Commit graph

55 commits

Author SHA1 Message Date
Mikhail Novosyolov
db22b89247 Update patches and configs for 5.10.47 2021-07-01 00:12:29 +03:00
Mikhail Novosyolov
8444dbd85f Tune kernel interactivity
Change PREEMPT to PREEMPT_VOLUNTARY: it is a more in the middle interactivity which should be OK for both servers and desktops, Void Linux and Ubuntu have it. Previous value was too much preemption.
2021-02-23 14:57:41 +03:00
Mikhail Novosyolov
dde32b09b0 Disable support of libc5 (pre-glibc)
Nobody needs it. It is just an unmaintained potential security hole.
2021-02-23 14:31:45 +03:00
Mikhail Novosyolov
3bae1ac77e Enable accessibility (e.g. for readers of console output for blind users) 2021-02-23 13:48:54 +03:00
Mikhail Novosyolov
02d3e4d146 Virtio as module (no need to make it built in), enable VirtualBox guest modules 2021-02-23 13:28:34 +03:00
Mikhail Novosyolov
ec030c1652 Tune SND_HDA_PREALLOC_SIZE
Value 64 makes sense only for some not needed backwards compatibility,
modern default is 0, see https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/sound/hda/Kconfig?id=c31427d0d21e198c74d5d92082c4b8194b257f82 ("ALSA: hda: No preallocation on x86 platforms")

Kconfig recommends value 2048 for systems with PulseAudio, set it on non-x86 arches (see commit above, it sets 0 only for x86).
2021-02-23 12:42:24 +03:00
Mikhail Novosyolov
dd4314d2c8 Disable SOF_NOCODEC which prevented audio from working properly by loading nocodec module (as documented, this option just must not be enabled in distro kernels, as written in Kconfig) 2021-02-23 01:37:59 +03:00
Mikhail Novosyolov
8519b1a444 Remake i586 config
Previous commit removed removing CONFIG_64BIT=y, but actually the config for i586 was incorrect because of that config value being set. Regenerated it with `setarch i386 make oldconfig`.
2020-12-30 21:16:28 +03:00
Mikhail Novosyolov
9f71e1f99e Minify build-time changes of configs, ship a config for UML, include all configs into SRPM 2020-12-30 19:56:25 +03:00
Mikhail Novosyolov
d23f37a9c9 upd: 5.10.3 -> 5.10.4, update configs, set more place for additional certificates (just test) 2020-12-30 18:12:31 +03:00
Mikhail Novosyolov
199aa73b37 Tune kernel config:
* disable Atom ISP as recommended by RussianNeuroMancer because it does not make cameras work on x86 Intel-based tablets where cameras are connected on i2c bus, but makes the camera consome power without working
* enable zswap by default and use the default allocator as in Arch Linux where zswap is enabled by default
  https://wiki.archlinux.org/index.php/Zswap
* tune values of sysctls from le9 patch to make it have at least some effect on typical desktop and server systems but avoid too agressive OOM killer on systems with 2 GB RAM and less where OOM killer kills too many process
  See discussion and my comments in the thread https://www.linux.org.ru/news/kernel/16052362
* remove not used variant of the patch which did not have any effect
2020-12-27 15:53:42 +03:00
Mikhail Novosyolov
1466db4534 Update configs
Update existing x86 configs manually
Make an arm64 config based on them instead on the old one which was temporary copypasted from ALT Linux

In most cases I answered to `make ARCH=xxx defconfig` like this:
N/y -> Y
N/m(/y) -> M
Y/n(/m) -> Y
M/n(/y) -> M
But did not enable odd debug.

Probably too much hardware is enabled on arm64.
2020-12-22 00:21:19 +03:00
Mikhail Novosyolov
7a2a68a35a Enable shadows in AUFS
Requested by betcher@ / MagOS

aarch64 config is currently not in sync with x86, it will be synced later.
2020-12-03 14:24:26 +03:00
Mikhail Novosyolov
7b7e171726 Do not autoactivate INTEGRITY_TRUSTED_KEYRING by IMA_TRUSTED_KEYRING 2020-11-13 03:04:16 +03:00
Mikhail Novosyolov
14cd264aa2 allow to read IMA policy at runtime, keep loading x509 by kernel offed and keep changing IMA policy after initial load offed (initrd or systemd load the policy) 2020-11-13 03:04:04 +03:00
Mikhail Novosyolov
cb3433c5ce Enable some IMA integrity parts, configs of x86_64 and i586 were different 2020-11-05 02:42:36 +03:00
Mikhail Novosyolov
b021593695 Enable -fstack-protector(-strong)
It is a rather low cost (in performance terms) additional security
and is useful for e.g. certified systems.
As the performance difference is not expected to be even measurable well enough,
let's enable is everywhere. We do not need to support GCC 5 any more.

