3
0
Fork 0
forked from mirrors/nixpkgs
Commit graph

2166 commits

Author SHA1 Message Date
Tim Steinbach 7d3d276a16
linux-copperhead: 4.13.2.a -> 4.13.3.a 2017-09-21 14:37:44 -04:00
Tim Steinbach eab480ac3d
linux: 4.13.2 -> 4.13.3 2017-09-20 08:36:27 -04:00
Tim Steinbach 726765404b
linux: 4.12.13 -> 4.12.14 2017-09-20 08:36:13 -04:00
Tim Steinbach 7cfa6895e8
linux: 4.9.50 -> 4.9.51 2017-09-20 08:35:44 -04:00
Jan Malakhovski 8525b78d05
linuxPackages: properly propagate features and extraConfig
`kernel.override { features = ... }` didn't work before, now it works as
expected.
2017-09-17 16:33:47 +02:00
Tim Steinbach c8f43edaf5
linux: 4.13-rc7 -> 4.14-rc1 2017-09-17 09:11:04 -04:00
Tim Steinbach 08229bba30
linux-copperhead: 4.13.1.b -> 4.13.2.a 2017-09-16 08:57:45 -04:00
Tuomas Tynkkynen 9a6aa33422 kernel: Disable DEBUG_INFO
Since we don't have a split debug info output yet, don't waste time
writing several gigabytes of debug info that's all going to be stripped
out at the end.

This change only affects Aarch64 (where some joker has enabled it in the
architecture defconfig) and is a no-op on the others.
2017-09-16 15:09:10 +03:00
Jan Malakhovski 62fa45eac5
linuxPackages: hardened-config: enable DEBUG_PI_LIST 2017-09-16 13:14:05 +02:00
Jan Malakhovski c345761c13
linuxPackages: hardened-config: check kernelArch, not system 2017-09-16 13:14:04 +02:00
Jan Malakhovski 616a7fe237
linuxPackages: hardened-config: disable BUG_ON_DATA_CORRUPTION for older kernels
They don't support it.
2017-09-16 13:14:03 +02:00
Joachim Fasting dd170cd5df
hardened-config: build with fortify source 2017-09-16 00:31:25 +02:00
Joachim Fasting 9a763f8f59
hardened-config: enable the randstruct plugin 2017-09-16 00:31:23 +02:00
Joachim Fasting edd0d2f2e9
hardened-config: additional refcount checking 2017-09-16 00:31:17 +02:00
Tim Steinbach 43b3029a4a
linux: 4.9.49 -> 4.9.50 2017-09-14 08:40:13 -04:00
Tim Steinbach 537da6cb50
linux: 4.12.12 -> 4.12.13 2017-09-14 08:40:13 -04:00
Tim Steinbach 232fc6a806
linux: 4.13.1 -> 4.13.2 2017-09-14 08:40:13 -04:00
Tim Steinbach 87fa247867
linux-copperhead: 4.13.1.a -> 4.13.1.b 2017-09-13 08:20:58 -04:00
Tim Steinbach 114a2bcc80
linux-copperhead: 4.13.a -> 4.13.1.a 2017-09-10 19:21:31 -04:00
Tim Steinbach 80486ba971
linux: 4.13 -> 4.13.1 2017-09-10 12:13:15 -04:00
Tim Steinbach 9c723d4b2b
linux: 4.12.11 -> 4.12.12 2017-09-10 12:13:15 -04:00
Tim Steinbach 1ab2b06a36
linux: 4.9.48 -> 4.9.49 2017-09-10 12:13:15 -04:00
Tim Steinbach dc8b228a89
linux: 4.9.47 -> 4.9.48 2017-09-07 10:31:02 -04:00
Tim Steinbach a1912c9eb4
linux: 4.12.10 -> 4.12.11 2017-09-07 10:27:39 -04:00
Jörg Thalheim 44f93731d6 linux_chromiumos_3_18: remove kernel due lack of maintainer/breakage
There is no maintainer for this package, probably not many users.
It requires effort to fix all third-party modules for this old kernel
versions. It might contain unpatched security holes.

