Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
129 commits
Select commit Hold shift + click to select a range
f843ac7
Add CIQ configs
bmastbergen Jan 5, 2026
4d6b356
Add initial CIQ config tweaks
bmastbergen Jan 5, 2026
df02d87
github actions: Make Builds on Merge Request Work
PlaidCat Jan 16, 2025
69819a4
arm64: add kernel config option to lock down when in Secure Boot mode
Aug 30, 2016
6da2faa
efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
dhowells Feb 18, 2019
3d086ec
efi: Lock down the kernel if booted in secure boot mode
bwhacks Sep 10, 2019
64b2499
mtd: phram,slram: Disable when the kernel is locked down
bwhacks Aug 30, 2019
f1176cc
Add efi_status_to_str() and rework efi_status_to_err().
vathpela Oct 2, 2017
ed12686
[CIQ] v6.18.3 - rebased configs
github-actions[bot] Jan 7, 2026
a6362b4
[CIQ] v6.18.7 - rebased configs
github-actions[bot] Jan 26, 2026
1cae740
[CIQ] v6.18.9 - rebased configs
github-actions[bot] Feb 6, 2026
a2a2d9a
[CIQ] v6.18.14 - rebased configs
github-actions[bot] Feb 27, 2026
c59ba48
[CIQ] v6.18.17 - rebased configs
github-actions[bot] Mar 13, 2026
75b7a1e
configs: Enable INTEL_TDX_HOST for x86_64 configs
bmastbergen Mar 24, 2026
7243c39
Import initial dist-git for 6.18.19
bmastbergen Mar 18, 2026
9c60716
kernel.spec: Fix buildid and pkgrelease
bmastbergen Mar 24, 2026
aa70245
Remove gating.yaml
bmastbergen Mar 24, 2026
a97bd28
Update sbat templates
bmastbergen Mar 24, 2026
762a63d
Ensure all qdiscs are in modules-core
bmastbergen Mar 25, 2026
bf30161
Remove modules-rt-kvm references
bmastbergen Mar 25, 2026
b348e48
Set buildid to .1
bmastbergen Mar 25, 2026
3dc3603
rocky: generalize rule for kunit and test kmod placement
bmastbergen Mar 25, 2026
e76064f
Rename package to kernel-clk6.18
bmastbergen Mar 26, 2026
e47f0b0
Remove gemini switch
bmastbergen Mar 26, 2026
7b6c0d0
Add Provides/Conflicts for non-parallel installable kernel-* packages
bmastbergen Mar 26, 2026
2085f71
Rename tool packages with pkg_suffix and add Provides/Conflicts
bmastbergen Mar 26, 2026
0d8cb50
Use gzip for symvers compression to match upstream
jdieter Mar 30, 2026
6fc4d82
Add +clk6.18 suffix to kernel version string (uname -r)
jdieter Mar 30, 2026
46d23fa
Add kernel-clk6.18-default package to set default kernel
bmastbergen Mar 30, 2026
b30293a
Consolidate spec version defines and prevent CLK kernel from hijackin…
jdieter Mar 31, 2026
828cfe7
Rework -default package and clean up tool subpackage naming
jdieter Mar 31, 2026
86cd9fb
Bundle bindgen-cli from source for Rocky 9.6 builds
jdieter Mar 31, 2026
88bc9ff
[CIQ] v6.18.20 - updated spec
github-actions[bot] Apr 1, 2026
9b5d35f
[CIQ] v6.18.21 - updated spec
github-actions[bot] Apr 3, 2026
cbc8b9e
github actions: Inherit the Kernel CI Automated workflow from main
bmastbergen Mar 12, 2026
6dc54a7
spec: Skip certificate setup for noarch builds
bmastbergen Apr 7, 2026
b94b07b
Update spec for ciq_kernel-6.18.21-2
bmastbergen Apr 7, 2026
b0f99f5
github actions: Use trigger for kernelCI
bmastbergen Apr 8, 2026
a297eaf
github actions: Trigger kernelCI on ciq-6.18.y-next branches
bmastbergen Apr 9, 2026
7625c36
[CIQ] v6.18.22 - updated spec
github-actions[bot] Apr 12, 2026
df15f4b
spec: Fix posttrans script to handle noarch package expansion
bmastbergen Apr 19, 2026
18b1723
[CIQ] ciq_kernel-6.18.22-2 - updated spec
bmastbergen Apr 20, 2026
58f72f2
spec: update branding in package descriptions and log messages
bmastbergen Apr 14, 2026
