Tim Steinbach
09cc8872ef
Merge pull request #35043 from NeQuissimus/cfs_bandwidth
...
linux-common: Add CFS_BANDWIDTH
2018-02-21 23:18:44 +00:00
Frederik Rietdijk
b5391b2451
Merge remote-tracking branch 'upstream/master' into HEAD
2018-02-21 20:43:10 +01:00
Austin Seipp
2fa6cd257d
perf: separateDebugInfo = true
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-02-20 22:17:24 -06:00
Austin Seipp
cbf6fa3cc7
perf: fix some hardcoded paths with newer, more exciting hardcoded NixOS paths!
...
In the long run it looks like we may actually need a small set of patches to
Perf if that's more maintainable, in which case we would much rather check
NIX_DEBUG_INFO_DIRS.
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-02-20 22:17:12 -06:00
Vladimír Čunát
1d15dadbec
Merge branch 'master' into staging
...
Larger rebuilds from master.
2018-02-20 20:33:40 +01:00
Shea Levy
39ff498418
kernelPatches: Add pointer to ml threads for riscv patches.
2018-02-20 11:26:44 -05:00
Shea Levy
f8b5b93b88
linux_riscv: Add patches for initrd support
2018-02-20 09:18:17 -05:00
Austin Seipp
f0fe7bae99
linuxPackages.perf: fix tips.txt lookup, few extra deps
...
Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-02-20 07:00:21 -06:00
Shea Levy
bd7d5b3657
linux: Don't try to install firmware on newer kernels.
...
This was disabled in torvalds/linux@5620a0d1aa
2018-02-19 17:08:24 -05:00
Shea Levy
7ce1f0b8ae
linuxManualConfig: Fix build on non-modular kernels
2018-02-19 15:16:29 -05:00
Shea Levy
6173f2f945
linux_riscv: Add 4.16-rc1.
...
Fixes #35148 .
2018-02-19 12:14:22 -05:00
Shea Levy
c7439b435c
Merge branch 'kernel-gcc7-cross' of git://github.com/lopsided98/nixpkgs
2018-02-18 18:18:00 -05:00
Shea Levy
32ce7012f0
Merge branch 'master' into gcc-7
2018-02-18 16:27:22 -05:00
Tim Steinbach
246359e855
linux: 4.15.3 -> 4.15.4
2018-02-18 09:55:54 -05:00
Tim Steinbach
9d55ab2c4b
linux: 4.14.19 -> 4.14.20
2018-02-18 09:55:21 -05:00
Tim Steinbach
e3dd76f76c
linux: 4.9.81 -> 4.9.82
2018-02-18 09:54:56 -05:00
Tim Steinbach
07e7a67f7b
linux: 4.4.115 -> 4.4.116
2018-02-18 09:54:31 -05:00
Tim Steinbach
734f40a0a5
linux-copperhead: 4.15.3.a -> 4.15.4.a
2018-02-18 09:53:59 -05:00
Ben Wolsieffer
643ba8254d
kernel: fix cross compilation with gcc 7
2018-02-17 22:09:56 -05:00
Vladimír Čunát
7d19d7ee18
Revert "linux-*: build with gcc7, but allow overriding it"
...
This reverts commit ae040525d8
.
gcc7 is the default now.
2018-02-17 16:30:26 +01:00
Tim Steinbach
bbbd9de9d7
linux-common: Add CFS_BANDWIDTH
...
The option is needed to limit CPU usage of processes.
It seems to have no negative impact if left unused.
See https://lwn.net/Articles/428230/
2018-02-16 10:00:08 -05:00
Tuomas Tynkkynen
b98a3f247a
linux_testing: 4.15-rc9 -> 4.16-rc1
2018-02-16 01:13:30 +02:00
Tuomas Tynkkynen
64fa0d5b97
kernel: Add deps for building 4.16
2018-02-16 01:13:30 +02:00
Tuomas Tynkkynen
7a7e8a8004
kernel config: Disable USB_SERIAL_* on 4.16 and above
...
They got removed:
commit 003948c54e5b5034a9bbb4923336f5aba125eae6
Author: Benjamin Gilbert <benjamin.gilbert@coreos.com>
Date: Tue Jan 23 18:06:30 2018 -0800
USB: serial: keyspan: Drop firmware Kconfig options
The USB_SERIAL_KEYSPAN_* firmware options no longer do anything.
2018-02-16 01:13:30 +02:00
Tuomas Tynkkynen
db38e0c7e7
kernel config: Cleanup self-test module disabling
...
No reason to have complex version-dependent conditionals when the
question mark already handles this just as well.
Also add RUNTIME_TESTING_MENU setting which nicely disables all of this
on >= 4.16.
2018-02-16 01:13:30 +02:00
Herwig Hochleitner
3027b80f1d
linuxPackages.kernel: add feature.debug flag for enabling DEBUG_INFO
2018-02-15 09:10:32 +01:00
Herwig Hochleitner
66080ae4d8
programs.criu: add nixos option for installing criu + kernel flags
2018-02-15 09:10:32 +01:00
Tim Steinbach
45e9b7b1c1
linux: 4.9.80 -> 4.9.81
2018-02-13 12:44:43 -05:00
Tim Steinbach
3b9f6874d8
linux: 4.14.18 -> 4.14.19
2018-02-13 12:40:34 -05:00
Vladimír Čunát
5e62091c45
Merge #34882 : linux: use absolute paths for compilers
...
This is needed to really build linux with gcc7 after ae040525d
.
2018-02-12 22:20:31 +01:00
Vladimír Čunát
3d24c5eecc
linux: use absolute paths for compilers
...
HOSTCC was taking precedence before stdenv's normal CC,
at least in case of non-cross build.
2018-02-12 14:00:51 -05:00
Tim Steinbach
8a60770f6b
linux-copperhead: 4.15.2.a -> 4.15.3.a
2018-02-12 07:56:21 -05:00
Tim Steinbach
71a2ffaa63
linux: 4.15.2 -> 4.15.3
2018-02-12 07:53:22 -05:00
Vladimír Čunát
169216fe14
linuxPackages: build by kernel's stdenv
2018-02-11 18:55:21 +01:00
Vladimír Čunát
ae040525d8
linux-*: build with gcc7, but allow overriding it
...
I expect we will revert this after general upgrade to gcc7.
See https://github.com/NixOS/nixpkgs/issues/34383
2018-02-11 18:55:18 +01:00
Tuomas Tynkkynen
6d8c1fe01c
linux: Use concatStringsSep
2018-02-11 00:17:47 +02:00
Jörg Thalheim
3b8bb02f68
Merge pull request #34792 from dywedir/bcachefs
...
linux_testing_bcachefs: 4.11.2017.08.23 -> 4.15.2018.02.09
2018-02-10 08:20:35 +00:00
dywedir
bad837fd3b
linux_testing_bcachefs: 4.11.2017.08.23 -> 4.15.2018.02.09
2018-02-10 00:41:04 +02:00
Jan Malakhovski
3a2ee6e5c3
linuxPackages: introduce hardenedLinuxPackagesFor
and cleanup some expressions using it
2018-02-09 19:50:04 +00:00
Michael Raskin
a600b621c8
linux_4_15: fix a partial version downgrade on staging merge
2018-02-08 12:43:08 +01:00
Frederik Rietdijk
50a9d51a09
Merge commit '30d031b5d8d05422586043c3f105f4d9110e4f59' into HEAD
2018-02-08 12:14:07 +01:00
Tim Steinbach
c46a833e6c
linux-copperhead: 4.15.1.a -> 4.15.2.a
2018-02-07 19:47:20 -05:00
Tim Steinbach
9f3d57a31f
linux: 4.15.1 -> 4.15.2
2018-02-07 19:36:35 -05:00
Tim Steinbach
0b43d5a9cf
linux: 4.14.17 -> 4.14.18
2018-02-07 19:36:21 -05:00
Tuomas Tynkkynen
4c6c919a31
Merge remote-tracking branch 'upstream/master' into HEAD
...
Conflicts:
pkgs/os-specific/linux/kernel/generic.nix
2018-02-07 03:41:24 +02:00
Tuomas Tynkkynen
685ceb999e
kernel: Fix missing config options from platform
...
common-config.nix has:
${kernelPlatform.kernelExtraConfig or ""}
and indeed kernelExtraConfig is in hostPlatform.platform, and not in
hostPlatform. (Ugh.).
2018-02-06 22:13:57 +02:00
Matthieu Coudron
f620b1b693
kernel: buildLinux replaces import ./generic.nix
...
- defined buildLinux as generic.nix instead of manual-config.nix. This
makes kernel derivations a tad more similar to your typical derivations.
