diff options
author | Eric Woudstra | 2023-03-01 16:02:12 +0100 |
---|---|---|
committer | Eric Woudstra | 2023-03-01 16:02:12 +0100 |
commit | 15141660c8008ce2b9f264d4e84100a7e436bb44 (patch) | |
tree | ac241a800f0cb8ed17bb41a33a3ddf8fa47f359e | |
parent | 33325ba0f1b288429e7a01a70dad4021079511f5 (diff) | |
download | aur-15141660c8008ce2b9f264d4e84100a7e436bb44.tar.gz |
Linux kernel for R64 and R3, include clang option
-rw-r--r-- | .SRCINFO | 10 | ||||
-rw-r--r-- | PKGBUILD | 33 | ||||
-rw-r--r-- | defconfig | 311 |
3 files changed, 269 insertions, 85 deletions
@@ -1,5 +1,5 @@ pkgbase = linux-bpir64-git - pkgver = 6.1.8.bpi.r64.1 + pkgver = 6.1.14.bpi.r64.r3.1 pkgrel = 1 url = http://www.kernel.org/ arch = aarch64 @@ -19,19 +19,19 @@ pkgbase = linux-bpir64-git md5sums = SKIP pkgname = linux-bpir64-git - pkgdesc = The Linux Kernel and modules - AArch64 kernel for BPIR64 + pkgdesc = The Linux Kernel and modules - AArch64 kernel for BPI-R64 and BPI-R3 install = linux-bpir64-git.install depends = coreutils depends = linux-firmware depends = kmod optdepends = mkinitcpio>=0.7 - provides = linux=6.1.8.bpi.r64.1 + provides = linux=6.1.14.bpi.r64.r3.1 provides = WIREGUARD-MODULE conflicts = linux replaces = linux-armv8 backup = etc/mkinitcpio.d/linux-bpir64-git.preset pkgname = linux-bpir64-git-headers - pkgdesc = Header files and scripts for building modules for linux kernel - AArch64 kernel for BPIR64 - provides = linux-headers=6.1.8.bpi.r64.1 + pkgdesc = Header files and scripts for building modules for linux kernel - AArch64 kernel for BPI-R64 and BPI-R3 + provides = linux-headers=6.1.14.bpi.r64.r3.1 conflicts = linux-headers @@ -8,13 +8,16 @@ _srcname=linux _gitroot="https://git.kernel.org/pub/scm/linux/kernel/git/stable/${_srcname}" _gitbranch="linux-rolling-stable" _kernelname=${pkgbase#linux} -_desc="AArch64 kernel for BPIR64" -pkgver=6.1.8.bpi.r64.1 +_desc="AArch64 kernel for BPI-R64 and BPI-R3" +_r3dts="https://github.com/torvalds/linux/raw/master/arch/arm64/boot/dts/mediatek/mt7986a-bananapi-bpi-r3.dts" +#_lto="true" # Uncomment this line to enable CLANG-LTO +pkgver=6.1.14.bpi.r64.r3.1 pkgrel=1 arch=('aarch64') url="http://www.kernel.org/" license=('GPL2') makedepends=('kmod' 'inetutils' 'bc' 'git') +[[ "$_lto" == "true" ]] && makedepends+=('clang' 'llvm' 'lld') options=('!strip') source=('defconfig' 'linux.preset' @@ -25,6 +28,8 @@ md5sums=(SKIP SKIP SKIP SKIP) export LOCALVERSION="-${pkgrel}" +[[ "$_lto" == "true" ]] && _llvm="LLVM=1" || _llvm="" + prepare() { if [[ -d "${srcdir}/${_srcname}/" ]]; then cd "${srcdir}/${_srcname}/" @@ -44,25 +49,34 @@ prepare() { fi cd "${srcdir}/${_srcname}/" + rm -f ./arch/arm64/boot/dts/mediatek/$(basename $_r3dts) + wget --no-verbose $_r3dts --no-clobber -P ./arch/arm64/boot/dts/mediatek/ + cp -vf ${startdir}/defconfig ./arch/arm64/configs/bpir64_defconfig - make bpir64_defconfig + make ${MAKEFLAGS} $_llvm bpir64_defconfig rm -vf ./arch/arm64/configs/bpir64_defconfig # get kernel version - make prepare + make ${MAKEFLAGS} $_llvm prepare } pkgver() { cd "$srcdir/$_srcname" - printf "%s" "$(echo $(make -s kernelrelease) | sed 's/\([^-]*-\)g/r\1/;s/-/./g')" + printf "%s" "$(echo $(make ${MAKEFLAGS} $_llvm -s kernelrelease) | \ + sed 's/\([^-]*-\)g/r\1/;s/-/./g')" } build() { cd ${_srcname} unset LDFLAGS - make ${MAKEFLAGS} KCFLAGS=-w Image Image.gz modules + if [[ "$_lto" == "true" ]]; then + ./scripts/config --enable LTO_CLANG_FULL # LTO_CLANG_THIN + make ${MAKEFLAGS} $_llvm oldconfig + fi +# make ${MAKEFLAGS} $_llvm menuconfig + make ${MAKEFLAGS} $_llvm Image Image.gz modules # KCFLAGS=-w # Generate device tree blobs with symbols to support applying device tree overlays in U-Boot - make ${MAKEFLAGS} DTC_FLAGS="-@" dtbs + make ${MAKEFLAGS} $_llvm DTC_FLAGS="-@" dtbs } _package() { @@ -80,12 +94,13 @@ _package() { KARCH=arm64 # get kernel version - _kernver="$(make kernelrelease)" + _kernver="$(make ${MAKEFLAGS} $_llvm kernelrelease)" _basekernel=${_kernver%%-*} _basekernel=${_basekernel%.*} mkdir -p "${pkgdir}"/{boot,boot/dtbs,usr/lib/modules} - make INSTALL_MOD_PATH="${pkgdir}/usr" DEPMOD=/doesnt/exist modules_install + make ${MAKEFLAGS} $_llvm INSTALL_MOD_PATH="${pkgdir}/usr" INSTALL_MOD_STRIP=1 \ + DEPMOD=/doesnt/exist modules_install cp arch/$KARCH/boot/Image{,.gz} "${pkgdir}/boot" cp arch/$KARCH/boot/dts/mediatek/*.dtb "${pkgdir}/boot/dtbs" diff --git a/defconfig b/defconfig index 3d8046a6a3cd..5afed14b92cb 100644 --- a/defconfig +++ b/defconfig @@ -1,20 +1,19 @@ # # defconfig file build by: -# https://github.com/ericwoud/formatdefconfig.git +# https://github.com/ericwoud/buildR64ubuntu/blob/master/tools/formatdefconfig.sh # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 5.19.0-rc8 Kernel Configuration +# Linux/arm64 6.1.0-rc6 Kernel Configuration # # # General setup # -CONFIG_LOCALVERSION="-bpi-r64" +CONFIG_LOCALVERSION="-bpi-r64-r3" # CONFIG_LOCALVERSION_AUTO is not set -CONFIG_DEFAULT_HOSTNAME="(mt7622)" +CONFIG_DEFAULT_HOSTNAME="(bpi)" CONFIG_SYSVIPC=y CONFIG_POSIX_MQUEUE=y -# CONFIG_CROSS_MEMORY_ATTACH is not set CONFIG_AUDIT=y # @@ -24,6 +23,13 @@ CONFIG_NO_HZ_IDLE=y CONFIG_HIGH_RES_TIMERS=y # end of Timers subsystem +# +# BPF subsystem +# +CONFIG_BPF_SYSCALL=y +CONFIG_BPF_JIT=y +# end of BPF subsystem + CONFIG_PREEMPT=y # @@ -49,10 +55,10 @@ CONFIG_CGROUP_DEVICE=y CONFIG_CGROUP_CPUACCT=y CONFIG_CGROUP_PERF=y CONFIG_NAMESPACES=y -# CONFIG_UTS_NS is not set CONFIG_USER_NS=y +CONFIG_BLK_DEV_INITRD=y CONFIG_CC_OPTIMIZE_FOR_SIZE=y -CONFIG_EXPERT=y +CONFIG_EMBEDDED=y # # Kernel Performance Events And Counters @@ -72,15 +78,17 @@ CONFIG_ARCH_MEDIATEK=y # CONFIG_SCHED_MC=y -CONFIG_NR_CPUS=2 +CONFIG_NR_CPUS=4 +CONFIG_HZ_100=y +CONFIG_ARM64_SW_TTBR0_PAN=y CONFIG_COMPAT=y # end of Kernel Features # -# Boot options +# Power management options # -# CONFIG_EFI is not set -# end of Boot options +CONFIG_WQ_POWER_EFFICIENT_DEFAULT=y +# end of Power management options # # CPU Power Management @@ -115,18 +123,10 @@ CONFIG_MODULES=y CONFIG_MODULE_UNLOAD=y # -# Executable file formats -# -# CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS is not set -# end of Executable file formats - -# -# Memory Management options +# Partition Types # -# CONFIG_SWAP is not set -# CONFIG_COMPAT_BRK is not set -# CONFIG_COMPACTION is not set -# end of Memory Management options +CONFIG_PARTITION_ADVANCED=y +# end of Partition Types CONFIG_NET=y @@ -139,6 +139,10 @@ CONFIG_UNIX=y CONFIG_UNIX_DIAG=y CONFIG_INET=y CONFIG_IP_MULTICAST=y +CONFIG_IP_ADVANCED_ROUTER=y +CONFIG_IP_MULTIPLE_TABLES=y +CONFIG_IP_ROUTE_MULTIPATH=y +CONFIG_IP_ROUTE_VERBOSE=y CONFIG_IP_PNP=y CONFIG_IP_PNP_DHCP=y CONFIG_IP_PNP_BOOTP=y @@ -147,7 +151,7 @@ CONFIG_NET_IPIP=m CONFIG_IP_MROUTE=y CONFIG_IP_PIMSM_V1=y CONFIG_IP_PIMSM_V2=y -# CONFIG_INET_DIAG is not set +CONFIG_TCP_CONG_ADVANCED=y CONFIG_IPV6_ROUTER_PREF=y CONFIG_IPV6_OPTIMISTIC_DAD=y CONFIG_INET6_AH=m @@ -247,6 +251,14 @@ CONFIG_BRIDGE=y CONFIG_BRIDGE_VLAN_FILTERING=y CONFIG_NET_DSA=y CONFIG_VLAN_8021Q=y +CONFIG_NET_SCHED=y + +# +# Queueing/Scheduling +# +CONFIG_NET_SCH_FQ_CODEL=y +CONFIG_NET_SCH_DEFAULT=y +CONFIG_DEFAULT_FQ_CODEL=y # # Classification @@ -263,7 +275,6 @@ CONFIG_BT_BNEP=y CONFIG_BT_BNEP_MC_FILTER=y CONFIG_BT_BNEP_PROTO_FILTER=y CONFIG_BT_HIDP=y -# CONFIG_BT_LE is not set # # Bluetooth device drivers @@ -275,25 +286,39 @@ CONFIG_BT_MTKUART=m CONFIG_CFG80211=m CONFIG_MAC80211=m CONFIG_MAC80211_MESH=y +CONFIG_MAC80211_LEDS=y CONFIG_RFKILL=m # # Device Drivers # CONFIG_PCI=y -CONFIG_PCI_DEBUG=y +CONFIG_PCIEPORTBUS=y +CONFIG_PCIEAER=y +CONFIG_PCIEASPM_PERFORMANCE=y # # PCI controller drivers # CONFIG_PCIE_MEDIATEK=y +CONFIG_PCIE_MEDIATEK_GEN3=y # end of PCI controller drivers # # Generic Driver Options # +CONFIG_UEVENT_HELPER=y +CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug" CONFIG_DEVTMPFS=y CONFIG_DEVTMPFS_MOUNT=y +CONFIG_DEVTMPFS_SAFE=y + +# +# Firmware loader +# +CONFIG_FW_LOADER_USER_HELPER=y +CONFIG_FW_LOADER_USER_HELPER_FALLBACK=y +# end of Firmware loader # end of Generic Driver Options CONFIG_MTD=y @@ -302,28 +327,77 @@ CONFIG_MTD=y # Partition parsers # CONFIG_MTD_CMDLINE_PARTS=m -# CONFIG_MTD_OF_PARTS is not set +CONFIG_MTD_PARSER_TRX=y # end of Partition parsers # +# User Modules And Translation Layers +# +CONFIG_MTD_BLOCK=y + +# # Note that in some cases UBI block is preferred. See MTD_UBI_BLOCK. # CONFIG_NFTL=m CONFIG_NFTL_RW=y # +# RAM/ROM/Flash chip drivers +# +CONFIG_MTD_CFI=y +CONFIG_MTD_CFI_INTELEXT=y +CONFIG_MTD_CFI_AMDSTD=y +# end of RAM/ROM/Flash chip drivers + +# +# Mapping drivers for chip access +# +CONFIG_MTD_COMPLEX_MAPPINGS=y +# end of Mapping drivers for chip access + +# # Self-contained MTD device drivers # CONFIG_MTD_BLOCK2MTD=m # end of Self-contained MTD device drivers +# +# NAND +# +CONFIG_MTD_RAW_NAND=y + +# +# Raw/parallel NAND flash controllers +# +CONFIG_MTD_NAND_MTK=y + +# +# Misc +# +CONFIG_MTD_SPI_NAND=y + +# +# ECC engine support +# +CONFIG_MTD_NAND_ECC_MEDIATEK=y +# end of ECC engine support +# end of NAND + CONFIG_MTD_SPI_NOR=y -# CONFIG_MTD_SPI_NOR_USE_4K_SECTORS is not set +CONFIG_MTD_UBI=y +CONFIG_MTD_UBI_BLOCK=y +CONFIG_OF_OVERLAY=y + +# +# Parallel IDE protocol modules +# +CONFIG_BLK_DEV_LOOP=y # -# Protocols +# NVME Support # -# CONFIG_BLK_DEV is not set +CONFIG_BLK_DEV_NVME=y +# end of NVME Support # # SCSI device support @@ -333,7 +407,6 @@ CONFIG_MTD_SPI_NOR=y # SCSI support type (disk, tape, CD-ROM) # CONFIG_BLK_DEV_SD=y -# CONFIG_BLK_DEV_BSG is not set # end of SCSI device support CONFIG_ATA=y @@ -361,34 +434,50 @@ CONFIG_NET_DSA_MT7530=y # CONFIG_NET_VENDOR_AMD is not set # CONFIG_NET_VENDOR_AQUANTIA is not set # CONFIG_NET_VENDOR_ARC is not set +# CONFIG_NET_VENDOR_ASIX is not set # CONFIG_NET_VENDOR_ATHEROS is not set # CONFIG_NET_VENDOR_BROADCOM is not set +# CONFIG_NET_VENDOR_CADENCE is not set # CONFIG_NET_VENDOR_CAVIUM is not set # CONFIG_NET_VENDOR_CHELSIO is not set # CONFIG_NET_VENDOR_CISCO is not set +# CONFIG_NET_VENDOR_CORTINA is not set +# CONFIG_NET_VENDOR_DAVICOM is not set # CONFIG_NET_VENDOR_DEC is not set # CONFIG_NET_VENDOR_DLINK is not set # CONFIG_NET_VENDOR_EMULEX is not set +# CONFIG_NET_VENDOR_ENGLEDER is not set # CONFIG_NET_VENDOR_EZCHIP is not set +# CONFIG_NET_VENDOR_FUNGIBLE is not set +# CONFIG_NET_VENDOR_GOOGLE is not set # CONFIG_NET_VENDOR_HISILICON is not set # CONFIG_NET_VENDOR_HUAWEI is not set # CONFIG_NET_VENDOR_INTEL is not set +# CONFIG_NET_VENDOR_WANGXUN is not set +CONFIG_ADIN1110=m +# CONFIG_NET_VENDOR_LITEX is not set # CONFIG_NET_VENDOR_MARVELL is not set CONFIG_NET_VENDOR_MEDIATEK=y