From f9895dc62d6d1a70b7c9fe73b4ce18832ecf2e6d Mon Sep 17 00:00:00 2001 From: "Rick Farina (Zero_Chaos)" Date: Wed, 15 Jan 2025 12:21:35 -0500 Subject: [PATCH 1/3] pentoo-sources: 6.6.65->6.6.71 --- sys-kernel/pentoo-sources/Manifest | 6 +++--- .../files/{config-amd64-6.6.65 => config-amd64-6.6.71} | 10 ++++++---- .../files/{config-x86-6.6.65 => config-x86-6.6.71} | 10 ++++++---- ...rces-6.6.65.ebuild => pentoo-sources-6.6.71.ebuild} | 2 +- 4 files changed, 16 insertions(+), 12 deletions(-) rename sys-kernel/pentoo-sources/files/{config-amd64-6.6.65 => config-amd64-6.6.71} (99%) rename sys-kernel/pentoo-sources/files/{config-x86-6.6.65 => config-x86-6.6.71} (99%) rename sys-kernel/pentoo-sources/{pentoo-sources-6.6.65.ebuild => pentoo-sources-6.6.71.ebuild} (98%) diff --git a/sys-kernel/pentoo-sources/Manifest b/sys-kernel/pentoo-sources/Manifest index 837d2af849..5a49f883db 100644 --- a/sys-kernel/pentoo-sources/Manifest +++ b/sys-kernel/pentoo-sources/Manifest @@ -1,8 +1,8 @@ DIST genpatches-6.12-7.base.tar.xz 367676 BLAKE2B 7606acc5d274142a0dd1bbd0ace6cdf5dd74a7a594ed2e6d50cc3b62c03f43371ddab20eb639051077a564783ada9d08c459af88ee144b1310b91beecc24f106 SHA512 c1de8583d5baf08e75137068b868f2cb8cef7409bd481948b430de4390b5625d74f72031644c4e445bf55d5c430c9047cb280a05f2cc277a6a51d9ea372fa155 DIST genpatches-6.12-7.experimental.tar.xz 78116 BLAKE2B ea60858be3bcebfebab42eb437a58c31ebda504706cec570504f297fc8fe9942efd82b458398f6de17e0554e9dea9091f49d368411019873a19fc3c63000b5d0 SHA512 a764acb018b425101c234cdc6937d67b5e87e70702dcabfcf41edd36d8c71d325351f4152849c3978a68dde38a51a8c05292ca100e7390448ffc2144244b77c5 DIST genpatches-6.12-7.extras.tar.xz 4052 BLAKE2B e2759676e3ba5088f5cf53dffd34f4f00e9d975434df6cbaf0ca7af418bd361d402183fcb88af172e40f297d0653eb3bdd7f7252ae7433f88155303c54145b99 SHA512 853a9cf03acf258cf39a4e2a1eb1ee203583c5a3efad1e4bbeca3e045604d013f6a0b2b91ce62c4eb5a61b355afadb1838a6fd051962745559a1be0b54cf7117 -DIST genpatches-6.6-73.base.tar.xz 3928696 BLAKE2B c5955b4fd604c01e2056f167a4e4510e5c450daddc49348fd2434c65f20aa2789cc1823d03623cca15c47840830affd035676189fab16db34acf8df320b79646 SHA512 aea78f633aa046e4e1bbb4ae977eeab8f276cd007b6f7283db03be621293a5f29a5b0da95e761bc72153875ccbb9f2ac88625b3f6a6ea0cc742f565760c93198 -DIST genpatches-6.6-73.experimental.tar.xz 5760 BLAKE2B f1e237ae8f67b4c4d1e3c515bb52fdb97565cbb7fafd14fad0aca39b477fb3dc0452cab55fa41eb7a2042409db308325f6416b220c4e7a0f7a58139dffab7f80 SHA512 53c1a5768565a1f94db56a723ef643062d3502e9da149340e15a966e17ac99cc10a7bb3c5b51686a5a8a2d7d0cbd23bd1369360bdeeedecc0767a0a1d1160077 -DIST genpatches-6.6-73.extras.tar.xz 4056 BLAKE2B 7258b54caee92901aef45569d8d45d218640095b622e0106a0cd640d13fb0c377e9dc51271e5d652922ac250c74e99d091a668cad526d30821e4db676f8314cd SHA512 7b6995087d0f94c7f2cfec46090208bfd36cfee60dd26343cdc108a3e2e1ffb2e906f1e990cacde1f72d5b920a8746d4740f64c64bf39a8dfdae33949a35acac +DIST genpatches-6.6-80.base.tar.xz 4222992 BLAKE2B cbdd564aecb24378e09623688dfcf5bb1931d63823a339c99d7a8b436e16ed20b98cc682a5ffd10afd4c24a7e91542f140e7448b6b81acdc112c25ef982bb107 SHA512 273542404785a57a14a732c4e0924d0c94fc95c3980293c6d5ba6a30abe30f1f42d756dfef27c9ad5ffe57da84f2368ce9d51293d4b006d13dde2c8d0b1376a9 +DIST genpatches-6.6-80.experimental.tar.xz 5760 BLAKE2B de1b3cafd2ec9c84d75c08b2532228df4f234ac94ddee4224d000e7e748a856dda080c4899bf6f7969bae4bd80e1e5ebe017fd18006088464b27504f83db46b9 SHA512 11f72ed0b15f1d251f9ef539f512f39127a9a5721774c496334fffd956f9fab9a885c8325f2fbf711481f9b4874072b1e015dc77854017e47b550d346c72ade2 +DIST genpatches-6.6-80.extras.tar.xz 4060 BLAKE2B c83e6d97ed086ae3b9f3d6bf4cd29d4eae9f57f638eccab183dbcbde85886df00653634b1cf272f26580f32e1a7786f68960bc51f78a01540c61c0f5c7823b79 SHA512 a0e0b309a2022daf6343e21c0f435bd617d2a029c28297c7a082a8380157ea4fa52b12f92bd045ad8c3fb680cfe98edfe69e10f4d6a28f9b115afe8b07d75433 DIST linux-6.12.tar.xz 147906904 BLAKE2B b2ec2fc69218cacabbbe49f78384a5d259ca581b717617c12b000b16f4a4c59ee348ea886b37147f5f70fb9a7a01c1e2c8f19021078f6b23f5bc62d1c48d5e5e SHA512 a37b1823df7b4f72542f689b65882634740ba0401a42fdcf6601d9efd2e132e5a7650e70450ba76f6cd1f13ca31180f2ccee9d54fe4df89bc0000ade4380a548 DIST linux-6.6.tar.xz 140064536 BLAKE2B 5f02fd8696d42f7ec8c5fbadec8e7270bdcfcb1f9844a6c4db3e1fd461c93ce1ccda650ca72dceb4890ebcbbf768ba8fba0bce91efc49fbd2c307b04e95665f2 SHA512 458b2c34d46206f9b4ccbac54cc57aeca1eaecaf831bc441e59701bac6eadffc17f6ce24af6eadd0454964e843186539ac0d63295ad2cc32d112b60360c39a35 diff --git a/sys-kernel/pentoo-sources/files/config-amd64-6.6.65 b/sys-kernel/pentoo-sources/files/config-amd64-6.6.71 similarity index 99% rename from sys-kernel/pentoo-sources/files/config-amd64-6.6.65 rename to sys-kernel/pentoo-sources/files/config-amd64-6.6.71 index c1d30b5359..92afbbc1b4 100644 --- a/sys-kernel/pentoo-sources/files/config-amd64-6.6.65 +++ b/sys-kernel/pentoo-sources/files/config-amd64-6.6.71 @@ -1,15 +1,15 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.6.65-pentoo Kernel Configuration +# Linux/x86 6.6.71-pentoo Kernel Configuration # -CONFIG_CC_VERSION_TEXT="gcc (Gentoo Hardened 14.2.1_p20241116 p3) 14.2.1 20241116" +CONFIG_CC_VERSION_TEXT="gcc (Gentoo Hardened 14.2.1_p20241221 p7) 14.2.1 20241221" CONFIG_CC_IS_GCC=y CONFIG_GCC_VERSION=140201 CONFIG_CLANG_VERSION=0 CONFIG_AS_IS_GNU=y -CONFIG_AS_VERSION=24200 +CONFIG_AS_VERSION=24301 CONFIG_LD_IS_BFD=y -CONFIG_LD_VERSION=24200 +CONFIG_LD_VERSION=24301 