a -> 4.13.4.a
2017-09-30 10:05:39 -04:00
John Ericson
f037625f87
Merge remote-tracking branch 'upstream/staging' into deps-reorg
2017-09-28 12:32:57 -04:00
Tim Steinbach
ab3ff4af9f
linux: 4.13.3 -> 4.13.4
2017-09-27 13:08:21 -04:00
Tim Steinbach
2ca84cfa29
linux: 4.9.51 -> 4.9.52
2017-09-27 13:03:27 -04:00
Tim Steinbach
964672dde5
linux: Remove 4.12 (EOL)
2017-09-27 13:03:06 -04:00
Tim Steinbach
b13a6d5720
linux: 4.14-rc1 -> 4.14-rc2
2017-09-25 09:24:23 -04:00
John Ericson
f8a18cd4cf
misc pkgs: Manual fixup pkgconfig nativeBuildInputs after sed
...
Importantly, this included regenerating pkgs/servers/x11/xorg, to
clobber the old sed.
2017-09-21 15:49:54 -04:00
John Ericson
531e4b80c9
misc pkgs: Basic sed to get fix pkgconfig
and autoreconfHook
buildInputs
...
Only acts on one-line dependency lists.
2017-09-21 15:49:53 -04:00
Tim Steinbach
7d3d276a16
linux-copperhead: 4.13.2.a -> 4.13.3.a
2017-09-21 14:37:44 -04:00
Tim Steinbach
eab480ac3d
linux: 4.13.2 -> 4.13.3
2017-09-20 08:36:27 -04:00
Tim Steinbach
726765404b
linux: 4.12.13 -> 4.12.14
2017-09-20 08:36:13 -04:00
Tim Steinbach
7cfa6895e8
linux: 4.9.50 -> 4.9.51
2017-09-20 08:35:44 -04:00
Jan Malakhovski
8525b78d05
linuxPackages: properly propagate features
and extraConfig
...
`kernel.override { features = ... }` didn't work before, now it works as
expected.
2017-09-17 16:33:47 +02:00
Tim Steinbach
c8f43edaf5
linux: 4.13-rc7 -> 4.14-rc1
2017-09-17 09:11:04 -04:00
Tim Steinbach
08229bba30
linux-copperhead: 4.13.1.b -> 4.13.2.a
2017-09-16 08:57:45 -04:00
Tuomas Tynkkynen
9a6aa33422
kernel: Disable DEBUG_INFO
...
Since we don't have a split debug info output yet, don't waste time
writing several gigabytes of debug info that's all going to be stripped
out at the end.
This change only affects Aarch64 (where some joker has enabled it in the
architecture defconfig) and is a no-op on the others.
2017-09-16 15:09:10 +03:00
Jan Malakhovski
62fa45eac5
linuxPackages: hardened-config: enable DEBUG_PI_LIST
2017-09-16 13:14:05 +02:00
Jan Malakhovski
c345761c13
linuxPackages: hardened-config: check kernelArch, not system
2017-09-16 13:14:04 +02:00
Jan Malakhovski
616a7fe237
linuxPackages: hardened-config: disable BUG_ON_DATA_CORRUPTION
for older kernels
...
They don't support it.