2f322a7
github actions: add RPM build workflow for x86_64 and aarch64
bmastbergen Apr 8, 2026
3dcf329
configs: enable legacy iptables/ip6tables support for all architectures
bmastbergen Apr 30, 2026
26066c0
Add generic kernel Provides to spec
bmastbergen Apr 15, 2026
12a10ae
Add generic kernel-headers and kernel-devel Provides to spec
bmastbergen May 1, 2026
1b5b87b
bundle_bindgen: add set -e, curl --fail, and SHA256 verification
bmastbergen May 4, 2026
f275137
[CIQ] v6.18.27 - rebased configs
bmastbergen May 8, 2026
d32a671
[CIQ] v6.18.27 - updated spec
bmastbergen May 8, 2026
48e7e4e
generate_tarball: Also strip leading v from tags
bmastbergen May 8, 2026
e0d0eb2
[CIQ] v6.18.28 - updated spec
bmastbergen May 8, 2026
e1180ed
[CIQ] ciq_kernel-6.18.28-2 - updated spec
bmastbergen May 14, 2026
d96840d
[CIQ] v6.18.31 - updated spec
github-actions[bot] May 15, 2026
a3d1834
[CIQ] v6.18.33 - updated spec
github-actions[bot] May 26, 2026
a6ff9d2
bundle_bindgen: add User-Agent header to crates.io request
bmastbergen May 27, 2026
8088631
[CIQ] ciq_kernel-6.18.33-2 - updated spec
bmastbergen May 27, 2026
135b968
kernel-clk6.18: require ciq-kmod and ship %clk_version macro file
josephtate May 28, 2026
e681e53
random: Add hook to override device reads and getrandom(2)
jallisonciq Mar 3, 2026
0a8ea3e
crypto: rng - Override drivers/char/random in FIPS mode
jallisonciq Mar 5, 2026
cd05361
not upstream: Disable vdso getrandom when FIPS is enabled
jallisonciq Mar 5, 2026
f3b3be9
crypto: ecdh - implement FIPS PCT
jallisonciq Jul 14, 2025
622fa83
crypto: essiv - Zeroize keys on exit in essiv_aead_setkey()
jason-rodri Sep 30, 2024
e474281
crypto: drbg - Align buffers to at least a cache line
kerneltoast Jun 11, 2025
cd6848a
mm/gup: introduce pin_user_pages_fast_only()
kerneltoast Jun 19, 2025
9d45e82
crypto: rng - Convert crypto_default_rng_refcnt into an unsigned int
kerneltoast Jun 24, 2025
945c78c
crypto: rng - Fix priority inversions due to mutex locks
kerneltoast Jun 24, 2025
a4e4589
crypto: rng - Implement fast per-CPU DRBG instances
kerneltoast Jun 28, 2025
8faf53c
lib/crypto: Add FIPS self-tests for SHA-1 and SHA-2
Oct 11, 2025
152314f
byteorder: Add le64_to_cpu_array() and cpu_to_le64_array()
Oct 18, 2025
6144b4d
lib/crypto: blake2b: Add BLAKE2b library functions
jallisonciq Apr 8, 2026
fc3d5f8
btrfs: switch to library APIs for checksums
jallisonciq Apr 8, 2026
4151b5d
crypto: testmgr - block Crypto API xxhash64 in FIPS mode
jallisonciq Apr 8, 2026
1ef1b56
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
ce41da5
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
88f06f2
Change CONFIG_CRYPTO_JITTERENTROPY_OSR from 1 to 3 in all configs.
jallisonciq Apr 17, 2026
d55ae80
dh_compute_value misses the check SP800-56Arev3, 5.6.2.1.4 which is t…
jallisonciq Apr 17, 2026
d000e26
In crypto_kdf108_ctr_generate() there is no minimum length check for …
jallisonciq Apr 17, 2026
9b50521
Add fips_approved flag to SHA1 and HMAC-SHA1 structs.
jallisonciq Apr 27, 2026
b465da1
Add fips_approved flag to SHA224 and HMAC-SHA224 structs.
jallisonciq Apr 27, 2026
99f9163
Add fips_approved flag to SHA256 and HMAC-SHA256 structs.
jallisonciq Apr 27, 2026
fa1a31f
Add fips_approved flag to SHA384 and HMAC-SHA384 structs.
jallisonciq Apr 27, 2026
ef265c6
Add fips_approved flag to SHA512 and HMAC-SHA512 structs.
jallisonciq Apr 27, 2026
87253e3
Add fips_approved indicator to struct crypto_aes_ctx.