- moved $buildRoot to within the source folder, this way it doesn't have to be created before the unpackPhase
and make it easier to work on kernel source without running the unpackPhase
2018-02-07 10:07:13 +09:00
Tim Steinbach
8c280d3ad5
linux: 4.15 -> 4.15.1
2018-02-03 20:38:25 -05:00
Tim Steinbach
4069faad7f
linux-copperhead: 4.15.a -> 4.15.1.a
2018-02-03 20:36:14 -05:00
Tim Steinbach
fcbb7da942
linux: 4.4.114 -> 4.4.115
2018-02-03 20:31:52 -05:00
Tim Steinbach
e5ffae3966
linux: 4.14.16 -> 4.14.17
2018-02-03 20:29:23 -05:00
Tim Steinbach
d6d4ef6580
linux: 4.9.79 -> 4.9.80
2018-02-03 20:27:04 -05:00
Tim Steinbach
6aa13b6b1d
linux: 4.9.78 -> 4.9.79
2018-01-31 09:06:30 -05:00
Tim Steinbach
26e06c9a92
linux: 4.4.113 -> 4.4.114
2018-01-31 09:06:17 -05:00
Tim Steinbach
27f5262cf2
linux: 4.14.15 -> 4.14.16
2018-01-31 09:05:54 -05:00
Tim Steinbach
61043ad4d1
linux: Add 4.15
2018-01-29 11:52:50 -05:00
Tim Steinbach
da26e92078
linux-copperhead: 4.14.15.a -> 4.15.a
2018-01-29 11:52:50 -05:00
Tim Steinbach
3391266ee7
linux-copperhead: 4.14.14.a -> 4.14.15.a
2018-01-25 09:12:03 -05:00
Tuomas Tynkkynen
d9aebebaf5
Revert "perf: apply patch to fix build of 4.9"
...
This reverts commit 44dc31bad1
.
The patch has been applied in 4.9.78, so no need to have this in
nixpkgs anymore.
2018-01-23 23:17:24 +02:00
Tuomas Tynkkynen
acf5b8e662
kernel: 4.9.77 -> 4.9.78
2018-01-23 23:17:24 +02:00
Tuomas Tynkkynen
4276c0d898
kernel: 4.4.112 -> 4.4.113
2018-01-23 23:17:24 +02:00
Tuomas Tynkkynen
1481937af2
kernel: 4.14.14 -> 4.14.15
2018-01-23 23:17:24 +02:00
Tuomas Tynkkynen
a2b8264377
linux_testing: 4.15-rc8 -> 4.15-rc9
2018-01-22 10:44:50 +02:00
Ben Wolsieffer
94276da9e9
perf: inherit makeFlags from kernel
2018-01-21 13:54:39 +02:00
Ben Wolsieffer
44dc31bad1
perf: apply patch to fix build of 4.9
2018-01-21 13:54:39 +02:00
Will Dietz
4ca9b43f12
perf: fix cross evaluation
2018-01-18 10:47:40 -06:00
Will Dietz
fc4535b6e8
Revert "perf: inherit makeFlags from kernel"
...
https://github.com/NixOS/nixpkgs/issues/34013
This reverts commit 92083c3f40
.
2018-01-18 10:47:26 -06:00
Drew Hess
83a85b60ad
linux_beagleboard: 4.9.61-ti-r76 -> 4.14.12-ti-r23
2018-01-18 17:04:47 +02:00
Tim Steinbach
696be7a0b0
linux-copperhead: 4.14.13.a -> 4.14.14.a
2018-01-17 13:30:16 -05:00
Tim Steinbach
791d5b3cc0
linux: 4.4.111 -> 4.4.112
2018-01-17 08:57:19 -05:00
Tim Steinbach
c460e268bf
linux: 4.9.76 -> 4.9.77
2018-01-17 08:57:19 -05:00
Tim Steinbach
94d03b3b21
linux: 4.14.13 -> 4.14.14
2018-01-17 08:57:19 -05:00
Ben Wolsieffer
7bb3a044be
kernel: fix dependencies
2018-01-15 22:28:45 -05:00
Ben Wolsieffer
80f6b8e2ba
kernel: revert seemingly incorrect change to extraMeta merging
2018-01-15 12:55:24 -05:00
Ben Wolsieffer
92083c3f40
perf: inherit makeFlags from kernel
2018-01-15 12:48:56 -05:00
Ben Wolsieffer
285181a1db
kernel: remove leftover remnants of old cross compiling system
2018-01-15 12:48:51 -05:00
Ben Wolsieffer
a09709bf2a
kernel: don't force ignoreConfigErrors when cross compiling, only set the
...
default
2018-01-15 12:39:45 -05:00
Ben Gamari
b4b04dd29f
kernel: Fix cross-compilation
2018-01-15 11:55:23 -05:00
Ben Gamari
50e2bb12f6
kernel: Use build kmod
2018-01-15 11:55:23 -05:00
Ben Gamari
7a9b6ac39a
kernel: Enable cross compiling
2018-01-15 11:55:06 -05:00
Tuomas Tynkkynen
6e84522610
linux_testing: 4.15-rc7 -> 4.15-rc8
2018-01-15 12:14:39 +02:00
Vladimír Čunát
67e8392383
Merge #33057 : stdenv meta checks: make them lazy
...
Closes #22277 - it's superseded; I have some WIP on evaluation
performance, but best do that in a separate PR/thread.
2018-01-14 21:41:31 +01:00
Jan Malakhovski
85cd22cf7d
treewide: replace addPassthru
2018-01-14 19:53:57 +00:00
Jan Malakhovski
8606dd8556
lib: change the order of arguments of addPassthru
2018-01-14 13:24:30 +00:00
Tim Steinbach
eb0ecd7eba
linux-copperhead: 4.14.12.a -> 4.14.13.a
2018-01-11 08:30:19 -05:00
Andreas Rammhold
74c9d1696f
linux_4_9: 4.9.75 -> 4.9.76
2018-01-10 13:50:49 +01:00
Andreas Rammhold
e94dab0ca3
linux_4_4: 4.4.110 -> 4.4.111
2018-01-10 13:50:49 +01:00
Andreas Rammhold
cf8021e73a
linux_4_14: 4.14.12 -> 4.14.13
...
In terms of spectre/meltdown this version also supports loading of amd
fam17h firmware.
2018-01-10 13:50:45 +01:00
Andreas Rammhold
c864b07d09
linux_testing: 4.15-rc4 -> 4.15-rc7
2018-01-08 15:05:24 +01:00
Eelco Dolstra
424aa1a681
Merge pull request #33505 from peterhoeg/f/wbt
...
kernel: enable writeback throttling to avoid IO queues filling up
2018-01-08 11:23:00 +01:00
Tuomas Tynkkynen
dc84ce085f
linux_samus_4_12: Doesn't build on aarch64
...
https://hydra.nixos.org/build/67137766
2018-01-07 15:26:20 +02:00
Andreas Rammhold
e5715d92a7
linux_hardened_copperhead: 4.14.11a -> 4.14.12a
2018-01-06 18:40:35 +01:00
Peter Hoeg
f674cb5ecc
kernel: enable writeback throttling to avoid IO queues filling up
2018-01-06 11:20:48 +08:00
Tim Steinbach
6960541eb8
linux: 4.4.109 -> 4.4.110
2018-01-05 10:35:10 -05:00
Tim Steinbach
b5ce60228d
linux: 4.14.11 -> 4.14.12
2018-01-05 10:35:10 -05:00
Eelco Dolstra
19eb5d6c27
linux: 4.9.74 -> 4.9.75
2018-01-05 16:28:08 +01:00
Franz Pletz
ccb0ba56ef
linux_hardended: enable gcc latent entropy plugin
2018-01-04 05:02:39 +01:00
Tim Steinbach
b720e9c23a
linux-copperhead: 4.14.10.a -> 4.14.11.a
2018-01-02 19:38:01 -05:00
Tim Steinbach
1e129a3f99
linux: 4.14.10 -> 4.14.11
2018-01-02 19:31:31 -05:00
Tim Steinbach
56f91dcb7b
linux: 4.9.73 -> 4.9.74
2018-01-02 19:31:14 -05:00
Tim Steinbach
1eb53a3830
linux: 4.4.108 -> 4.4.109
2018-01-02 19:30:58 -05:00
Tim Steinbach
469e1e5dcb
linux: 4.14.9 -> 4.14.10
2017-12-30 18:06:01 -05:00
Tim Steinbach
ed39ff393d
linux: 4.9.72 -> 4.9.73
2017-12-30 18:06:01 -05:00
Tim Steinbach
02bc3f4e3a
linux-copperhead: 4.14.9.b -> 4.14.10.a
2017-12-30 18:06:01 -05:00
David Guibert
1e77d0b975
kernel 4.14 require libelf to compile modules.
...
[...]
make modules -C /nix/store/h1vzl6bq4wif3m8dd1bw2p3fv4shjg3n-linux-4.14.9-dev/lib/modules/4.14.9/build EXTRA_CFLAGS=-Werror-implicit-function-declaration M=/tmp/nix-build-spl-kernel-2017-11-16-4.14.9.drv-0/source/build
/nix/store/h1vzl6bq4wif3m8dd1bw2p3fv4shjg3n-linux-4.14.9-dev/lib/modules/4.14.9/source/Makefile:939: *** "Cannot generate ORC metadata for CONFIG_UNWINDER_ORC=y, please install libelf-dev, libelf-devel or elfutils-libelf-devel". Stop.
This patch introduces kernel.moduleBuildDependencies to avoid the logic "stdenv.lib.optional (stdenv.lib.versionAtLeast kernel.version "4.14") libelf" in multiple places.
