Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
108 commits
Select commit Hold shift + click to select a range
c16bed5
Add CIQ configs
bmastbergen Jan 5, 2026
265bacb
Add initial CIQ config tweaks
bmastbergen Jan 5, 2026
325f878
github actions: Make Builds on Merge Request Work
PlaidCat Jan 16, 2025
49ed6a8
arm64: add kernel config option to lock down when in Secure Boot mode
Aug 30, 2016
72fd651
efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
dhowells Feb 18, 2019
1c41bab
efi: Lock down the kernel if booted in secure boot mode
bwhacks Sep 10, 2019
c400c23
mtd: phram,slram: Disable when the kernel is locked down
bwhacks Aug 30, 2019
a5b1623
Add efi_status_to_str() and rework efi_status_to_err().
vathpela Oct 2, 2017
586989c
[CIQ] v6.18.3 - rebased configs
github-actions[bot] Jan 7, 2026
112774a
[CIQ] v6.18.7 - rebased configs
github-actions[bot] Jan 26, 2026
67d9e93
[CIQ] v6.18.9 - rebased configs
github-actions[bot] Feb 6, 2026
7320d94
[CIQ] v6.18.14 - rebased configs
github-actions[bot] Feb 27, 2026
4175a3b
[CIQ] v6.18.17 - rebased configs
github-actions[bot] Mar 13, 2026
dbc73c0
configs: Enable INTEL_TDX_HOST for x86_64 configs
bmastbergen Mar 24, 2026
14baa7d
Import initial dist-git for 6.18.19
bmastbergen Mar 18, 2026
682e9a4
kernel.spec: Fix buildid and pkgrelease
bmastbergen Mar 24, 2026
aa81e23
Remove gating.yaml
bmastbergen Mar 24, 2026
09acdec
Update sbat templates
bmastbergen Mar 24, 2026
99af68c
Ensure all qdiscs are in modules-core
bmastbergen Mar 25, 2026
a89cac0
Remove modules-rt-kvm references
bmastbergen Mar 25, 2026
1ddf378
Set buildid to .1
bmastbergen Mar 25, 2026
6888a7b
rocky: generalize rule for kunit and test kmod placement
bmastbergen Mar 25, 2026
7332cf5
Rename package to kernel-clk6.18
bmastbergen Mar 26, 2026
8e1858d
Remove gemini switch
bmastbergen Mar 26, 2026
d059108
Add Provides/Conflicts for non-parallel installable kernel-* packages
bmastbergen Mar 26, 2026
05ef3bc
Rename tool packages with pkg_suffix and add Provides/Conflicts
bmastbergen Mar 26, 2026
2efe9e0
Use gzip for symvers compression to match upstream
jdieter Mar 30, 2026
09df8ee
Add +clk6.18 suffix to kernel version string (uname -r)
jdieter Mar 30, 2026
3ad9a8f
Add kernel-clk6.18-default package to set default kernel
bmastbergen Mar 30, 2026
c965be4
Consolidate spec version defines and prevent CLK kernel from hijackin…
jdieter Mar 31, 2026
c646a75
Rework -default package and clean up tool subpackage naming
jdieter Mar 31, 2026
e7d6ea6
Bundle bindgen-cli from source for Rocky 9.6 builds
jdieter Mar 31, 2026
29a2ad8
[CIQ] v6.18.20 - updated spec
github-actions[bot] Apr 1, 2026
97bb8e9
[CIQ] v6.18.21 - updated spec
github-actions[bot] Apr 3, 2026
3787b29
github actions: Inherit the Kernel CI Automated workflow from main
bmastbergen Mar 12, 2026
c704381
spec: Skip certificate setup for noarch builds
bmastbergen Apr 7, 2026
02499e8
Update spec for ciq_kernel-6.18.21-2
bmastbergen Apr 7, 2026
b7a2acd
github actions: Use trigger for kernelCI
bmastbergen Apr 8, 2026
ae8f8ae
github actions: Trigger kernelCI on ciq-6.18.y-next branches