jallisonciq Apr 27, 2026
ee989a8
Add CONFIG_CRYPTO_FIPS_CUSTOM_VERSION=y, CONFIG_CRYPTO_FIPS_VERSION="…
jallisonciq Apr 21, 2026
a74e43a
Unset CRYPTO_JITTERENTROPY_MEMSIZE_2, set CRYPTO_JITTERENTROPY_MEMSIZ…
jallisonciq Jun 3, 2026
39e3c6e
github actions: Add FIPS protected directory check for PRs
bmastbergen Jun 3, 2026
4ce593d
Restore CRYPTO_TFM_FIPS_COMPLIANCE flag as an indicator to differenti…
jallisonciq Jun 4, 2026
d05fae3
[CIQ] v6.18.35 - updated spec
github-actions[bot] Jun 9, 2026
d7e8769
[CIQ] ciq_kernel-6.18.35-2 - updated spec
bmastbergen Jun 10, 2026
a4fadd2
github-actions: extend trigger glob to match suffix branches
shreeya-patel98 Jun 22, 2026
4c2e68f
crypto: Kconfig - Make CRYPTO_FIPS depend on the DRBG being built-in
kerneltoast Jul 22, 2025
6e9d2ac
random: Restrict extrng registration to init time
kerneltoast Aug 1, 2025
95e07f3
crypto: rng - Only allow the DRBG to register as "stdrng" in FIPS mode
kerneltoast Jul 25, 2025
fc7361f
crypto: rng - Fix tabs vs spaces in the per-CPU DRBG code
kerneltoast Jun 23, 2026
3c5524a
crypto: rng - Make the per-CPU DRBG instances permanent
kerneltoast Jun 23, 2026
129a94b
crypto: rng - Skip leading zero-length iovec segments
kerneltoast Jun 23, 2026
91fb120
crypto: rng - Fix spurious EFAULT when the destination PTE is zapped
kerneltoast Jun 23, 2026
515a203
Revert "mm/gup: reintroduce pin_user_pages_fast_only()"
kerneltoast Jun 23, 2026
bb527aa
[CIQ] ciq_kernel-6.18.35-3 - updated spec
bmastbergen Jun 23, 2026
de06c15
[CIQ] v6.18.36 - rebased configs
bmastbergen Jun 26, 2026
8a266c1
[CIQ] v6.18.36 - updated spec
bmastbergen Jun 26, 2026
9345004
[CIQ] v6.18.38 - updated spec
github-actions[bot] Jul 5, 2026
44b8601
Add x86_64 minimal kernel variant to spec
bmastbergen Jul 9, 2026
308e495
[CIQ] ciq_kernel-6.18.38-2 - updated spec
bmastbergen Jul 10, 2026
63d837d
[CIQ] v6.18.39 - updated spec
bmastbergen Jul 20, 2026
4941c72
[CIQ] v6.18.40 - rebased configs
bmastbergen Jul 24, 2026
3aa5313
[CIQ] v6.18.40 - updated spec
bmastbergen Jul 24, 2026
82c5577
spec: relax UKI systemd requirement to 252-31 on RHEL
bmastbergen Jun 26, 2026
dfc734d
[CIQ] v6.18.41 - updated spec
github-actions[bot] Jul 31, 2026
9ca806e
[CIQ] v6.18.42 - updated spec
github-actions[bot] Aug 3, 2026
d138dd7
Set kpatch/driver certs for all builds
skip77 Aug 3, 2026
403ba06
[CIQ] v6.18.43 - updated spec
github-actions[bot] Aug 7, 2026
c23dc8d
spec: use %{rhel} for el version and conditionally use system bindgen
bmastbergen Aug 7, 2026
c6b212a
crypto: rng - Fix double percpu offset in local_unlock() calls
kerneltoast Aug 12, 2026
03335fc
bpf: Support BPF_F_EGRESS with bpf_redirect_peer
bmastbergen Aug 25, 2026
9293d15
selftests/bpf: Add tests for bpf_redirect_peer with BPF_F_EGRESS
bmastbergen Aug 25, 2026
0a0d97e
bpf: Reject redirect helpers without a bpf_net_context
bmastbergen Aug 25, 2026
ec74f6f
net: Clear the dst when performing encap / decap
bmastbergen Mar 29, 2026
80b8b45
bpf: Name the enum for BPF_FUNC_skb_adjust_room flags
bmastbergen May 29, 2026
99a6461
bpf: Refactor masks for ADJ_ROOM flags and encap validation
bmastbergen May 29, 2026
e6c5d0a
bpf: Add BPF_F_ADJ_ROOM_DECAP_* flags for tunnel decapsulation
bmastbergen May 29, 2026
23c1c35
bpf: Allow new DECAP flags and add guard rails
bmastbergen May 29, 2026
7dffd23
bpf: Clear decap state on skb_adjust_room shrink path
bmastbergen May 29, 2026
133731f
selftests/bpf: tc_tunnel - validate decap GSO and encapsulation state
bmastbergen Jun 1, 2026
bc51ba9
[CIQ] ciq_kernel-6.18.43-2 - updated spec
bmastbergen Aug 26, 2026
a710ec9
[CIQ] v6.18.48 - rebased configs
bmastbergen Aug 28, 2026
cdeb8ee
[CIQ] v6.18.48 - updated spec
bmastbergen Aug 28, 2026
a1a33b1
[CIQ] v6.18.49 - updated spec
github-actions[bot] Sep 3, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .container_build_image
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
rocky-9-kernel-builder
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-minimal.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-minimal CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-minimal.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64.config .config
make olddefconfig
make -j$(nproc)
Loading
Loading