[dezgeg did some minor tweaks on top]
2017-12-29 23:08:17 +02:00
Tim Steinbach
5128f43b28
linux-copperhead: 4.14.8.b -> 4.14.9.a
2017-12-27 21:40:39 -05:00
Tim Steinbach
15b2a76399
linux: 4.4.107 -> 4.4.108
2017-12-27 21:31:14 -05:00
Vladimír Čunát
b0047e7782
linux: 4.9.71 -> 4.9.72 (security)
...
Fixes CVE-2017-16996, just as the preceding 4.14 update.
2017-12-26 16:42:34 +01:00
Andreas Rammhold
63e3eae02f
linux: 4.14.8 -> 4.14.9
...
Besides fixes for the recent BPF issues there is also a patch included
that fixes booting on aarch64 (e.g. RPi3) ;-)
2017-12-26 15:24:49 +01:00
Tim Steinbach
cbf0b680a5
linux-copperhead: 4.14.7.a -> 4.14.8.b
2017-12-20 13:22:15 -05:00
Tim Steinbach
26fb53a325
linux: 4.4.106 -> 4.4.107
2017-12-20 12:27:26 -05:00
Tim Steinbach
a4c93273e2
linux: 4.14.7 -> 4.14.8
2017-12-20 12:27:26 -05:00
Tim Steinbach
f95ba8ee5e
linux: 4.9.70 -> 4.9.71
2017-12-20 12:27:26 -05:00
Tim Steinbach
6e7944b55e
linux-copperhead: 4.14.6.a -> 4.14.7.a
2017-12-18 13:56:21 -05:00
Tim Steinbach
cbd337b2d0
linux: 4.14.6 -> 4.14.7
2017-12-18 06:57:49 -05:00
aszlig
5c83aed32d
linux-testing: 4.15-rc3 -> 4.15-rc4
...
Built successfully on x86_64-linux.
I've verified the contents of the tarball by comparing its contents
against the tag of my local checkout. Furthermore, I've checked the GPG
signature of the tag.
Signed-off-by: aszlig <aszlig@nix.build>
2017-12-18 05:54:47 +01:00
Tim Steinbach
a192ac5959
linux-copperhead: Fix hash
2017-12-16 12:20:24 -05:00
Tim Steinbach
5850e74eee
linux: 4.9.69 -> 4.9.70
2017-12-16 12:11:19 -05:00
Tim Steinbach
9846d74cd2
linux: 4.4.105 -> 4.4.106
2017-12-16 12:11:04 -05:00
Tim Steinbach
849074e5cd
linux-copperhead: 4.14.5.a -> 4.14.6.a
2017-12-15 12:39:20 -05:00
Tim Steinbach
66e36666d6
linux: 4.14.5 -> 4.14.6
2017-12-14 08:18:42 -05:00
Tim Steinbach
e6676bd66d
linux: 4.9.68 -> 4.9.69
2017-12-14 08:18:06 -05:00
Tim Steinbach
41371512e2
linux-copperhead: 4.14.4.a -> 4.14.5.a
2017-12-11 13:56:04 -05:00
aszlig
05f159b624
linux-testing: 4.15-rc2 -> 4.15-rc3
...
Built successfully on x86_64-linux.
I've verified the contents of the tarball by comparing its contents
against the tag of my local checkout. Furthermore, I've checked the GPG
signature of the tag.
Signed-off-by: aszlig <aszlig@nix.build>
2017-12-11 10:36:51 +01:00
Tim Steinbach
3bb52f9259
linux: 4.14.4 -> 4.14.5
2017-12-10 13:13:48 -05:00
Tim Steinbach
bd6424010d
linux: 4.9.67 -> 4.9.68
2017-12-10 13:10:45 -05:00
Tim Steinbach
48b0e5ddbc
linux: 4.4.104 -> 4.4.105
2017-12-09 14:58:43 -05:00
Tim Steinbach
146355628b
linux-copperhead: 4.14.3.a -> 4.14.4.a
2017-12-09 14:58:43 -05:00
Tim Steinbach
93e68fd249
linux: 4.14.3 -> 4.14.4
2017-12-05 08:06:47 -05:00
Tim Steinbach
c0b09e9f6c
linux: 4.9.66 -> 4.9.67
2017-12-05 08:06:47 -05:00
Tim Steinbach
06edc9c16f
linux: 4.4.103 -> 4.4.104
2017-12-05 08:06:47 -05:00
Vladimír Čunát
13797ff522
linux-4.13: mark as insecure (+required generic changes)
...
extraMeta was being fed as passthru without being processed by stdenv,
so without those changes, adding the security attribute would be useless.
2017-12-04 09:33:39 +01:00
aszlig
d747c27387
linux-testing: 4.15-rc1 -> 4.15-rc2
...
Built successfully on x86_64-linux.
I've verified the contents of the tarball by comparing its contents
against the tag of my local checkout. Furthermore, I've checked the GPG
signature of the tag.
Signed-off-by: aszlig <aszlig@nix.build>
2017-12-04 05:24:37 +01:00
adisbladis
74857c9dce
Revert "linux_4_13: Remove, no longer supported."
...
This reverts commit b39ab30ba7
.
There are some show stopper issues in the 4.14 kernel that are still
not resolved.
https://github.com/NixOS/nixpkgs/issues/31640
2017-12-04 09:59:11 +08:00
Tuomas Tynkkynen
b39ab30ba7
linux_4_13: Remove, no longer supported.
2017-12-03 23:20:08 +02:00
Tim Steinbach
4e7deb7100
linux-copperhead: 4.14.2.a -> 4.14.3.a
2017-12-02 14:01:14 -05:00
Tim Steinbach
a57a32e07c
linux: 4.4.102 -> 4.4.103
2017-12-01 10:07:28 -05:00
Tim Steinbach
777f49bfff
linux: 4.9.65 -> 4.9.66
2017-12-01 10:04:09 -05:00
Tim Steinbach
2863022480
linux: 4.14.2 -> 4.14.3
2017-12-01 10:00:48 -05:00
Vladimír Čunát
addd20e6f9
Merge branch 'master' into staging
2017-11-28 18:19:34 +01:00
Philipp Steinpass
e8fcced76e
linux-testing: 4.14-rc8 -> 4.15-rc1
...
Closes #32137
2017-11-28 15:19:23 +02:00
Tuomas Tynkkynen
acbaefa615
Revert "linux-testing: 4.14-rc8 -> 4.15-rc1"
...
This reverts commit 9335f1dda2
.
Doesn't compile, a working version is at #32137 .
2017-11-28 15:18:49 +02:00
Tim Steinbach
9335f1dda2
linux-testing: 4.14-rc8 -> 4.15-rc1
2017-11-27 16:34:06 -05:00
Vladimír Čunát
6705f30e2c
Merge branch 'master' into staging
2017-11-27 15:09:53 +01:00
John Ericson
e755a8a27d
treewide: Use targetPrefix
instead of prefix
for platform name prefixes
...
Certain tools, e.g. compilers, are customarily prefixed with the name of
their target platform so that multiple builds can be used at once
without clobbering each other on the PATH. I was using identifiers named
`prefix` for this purpose, but that conflicts with the standard use of
`prefix` to mean the directory where something is installed. To avoid
conflict and confusion, I renamed those to `targetPrefix`.
2017-11-27 03:15:50 -05:00
Tim Steinbach
3fc7f924af
linux-copperhead: 4.14.1.a -> 4.14.2.a
2017-11-26 12:07:04 -05:00
Tim Steinbach
c3ce21dd98
linux: 4.14.1 -> 4.14.2
2017-11-24 08:28:12 -05:00
Tim Steinbach
4f7fb7125a
linux: 4.13.15 -> 4.13.16
2017-11-24 08:28:12 -05:00
Tim Steinbach
3774309986
linux: 4.9.64 -> 4.9.65
2017-11-24 08:28:12 -05:00
Tim Steinbach
9d86ddc685
linux: 4.4.100 -> 4.4.102
2017-11-24 08:28:12 -05:00
Tim Steinbach
843ee55b66
linux-copperhead: 4.13.14.a -> 4.14.1.a
2017-11-22 08:03:56 -05:00
Matthieu Coudron
28f9262092
kernel: improve modDirVersion error message
...
Now prints the current modDirVersion. Close #31887 .
2017-11-21 20:42:41 +01:00
Raymond Gauthier
7cdd12e4e9
kernel config: Enable MEDIA_CONTROLLER
...
With this disabled, cameras would not get a `/dev/mediaX` entry matching
the `/dev/videoX` which broke any application (e.g: `uvcdynctrl -l`,
`media-ctl -p`) depending on this interface.