https://lwn.net/Articles/584225/
https://zatoichi-engineer.github.io/2017/10/04/stack-smashing-protection.html
2020-06-23 12:48:16 +03:00
Mikhail Novosyolov
5f08ed1263 Add AltHa LSM Module
TODO: https://bugzilla.altlinux.org/show_bug.cgi?id=38225 has to be resolved
2020-03-16 23:58:42 +03:00
Mikhail Novosyolov
b320b958ee Build UML (User Mode Linux) 2020-03-13 20:35:12 +03:00
Evgenii Shatokhin
34e76862b9 Updated configs and AUFS patch for kernel 5.4.3
AUFS patch was rediffed manually due to missing upstream version for kernel 5.4
2019-12-16 16:09:18 +03:00
Evgenii Shatokhin
4ca3b2aeb5 Updated to version 5.3.1 2019-09-24 18:31:28 +03:00
Evgenii Shatokhin
d0260ef581 Updated to version 5.2.2 2019-07-22 13:30:14 +03:00
Evgenii Shatokhin
2dee2c0e88 Revisited configs to support kernel 5.1.x 2019-07-21 21:44:03 +03:00
Evgenii Shatokhin
27010ed411 Updated to version 5.0.7
AUFS was updated to version "4.20.4+-20190311" as well.
2019-04-09 18:56:43 +03:00
Evgenii Shatokhin
847ae8701e Updated to 4.20.10 - the first take; sorted the configs
AUFS was updated to "4.20.4+-20190211" in the process.

As for the sorted entries in the config files - this helps a lot during
rebases to the newer stable kernel branches.

Signed-off-by: Evgenii Shatokhin <eshatokhin@virtuozzo.com>
2019-02-23 11:44:19 +03:00
Evgenii Shatokhin
c5e1469ee5 Removed nrj-laptop flavour
It was long since obsolete but sometimes difficult to maintain.
Now that the common Ubuntu-like kernels are the main ones in ROSA, one
common flavour of stable-based kernels is enough.

Stable-based kernels are often inferior to Ubuntu-based ones in terms of
stability, performance and hardware support. Now they are only intended for
debugging and experiments with some new features.

Signed-off-by: Evgenii Shatokhin <eshatokhin@virtuozzo.com>
2019-02-20 09:46:06 +03:00
Evgenii Shatokhin
cad40ee513 Updated to version 4.19.6
Besides the upstream update, I have disabled building of nrj-laptop
kernels here.

Now that the main kernels used in ROSA are based on the sources from
Ubuntu, the stable-based kernels like this one are mostly intended for
debugging. No need to build nrj-laptop flavour each time. Let us make
things a bit easier for other ABF users at least.