bmastbergen Apr 9, 2026
fe1af6b
[CIQ] v6.18.22 - updated spec
github-actions[bot] Apr 12, 2026
c6d16bf
spec: Fix posttrans script to handle noarch package expansion
bmastbergen Apr 19, 2026
66c424d
[CIQ] ciq_kernel-6.18.22-2 - updated spec
bmastbergen Apr 20, 2026
0d3400b
spec: update branding in package descriptions and log messages
bmastbergen Apr 14, 2026
6660bec
github actions: add RPM build workflow for x86_64 and aarch64
bmastbergen Apr 8, 2026
fe3e5f5
configs: enable legacy iptables/ip6tables support for all architectures
bmastbergen Apr 30, 2026
af54afc
Add generic kernel Provides to spec
bmastbergen Apr 15, 2026
565ad3b
Add generic kernel-headers and kernel-devel Provides to spec
bmastbergen May 1, 2026
10f2c7a
bundle_bindgen: add set -e, curl --fail, and SHA256 verification
bmastbergen May 4, 2026
49bd7c8
[CIQ] v6.18.27 - rebased configs
bmastbergen May 8, 2026
85fa254
[CIQ] v6.18.27 - updated spec
bmastbergen May 8, 2026
b022902
generate_tarball: Also strip leading v from tags
bmastbergen May 8, 2026
bb82450
[CIQ] v6.18.28 - updated spec
bmastbergen May 8, 2026
b884621
[CIQ] ciq_kernel-6.18.28-2 - updated spec
bmastbergen May 14, 2026
009c8d7
[CIQ] v6.18.31 - updated spec
github-actions[bot] May 15, 2026
5c0db1f
[CIQ] v6.18.33 - updated spec
github-actions[bot] May 26, 2026
f58f242
bundle_bindgen: add User-Agent header to crates.io request
bmastbergen May 27, 2026
25755ec
[CIQ] ciq_kernel-6.18.33-2 - updated spec
bmastbergen May 27, 2026
ae8bd44
kernel-clk6.18: require ciq-kmod and ship %clk_version macro file
josephtate May 28, 2026
262d162
random: Add hook to override device reads and getrandom(2)
jallisonciq Mar 3, 2026
5d3770b
crypto: rng - Override drivers/char/random in FIPS mode
jallisonciq Mar 5, 2026
53b419f
not upstream: Disable vdso getrandom when FIPS is enabled
jallisonciq Mar 5, 2026
ff93719
crypto: ecdh - implement FIPS PCT
jallisonciq Jul 14, 2025
e79ac5b
crypto: essiv - Zeroize keys on exit in essiv_aead_setkey()
jason-rodri Sep 30, 2024
34f88ef
crypto: drbg - Align buffers to at least a cache line
kerneltoast Jun 11, 2025
afd6b66
mm/gup: introduce pin_user_pages_fast_only()
kerneltoast Jun 19, 2025
1e20e6a
crypto: rng - Convert crypto_default_rng_refcnt into an unsigned int
kerneltoast Jun 24, 2025
9dc08ac
crypto: rng - Fix priority inversions due to mutex locks
kerneltoast Jun 24, 2025
6f1b067
crypto: rng - Implement fast per-CPU DRBG instances
kerneltoast Jun 28, 2025
da034a9
lib/crypto: Add FIPS self-tests for SHA-1 and SHA-2
Oct 11, 2025
1fbc03d
byteorder: Add le64_to_cpu_array() and cpu_to_le64_array()
Oct 18, 2025
208085a
lib/crypto: blake2b: Add BLAKE2b library functions
jallisonciq Apr 8, 2026
37520ac
btrfs: switch to library APIs for checksums
jallisonciq Apr 8, 2026
afaf43f
crypto: testmgr - block Crypto API xxhash64 in FIPS mode
jallisonciq Apr 8, 2026
9ff8567
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
38dbac2
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
1eaa6a8
Change CONFIG_CRYPTO_JITTERENTROPY_OSR from 1 to 3 in all configs.
