Tim Steinbach
b13a6d5720
linux: 4.14-rc1 -> 4.14-rc2
2017-09-25 09:24:23 -04:00
John Ericson
f8a18cd4cf
misc pkgs: Manual fixup pkgconfig nativeBuildInputs after sed
...
Importantly, this included regenerating pkgs/servers/x11/xorg, to
clobber the old sed.
2017-09-21 15:49:54 -04:00
John Ericson
531e4b80c9
misc pkgs: Basic sed to get fix pkgconfig and autoreconfHook buildInputs
...
Only acts on one-line dependency lists.
2017-09-21 15:49:53 -04:00
Tim Steinbach
7d3d276a16
linux-copperhead: 4.13.2.a -> 4.13.3.a
2017-09-21 14:37:44 -04:00
Tim Steinbach
eab480ac3d
linux: 4.13.2 -> 4.13.3
2017-09-20 08:36:27 -04:00
Tim Steinbach
726765404b
linux: 4.12.13 -> 4.12.14
2017-09-20 08:36:13 -04:00
Tim Steinbach
7cfa6895e8
linux: 4.9.50 -> 4.9.51
2017-09-20 08:35:44 -04:00
Jan Malakhovski
8525b78d05
linuxPackages: properly propagate features and extraConfig
...
`kernel.override { features = ... }` didn't work before, now it works as
expected.
2017-09-17 16:33:47 +02:00
Tim Steinbach
c8f43edaf5
linux: 4.13-rc7 -> 4.14-rc1
2017-09-17 09:11:04 -04:00
Tim Steinbach
08229bba30
linux-copperhead: 4.13.1.b -> 4.13.2.a
2017-09-16 08:57:45 -04:00
Tuomas Tynkkynen
9a6aa33422
kernel: Disable DEBUG_INFO
...
Since we don't have a split debug info output yet, don't waste time
writing several gigabytes of debug info that's all going to be stripped
out at the end.
This change only affects Aarch64 (where some joker has enabled it in the
architecture defconfig) and is a no-op on the others.
2017-09-16 15:09:10 +03:00
Jan Malakhovski
62fa45eac5
linuxPackages: hardened-config: enable DEBUG_PI_LIST
2017-09-16 13:14:05 +02:00
Jan Malakhovski
c345761c13
linuxPackages: hardened-config: check kernelArch, not system
2017-09-16 13:14:04 +02:00
Jan Malakhovski
616a7fe237
linuxPackages: hardened-config: disable BUG_ON_DATA_CORRUPTION for older kernels
...
They don't support it.
2017-09-16 13:14:03 +02:00
Joachim Fasting
dd170cd5df
hardened-config: build with fortify source
2017-09-16 00:31:25 +02:00
Joachim Fasting
9a763f8f59
hardened-config: enable the randstruct plugin
2017-09-16 00:31:23 +02:00
Joachim Fasting
edd0d2f2e9
hardened-config: additional refcount checking
2017-09-16 00:31:17 +02:00
Tim Steinbach
43b3029a4a
linux: 4.9.49 -> 4.9.50
2017-09-14 08:40:13 -04:00
Tim Steinbach
537da6cb50
linux: 4.12.12 -> 4.12.13
2017-09-14 08:40:13 -04:00
Tim Steinbach
232fc6a806
linux: 4.13.1 -> 4.13.2
2017-09-14 08:40:13 -04:00
Tim Steinbach
87fa247867
linux-copperhead: 4.13.1.a -> 4.13.1.b
2017-09-13 08:20:58 -04:00
Tim Steinbach
114a2bcc80
linux-copperhead: 4.13.a -> 4.13.1.a
2017-09-10 19:21:31 -04:00
Tim Steinbach
80486ba971
linux: 4.13 -> 4.13.1
2017-09-10 12:13:15 -04:00
Tim Steinbach
9c723d4b2b
linux: 4.12.11 -> 4.12.12
2017-09-10 12:13:15 -04:00
Tim Steinbach
1ab2b06a36
linux: 4.9.48 -> 4.9.49
2017-09-10 12:13:15 -04:00
Tim Steinbach
dc8b228a89
linux: 4.9.47 -> 4.9.48
2017-09-07 10:31:02 -04:00
Tim Steinbach
a1912c9eb4
linux: 4.12.10 -> 4.12.11
2017-09-07 10:27:39 -04:00
Jörg Thalheim
44f93731d6
linux_chromiumos_3_18: remove kernel due lack of maintainer/breakage
...
