Commit Graph

1151 Commits

Author SHA1 Message Date
Jan Alexander Steffens 1e93cf5d3a 5.18.16.arch1-1 2022-08-03 12:00:00 +00:00
Frederik Schwan 2952eab02b glibc-2.36 rebuild 2022-08-01 19:41:06 +00:00
Jan Alexander Steffens 94d0ee92f2 FS#74975: Enable MEMTEST 2022-07-31 14:38:59 +00:00
Jan Alexander Steffens 9534c46ab6 5.18.15.arch1-1 2022-07-30 12:13:29 +00:00
Jan Alexander Steffens 0d5a58dc37 5.18.14.arch1-1 2022-07-23 12:28:24 +00:00
Frederik Schwan ecab370fdd gcc-12.1.0-3 rebuild 2022-07-22 23:27:59 +00:00
Jan Alexander Steffens 37cf2170ba 5.18.13.arch1-1 2022-07-22 13:43:44 +00:00
Jan Alexander Steffens 67fd211152 5.18.12.arch1-1 2022-07-15 16:34:15 +00:00
Jan Alexander Steffens 60e92d98c7 5.18.11.arch1-1 2022-07-12 16:11:00 +00:00
Jan Alexander Steffens 609d69d688 5.18.10.arch1-1 2022-07-07 18:25:25 +00:00
Jan Alexander Steffens 45817f47a0 5.18.9.arch1-1 2022-07-02 22:53:43 +00:00
Jan Alexander Steffens df223a294a 5.18.8.arch1-1 2022-06-30 04:58:59 +00:00
Jan Alexander Steffens a2ad438aca 5.18.7.arch1-1 2022-06-25 20:55:59 +00:00
Jan Alexander Steffens af075e3dca 5.18.6.arch1-1 2022-06-22 18:43:35 +00:00
Jan Alexander Steffens 5f3729800f FS#75102: Add integrity to LSM
This only initializes a cache which is used by IMA. So it does nothing
useful. Still, we technically have the integrity LSM and this removes a
footgun should IMA ever get enabled.
2022-06-19 20:12:32 +00:00
Jan Alexander Steffens 2e8ca45bc9 FS#75102: Enable KEXEC_SIG 2022-06-19 20:12:32 +00:00
Jan Alexander Steffens 1eaae5d53f FS#75102: Revert "Enable KEXEC_SIG and IMA"
Enabling IMA makes it impossible to load unsigned kernel modules when
secure boot is in use, and without shim in the boot you can't get the
kernel to trust a local key for module signing.

This reverts commit 6a241232a3275ef3e314b5b7167e13fffff71282.
2022-06-19 20:12:31 +00:00
Jan Alexander Steffens 0724b8895c FS#75102: Enable KEXEC_SIG and IMA 2022-06-19 19:23:48 +00:00
Jan Alexander Steffens b72d91cb76 Build htmldocs in parallel
If you need clean build output, remove the docs build.
2022-06-19 19:23:47 +00:00
Jan Alexander Steffens b3c8c8615f 5.18.5.arch1-1 2022-06-16 21:18:19 +00:00
Jan Alexander Steffens a0899d416d Disable PECI
As requested by Levente. Only useful for kernels running on baseboard
management controllers.
2022-06-16 21:18:17 +00:00
Jan Alexander Steffens 218d2a950d 5.18.4.arch1-1 2022-06-15 23:42:51 +00:00
Jan Alexander Steffens 5bd573c89e FS#75041: Enable INTEGRITY_MACHINE_KEYRING and related 2022-06-15 23:42:48 +00:00
Jan Alexander Steffens e29a800771 5.18.3.arch1-1 2022-06-09 17:20:22 +00:00
Jan Alexander Steffens 2adaf032c5 5.18.2.arch1-1 2022-06-06 20:35:16 +00:00
Jan Alexander Steffens 3aa8dd1c85 5.18.1.arch1-1 2022-05-30 18:31:45 +00:00
Jan Alexander Steffens f11429d842 FS#74888: Enable BLOCK_LEGACY_AUTOLOAD
Disabling this broke legacy mdraid setups.