CONFIG_LLD_VERSION=0 CONFIG_CC_CAN_LINK=y CONFIG_CC_CAN_LINK_STATIC=y @@ -2719,6 +2719,7 @@ CONFIG_ZRAM_DEF_COMP_LZ4=y # CONFIG_ZRAM_DEF_COMP_842 is not set CONFIG_ZRAM_DEF_COMP="lz4" CONFIG_ZRAM_WRITEBACK=y +CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y CONFIG_ZRAM_MEMORY_TRACKING=y CONFIG_ZRAM_MULTI_COMP=y CONFIG_BLK_DEV_LOOP=y @@ -11110,6 +11111,7 @@ CONFIG_XFS_POSIX_ACL=y CONFIG_XFS_RT=y # CONFIG_XFS_ONLINE_SCRUB is not set CONFIG_XFS_DEBUG=y +# CONFIG_XFS_DEBUG_EXPENSIVE is not set CONFIG_XFS_ASSERT_FATAL=y CONFIG_GFS2_FS=m CONFIG_GFS2_FS_LOCKING_DLM=y diff --git a/sys-kernel/pentoo-sources/files/config-x86-6.6.65 b/sys-kernel/pentoo-sources/files/config-x86-6.6.71 similarity index 99% rename from sys-kernel/pentoo-sources/files/config-x86-6.6.65 rename to sys-kernel/pentoo-sources/files/config-x86-6.6.71 index 2cf6e7a766..da52a22e93 100644 --- a/sys-kernel/pentoo-sources/files/config-x86-6.6.65 +++ b/sys-kernel/pentoo-sources/files/config-x86-6.6.71 @@ -1,15 +1,15 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.6.65-pentoo Kernel Configuration +# Linux/x86 6.6.71-pentoo Kernel Configuration # -CONFIG_CC_VERSION_TEXT="gcc (Gentoo Hardened 14.2.1_p20241116 p3) 14.2.1 20241116" +CONFIG_CC_VERSION_TEXT="gcc (Gentoo Hardened 14.2.1_p20241221 p7) 14.2.1 20241221" CONFIG_CC_IS_GCC=y CONFIG_GCC_VERSION=140201 CONFIG_CLANG_VERSION=0 CONFIG_AS_IS_GNU=y -CONFIG_AS_VERSION=24200 +CONFIG_AS_VERSION=24301 CONFIG_LD_IS_BFD=y -CONFIG_LD_VERSION=24200 +CONFIG_LD_VERSION=24301 CONFIG_LLD_VERSION=0 CONFIG_CC_CAN_LINK=y CONFIG_CC_CAN_LINK_STATIC=y @@ -2581,6 +2581,7 @@ CONFIG_ZRAM_DEF_COMP_ZSTD=y # CONFIG_ZRAM_DEF_COMP_842 is not set CONFIG_ZRAM_DEF_COMP="zstd" CONFIG_ZRAM_WRITEBACK=y +CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y CONFIG_ZRAM_MEMORY_TRACKING=y CONFIG_ZRAM_MULTI_COMP=y CONFIG_BLK_DEV_LOOP=y @@ -10122,6 +10123,7 @@ CONFIG_XFS_POSIX_ACL=y CONFIG_XFS_RT=y # CONFIG_XFS_ONLINE_SCRUB is not set CONFIG_XFS_DEBUG=y +# CONFIG_XFS_DEBUG_EXPENSIVE is not set CONFIG_XFS_ASSERT_FATAL=y CONFIG_GFS2_FS=m CONFIG_GFS2_FS_LOCKING_DLM=y diff --git a/sys-kernel/pentoo-sources/pentoo-sources-6.6.65.ebuild b/sys-kernel/pentoo-sources/pentoo-sources-6.6.71.ebuild similarity index 98% rename from sys-kernel/pentoo-sources/pentoo-sources-6.6.65.ebuild rename to sys-kernel/pentoo-sources/pentoo-sources-6.6.71.ebuild index f31ce62490..b2c3ea56fe 100644 --- a/sys-kernel/pentoo-sources/pentoo-sources-6.6.65.ebuild +++ b/sys-kernel/pentoo-sources/pentoo-sources-6.6.71.ebuild @@ -4,7 +4,7 @@ EAPI="8" ETYPE="sources" K_WANT_GENPATCHES="base extras experimental" -K_GENPATCHES_VER="73" +K_GENPATCHES_VER="80" inherit kernel-2 detect_version From 5a97c6dbf6bb0b4884669f3400fc848b1e65eeec