Compare commits

..
7 Commits
7 changed files with 483 additions and 163 deletions
+22 -15
View File
@@ -1,13 +1,16 @@
pkgbase = linux-kira-lts
pkgdesc = Kira LTS Linux
pkgver = 6.18.43
pkgver = 6.18.55
pkgrel = 1
url = https://www.kernel.org
arch = x86_64
makedepends = bzz-initrd
makedepends = bcachefs-tools
makedepends = bc
makedepends = binutils
makedepends = cpio
makedepends = dosfstools
makedepends = coreutils
makedepends = pax-utils
makedepends = gettext
makedepends = glibc
makedepends = libelf
@@ -30,9 +33,10 @@ pkgbase = linux-kira-lts
makedepends = python-yaml
makedepends = texlive-latexextra
options = !debug
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.43.tar.xz
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.43.tar.sign
source = https://github.com/koverstreet/bcachefs-tools/archive/refs/tags/v1.39.1.tar.gz
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.55.tar.xz
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.55.tar.sign
source = https://github.com/koverstreet/bcachefs-tools/archive/refs/tags/v1.39.6.tar.gz
source = https://dev.kira-linux.org/kira-linux/nyanit/archive/v0.2.1-1.tar.gz
source = 0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch
source = 0002-drm-amdgpu-avoid-memory-allocation-in-the-critical-code-path-v3.patch
source = 0003-drm-amdgpu-use-GFP_ATOMIC-instead-of-NOWAIT-in-the-critical-path.patch
@@ -41,24 +45,26 @@ pkgbase = linux-kira-lts
source = kira_disable_guest_vm.fragment
validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
sha256sums = a1aeb926c7c4a1564368200b1082e45bb958007682d804aff88abbc3a7a47b5d
sha256sums = f410638061a165c12f42ab871d2f3fcd525515359b5faeee80969cff84524df9
sha256sums = SKIP
sha256sums = 4c29a25036c5795f9ebe0dbc619c803b73447e8f938bd40e7f7ea223d038a38d
sha256sums = 102a17a6e163e210a1adca44977481ff6ec537d932556f598f8f72c2cd187163
sha256sums = 9c8e20c3d32174037b26fea4e936467ed9391284bf7ff4675ecf4a83fd820742
sha256sums = e5bda61fa4405571a0267cd8812329bb8a432a37efb50459461628d371849906
sha256sums = c31b8c0ace123f5c1a0012a1254272eea9ac9cdd0d3e5d538ca6b11830dd01b0
sha256sums = 0f482368b62c3cece941e2d3ba497bf322db59315df5c2f72500fc1318e4768e
sha256sums = 60a560c3c4324322dc97b6d4d75dea6182a17f6747b4a42054c053a99b1635df
sha256sums = a1f0001ec03f1f1d75d6f72165dc77b42145b3fc1c8de20afcd512c6c677482b
sha256sums = c6aa9877b0612805690d8abfc13c941530a11a7b56979d814e674c86c42ca0cf
b2sums = 434ba598863ac5ede162d7147a78884c2dc6090e8f0447f6368a681a0e7077143a0753c62f4ad6e1be8b971a46266bf00f3b3fe4218345483360bda86a3f855c
sha256sums = 189a5399a0959fe898acdaab62e2059cb4996175deebed64783671a4dc44ee4f
sha256sums = 0fe2d1da5cc93a4f1fc9cacdb02b4bed59cc0ea0ef1474a42ac2b2ad068f6690
sha256sums = 7427571bf433c71507749e356326bee4308359e15018809b7b7a332c31d2a611
b2sums = c329021f6ac359c07f3863c5493694330020540632a6b9a15033b3440dbef116d84a652c71cd3dd12fca680f5b49edaf568f841d087eb4a2c34b890a078b9672
b2sums = SKIP
b2sums = 7aa199260780c3867295a2bbb46badddd9e9ec84a1339c2d26ebc79048181c88cf96246c1025611c7608962f2efe95769850d836aa927803135fe7a0232a0bfb
b2sums = 6052a721ef9a7aa5887704f23657eab1794f8eb02781b4ddeeb0b7392e3bc1812f958a34d21b724073b5c29e2ed8d81726bb4e63f7fbb420c811e01c161c5296
b2sums = 05f25e60c491b7ef558d832addd44784db09170418f643ad341050dddb60a78fb9feb9fb47603cdd4a651eacf1b1cbf515bf37dadf84b8dfc2755c1eeead7c30
b2sums = 5b3597cab8b174ff41b3f17aae6d1376a155356f781542e2e176d66c5a6dee53f7a1db8e2b9540ce8246efac4e27476c882fc8cc8063f0f514ae09230b5aef0a
