Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
139 commits
Select commit Hold shift + click to select a range
587af88
Add CIQ configs
bmastbergen Jan 5, 2026
7edea06
Add initial CIQ config tweaks
bmastbergen Jan 5, 2026
a7950e3
github actions: Make Builds on Merge Request Work
PlaidCat Jan 16, 2025
e817d9c
arm64: add kernel config option to lock down when in Secure Boot mode
Aug 30, 2016
0da1b25
efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
dhowells Feb 18, 2019
47798fe
efi: Lock down the kernel if booted in secure boot mode
bwhacks Sep 10, 2019
38d7f65
mtd: phram,slram: Disable when the kernel is locked down
bwhacks Aug 30, 2019
1507708
Add efi_status_to_str() and rework efi_status_to_err().
vathpela Oct 2, 2017
e26f88d
[CIQ] v6.18.3 - rebased configs
github-actions[bot] Jan 7, 2026
3f80d87
[CIQ] v6.18.7 - rebased configs
github-actions[bot] Jan 26, 2026
97e4ad4
[CIQ] v6.18.9 - rebased configs
github-actions[bot] Feb 6, 2026
e039ee6
[CIQ] v6.18.14 - rebased configs
github-actions[bot] Feb 27, 2026
efaae29
[CIQ] v6.18.17 - rebased configs
github-actions[bot] Mar 13, 2026
127d1ce
configs: Enable INTEL_TDX_HOST for x86_64 configs
bmastbergen Mar 24, 2026
6ca68e6
Import initial dist-git for 6.18.19
bmastbergen Mar 18, 2026
abbc7f2
kernel.spec: Fix buildid and pkgrelease
bmastbergen Mar 24, 2026
6554517
Remove gating.yaml
bmastbergen Mar 24, 2026
a617e6c
Update sbat templates
bmastbergen Mar 24, 2026
59f0932
Ensure all qdiscs are in modules-core
bmastbergen Mar 25, 2026
16ff695
Remove modules-rt-kvm references
bmastbergen Mar 25, 2026
31a9d06
Set buildid to .1
bmastbergen Mar 25, 2026
433066a
rocky: generalize rule for kunit and test kmod placement
bmastbergen Mar 25, 2026
c2c7889
Rename package to kernel-clk6.18
bmastbergen Mar 26, 2026
3e7a1f9
Remove gemini switch
bmastbergen Mar 26, 2026
56e6eeb
Add Provides/Conflicts for non-parallel installable kernel-* packages
bmastbergen Mar 26, 2026
c5ca33e
Rename tool packages with pkg_suffix and add Provides/Conflicts
bmastbergen Mar 26, 2026
8a3f887
Use gzip for symvers compression to match upstream
jdieter Mar 30, 2026
1696fec
Add +clk6.18 suffix to kernel version string (uname -r)
jdieter Mar 30, 2026
8c4ee0c
Add kernel-clk6.18-default package to set default kernel
bmastbergen Mar 30, 2026
aac29d8
Consolidate spec version defines and prevent CLK kernel from hijackin…
jdieter Mar 31, 2026
69e80d4
Rework -default package and clean up tool subpackage naming
jdieter Mar 31, 2026
5ae66c1
Bundle bindgen-cli from source for Rocky 9.6 builds
jdieter Mar 31, 2026
ef8ec2a
[CIQ] v6.18.20 - updated spec
github-actions[bot] Apr 1, 2026
54cb59d
[CIQ] v6.18.21 - updated spec
github-actions[bot] Apr 3, 2026
141ff19
github actions: Inherit the Kernel CI Automated workflow from main
bmastbergen Mar 12, 2026
368986f
spec: Skip certificate setup for noarch builds
bmastbergen Apr 7, 2026
04f720f
Update spec for ciq_kernel-6.18.21-2
bmastbergen Apr 7, 2026
b1090c3
github actions: Use trigger for kernelCI
bmastbergen Apr 8, 2026
6d359f3
github actions: Trigger kernelCI on ciq-6.18.y-next branches