CONFIG_NET_MEDIATEK_SOC=y # CONFIG_NET_VENDOR_MELLANOX is not set # CONFIG_NET_VENDOR_MICREL is not set # CONFIG_NET_VENDOR_MICROCHIP is not set +# CONFIG_NET_VENDOR_MICROSEMI is not set +# CONFIG_NET_VENDOR_MICROSOFT is not set # CONFIG_NET_VENDOR_MYRI is not set +# CONFIG_NET_VENDOR_NI is not set # CONFIG_NET_VENDOR_NATSEMI is not set +# CONFIG_NET_VENDOR_NETERION is not set # CONFIG_NET_VENDOR_NETRONOME is not set # CONFIG_NET_VENDOR_NVIDIA is not set # CONFIG_NET_VENDOR_OKI is not set +# CONFIG_NET_VENDOR_PACKET_ENGINES is not set +# CONFIG_NET_VENDOR_PENSANDO is not set # CONFIG_NET_VENDOR_QLOGIC is not set # CONFIG_NET_VENDOR_BROCADE is not set # CONFIG_NET_VENDOR_QUALCOMM is not set # CONFIG_NET_VENDOR_RDC is not set -# CONFIG_NET_VENDOR_REALTEK is not set +CONFIG_R8169=y # CONFIG_NET_VENDOR_RENESAS is not set # CONFIG_NET_VENDOR_ROCKER is not set # CONFIG_NET_VENDOR_SAMSUNG is not set @@ -397,18 +486,34 @@ CONFIG_NET_MEDIATEK_SOC=y # CONFIG_NET_VENDOR_SIS is not set # CONFIG_NET_VENDOR_SOLARFLARE is not set # CONFIG_NET_VENDOR_SMSC is not set +# CONFIG_NET_VENDOR_SOCIONEXT is not set # CONFIG_NET_VENDOR_STMICRO is not set # CONFIG_NET_VENDOR_SUN is not set # CONFIG_NET_VENDOR_SYNOPSYS is not set # CONFIG_NET_VENDOR_TEHUTI is not set # CONFIG_NET_VENDOR_TI is not set +# CONFIG_NET_VENDOR_VERTEXCOM is not set # CONFIG_NET_VENDOR_VIA is not set # CONFIG_NET_VENDOR_WIZNET is not set +# CONFIG_NET_VENDOR_XILINX is not set +CONFIG_SFP=y + +# +# MII PHY device drivers +# +CONFIG_ICPLUS_PHY=y +CONFIG_MAXLINEAR_GPHY=y CONFIG_PPP=m CONFIG_PPP_DEFLATE=m CONFIG_PPP_FILTER=y CONFIG_PPP_MPPE=m CONFIG_PPPOE=m +CONFIG_USB_RTL8150=y +CONFIG_USB_USBNET=m +CONFIG_USB_NET_CDC_MBIM=m +CONFIG_USB_ALI_M5632=y +CONFIG_USB_AN2720=y +CONFIG_USB_NET_QMI_WWAN=m CONFIG_MT7601U=m CONFIG_MT76x0U=m CONFIG_MT76x0E=m @@ -421,6 +526,7 @@ CONFIG_MT7915E=m CONFIG_MT7986_WMAC=y CONFIG_MT7921E=m CONFIG_MT7921U=m +CONFIG_ISDN=y # # Input device support @@ -434,15 +540,8 @@ CONFIG_INPUT_EVDEV=y # # Input Device Drivers # -# CONFIG_KEYBOARD_ATKBD is not set CONFIG_KEYBOARD_GPIO=y -# CONFIG_INPUT_MOUSE is not set - -# -# Hardware I/O ports -# -CONFIG_SERIO_LIBPS2=y -# end of Hardware I/O ports +CONFIG_INPUT_MISC=y # end of Input device support # @@ -478,13 +577,11 @@ CONFIG_I2C_CHARDEV=y # # I2C system bus drivers (mostly embedded / system-on-chip) # +CONFIG_I2C_GPIO=y CONFIG_I2C_MT65XX=y # end of I2C Hardware Bus support CONFIG_I2C_SLAVE=y -CONFIG_I2C_DEBUG_CORE=y -CONFIG_I2C_DEBUG_ALGO=y -CONFIG_I2C_DEBUG_BUS=y # end of I2C support CONFIG_SPI=y @@ -493,10 +590,18 @@ CONFIG_SPI=y # SPI Master Controller Drivers # CONFIG_SPI_MT65XX=y +CONFIG_SPI_MTK_NOR=y +CONFIG_SPI_MTK_SNFI=y +CONFIG_PINCTRL_SINGLE=y CONFIG_GPIO_SYSFS=y CONFIG_POWER_RESET_SYSCON=y # +# Native drivers +# +CONFIG_SENSORS_PWM_FAN=y + +# # ACPI drivers # CONFIG_THERMAL=y @@ -602,12 +707,6 @@ CONFIG_PLATFORM_SI4713=m # end of Media drivers CONFIG_USB=y -# CONFIG_USB_PCI is not set - -# -# Miscellaneous USB options -# -# CONFIG_USB_DEFAULT_PERSIST is not set # # USB Host Controller Drivers @@ -631,6 +730,8 @@ CONFIG_USB_SERIAL_CYPRESS_M8=m CONFIG_USB_SERIAL_FTDI_SIO=m CONFIG_USB_SERIAL_IR=m CONFIG_USB_SERIAL_PL2303=m +CONFIG_USB_SERIAL_QUALCOMM=m +CONFIG_USB_SERIAL_OPTION=m CONFIG_USB_SERIAL_DEBUG=m CONFIG_MMC=y @@ -644,6 +745,8 @@ CONFIG_MMC_MTK=y # CONFIG_NEW_LEDS=y CONFIG_LEDS_CLASS=y +CONFIG_LEDS_CLASS_MULTICOLOR=y +CONFIG_LEDS_BRIGHTNESS_HW_CHANGED=y # # LED drivers @@ -658,13 +761,17 @@ CONFIG_LEDS_USER=y # # LED Triggers # -CONFIG_LEDS_TRIGGERS=y CONFIG_LEDS_TRIGGER_TIMER=y CONFIG_LEDS_TRIGGER_ONESHOT=y CONFIG_LEDS_TRIGGER_HEARTBEAT=y CONFIG_LEDS_TRIGGER_BACKLIGHT=y CONFIG_LEDS_TRIGGER_CPU=y CONFIG_LEDS_TRIGGER_DEFAULT_ON=y + +# +# iptables trigger is under Netfilter config (LED target) +# +CONFIG_LEDS_TRIGGER_NETDEV=y CONFIG_RTC_CLASS=y # @@ -693,18 +800,16 @@ CONFIG_DMATEST=y CONFIG_SYNC_FILE=y # end of DMABUF options +CONFIG_STAGING=y + # # Clock driver for MediaTek SoC # -# CONFIG_COMMON_CLK_MT6797 is not set CONFIG_COMMON_CLK_MT7622_ETHSYS=y CONFIG_COMMON_CLK_MT7622_HIFSYS=y CONFIG_COMMON_CLK_MT7622_AUDSYS=y -# CONFIG_COMMON_CLK_MT8173 is not set # end of Clock driver for MediaTek SoC -# CONFIG_IOMMU_SUPPORT is not set - # # SOC (System On Chip) specific Drivers # @@ -727,9 +832,6 @@ CONFIG_IIO=y CONFIG_MEDIATEK_MT6577_AUXADC=y # end of Analog to digital converters -# -# VME Board Drivers -# CONFIG_PWM=y CONFIG_PWM_MEDIATEK=y @@ -740,7 +842,7 @@ CONFIG_PWM_MEDIATEK=y CONFIG_PHY_MTK_TPHY=y # end of PHY Subsystem -CONFIG_MTK_EFUSE=y +CONFIG_NVMEM_MTK_EFUSE=y # end of Device Drivers # @@ -753,6 +855,8 @@ CONFIG_F2FS_CHECK_FS=y CONFIG_F2FS_FAULT_INJECTION=y CONFIG_F2FS_FS_COMPRESSION=y CONFIG_AUTOFS_FS=y +CONFIG_OVERLAY_FS=y +CONFIG_OVERLAY_FS_XINO_AUTO=y # # DOS/FAT/EXFAT/NT Filesystems @@ -764,9 +868,20 @@ CONFIG_VFAT_FS=y # Pseudo filesystems # CONFIG_TMPFS=y +CONFIG_TMPFS_XATTR=y +CONFIG_CONFIGFS_FS=y # end of Pseudo filesystems -# CONFIG_MISC_FILESYSTEMS is not set +CONFIG_JFFS2_FS=y +CONFIG_JFFS2_SUMMARY=y +CONFIG_JFFS2_FS_XATTR=y +CONFIG_JFFS2_COMPRESSION_OPTIONS=y +CONFIG_UBIFS_FS=y +CONFIG_SQUASHFS=y +CONFIG_SQUASHFS_FILE_DIRECT=y +CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU=y +CONFIG_SQUASHFS_XZ=y +CONFIG_SQUASHFS_EMBEDDED=y