Commit Graph

53 Commits

Author SHA1 Message Date
Peter Müller
893427ad8b linux: Update rootfiles
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-04 12:11:53 +00:00
Peter Müller
ef439b6871 linux: Update rootfiles to reflect dropped support of dprintk
See: 883e29630c

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 10:54:07 +00:00
Peter Müller
de7a483f6a linux: Update aarch64 rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-02 15:22:15 +00:00
Peter Müller
7caecf45fb linux: Give CONFIG_RANDOMIZE_BASE on aarch64 another try
Quoted from https://capsule8.com/blog/kernel-configuration-glossary/:

> Significance: Critical
>
> In support of Kernel Address Space Layout Randomization (KASLR) this randomizes
> the physical address at which the kernel image is decompressed and the virtual
> address where the kernel image is mapped as a security feature that deters
> exploit attempts relying on knowledge of the location of kernel code internals.

We tried to enable this back in 2020, and failed. Since then, things
may have been improved, so let's give this low-hanging fruit another
try.

Fixes: #12363
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-01 10:20:20 +00:00
Peter Müller
861080834d linux: Update ARM rootfiles
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-29 17:09:56 +00:00
Peter Müller
5991f39282 linux: Update rootfiles to reflect /dev mount option change
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-27 17:30:47 +00:00
Peter Müller
d9aece2af9 linux: Update rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-23 06:44:09 +00:00
Peter Müller
d819a62b14 linux: Update rootfiles
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-13 20:45:51 +00:00
Peter Müller
db8639bbfa linux: Update to 5.15.46
Please refer to https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.46
for the changelog of this version.

Due to operational constraints, ARM rootfile changes are simulated.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-06-13 15:38:42 +00:00
Arne Fitzenreiter
9fa01e4276 kernel: update to 5.15.35
in kernel 5.15.32 the driver for ATH9K wlan cards is unstable.
This is one of the most used cards so we need this update before
releasing core167 final.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-04-22 12:48:32 +00:00
Arne Fitzenreiter
f1b0673572 kernel: arm rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-04-10 09:42:16 +02:00
Peter Müller
3f65e4996b kernel: Align rootfile again due to forgotten hardening patch
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-06 20:18:22 +00:00
Peter Müller
4fb7569811 linux: Update rootfile to reflect kernel hardening changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-05 08:42:00 +00:00
Arne Fitzenreiter
a17f1fbbe2 kernel: update to 5.15.23
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-02-12 07:03:49 +00:00
Arne Fitzenreiter
f978b433e6 kernel: aarch64: enable armv8 optimized crypto
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-02-11 17:36:01 +00:00
Arne Fitzenreiter
70c57ed33e kernel: update to 5.15.21
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-02-06 14:09:43 +00:00
Arne Fitzenreiter
d68f875d61 kernel: enable support for compressed firmwares
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-01-28 14:44:03 +00:00
Arne Fitzenreiter
e385c965fa kernel: aarch64 enable KVM support
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-01-28 11:24:44 +00:00
Arne Fitzenreiter
521e8aa99d kernel: aarch64 enable ath5k wlan driver
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-20 23:38:06 +00:00
Arne Fitzenreiter
c460b2652d kernel: aarch64 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-11 18:18:49 +00:00
Arne Fitzenreiter
58f6264fa4 kernel: update to 5.10.71
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-10 06:46:25 +00:00
Arne Fitzenreiter
13e001f5c2 kernel: config for nanopi r2s
some drivers does nozt work as module so they are now compiled into
main kernel

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-08 19:54:29 +00:00
Arne Fitzenreiter
9d20b293b8 kernel: arm rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-26 08:40:32 +00:00
Arne Fitzenreiter
f696f419ad kernel: update to 5.10.46
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:40 +02:00
Arne Fitzenreiter
09951f8b0f kernel: aarch64: enable pcie-brcmstb and brcm2711-thermal for RPi4
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
663ab267ba kernel: update to 5.10.42
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
5235ab4817 kernel: update to 5.10.38
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
b75dd327fd kernel: update to 5.10.32
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
03b7752c80 kernel: update to 5.10.29
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
9d1bffe083 kernel: arm* disable alg modules
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
7d9d6e7b03 kernel: update aarch64 config and rootfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
10ce44b0c6 kernel: update to 4.14.232
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 11:58:42 +00:00
Michael Tremer
710b6ef1e8 Update the kernel's rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 11:13:24 +00:00
Arne Fitzenreiter
2e1bf458e2 kernel: update to 4.14.206
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-12 09:02:02 +01:00
Arne Fitzenreiter
0163c62dee kernel: aarch64: enable ahci
this is needed to boot on ESXi on arm.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:50:12 +00:00
Arne Fitzenreiter
383eefc0ae kernel: update aarch64 rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-09-18 05:28:26 +00:00
Arne Fitzenreiter
ce9f979c01 kernel: update to 4.14.195
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-08-31 06:58:32 +02:00
Arne Fitzenreiter
f3a59d63e2 kernel: update to 4.14.184
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-06-12 16:04:48 +02:00
Arne Fitzenreiter
a43b370411 kernel: update to 4.14.183
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-06-04 08:37:00 +02:00
Arne Fitzenreiter
ee9bc7c477 kernel: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-02-08 15:21:16 +01:00
Arne Fitzenreiter
bf671bb2ae kernel: update to 4.14.154
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-11-14 21:23:08 +00:00
Michael Tremer
951a9f9ba0 linux+iptables: Drop support for IMQ
This is no longer needed since we are using IFB now

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-21 18:58:08 +00:00
Arne Fitzenreiter
c27fdd8697 Revert "linux+iptables: Drop support for IMQ"
This reverts commit 59b9a6bd22.
2019-10-20 20:20:26 +00:00
Michael Tremer
59b9a6bd22 linux+iptables: Drop support for IMQ
This is no longer needed since we are using IFB now

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-10-14 18:02:55 +00:00
Arne Fitzenreiter
82c279a518 kernel: update to 4.14.127
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-06-18 18:41:19 +02:00
Michael Tremer
c7def60649 Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-06-03 09:20:05 +01:00
Michael Tremer
da636bd8b7 Update kernel rootfiles for aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-05-13 16:31:14 +01:00
Arne Fitzenreiter
5fa063f859 kernel: update to 4.14.112
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2019-04-17 22:30:19 +02:00
Arne Fitzenreiter
16c18024bb kernel: compress kernel modules with xz
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-11-18 14:30:14 +01:00
Arne Fitzenreiter
a834285d1b kernel: arm: enable chacha poly
fixes: #11855
todo: add rootfiles for arm 32-bit

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2018-09-15 15:58:13 +02:00