bmastbergen Apr 9, 2026
cbd8253
[CIQ] v6.18.22 - updated spec
github-actions[bot] Apr 12, 2026
f09adfd
spec: Fix posttrans script to handle noarch package expansion
bmastbergen Apr 19, 2026
56fd44a
[CIQ] ciq_kernel-6.18.22-2 - updated spec
bmastbergen Apr 20, 2026
25b4374
spec: update branding in package descriptions and log messages
bmastbergen Apr 14, 2026
0e81d3c
github actions: add RPM build workflow for x86_64 and aarch64
bmastbergen Apr 8, 2026
7d50871
configs: enable legacy iptables/ip6tables support for all architectures
bmastbergen Apr 30, 2026
eada332
Add generic kernel Provides to spec
bmastbergen Apr 15, 2026
a20ca2b
Add generic kernel-headers and kernel-devel Provides to spec
bmastbergen May 1, 2026
b266437
bundle_bindgen: add set -e, curl --fail, and SHA256 verification
bmastbergen May 4, 2026
585f7b7
[CIQ] v6.18.27 - rebased configs
bmastbergen May 8, 2026
383b7ff
[CIQ] v6.18.27 - updated spec
bmastbergen May 8, 2026
c29aeca
generate_tarball: Also strip leading v from tags
bmastbergen May 8, 2026
0ceb904
[CIQ] v6.18.28 - updated spec
bmastbergen May 8, 2026
878dd5b
[CIQ] ciq_kernel-6.18.28-2 - updated spec
bmastbergen May 14, 2026
62edb25
[CIQ] v6.18.31 - updated spec
github-actions[bot] May 15, 2026
8479430
[CIQ] v6.18.33 - updated spec
github-actions[bot] May 26, 2026
1edf82d
bundle_bindgen: add User-Agent header to crates.io request
bmastbergen May 27, 2026
9d13ee4
[CIQ] ciq_kernel-6.18.33-2 - updated spec
bmastbergen May 27, 2026
96fcbcb
kernel-clk6.18: require ciq-kmod and ship %clk_version macro file
josephtate May 28, 2026
b174dfb
random: Add hook to override device reads and getrandom(2)
jallisonciq Mar 3, 2026
b81b518
crypto: rng - Override drivers/char/random in FIPS mode
jallisonciq Mar 5, 2026
6f2e5df
not upstream: Disable vdso getrandom when FIPS is enabled
jallisonciq Mar 5, 2026
77bb4a4
crypto: ecdh - implement FIPS PCT
jallisonciq Jul 14, 2025
71019e1
crypto: essiv - Zeroize keys on exit in essiv_aead_setkey()
jason-rodri Sep 30, 2024
bfd7bf9
crypto: drbg - Align buffers to at least a cache line
kerneltoast Jun 11, 2025
bac91fb
mm/gup: introduce pin_user_pages_fast_only()
kerneltoast Jun 19, 2025
e40898c
crypto: rng - Convert crypto_default_rng_refcnt into an unsigned int
kerneltoast Jun 24, 2025
a4ff46f
crypto: rng - Fix priority inversions due to mutex locks
kerneltoast Jun 24, 2025
db62937
crypto: rng - Implement fast per-CPU DRBG instances
kerneltoast Jun 28, 2025
2638b8b
lib/crypto: Add FIPS self-tests for SHA-1 and SHA-2
Oct 11, 2025
cd5b72c
byteorder: Add le64_to_cpu_array() and cpu_to_le64_array()
Oct 18, 2025
f96feb7
lib/crypto: blake2b: Add BLAKE2b library functions
jallisonciq Apr 8, 2026
fda386b
btrfs: switch to library APIs for checksums
jallisonciq Apr 8, 2026
ad92084
crypto: testmgr - block Crypto API xxhash64 in FIPS mode
jallisonciq Apr 8, 2026
b8a64fc
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
29ac57e
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
7f61ad8
Change CONFIG_CRYPTO_JITTERENTROPY_OSR from 1 to 3 in all configs.
jallisonciq Apr 17, 2026
3212cc7
dh_compute_value misses the check SP800-56Arev3, 5.6.2.1.4 which is t…
jallisonciq Apr 17, 2026
5a00c81
In crypto_kdf108_ctr_generate() there is no minimum length check for …
jallisonciq Apr 17, 2026
b75a44d
Add fips_approved flag to SHA1 and HMAC-SHA1 structs.
jallisonciq Apr 27, 2026
844e311
Add fips_approved flag to SHA224 and HMAC-SHA224 structs.
jallisonciq Apr 27, 2026
f8294ae
Add fips_approved flag to SHA256 and HMAC-SHA256 structs.
jallisonciq Apr 27, 2026
6401c8b
Add fips_approved flag to SHA384 and HMAC-SHA384 structs.
jallisonciq Apr 27, 2026
bf3e634
Add fips_approved flag to SHA512 and HMAC-SHA512 structs.
jallisonciq Apr 27, 2026
2623b42
Add fips_approved indicator to struct crypto_aes_ctx.
jallisonciq Apr 27, 2026
cd9bc35
Add CONFIG_CRYPTO_FIPS_CUSTOM_VERSION=y, CONFIG_CRYPTO_FIPS_VERSION="…
jallisonciq Apr 21, 2026
b60d73b
Unset CRYPTO_JITTERENTROPY_MEMSIZE_2, set CRYPTO_JITTERENTROPY_MEMSIZ…
jallisonciq Jun 3, 2026
81add2c
github actions: Add FIPS protected directory check for PRs
bmastbergen Jun 3, 2026
58f990b
Restore CRYPTO_TFM_FIPS_COMPLIANCE flag as an indicator to differenti…
jallisonciq Jun 4, 2026
3a8c629
[CIQ] v6.18.35 - updated spec
github-actions[bot] Jun 9, 2026
2a4e8b5
[CIQ] ciq_kernel-6.18.35-2 - updated spec
bmastbergen Jun 10, 2026
d897f38
github-actions: extend trigger glob to match suffix branches
shreeya-patel98 Jun 22, 2026
fb186c7
crypto: Kconfig - Make CRYPTO_FIPS depend on the DRBG being built-in
kerneltoast Jul 22, 2025
ecca4a0
random: Restrict extrng registration to init time
kerneltoast Aug 1, 2025
004739e
crypto: rng - Only allow the DRBG to register as "stdrng" in FIPS mode
kerneltoast Jul 25, 2025
984de32
crypto: rng - Fix tabs vs spaces in the per-CPU DRBG code
kerneltoast Jun 23, 2026
480bfca
crypto: rng - Make the per-CPU DRBG instances permanent
kerneltoast Jun 23, 2026
8228da8
crypto: rng - Skip leading zero-length iovec segments
kerneltoast Jun 23, 2026
48c3945
crypto: rng - Fix spurious EFAULT when the destination PTE is zapped
kerneltoast Jun 23, 2026
b8a7ac3
Revert "mm/gup: reintroduce pin_user_pages_fast_only()"
kerneltoast Jun 23, 2026
e7b7cc6
[CIQ] ciq_kernel-6.18.35-3 - updated spec
bmastbergen Jun 23, 2026
c70ceda
[CIQ] v6.18.36 - rebased configs
bmastbergen Jun 26, 2026
523cd84
[CIQ] v6.18.36 - updated spec
bmastbergen Jun 26, 2026
9799b59
[CIQ] v6.18.38 - updated spec
github-actions[bot] Jul 5, 2026
e3da1f3
Add x86_64 minimal kernel variant to spec
bmastbergen Jul 9, 2026
cec49fd
[CIQ] ciq_kernel-6.18.38-2 - updated spec
bmastbergen Jul 10, 2026
9ee3bfd
[CIQ] v6.18.39 - updated spec
bmastbergen Jul 20, 2026
ecd7930
[CIQ] v6.18.40 - rebased configs
bmastbergen Jul 24, 2026
518c22b
[CIQ] v6.18.40 - updated spec
bmastbergen Jul 24, 2026
0966a2a
spec: relax UKI systemd requirement to 252-31 on RHEL