There is no maintainer for this package, probably not many users.
It requires effort to fix all third-party modules for this old kernel
versions. It might contain unpatched security holes.
For Pixel chromebooks, we have the samus-kernel.
Apart from that https://github.com/GalliumOS/linux might be a good choice.
2017-09-05 14:42:23 +02:00
Tim Steinbach
967077537b
linux-copperhead: 4.12.10.a -> 4.13.a
2017-09-04 11:09:29 -04:00
Tim Steinbach
c1e2a0b6f4
linux: Add 4.13
2017-09-03 19:41:44 -04:00
Tim Steinbach
2c301b1b48
linux: 4.9.46 -> 4.9.47
...
(cherry picked from commit 27c8378c0c81aa17aef615615421aa5de3d8246b)
2017-09-02 11:17:47 -04:00
Joachim Fasting
697cbbc617
kernelPatches.grsecurity_testing: remove
2017-09-02 15:56:49 +02:00
davidak
4134db36d0
linux-testing-bcachefs: init at 4.11.2017.08.23
2017-08-31 05:39:17 -05:00
Tim Steinbach
4c91e32da6
linux-copperhead: 4.12.9.a -> 4.12.10.a
2017-08-30 13:17:51 -04:00
Tim Steinbach
fab79d08e9
linux: 4.9.45 -> 4.9.46
2017-08-30 07:59:42 -04:00
Tim Steinbach
a27c6c7374
linux: 4.12.9 -> 4.12.10
2017-08-30 07:59:42 -04:00
Tuomas Tynkkynen
ff3f6f38c4
linux_rpi: 1.20170515 -> 1.20170811
2017-08-29 02:37:52 +03:00
Tim Steinbach
163b3e853b
linux: 4.13-rc6 -> 4.13-rc7
2017-08-28 11:59:37 -04:00
Tim Steinbach
bebaf083cd
linux-copperhead: 4.12.8.a -> 4.12.9.a
2017-08-27 09:43:23 -04:00
Tim Steinbach
9b9d0cc06b
linux: 4.9.44 -> 4.9.45
2017-08-26 09:50:02 -04:00
Tim Steinbach
d23bed7cc6
linux: 4.12.8 -> 4.12.9
2017-08-26 09:47:57 -04:00
Tim Steinbach
cd85a704a5
linux: 4.13-rc4 -> 4.13-rc6
2017-08-22 03:23:30 -04:00
Frederik Rietdijk
6bbc3a0b24
Merge commit '3b29468313bc8604fe8f85c8d9316fd276d3985c' into HEAD
2017-08-21 04:44:40 +02:00
Vladimír Čunát
7c7c83e233
buildLinux: allow overriding stdenv on each call
2017-08-20 08:24:52 +02:00
Tim Steinbach
7209ed6d4b
linux-copperhead: 4.12.7.a -> 4.12.8.a
2017-08-18 15:47:03 -04:00
Tim Steinbach
9281b05c7f
linux: 4.12.7 -> 4.12.8
2017-08-18 15:33:53 -04:00
Tim Steinbach
a5f01aa745
linux: 4.9.43 -> 4.9.44
2017-08-18 15:30:37 -04:00
Tim Steinbach
b94210b066
linux-copperhead: 4.12.5.a -> 4.12.7.a
2017-08-14 12:51:30 -04:00
Frederik Rietdijk
13bbaee21d
Merge pull request #27881 from mimadrid/fix/http-https
...
Update homepage attributes: http -> https
2017-08-13 21:53:20 +02:00
Tim Steinbach
5c29873e99
linux: 4.9.42 -> 4.9.43
2017-08-13 15:42:15 -04:00
Tim Steinbach
59e34685da
linux: 4.12.6 -> 4.12.7
2017-08-13 15:42:15 -04:00
Joachim Fasting
345e0e6794
hardened-config: enable read-only LSM hooks
...
Implies that SELinux can no longer be disabled at runtime (only at boot
time, via selinux=0).