b2sums = a71f78bea42d158fc9383f2bbb985dafa71274d2032876b67f84602c8085b1c53f3d36965e54e5fdbab5c0d7537c98d917bd7743d3cf373c1dcb6da3bc19f4e7
b2sums = c9d4ec8fac86a9b6f0567c57f6d5be04d56f8efbc9dc1b183981dad38387d750b53c17fcdd295cb68a874bf50f81d117cfe94bd3a8d9e08e1918644ae8daa3e5
b2sums = 58484f0e3123a3a5eac2f00d1a892dd51492ebbfd1dfd01ac9f05deaf733dd9c7993845a905f22c1e655d8fe74d40fb6e11d786626bea89a990616846c561141
b2sums = 7951209de07fd31600d838f34ca00fca94384f71936d81a0d3c0b3bd5069b984be1de31715a43e3badc828e3bc4129bebe090661c57395e80471be0cbc1302c9
b2sums = 2d581d66fe4e4afe0158755f5ea0cd0df9765b63464cb81e2b9115a37230e4489f16526393c47009c4392e5de70d2d37e496f764ad89e214ec7010c5bbfbcfc1
b2sums = c0a6a394142c86874147fe266fbdde883fe979c638e0110647ee1d4e4fc69b3d14fe389c142e09dd00787855a6248e8a01d5ee4bbce6bc502d3e0c1d69074d6d
b2sums = e8a191e7ba62287b338849de458e4a228403b01b930b4068ec4d28989e8691aae8c969551d8661988c7abf4667ef634750d9cdd820c9300596f5f6278660c8ff
b2sums = bfc657b9bbb0a12f98f5c9ac1d50eb1d74912d775245e1b65f0c171f4f87d664122f595caa5147b60975c0baf4e9a2b1b0be046c4b2a95a0760a666391ff5f06
pkgname = linux-kira-lts
pkgdesc = The Kira LTS Linux kernel and modules
@@ -104,6 +110,7 @@ pkgname = linux-kira-lts
provides = NTSYNC-MODULE
provides = VIRTUALBOX-GUEST-MODULES
provides = WIREGUARD-MODULE
provides = initramfs
replaces = wireguard-lts
replaces = bcachefs-dkms
+53 -26
View File
@@ -1,18 +1,22 @@
# Maintainer: Kira <[@kira](https://dev.kira-linux.org/kira)>
pkgbase=linux-kira-lts
pkgver=6.18.43
pkgver=6.18.55
pkgrel=1
pkgdesc='Kira LTS Linux'
url='https://www.kernel.org'
_bcachefs_ver=1.39.1
_bcachefs_ver=1.39.6
_nyanit_ver=0.2.1-1
arch=(x86_64)
makedepends=(
bzz-initrd
bcachefs-tools
bc
binutils
cpio
dosfstools
coreutils
pax-utils
gettext
glibc
libelf
@@ -34,18 +38,20 @@ makedepends=(
python-sphinx
python-yaml
texlive-latexextra
)
options=(
!debug
)
_bcachefs_src_dir=bcachefs-tools-$_bcachefs_ver
_nyanit_src=v${_nyanit_ver}.tar.gz
_nyanit_src_dir=nyanit
_bcachefs_src_dir=bcachefs-tools-$_bcachefs_ver
_srcname=linux-$pkgver
_srctag=v$pkgver
source=(
https://cdn.kernel.org/pub/linux/kernel/v${pkgver%%.*}.x/${_srcname}.tar.{xz,sign}
https://github.com/koverstreet/bcachefs-tools/archive/refs/tags/v${_bcachefs_ver}.tar.gz
https://dev.kira-linux.org/kira-linux/nyanit/archive/${_nyanit_src}
0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch
0002-drm-amdgpu-avoid-memory-allocation-in-the-critical-code-path-v3.patch
0003-drm-amdgpu-use-GFP_ATOMIC-instead-of-NOWAIT-in-the-critical-path.patch
@@ -59,24 +65,26 @@ validpgpkeys=(
)
# https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256sums=('a1aeb926c7c4a1564368200b1082e45bb958007682d804aff88abbc3a7a47b5d'
sha256sums=('f410638061a165c12f42ab871d2f3fcd525515359b5faeee80969cff84524df9'
'SKIP'
'4c29a25036c5795f9ebe0dbc619c803b73447e8f938bd40e7f7ea223d038a38d'
'102a17a6e163e210a1adca44977481ff6ec537d932556f598f8f72c2cd187163'
'9c8e20c3d32174037b26fea4e936467ed9391284bf7ff4675ecf4a83fd820742'
'e5bda61fa4405571a0267cd8812329bb8a432a37efb50459461628d371849906'
'c31b8c0ace123f5c1a0012a1254272eea9ac9cdd0d3e5d538ca6b11830dd01b0'
'0f482368b62c3cece941e2d3ba497bf322db59315df5c2f72500fc1318e4768e'
'60a560c3c4324322dc97b6d4d75dea6182a17f6747b4a42054c053a99b1635df'
'a1f0001ec03f1f1d75d6f72165dc77b42145b3fc1c8de20afcd512c6c677482b'
'c6aa9877b0612805690d8abfc13c941530a11a7b56979d814e674c86c42ca0cf')
