summaryrefslogtreecommitdiff
path: root/system/easy-kernel-power8-64k
AgeCommit message (Collapse)AuthorFilesLines
2019-07-14system/easy-kernel*: slight config tweakingA. Wilcox2-7/+7
* Use Westwood+ as default TCP cc algo, instead of CUBIC. * Ensure JFS and XFS are =y. * Allow all users to read dmesg. * Enable ALi PATA controller on pmmx.
2019-07-14system/easy-kernel*: (Partly) sync kernel configsLuis Ressel1-232/+514
This is an attempt at syncing the kernel configs of our different arches. So far, only the 'Networking support/Networking options', 'Filesystems', 'Security Options' and 'Cryptographic API' sections have been handled, since those require much less knowledge about some of the more exotic hardware we support than some of the other sections. Some notable changes: Network * Enable IPsec, miscellaneous tunnels, and the diag interfaces for all socket families. * Enable policy routing (for wireguard). * Make the CUBIC TCP congestion control algorithm the default everywhere, provide a few other common choices. * Support FQ_CODEL. We may want to support further QoS features. * Disable support for PF_KEY sockets, which shouldn't be required by our IPsec userland tools. * Enable most netfilter features, except for arptables/ebtables/nfacct/ nfqueue/ipset, whose userland tools we don't provide yet, and a few other very specialized options. Filesystems * Build everything except for ext4, iso9660, vfat and squashfs as modules. * Use the ext4 driver for ext2 filesystems. * Disable the kernel automounter, which is currently only enabled on ppc32 and aarch64. Security * Only grant root access to dmesg by default; this can be overriden via a sysctl. * Support Yama; it doesn't do anything unless explicitly enabled by a sysctl, and may be useful to some users. * Disable AppAarmor, which is currently only enabled on pmmx and x86_64. Crypto * Disable a lot of uncommon ciphers which are unlikely to be used by anything. * Build all crypto code as modules (where possible); this means users with a dm-crypt-encrypted root filesystem now need to provide the appropriate kernel modules in their initramfs images on all arches. * Disable support for dedicated cryptographic coprocessors; we are not in a position to evaluate their security and performance benefits or disadvantages. Other * Allow serial consoles to be used as the kernel console on all arches; this is important for VMs.
2019-06-25system/easy-kernel*: update checksums for configsA. Wilcox1-1/+1
2019-06-25system/easy-kernel*: Enable the crypto user API modulesLuis Ressel1-4/+5
The SKCIPHER and HASH components are required for cryptsetup/dm-crypt, and there's no reason not to enable RNG and AEAD as well.
2019-06-22system/easy-kernel-power8*: use new mc14A. Wilcox1-1/+1
2019-06-17Kernel: [CVE] bump to 4.14.127-mc14A. Wilcox4-106/+8
2019-06-02system/easy-kernel-power8-64k: this commit is a mirageA. Wilcox2-2/+2
2019-06-02system/easy-kernel*: unify config options, fix config stuffA. Wilcox2-89/+133
2019-02-28system/easy-kernel*: Fix build for powerpc64 with GCC 8A. Wilcox2-2/+87
2019-02-20system/easy-kernel*: Make the easy-kernel packages more similarLuis Ressel1-26/+40
Only three of the changes should be user-visible: (1) /boot/System.map --> /boot/System.map-VERSION (2) easy-kernel-power8's CONFIG_LOCALVERSION has been changed from "-p8" to "-power8" (3) easy-kernel-power8-64k now has its own src subpackage instead of relying on easy-kernel-power8-src.
2018-12-18system/easy-kernel-power8*: update checksums for respun mc131.0-BETA2A. Wilcox1-1/+1
2018-12-16system/easy-kernel: bump to 4.14.88-mc13A. Wilcox1-3/+3
2018-11-17system/easy-kernel*: add bridge/net modules to PPC64 configsA. Wilcox2-11/+46
2018-10-22system/easy-kernel-power8*: bump to mc11 tooA. Wilcox1-1/+1
2018-10-16system/easy-kernel*: bump to 4.14.76-mc11A. Wilcox1-3/+3
2018-09-12system/easy-kernel-power8-64k: fix provides lineA. Wilcox1-1/+1
2018-09-12system/easy-kernel-power8-64k: new packageA. Wilcox4-0/+4610