See https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dd0859dccbe291cf8179a96390f5c0e45cb9af1d
2017-08-11 23:27:58 +02:00
Robin Gloster
05b8cae9ec
linux: remove unused kernel patches
2017-08-11 19:13:09 +02:00
Robin Gloster
9f3f575ab3
linux_4_4: remove
...
Support ends in Feb 2018
2017-08-11 19:13:09 +02:00
Robin Gloster
0eb9c5bd42
linux_3_10: remove
...
Support ends in Oct 2017
2017-08-11 19:13:08 +02:00
Tim Steinbach
47d9b48e4d
linux: 4.12.5 -> 4.12.6
2017-08-11 12:14:53 -04:00
Tim Steinbach
f2d420e4c9
linux: 4.9.41 -> 4.9.42
2017-08-11 12:10:10 -04:00
Tim Steinbach
f46f98ad31
Revert 0cf0d7186a
...
Order common kernel config by functionality
See #27949
2017-08-07 17:34:10 -04:00
Tim Steinbach
fa10497834
Merge pull request #27684 from gnidorah/bfq
...
linux: BFQ Group Scheduling support
2017-08-07 11:58:45 -04:00
Tim Steinbach
06af1df857
linux: 4.13-rc3 -> 4.13-rc4
2017-08-07 11:40:01 -04:00
Tim Steinbach
ea2a10e143
linux: 4.4.79 -> 4.4.80
2017-08-07 11:35:42 -04:00
Tim Steinbach
4825e4818b
linux: 4.9.40 -> 4.9.41
2017-08-07 11:32:26 -04:00
gnidorah
dc21f1ad65
linux: BFQ Group Scheduling support
2017-08-07 10:12:21 +03:00
Tim Steinbach
1ec7242bc2
linux-copperhead: 4.12.4.a -> 4.12.5.a
2017-08-06 22:04:46 -04:00
Tim Steinbach
ff9479cd54
linux: 4.12.4 -> 4.12.5
2017-08-06 19:22:15 -04:00
Tim Steinbach
0cf0d7186a
linux-common-config: Refactor, clean up
2017-08-06 19:17:30 -04:00
Joachim Fasting
f963014829
linux-hardened-config: various fixups
...
Note
- the kernel config parser ignores "# foo is unset" comments so they
have no effect; disabling kernel modules would break *everything* and so
is ill-suited for a general-purpose kernel anyway --- the hardened nixos
profile provides a more flexible solution
- removed some overlap with the common config (SECCOMP is *required* by systemd;
YAMA is enabled by default).
- MODIFY_LDT_SYSCALL is guarded by EXPERT on vanilla so setting it to y breaks
the build; fix by making it optional
- restored some original comments which I feel are clearer
2017-08-06 23:38:07 +02:00
Heitham Omar
5ac00265a8
linux-common-config: add CONFIG_HOTPLUG_PCI_ACPI
2017-08-06 20:41:28 +02:00
Tim Steinbach
ff10bafd00
linux: Expand hardened config
...
Based on latest recommendations at
http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
2017-08-06 09:58:02 -04:00
Robin Gloster
2b4811887a
kernel: add IP_NF_TARGET_REDIRECT
2017-08-04 08:26:09 +02:00
mimadrid
09e0cc7cc7
Update homepage attributes: http -> https
...
Homepage link "http://.../ " is a permanent redirect to "https://.../ " and should be updated
https://repology.org/repository/nix_stable/problems
2017-08-03 11:56:15 +02:00
Tuomas Tynkkynen
3db9a2bdff
linux_rpi: 1.20170427 -> 1.20170515
2017-07-31 19:47:23 +03:00
aszlig
979817d153
linux-testing: 4.13-rc2 -> 4.13-rc3
...
Tested via building the linux_testing attribute, but didn't test it at
runtime (yet).