2017-09-16 13:14:03 +02:00
Joachim Fasting
dd170cd5df
hardened-config: build with fortify source
2017-09-16 00:31:25 +02:00
Joachim Fasting
9a763f8f59
hardened-config: enable the randstruct plugin
2017-09-16 00:31:23 +02:00
Joachim Fasting
edd0d2f2e9
hardened-config: additional refcount checking
2017-09-16 00:31:17 +02:00
Tim Steinbach
43b3029a4a
linux: 4.9.49 -> 4.9.50
2017-09-14 08:40:13 -04:00
Tim Steinbach
537da6cb50
linux: 4.12.12 -> 4.12.13
2017-09-14 08:40:13 -04:00
Tim Steinbach
232fc6a806
linux: 4.13.1 -> 4.13.2
2017-09-14 08:40:13 -04:00
Tim Steinbach
87fa247867
linux-copperhead: 4.13.1.a -> 4.13.1.b
2017-09-13 08:20:58 -04:00
Tim Steinbach
114a2bcc80
linux-copperhead: 4.13.a -> 4.13.1.a
2017-09-10 19:21:31 -04:00
Tim Steinbach
80486ba971
linux: 4.13 -> 4.13.1
2017-09-10 12:13:15 -04:00
Tim Steinbach
9c723d4b2b
linux: 4.12.11 -> 4.12.12
2017-09-10 12:13:15 -04:00
Tim Steinbach
1ab2b06a36
linux: 4.9.48 -> 4.9.49
2017-09-10 12:13:15 -04:00
Tim Steinbach
dc8b228a89
linux: 4.9.47 -> 4.9.48
2017-09-07 10:31:02 -04:00
Tim Steinbach
a1912c9eb4
linux: 4.12.10 -> 4.12.11
2017-09-07 10:27:39 -04:00
Jörg Thalheim
44f93731d6
linux_chromiumos_3_18: remove kernel due lack of maintainer/breakage
...
There is no maintainer for this package, probably not many users.
It requires effort to fix all third-party modules for this old kernel
versions. It might contain unpatched security holes.
For Pixel chromebooks, we have the samus-kernel.
Apart from that https://github.com/GalliumOS/linux might be a good choice.
2017-09-05 14:42:23 +02:00
Tim Steinbach
967077537b
linux-copperhead: 4.12.10.a -> 4.13.a
2017-09-04 11:09:29 -04:00
Tim Steinbach
c1e2a0b6f4
linux: Add 4.13
2017-09-03 19:41:44 -04:00
Tim Steinbach
2c301b1b48
linux: 4.9.46 -> 4.9.47
...
(cherry picked from commit 27c8378c0c81aa17aef615615421aa5de3d8246b)
2017-09-02 11:17:47 -04:00
Joachim Fasting
697cbbc617
kernelPatches.grsecurity_testing: remove
2017-09-02 15:56:49 +02:00
davidak
4134db36d0
linux-testing-bcachefs: init at 4.11.2017.08.23
2017-08-31 05:39:17 -05:00
Tim Steinbach
4c91e32da6
linux-copperhead: 4.12.9.a -> 4.12.10.a
2017-08-30 13:17:51 -04:00
Tim Steinbach
fab79d08e9
linux: 4.9.45 -> 4.9.46
2017-08-30 07:59:42 -04:00
Tim Steinbach
a27c6c7374
linux: 4.12.9 -> 4.12.10
2017-08-30 07:59:42 -04:00
Tuomas Tynkkynen
ff3f6f38c4
linux_rpi: 1.20170515 -> 1.20170811
2017-08-29 02:37:52 +03:00
Tim Steinbach
163b3e853b
linux: 4.13-rc6 -> 4.13-rc7
2017-08-28 11:59:37 -04:00
Tim Steinbach
bebaf083cd
linux-copperhead: 4.12.8.a -> 4.12.9.a
2017-08-27 09:43:23 -04:00
Tim Steinbach
9b9d0cc06b
linux: 4.9.44 -> 4.9.45
2017-08-26 09:50:02 -04:00
Tim Steinbach
d23bed7cc6
linux: 4.12.8 -> 4.12.9
2017-08-26 09:47:57 -04:00
Tim Steinbach
cd85a704a5
linux: 4.13-rc4 -> 4.13-rc6
2017-08-22 03:23:30 -04:00
Frederik Rietdijk
6bbc3a0b24
Merge commit '3b29468313bc8604fe8f85c8d9316fd276d3985c' into HEAD
2017-08-21 04:44:40 +02:00
Vladimír Čunát
7c7c83e233
buildLinux: allow overriding stdenv on each call
2017-08-20 08:24:52 +02:00
Tim Steinbach
7209ed6d4b
linux-copperhead: 4.12.7.a -> 4.12.8.a
2017-08-18 15:47:03 -04:00
Tim Steinbach
9281b05c7f
linux: 4.12.7 -> 4.12.8
2017-08-18 15:33:53 -04:00
Tim Steinbach
a5f01aa745
linux: 4.9.43 -> 4.9.44
2017-08-18 15:30:37 -04:00
Tim Steinbach
b94210b066
linux-copperhead: 4.12.5.a -> 4.12.7.a
2017-08-14 12:51:30 -04:00
Frederik Rietdijk
13bbaee21d
Merge pull request #27881 from mimadrid/fix/http-https
...