Mon Sep 17 00:00:00 2001 From: "Rick Farina (Zero_Chaos)" Date: Wed, 15 Jan 2025 12:59:55 -0500 Subject: [PATCH 2/3] pentoo-sources: 6.12.4->6.12.9 --- sys-kernel/pentoo-sources/Manifest | 6 +-- ...onfig-amd64-6.12.4 => config-amd64-6.12.9} | 52 +++++++++++++++---- .../pentoo-sources/files/config-amd64-latest | 2 +- .../{config-x86-6.12.4 => config-x86-6.12.9} | 11 ++-- .../pentoo-sources/files/config-x86-latest | 2 +- ....4.ebuild => pentoo-sources-6.12.9.ebuild} | 2 +- 6 files changed, 52 insertions(+), 23 deletions(-) rename sys-kernel/pentoo-sources/files/{config-amd64-6.12.4 => config-amd64-6.12.9} (99%) rename sys-kernel/pentoo-sources/files/{config-x86-6.12.4 => config-x86-6.12.9} (99%) rename sys-kernel/pentoo-sources/{pentoo-sources-6.12.4.ebuild => pentoo-sources-6.12.9.ebuild} (98%) diff --git a/sys-kernel/pentoo-sources/Manifest b/sys-kernel/pentoo-sources/Manifest index 5a49f883db..eb48f5ccaa 100644 --- a/sys-kernel/pentoo-sources/Manifest +++ b/sys-kernel/pentoo-sources/Manifest @@ -1,6 +1,6 @@ -DIST genpatches-6.12-7.base.tar.xz 367676 BLAKE2B 7606acc5d274142a0dd1bbd0ace6cdf5dd74a7a594ed2e6d50cc3b62c03f43371ddab20eb639051077a564783ada9d08c459af88ee144b1310b91beecc24f106 SHA512 c1de8583d5baf08e75137068b868f2cb8cef7409bd481948b430de4390b5625d74f72031644c4e445bf55d5c430c9047cb280a05f2cc277a6a51d9ea372fa155 -DIST genpatches-6.12-7.experimental.tar.xz 78116 BLAKE2B ea60858be3bcebfebab42eb437a58c31ebda504706cec570504f297fc8fe9942efd82b458398f6de17e0554e9dea9091f49d368411019873a19fc3c63000b5d0 SHA512 a764acb018b425101c234cdc6937d67b5e87e70702dcabfcf41edd36d8c71d325351f4152849c3978a68dde38a51a8c05292ca100e7390448ffc2144244b77c5 -DIST genpatches-6.12-7.extras.tar.xz 4052 BLAKE2B e2759676e3ba5088f5cf53dffd34f4f00e9d975434df6cbaf0ca7af418bd361d402183fcb88af172e40f297d0653eb3bdd7f7252ae7433f88155303c54145b99 SHA512 853a9cf03acf258cf39a4e2a1eb1ee203583c5a3efad1e4bbeca3e045604d013f6a0b2b91ce62c4eb5a61b355afadb1838a6fd051962745559a1be0b54cf7117 +DIST genpatches-6.12-12.base.tar.xz 758168 BLAKE2B 2f9fca909ebc5710fa9154fe4c824116e48adbf9d4e857a75661b0689a0c44add897a502700edf415ba4b664fe586ba490f16b4dd12f00b19b80c34800d4b6be SHA512 c7d125caa03b0ff053f37fc82a4fbd9d3be8f8eee024bf05639d4f3c3b51574983e5d0beadb7714865f6d72e02a22ceb528c8359115ac995b63f5d87eb055bb9 +DIST genpatches-6.12-12.experimental.tar.xz 78128 BLAKE2B 771782a7f3c067bac0311f6f45cde1fa5fad2a1546c784bc00a6f3360cb52fe7ca157246e4c33d9674736eddec41a84daf123722b1aade862feecf563af7e145 SHA512 249c330f3844d67ed596c61cf032c0ac141f3319e438194be5cad9df970242564b621a9b28d51c9a3f0424e47d2c4070804a5e7bcd9b9683522991bf7b87a533 +DIST genpatches-6.12-12.extras.tar.xz 4056 BLAKE2B 