Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
145 commits
Select commit Hold shift + click to select a range
2ccd2b4
Add CIQ configs
bmastbergen Jan 5, 2026
5776659
Add initial CIQ config tweaks
bmastbergen Jan 5, 2026
97fa73d
github actions: Make Builds on Merge Request Work
PlaidCat Jan 16, 2025
a38fff7
arm64: add kernel config option to lock down when in Secure Boot mode
Aug 30, 2016
458d0aa
efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
dhowells Feb 18, 2019
fa47053
efi: Lock down the kernel if booted in secure boot mode
bwhacks Sep 10, 2019
5a460b2
mtd: phram,slram: Disable when the kernel is locked down
bwhacks Aug 30, 2019
126890f
Add efi_status_to_str() and rework efi_status_to_err().
vathpela Oct 2, 2017
f319712
[CIQ] v6.18.3 - rebased configs
github-actions[bot] Jan 7, 2026
495b800
[CIQ] v6.18.7 - rebased configs
github-actions[bot] Jan 26, 2026
ae717dd
[CIQ] v6.18.9 - rebased configs
github-actions[bot] Feb 6, 2026
4983865
[CIQ] v6.18.14 - rebased configs
github-actions[bot] Feb 27, 2026
b1644cd
[CIQ] v6.18.17 - rebased configs
github-actions[bot] Mar 13, 2026
2a3056c
configs: Enable INTEL_TDX_HOST for x86_64 configs
bmastbergen Mar 24, 2026
9d7bfbf
Import initial dist-git for 6.18.19
bmastbergen Mar 18, 2026
7216d72
kernel.spec: Fix buildid and pkgrelease
bmastbergen Mar 24, 2026
4ff7498
Remove gating.yaml
bmastbergen Mar 24, 2026
fbb27a4
Update sbat templates
bmastbergen Mar 24, 2026
8766d2a
Ensure all qdiscs are in modules-core
bmastbergen Mar 25, 2026
520560a
Remove modules-rt-kvm references
bmastbergen Mar 25, 2026
17f9421
Set buildid to .1
bmastbergen Mar 25, 2026
ae4be08
rocky: generalize rule for kunit and test kmod placement
bmastbergen Mar 25, 2026
6936f4b
Rename package to kernel-clk6.18
bmastbergen Mar 26, 2026
842b384
Remove gemini switch
bmastbergen Mar 26, 2026
0a8b1c7
Add Provides/Conflicts for non-parallel installable kernel-* packages
bmastbergen Mar 26, 2026
5b4ae0c
Rename tool packages with pkg_suffix and add Provides/Conflicts
bmastbergen Mar 26, 2026
6c3c2fd
Use gzip for symvers compression to match upstream
jdieter Mar 30, 2026
b96ceb7
Add +clk6.18 suffix to kernel version string (uname -r)
jdieter Mar 30, 2026
5ab7bd1
Add kernel-clk6.18-default package to set default kernel
bmastbergen Mar 30, 2026
b9783c7
Consolidate spec version defines and prevent CLK kernel from hijackin…
jdieter Mar 31, 2026
524e0f0
Rework -default package and clean up tool subpackage naming
jdieter Mar 31, 2026
eae3e61
Bundle bindgen-cli from source for Rocky 9.6 builds
jdieter Mar 31, 2026
92dff89
[CIQ] v6.18.20 - updated spec
github-actions[bot] Apr 1, 2026
0f97353
[CIQ] v6.18.21 - updated spec
github-actions[bot] Apr 3, 2026
bcd5b4f
github actions: Inherit the Kernel CI Automated workflow from main
bmastbergen Mar 12, 2026
bc43bf0
spec: Skip certificate setup for noarch builds
bmastbergen Apr 7, 2026
340c9d4
Update spec for ciq_kernel-6.18.21-2
bmastbergen Apr 7, 2026
7f1c482
github actions: Use trigger for kernelCI
bmastbergen Apr 8, 2026
439b486
github actions: Trigger kernelCI on ciq-6.18.y-next branches
bmastbergen Apr 9, 2026
e07d1ce
[CIQ] v6.18.22 - updated spec
github-actions[bot] Apr 12, 2026
b2a3d9b
spec: Fix posttrans script to handle noarch package expansion
bmastbergen Apr 19, 2026
147dd0b
[CIQ] ciq_kernel-6.18.22-2 - updated spec
bmastbergen Apr 20, 2026
5227eab
spec: update branding in package descriptions and log messages
bmastbergen Apr 14, 2026
4e0e5b6
github actions: add RPM build workflow for x86_64 and aarch64
bmastbergen Apr 8, 2026
0a66802
configs: enable legacy iptables/ip6tables support for all architectures
bmastbergen Apr 30, 2026
7f114ab
Add generic kernel Provides to spec
bmastbergen Apr 15, 2026
ff4a358
Add generic kernel-headers and kernel-devel Provides to spec
bmastbergen May 1, 2026
4e8fc42
bundle_bindgen: add set -e, curl --fail, and SHA256 verification
bmastbergen May 4, 2026
a0947bf
[CIQ] v6.18.27 - rebased configs
bmastbergen May 8, 2026
d4c0c0a
[CIQ] v6.18.27 - updated spec
bmastbergen May 8, 2026
676e9eb
generate_tarball: Also strip leading v from tags
bmastbergen May 8, 2026
f1f451d
[CIQ] v6.18.28 - updated spec
bmastbergen May 8, 2026
403e684
[CIQ] ciq_kernel-6.18.28-2 - updated spec
bmastbergen May 14, 2026
994a647
[CIQ] v6.18.31 - updated spec
github-actions[bot] May 15, 2026
c00d671
[CIQ] v6.18.33 - updated spec
github-actions[bot] May 26, 2026
38c2e49
bundle_bindgen: add User-Agent header to crates.io request
bmastbergen May 27, 2026
28a3766
[CIQ] ciq_kernel-6.18.33-2 - updated spec
bmastbergen May 27, 2026
3962a0b
kernel-clk6.18: require ciq-kmod and ship %clk_version macro file
josephtate May 28, 2026
002e4fd
random: Add hook to override device reads and getrandom(2)
jallisonciq Mar 3, 2026
311d8d0
crypto: rng - Override drivers/char/random in FIPS mode
jallisonciq Mar 5, 2026
9911288
not upstream: Disable vdso getrandom when FIPS is enabled
jallisonciq Mar 5, 2026
45d676f
crypto: ecdh - implement FIPS PCT
jallisonciq Jul 14, 2025
b43589f
crypto: essiv - Zeroize keys on exit in essiv_aead_setkey()
jason-rodri Sep 30, 2024
e31aeca
crypto: drbg - Align buffers to at least a cache line
kerneltoast Jun 11, 2025
fe6f56e
mm/gup: introduce pin_user_pages_fast_only()
kerneltoast Jun 19, 2025
37683f0
crypto: rng - Convert crypto_default_rng_refcnt into an unsigned int
kerneltoast Jun 24, 2025
22fec68
crypto: rng - Fix priority inversions due to mutex locks
kerneltoast Jun 24, 2025
d5717f2
crypto: rng - Implement fast per-CPU DRBG instances
kerneltoast Jun 28, 2025
df50037
lib/crypto: Add FIPS self-tests for SHA-1 and SHA-2
Oct 11, 2025
d3a1f43
byteorder: Add le64_to_cpu_array() and cpu_to_le64_array()
Oct 18, 2025
d3ac4fc
lib/crypto: blake2b: Add BLAKE2b library functions
jallisonciq Apr 8, 2026
bc787c1
btrfs: switch to library APIs for checksums
jallisonciq Apr 8, 2026
a55cc0f
crypto: testmgr - block Crypto API xxhash64 in FIPS mode
jallisonciq Apr 8, 2026
ab34756
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
88f877e
When in fips mode, self-test errors must panic.
jallisonciq Apr 17, 2026
d20448d
Change CONFIG_CRYPTO_JITTERENTROPY_OSR from 1 to 3 in all configs.
jallisonciq Apr 17, 2026
951d05b
dh_compute_value misses the check SP800-56Arev3, 5.6.2.1.4 which is t…
jallisonciq Apr 17, 2026
4bee431
In crypto_kdf108_ctr_generate() there is no minimum length check for …
jallisonciq Apr 17, 2026
dcdeb26
Add fips_approved flag to SHA1 and HMAC-SHA1 structs.
jallisonciq Apr 27, 2026
48838e8
Add fips_approved flag to SHA224 and HMAC-SHA224 structs.
jallisonciq Apr 27, 2026
7d784cb
Add fips_approved flag to SHA256 and HMAC-SHA256 structs.
jallisonciq Apr 27, 2026
c5654a3
Add fips_approved flag to SHA384 and HMAC-SHA384 structs.