Signed-off-by: Evgenii Shatokhin <eshatokhin@virtuozzo.com>
2018-12-02 20:05:14 +03:00
Evgenii Shatokhin
49aef36843 Updated to version 4.18.6 2018-09-08 20:07:02 +03:00
Evgenii Shatokhin
16b61b0a03 Updated to version 4.17.4 2018-07-06 22:31:19 +03:00
Evgenii Shatokhin
ec37d8a7d6 Updated to version 4.16.3 2018-04-22 16:28:32 +03:00
Evgenii Shatokhin
cc4817f8f8 Updated to version 4.15.2
Note: flex and bison are now required for the kernel build
unconditionally.
2018-02-11 22:31:37 +03:00
Evgenii Shatokhin
dbe92a9eb3 config: unwinder-related options have been renamed upstream 2018-01-10 22:34:38 +03:00
Evgenii Shatokhin
5ab5a294b2 Updated to version 4.14.1 2017-11-23 00:18:59 +03:00
Evgenii Shatokhin
40b56bd835 Updated to version 4.13.1 2017-09-11 18:31:26 +03:00
Evgenii Shatokhin
e59ce8d00a amdgpu: enable experimental support for "Southern Islands" series of GPUs
Ubuntu already has it enabled in its kernels 4.12.0-x.
2017-09-11 12:56:11 +03:00
Evgenii Shatokhin
c2d7aa28fb Prepared the files for the kernel 4.12.2, the first take 2017-07-16 22:50:33 +03:00
Evgenii Shatokhin
c3fbc1a79e Updated to version 4.11.3, the first take 2017-06-04 16:27:41 +03:00
Evgenii Shatokhin
a70892aa21 Restore CONFIG_FW_LOADER_USER_HELPER=y
It was erroneously removed before.
2017-03-22 17:48:49 +03:00
Evgenii Shatokhin
e8471b42b2 Updated to 4.10.x (4.10.4 atm), the first take
While at it, made the configs a bit closer to those from Ubuntu:
* disabled IDE drivers which are now barely maintained anyway;
* disabled some debugging facilities (verboseness of some drivers,
  etc.);
* made some often used modules like vfat, fuse, ata_piix, etc.,
  built-in.
* and so forth.
2017-03-19 16:56:31 +03:00
Evgenii Shatokhin
1d3485b8be Set the missing config options 2017-03-12 17:43:09 +03:00
Evgenii Shatokhin
3663fa6899 Allow to set the default loglevel threshold for the console at build time
...And set it to 3, which should only allow to print the messages with
KERN_EMERG, KERN_ALERT and KERN_CRIT levels. This should make the boot
process less noisy.

Can be overridden with loglevel=n boot option.
2017-03-12 17:09:04 +03:00
Evgenii Shatokhin
255b2cc7f4 Temporarily (?) disable ASLR in the 32-bit kernels
ASLR seems to cause hibernate-related regressions on at least one test
system: https://linux-hardware.org/index.php?probe=e6a06c64c7

When the system tries to resume, it automatically reboots after the
hibernation image has been loaded into memory.

git bisect pointed to the following commit as the first "bad" one:

  commit 65fe935dd2387a4faf15314c73f5e6d31ef0217e
  Author: Kees Cook <keescook@chromium.org>
  Date:   Mon Jun 13 15:10:02 2016 -0700

      x86/KASLR, x86/power: Remove x86 hibernation restrictions

Before this commit, KASLR was disabled (unless enabled explicitly) if
the system supported hibernation.

Let us just disable KASLR for now in the 32-bit kernels - not a big deal
for home & office use, I suppose.
2017-03-09 15:07:34 +03:00
Evgenii Shatokhin
b23d434eec Make it explicit that ext4 is used for ext2 and ext3 now 2017-01-21 18:33:36 +03:00
Evgenii Shatokhin
79fd81ffd1 Adapted the configuration files for version 4.9.0 2017-01-06 21:08:06 +03:00
Evgenii Shatokhin
72f5272106 Enable encryption support in ext4 2016-11-16 16:09:23 +03:00
Evgenii Shatokhin
0260460708 Updated to version 4.8.4, the first take
Besides the upstream kernel update to 4.8.x, the following changes were
made:

* BFQ was updated to v8r4
* AUFS was updated to version 4.8-20161010
2016-10-23 22:01:06 +03:00
Evgenii Shatokhin
156e7930a5 Disable FW_LOADER_USER_HELPER_FALLBACK
It causes problems with WiFi:
http://forum.rosalab.ru/viewtopic.php?f=53&t=5372&p=76294#p76294
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1398458
2016-09-18 22:39:48 +03:00
Evgenii Shatokhin
779aaf6307 Enabled support for SMB2, SMB3 as well as FS cache for CIFS 2016-09-05 18:00:59 +03:00
Evgenii Shatokhin
1ecfcf2705 Made "schedutil", "conservative" and "powersave" CPU governors built-in
They were built as cpufreq_* modules before, unlike "ondemand" and such.
Making them all builtin makes it easier experimenting with them.
2016-08-31 16:34:11 +03:00
Evgenii Shatokhin
e7a7e32ae0 Revisited the patches and configs for the kernel 4.7.x 2016-08-23 16:24:13 +03:00