Update homepage attributes: http -> https
2017-08-13 21:53:20 +02:00
Tim Steinbach
5c29873e99
linux: 4.9.42 -> 4.9.43
2017-08-13 15:42:15 -04:00
Tim Steinbach
59e34685da
linux: 4.12.6 -> 4.12.7
2017-08-13 15:42:15 -04:00
Joachim Fasting
345e0e6794
hardened-config: enable read-only LSM hooks
...
Implies that SELinux can no longer be disabled at runtime (only at boot
time, via selinux=0).
See https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dd0859dccbe291cf8179a96390f5c0e45cb9af1d
2017-08-11 23:27:58 +02:00
Robin Gloster
05b8cae9ec
linux: remove unused kernel patches
2017-08-11 19:13:09 +02:00
Robin Gloster
9f3f575ab3
linux_4_4: remove
...
Support ends in Feb 2018
2017-08-11 19:13:09 +02:00
Robin Gloster
0eb9c5bd42
linux_3_10: remove
...
Support ends in Oct 2017
2017-08-11 19:13:08 +02:00
Tim Steinbach
47d9b48e4d
linux: 4.12.5 -> 4.12.6
2017-08-11 12:14:53 -04:00
Tim Steinbach
f2d420e4c9
linux: 4.9.41 -> 4.9.42
2017-08-11 12:10:10 -04:00
Tim Steinbach
f46f98ad31
Revert 0cf0d7186a
...
Order common kernel config by functionality
See #27949
2017-08-07 17:34:10 -04:00
Tim Steinbach
fa10497834
Merge pull request #27684 from gnidorah/bfq
...
linux: BFQ Group Scheduling support
2017-08-07 11:58:45 -04:00
Tim Steinbach
06af1df857
linux: 4.13-rc3 -> 4.13-rc4
2017-08-07 11:40:01 -04:00
Tim Steinbach
ea2a10e143
linux: 4.4.79 -> 4.4.80
2017-08-07 11:35:42 -04:00
Tim Steinbach
4825e4818b
linux: 4.9.40 -> 4.9.41
2017-08-07 11:32:26 -04:00
gnidorah
dc21f1ad65
linux: BFQ Group Scheduling support
2017-08-07 10:12:21 +03:00
Tim Steinbach
1ec7242bc2
linux-copperhead: 4.12.4.a -> 4.12.5.a
2017-08-06 22:04:46 -04:00
Tim Steinbach
ff9479cd54
linux: 4.12.4 -> 4.12.5
2017-08-06 19:22:15 -04:00
Tim Steinbach
0cf0d7186a
linux-common-config: Refactor, clean up
2017-08-06 19:17:30 -04:00
Joachim Fasting
f963014829
linux-hardened-config: various fixups
...
Note
- the kernel config parser ignores "# foo is unset" comments so they
have no effect; disabling kernel modules would break *everything* and so
is ill-suited for a general-purpose kernel anyway --- the hardened nixos
profile provides a more flexible solution
- removed some overlap with the common config (SECCOMP is *required* by systemd;
YAMA is enabled by default).
- MODIFY_LDT_SYSCALL is guarded by EXPERT on vanilla so setting it to y breaks
the build; fix by making it optional
- restored some original comments which I feel are clearer
2017-08-06 23:38:07 +02:00
Heitham Omar
5ac00265a8
linux-common-config: add CONFIG_HOTPLUG_PCI_ACPI
2017-08-06 20:41:28 +02:00
Tim Steinbach
ff10bafd00
linux: Expand hardened config
...
Based on latest recommendations at
http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
2017-08-06 09:58:02 -04:00
Robin Gloster
2b4811887a
kernel: add IP_NF_TARGET_REDIRECT
2017-08-04 08:26:09 +02:00