jallisonciq Apr 17, 2026
7e48959
dh_compute_value misses the check SP800-56Arev3, 5.6.2.1.4 which is t…
jallisonciq Apr 17, 2026
728f94e
In crypto_kdf108_ctr_generate() there is no minimum length check for …
jallisonciq Apr 17, 2026
d5e66b2
Add fips_approved flag to SHA1 and HMAC-SHA1 structs.
jallisonciq Apr 27, 2026
f52b18e
Add fips_approved flag to SHA224 and HMAC-SHA224 structs.
jallisonciq Apr 27, 2026
5e5f0f2
Add fips_approved flag to SHA256 and HMAC-SHA256 structs.
jallisonciq Apr 27, 2026
a13e1f6
Add fips_approved flag to SHA384 and HMAC-SHA384 structs.
jallisonciq Apr 27, 2026
7810abe
Add fips_approved flag to SHA512 and HMAC-SHA512 structs.
jallisonciq Apr 27, 2026
f37660e
Add fips_approved indicator to struct crypto_aes_ctx.
jallisonciq Apr 27, 2026
88a892b
Add CONFIG_CRYPTO_FIPS_CUSTOM_VERSION=y, CONFIG_CRYPTO_FIPS_VERSION="…
jallisonciq Apr 21, 2026
69d69a0
Unset CRYPTO_JITTERENTROPY_MEMSIZE_2, set CRYPTO_JITTERENTROPY_MEMSIZ…
jallisonciq Jun 3, 2026
b763429
github actions: Add FIPS protected directory check for PRs
bmastbergen Jun 3, 2026
f64a694
Restore CRYPTO_TFM_FIPS_COMPLIANCE flag as an indicator to differenti…
jallisonciq Jun 4, 2026
c718def
[CIQ] v6.18.35 - updated spec
github-actions[bot] Jun 9, 2026
db0e2c1
[CIQ] ciq_kernel-6.18.35-2 - updated spec
bmastbergen Jun 10, 2026
8371666
github-actions: extend trigger glob to match suffix branches
shreeya-patel98 Jun 22, 2026
9115ea7
crypto: Kconfig - Make CRYPTO_FIPS depend on the DRBG being built-in
kerneltoast Jul 22, 2025
8e8b2c0
random: Restrict extrng registration to init time
kerneltoast Aug 1, 2025
d38e374
crypto: rng - Only allow the DRBG to register as "stdrng" in FIPS mode
kerneltoast Jul 25, 2025
0d90eaf
crypto: rng - Fix tabs vs spaces in the per-CPU DRBG code
kerneltoast Jun 23, 2026
3f81b91
crypto: rng - Make the per-CPU DRBG instances permanent
kerneltoast Jun 23, 2026
b30aa1f
crypto: rng - Skip leading zero-length iovec segments
kerneltoast Jun 23, 2026
bc7c458
crypto: rng - Fix spurious EFAULT when the destination PTE is zapped
kerneltoast Jun 23, 2026
883af3f
Revert "mm/gup: reintroduce pin_user_pages_fast_only()"
kerneltoast Jun 23, 2026
7f5fe44
[CIQ] ciq_kernel-6.18.35-3 - updated spec
bmastbergen Jun 23, 2026
a202ccd
[CIQ] v6.18.36 - rebased configs
bmastbergen Jun 26, 2026
c2fd657
[CIQ] v6.18.36 - updated spec
bmastbergen Jun 26, 2026
49c4b4c
[CIQ] v6.18.38 - updated spec
github-actions[bot] Jul 5, 2026
096769f
Add x86_64 minimal kernel variant to spec
bmastbergen Jul 9, 2026
0b2b43e
[CIQ] ciq_kernel-6.18.38-2 - updated spec
bmastbergen Jul 10, 2026
76a0197
[CIQ] v6.18.39 - updated spec
bmastbergen Jul 20, 2026
60279fe
[CIQ] v6.18.40 - rebased configs
bmastbergen Jul 24, 2026
ae847f2
[CIQ] v6.18.40 - updated spec
bmastbergen Jul 24, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .container_build_image
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
rocky-9-kernel-builder
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-minimal.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-minimal CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-minimal.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64.config .config
make olddefconfig
make -j$(nproc)
Loading
Loading