jallisonciq Apr 27, 2026
21109fd
Add fips_approved flag to SHA512 and HMAC-SHA512 structs.
jallisonciq Apr 27, 2026
0aa365d
Add fips_approved indicator to struct crypto_aes_ctx.
jallisonciq Apr 27, 2026
444c3bc
Add CONFIG_CRYPTO_FIPS_CUSTOM_VERSION=y, CONFIG_CRYPTO_FIPS_VERSION="…
jallisonciq Apr 21, 2026
8e157eb
Unset CRYPTO_JITTERENTROPY_MEMSIZE_2, set CRYPTO_JITTERENTROPY_MEMSIZ…
jallisonciq Jun 3, 2026
acb5ca3
github actions: Add FIPS protected directory check for PRs
bmastbergen Jun 3, 2026
3440c52
Restore CRYPTO_TFM_FIPS_COMPLIANCE flag as an indicator to differenti…
jallisonciq Jun 4, 2026
a7d0ddd
[CIQ] v6.18.35 - updated spec
github-actions[bot] Jun 9, 2026
be6903d
[CIQ] ciq_kernel-6.18.35-2 - updated spec
bmastbergen Jun 10, 2026
ec38a56
github-actions: extend trigger glob to match suffix branches
shreeya-patel98 Jun 22, 2026
ea35dad
crypto: Kconfig - Make CRYPTO_FIPS depend on the DRBG being built-in
kerneltoast Jul 22, 2025
fad5f38
random: Restrict extrng registration to init time
kerneltoast Aug 1, 2025
78f95b6
crypto: rng - Only allow the DRBG to register as "stdrng" in FIPS mode
kerneltoast Jul 25, 2025
c9dd2cb
crypto: rng - Fix tabs vs spaces in the per-CPU DRBG code
kerneltoast Jun 23, 2026
234bdac
crypto: rng - Make the per-CPU DRBG instances permanent
kerneltoast Jun 23, 2026
f54c646
crypto: rng - Skip leading zero-length iovec segments
kerneltoast Jun 23, 2026
a7c9d4a
crypto: rng - Fix spurious EFAULT when the destination PTE is zapped
kerneltoast Jun 23, 2026
6df33c9
Revert "mm/gup: reintroduce pin_user_pages_fast_only()"
kerneltoast Jun 23, 2026
8d9cb1a
[CIQ] ciq_kernel-6.18.35-3 - updated spec
bmastbergen Jun 23, 2026
0c5fc0b
[CIQ] v6.18.36 - rebased configs
bmastbergen Jun 26, 2026
814bd55
[CIQ] v6.18.36 - updated spec
bmastbergen Jun 26, 2026
d208870
[CIQ] v6.18.38 - updated spec
github-actions[bot] Jul 5, 2026
01cfaaf
Add x86_64 minimal kernel variant to spec
bmastbergen Jul 9, 2026
14a65d1
[CIQ] ciq_kernel-6.18.38-2 - updated spec
bmastbergen Jul 10, 2026
5b1ef2e
[CIQ] v6.18.39 - updated spec
bmastbergen Jul 20, 2026
49453f6
[CIQ] v6.18.40 - rebased configs
bmastbergen Jul 24, 2026
b57edbe
[CIQ] v6.18.40 - updated spec
bmastbergen Jul 24, 2026
321e9fa
spec: relax UKI systemd requirement to 252-31 on RHEL
bmastbergen Jun 26, 2026
06c784a
[CIQ] v6.18.41 - updated spec
github-actions[bot] Jul 31, 2026
3205cac
[CIQ] v6.18.42 - updated spec
github-actions[bot] Aug 3, 2026
4c0853d
Set kpatch/driver certs for all builds
skip77 Aug 3, 2026
fc6f5d9
[CIQ] v6.18.43 - updated spec
github-actions[bot] Aug 7, 2026
009fd76
spec: use %{rhel} for el version and conditionally use system bindgen
bmastbergen Aug 7, 2026
342dee4
crypto: rng - Fix double percpu offset in local_unlock() calls
kerneltoast Aug 12, 2026
d55f684
bpf: Support BPF_F_EGRESS with bpf_redirect_peer
bmastbergen Aug 25, 2026
e693235
selftests/bpf: Add tests for bpf_redirect_peer with BPF_F_EGRESS
bmastbergen Aug 25, 2026
8322240
net: Clear the dst when performing encap / decap
bmastbergen Mar 29, 2026
691fa99
bpf: Name the enum for BPF_FUNC_skb_adjust_room flags
bmastbergen May 29, 2026
ee30ee4
bpf: Refactor masks for ADJ_ROOM flags and encap validation
bmastbergen May 29, 2026
d43d2f4
bpf: Add BPF_F_ADJ_ROOM_DECAP_* flags for tunnel decapsulation
bmastbergen May 29, 2026
94ee906
bpf: Allow new DECAP flags and add guard rails
bmastbergen May 29, 2026
c43a3f2
bpf: Clear decap state on skb_adjust_room shrink path
bmastbergen May 29, 2026
daba207