b2sums=('434ba598863ac5ede162d7147a78884c2dc6090e8f0447f6368a681a0e7077143a0753c62f4ad6e1be8b971a46266bf00f3b3fe4218345483360bda86a3f855c'
'189a5399a0959fe898acdaab62e2059cb4996175deebed64783671a4dc44ee4f'
'0fe2d1da5cc93a4f1fc9cacdb02b4bed59cc0ea0ef1474a42ac2b2ad068f6690'
'7427571bf433c71507749e356326bee4308359e15018809b7b7a332c31d2a611')
b2sums=('c329021f6ac359c07f3863c5493694330020540632a6b9a15033b3440dbef116d84a652c71cd3dd12fca680f5b49edaf568f841d087eb4a2c34b890a078b9672'
'SKIP'
'7aa199260780c3867295a2bbb46badddd9e9ec84a1339c2d26ebc79048181c88cf96246c1025611c7608962f2efe95769850d836aa927803135fe7a0232a0bfb'
'6052a721ef9a7aa5887704f23657eab1794f8eb02781b4ddeeb0b7392e3bc1812f958a34d21b724073b5c29e2ed8d81726bb4e63f7fbb420c811e01c161c5296'
'05f25e60c491b7ef558d832addd44784db09170418f643ad341050dddb60a78fb9feb9fb47603cdd4a651eacf1b1cbf515bf37dadf84b8dfc2755c1eeead7c30'
'5b3597cab8b174ff41b3f17aae6d1376a155356f781542e2e176d66c5a6dee53f7a1db8e2b9540ce8246efac4e27476c882fc8cc8063f0f514ae09230b5aef0a'
'a71f78bea42d158fc9383f2bbb985dafa71274d2032876b67f84602c8085b1c53f3d36965e54e5fdbab5c0d7537c98d917bd7743d3cf373c1dcb6da3bc19f4e7'
'c9d4ec8fac86a9b6f0567c57f6d5be04d56f8efbc9dc1b183981dad38387d750b53c17fcdd295cb68a874bf50f81d117cfe94bd3a8d9e08e1918644ae8daa3e5'
'58484f0e3123a3a5eac2f00d1a892dd51492ebbfd1dfd01ac9f05deaf733dd9c7993845a905f22c1e655d8fe74d40fb6e11d786626bea89a990616846c561141'
'7951209de07fd31600d838f34ca00fca94384f71936d81a0d3c0b3bd5069b984be1de31715a43e3badc828e3bc4129bebe090661c57395e80471be0cbc1302c9'
'2d581d66fe4e4afe0158755f5ea0cd0df9765b63464cb81e2b9115a37230e4489f16526393c47009c4392e5de70d2d37e496f764ad89e214ec7010c5bbfbcfc1')
'c0a6a394142c86874147fe266fbdde883fe979c638e0110647ee1d4e4fc69b3d14fe389c142e09dd00787855a6248e8a01d5ee4bbce6bc502d3e0c1d69074d6d'
'e8a191e7ba62287b338849de458e4a228403b01b930b4068ec4d28989e8691aae8c969551d8661988c7abf4667ef634750d9cdd820c9300596f5f6278660c8ff'
'bfc657b9bbb0a12f98f5c9ac1d50eb1d74912d775245e1b65f0c171f4f87d664122f595caa5147b60975c0baf4e9a2b1b0be046c4b2a95a0760a666391ff5f06')
export KBUILD_BUILD_HOST=kiralinux
export KBUILD_BUILD_USER=$pkgbase
@@ -117,22 +125,39 @@ prepare() {
#No need to apply this unless something changes
echo "################## Apply kira_config_x86_64_smol.fragment ################## "
./scripts/kconfig/merge_config.sh .config "$srcdir/kira_config_x86_64_smol.fragment"
echo "################## DONE Apply kira_config_x86_64_smol.fragment #####################"
echo ""
echo "################## Apply kira_disable_guest_vm.fragment ##################"
./scripts/kconfig/merge_config.sh .config "$srcdir/kira_disable_guest_vm.fragment"
echo "################## DONE Apply kira_disable_guest_vm.fragment #####################"
echo ""
# echo "################## Apply kira_config_x86_64_smol.fragment ################## "
# ./scripts/kconfig/merge_config.sh .config "$srcdir/kira_config_x86_64_smol.fragment"
# echo "################## DONE Apply kira_config_x86_64_smol.fragment #####################"
# echo ""
#
# echo "################## Apply kira_disable_guest_vm.fragment ##################"
# ./scripts/kconfig/merge_config.sh .config "$srcdir/kira_disable_guest_vm.fragment"
# echo "################## DONE Apply kira_disable_guest_vm.fragment #####################"
# echo ""
make -s kernelrelease > version
echo "Prepared $pkgbase version $(<version)"
}
build() {
echo "Building NYANIT..."