2017-11-21 16:33:31 +02:00
Tim Steinbach
3300ec2b92
linux: 4.4.99 -> 4.4.100
2017-11-21 08:08:40 -05:00
Tim Steinbach
03a3ab5db1
linux: 4.9.63 -> 4.9.64
2017-11-21 08:06:47 -05:00
Tim Steinbach
e3877445aa
linux: 4.14 -> 4.14.1
2017-11-21 08:04:26 -05:00
Tim Steinbach
332ac0bdec
linux: 4.13.14 -> 4.13.15
2017-11-21 08:02:12 -05:00
Tim Steinbach
58cc833df4
linux-copperhead: 4.13.13.a -> 4.13.14.a
2017-11-20 11:44:03 -05:00
Tim Steinbach
170f5c7543
linux-beagleboard: 4.9.59-r73 -> 4.9.61-r76
2017-11-18 17:33:40 -05:00
Tim Steinbach
ac470a67f8
linux: 4.4.98 -> 4.4.99
2017-11-18 17:19:50 -05:00
Tim Steinbach
c6f1290250
linux: 4.9.62 -> 4.9.63
2017-11-18 17:16:14 -05:00
Tim Steinbach
790f096a45
linux: 4.13.13 -> 4.13.14
2017-11-18 17:12:18 -05:00
Tuomas Tynkkynen
eb85761137
kernel: Fix out-of-tree modules on aarch64
...
https://hydra.nixos.org/build/62813493
2017-11-17 17:06:52 +02:00
Tim Steinbach
55851579d9
linux-copperhead: 4.13.12.a -> 4.13.13.a
2017-11-16 13:58:47 -05:00
Tim Steinbach
8b3293d947
linux: 4.4.97 -> 4.4.98
2017-11-15 16:44:20 -05:00
Tim Steinbach
ff16004273
linux: 4.9.61 -> 4.9.62
2017-11-15 16:44:20 -05:00
Joachim Fasting
870c86d0ee
linux_hardened: structleak covers structs passed by address
2017-11-15 22:10:50 +01:00
Joachim Fasting
8ecae36963
linux_hardened: enable slab freelist hardening
2017-11-15 22:10:44 +01:00
Tim Steinbach
bd9b124f2a
linux: 4.13.12 -> 4.13.13
2017-11-15 07:32:24 -05:00
Florian Klink
f919c7faec
linux_4_14: fix iwlwifi fw reset
...
Currently, moving to kernel_4_14 breaks at least Intel Wireless 8260 and
8265 cards due to a API change in the firmware, which is not yet honored
in the driver.
2017-11-15 11:30:24 +00:00
Tim Steinbach
53730c5a92
linux: Add 4.14
2017-11-13 08:34:36 -05:00
Matthieu Coudron
38737386d5
linux_mptcp: makes linux_mptcp.override works
...
I needed to override some parameters because of an error I had:
"Error: modDirVersion specified in the Nix expression is wrong, it should be: 4.9.60+"
but the following override would not be taken into account
pkg.override ({
modDirVersion="4.9.60+";
src=pkgs.lib.cleanSource /home/teto/mptcp;
})
because the override would be overriden by the nixpkgs parameters
because of concatenation order:
https://nixos.org/nix/manual/#sec-language-operators
2017-11-13 11:19:26 +01:00
Drew Hess
67ba83a934
kernel: add beagleboard.org kernel
...
And update the existing platform variant to use it
2017-11-09 18:28:14 +02:00
Tim Steinbach
4cb8c5dc3c
linux-copperhead: 4.13.11.a -> 4.13.12.a
2017-11-08 14:34:31 -05:00
Tim Steinbach
087d1e8d36
linux: 4.13.11 -> 4.13.12
2017-11-08 14:34:31 -05:00
Tim Steinbach
db1e2444a5
linux: 4.9.60 -> 4.9.61
2017-11-08 14:34:31 -05:00
Tim Steinbach
bd4b9062ea
linux: 4.4.96 -> 4.4.97
2017-11-08 14:34:31 -05:00
makefu
292f60504c
linux.kernel: enable build of stk1160 modules
2017-11-08 12:41:54 +02:00
Tuomas Tynkkynen
bf585f2881
linux_rpi: 1.20170811 -> 1.20171029
2017-11-06 20:49:48 +02:00
Tim Steinbach
30f6d630f1
linux: 4.14.0-rc7 -> 4.14.0-rc8
2017-11-05 16:47:03 -05:00
Tuomas Tynkkynen
0d9f2f0bb4
platforms.nix: Clean up more 'uboot' legacy
...
For a while now, the only thing the 'uboot' attribute does is to tell
whether to add ubootTools to kernel/initrd builds. That can be
determined with platform.kernelTarget == "uImage" just as well.
2017-11-05 17:06:59 +02:00
Franz Pletz
b032b3544f
linux_mptcp: 0.92.1 -> 0.93
2017-11-05 14:56:06 +01:00
Tuomas Tynkkynen
b50693d16c
kernel, initrd: Remove legacy ubootChooser
2017-11-05 15:11:12 +02:00
Tim Steinbach
449a053152
linux-copperhead: 4.13.10.a -> 4.13.11.a
2017-11-02 19:54:31 -04:00
Matthieu Coudron
7dce131b86
kernelmptcp: 0.91.3 -> 0.92.1
2017-11-02 13:14:57 +01:00
Franz Pletz
68b5ec06b9
linux: 4.9.59 -> 4.9.60
2017-11-02 11:28:40 +01:00
Franz Pletz
6021ca25db
linux: 4.4.95 -> 4.4.96
2017-11-02 11:28:27 +01:00
Franz Pletz
c37c896ee0
linux: 4.13.10 -> 4.13.11
2017-11-02 11:28:14 +01:00
Franz Pletz
0a5ecde808
linux: 4.4.80 -> 4.4.95
2017-10-30 17:57:00 +01:00
Franz Pletz
36be7d3e85
Revert parts of "linux: remove unused kernel patches"
...
This reverts commit 05b8cae9ec
that
removed the cgroup v2 patch for the 4.4 kernel.
2017-10-30 17:57:00 +01:00
Franz Pletz
517606d1d4
Revert "linux_4_4: remove"
...
This reverts commit 9f3f575ab3
.
Support from upstream has been extended to Feb 2022.
2017-10-30 17:57:00 +01:00
Tim Steinbach
70f35a99a4
linux: 4.14-rc6 -> 4.14-rc7
2017-10-30 08:30:29 -04:00
Tim Steinbach
e76d8af375
linux-copperhead: 4.13.9.a -> 4.13.10.a
2017-10-28 13:42:32 -04:00
Tim Steinbach
2c373d818d
linux: 4.13.9 -> 4.13.10
2017-10-27 07:48:05 -04:00
Tim Steinbach
85e79da31b
linux: 4.9.58 -> 4.9.59
2017-10-27 07:47:56 -04:00
Tim Steinbach
4ea79d3f36
linux: 4.14-rc5 -> 4.14-rc6
2017-10-23 08:49:39 -04:00
Tim Steinbach
e9aa686d3b
linux-copperhead: 4.13.8.a -> 4.13.9.a
2017-10-22 14:41:01 -04:00
Tim Steinbach
69ebd73571
linux: 4.13.8 -> 4.13.9
2017-10-22 14:35:49 -04:00
Tim Steinbach
c529454c60
linux: 4.9.57 -> 4.9.58
2017-10-22 14:35:32 -04:00
Tim Steinbach
0b409b37d4
linux-copperhead: 4.13.7.a -> 4.13.8.a
2017-10-19 08:02:26 -04:00
Tim Steinbach
67343e2f30
linux: 4.13.7 -> 4.13.8
2017-10-18 08:38:39 -04:00
Tim Steinbach
1b0e69966b
linux: 4.9.56 -> 4.9.57
2017-10-18 08:38:27 -04:00
Tim Steinbach
00669df0c1
linux: 4.14-rc4 -> 4.14-rc5
2017-10-16 09:26:36 -04:00
Tim Steinbach
19997f0100
linux-copperhead: 4.13.6.a -> 4.13.7.a
2017-10-15 15:28:16 -04:00
Tim Steinbach
8c618fce30
linux: 4.13.6 -> 4.13.7
...
CVE-2017-5123
2017-10-14 10:29:04 -04:00
Tim Steinbach
cc5dd66c03
linux: 4.9.55 -> 4.9.56
2017-10-12 20:02:15 -04:00
Tim Steinbach
64a727b160
linux-copperhead: 4.13.5.a -> 4.13.6.a
2017-10-12 13:09:36 -04:00
Tim Steinbach
5a8f9a8b6c
linux: 4.13.5 -> 4.13.6
2017-10-12 07:58:46 -04:00
Tim Steinbach
8940265231
linux: 4.9.54 -> 4.9.55
2017-10-12 07:58:33 -04:00
Tim Steinbach
5dda1324be
linux-hardened: Disable GCC_PLUGIN_RANDSTRUCT
2017-10-11 13:50:20 -04:00
Tim Steinbach
2262b2332d
linux: 4.14-rc3 -> 4.14-rc4
2017-10-10 13:07:42 -04:00
Eelco Dolstra
67c3eab348
linux: 4.9.53 -> 4.9.54
2017-10-10 12:41:50 +02:00
Frederik Rietdijk
acfec163b1
Merge remote-tracking branch 'upstream/master' into HEAD
2017-10-07 12:15:17 +02:00
Vladimír Čunát
ef41fc7f51
Merge branch 'master' into staging
...
Hydra: ?compare=1399476
2017-10-07 10:17:42 +02:00
Tuomas Tynkkynen
a06d64ea69
kernel config: Explicitly enable device mapper
...
A no-op change on x86 but enables it on ARM.
2017-10-07 11:05:05 +03:00
Tim Steinbach
3e5b594732
linux-copperhead: 4.13.4.a -> 4.13.5.a
2017-10-05 16:06:19 -04:00
Tim Steinbach
0bd1f7a92f
linux: 4.13.4 -> 4.13.5
2017-10-05 09:50:00 -04:00
Tim Steinbach
aee224c8a5
linux: 4.9.52 -> 4.9.53
2017-10-05 09:49:40 -04:00
Orivej Desh
f137004179
Merge branch 'master' into staging
...
* master: (81 commits)
Add NixOS 17.09 AMIs
gradle: 4.2 -> 4.2.1
maintainers.nix: use my GitHub handle as maintainer name
fcitx-engines.rime: init at 0.3.2
brise: init at 2017-09-16
librime: init at 1.2.9
marisa: init at 0.2.4
opencc: build shared library and programs
josm: 12712 -> 12914
exa: 0.7.0 -> 0.8.0
krb5: add deprecation date for old configuration
rustRegistry: 2017-09-10 -> 2017-10-03
go-ethereum: Fix libusb segmentation faults on Darwin
tor-browser-bundle-bin: 7.0.5 -> 7.0.6
libsodium: 1.0.13 -> 1.0.15
tor-browser-bundle: geoip support
tor-browser-bundle: support transports obfs2,obfs3
tor-browser-bundle: bump https-everywhere to 2017.9.12
tint2: limit platforms to Linux since macOS is not supported and fails the tests
eclipse-plugin-vrapper: init at 0.72.0
...
2017-10-03 17:46:39 +00:00
Tim Steinbach
1e85d28fdc
linux: 4.14-rc2 -> 4.14-rc3
2017-10-02 09:29:51 -04:00
Orivej Desh
fda26c8476
Merge branch 'master' into staging
...
* master: (271 commits)
pysmbc: clarify license
pysmbc: fix license
bazel: 0.5.4 -> 0.6.0 (#29990 )
googler: init at 3.3
go: declare support for aarch64
firefox-beta-bin: 56.0b5 -> 57.0b4
spotify: 1.0.64.401.g9d720389-21 -> 1.0.64.407.g9bd02c2d-26
gogs: 0.11.19 -> 0.11.29
grafana: 4.5.1 -> 4.5.2
mopidy-iris: 3.4.1 -> 3.4.9
nextcloud: 12.0.2 -> 12.0.3
haskell-json-autotype: jailbreak to fix build within LTS 9.x
kore: fix up
kore: init at 2.0.0
glusterfs service: fix issues with useRpcbind
tig: 2.2.2 -> 2.3.0
haskell-hspec-core: enable test suite again
hackage-packages.nix: automatic Haskell package set update
librsvg: fix thumbnailer path
awscli: 1.11.108 -> 1.11.162
...
2017-10-02 00:22:12 +00:00
Tim Steinbach
e479b5ea6f
linux-copperhead: 4.13.3.a -> 4.13.4.a
2017-09-30 10:05:39 -04:00
John Ericson
f037625f87
Merge remote-tracking branch 'upstream/staging' into deps-reorg
2017-09-28 12:32:57 -04:00
Tim Steinbach
ab3ff4af9f
linux: 4.13.3 -> 4.13.4
2017-09-27 13:08:21 -04:00
Tim Steinbach
2ca84cfa29
linux: 4.9.51 -> 4.9.52
2017-09-27 13:03:27 -04:00
Tim Steinbach
964672dde5
linux: Remove 4.12 (EOL)
2017-09-27 13:03:06 -04:00
Tim Steinbach
b13a6d5720
linux: 4.14-rc1 -> 4.14-rc2
2017-09-25 09:24:23 -04:00
John Ericson
f8a18cd4cf
misc pkgs: Manual fixup pkgconfig nativeBuildInputs after sed
...
Importantly, this included regenerating pkgs/servers/x11/xorg, to
clobber the old sed.
2017-09-21 15:49:54 -04:00
John Ericson
531e4b80c9
misc pkgs: Basic sed to get fix pkgconfig
and autoreconfHook
buildInputs
...
Only acts on one-line dependency lists.
2017-09-21 15:49:53 -04:00
Tim Steinbach
7d3d276a16
linux-copperhead: 4.13.2.a -> 4.13.3.a
2017-09-21 14:37:44 -04:00
Tim Steinbach
eab480ac3d
linux: 4.13.2 -> 4.13.3
2017-09-20 08:36:27 -04:00
Tim Steinbach
726765404b
linux: 4.12.13 -> 4.12.14
2017-09-20 08:36:13 -04:00
Tim Steinbach
7cfa6895e8
linux: 4.9.50 -> 4.9.51
2017-09-20 08:35:44 -04:00
Jan Malakhovski
8525b78d05
linuxPackages: properly propagate features
and extraConfig
...
`kernel.override { features = ... }` didn't work before, now it works as
expected.
2017-09-17 16:33:47 +02:00
Tim Steinbach
c8f43edaf5
linux: 4.13-rc7 -> 4.14-rc1
2017-09-17 09:11:04 -04:00
Tim Steinbach
08229bba30
linux-copperhead: 4.13.1.b -> 4.13.2.a
2017-09-16 08:57:45 -04:00
Tuomas Tynkkynen
9a6aa33422
kernel: Disable DEBUG_INFO
...
Since we don't have a split debug info output yet, don't waste time
writing several gigabytes of debug info that's all going to be stripped
out at the end.
This change only affects Aarch64 (where some joker has enabled it in the
architecture defconfig) and is a no-op on the others.
2017-09-16 15:09:10 +03:00
Jan Malakhovski
62fa45eac5
linuxPackages: hardened-config: enable DEBUG_PI_LIST
2017-09-16 13:14:05 +02:00
Jan Malakhovski
c345761c13
linuxPackages: hardened-config: check kernelArch, not system
2017-09-16 13:14:04 +02:00
Jan Malakhovski
616a7fe237
linuxPackages: hardened-config: disable BUG_ON_DATA_CORRUPTION
for older kernels
...
They don't support it.
2017-09-16 13:14:03 +02:00
Joachim Fasting
dd170cd5df
hardened-config: build with fortify source
2017-09-16 00:31:25 +02:00
Joachim Fasting
9a763f8f59
hardened-config: enable the randstruct plugin
2017-09-16 00:31:23 +02:00
Joachim Fasting
edd0d2f2e9
hardened-config: additional refcount checking
2017-09-16 00:31:17 +02:00
Tim Steinbach
43b3029a4a
linux: 4.9.49 -> 4.9.50
2017-09-14 08:40:13 -04:00
Tim Steinbach
537da6cb50
linux: 4.12.12 -> 4.12.13
2017-09-14 08:40:13 -04:00
Tim Steinbach
232fc6a806
linux: 4.13.1 -> 4.13.2
2017-09-14 08:40:13 -04:00
Tim Steinbach
87fa247867
linux-copperhead: 4.13.1.a -> 4.13.1.b
2017-09-13 08:20:58 -04:00
Tim Steinbach
114a2bcc80
linux-copperhead: 4.13.a -> 4.13.1.a
2017-09-10 19:21:31 -04:00
Tim Steinbach
80486ba971
linux: 4.13 -> 4.13.1
2017-09-10 12:13:15 -04:00
Tim Steinbach
9c723d4b2b
linux: 4.12.11 -> 4.12.12
2017-09-10 12:13:15 -04:00
Tim Steinbach
1ab2b06a36
linux: 4.9.48 -> 4.9.49
2017-09-10 12:13:15 -04:00
Tim Steinbach
dc8b228a89
linux: 4.9.47 -> 4.9.48
2017-09-07 10:31:02 -04:00
Tim Steinbach
a1912c9eb4
linux: 4.12.10 -> 4.12.11
2017-09-07 10:27:39 -04:00
Jörg Thalheim
44f93731d6
linux_chromiumos_3_18: remove kernel due lack of maintainer/breakage
...
There is no maintainer for this package, probably not many users.
It requires effort to fix all third-party modules for this old kernel
versions. It might contain unpatched security holes.
For Pixel chromebooks, we have the samus-kernel.
Apart from that https://github.com/GalliumOS/linux might be a good choice.
2017-09-05 14:42:23 +02:00
Tim Steinbach
967077537b
linux-copperhead: 4.12.10.a -> 4.13.a
2017-09-04 11:09:29 -04:00
Tim Steinbach
c1e2a0b6f4
linux: Add 4.13
2017-09-03 19:41:44 -04:00
Tim Steinbach
2c301b1b48
linux: 4.9.46 -> 4.9.47
...