Diffed unpacked tarball against my local git clone and the contents
match.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2017-07-31 09:39:42 +02:00
Tim Steinbach
a918521c1e
linux-copperhead: 4.12.3.a -> 4.12.4.a
2017-07-28 17:54:37 -04:00
Tim Steinbach
5a6b5b8daf
linux: 4.4.78 -> 4.4.79
2017-07-28 10:02:29 -04:00
Tim Steinbach
88c0f67ded
linux: 4.9.39 -> 4.9.40
2017-07-28 10:00:25 -04:00
Tim Steinbach
f43c445824
linux: 4.12.3 -> 4.12.4
2017-07-28 09:55:48 -04:00
Tim Steinbach
1dd6e7dcbc
linux: 4.13-rc1 -> 4.13-rc2
2017-07-24 09:50:32 -04:00
Jörg Thalheim
887570883e
perf: remove binutils patch by wrapper
...
starting with linux 4.12 our patch no longer applied. In order to
avoid having to maintain patches for different linux kernels it is
easier to use a wrapper instead.
2017-07-23 15:18:02 +01:00
Tim Steinbach
869bb2e486
linux-copperhead: 4.12.2.a -> 4.12.3.a
2017-07-22 19:08:02 -04:00
Tim Steinbach
ba9275da88
linux: Remove 4.11
...
4.11.x has been EOL'd
2017-07-21 07:33:14 -04:00
Tim Steinbach
98ad0f4dab
linux: 4.12.2 -> 4.12.3
2017-07-21 07:28:24 -04:00
Tim Steinbach
232f497169
linux: 4.9.38 -> 4.9.39
2017-07-21 07:25:50 -04:00
Tim Steinbach
5181d7568f
linux: 4.4.77 -> 4.4.78
2017-07-21 07:23:12 -04:00
Al Zohali
0b3d29d4ac
linux_samus_4_12: init at 4.12.2
...
Co-authored-by: Nikolay Amiantov <ab@fmap.me>
fixes #26038
2017-07-18 23:31:18 +01:00
Tim Steinbach
df929d6216
linux-copperhead: 4.12.1.a -> 4.12.2.a
2017-07-15 19:44:12 -04:00
Tim Steinbach
b103e9317a
linux-testing: 4.12-rc7 -> 4.13-rc1
2017-07-15 19:30:44 -04:00
Tim Steinbach
81b993369c
linux: 4.4.76 -> 4.4.77
2017-07-15 19:25:42 -04:00
Tim Steinbach
b04858db1b
linux: 4.9.37 -> 4.9.38
...
Remove temporary patches to perf as well
2017-07-15 19:22:07 -04:00
Tim Steinbach
ccec16579d
linux: 4.11.10 -> 4.11.11
2017-07-15 19:17:06 -04:00
Tim Steinbach
c5ef98bb34
linux: 4.12.1 -> 4.12.2
2017-07-15 19:14:44 -04:00
Tim Steinbach
954c66983d
perf: Apply patch for offline kernels
...
As per https://lkml.org/lkml/2017/7/13/314 , perf is broken in 4.9.36 and 4.9.37
Patches in this commit are taken from
https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/commit/?id=39f4f2c018bd831c325e11983f8893caf72fd9eb
This will allow perf to build again and should be included in a future 4.9.x release,
allowing the custom patching to be removed again
2017-07-14 20:07:16 -04:00
Tuomas Tynkkynen
42395a191b
kernel-config: Disable Xen on non-x86
...
There's an upstream build failure on ARM (not directly related to Xen
but rather some other config options it enables). The xen package is
x86_64-only anyways.
2017-07-13 20:12:50 +03:00
Tim Steinbach
6fda535869
linux-copperhead: Fix modDirVersion
2017-07-13 09:00:44 -04:00
Tim Steinbach
45a2534459
linux-copperhead: 4.12.e -> 4.12.1.a
2017-07-13 08:40:08 -04:00
Tim Steinbach
6131b4d52d
linux: 4.12 -> 4.12.1
2017-07-13 08:36:50 -04:00
Tim Steinbach
24de0bad42
linux: 4.11.9 -> 4.11.10
2017-07-13 08:34:51 -04:00
Tim Steinbach
6da222918e
linux: 4.9.36 -> 4.9.37
2017-07-13 08:30:47 -04:00
Tim Steinbach
1434128a18
linux-copperhead: 4.12.d -> 4.12.e
2017-07-11 08:22:56 -04:00
Tim Steinbach
d38656b3c3
linux-copperhead: 4.12.c -> 4.12.d
2017-07-09 18:20:14 -04:00