selftests/bpf: tc_tunnel - validate decap GSO and encapsulation state
bmastbergen Jun 1, 2026
eb06c80
[CIQ] ciq_kernel-6.18.43-2 - updated spec
bmastbergen Aug 26, 2026
5ca315f
[CIQ] v6.18.48 - rebased configs
bmastbergen Aug 28, 2026
4e442d8
[CIQ] v6.18.48 - updated spec
bmastbergen Aug 28, 2026
8574de2
[CIQ] v6.18.49 - updated spec
github-actions[bot] Sep 3, 2026
34f310e
[CIQ] v6.18.50 - updated spec
github-actions[bot] Sep 10, 2026
a5a2d1a
[CIQ] v6.18.52 - updated spec
github-actions[bot] Sep 15, 2026
30f160c
[CIQ] v6.18.53 - rebased configs
bmastbergen Sep 22, 2026
00b15cb
[CIQ] v6.18.53 - updated spec
bmastbergen Sep 22, 2026
9bb7ab4
[CIQ] v6.18.54 - updated spec
github-actions[bot] Sep 26, 2026
39c70e2
[CIQ] v6.18.55 - updated spec
github-actions[bot] Oct 4, 2026
823afc1
kernel-clk6.18: only require ciq-kmod on el9
josephtate Oct 8, 2026
b9be635
configs: Enable LIVEPATCH
bmastbergen Oct 6, 2026
efdd620
[CIQ] v6.18.56 - updated spec
github-actions[bot] Oct 12, 2026
906506c
[CIQ] v6.18.57 - updated spec
github-actions[bot] Oct 16, 2026
945cb64
[CIQ] v6.18.58 - updated spec
github-actions[bot] Oct 22, 2026
1cd7bcf
[CIQ] v6.18.59 - updated spec
github-actions[bot] Oct 27, 2026
0fb18ac
configs: minimal: Sync with full x86 config
bmastbergen Oct 30, 2026
151da0f
configs: minimal: Disable X86_KERNEL_IBT
bmastbergen Oct 30, 2026
9fd4353
[CIQ] ciq_kernel-6.18.59-2 - updated spec
bmastbergen Oct 30, 2026
34776db
[CIQ] v6.18.60 - updated spec
github-actions[bot] Oct 31, 2026
c5c1d0b
[CIQ] v6.18.62 - updated spec
github-actions[bot] Nov 7, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .container_build_image
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
rocky-9-kernel-builder
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-64k.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-64k CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-64k.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_aarch64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: aarch64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build-arm64
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-aarch64.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-debug.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-debug CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-debug.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64-minimal.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64-minimal CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64-minimal.config .config
make olddefconfig
make -j$(nproc)
37 changes: 37 additions & 0 deletions .github/workflows/build-check_x86_64.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
name: x86_64 CI
on:
pull_request:
branches:
- '**'
- '!mainline'

jobs:
kernel-build-job:
runs-on:
labels: kernel-build
container:
image: rockylinux/rockylinux:9
env:
ROCKY_ENV: rocky9
ports:
- 80
options: --cpus 8
steps:
- name: Install tools and Libraries
run: |
dnf update -y
dnf install 'dnf-command(config-manager)' -y
dnf config-manager --set-enabled devel
dnf groupinstall 'Development Tools' -y
dnf install --enablerepo=crb bc dwarves kernel-devel openssl-devel elfutils-libelf-devel -y
- name: Checkout code
uses: actions/checkout@v4
with:
ref: "${{ github.event.pull_request.head.sha }}"
fetch-depth: 0
- name: Build the Kernel
run: |
git config --global --add safe.directory /__w/kernel-src-tree/kernel-src-tree
cp ciq/configs/kernel-x86_64.config .config
make olddefconfig
make -j$(nproc)
Loading
Loading