8e00efcd3af7862fb8bde9d8a2e9d51fd999474e33e63e058c3580b187abc71c2206663d37b7b4ebd96193c6185a29f5d1e9e9ef98167703f01bc5c3c9b767c7 SHA512 a52dec8d607e64c112a2b1c731f65ca3fe340712bb390c25e8f7bee90cabea619922540998ef6b95b97dc0626b4dfe3a9713a3f8e7efa8f99f3ebd95e8fdf855 DIST genpatches-6.6-80.base.tar.xz 4222992 BLAKE2B cbdd564aecb24378e09623688dfcf5bb1931d63823a339c99d7a8b436e16ed20b98cc682a5ffd10afd4c24a7e91542f140e7448b6b81acdc112c25ef982bb107 SHA512 273542404785a57a14a732c4e0924d0c94fc95c3980293c6d5ba6a30abe30f1f42d756dfef27c9ad5ffe57da84f2368ce9d51293d4b006d13dde2c8d0b1376a9 DIST genpatches-6.6-80.experimental.tar.xz 5760 BLAKE2B de1b3cafd2ec9c84d75c08b2532228df4f234ac94ddee4224d000e7e748a856dda080c4899bf6f7969bae4bd80e1e5ebe017fd18006088464b27504f83db46b9 SHA512 11f72ed0b15f1d251f9ef539f512f39127a9a5721774c496334fffd956f9fab9a885c8325f2fbf711481f9b4874072b1e015dc77854017e47b550d346c72ade2 DIST genpatches-6.6-80.extras.tar.xz 4060 BLAKE2B c83e6d97ed086ae3b9f3d6bf4cd29d4eae9f57f638eccab183dbcbde85886df00653634b1cf272f26580f32e1a7786f68960bc51f78a01540c61c0f5c7823b79 SHA512 a0e0b309a2022daf6343e21c0f435bd617d2a029c28297c7a082a8380157ea4fa52b12f92bd045ad8c3fb680cfe98edfe69e10f4d6a28f9b115afe8b07d75433 diff --git a/sys-kernel/pentoo-sources/files/config-amd64-6.12.4 b/sys-kernel/pentoo-sources/files/config-amd64-6.12.9 similarity index 99% rename from sys-kernel/pentoo-sources/files/config-amd64-6.12.4 rename to sys-kernel/pentoo-sources/files/config-amd64-6.12.9 index a9b3bad936..017f92fc68 100644 --- a/sys-kernel/pentoo-sources/files/config-amd64-6.12.4 +++ b/sys-kernel/pentoo-sources/files/config-amd64-6.12.9 @@ -1,15 +1,15 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.12.4-pentoo Kernel Configuration +# Linux/x86 6.12.9-pentoo Kernel Configuration # -CONFIG_CC_VERSION_TEXT="gcc (Gentoo Hardened 14.2.1_p20241116 p3) 14.2.1 20241116" +CONFIG_CC_VERSION_TEXT="gcc (Gentoo Hardened 14.2.1_p20241221 p7) 14.2.1 20241221" CONFIG_CC_IS_GCC=y CONFIG_GCC_VERSION=140201 CONFIG_CLANG_VERSION=0 CONFIG_AS_IS_GNU=y -CONFIG_AS_VERSION=24200 +CONFIG_AS_VERSION=24301 CONFIG_LD_IS_BFD=y -CONFIG_LD_VERSION=24200 +CONFIG_LD_VERSION=24301 CONFIG_LLD_VERSION=0 CONFIG_RUSTC_VERSION=108200 CONFIG_RUSTC_LLVM_VERSION=190101 @@ -87,7 +87,6 @@ CONFIG_SPARSE_IRQ=y CONFIG_CLOCKSOURCE_WATCHDOG=y CONFIG_ARCH_CLOCKSOURCE_INIT=y -CONFIG_CLOCKSOURCE_VALIDATE_LAST_CYCLE=y CONFIG_GENERIC_TIME_VSYSCALL=y CONFIG_GENERIC_CLOCKEVENTS=y CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y @@ -495,12 +494,16 @@ CONFIG_MTRR_SANITIZER_ENABLE_DEFAULT=0 CONFIG_MTRR_SANITIZER_SPARE_REG_NR_DEFAULT=1 CONFIG_X86_PAT=y CONFIG_X86_UMIP=y +CONFIG_CC_HAS_IBT=y +CONFIG_X86_CET=y +CONFIG_X86_KERNEL_IBT=y CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y