Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
113 commits
Select commit Hold shift + click to select a range
cf45c13
Add CIQ configs
bmastbergen Jan 5, 2026
b3fa024
Add initial CIQ config tweaks
bmastbergen Jan 5, 2026
57eb539
github actions: Make Builds on Merge Request Work
PlaidCat Jan 16, 2025
b90663b
arm64: add kernel config option to lock down when in Secure Boot mode
Aug 30, 2016
ddc1c99
efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
dhowells Feb 18, 2019
894ebe6
efi: Lock down the kernel if booted in secure boot mode
bwhacks Sep 10, 2019
825a621
mtd: phram,slram: Disable when the kernel is locked down
bwhacks Aug 30, 2019
cc1e860
Add efi_status_to_str() and rework efi_status_to_err().
vathpela Oct 2, 2017
5e5cb72
[CIQ] v6.18.3 - rebased configs
github-actions[bot] Jan 7, 2026
a13a8f2
[CIQ] v6.18.7 - rebased configs
github-actions[bot] Jan 26, 2026
bbf5290
[CIQ] v6.18.9 - rebased configs
github-actions[bot] Feb 6, 2026
2e93e8f
[CIQ] v6.18.14 - rebased configs
github-actions[bot] Feb 27, 2026
6e1f2c1
[CIQ] v6.18.17 - rebased configs
github-actions[bot] Mar 13, 2026
4f9e273
configs: Enable INTEL_TDX_HOST for x86_64 configs
bmastbergen Mar 24, 2026
abb43bf
Import initial dist-git for 6.18.19
bmastbergen Mar 18, 2026
e8107e3
kernel.spec: Fix buildid and pkgrelease
bmastbergen Mar 24, 2026
9f834d9
Remove gating.yaml
bmastbergen Mar 24, 2026
0919e65
Update sbat templates
bmastbergen Mar 24, 2026
d13a0d4
Ensure all qdiscs are in modules-core
bmastbergen Mar 25, 2026
a765d87
Remove modules-rt-kvm references
bmastbergen Mar 25, 2026
df7b558
Set buildid to .1
bmastbergen Mar 25, 2026
2d761db
rocky: generalize rule for kunit and test kmod placement
bmastbergen Mar 25, 2026
aab71c0
Rename package to kernel-clk6.18
bmastbergen Mar 26, 2026
78957c7
Remove gemini switch
bmastbergen Mar 26, 2026
126116b
Add Provides/Conflicts for non-parallel installable kernel-* packages
bmastbergen Mar 26, 2026
412ae90
Rename tool packages with pkg_suffix and add Provides/Conflicts
bmastbergen Mar 26, 2026
f32b0d2
Use gzip for symvers compression to match upstream
jdieter Mar 30, 2026
9826a96
Add +clk6.18 suffix to kernel version string (uname -r)
jdieter Mar 30, 2026
da0391a
Add kernel-clk6.18-default package to set default kernel
bmastbergen Mar 30, 2026
d9ff90f
Consolidate spec version defines and prevent CLK kernel from hijackin…
jdieter Mar 31, 2026
e14c760
Rework -default package and clean up tool subpackage naming
jdieter Mar 31, 2026
99e43fe
Bundle bindgen-cli from source for Rocky 9.6 builds
jdieter Mar 31, 2026
1863dc3
[CIQ] v6.18.20 - updated spec
github-actions[bot] Apr 1, 2026
9321eb1
[CIQ] v6.18.21 - updated spec
github-actions[bot] Apr 3, 2026
79bfad6
github actions: Inherit the Kernel CI Automated workflow from main
bmastbergen Mar 12, 2026
b501cf8
spec: Skip certificate setup for noarch builds
bmastbergen Apr 7, 2026
78dffab
Update spec for ciq_kernel-6.18.21-2
bmastbergen Apr 7, 2026
0b8ffef
github actions: Use trigger for kernelCI
bmastbergen Apr 8, 2026
135f750
github actions: Trigger kernelCI on ciq-6.18.y-next branches
bmastbergen Apr 9, 2026
9a15459
[CIQ] v6.18.22 - updated spec
github-actions[bot] Apr 12, 2026
8a84067
spec: Fix posttrans script to handle noarch package expansion