cd $_nyanit_src_dir
cargo build --release
cp target/release/nyanit $srcdir/init
chmod +x $srcdir/init
echo "##### DONE Building NYANIT #####"
echo ""
echo "Build initramfs image..."
cd $srcdir
$_nyanit_src_dir/build_initcpio.sh $srcdir
mv $srcdir/initramfs.cpio $srcdir/$_srcname/
echo ""
echo "Build Linux..."
cd $srcdir/$_srcname
echo "Building docs..."
@@ -141,6 +166,7 @@ build() {
echo "Building all"
make all
echo ""
# BPF stuff that makes world a worse place
# make -C tools/bpf/bpftool vmlinux.h feature-clang-bpf-co-re=1
@@ -208,6 +234,7 @@ _package() {
NTSYNC-MODULE
VIRTUALBOX-GUEST-MODULES
WIREGUARD-MODULE
'initramfs'
)
replaces=(
wireguard-lts
@@ -226,8 +253,8 @@ _package() {
echo "$pkgbase" | install -Dm644 /dev/stdin "$modulesdir/pkgbase"
echo "Installing modules..."
ZSTD_CLEVEL=19 make INSTALL_MOD_PATH="$pkgdir/usr" INSTALL_MOD_STRIP=1 \
DEPMOD=/doesnt/exist modules_install # Suppress depmod
ZSTD_CLEVEL=9 make INSTALL_MOD_PATH="$pkgdir/usr" INSTALL_MOD_STRIP=1 \
DEPMOD=/doesnt/exist modules_install # Suppress depmod
# remove build link
rm "$modulesdir"/build
+4 -4
View File
@@ -1,10 +1,10 @@
#
# Automatically generated file; DO NOT EDIT.
# Linux/x86 6.18.43 Kernel Configuration
# Linux/x86 6.18.46 Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="gcc (GCC) 16.1.1 20260728"
CONFIG_CC_VERSION_TEXT="gcc (GCC) 16.2.1 20260810"
CONFIG_CC_IS_GCC=y
CONFIG_GCC_VERSION=160101
CONFIG_GCC_VERSION=160201
CONFIG_CLANG_VERSION=0
CONFIG_AS_IS_GNU=y
CONFIG_AS_VERSION=24700
@@ -237,7 +237,7 @@ CONFIG_NET_NS=y
CONFIG_SCHED_AUTOGROUP=y
CONFIG_RELAY=y
CONFIG_BLK_DEV_INITRD=y
CONFIG_INITRAMFS_SOURCE="/usr/share/bzz-initrd/initramfs.cpio"
CONFIG_INITRAMFS_SOURCE="initramfs.cpio"