CONFIG_NFS_FS=m CONFIG_NFS_V3_ACL=y CONFIG_NFS_V4=m @@ -782,37 +897,84 @@ CONFIG_NFSD_BLOCKLAYOUT=y CONFIG_NFSD_SCSILAYOUT=y CONFIG_NFSD_FLEXFILELAYOUT=y CONFIG_NFSD_V4_2_INTER_SSC=y -CONFIG_SUNRPC_DEBUG=y CONFIG_CEPH_FS=m CONFIG_CEPH_FS_POSIX_ACL=y CONFIG_CIFS=m CONFIG_CIFS_UPCALL=y CONFIG_CIFS_XATTR=y CONFIG_CIFS_POSIX=y -CONFIG_CIFS_DEBUG2=y -CONFIG_CIFS_DEBUG_DUMP_KEYS=y CONFIG_CIFS_DFS_UPCALL=y CONFIG_CIFS_SWN_UPCALL=y CONFIG_SMB_SERVER=m CONFIG_SMB_SERVER_KERBEROS5=y CONFIG_CODA_FS=m CONFIG_AFS_FS=m -CONFIG_AFS_DEBUG=y -CONFIG_AFS_DEBUG_CURSOR=y CONFIG_NLS_CODEPAGE_437=y +CONFIG_NLS_CODEPAGE_852=y CONFIG_NLS_ISO8859_1=y +CONFIG_NLS_ISO8859_15=y # end of File systems # -# Authenticated Encryption with Associated Data +# Security options +# +CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_HARDENED_USERCOPY=y +CONFIG_FORTIFY_SOURCE=y +CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity" + +# +# Kernel hardening options +# + +# +# Memory initialization +# +CONFIG_INIT_STACK_NONE=y +# end of Memory initialization +# end of Kernel hardening options +# end of Security options + +# +# Crypto core or helper +# +CONFIG_CRYPTO_PCRYPT=y +CONFIG_CRYPTO_CRYPTD=y +# end of Crypto core or helper + +# +# Public-key cryptography +# +CONFIG_CRYPTO_ECDH=y +# end of Public-key cryptography + +# +# Length-preserving ciphers and modes +# +CONFIG_CRYPTO_ECB=y +# end of Length-preserving ciphers and modes + +# +# AEAD (authenticated encryption with associated data) ciphers # CONFIG_CRYPTO_ECHAINIV=y +# end of AEAD (authenticated encryption with associated data) ciphers + +# +# Accelerated Cryptographic Algorithms for CPU (arm64) +# +CONFIG_CRYPTO_GHASH_ARM64_CE=y +CONFIG_CRYPTO_SHA2_ARM64_CE=y +CONFIG_CRYPTO_AES_ARM64=y +CONFIG_CRYPTO_AES_ARM64_CE_BLK=y +CONFIG_CRYPTO_AES_ARM64_CE_CCM=y +# end of Accelerated Cryptographic Algorithms for CPU (arm64) # # Library routines # -CONFIG_XZ_DEC=y +CONFIG_CRC32_SARWATE=y # end of Library routines # @@ -831,15 +993,22 @@ CONFIG_DYNAMIC_DEBUG=y # # Compile-time checks and compiler options # -CONFIG_DEBUG_SECTION_MISMATCH=y -# CONFIG_SECTION_MISMATCH_WARN_ONLY is not set +CONFIG_FRAME_WARN=1024 +CONFIG_STRIP_ASM_SYMS=y # end of Compile-time checks and compiler options # -# Generic Kernel Debugging Instruments +# Debug Oops, Lockups and Hangs +# +CONFIG_PANIC_ON_OOPS=y +CONFIG_PANIC_TIMEOUT=1 +# end of Debug Oops, Lockups and Hangs + +# +# RCU Debugging # -CONFIG_MAGIC_SYSRQ=y -# end of Generic Kernel Debugging Instruments +CONFIG_RCU_CPU_STALL_TIMEOUT=60 +# end of RCU Debugging -# CONFIG_FTRACE is not set +CONFIG_IO_STRICT_DEVMEM=y # end of Kernel hacking |