For Pixel chromebooks, we have the samus-kernel.
Apart from that https://github.com/GalliumOS/linux might be a good choice.
2017-09-05 14:42:23 +02:00
Tim Steinbach 967077537b
linux-copperhead: 4.12.10.a -> 4.13.a 2017-09-04 11:09:29 -04:00
Tim Steinbach c1e2a0b6f4
linux: Add 4.13 2017-09-03 19:41:44 -04:00
Tim Steinbach 2c301b1b48
linux: 4.9.46 -> 4.9.47
(cherry picked from commit 27c8378c0c81aa17aef615615421aa5de3d8246b)
2017-09-02 11:17:47 -04:00
Joachim Fasting 697cbbc617
kernelPatches.grsecurity_testing: remove 2017-09-02 15:56:49 +02:00
davidak 4134db36d0 linux-testing-bcachefs: init at 4.11.2017.08.23 2017-08-31 05:39:17 -05:00
Tim Steinbach 4c91e32da6
linux-copperhead: 4.12.9.a -> 4.12.10.a 2017-08-30 13:17:51 -04:00
Tim Steinbach fab79d08e9
linux: 4.9.45 -> 4.9.46 2017-08-30 07:59:42 -04:00
Tim Steinbach a27c6c7374
linux: 4.12.9 -> 4.12.10 2017-08-30 07:59:42 -04:00
Tuomas Tynkkynen ff3f6f38c4 linux_rpi: 1.20170515 -> 1.20170811 2017-08-29 02:37:52 +03:00
Tim Steinbach 163b3e853b
linux: 4.13-rc6 -> 4.13-rc7 2017-08-28 11:59:37 -04:00
Tim Steinbach bebaf083cd
linux-copperhead: 4.12.8.a -> 4.12.9.a 2017-08-27 09:43:23 -04:00
Tim Steinbach 9b9d0cc06b
linux: 4.9.44 -> 4.9.45 2017-08-26 09:50:02 -04:00
Tim Steinbach d23bed7cc6
linux: 4.12.8 -> 4.12.9 2017-08-26 09:47:57 -04:00
Tim Steinbach cd85a704a5
linux: 4.13-rc4 -> 4.13-rc6 2017-08-22 03:23:30 -04:00
Frederik Rietdijk 6bbc3a0b24 Merge commit '3b29468313bc8604fe8f85c8d9316fd276d3985c' into HEAD 2017-08-21 04:44:40 +02:00
Vladimír Čunát 7c7c83e233
buildLinux: allow overriding stdenv on each call 2017-08-20 08:24:52 +02:00
Tim Steinbach 7209ed6d4b
linux-copperhead: 4.12.7.a -> 4.12.8.a 2017-08-18 15:47:03 -04:00
Tim Steinbach 9281b05c7f
linux: 4.12.7 -> 4.12.8 2017-08-18 15:33:53 -04:00
Tim Steinbach a5f01aa745
linux: 4.9.43 -> 4.9.44 2017-08-18 15:30:37 -04:00
Tim Steinbach b94210b066
linux-copperhead: 4.12.5.a -> 4.12.7.a 2017-08-14 12:51:30 -04:00
Frederik Rietdijk 13bbaee21d Merge pull request #27881 from mimadrid/fix/http-https
Update homepage attributes: http -> https
2017-08-13 21:53:20 +02:00
Tim Steinbach 5c29873e99
linux: 4.9.42 -> 4.9.43 2017-08-13 15:42:15 -04:00
Tim Steinbach 59e34685da
linux: 4.12.6 -> 4.12.7 2017-08-13 15:42:15 -04:00
Joachim Fasting 345e0e6794
hardened-config: enable read-only LSM hooks
Implies that SELinux can no longer be disabled at runtime (only at boot
time, via selinux=0).

