Skip to content

[Manual Backport release-23.11] Linux Hardened Kernels 2024-05-20#316231

Merged
vcunat merged 23 commits intoNixOS:release-23.11from
Mynacol:linux-hardened-2024-05-20-backport
Jun 12, 2024
Merged

[Manual Backport release-23.11] Linux Hardened Kernels 2024-05-20#316231
vcunat merged 23 commits intoNixOS:release-23.11from
Mynacol:linux-hardened-2024-05-20-backport

Conversation

@Mynacol
Copy link
Contributor

@Mynacol Mynacol commented May 31, 2024

Description of changes

Manual backport of #315413 by backporting all linux-hardened updates so far, but leaving the commits out that drop kernel versions.

Things done

  • Built on platform(s)
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
    • sandbox = relaxed
    • sandbox = true
  • Tested, as applicable:
  • Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
  • Tested basic functionality of all binary files (usually in ./result/bin/)
  • 24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)
    • (Package updates) Added a release notes entry if the change is major or breaking
    • (Module updates) Added a release notes entry if the change is significant
    • (Module addition) Added a release notes entry if adding a new NixOS module
  • Fits CONTRIBUTING.md.

Add a 👍 reaction to pull requests you find important.

whentze and others added 23 commits May 31, 2024 21:08
- ACPI_CUSTOM_METHOD: dropped in 0cc46f1a52b4220ec11d98a01575909ca820a7b4
- UBSAN_SANITIZE_ALL: dropped in 918327e9b7ffb45321cbb4b9b86b58ec555fe6b3
@github-actions github-actions bot added 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 6.topic: kernel The Linux kernel labels May 31, 2024
@ofborg ofborg bot added the 8.has: package (new) This PR adds a new package label May 31, 2024
@ofborg ofborg bot requested a review from TredwellGit May 31, 2024 19:51
@ofborg ofborg bot added 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 1001-2500 This PR causes many rebuilds on Linux and should target the staging branches. labels May 31, 2024
@Mynacol Mynacol changed the title [Manual Backport release-23.11] Linux Hardened Kernels 2024-05-03 [Manual Backport release-23.11] Linux Hardened Kernels 2024-05-20 May 31, 2024
@Mynacol Mynacol marked this pull request as ready for review May 31, 2024 23:16
@Mynacol Mynacol added the 1.severity: security Issues which raise a security issue, or PRs that fix one label May 31, 2024
@alyssais
Copy link
Member

alyssais commented Jun 3, 2024

Usually we would backport removals of EOL kernels.

@vcunat vcunat merged commit 0f89ad1 into NixOS:release-23.11 Jun 12, 2024
@vcunat
Copy link
Member

vcunat commented Jun 12, 2024

(That can still be added on top any time.)

@K900
Copy link
Contributor

K900 commented Jun 12, 2024

Please don't manually backport PARTS of kernel PRs. This is causing absolute heck for automated backports now.

@vcunat
Copy link
Member

vcunat commented Jun 12, 2024

Oh, I guess I was being careless.

@Mynacol Mynacol deleted the linux-hardened-2024-05-20-backport branch July 31, 2024 12:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 6.topic: kernel The Linux kernel 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS 8.has: package (new) This PR adds a new package 10.rebuild-darwin: 0 This PR does not cause any packages to rebuild on Darwin. 10.rebuild-linux: 501+ This PR causes many rebuilds on Linux and should normally target the staging branches. 10.rebuild-linux: 1001-2500 This PR causes many rebuilds on Linux and should target the staging branches.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants