alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity
326822 commits 217 branches 121 tags 4.5 GiB
Commit graph

375 commits

Author SHA1 Message Date
Maximilian Bosch bb5aa0109b
linux: build hardened kernel with matching releases 
Until now we merged kernel updates even if no hardened versions were
available yet. On one hand we don't want to delay patch-level updates,
on the other hand users of hardened kernels have frequent breakage now[1].

This change aims to provide a solution this issue:

* The hardened patchset now references the kernel version it's released
  for (including a sha256 hash for the fixed-output path of the source
  tarball).
* The `hardenedKernelFor`-function doesn't just append hardened patches
  now, but also overrides version & src to match the kernel version the
  patch was built & tested for.

Refs #140281

[1] https://hydra.nixos.org/job/nixos/trunk-combined/nixpkgs.linuxPackages_hardened.kernel.x86_64-linux/all
 2021-10-20 23:51:52 +02:00
TredwellGit 75dbbe37be linux/hardened/patches/5.4: 5.4.152-hardened1 -> 5.4.154-hardened1 2021-10-20 11:40:40 +00:00
TredwellGit cf9f5f74dd linux/hardened/patches/5.14: 5.14.11-hardened1 -> 5.14.13-hardened1 2021-10-20 11:40:39 +00:00
TredwellGit e94db0f89c linux/hardened/patches/5.10: 5.10.72-hardened1 -> 5.10.74-hardened1 2021-10-20 11:40:38 +00:00
TredwellGit a33fc5384b linux/hardened/patches/4.19: 4.19.210-hardened1 -> 4.19.212-hardened1 2021-10-20 11:40:37 +00:00
TredwellGit cf0d47c505 linux/hardened/patches/4.14: 4.14.250-hardened1 -> 4.14.251-hardened1 2021-10-20 11:40:36 +00:00
TredwellGit c7b05f54df linux/hardened/patches/5.4: 5.4.150-hardened1 -> 5.4.152-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit 331bb5fcec linux/hardened/patches/5.14: 5.14.9-hardened1 -> 5.14.11-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit 42dd28857d linux/hardened/patches/5.10: 5.10.70-hardened1 -> 5.10.72-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit 8df94e6d31 linux/hardened/patches/4.19: 4.19.208-hardened1 -> 4.19.210-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit 6e94404dc3 linux/hardened/patches/4.14: 4.14.248-hardened1 -> 4.14.250-hardened1 2021-10-12 07:37:16 -04:00
TredwellGit 642ca73937 linux/hardened/patches/5.4: 5.4.149-hardened1 -> 5.4.150-hardened1 2021-10-01 04:17:10 +00:00
TredwellGit dd93aec4c4 linux/hardened/patches/5.14: 5.14.8-hardened1 -> 5.14.9-hardened1 2021-10-01 04:17:09 +00:00
TredwellGit f178ff4a04 linux/hardened/patches/5.10: 5.10.69-hardened1 -> 5.10.70-hardened1 2021-10-01 04:17:08 +00:00
Maximilian Bosch 7d890267d1
Merge pull request #139665 from Ma27/drop-linux-5.13 
linux_5_13: drop
 2021-09-29 13:10:10 +02:00
Maximilian Bosch 01eb8ec98a
linux_5_13: drop 
5.13.19 was the last 5.13 release and the version is now EOL[1].

[1] https://lwn.net/Articles/869747/
 2021-09-27 23:29:53 +02:00
TredwellGit a92a208a9d linux/hardened/patches/5.4: 5.4.148-hardened1 -> 5.4.149-hardened1 2021-09-27 20:00:41 +00:00
TredwellGit 05ed561fb6 linux/hardened/patches/5.14: 5.14.7-hardened1 -> 5.14.8-hardened1 2021-09-27 20:00:40 +00:00
TredwellGit c4ea02fc5c linux/hardened/patches/5.10: 5.10.68-hardened1 -> 5.10.69-hardened1 2021-09-27 20:00:39 +00:00
TredwellGit 9e78068b04 linux/hardened/patches/4.19: 4.19.207-hardened1 -> 4.19.208-hardened1 2021-09-27 20:00:38 +00:00
TredwellGit 1e05c4eae9 linux/hardened/patches/4.14: 4.14.247-hardened1 -> 4.14.248-hardened1 2021-09-27 20:00:37 +00:00
TredwellGit bb21f231cf linux/hardened/patches/5.4: 5.4.147-hardened1 -> 5.4.148-hardened1 2021-09-26 17:03:30 +00:00
TredwellGit 5b71d92f9a linux/hardened/patches/5.14: 5.14.6-hardened1 -> 5.14.7-hardened1 2021-09-26 17:03:29 +00:00
TredwellGit 34fe5d827c linux/hardened/patches/5.10: 5.10.67-hardened1 -> 5.10.68-hardened1 2021-09-26 17:03:28 +00:00
TredwellGit b754a3c355 linux/hardened/patches/4.19: 4.19.206-hardened1 -> 4.19.207-hardened1 2021-09-26 17:03:27 +00:00
TredwellGit 7b29a72e54 linux/hardened/patches/4.14: 4.14.246-hardened1 -> 4.14.247-hardened1 2021-09-26 17:03:26 +00:00
TredwellGit b8b772a1da linux/hardened/patches/5.14: 5.14.5-hardened1 -> 5.14.6-hardened1 2021-09-20 21:41:39 +00:00
TredwellGit a41022ed40 linux/hardened/patches/5.13: 5.13.18-hardened1 -> 5.13.19-hardened1 2021-09-20 21:41:38 +00:00
TredwellGit 4a9ffb82ae linux/hardened/patches/5.10: 5.10.66-hardened1 -> 5.10.67-hardened1 2021-09-20 21:41:37 +00:00
ajs124 36e21638f5 linux/hardened/patches/5.4: 5.4.146-hardened1 -> 5.4.147-hardened1 2021-09-17 09:02:31 -04:00
ajs124 9f34448a98 linux/hardened/patches/5.14: 5.14.4-hardened1 -> 5.14.5-hardened1 2021-09-17 09:02:31 -04:00
ajs124 7c04d2e390 linux/hardened/patches/5.13: 5.13.17-hardened1 -> 5.13.18-hardened1 2021-09-17 09:02:31 -04:00
ajs124 031afe4faa linux/hardened/patches/5.10: 5.10.65-hardened1 -> 5.10.66-hardened1 2021-09-17 09:02:31 -04:00
TredwellGit 00c500e9fc linux/hardened/patches/5.4: 5.4.144-hardened1 -> 5.4.146-hardened1 2021-09-16 14:06:36 +00:00
TredwellGit 60b7113164 linux/hardened/patches/5.14: 5.14.2-hardened1 -> 5.14.4-hardened1 2021-09-16 14:06:35 +00:00
TredwellGit a8de1dcd2b linux/hardened/patches/5.13: 5.13.15-hardened1 -> 5.13.17-hardened1 2021-09-16 14:06:34 +00:00
TredwellGit 48e902a2ef linux/hardened/patches/5.10: 5.10.63-hardened1 -> 5.10.65-hardened1 2021-09-16 14:06:33 +00:00
Tim Steinbach 820d68d2dc
linux/hardened/patches/5.14: init at 5.14.2-hardened1 2021-09-10 05:20:10 -04:00
Tim Steinbach 02b5c3b291
linux/hardened/patches/5.13: 5.13.14-hardened1 -> 5.13.15-hardened1 2021-09-10 05:20:09 -04:00
Tim Steinbach 3fe64b3728
linux/hardened/patches/5.10: 5.10.62-hardened1 -> 5.10.63-hardened1 2021-09-10 05:20:08 -04:00
Bernardo Meurer abfa8098ac
linux_5_13_hardened: 5.13.13 -> 5.13.14 2021-09-07 11:30:36 -07:00
Bernardo Meurer 1aba1d891f
linux_5_10_hardened: 5.10.61 -> 5.10.62 2021-09-07 11:30:35 -07:00
Bernardo Meurer 8169d9283e
linux_5_4_hardened: 5.4.143 -> 5.4.144 2021-09-07 11:30:34 -07:00
Bernardo Meurer 1c0e5d13a9
linux_4_19_hardened: 4.19.205 -> 4.19.206 2021-09-07 11:29:21 -07:00
Bernardo Meurer 17681be1d3
linux_4_14_hardened: 4.14.245 -> 4.14.246 2021-09-07 11:28:38 -07:00
Tim Steinbach d90b2fc264 linux-hardened: Fix update script 2021-08-27 12:24:48 -04:00
TredwellGit 4d8a8abb33 linux/hardened/patches/5.4: 5.4.142-hardened1 -> 5.4.143-hardened1 2021-08-27 12:24:08 -04:00
TredwellGit 2c9124efdb linux/hardened/patches/5.13: init at 5.13.13-hardened1 2021-08-27 12:24:08 -04:00
TredwellGit 2114075986 linux/hardened/patches/5.10: 5.10.60-hardened1 -> 5.10.61-hardened1 2021-08-27 12:24:08 -04:00
TredwellGit 3e58b9716e linux/hardened/patches/4.19: 4.19.204-hardened1 -> 4.19.205-hardened1 2021-08-27 12:24:08 -04:00