CONFIG_INITRAMFS_ROOT_UID=0
CONFIG_INITRAMFS_ROOT_GID=0
CONFIG_RD_GZIP=y
+35 -111
View File
@@ -6,24 +6,19 @@ CONFIG_TOOLS_SUPPORT_RELR=y
CONFIG_RUST=y
CONFIG_RUST_OVERFLOW_CHECKS=y
#
# We need to disable CONFIG_WERROR because of stupid bcachefs rust stuff
#
# CONFIG_COMPILE_TEST is not set
# CONFIG_WERROR is not set
#
# Standard default for not get timers interrupts on idle CPUs.
#
CONFIG_NO_HZ_COMMON=y
# CONFIG_HZ_PERIODIC is not set
CONFIG_NO_HZ_IDLE=y
# CONFIG_NO_HZ_FULL is not set
#
# This option reduces kernel latency by adding explicit preemption points throughout the kernel code
#
# CONFIG_PREEMPT_NONE is not set
# CONFIG_PREEMPT_VOLUNTARY is not set
# CONFIG_PREEMPT is not set
@@ -32,9 +27,14 @@ CONFIG_PREEMPT_LAZY=y
CONFIG_MODULES=y
CONFIG_MODULE_UNLOAD=y
CONFIG_MODPROBE=y
CONFIG_MODULE_COMPRESS=y
CONFIG_MODULE_SIG=y
# CONFIG_MODULE_SIG_FORCE is not set
CONFIG_MODULE_SIG_ALL=y
CONFIG_MODULE_SIG_FORMAT=y
# CONFIG_MODULE_SIG_SHA1 is not set
# CONFIG_MODULE_SIG_SHA256 is not set
# CONFIG_MODULE_SIG_SHA384 is not set
@@ -43,19 +43,18 @@ CONFIG_MODULE_SIG_ALL=y
# CONFIG_MODULE_SIG_SHA3_384 is not set
CONFIG_MODULE_SIG_SHA3_512=y
CONFIG_MODULE_SIG_HASH="sha3-512"
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
CONFIG_MODULE_COMPRESS_ZSTD=y
CONFIG_MODULE_COMPRESS_ALL=y
CONFIG_MODULE_DECOMPRESS=y
CONFIG_MODPROBE_PATH="/sbin/modprobe"
#
# SATA
#
CONFIG_SATA_AHCI=y
#
# NVME Support
#
CONFIG_NVME_COMMON=y
CONFIG_NVME_CORE=y
CONFIG_BLK_DEV_NVME=y
@@ -72,40 +71,26 @@ CONFIG_BCACHEFS_FS=y
# CONFIG_DEBUG_KERNEL is not set
#
# New proc acc file format
#
CONFIG_BSD_PROCESS_ACCT_V3=y
#
# ACPI platform devices
#
CONFIG_X86_INTEL_LPSS=y
CONFIG_X86_AMD_PLATFORM_DEVICE=y
3
# Max CPUS - lover a bit to save resources
#
CONFIG_NR_CPUS_DEFAULT=64
CONFIG_NR_CPUS=64
#
# Timer interrupts per second
# Increase interactivity
#
CONFIG_HZ_1000=y
CONFIG_HZ=1000
#
# bzz pss
#
CONFIG_DRM_PANIC_FOREGROUND_COLOR=0xffbf00
CONFIG_DRM_PANIC_BACKGROUND_COLOR=0x000000
#
# Frame buffer Devices
#
CONFIG_FB=y
CONFIG_FB_VESA=y
CONFIG_FB_EFI=y
@@ -114,9 +99,7 @@ CONFIG_FB_NOTIFY=y
CONFIG_FB_DEVICE=y
CONFIG_FB_MODE_HELPERS=y
#
# Graphics / GPU (Set to Module)
#
CONFIG_DRM=y
CONFIG_DRM_SYSFB_HELPER=y
@@ -130,9 +113,7 @@ CONFIG_DRM_AMDGPU_CIK=y
CONFIG_DRM_AMDGPU_USERPTR=y
CONFIG_DRM_AMD_ISP=y
#
# Compression
#
CONFIG_HAVE_KERNEL_LZ4=y
CONFIG_HAVE_KERNEL_ZSTD=y
@@ -142,40 +123,19 @@ CONFIG_KERNEL_ZSTD=y
CONFIG_DEFAULT_INIT=""
CONFIG_DEFAULT_HOSTNAME="kiralinux"
#
# Disabling BPF stuff
#
# CONFIG_AF_KCM is not set
# CONFIG_BPF_SYSCALL is not set
#
# Scheduler features
# Increasing CONFIG_UCLAMP_BUCKETS_COUNT for more precise scheduling
#
CONFIG_UCLAMP_TASK=y
CONFIG_UCLAMP_BUCKETS_COUNT=7
#
# Definetly no need for desktop not involved in kernel development
#
# CONFIG_PROFILING is not set
CONFIG_MODULES=y
CONFIG_MODULE_UNLOAD=y
CONFIG_MODPROBE=y
CONFIG_MODULE_COMPRESS=y
CONFIG_MODULE_SIG_FORMAT=y
CONFIG_MODULE_SIG_ALL=y
CONFIG_MODULE_SIG_SHA3_512=y
CONFIG_MODULE_SIG_HASH="sha3-512"
CONFIG_MODULE_COMPRESS_ZSTD=y
CONFIG_MODULE_COMPRESS_ALL=y
CONFIG_MODULE_DECOMPRESS=y
CONFIG_MODPROBE_PATH="/sbin/modprobe"