(cherry picked from commit 27c8378c0c81aa17aef615615421aa5de3d8246b)
2017-09-02 11:17:47 -04:00
Joachim Fasting
697cbbc617
kernelPatches.grsecurity_testing: remove
2017-09-02 15:56:49 +02:00
davidak
4134db36d0
linux-testing-bcachefs: init at 4.11.2017.08.23
2017-08-31 05:39:17 -05:00
Tim Steinbach
4c91e32da6
linux-copperhead: 4.12.9.a -> 4.12.10.a
2017-08-30 13:17:51 -04:00
Tim Steinbach
fab79d08e9
linux: 4.9.45 -> 4.9.46
2017-08-30 07:59:42 -04:00
Tim Steinbach
a27c6c7374
linux: 4.12.9 -> 4.12.10
2017-08-30 07:59:42 -04:00
Tuomas Tynkkynen
ff3f6f38c4
linux_rpi: 1.20170515 -> 1.20170811
2017-08-29 02:37:52 +03:00
Tim Steinbach
163b3e853b
linux: 4.13-rc6 -> 4.13-rc7
2017-08-28 11:59:37 -04:00
Tim Steinbach
bebaf083cd
linux-copperhead: 4.12.8.a -> 4.12.9.a
2017-08-27 09:43:23 -04:00
Tim Steinbach
9b9d0cc06b
linux: 4.9.44 -> 4.9.45
2017-08-26 09:50:02 -04:00
Tim Steinbach
d23bed7cc6
linux: 4.12.8 -> 4.12.9
2017-08-26 09:47:57 -04:00
Tim Steinbach
cd85a704a5
linux: 4.13-rc4 -> 4.13-rc6
2017-08-22 03:23:30 -04:00
Frederik Rietdijk
6bbc3a0b24
Merge commit '3b29468313bc8604fe8f85c8d9316fd276d3985c' into HEAD
2017-08-21 04:44:40 +02:00
Vladimír Čunát
7c7c83e233
buildLinux: allow overriding stdenv on each call
2017-08-20 08:24:52 +02:00
Tim Steinbach
7209ed6d4b
linux-copperhead: 4.12.7.a -> 4.12.8.a
2017-08-18 15:47:03 -04:00
Tim Steinbach
9281b05c7f
linux: 4.12.7 -> 4.12.8
2017-08-18 15:33:53 -04:00
Tim Steinbach
a5f01aa745
linux: 4.9.43 -> 4.9.44
2017-08-18 15:30:37 -04:00
Tim Steinbach
b94210b066
linux-copperhead: 4.12.5.a -> 4.12.7.a
2017-08-14 12:51:30 -04:00
Frederik Rietdijk
13bbaee21d
Merge pull request #27881 from mimadrid/fix/http-https
...
Update homepage attributes: http -> https
2017-08-13 21:53:20 +02:00
Tim Steinbach
5c29873e99
linux: 4.9.42 -> 4.9.43
2017-08-13 15:42:15 -04:00
Tim Steinbach
59e34685da
linux: 4.12.6 -> 4.12.7
2017-08-13 15:42:15 -04:00
Joachim Fasting
345e0e6794
hardened-config: enable read-only LSM hooks
...
Implies that SELinux can no longer be disabled at runtime (only at boot
time, via selinux=0).
See https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dd0859dccbe291cf8179a96390f5c0e45cb9af1d
2017-08-11 23:27:58 +02:00
Robin Gloster
05b8cae9ec
linux: remove unused kernel patches
2017-08-11 19:13:09 +02:00
Robin Gloster
9f3f575ab3
linux_4_4: remove
...
Support ends in Feb 2018
2017-08-11 19:13:09 +02:00
Robin Gloster
0eb9c5bd42
linux_3_10: remove
...
Support ends in Oct 2017
2017-08-11 19:13:08 +02:00
Tim Steinbach
47d9b48e4d
linux: 4.12.5 -> 4.12.6
2017-08-11 12:14:53 -04:00
Tim Steinbach
f2d420e4c9
linux: 4.9.41 -> 4.9.42
2017-08-11 12:10:10 -04:00
Tim Steinbach
f46f98ad31
Revert 0cf0d7186a
...
Order common kernel config by functionality
See #27949
2017-08-07 17:34:10 -04:00
Tim Steinbach
fa10497834
Merge pull request #27684 from gnidorah/bfq
...
linux: BFQ Group Scheduling support
2017-08-07 11:58:45 -04:00
Tim Steinbach
06af1df857
linux: 4.13-rc3 -> 4.13-rc4
2017-08-07 11:40:01 -04:00
Tim Steinbach
ea2a10e143
linux: 4.4.79 -> 4.4.80
2017-08-07 11:35:42 -04:00
Tim Steinbach
4825e4818b
linux: 4.9.40 -> 4.9.41
2017-08-07 11:32:26 -04:00
gnidorah
dc21f1ad65
linux: BFQ Group Scheduling support
2017-08-07 10:12:21 +03:00
Tim Steinbach
1ec7242bc2
linux-copperhead: 4.12.4.a -> 4.12.5.a
2017-08-06 22:04:46 -04:00
Tim Steinbach
ff9479cd54
linux: 4.12.4 -> 4.12.5
2017-08-06 19:22:15 -04:00
Tim Steinbach
0cf0d7186a
linux-common-config: Refactor, clean up
2017-08-06 19:17:30 -04:00
Joachim Fasting
f963014829
linux-hardened-config: various fixups
...
Note
- the kernel config parser ignores "# foo is unset" comments so they
have no effect; disabling kernel modules would break *everything* and so
is ill-suited for a general-purpose kernel anyway --- the hardened nixos
profile provides a more flexible solution
- removed some overlap with the common config (SECCOMP is *required* by systemd;
YAMA is enabled by default).
- MODIFY_LDT_SYSCALL is guarded by EXPERT on vanilla so setting it to y breaks
the build; fix by making it optional
- restored some original comments which I feel are clearer
2017-08-06 23:38:07 +02:00
Heitham Omar
5ac00265a8
linux-common-config: add CONFIG_HOTPLUG_PCI_ACPI
2017-08-06 20:41:28 +02:00
Tim Steinbach
ff10bafd00
linux: Expand hardened config
...
Based on latest recommendations at
http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
2017-08-06 09:58:02 -04:00
Robin Gloster
2b4811887a
kernel: add IP_NF_TARGET_REDIRECT
2017-08-04 08:26:09 +02:00
mimadrid
09e0cc7cc7
Update homepage attributes: http -> https
...
Homepage link "http://.../ " is a permanent redirect to "https://.../ " and should be updated
https://repology.org/repository/nix_stable/problems
2017-08-03 11:56:15 +02:00
Tuomas Tynkkynen
3db9a2bdff
linux_rpi: 1.20170427 -> 1.20170515
2017-07-31 19:47:23 +03:00
aszlig
979817d153
linux-testing: 4.13-rc2 -> 4.13-rc3
...
Tested via building the linux_testing attribute, but didn't test it at
runtime (yet).
Diffed unpacked tarball against my local git clone and the contents
match.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2017-07-31 09:39:42 +02:00
Tim Steinbach
a918521c1e
linux-copperhead: 4.12.3.a -> 4.12.4.a
2017-07-28 17:54:37 -04:00
Tim Steinbach
5a6b5b8daf
linux: 4.4.78 -> 4.4.79
2017-07-28 10:02:29 -04:00
Tim Steinbach
88c0f67ded
linux: 4.9.39 -> 4.9.40
2017-07-28 10:00:25 -04:00
Tim Steinbach
f43c445824
linux: 4.12.3 -> 4.12.4
2017-07-28 09:55:48 -04:00
Tim Steinbach
1dd6e7dcbc
linux: 4.13-rc1 -> 4.13-rc2
2017-07-24 09:50:32 -04:00
Jörg Thalheim
887570883e
perf: remove binutils patch by wrapper
...
starting with linux 4.12 our patch no longer applied. In order to
avoid having to maintain patches for different linux kernels it is
easier to use a wrapper instead.
2017-07-23 15:18:02 +01:00
Tim Steinbach
869bb2e486
linux-copperhead: 4.12.2.a -> 4.12.3.a
2017-07-22 19:08:02 -04:00
Tim Steinbach
ba9275da88
linux: Remove 4.11
...
4.11.x has been EOL'd
2017-07-21 07:33:14 -04:00
Tim Steinbach
98ad0f4dab
linux: 4.12.2 -> 4.12.3
2017-07-21 07:28:24 -04:00
Tim Steinbach
232f497169
linux: 4.9.38 -> 4.9.39
2017-07-21 07:25:50 -04:00
Tim Steinbach
5181d7568f
linux: 4.4.77 -> 4.4.78
2017-07-21 07:23:12 -04:00
Al Zohali
0b3d29d4ac
linux_samus_4_12: init at 4.12.2
...
Co-authored-by: Nikolay Amiantov <ab@fmap.me>
fixes #26038
2017-07-18 23:31:18 +01:00
Tim Steinbach
df929d6216
linux-copperhead: 4.12.1.a -> 4.12.2.a
2017-07-15 19:44:12 -04:00
Tim Steinbach
b103e9317a
linux-testing: 4.12-rc7 -> 4.13-rc1
2017-07-15 19:30:44 -04:00
Tim Steinbach
81b993369c
linux: 4.4.76 -> 4.4.77
2017-07-15 19:25:42 -04:00
Tim Steinbach
b04858db1b
linux: 4.9.37 -> 4.9.38
...
Remove temporary patches to perf as well
2017-07-15 19:22:07 -04:00
Tim Steinbach
ccec16579d
linux: 4.11.10 -> 4.11.11
2017-07-15 19:17:06 -04:00
Tim Steinbach
c5ef98bb34
linux: 4.12.1 -> 4.12.2
2017-07-15 19:14:44 -04:00
Tim Steinbach
954c66983d
perf: Apply patch for offline kernels
...