See: https://lore.kernel.org/linux-block/20220503212848.5853-1-dmoulding@me.com/
2022-05-30 18:31:42 +00:00
Jan Alexander Steffens 1cc50e39e6 5.18.arch1-1 2022-05-24 22:34:17 +00:00
Jan Alexander Steffens d55c08b891 5.17.9.arch1-1 2022-05-18 21:53:45 +00:00
Jan Alexander Steffens eb235bf7d5 5.17.8.arch1-1 2022-05-16 21:41:18 +00:00
Frederik Schwan c9f9cc83d6 gcc-12.1.0-2 rebuild 2022-05-15 05:14:41 +00:00
Jan Alexander Steffens 40f67dd1f4 5.17.7.arch1-1 2022-05-12 19:28:04 +00:00
Jan Alexander Steffens 231862cf72 5.17.6.arch1-1 2022-05-10 23:31:11 +00:00
Frederik Schwan b2101893db gcc-12.1.0 rebuild 2022-05-06 20:13:38 +00:00
Jan Alexander Steffens 0c61251a1e 5.17.5.arch1-1 2022-04-27 21:57:26 +00:00
Jan Alexander Steffens ee2af8ec43 5.17.4.arch1-1 2022-04-20 19:02:04 +00:00
Jan Alexander Steffens 3709e55626 5.17.3.arch1-1 2022-04-14 12:27:20 +00:00
Jan Alexander Steffens 7988a2548a 5.17.2.arch3-1 2022-04-10 11:47:49 +00:00
Jan Alexander Steffens 5dcd6e2fc5 5.17.2.arch2-1 2022-04-08 20:21:16 +00:00
Jan Alexander Steffens 2d3dd3bff0 5.17.2.arch1-1 2022-04-08 18:11:24 +00:00
Jan Alexander Steffens b6880b286a FS#72275: Don't package files created by depmod 2022-04-08 18:11:21 +00:00
Jan Alexander Steffens d60d23d3e0 FS#74291: Reenable FRAMEBUFFER_CONSOLE_ROTATION 2022-04-01 16:10:30 +00:00
Tobias Powalowski 5b6b1b8eec switch crda to wireless-regdb 2022-03-31 06:39:12 +00:00
Jan Alexander Steffens 8dc941a8b3 FS#68021, FS#74271: Return nvme to a module 2022-03-30 20:34:27 +00:00
Jan Alexander Steffens ba835a0fa6 5.17.1.arch1-1 2022-03-28 21:54:44 +00:00
Jan Alexander Steffens 03fa74e628 FS#74203: Disable SYSFB_SIMPLEFB 2022-03-28 21:54:43 +00:00
Jan Alexander Steffens 432adf96db 5.17.arch1-1 2022-03-23 00:44:26 +00:00
Jan Alexander Steffens e21cc89a76 5.16.16.arch1-1 2022-03-21 23:44:11 +00:00
Jan Alexander Steffens 22c5798bf1 5.16.15.arch1-1 2022-03-17 00:58:21 +00:00
Jan Alexander Steffens 997a6a8651 5.16.14.arch1-1 2022-03-11 18:29:09 +00:00
Jan Alexander Steffens ccba33df68 Enable BPF_UNPRIV_DEFAULT_OFF
This config was enabled by default in v5.15 and we should follow that.
2022-03-09 16:09:34 +00:00
Jan Alexander Steffens 4f1d39f328 5.16.13.arch1-1 2022-03-08 20:36:10 +00:00
Jan Alexander Steffens 455ae3c99a 5.16.12.arch1-1 2022-03-02 13:24:19 +00:00
Jan Alexander Steffens b4d8109660 5.16.11.arch1-2 2022-02-28 11:49:27 +00:00
Jan Alexander Steffens 19488bc439 5.16.11.arch1-1 2022-02-24 07:18:20 +00:00
Jan Alexander Steffens 49dd63df08 5.16.10.arch1-1 2022-02-16 20:15:19 +00:00
Jan Alexander Steffens 74147130fa 5.16.9.arch1-1 2022-02-11 23:14:13 +00:00
Jan Alexander Steffens a4414373de FS#73364: Enable DAMON 2022-02-11 23:14:12 +00:00
Jan Alexander Steffens 9babb28470 5.16.8.arch1-2 2022-02-09 20:03:15 +00:00
Jan Alexander Steffens eb92849ce1 5.16.8.arch1-1 2022-02-08 21:56:54 +00:00
Jan Alexander Steffens 659df960bd FS#72597: Disable ZERO_CALL_USED_REGS
Too much overhead.