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
@@ -186,30 +146,19 @@ CONFIG_BLK_PM=y
CONFIG_BLK_MQ_STACKING=y
#
# Disabling ZSWAP - currently its acts in retarded way.
# Possibly causing issues not classified as related to it.
# Users should prefer ZRAM or SWAP+ZRAM combination
#
CONFIG_SWAP=y
# CONFIG_ZSWAP is not set
CONFIG_ZSMALLOC=y
#
# Firmware loader
#
CONFIG_FW_LOADER=y
#
# enables support for parsing and handling UEFI Common Platform Error Records (CPER)
#
CONFIG_UEFI_CPER=y
CONFIG_UEFI_CPER_X86=y
CONFIG_ZRAM=y
CONFIG_ZRAM_BACKEND_LZ4=y
CONFIG_ZRAM_BACKEND_LZ4HC=y
@@ -227,18 +176,13 @@ CONFIG_ZRAM_MEMORY_TRACKING=y
CONFIG_ZRAM_MULTI_COMP=y
#
# Allow the SCSI subsystem to probe for devices in parallel with the rest of the system boot process.
#
CONFIG_SCSI_SCAN_ASYNC=y
CONFIG_USB_SUPPORT=y
CONFIG_USB_COMMON=y
#
# USB HID support
#
CONFIG_USB_HID=y
CONFIG_HID_PID=y
CONFIG_USB_HIDDEV=y
@@ -248,17 +192,13 @@ CONFIG_INTEGRITY=y
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
CONFIG_LOAD_UEFI_KEYS=y
#
# Bounds checking
#
CONFIG_FORTIFY_SOURCE=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_HARDENED_USERCOPY_DEFAULT_ON=y
#
# Hardening of kernel data structures
#
CONFIG_LIST_HARDENED=y
CONFIG_RANDSTRUCT_NONE=y
@@ -273,23 +213,16 @@ CONFIG_ASYNC_RAID6_RECOV=y
CONFIG_CRYPTO=y
# Length-preserving ciphers and modes
#
CONFIG_CRYPTO_CHACHA20=y
CONFIG_CRYPTO_XTS=y
CONFIG_CRYPTO_NHPOLY1305=y
# AEAD (authenticated encryption with associated data) ciphers
# This is what bcachefs uses
#
CONFIG_CRYPTO_CHACHA20POLY1305=y
CONFIG_CRYPTO_CHACHA20POLY1305=y
CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y
# Hashes, digests, and MACs
#
CONFIG_CRYPTO_BLAKE2B=y
CONFIG_CRYPTO_POLYVAL=y
CONFIG_CRYPTO_SHA256=y
@@ -297,22 +230,16 @@ CONFIG_CRYPTO_SHA512=y
CONFIG_CRYPTO_SHA3=y
# CRCs (cyclic redundancy checks)
#
CONFIG_CRYPTO_CRC32C=y
CONFIG_CRYPTO_CRC32=y
# Compression
#
CONFIG_CRYPTO_LZ4=y
CONFIG_CRYPTO_LZ4HC=m
CONFIG_CRYPTO_ZSTD=y
#
# Userspace crypto interface - will be removed from kernel
# Enabling some required by IWG
#
CONFIG_CRYPTO_USER_API=y
CONFIG_CRYPTO_USER_API_HASH=y
CONFIG_CRYPTO_USER_API_SKCIPHER=y
@@ -325,8 +252,7 @@ CONFIG_CRYPTO_USER_API_RNG=y
CONFIG_CRYPTO_HW=y
# More fonts
#
CONFIG_FONT_SUPPORT=y
CONFIG_FONTS=y
CONFIG_FONT_8x8=y
@@ -336,8 +262,7 @@ CONFIG_FONT_TER16x32=y
CONFIG_FONT_SUN12x22=y
# printk and dmesg options
#
CONFIG_PRINTK_TIME=y
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=4
CONFIG_CONSOLE_LOGLEVEL_QUIET=1
@@ -350,9 +275,8 @@ CONFIG_X86_INTEL_TSX_MODE_ON=y
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
# UKI And Secure boot
#
CONFIG_EFI=y
CONFIG_EFI_STUB=y
CONFIG_INITRAMFS_SOURCE="/usr/share/bzz-initrd/initramfs.cpio"
CONFIG_INITRAMFS_SOURCE="initramfs.cpio"