As per https://lkml.org/lkml/2017/7/13/314 , perf is broken in 4.9.36 and 4.9.37
Patches in this commit are taken from
https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/commit/?id=39f4f2c018bd831c325e11983f8893caf72fd9eb
This will allow perf to build again and should be included in a future 4.9.x release,
allowing the custom patching to be removed again
2017-07-14 20:07:16 -04:00
Tuomas Tynkkynen
42395a191b
kernel-config: Disable Xen on non-x86
...
There's an upstream build failure on ARM (not directly related to Xen
but rather some other config options it enables). The xen package is
x86_64-only anyways.
2017-07-13 20:12:50 +03:00
Tim Steinbach
6fda535869
linux-copperhead: Fix modDirVersion
2017-07-13 09:00:44 -04:00
Tim Steinbach
45a2534459
linux-copperhead: 4.12.e -> 4.12.1.a
2017-07-13 08:40:08 -04:00
Tim Steinbach
6131b4d52d
linux: 4.12 -> 4.12.1
2017-07-13 08:36:50 -04:00
Tim Steinbach
24de0bad42
linux: 4.11.9 -> 4.11.10
2017-07-13 08:34:51 -04:00
Tim Steinbach
6da222918e
linux: 4.9.36 -> 4.9.37
2017-07-13 08:30:47 -04:00
Tim Steinbach
1434128a18
linux-copperhead: 4.12.d -> 4.12.e
2017-07-11 08:22:56 -04:00
Tim Steinbach
d38656b3c3
linux-copperhead: 4.12.c -> 4.12.d
2017-07-09 18:20:14 -04:00
Tim Steinbach
fca0b3602d
linux-copperhead: 4.12.b -> 4.12.c
2017-07-09 18:16:58 -04:00
Tim Steinbach
da8bd6df67
Merge pull request #27161 from NeQuissimus/kernel_config_cleanup
...
linux: Clean up kernel config warnings
2017-07-07 09:00:52 -04:00
gnidorah
ff348f4b6d
linux: Enable more I/O schedulers
2017-07-07 11:43:48 +03:00
Tim Steinbach
968e0b2baf
linux-copperhead: 4.11.8.a -> 4.12.b
2017-07-06 11:42:27 -04:00
Tim Steinbach
3ec2a2f476
linux: Clean up kernel config warnings
2017-07-05 20:09:14 -04:00
Tim Steinbach
a04afd1594
linux: 4.4.75 -> 4.4.76
2017-07-05 12:54:56 -04:00
Tim Steinbach
05bd289ff8
linux: 4.9.35 -> 4.9.36
2017-07-05 12:52:05 -04:00
Tim Steinbach
00f0f7e9f6
linux: 4.11.8 -> 4.11.9
2017-07-05 12:49:56 -04:00
Tim Steinbach
cd1f998289
Revert "linux-copperhead: 4.11.8.a -> 4.12.a"
...
This reverts commit cb703f1314
.
2017-07-04 20:56:02 -04:00
Tim Steinbach
cb703f1314
linux-copperhead: 4.11.8.a -> 4.12.a
2017-07-03 21:03:58 -04:00
Tim Steinbach
f130e0027e
linux: Add 4.12
2017-07-03 11:57:40 -04:00
Tim Steinbach
3130f3ed0a
linux-copperhead: 4.11.7.a -> 4.11.8.a
...
Fixes #26790 by properly including built modules
2017-06-29 23:16:52 -04:00
Tim Steinbach
37bc494949
linux: 4.11.7 -> 4.11.8
2017-06-29 08:29:04 -04:00
Tim Steinbach
d1aff8d2e5
linux: 4.9.34 -> 4.9.35
...
Also, remove XSA-216 patches, the fixes are now integrated upstream
2017-06-29 08:26:25 -04:00
Tim Steinbach
6b35f22e28
linux: 4.4.74 -> 4.4.75
2017-06-29 08:20:06 -04:00
Tim Steinbach
4cc729644e
Merge pull request #26867 from michalpalka/xen-security-2017.06-new
...
xen: patch for XSAs: 216, 217, 218, 219, 220, 221, 222, and 224
2017-06-28 22:43:46 -04:00
John Ericson
e1faeb574a
Merge pull request #26884 from obsidiansystems/purge-stdenv-cross
...
Purge stdenv cross
2017-06-28 21:39:16 -04:00
hsloan
16781a3892
kernel perf: Don't use stdenv.cross
2017-06-28 20:23:09 -04:00
hsloan
1e3b45cfdb
kernel manual-config: Don't use stdenv.cross
2017-06-28 20:23:09 -04:00
hsloan
459d07d41c
kernel generic: Don't use stdenv.cross
2017-06-28 20:22:59 -04:00
Tim Steinbach
d2e199ca3c
linux: 4.4.73 -> 4.4.74
2017-06-27 08:14:47 -04:00
Tim Steinbach
c90a4b8541
linux: 4.12-rc6 -> 4.12-rc7
2017-06-26 09:58:37 -04:00
Michał Pałka
80e0cda7ff
xen: patch for XSAs: 216, 217, 218, 219, 220, 221, 222, and 224
...
XSA-216 Issue Description:
> The block interface response structure has some discontiguous fields.
> Certain backends populate the structure fields of an otherwise
> uninitialized instance of this structure on their stacks, leaking
> data through the (internal or trailing) padding field.
More: https://xenbits.xen.org/xsa/advisory-216.html
XSA-217 Issue Description:
> Domains controlling other domains are permitted to map pages owned by
> the domain being controlled. If the controlling domain unmaps such a
> page without flushing the TLB, and if soon after the domain being
> controlled transfers this page to another PV domain (via
> GNTTABOP_transfer or, indirectly, XENMEM_exchange), and that third
> domain uses the page as a page table, the controlling domain will have
> write access to a live page table until the applicable TLB entry is
> flushed or evicted. Note that the domain being controlled is
> necessarily HVM, while the controlling domain is PV.
More: https://xenbits.xen.org/xsa/advisory-217.html
XSA-218 Issue Description:
> We have discovered two bugs in the code unmapping grant references.
>
> * When a grant had been mapped twice by a backend domain, and then
> unmapped by two concurrent unmap calls, the frontend may be informed
> that the page had no further mappings when the first call completed rather
> than when the second call completed.
>
> * A race triggerable by an unprivileged guest could cause a grant
> maptrack entry for grants to be "freed" twice. The ultimate effect of
> this would be for maptrack entries for a single domain to be re-used.
More: https://xenbits.xen.org/xsa/advisory-218.html
XSA-219 Issue Description:
> When using shadow paging, writes to guest pagetables must be trapped and
> emulated, so the shadows can be suitably adjusted as well.
>
> When emulating the write, Xen maps the guests pagetable(s) to make the final
> adjustment and leave the guest's view of its state consistent.
>
> However, when mapping the frame, Xen drops the page reference before
> performing the write. This is a race window where the underlying frame can
> change ownership.
>
> One possible attack scenario is for the frame to change ownership and to be
> inserted into a PV guest's pagetables. At that point, the emulated write will
> be an unaudited modification to the PV pagetables whose value is under guest
> control.
More: https://xenbits.xen.org/xsa/advisory-219.html
XSA-220 Issue Description:
> Memory Protection Extensions (MPX) and Protection Key (PKU) are features in
> newer processors, whose state is intended to be per-thread and context
> switched along with all other XSAVE state.
>
> Xen's vCPU context switch code would save and restore the state only
> if the guest had set the relevant XSTATE enable bits. However,
> surprisingly, the use of these features is not dependent (PKU) or may
> not be dependent (MPX) on having the relevant XSTATE bits enabled.
>
> VMs which use MPX or PKU, and context switch the state manually rather
> than via XSAVE, will have the state leak between vCPUs (possibly,
> between vCPUs in different guests). This in turn corrupts state in
> the destination vCPU, and hence may lead to weakened protections
>
> Experimentally, MPX appears not to make any interaction with BND*
> state if BNDCFGS.EN is set but XCR0.BND{CSR,REGS} are clear. However,
> the SDM is not clear in this case; therefore MPX is included in this
> advisory as a precaution.
More: https://xenbits.xen.org/xsa/advisory-220.html
XSA-221 Issue Description:
> When polling event channels, in general arbitrary port numbers can be
> specified. Specifically, there is no requirement that a polled event
> channel ports has ever been created. When the code was generalised
> from an earlier implementation, introducing some intermediate
> pointers, a check should have been made that these intermediate
> pointers are non-NULL. However, that check was omitted.
More: https://xenbits.xen.org/xsa/advisory-221.html
XSA-222 Issue Description:
> Certain actions require removing pages from a guest's P2M
> (Physical-to-Machine) mapping. When large pages are in use to map
> guest pages in the 2nd-stage page tables, such a removal operation may
> incur a memory allocation (to replace a large mapping with individual
> smaller ones). If this allocation fails, these errors are ignored by
> the callers, which would then continue and (for example) free the
> referenced page for reuse. This leaves the guest with a mapping to a
> page it shouldn't have access to.
>
> The allocation involved comes from a separate pool of memory created
> when the domain is created; under normal operating conditions it never
> fails, but a malicious guest may be able to engineer situations where
> this pool is exhausted.