bmastbergen Jun 26, 2026
124e2a9
[CIQ] v6.18.41 - updated spec
github-actions[bot] Jul 31, 2026
0f6fc5f
[CIQ] v6.18.42 - updated spec
github-actions[bot] Aug 3, 2026
41b8c1f
Set kpatch/driver certs for all builds
skip77 Aug 3, 2026
d2ef4a7
[CIQ] v6.18.43 - updated spec
github-actions[bot] Aug 7, 2026
17ca299
spec: use %{rhel} for el version and conditionally use system bindgen
bmastbergen Aug 7, 2026
7e98261
crypto: rng - Fix double percpu offset in local_unlock() calls
kerneltoast Aug 12, 2026
72751b4
bpf: Support BPF_F_EGRESS with bpf_redirect_peer
bmastbergen Aug 25, 2026
c6385b5
selftests/bpf: Add tests for bpf_redirect_peer with BPF_F_EGRESS
bmastbergen Aug 25, 2026
d5c92df
net: Clear the dst when performing encap / decap
bmastbergen Mar 29, 2026
8f7ee9a
bpf: Name the enum for BPF_FUNC_skb_adjust_room flags
bmastbergen May 29, 2026
fa29ba8
bpf: Refactor masks for ADJ_ROOM flags and encap validation
bmastbergen May 29, 2026
e36b91f
bpf: Add BPF_F_ADJ_ROOM_DECAP_* flags for tunnel decapsulation
bmastbergen May 29, 2026
e24c671
bpf: Allow new DECAP flags and add guard rails
bmastbergen May 29, 2026
aa08814
bpf: Clear decap state on skb_adjust_room shrink path
bmastbergen May 29, 2026
21c7515
selftests/bpf: tc_tunnel - validate decap GSO and encapsulation state
bmastbergen Jun 1, 2026
be46ede
[CIQ] ciq_kernel-6.18.43-2 - updated spec
bmastbergen Aug 26, 2026
ec98d81
[CIQ] v6.18.48 - rebased configs
bmastbergen Aug 28, 2026
6e8558b
[CIQ] v6.18.48 - updated spec
bmastbergen Aug 28, 2026
54879fc
[CIQ] v6.18.49 - updated spec
github-actions[bot] Sep 3, 2026
5ac7d4d
[CIQ] v6.18.50 - updated spec
github-actions[bot] Sep 10, 2026
f0e7451
[CIQ] v6.18.52 - updated spec
github-actions[bot] Sep 15, 2026
c48ab6c
[CIQ] v6.18.53 - rebased configs
bmastbergen Sep 22, 2026
65b9912
[CIQ] v6.18.53 - updated spec
bmastbergen Sep 22, 2026
65466c2
[CIQ] v6.18.54 - updated spec
github-actions[bot] Sep 26, 2026
2427490
[CIQ] v6.18.55 - updated spec
github-actions[bot] Oct 4, 2026
1ddd339
kernel-clk6.18: only require ciq-kmod on el9
josephtate Oct 8, 2026
d538ab1
configs: Enable LIVEPATCH
bmastbergen Oct 6, 2026
e984490
[CIQ] v6.18.56 - updated spec
github-actions[bot] Oct 12, 2026
4c4edad
[CIQ] v6.18.57 - updated spec
github-actions[bot] Oct 16, 2026
8ae3bdb
[CIQ] v6.18.58 - updated spec
github-actions[bot] Oct 22, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .container_build_image
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
rocky-9-kernel-builder
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-minimal.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-minimal CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-minimal.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64.config .config
make olddefconfig
make -j$(nproc)
Loading
Loading