See https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dd0859dccbe291cf8179a96390f5c0e45cb9af1d
2017-08-11 23:27:58 +02:00
Robin Gloster 05b8cae9ec
linux: remove unused kernel patches 2017-08-11 19:13:09 +02:00
Robin Gloster 9f3f575ab3
linux_4_4: remove
Support ends in Feb 2018
2017-08-11 19:13:09 +02:00
Robin Gloster 0eb9c5bd42
linux_3_10: remove
Support ends in Oct 2017
2017-08-11 19:13:08 +02:00
Tim Steinbach 47d9b48e4d
linux: 4.12.5 -> 4.12.6 2017-08-11 12:14:53 -04:00
Tim Steinbach f2d420e4c9
linux: 4.9.41 -> 4.9.42 2017-08-11 12:10:10 -04:00
Tim Steinbach f46f98ad31
Revert 0cf0d7186a
Order common kernel config by functionality
See #27949
2017-08-07 17:34:10 -04:00
Tim Steinbach fa10497834 Merge pull request #27684 from gnidorah/bfq
linux: BFQ Group Scheduling support
2017-08-07 11:58:45 -04:00
Tim Steinbach 06af1df857
linux: 4.13-rc3 -> 4.13-rc4 2017-08-07 11:40:01 -04:00
Tim Steinbach ea2a10e143
linux: 4.4.79 -> 4.4.80 2017-08-07 11:35:42 -04:00
Tim Steinbach 4825e4818b
linux: 4.9.40 -> 4.9.41 2017-08-07 11:32:26 -04:00
gnidorah dc21f1ad65 linux: BFQ Group Scheduling support 2017-08-07 10:12:21 +03:00
Tim Steinbach 1ec7242bc2
linux-copperhead: 4.12.4.a -> 4.12.5.a 2017-08-06 22:04:46 -04:00
Tim Steinbach ff9479cd54
linux: 4.12.4 -> 4.12.5 2017-08-06 19:22:15 -04:00
Tim Steinbach 0cf0d7186a
linux-common-config: Refactor, clean up 2017-08-06 19:17:30 -04:00
Joachim Fasting f963014829
linux-hardened-config: various fixups
Note
- the kernel config parser ignores "# foo is unset" comments so they
  have no effect; disabling kernel modules would break *everything* and so
  is ill-suited for a general-purpose kernel anyway --- the hardened nixos
  profile provides a more flexible solution
- removed some overlap with the common config (SECCOMP is *required* by systemd;
  YAMA is enabled by default).
- MODIFY_LDT_SYSCALL is guarded by EXPERT on vanilla so setting it to y breaks
  the build; fix by making it optional
- restored some original comments which I feel are clearer
2017-08-06 23:38:07 +02:00
Heitham Omar 5ac00265a8 linux-common-config: add CONFIG_HOTPLUG_PCI_ACPI 2017-08-06 20:41:28 +02:00
Tim Steinbach ff10bafd00
linux: Expand hardened config
Based on latest recommendations at
http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
2017-08-06 09:58:02 -04:00
Robin Gloster 2b4811887a
kernel: add IP_NF_TARGET_REDIRECT 2017-08-04 08:26:09 +02:00
mimadrid 09e0cc7cc7
Update homepage attributes: http -> https
Homepage link "http://.../" is a permanent redirect to "https://.../" and should be updated
https://repology.org/repository/nix_stable/problems
2017-08-03 11:56:15 +02:00
Tuomas Tynkkynen 3db9a2bdff linux_rpi: 1.20170427 -> 1.20170515 2017-07-31 19:47:23 +03:00
aszlig 979817d153
linux-testing: 4.13-rc2 -> 4.13-rc3
Tested via building the linux_testing attribute, but didn't test it at
runtime (yet).