bmastbergen Apr 19, 2026
044d32e
[CIQ] ciq_kernel-6.18.22-2 - updated spec
bmastbergen Apr 20, 2026
bc9663f
spec: update branding in package descriptions and log messages
bmastbergen Apr 14, 2026
10964cc
github actions: add RPM build workflow for x86_64 and aarch64
bmastbergen Apr 8, 2026
4851866
configs: enable legacy iptables/ip6tables support for all architectures
bmastbergen Apr 30, 2026
899c7f7
Add generic kernel Provides to spec
bmastbergen Apr 15, 2026
0787ee6
Add generic kernel-headers and kernel-devel Provides to spec
bmastbergen May 1, 2026
704cbeb
bundle_bindgen: add set -e, curl --fail, and SHA256 verification
bmastbergen May 4, 2026
ee4aa61
[CIQ] v6.18.27 - rebased configs
bmastbergen May 8, 2026
0eae6ad
[CIQ] v6.18.27 - updated spec
bmastbergen May 8, 2026
7b0c1d0
generate_tarball: Also strip leading v from tags
bmastbergen May 8, 2026
3d83c8f
[CIQ] v6.18.28 - updated spec
bmastbergen May 8, 2026
5f57709
[CIQ] ciq_kernel-6.18.28-2 - updated spec
bmastbergen May 14, 2026
b4b4402
[CIQ] v6.18.31 - updated spec
github-actions[bot] May 15, 2026
6fbd5c4
[CIQ] v6.18.33 - updated spec
github-actions[bot] May 26, 2026
0905e22
bundle_bindgen: add User-Agent header to crates.io request
bmastbergen May 27, 2026
6a105ec
[CIQ] ciq_kernel-6.18.33-2 - updated spec
bmastbergen May 27, 2026
84763c8
kernel-clk6.18: require ciq-kmod and ship %clk_version macro file
josephtate May 28, 2026
b7c579e
random: Add hook to override device reads and getrandom(2)
jallisonciq Mar 3, 2026
94f34c8
crypto: rng - Override drivers/char/random in FIPS mode
jallisonciq Mar 5, 2026
efeb213
not upstream: Disable vdso getrandom when FIPS is enabled
jallisonciq Mar 5, 2026
cddc14d
crypto: ecdh - implement FIPS PCT
jallisonciq Jul 14, 2025
a5e44cf
crypto: essiv - Zeroize keys on exit in essiv_aead_setkey()
jason-rodri Sep 30, 2024
517d6f0
crypto: drbg - Align buffers to at least a cache line
kerneltoast Jun 11, 2025
b11cc70
mm/gup: introduce pin_user_pages_fast_only()
kerneltoast Jun 19, 2025
babffe4
crypto: rng - Convert crypto_default_rng_refcnt into an unsigned int
kerneltoast Jun 24, 2025
0080b53
crypto: rng - Fix priority inversions due to mutex locks
kerneltoast Jun 24, 2025
8accae9
crypto: rng - Implement fast per-CPU DRBG instances
kerneltoast Jun 28, 2025
bf8b29f
lib/crypto: Add FIPS self-tests for SHA-1 and SHA-2
Oct 11, 2025
f7b6dae
byteorder: Add le64_to_cpu_array() and cpu_to_le64_array()
Oct 18, 2025
a8d82a4
lib/crypto: blake2b: Add BLAKE2b library functions
jallisonciq Apr 8, 2026
d7fa505
btrfs: switch to library APIs for checksums
jallisonciq Apr 8, 2026
895029e
crypto: testmgr - block Crypto API xxhash64 in FIPS mode
jallisonciq Apr 8, 2026
18ca664
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
ca1b184
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
d84dd20
Change CONFIG_CRYPTO_JITTERENTROPY_OSR from 1 to 3 in all configs.
jallisonciq Apr 17, 2026
2279a74
dh_compute_value misses the check SP800-56Arev3, 5.6.2.1.4 which is t…
jallisonciq Apr 17, 2026
990acdd
In crypto_kdf108_ctr_generate() there is no minimum length check for …
jallisonciq Apr 17, 2026
e495e5d
Add fips_approved flag to SHA1 and HMAC-SHA1 structs.
jallisonciq Apr 27, 2026
d2e6f65
Add fips_approved flag to SHA224 and HMAC-SHA224 structs.
