Commit Graph

291 Commits

Author SHA1 Message Date
e673f57a2e
pygoscelis: Disable AMD SEV
Looks as it is not (or not fully) supported on my Renoir CPU. Some docs:
https://libvirt.org/kbase/launch_security_sev.html
https://github.com/AMDESE/AMDSEV/issues/1
2021-07-26 20:14:55 +02:00
dede554774
pygoscelis: Switch to CONFIG_MNATIVE_AMD 2021-07-26 20:14:55 +02:00
62197b5759
pygoscelis: Bump to 5.13.4-T14s with updated genpatches 2021-07-26 20:14:55 +02:00
c5fb00ce3e
pygoscelis: Bump to 5.12.18-T14s 2021-07-20 22:26:30 +02:00
edf4528050
pygoscelis: Bump to 5.12.17-T14s 2021-07-15 08:12:14 +02:00
b66bd44349
pygoscelis: Downgrade to 5.12 - 5.13 is broken 2021-07-15 08:11:22 +02:00
19192e636b
pygoscelis: Bump to 5.13.2-T14s 2021-07-14 18:20:59 +02:00
4a4699674f
pygoscelis: Trust the TPM for my GPG keys :-O
For background information see the following blog entry:
https://gnupg.org/blog/20210315-using-tpm-with-gnupg-2.3.html

This needs >=app-crypt/gnupg-2.3.0::gentoo.
2021-06-29 15:28:09 +02:00
19f6c5e3a4
pygoscelis: Add some configs for 'ip rule' 2021-06-29 15:28:06 +02:00
4969453569
pygoscelis: Enable landlock support \o/ 2021-06-28 11:03:33 +02:00
6a316dd50c
pygoscelis: Enable x2apic 2021-06-28 11:03:30 +02:00
ee7258fa14
pygoscelis: Drop SATA support into modules 2021-06-28 11:03:27 +02:00
d5ffcbfc6b
pygoscelis: Enable network related cgroups 2021-06-28 11:03:24 +02:00
22372393d6
pygoscelis: Enable RANDOMIZE_KSTACK_OFFSET 2021-06-28 11:03:20 +02:00
6dc20b590f
pygoscelis: Disable Intel SOC support 2021-06-28 11:03:17 +02:00
a7fc92ec75
pygoscelis: Bump to 5.13.0-T14s 2021-06-28 11:03:14 +02:00
8f1a6b4015
pygoscelis: Enable the ACPI Platform Error Interface 2021-06-28 11:03:11 +02:00
84023b2543
pygoscelis: Enable ACPI_PCI_SLOT 2021-06-28 11:03:08 +02:00
0f31bcc84f
pygoscelis: Disable AMD_MEM_ENCRYPT as it wasn't really enabled
According to 'dmesg | grep -i sme' there SME was not enabled, so disable
it inside the configuration aswell.
2021-06-28 11:03:05 +02:00
1bdc2a3ad0
pygoscelis: Move from CPU_IDLE_GOV_TEO to MENU 2021-06-28 11:03:01 +02:00
d39e20e85a
pygoscelis: Disable some ACPI configs 2021-06-28 11:02:58 +02:00
7ec3cc03c1
pygoscelis: Disable ENERGY_MODEL 2021-06-28 11:02:55 +02:00
1f3cac8a99
pygoscelis: Switch back from AMD_FREQ_SENSITIVITY to SCHEDUTIL 2021-06-28 11:02:52 +02:00
42b983beb7
pygoscelis: Bump to 5.12.13-T14s 2021-06-23 15:52:41 +02:00
ccc39187bf
pygoscelis: Bump to 5.12.12-T14s 2021-06-18 10:55:33 +02:00
bfce7b7b6f
pygoscelis: Enable key change notifications 2021-06-17 12:27:25 +02:00
052d3b965b
pygoscelis: Use zstd for panic logs 2021-06-17 12:27:22 +02:00
67aa776df5
pygoscelis: Enable compression for f2fs 2021-06-17 12:27:19 +02:00
8830357f28
pygoscelis: Enable FS_SECURITY for f2fs 2021-06-17 12:27:15 +02:00
d0e31d035e
pygoscelis: Enable some network stuff 2021-06-17 12:27:12 +02:00
2f8fbe7545
pygoscelis: Enable the CONFIGs for the realtek micro SD reader 2021-06-17 12:27:09 +02:00
6734e2902c
pygoscelis: Enable BLK_DEV_NBD as a module for qemu 2021-06-17 12:27:06 +02:00
003bcc73c5
pygoscelis: Disable CONFIG_PM_TRACE_RTC 2021-06-17 12:27:02 +02:00
e87b7ee2f1
pygoscelis: Disable NFS server support 2021-06-17 12:26:59 +02:00
aad6afe4f2
pygoscelis: Enable UDF as a module 2021-06-17 12:26:56 +02:00
e78159d316
pygoscelis: Bump to 5.12.11-T14s 2021-06-17 12:26:53 +02:00
9b9fb1de31
pygoscelis: Bump to 5.12.10-T14s 2021-06-10 21:39:48 +02:00
9b10f9b87c
pygoscelis: Bump to 5.12.9-T14s and fix backlight control.
Most notable changes are:
-> disable CONFIG_RESET_ATTACK_MITIGATION
-> disable CONFIG_EFI_DISABLE_PCI_DMA
-> enable CONFIG_ACPI_VIDEO=m