CONFIG_INITRAMFS_COMPRESSION_LZ4=y
+358
View File
@@ -0,0 +1,358 @@
CONFIG_CC_IS_GCC=y
CONFIG_AS_IS_GNU=y
CONFIG_RUST_IS_AVAILABLE=y
CONFIG_TOOLS_SUPPORT_RELR=y
CONFIG_RUST=y
CONFIG_RUST_OVERFLOW_CHECKS=y
#
# We need to disable CONFIG_WERROR because of stupid bcachefs rust stuff
#
# CONFIG_COMPILE_TEST is not set
# CONFIG_WERROR is not set
#
# Standard default for not get timers interrupts on idle CPUs.
#
CONFIG_NO_HZ_COMMON=y
# CONFIG_HZ_PERIODIC is not set
CONFIG_NO_HZ_IDLE=y
# CONFIG_NO_HZ_FULL is not set
#
# This option reduces kernel latency by adding explicit preemption points throughout the kernel code
#
# CONFIG_PREEMPT_NONE is not set
# CONFIG_PREEMPT_VOLUNTARY is not set
# CONFIG_PREEMPT is not set
CONFIG_PREEMPT_LAZY=y
# CONFIG_PREEMPT_RT is not set
CONFIG_MODULE_SIG=y
# CONFIG_MODULE_SIG_FORCE is not set
CONFIG_MODULE_SIG_ALL=y
# CONFIG_MODULE_SIG_SHA1 is not set
# CONFIG_MODULE_SIG_SHA256 is not set
# CONFIG_MODULE_SIG_SHA384 is not set
# CONFIG_MODULE_SIG_SHA512 is not set
# CONFIG_MODULE_SIG_SHA3_256 is not set
# CONFIG_MODULE_SIG_SHA3_384 is not set
CONFIG_MODULE_SIG_SHA3_512=y
CONFIG_MODULE_SIG_HASH="sha3-512"
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
#
# SATA
#
CONFIG_SATA_AHCI=y
#
# NVME Support
#
CONFIG_NVME_COMMON=y
CONFIG_NVME_CORE=y
CONFIG_BLK_DEV_NVME=y
CONFIG_NVME_MULTIPATH=y
CONFIG_NVME_VERBOSE_ERRORS=y
CONFIG_NVME_HWMON=y
CONFIG_IO_URING=y
CONFIG_IO_URING_ZCRX=y
CONFIG_BCACHEFS_FS=y
# CONFIG_BCACHEFS_DEBUG is not set
# CONFIG_DEBUG_KERNEL is not set
#
# New proc acc file format
#
CONFIG_BSD_PROCESS_ACCT_V3=y
#
# ACPI platform devices
#
CONFIG_X86_INTEL_LPSS=y
CONFIG_X86_AMD_PLATFORM_DEVICE=y
3
# Max CPUS - lover a bit to save resources
#
CONFIG_NR_CPUS_DEFAULT=64
CONFIG_NR_CPUS=64
#
# Timer interrupts per second
# Increase interactivity
#
CONFIG_HZ_1000=y
CONFIG_HZ=1000
#
# bzz pss
#
CONFIG_DRM_PANIC_FOREGROUND_COLOR=0xffbf00
CONFIG_DRM_PANIC_BACKGROUND_COLOR=0x000000
#
# Frame buffer Devices
#
CONFIG_FB=y
CONFIG_FB_VESA=y
CONFIG_FB_EFI=y
CONFIG_FB_CORE=y
CONFIG_FB_NOTIFY=y
CONFIG_FB_DEVICE=y
CONFIG_FB_MODE_HELPERS=y
#
# Graphics / GPU (Set to Module)
#
CONFIG_DRM=y
CONFIG_DRM_SYSFB_HELPER=y
CONFIG_DRM_SIMPLEDRM=y
CONFIG_DRM_RADEON=m
CONFIG_DRM_RADEON_USERPTR=y
CONFIG_DRM_AMDGPU=m
CONFIG_DRM_AMDGPU_SI=y
CONFIG_DRM_AMDGPU_CIK=y
CONFIG_DRM_AMDGPU_USERPTR=y
CONFIG_DRM_AMD_ISP=y
#
# Compression
#
CONFIG_HAVE_KERNEL_LZ4=y
CONFIG_HAVE_KERNEL_ZSTD=y
CONFIG_KERNEL_ZSTD=y
CONFIG_DEFAULT_INIT=""
CONFIG_DEFAULT_HOSTNAME="kiralinux"
#
# Disabling BPF stuff
#
# CONFIG_AF_KCM is not set
# CONFIG_BPF_SYSCALL is not set
#
# Scheduler features
# Increasing CONFIG_UCLAMP_BUCKETS_COUNT for more precise scheduling
#
CONFIG_UCLAMP_TASK=y
CONFIG_UCLAMP_BUCKETS_COUNT=7
#
# Definetly no need for desktop not involved in kernel development
#
# CONFIG_PROFILING is not set
CONFIG_MODULES=y
CONFIG_MODULE_UNLOAD=y
CONFIG_MODPROBE=y
CONFIG_MODULE_COMPRESS=y
CONFIG_MODULE_SIG_FORMAT=y
CONFIG_MODULE_SIG_ALL=y
CONFIG_MODULE_SIG_SHA3_512=y
CONFIG_MODULE_SIG_HASH="sha3-512"
CONFIG_MODULE_COMPRESS_ZSTD=y
CONFIG_MODULE_COMPRESS_ALL=y
CONFIG_MODULE_DECOMPRESS=y
CONFIG_MODPROBE_PATH="/sbin/modprobe"
