Age | Commit message (Collapse) | Author | Files | Lines |
|
This is an attempt at syncing the kernel configs of our different
arches. So far, only the 'Networking support/Networking options',
'Filesystems', 'Security Options' and 'Cryptographic API' sections have
been handled, since those require much less knowledge about some of the
more exotic hardware we support than some of the other sections.
Some notable changes:
Network
* Enable IPsec, miscellaneous tunnels, and the diag interfaces for all
socket families.
* Enable policy routing (for wireguard).
* Make the CUBIC TCP congestion control algorithm the default
everywhere, provide a few other common choices.
* Support FQ_CODEL. We may want to support further QoS features.
* Disable support for PF_KEY sockets, which shouldn't be required by our
IPsec userland tools.
* Enable most netfilter features, except for arptables/ebtables/nfacct/
nfqueue/ipset, whose userland tools we don't provide yet, and a few
other very specialized options.
Filesystems
* Build everything except for ext4, iso9660, vfat and squashfs as
modules.
* Use the ext4 driver for ext2 filesystems.
* Disable the kernel automounter, which is currently only enabled on
ppc32 and aarch64.
Security
* Only grant root access to dmesg by default; this can be overriden via
a sysctl.
* Support Yama; it doesn't do anything unless explicitly enabled by a
sysctl, and may be useful to some users.
* Disable AppAarmor, which is currently only enabled on pmmx and x86_64.
Crypto
* Disable a lot of uncommon ciphers which are unlikely to be used by
anything.
* Build all crypto code as modules (where possible); this means users
with a dm-crypt-encrypted root filesystem now need to provide the
appropriate kernel modules in their initramfs images on all arches.
* Disable support for dedicated cryptographic coprocessors; we are not
in a position to evaluate their security and performance benefits or
disadvantages.
Other
* Allow serial consoles to be used as the kernel console on all arches;
this is important for VMs.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
The old version installed itself as an XS module despite it being PP.
This was bad, and is why BREAK_BACKWARD_COMPAT is set in the build.
Don't unset it!
|
|
|
|
|
|
|
|
|
|
|
|
system/bubblewrap: add non-setuid variant
See merge request adelie/packages!280
|
|
See merge request adelie/packages!279
|
|
Bump libnftnl and nftables
See merge request adelie/packages!277
|
|
|
|
|
|
|
|
|
|
|
|
system/bc: bump to 2.1.0
This will be the last release with new features. This bc is complete.
See merge request adelie/packages!278
|
|
user/cbindgen: bump to 0.9.0
See merge request adelie/packages!276
|
|
user/i3status: Bump to 2.13
See merge request adelie/packages!275
|
|
This will be the last release with new features. This bc is complete.
|
|
|
|
|
|
|
|
Yikes.
|
|
system/coreutils: Move env back to /usr/bin/
See merge request adelie/packages!274
|
|
See 7b788595e960b913bed3c7ddaeb5a49f937ff7de
|
|
|
|
|
|
|
|
So long and thanks for all the fish.
See merge request adelie/packages!273
|
|
system/s6-linux-init: Bump to 1.0.2.0
See merge request adelie/packages!272
|
|
|
|
|
|
Remove myself from maintainership.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Insert static -lintl from gettext-tiny into build. This makes the GTK
LOCALEDIR finally /usr/share/locale instead of /usr/lib/locale.
* Remove old replaces= from Alpine. This isn't Alpine, we never had a gtk+.
* Shuffle variables around to match Adélie preferred style.
* Don't define a global `subpkg` variable for a single subpackage(???)
* Modernise.
* Take maintainership over.
|
|
user/grub: -efi should pull in the bits needed to make it work
See merge request adelie/packages!271
|