Diffed unpacked tarball against my local git clone and the contents
match.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2017-07-31 09:39:42 +02:00
Tim Steinbach a918521c1e
linux-copperhead: 4.12.3.a -> 4.12.4.a 2017-07-28 17:54:37 -04:00
Tim Steinbach 5a6b5b8daf
linux: 4.4.78 -> 4.4.79 2017-07-28 10:02:29 -04:00
Tim Steinbach 88c0f67ded
linux: 4.9.39 -> 4.9.40 2017-07-28 10:00:25 -04:00
Tim Steinbach f43c445824
linux: 4.12.3 -> 4.12.4 2017-07-28 09:55:48 -04:00
Tim Steinbach 1dd6e7dcbc
linux: 4.13-rc1 -> 4.13-rc2 2017-07-24 09:50:32 -04:00
Jörg Thalheim 887570883e perf: remove binutils patch by wrapper
starting with linux 4.12 our patch no longer applied. In order to
avoid having to maintain patches for different linux kernels it is
easier to use a wrapper instead.
2017-07-23 15:18:02 +01:00
Tim Steinbach 869bb2e486
linux-copperhead: 4.12.2.a -> 4.12.3.a 2017-07-22 19:08:02 -04:00
Tim Steinbach ba9275da88
linux: Remove 4.11
4.11.x has been EOL'd
2017-07-21 07:33:14 -04:00
Tim Steinbach 98ad0f4dab
linux: 4.12.2 -> 4.12.3 2017-07-21 07:28:24 -04:00
Tim Steinbach 232f497169
linux: 4.9.38 -> 4.9.39 2017-07-21 07:25:50 -04:00
Tim Steinbach 5181d7568f
linux: 4.4.77 -> 4.4.78 2017-07-21 07:23:12 -04:00
Al Zohali 0b3d29d4ac linux_samus_4_12: init at 4.12.2
Co-authored-by: Nikolay Amiantov <ab@fmap.me>

fixes #26038
2017-07-18 23:31:18 +01:00
Tim Steinbach df929d6216
linux-copperhead: 4.12.1.a -> 4.12.2.a 2017-07-15 19:44:12 -04:00
Tim Steinbach b103e9317a
linux-testing: 4.12-rc7 -> 4.13-rc1 2017-07-15 19:30:44 -04:00
Tim Steinbach 81b993369c
linux: 4.4.76 -> 4.4.77 2017-07-15 19:25:42 -04:00
Tim Steinbach b04858db1b
linux: 4.9.37 -> 4.9.38
Remove temporary patches to perf as well
2017-07-15 19:22:07 -04:00
Tim Steinbach ccec16579d
linux: 4.11.10 -> 4.11.11 2017-07-15 19:17:06 -04:00
Tim Steinbach c5ef98bb34
linux: 4.12.1 -> 4.12.2 2017-07-15 19:14:44 -04:00
Tim Steinbach 954c66983d
perf: Apply patch for offline kernels
As per https://lkml.org/lkml/2017/7/13/314, perf is broken in 4.9.36 and 4.9.37
Patches in this commit are taken from
https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/commit/?id=39f4f2c018bd831c325e11983f8893caf72fd9eb

This will allow perf to build again and should be included in a future 4.9.x release,
allowing the custom patching to be removed again
2017-07-14 20:07:16 -04:00
Tuomas Tynkkynen 42395a191b kernel-config: Disable Xen on non-x86
There's an upstream build failure on ARM (not directly related to Xen
but rather some other config options it enables). The xen package is
x86_64-only anyways.
2017-07-13 20:12:50 +03:00
Tim Steinbach 6fda535869
linux-copperhead: Fix modDirVersion 2017-07-13 09:00:44 -04:00
Tim Steinbach 45a2534459
linux-copperhead: 4.12.e -> 4.12.1.a 2017-07-13 08:40:08 -04:00
Tim Steinbach 6131b4d52d
linux: 4.12 -> 4.12.1 2017-07-13 08:36:50 -04:00
Tim Steinbach 24de0bad42
linux: 4.11.9 -> 4.11.10 2017-07-13 08:34:51 -04:00
Tim Steinbach 6da222918e
linux: 4.9.36 -> 4.9.37 2017-07-13 08:30:47 -04:00
Tim Steinbach 1434128a18
linux-copperhead: 4.12.d -> 4.12.e 2017-07-11 08:22:56 -04:00
Tim Steinbach d38656b3c3
linux-copperhead: 4.12.c -> 4.12.d 2017-07-09 18:20:14 -04:00
Tim Steinbach fca0b3602d
linux-copperhead: 4.12.b -> 4.12.c 2017-07-09 18:16:58 -04:00
Tim Steinbach da8bd6df67 Merge pull request #27161 from NeQuissimus/kernel_config_cleanup
linux: Clean up kernel config warnings
2017-07-07 09:00:52 -04:00
gnidorah ff348f4b6d linux: Enable more I/O schedulers 2017-07-07 11:43:48 +03:00