This release also fixes (and/or mitigates) some recent wifi security
bugs (e.g. fix for CVE-2020-26141, CVE-2020-26145, CVE-2020-24586,
CVE-2020-24587 or mitigation for CVE-2020-24588).
2021-06-03 22:58:19 +02:00
96523f64cb
pygoscelis: Bump to 5.12.7-T14s 2021-05-26 23:06:59 +02:00
c8cd7fc266
pygoscelis: Bump to 5.12.5-T14s 2021-05-19 11:44:57 +02:00
bbb906c516
pygoscelis: Bump to 5.12.4-T14s 2021-05-14 15:06:46 +02:00
c68bf327b6
pygoscelis: Bump to 5.12.3-T14s 2021-05-13 18:21:13 +02:00
caa690e9ac
pygoscelis: Bump to 5.12.0-T14s 2021-04-26 18:12:46 +02:00
b426cc2692
pygoscelis: Bump to 5.11.16-T14s 2021-04-26 10:27:35 +02:00
f324282248
pygoscelis: Bump to 5.11.15-T14s 2021-04-16 21:18:36 +02:00
958c2836ec
pygoscelis: Bump to 5.11.14-T14s 2021-04-14 11:36:13 +02:00
ce3316e77e
pygoscelis: Bump to 5.11.13-T14s 2021-04-11 19:30:17 +02:00
d945598b17
pygoscelis: Bump to 5.11.11-T14s 2021-03-30 15:52:57 +02:00
cc2ff70a01
pygoscelis: Bump to 5.11.9-T14s (renaming from t14s) 2021-03-24 23:50:16 +01:00
9542706c3c
pygoscelis: Bump to 5.11.8-t14s 2021-03-21 17:37:45 +01:00
6beee8701f
pygoscelis: Bump to 5.11.7-t14s 2021-03-17 22:18:33 +01:00
5a749eb66a
pygoscelis: Bump to 5.11.6-t14s 2021-03-14 16:05:16 +01:00
c1780e5a8b
pygoscelis: Bump to 5.11.5-t14s and include AMD SFH properly 2021-03-09 14:40:57 +01:00
e1b7c7ab10
pygoscelis: Bump to 5.11.4-t14s 2021-03-07 13:34:29 +01:00
83a0b7e929
pygoscelis: Bump to 5.11.3-t14s and include some security suggestions 2021-03-04 15:16:21 +01:00
de8a4da71d
pygoscelis: Bump to 5.11.1-t14s and enable further security quirks
Implement some suggestions from
https://github.com/a13xp0p0v/kconfig-hardened-check
2021-02-23 19:27:37 +01:00
bee1798c4f
pygoscelis: Enable touchpad via SMBUS on t14s as suggested in dmesg 2021-02-16 21:32:30 +01:00
cca5eece3b
pygoscelis: Bump to 5.11.0-t14s, drop SHIFTFS
The patched kernel does currently not compile and I don't really need it
on my Thinkpad anyways.
2021-02-16 09:50:02 +01:00
abefe777b9
pygoscelis: Bump to 5.10.16-t14s 2021-02-13 15:00:37 +01:00
2f49fac6cd
pygoscelis: Bump to 5.10.14-t14s and drop CONFIG_X86_SYSFB
With CONFIG_X86_SYSFB=y screen keeps black when the genkernel initramfs
asks for LUKS password submission. This is bad.
2021-02-08 23:52:17 +01:00
8a819dd19d
pygoscelis: Disable CONFIG_DMA_FENCE_TRACE to prevent log pollution
For details see https://forums.gentoo.org/viewtopic-t-1028228-start-0.html
2021-02-04 17:05:04 +01:00
6e27e23365
pygoscelis: Bump to 5.10.13-t14s 2021-02-04 16:56:09 +01:00
0bd4d382a9
pygoscelis: Bump to 5.10.12-t14s 2021-01-31 16:33:03 +01:00
143c4dbed4
pygoscelis: Bump to 5.10.11-t14s and do further fine tuning 2021-01-28 17:44:42 +01:00
5c238353c9
pygoscelis: Bump to 5.10.10-t14s and fix stuff
The touchpad is now recognised ;-)
2021-01-25 09:43:07 +01:00
333c3ebec1
pygoscelis: Add patch for SHIFT_FS 2021-01-20 11:44:03 +01:00
0e5aa2573a
pygoscelis: New T14s \o/ 2021-01-20 11:44:00 +01:00
6afb2e1571
pygoscelis: Rename to pachyrhynchus 2021-01-20 11:43:57 +01:00
e88b98809e
pygoscelis: Bump to 5.10.0-x240 2020-12-14 19:21:36 +01:00
d198cdce2b
pygoscelis: Bump to 5.9.13-x240 2020-12-08 21:49:59 +01:00
373f8690ef
pygoscelis: Bump to 5.9.12-x240 2020-12-03 11:17:26 +01:00
96a1f2932a
pygoscelis: Bump to 5.9.9-x240 2020-12-03 11:17:23 +01:00
3188dc2425
pygoscelis: Bump to 5.9.8-x240 2020-12-03 11:17:20 +01:00
67b550ed8f
pygoscelis: Bump to 5.9.6-x240 2020-11-10 19:25:01 +01:00
cde9a778a4
pygoscelis: Bump to 5.9.3-x240 2020-11-01 14:29:52 +01:00
8619193221
pygoscelis: Bump to 5.9.0-x240 2020-10-15 17:31:41 +02:00
d450c4c080
pygoscelis: Bump to 5.8.13-x240 2020-10-04 17:06:23 +02:00
cefc0c9b42
pygoscelis: Bump to 5.8.11-x240 2020-09-23 16:04:27 +02:00
266a7a25c2
pygoscelis: Bump to 5.8.8-x240 and address CVE-2020-14386 2020-09-14 11:04:08 +02:00
3f315fb480
pygoscelis: Bump to 5.8.1-x240 2020-08-13 10:04:13 +02:00
906a2c84b0
pygoscelis: Bump to 5.7.10-x240 2020-07-22 23:17:07 +02:00
e921ce700c
pygoscelis: Bump to 5.7.9-x240 and drop XFS 2020-07-16 14:10:16 +02:00
20098e3a65
pygoscelis: Bump to 5.7.8-x240 2020-07-09 15:11:12 +02:00
25ba5a151d
pygoscelis: Bump to 5.7.7-x240 2020-07-01 13:54:48 +02:00
c46d96fe8a
pygoscelis: Bump to 5.7.5-x240 2020-06-22 10:25:56 +02:00
0f419cbb61
pygoscelis: Bump to 5.7.4-x240 2020-06-21 10:37:36 +02:00
a8996378d6
pygoscelis: Bump to 5.7.3-x240 2020-06-17 17:08:30 +02:00
c3a0df9263
pygoscelis: Bump to 5.7.2-x240 2020-06-10 21:50:32 +02:00
6f9977f4c5
pygoscelis: Bump to 5.7.1-x240 2020-06-10 10:27:43 +02:00
3a0a4361bb
pygoscelis: Bump to 5.6.14-x240 with gcc 10 2020-05-27 20:38:42 +02:00
9d08808f4e
pygoscelis: Bump to 5.6.14-x240 2020-05-23 12:45:22 +02:00
e4102616de
pygoscelis: Bump to 5.6.8 and re-alloc 2048 Byte for PA 2020-04-29 18:09:17 +02:00
53cb6cfa66
pygoscelis: Bump to 5.6.7-x240 2020-04-26 21:22:30 +02:00
51830aead4
pygoscelis: Bump to 5.6.5-x240 with major changes
1. The firmware for iwlwifi isn't embedded into the kernel image anymore.
2. After repeating resets showing the Lenovo UEFI screen I switched back
   from CONFIG_NO_HZ_FULL to CONFIG_NO_HZ_IDLE.
2020-04-19 17:08:26 +02:00
722bf0d425
pygoscelis: Fall back to old PS/2 for touchpad, enable ciphers + TCP cfgs
This commit effectivly reverts commit 862cfd98aa
("pygoscelis: Update touchpad configs as suggested") as this setup is
unreliable as it could be (non-working after suspend to ram, blocking
s2r etc.

[30306.598839] i801_smbus 0000:00:1f.3: No response
[30306.598856] rmi4_f01 rmi4-00.fn01: Failed to write sleep mode: -6.
[30306.598859] rmi4_f01 rmi4-00.fn01: Suspend failed with code -6.
[30306.598863] rmi4_physical rmi4-00: Failed to suspend functions: -6
[30306.598868] rmi4_smbus 9-002c: Failed to suspend device: -6
[30306.598879] PM: dpm_run_callback(): rmi_smb_suspend+0x0/0x30 [rmi_smbus] returns -6
[30306.598882] PM: Device 9-002c failed to suspend: error -6
[30306.600086] PM: Some devices failed to suspend, or early wake event detected

Beside the revert I also enable all TCP congestion modes and algorithms
as kernel modules and enable some ciphers with hardware acceleration
that sound useful.
2020-04-16 10:04:40 +02:00
0d5b5d9b91
pygoscelis: Bump to 5.6.2-x240 2020-04-02 19:41:28 +02:00
2470122d4f
pygoscelis: Bump to 5.6.1-x240 (manually patched iwlwifi)
This version bump enables wireguard and applies the iwlwifi patch from
https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=\
be8c827f50a0bcd56361b31ada11dc0a3c2fd240
2020-04-01 13:45:38 +02:00
9c4987644d
pygoscelis: Bump to 5.5.13-x240 2020-03-26 16:38:46 +01:00
a1c018d19c
pygoscelis: Bump to 5.5.11-x240 2020-03-26 16:38:43 +01:00
1e63e0ebf1
pygoscelis: Bump to 5.5.10-x240 2020-03-19 13:26:05 +01:00