jallisonciq Apr 27, 2026
838c95a
Add fips_approved flag to SHA256 and HMAC-SHA256 structs.
jallisonciq Apr 27, 2026
2b4a316
Add fips_approved flag to SHA384 and HMAC-SHA384 structs.
jallisonciq Apr 27, 2026
173e253
Add fips_approved flag to SHA512 and HMAC-SHA512 structs.
jallisonciq Apr 27, 2026
2548d8e
Add fips_approved indicator to struct crypto_aes_ctx.
jallisonciq Apr 27, 2026
988c187
Add CONFIG_CRYPTO_FIPS_CUSTOM_VERSION=y, CONFIG_CRYPTO_FIPS_VERSION="…
jallisonciq Apr 21, 2026
23a2438
Unset CRYPTO_JITTERENTROPY_MEMSIZE_2, set CRYPTO_JITTERENTROPY_MEMSIZ…
jallisonciq Jun 3, 2026
75d8ed3
github actions: Add FIPS protected directory check for PRs
bmastbergen Jun 3, 2026
1e6d20d
Restore CRYPTO_TFM_FIPS_COMPLIANCE flag as an indicator to differenti…
jallisonciq Jun 4, 2026
90c4a56
[CIQ] v6.18.35 - updated spec
github-actions[bot] Jun 9, 2026
ea0a43f
[CIQ] ciq_kernel-6.18.35-2 - updated spec
bmastbergen Jun 10, 2026
8f6d257
github-actions: extend trigger glob to match suffix branches
shreeya-patel98 Jun 22, 2026
f589ba7
crypto: Kconfig - Make CRYPTO_FIPS depend on the DRBG being built-in
kerneltoast Jul 22, 2025
0747efb
random: Restrict extrng registration to init time
kerneltoast Aug 1, 2025
fdcb873
crypto: rng - Only allow the DRBG to register as "stdrng" in FIPS mode
kerneltoast Jul 25, 2025
a88a281
crypto: rng - Fix tabs vs spaces in the per-CPU DRBG code
kerneltoast Jun 23, 2026
2b71651
crypto: rng - Make the per-CPU DRBG instances permanent
kerneltoast Jun 23, 2026
42940c3
crypto: rng - Skip leading zero-length iovec segments
kerneltoast Jun 23, 2026
73fb0cc
crypto: rng - Fix spurious EFAULT when the destination PTE is zapped
kerneltoast Jun 23, 2026
d5b75e6
Revert "mm/gup: reintroduce pin_user_pages_fast_only()"
kerneltoast Jun 23, 2026
1c2a83a
[CIQ] ciq_kernel-6.18.35-3 - updated spec
bmastbergen Jun 23, 2026
dc24eba
[CIQ] v6.18.36 - rebased configs
bmastbergen Jun 26, 2026
8e10ef7
[CIQ] v6.18.36 - updated spec
bmastbergen Jun 26, 2026
f5fdceb
[CIQ] v6.18.38 - updated spec
github-actions[bot] Jul 5, 2026
a540d8f
Add x86_64 minimal kernel variant to spec
bmastbergen Jul 9, 2026
c93c850
[CIQ] ciq_kernel-6.18.38-2 - updated spec
bmastbergen Jul 10, 2026
c6bea48
[CIQ] v6.18.39 - updated spec
bmastbergen Jul 20, 2026
07efb87
[CIQ] v6.18.40 - rebased configs
bmastbergen Jul 24, 2026
c432476
[CIQ] v6.18.40 - updated spec
bmastbergen Jul 24, 2026
643e9a6
spec: relax UKI systemd requirement to 252-31 on RHEL
bmastbergen Jun 26, 2026
01aba34
[CIQ] v6.18.41 - updated spec
github-actions[bot] Jul 31, 2026
d3b6ce9
[CIQ] v6.18.42 - updated spec
github-actions[bot] Aug 3, 2026
657ec6a
Set kpatch/driver certs for all builds
skip77 Aug 3, 2026
04e6dea
[CIQ] v6.18.43 - updated spec
github-actions[bot] Aug 7, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .container_build_image
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
rocky-9-kernel-builder
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-minimal.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-minimal CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-minimal.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64.config .config
make olddefconfig
make -j$(nproc)
Loading
Loading