2022-02-07 18:29:34 +00:00
Jan Alexander Steffens b49ec6f0be 5.16.7.arch1-1 2022-02-06 17:55:39 +00:00
Jan Alexander Steffens f481961a90 5.16.5.arch1-1 2022-02-01 23:40:25 +00:00
Jan Alexander Steffens a2f19696d0 5.16.4.arch1-1 2022-01-30 04:12:39 +00:00
Jan Alexander Steffens 31ad8e7bc0 5.16.3.arch1-1 2022-01-27 14:57:45 +00:00
Jan Alexander Steffens 05d7e11c00 5.16.2.arch1-1 2022-01-20 17:08:42 +00:00
Jan Alexander Steffens e891efc44c 5.16.1.arch1-1 2022-01-16 12:13:46 +00:00
Jan Alexander Steffens 6376eaf60e 5.16.arch1-1 2022-01-10 21:15:58 +00:00
Jan Alexander Steffens de5111d5bf 5.15.13.arch1-1 2022-01-05 17:11:18 +00:00
Jan Alexander Steffens 992dd34d40 5.15.12.arch1-1 2021-12-29 13:06:04 +00:00
Jan Alexander Steffens fbf05e9061 5.15.11.arch2-1 2021-12-22 17:37:01 +00:00
Jan Alexander Steffens 8e5f14c2b2 5.15.10.arch1-1 2021-12-17 12:37:20 +00:00
Jan Alexander Steffens 38f90fdbe5 5.15.9.arch1-1 2021-12-17 00:17:27 +00:00
Jan Alexander Steffens f6654f361c FS#69505: Replace MTD_RAM with MTD_MTDRAM
The latter is what was actually wanted.
2021-12-16 03:14:31 +00:00
Jan Alexander Steffens e3b6f785e9 5.15.8.arch1-1 2021-12-14 23:27:20 +00:00
Jan Alexander Steffens f631e8d68c 5.15.7.arch1-1 2021-12-08 17:33:10 +00:00
Jan Alexander Steffens 67bf0c6741 5.15.6.arch2-1 2021-12-02 17:13:38 +00:00
Jan Alexander Steffens 6fdf85f792 5.15.5.arch1-1 2021-11-25 22:53:04 +00:00
Jan Alexander Steffens 8d31a93b3a 5.15.4.arch1-1 2021-11-21 22:11:10 +00:00
Jan Alexander Steffens 90addb77b2 5.15.3.arch1-1 2021-11-18 22:55:52 +00:00
Jan Alexander Steffens 87b96ed160 5.15.2.arch1-1 2021-11-12 20:28:54 +00:00
Jan Alexander Steffens 741b99dce1 FS#72645: Disable SYSFB_SIMPLEFB 2021-11-12 20:28:52 +00:00
Jan Alexander Steffens 6f0619355f 5.15.1.arch1-2 2021-11-09 17:09:58 +00:00
Jan Alexander Steffens e55609718b FS#72658: Reenable built-in FB drivers 2021-11-09 17:09:57 +00:00
Jan Alexander Steffens eecca3f5e0 5.15.1.arch1-1 2021-11-07 01:10:47 +00:00
Jan Alexander Steffens 911177d3df Disable WERROR
Also leaks into external module builds.
2021-11-03 23:30:53 +00:00
Jan Alexander Steffens 78d0321a90 Set SYSFB_SIMPLEFB=y and SIMPLEDRM=y, disable legacy FB drivers 2021-11-03 23:30:52 +00:00
Jan Alexander Steffens 62812fc5b4 5.15.arch1-1 2021-11-03 23:30:51 +00:00
Jan Alexander Steffens f2086b3d9e 5.14.16.arch1-1 2021-11-02 22:57:45 +00:00
Jan Alexander Steffens 52b131218a 5.14.15.arch1-1 2021-10-28 02:16:58 +00:00
Jan Alexander Steffens 45c17981b1 5.14.14.arch1-1 2021-10-20 22:56:29 +00:00
Jan Alexander Steffens ff11721ddf 5.14.13.arch1-1 2021-10-17 13:22:17 +00:00
Jan Alexander Steffens 2072b4db95 5.14.12.arch1-1 2021-10-13 17:35:24 +00:00
Jan Alexander Steffens 6c1884d7e0 5.14.11.arch1-1 2021-10-10 08:07:16 +00:00
Jan Alexander Steffens 71f7795e0a Print config diff after make olddefconfig 2021-10-10 08:07:15 +00:00
Jan Alexander Steffens 4325d1b2ad 5.14.10.arch1-1 2021-10-07 20:32:54 +00:00
Jan Alexander Steffens 2ef0ab9184 Disable SND_INTEL_BYT_PREFER_SOF
As requested by Jelle.
