Skip to content

Linux hardened kernels for 2024-05-20#313236

Merged
fabianhjr merged 8 commits intomasterfrom
update-hardened
May 21, 2024
Merged

Linux hardened kernels for 2024-05-20#313236
fabianhjr merged 8 commits intomasterfrom
update-hardened

Conversation

@fabianhjr
Copy link
Member

@fabianhjr fabianhjr commented May 20, 2024 •
edited
Loading

Description of changes

Previous hardened specific upgrade: #308833
Previous general kernel upgrade: #312417

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Add a 👍 reaction to pull requests you find important.

@fabianhjr fabianhjr requested a review from K900 May 20, 2024 21:16
@github-actions github-actions bot added 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 6.topic: kernel The Linux kernel labels May 20, 2024
@fabianhjr
Copy link
Member Author

fabianhjr commented May 20, 2024

Only built 6.9.1-hardened1

@fabianhjr
Copy link
Member Author

fabianhjr commented May 20, 2024

Seems like ofBorg ran out of storage during eval: https://gist.github.com/GrahamcOfBorg/1e6ccac55054ec3c4646681e594b60ed

@fabianhjr
Copy link
Member Author

fabianhjr commented May 20, 2024

@ofborg eval

@ofborg ofborg bot added the 8.has: package (new) This PR adds a new package label May 20, 2024
@ofborg ofborg bot added 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 1001-2500 This PR causes many rebuilds on Linux and should target the staging branches. labels May 20, 2024
@fabianhjr fabianhjr merged commit 13003e4 into master May 21, 2024
@fabianhjr fabianhjr deleted the update-hardened branch May 21, 2024 20:34
@Mynacol Mynacol mentioned this pull request Jun 15, 2024
Closed
13 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@K900 K900 Awaiting requested review from K900

@TredwellGit TredwellGit Awaiting requested review from TredwellGit

@alyssais alyssais Awaiting requested review from alyssais

@Ma27 Ma27 Awaiting requested review from Ma27

@thoughtpolice thoughtpolice Awaiting requested review from thoughtpolice

@NeQuissimus NeQuissimus Awaiting requested review from NeQuissimus

Assignees

No one assigned

Labels

6.topic: kernel The Linux kernel 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 8.has: package (new) This PR adds a new package 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 1001-2500 This PR causes many rebuilds on Linux and should target the staging branches.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@fabianhjr