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_EFI_PARTITION=y
CONFIG_BLK_PM=y
CONFIG_BLK_MQ_STACKING=y
#
# Disabling ZSWAP - currently its acts in retarded way.
# Possibly causing issues not classified as related to it.
# Users should prefer ZRAM or SWAP+ZRAM combination
#
CONFIG_SWAP=y
# CONFIG_ZSWAP is not set
CONFIG_ZSMALLOC=y
#
# Firmware loader
#
CONFIG_FW_LOADER=y
#
# enables support for parsing and handling UEFI Common Platform Error Records (CPER)
#
CONFIG_UEFI_CPER=y
CONFIG_UEFI_CPER_X86=y
CONFIG_ZRAM=y
CONFIG_ZRAM_BACKEND_LZ4=y
CONFIG_ZRAM_BACKEND_LZ4HC=y
CONFIG_ZRAM_BACKEND_ZSTD=y
# CONFIG_ZRAM_BACKEND_DEFLATE is not set
# CONFIG_ZRAM_BACKEND_842 is not set
# CONFIG_ZRAM_BACKEND_LZO is not set
CONFIG_ZRAM_DEF_COMP_LZ4=y
# CONFIG_ZRAM_DEF_COMP_LZ4HC is not set
# CONFIG_ZRAM_DEF_COMP_ZSTD is not set
CONFIG_ZRAM_DEF_COMP="lz4"
CONFIG_ZRAM_WRITEBACK=y
CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y
CONFIG_ZRAM_MEMORY_TRACKING=y
CONFIG_ZRAM_MULTI_COMP=y
#
# Allow the SCSI subsystem to probe for devices in parallel with the rest of the system boot process.
#
CONFIG_SCSI_SCAN_ASYNC=y
CONFIG_USB_SUPPORT=y
CONFIG_USB_COMMON=y
#
# USB HID support
#
CONFIG_USB_HID=y
CONFIG_HID_PID=y
CONFIG_USB_HIDDEV=y
CONFIG_INTEGRITY=y
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
CONFIG_LOAD_UEFI_KEYS=y
#
# Bounds checking
#
CONFIG_FORTIFY_SOURCE=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_HARDENED_USERCOPY_DEFAULT_ON=y
#
# Hardening of kernel data structures
#
CONFIG_LIST_HARDENED=y
CONFIG_RANDSTRUCT_NONE=y
CONFIG_XOR_BLOCKS=y
CONFIG_ASYNC_CORE=y
CONFIG_ASYNC_MEMCPY=y
CONFIG_ASYNC_XOR=y
CONFIG_ASYNC_PQ=y
CONFIG_ASYNC_RAID6_RECOV=y
CONFIG_CRYPTO=y
# Length-preserving ciphers and modes
#
CONFIG_CRYPTO_CHACHA20=y
CONFIG_CRYPTO_XTS=y
CONFIG_CRYPTO_NHPOLY1305=y
# AEAD (authenticated encryption with associated data) ciphers
# This is what bcachefs uses
#
CONFIG_CRYPTO_CHACHA20POLY1305=y
CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y
# Hashes, digests, and MACs
#
CONFIG_CRYPTO_BLAKE2B=y
CONFIG_CRYPTO_POLYVAL=y
CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_SHA512=y
CONFIG_CRYPTO_SHA3=y
# CRCs (cyclic redundancy checks)
#
CONFIG_CRYPTO_CRC32C=y
CONFIG_CRYPTO_CRC32=y
# Compression
#
CONFIG_CRYPTO_LZ4=y
CONFIG_CRYPTO_LZ4HC=m
CONFIG_CRYPTO_ZSTD=y
#
# Userspace crypto interface - will be removed from kernel
# Enabling some required by IWG
#
CONFIG_CRYPTO_USER_API=y
CONFIG_CRYPTO_USER_API_HASH=y
CONFIG_CRYPTO_USER_API_SKCIPHER=y
CONFIG_CRYPTO_USER_API_RNG=y
# CONFIG_CRYPTO_USER_API_RNG_CAVP is not set
# CONFIG_CRYPTO_USER_API_AEAD is not set
# CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE is not set
CONFIG_CRYPTO_HW=y
# More fonts
#
CONFIG_FONT_SUPPORT=y
CONFIG_FONTS=y
CONFIG_FONT_8x8=y
CONFIG_FONT_8x16=y
CONFIG_FONT_10x18=y
CONFIG_FONT_TER16x32=y
CONFIG_FONT_SUN12x22=y
# printk and dmesg options
#
CONFIG_PRINTK_TIME=y
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=4
CONFIG_CONSOLE_LOGLEVEL_QUIET=1
CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4
# CONFIG_BOOT_PRINTK_DELAY is not set
CONFIG_SYMBOLIC_ERRNAME=y
# CONFIG_X86_INTEL_TSX_MODE_OFF is not set
CONFIG_X86_INTEL_TSX_MODE_ON=y
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
# UKI And Secure boot
#
CONFIG_EFI=y
CONFIG_EFI_STUB=y
CONFIG_INITRAMFS_SOURCE="initramfs.cpio"
CONFIG_INITRAMFS_COMPRESSION_LZ4=y
-7
View File
@@ -1,11 +1,4 @@
#
# We generally want to remove any not common for desktop virtualization features
#
# CONFIG_PCI_XEN is not set
#
# Microsoft Hyper-V guest support
#
# CONFIG_HYPERV is not set
+11
View File
@@ -0,0 +1,11 @@
#
# We generally want to remove any not common for desktop virtualization features
#
# CONFIG_PCI_XEN is not set
#
# Microsoft Hyper-V guest support
#
# CONFIG_HYPERV is not set