2021-10-06 22:08:56 +00:00
Jan Alexander Steffens 08f8fd42c1 5.14.9.arch2-1 2021-10-01 19:36:17 +00:00
Jan Alexander Steffens 5b34349b55 5.14.9.arch1-1 2021-09-30 19:13:09 +00:00
Jan Alexander Steffens 595a15167b 5.14.8.arch1-1 2021-09-26 20:22:35 +00:00
Jan Alexander Steffens 045bfb719c FS#72195: Disable FB_HYPERV 2021-09-26 20:22:33 +00:00
Jan Alexander Steffens e614e5b7d1 5.14.7.arch1-1 2021-09-22 22:31:58 +00:00
Jan Alexander Steffens a9ffd8d727 5.14.6.arch1-1 2021-09-18 17:33:29 +00:00
Jan Alexander Steffens af7ee19944 5.14.5.arch1-1 2021-09-16 11:55:43 +00:00
Jan Alexander Steffens 6842071bce 5.14.4.arch2-1 2021-09-16 10:44:38 +00:00
Jan Alexander Steffens 6f0e13bf09 5.14.4.arch1-1 2021-09-15 22:24:27 +00:00
Jan Alexander Steffens 2cedf65a5a 5.14.3.arch1-1 2021-09-12 21:33:52 +00:00
Jan Alexander Steffens f8c67d6d68 5.14.2.arch1-2 2021-09-09 10:30:53 +00:00
Jan Alexander Steffens 25de7a333b FS#72045: Disable WATCHDOG_HRTIMER_PRETIMEOUT 2021-09-09 10:30:52 +00:00
Jan Alexander Steffens eecbf9bbe1 5.14.2.arch1-1 2021-09-08 23:54:10 +00:00
Jan Alexander Steffens ca05999be5 Enable EDAC_IGEN6
This was overlooked.
2021-09-03 21:24:30 +00:00
Jan Alexander Steffens 18427d86c6 5.14.1.arch1-1 2021-09-03 21:04:16 +00:00
Jan Alexander Steffens d73ac85acb 5.13.13.arch1-1 2021-08-26 19:48:22 +00:00
Jan Alexander Steffens 738226335f 5.13.12.arch1-1 2021-08-18 21:30:22 +00:00
Jan Alexander Steffens c21ba89cc1 Set KFENCE_SAMPLE_INTERVAL back to 100
As requested by Levente. The power issues should be solved by now.
2021-08-18 21:30:21 +00:00
Jan Alexander Steffens fb8eb1c560 Enable RANDOMIZE_KSTACK_OFFSET_DEFAULT
Additional hardening at a minimal cost, as requested by Levente.
2021-08-18 21:30:17 +00:00
Jan Alexander Steffens 2552e0b041 5.13.10.arch1-1 2021-08-12 22:36:23 +00:00
Jan Alexander Steffens 5e6049790e 5.13.9.arch1-1 2021-08-08 12:14:43 +00:00
Jan Alexander Steffens 5e111e91cc 5.13.8.arch1-1 2021-08-04 18:46:16 +00:00
Jan Alexander Steffens 82e02793cb 5.13.7.arch1-1 2021-07-31 23:09:11 +00:00
Jan Alexander Steffens d352d2e4ff 5.13.6.arch1-1 2021-07-29 00:51:39 +00:00
Jan Alexander Steffens 86779bcfea 5.13.5.arch1-1 2021-07-26 01:55:01 +00:00
Jan Alexander Steffens 11f06f43c4 5.13.4.arch2-1 2021-07-22 21:18:45 +00:00
David Runge 2589876818 Upgrade to 5.13.4.arch1.
PKGBUILD:
Add C7E7849466FE2358343588377258734B41C31549 as additional recognized valid PGP
key, as heftig might not be able to prepare releases and package for a while.

config:
Consolidate with defaults for 5.13.4 based on previous config.
Update CONFIG_LSM to order landlock before lockdown and re-add bpf, as the
issue discussed in https://bugs.archlinux.org/task/71270 seems to have been a
user-error (using obsolete kernel parameters).
2021-07-20 17:34:49 +00:00
Jan Alexander Steffens fd38ec001c 5.13.1.arch1-1 2021-07-10 00:23:52 +00:00
Jan Alexander Steffens c156c63575 5.12.15.arch1-1 2021-07-08 06:51:34 +00:00
Jan Alexander Steffens 4aa90295a0 5.12.14.arch1-1 2021-07-01 07:57:45 +00:00
Jan Alexander Steffens 5b763178e4 FS#71392: Install IIO hid-sensors header 2021-07-01 07:57:43 +00:00
Jan Alexander Steffens e8d31cb4c2 5.12.13.arch1-2 2021-06-25 23:47:17 +00:00
Jan Alexander Steffens 65eddc1dfd FS#71325: Enable SPI_INTEL_SPI again 2021-06-25 23:47:16 +00:00
Jan Alexander Steffens 74cfa2eb0a Revert "Use our git"
This reverts commit 57840eab683583e89ba506800c08ee752937c586.

We're shutting down git.archlinux.org and don't want to move the linux
repo to gitlab due to its size.
2021-06-25 23:47:14 +00:00
Jan Alexander Steffens 9bff7b52e3 5.12.13.arch1-1 2021-06-23 17:14:01 +00:00
Jan Alexander Steffens 38bd62e40b FS#71296: Enable DEBUG_LIST 2021-06-20 19:20:20 +00:00
Jan Alexander Steffens 7403514fbe 5.12.12.arch1-1 2021-06-18 22:59:23 +00:00
Jan Alexander Steffens e7d5c4d89c 5.12.11.arch1-1 2021-06-16 22:13:35 +00:00
Jan Alexander Steffens d7bf404c33 FS#71270: Don't enable "bpf" LSM by default
It provides all possible hooks, which makes it harder to properly use
major LSMs. Using security= to enable a major LSM puts it at the end of
the list. Some functions (like security_getprocattr) only use the first
matching hook, thus prefer bpf.
2021-06-16 22:13:34 +00:00
Jan Alexander Steffens 3f21513a71 5.12.10.arch1-1 2021-06-10 17:16:45 +00:00
Jan Alexander Steffens 9fe32edb60 5.12.9.arch1-1 2021-06-03 12:11:43 +00:00
Jan Alexander Steffens b7f14e1a69 5.12.8.arch1-1 2021-05-28 21:05:54 +00:00
Jan Alexander Steffens 99703861e1 FS#69505: Enable MTD_ROM 2021-05-27 19:39:55 +00:00
Jan Alexander Steffens b72d63df03 5.12.7.arch1-1 2021-05-26 22:45:28 +00:00
Jan Alexander Steffens 1da8e74711 5.12.6.arch1-1 2021-05-23 01:36:16 +00:00
Jan Alexander Steffens ea7ccabcad 5.12.5.arch1-1 2021-05-19 11:46:27 +00:00
Jan Alexander Steffens 3c493d93c4 5.12.4.arch2-1 2021-05-18 22:29:32 +00:00
Jan Alexander Steffens 04cd0126a3 5.12.4.arch1-2 2021-05-15 21:38:30 +00:00
Jan Alexander Steffens 2a8704f5e1 Set KFENCE_SAMPLE_INTERVAL to 0
Turns off KFENCE by default, as requested by Levente. There are power
use issues, see
https://lore.kernel.org/linux-mm/20210421105132.3965998-1-elver@google.com/
2021-05-15 21:38:29 +00:00
Jan Alexander Steffens 1646eced3b Enable DEBUG_INFO_DWARF4
Required for BTF to work with GCC 11.
2021-05-15 21:38:27 +00:00
Jan Alexander Steffens acb9384891 5.12.4.arch1-1 2021-05-14 14:20:31 +00:00
Jan Alexander Steffens 24c6f0d688 5.12.3.arch2-1 2021-05-13 20:01:56 +00:00
Jan Alexander Steffens 4b8cbaa097 5.12.3.arch1-2 2021-05-13 00:02:40 +00:00