More: https://xenbits.xen.org/xsa/advisory-222.html
XSA-224 Issue Description:
> We have discovered a number of bugs in the code mapping and unmapping
> grant references.
>
> * If a grant is mapped with both the GNTMAP_device_map and
> GNTMAP_host_map flags, but unmapped only with host_map, the device_map
> portion remains but the page reference counts are lowered as though it
> had been removed. This bug can be leveraged cause a page's reference
> counts and type counts to fall to zero while retaining writeable
> mappings to the page.
>
> * Under some specific conditions, if a grant is mapped with both the
> GNTMAP_device_map and GNTMAP_host_map flags, the operation may not
> grab sufficient type counts. When the grant is then unmapped, the
> type count will be erroneously reduced. This bug can be leveraged
> cause a page's reference counts and type counts to fall to zero while
> retaining writeable mappings to the page.
>
> * When a grant reference is given to an MMIO region (as opposed to a
> normal guest page), if the grant is mapped with only the
> GNTMAP_device_map flag set, a mapping is created at host_addr anyway.
> This does *not* cause reference counts to change, but there will be no
> record of this mapping, so it will not be considered when reporting
> whether the grant is still in use.
More: https://xenbits.xen.org/xsa/advisory-224.html
2017-06-26 07:01:24 +00:00
Tim Steinbach
03aed4cfcf
linux-copperhead: 4.11.6.d -> 4.11.7.a
2017-06-24 14:50:41 -04:00
Tim Steinbach
b06cb59fc1
linux: 4.9.33 -> 4.9.34
2017-06-24 11:22:56 -04:00
Tim Steinbach
3a68f0bb78
linux: 4.11.6 -> 4.11.7
2017-06-24 11:20:32 -04:00
Tim Steinbach
4e08459f9b
linux-hardened-copperhead: 4.11.6c -> 4.11.6d
2017-06-22 21:12:20 -04:00
Franz Pletz
dd3f2e648a
linux_hardened_copperhead: init at 4.11.6.c
2017-06-21 23:49:00 +02:00
Jörg Thalheim
e89e96a755
linux_4_11: renable CONFIG_UPROBE_EVENTS
...
CONFIG_UPROBE_EVENT was renamed to CONFIG_UPROBE_EVENTS.
2017-06-21 17:16:46 +01:00
Tim Steinbach
2764961b87
linux: 4.12-rc5 -> 4.12-rc6
2017-06-19 21:21:15 -04:00
Franz Pletz
bbb9182cbc
linux: 4.9.32 -> 4.9.33
2017-06-17 18:45:29 +02:00
Franz Pletz
a470aa0924
linux: 4.4.72 -> 4.4.73
2017-06-17 18:45:29 +02:00
Franz Pletz
c973a4a887
linux: 4.11.5 -> 4.11.6
2017-06-17 18:45:29 +02:00
Tim Steinbach
b4576c5108
linux: 4.11.4 -> 4.11.5
2017-06-15 08:54:55 -04:00
Tim Steinbach
a7efc9f0cd
linux: 4.9.31 -> 4.9.32
2017-06-15 08:53:35 -04:00
Tim Steinbach
07edb44d15
linux: 4.4.71 -> 4.4.72
2017-06-15 08:52:26 -04:00
timor
d74f8351a5
kernel: enable audio jack reconfiguration
...
Change kernel config to allow for changing the functions of the audio
jacks at run-time as well as at boot time.
2017-06-13 08:50:34 +03:00
Eelco Dolstra
63e9d1c51e
perf: Fix perf annotate
...
This command requires objdump, so make sure it can find it.
2017-06-12 13:23:18 +02:00
Tim Steinbach
5fbab5dfb3
linux: 4.12-rc4 -> 4.12-rc5
2017-06-11 21:37:46 -04:00
Tuomas Tynkkynen
370ace4cf0
kernel: Don't build self-test modules
2017-06-11 19:33:24 +03:00
Tim Steinbach
c7abd6943e
linux: 4.9.30 -> 4.9.31
2017-06-07 08:09:37 -04:00
Tim Steinbach
01fc1a80b3
linux: 4.4.70 -> 4.4.71
2017-06-07 08:07:53 -04:00
Tim Steinbach
66faa421c9
linux: 4.11.3 -> 4.11.4
2017-06-07 08:05:45 -04:00
Tim Steinbach
7c476b98df
linux: 4.12-rc3 -> 4.12-rc4
2017-06-05 10:01:53 -04:00
Tim Steinbach
a78af5196c
linux: 4.12-rc2 -> 4.12-rc3
2017-05-29 09:32:52 -04:00
Tim Steinbach
690a83091b
linux: FS_ENCRYPTION only for >= 4.9 kernels
2017-05-25 18:25:08 -04:00
Tim Steinbach
8f0ca4f44a
linux: 4.4.69 -> 4.4.70
2017-05-25 18:21:54 -04:00
Tim Steinbach
446c57fdb2
linux: 4.9.29 -> 4.9.30
2017-05-25 18:19:16 -04:00
Tim Steinbach
f618a6caa1
linux: 4.11.2 -> 4.11.3
2017-05-25 18:16:57 -04:00
Tim Steinbach
aa73b7df30
linux: 4.12-rc1 -> 4.12-rc2
2017-05-22 11:40:04 -04:00
Tim Steinbach
a42c54057f
linux: 4.11.1 -> 4.11.2
2017-05-20 17:17:35 -04:00
Tim Steinbach
a551ca61b7
linux: 4.9.28 -> 4.9.29
2017-05-20 17:17:34 -04:00
Tim Steinbach
82852ac60e
linux: 4.4.68 -> 4.4.69
2017-05-20 17:17:33 -04:00
Tuomas Tynkkynen
de263072b5
kernel: 4.10 is end-of-life
...
https://lkml.org/lkml/2017/5/20/75
2017-05-20 19:54:18 +03:00
Joachim Fasting
77ed860114
linux_hardened: enable checks on scatter-gather tables
...
Recommended by kspp
2017-05-18 12:33:42 +02:00
Tim Steinbach
8eb302d6d7
Merge pull request #25792 from NeQuissimus/linux_4_12_rc1
...
linux-testing: 4.11-rc7 -> 4.12-rc1
2017-05-17 08:30:10 -04:00
Tuomas Tynkkynen
a35ec5dda6
linux_rpi: 1.20170303 -> 1.20170427
2017-05-15 11:14:59 +03:00
Tim Steinbach
336b044dcb
linux-testing: 4.11-rc7 -> 4.12-rc1
2017-05-14 22:03:14 -04:00
Tuomas Tynkkynen
ba585648e7
kernel: 4.9.27 -> 4.9.28
2017-05-15 01:28:01 +03:00
Tuomas Tynkkynen
8de08ff145
kernel: 4.4.67 -> 4.4.68
2017-05-15 01:27:50 +03:00
Tuomas Tynkkynen
c230aee121
kernel: 4.11 -> 4.11.1
2017-05-15 01:27:41 +03:00
Tuomas Tynkkynen
2f1e6c8686
kernel: 4.10.15 -> 4.10.16
2017-05-15 01:27:30 +03:00
Tim Steinbach
8584a16922
linux: 4.10.14 -> 4.10.15
2017-05-09 08:43:37 -04:00
Joachim Fasting
996b65cfba
linux_hardened: enable structleak plugin
...
A port of the PaX structleak plugin. Note that this version of structleak
seems to cover less ground than the PaX original (only marked structs are
zeroed). [1]
[1]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c61f13eaa1ee17728c41370100d2d45c254ce76f
2017-05-09 01:38:26 +02:00
Joachim Fasting
1816e2b960
linux_hardened: BUG on struct validation failure
2017-05-09 01:38:24 +02:00
Joachim Fasting
a7ecdffc28
linux_hardened: move to 4.11
...
Note that DEBUG_RODATA has been split into STRICT_KERNEL_RWX &
STRICT_MODULE_RWX, which are on by default (non-optional).
2017-05-09 01:38:22 +02:00
Joachim Fasting
42c58cd2e8
linux_hardened: compile with stackprotector-strong
...
Default is regular, which we need to unset for kconfig to accept the new
value.
2017-05-09 01:38:21 +02:00
Tim Steinbach
8c74ff6534
linux: 4.9.26 -> 4.9.27
2017-05-08 09:26:26 -04:00
Tim Steinbach
4e2c67ff76
linux: 4.4.66 -> 4.4.67
2017-05-08 09:23:52 -04:00
Joachim Fasting
a04d8532c2
linux: support using gcc plugins
...
linux 4.8 onwards support gcc plugins. This patch adds build inputs
required to make use of gcc plugins to the generic kernel build
environment.
2017-05-06 19:47:27 +02:00
Tim Steinbach
2a38ecc055
linux: 4.10.13 -> 4.10.14
2017-05-03 20:46:48 -04:00
Tim Steinbach
6076843be3
linux: 4.9.25 -> 4.9.26
2017-05-03 20:44:09 -04:00
Tim Steinbach
af933bc7d3
linux: 4.4.65 -> 4.4.66
2017-05-03 20:41:46 -04:00
Tim Steinbach
b5169fd277
linux: Add cgroups patches for 4.9, 4.10, 4.11
2017-05-02 08:49:39 -04:00