CONFIG_ARCH_PKEY_BITS=4 CONFIG_X86_INTEL_TSX_MODE_OFF=y # CONFIG_X86_INTEL_TSX_MODE_ON is not set # CONFIG_X86_INTEL_TSX_MODE_AUTO is not set CONFIG_X86_SGX=y +CONFIG_X86_USER_SHADOW_STACK=y CONFIG_EFI=y CONFIG_EFI_STUB=y # CONFIG_EFI_HANDOVER_PROTOCOL is not set @@ -547,13 +550,26 @@ CONFIG_HAVE_LIVEPATCH=y CONFIG_CC_HAS_NAMED_AS=y CONFIG_CC_HAS_NAMED_AS_FIXED_SANITIZERS=y CONFIG_USE_X86_SEG_SUPPORT=y +CONFIG_CC_HAS_SLS=y +CONFIG_CC_HAS_RETURN_THUNK=y +CONFIG_CC_HAS_ENTRY_PADDING=y CONFIG_FUNCTION_PADDING_CFI=11 CONFIG_FUNCTION_PADDING_BYTES=16 +CONFIG_CALL_PADDING=y +CONFIG_HAVE_CALL_THUNKS=y +CONFIG_CALL_THUNKS=y +CONFIG_PREFIX_SYMBOLS=y CONFIG_CPU_MITIGATIONS=y CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y CONFIG_MITIGATION_RETPOLINE=y +CONFIG_MITIGATION_RETHUNK=y +CONFIG_MITIGATION_UNRET_ENTRY=y +CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y +# CONFIG_CALL_THUNKS_DEBUG is not set CONFIG_MITIGATION_IBPB_ENTRY=y CONFIG_MITIGATION_IBRS_ENTRY=y +CONFIG_MITIGATION_SRSO=y +CONFIG_MITIGATION_SLS=y CONFIG_MITIGATION_GDS=y CONFIG_MITIGATION_RFDS=y CONFIG_MITIGATION_SPECTRE_BHI=y @@ -753,6 +769,7 @@ CONFIG_AMD_NB=y # CONFIG_IA32_EMULATION=y # CONFIG_IA32_EMULATION_DEFAULT_DISABLED is not set +CONFIG_X86_X32_ABI=y CONFIG_COMPAT_32=y CONFIG_COMPAT=y CONFIG_COMPAT_FOR_U64_ALIGNMENT=y @@ -801,6 +818,14 @@ CONFIG_KVM_XEN=y # CONFIG_KVM_PROVE_MMU is not set CONFIG_KVM_EXTERNAL_WRITE_TRACKING=y CONFIG_KVM_MAX_NR_VCPUS=4096 +CONFIG_AS_AVX512=y +CONFIG_AS_SHA1_NI=y +CONFIG_AS_SHA256_NI=y +CONFIG_AS_TPAUSE=y +CONFIG_AS_GFNI=y +CONFIG_AS_VAES=y +CONFIG_AS_VPCLMULQDQ=y +CONFIG_AS_WRUSS=y CONFIG_ARCH_CONFIGURES_CPU_MITIGATIONS=y CONFIG_ARCH_HAS_DMA_OPS=y @@ -875,6 +900,8 @@ CONFIG_SECCOMP_FILTER=y # CONFIG_SECCOMP_CACHE_DEBUG is not set CONFIG_HAVE_ARCH_STACKLEAK=y CONFIG_HAVE_STACKPROTECTOR=y +CONFIG_STACKPROTECTOR=y +CONFIG_STACKPROTECTOR_STRONG=y CONFIG_ARCH_SUPPORTS_LTO_CLANG=y CONFIG_ARCH_SUPPORTS_LTO_CLANG_THIN=y CONFIG_LTO_NONE=y @@ -964,6 +991,8 @@ CONFIG_GCC_PLUGINS=y CONFIG_FUNCTION_ALIGNMENT_4B=y CONFIG_FUNCTION_ALIGNMENT_16B=y CONFIG_FUNCTION_ALIGNMENT=16 +CONFIG_CC_HAS_MIN_FUNCTION_ALIGNMENT=y +CONFIG_CC_HAS_SANE_FUNCTION_ALIGNMENT=y # end of General architecture-dependent options CONFIG_RT_MUTEXES=y @@ -2517,6 +2546,7 @@ CONFIG_EFI_EMBEDDED_FIRMWARE=y CONFIG_UEFI_CPER=y CONFIG_UEFI_CPER_X86=y +CONFIG_IMX_SCMI_MISC_DRV=m # # Qualcomm firmware drivers @@ -11971,16 +12001,16 @@ CONFIG_LSM="yama,loadpin,safesetid,integrity" # # Kernel hardening options # -CONFIG_GCC_PLUGIN_STRUCTLEAK=y # # Memory initialization # +CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y +CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y # CONFIG_INIT_STACK_NONE is not set -# CONFIG_GCC_PLUGIN_STRUCTLEAK_USER is not set -CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF=y -# CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL is not set -# CONFIG_GCC_PLUGIN_STRUCTLEAK_VERBOSE is not set +# CONFIG_INIT_STACK_ALL_PATTERN is not set +CONFIG_INIT_STACK_ALL_ZERO=y CONFIG_GCC_PLUGIN_STACKLEAK=y # CONFIG_GCC_PLUGIN_STACKLEAK_VERBOSE is not set CONFIG_STACKLEAK_TRACK_MIN_SIZE=100 @@ -12213,6 +12243,7 @@ CONFIG_CRYPTO_TWOFISH_X86_64_3WAY=y CONFIG_CRYPTO_TWOFISH_AVX_X86_64=y CONFIG_CRYPTO_ARIA_AESNI_AVX_X86_64=m CONFIG_CRYPTO_ARIA_AESNI_AVX2_X86_64=m +CONFIG_CRYPTO_ARIA_GFNI_AVX512_X86_64=m CONFIG_CRYPTO_CHACHA20_X86_64=m CONFIG_CRYPTO_AEGIS128_AESNI_SSE2=m CONFIG_CRYPTO_NHPOLY1305_SSE2=m @@ -12645,7 +12676,6 @@ CONFIG_SCHED_INFO=y # CONFIG_SCHEDSTATS is not set # end of Scheduler Debugging -# CONFIG_DEBUG_TIMEKEEPING is not set CONFIG_DEBUG_PREEMPT=y # diff --git a/sys-kernel/pentoo-sources/files/config-amd64-latest b/sys-kernel/pentoo-sources/files/config-amd64-latest index e774fdd93b..16d267e463 120000 --- a/sys-kernel/pentoo-sources/files/config-amd64-latest +++ b/sys-kernel/pentoo-sources/files/config-amd64-latest @@ -1 +1 @@ -config-amd64-6.12.4 \ No newline at end of file +config-amd64-6.12.9 \ No newline at end of file diff --git a/sys-kernel/pentoo-sources/files/config-x86-6.12.4 b/sys-kernel/pentoo-sources/files/config-x86-6.12.9 similarity index 99% rename from sys-kernel/pentoo-sources/files/config-x86-6.12.4 rename to sys-kernel/pentoo-sources/files/config-x86-6.12.9 index 3015938467..9255c02aac 100644 --- a/sys-kernel/pentoo-sources/files/config-x86-6.12.4 +++ b/sys-kernel/pentoo-sources/files/config-x86-6.12.9 @@ -1,15 +1,15 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.12.4-pentoo Kernel Configuration +# Linux/x86 6.12.9-pentoo Kernel Configuration # -CONFIG_CC_VERSION_TEXT="gcc (Gentoo Hardened 14.2.1_p20241116 p3) 14.2.1 20241116" +CONFIG_CC_VERSION_TEXT="gcc (Gentoo Hardened 14.2.1_p20241221 p7) 14.2.1 20241221" CONFIG_CC_IS_GCC=y CONFIG_GCC_VERSION=140201 CONFIG_CLANG_VERSION=0 CONFIG_AS_IS_GNU=y -CONFIG_AS_VERSION=24200 +CONFIG_AS_VERSION=24301 CONFIG_LD_IS_BFD=y -CONFIG_LD_VERSION=24200 +CONFIG_LD_VERSION=24301 CONFIG_LLD_VERSION=0 CONFIG_RUSTC_VERSION=108200 CONFIG_RUSTC_LLVM_VERSION=190101 @@ -86,7 +86,6 @@ CONFIG_SPARSE_IRQ=y CONFIG_CLOCKSOURCE_WATCHDOG=y CONFIG_ARCH_CLOCKSOURCE_INIT=y -CONFIG_CLOCKSOURCE_VALIDATE_LAST_CYCLE=y CONFIG_GENERIC_TIME_VSYSCALL=y CONFIG_GENERIC_CLOCKEVENTS=y CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y @@ -2388,6 +2387,7 @@ CONFIG_EFI_EMBEDDED_FIRMWARE=y CONFIG_UEFI_CPER=y CONFIG_UEFI_CPER_X86=y +CONFIG_IMX_SCMI_MISC_DRV=m # # Qualcomm firmware drivers @@ -11559,7 +11559,6 @@ CONFIG_SCHED_INFO=y # CONFIG_SCHEDSTATS is not set # end of Scheduler Debugging -# CONFIG_DEBUG_TIMEKEEPING is not set CONFIG_DEBUG_PREEMPT=y # diff --git a/sys-kernel/pentoo-sources/files/config-x86-latest b/sys-kernel/pentoo-sources/files/config-x86-latest index cdd92baa47..9de4b4d850 120000 --- a/sys-kernel/pentoo-sources/files/config-x86-latest +++ b/sys-kernel/pentoo-sources/files/config-x86-latest @@ -1 +1 @@ -config-x86-6.12.4 \ No newline at end of file +config-x86-6.12.9 \ No newline at end of file diff --git a/sys-kernel/pentoo-sources/pentoo-sources-6.12.4.ebuild b/sys-kernel/pentoo-sources/pentoo-sources-6.12.9.ebuild similarity index 98% rename from sys-kernel/pentoo-sources/pentoo-sources-6.12.4.ebuild rename to sys-kernel/pentoo-sources/pentoo-sources-6.12.9.ebuild index 9906ae6677..524ea0693e 100644 --- a/sys-kernel/pentoo-sources/pentoo-sources-6.12.4.ebuild +++ b/sys-kernel/pentoo-sources/pentoo-sources-6.12.9.ebuild @@ -4,7 +4,7 @@ EAPI="8" ETYPE="sources" K_WANT_GENPATCHES="base extras experimental" -K_GENPATCHES_VER="7" +K_GENPATCHES_VER="12" inherit kernel-2 detect_version From 551ad2d7e4c9e2a972a6e5a7340f33c63bcfff62 Mon Sep 17 00:00:00 2001 From: "Rick Farina (Zero_Chaos)" Date: Wed, 15 Jan 2025 13:00:26 -0500 Subject: [PATCH 3/3] pentoo-updater: include firmware in size estimation --- scripts/pentoo-updater.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/pentoo-updater.sh b/scripts/pentoo-updater.sh index 35bd2df5ba..ac9886d262 100755 --- a/scripts/pentoo-updater.sh +++ b/scripts/pentoo-updater.sh @@ -336,7 +336,7 @@ update_kernel() { fi #then we set genkernel options as needed - genkernelopts="--kernel-config=/usr/share/pentoo-sources/config-${ARCH}-${bestkern_pv} --compress-initramfs-type=zstd --bootloader=grub2 --save-config --kernel-filename=kernel-genkernel-%%ARCH%%-%%KV%% --initramfs-filename=initramfs-genkernel-%%ARCH%%-%%KV%% --systemmap-filename=System.map-genkernel-%%ARCH%%-%%KV%% --kernel-localversion=UNSET --module-rebuild --save-config --no-microcode --no-microcode-initramfs --check-free-disk-space-bootdir=50" + genkernelopts="--kernel-config=/usr/share/pentoo-sources/config-${ARCH}-${bestkern_pv} --compress-initramfs-type=zstd --bootloader=grub2 --save-config --kernel-filename=kernel-genkernel-%%ARCH%%-%%KV%% --initramfs-filename=initramfs-genkernel-%%ARCH%%-%%KV%% --systemmap-filename=System.map-genkernel-%%ARCH%%-%%KV%% --kernel-localversion=UNSET --module-rebuild --save-config --no-microcode --no-microcode-initramfs --check-free-disk-space-bootdir=75" if grep -q btrfs /etc/fstab || grep -q btrfs /proc/cmdline; then genkernelopts="${genkernelopts} --btrfs" fi