GitLab

also enable CONFIG_RANDOM_TRUST_CPU
https://askubuntu.com/questions/1070433/will-ubuntu-enable-random-trust-cpu-in-the-kernel-and-what-would-be-the-effect/1071196#1071196

ref #9960

The goal of upstream Linux is to reduce the stackframe size on 32-bit to
1024 and on 64-bit to 1280, inline with how gcc generally works. While
this hasn't been achieved yet everywhere and in all configurations, the
Alpine status quo of 1024 on 64-bit is something that doesn't have plans
to happen. Given that the intent was to be conservative, we raise this
to 1280, rather than something large like 2048.

Reference: https://lore.kernel.org/lkml/CAK8P3a0CS3QzEKEV5==qj8hUYgW+q2v1f13jA+s0TjQd8kYXFA@mail.gmail.com/

ref #10044

Adding an initial 'linux-virt' configuration for aarch64, intended to be used with AWS EC2 a1.* instances.

Build amazon's ena network driver module on x86, x86_64, and aarch64 (for EC2 a1 instances).
At some point we will probably want to add config-virt.aarch64, too.

The ena driver in recent kernels (4.19.x) is in sync with the one in https://github.com/amzn/amzn-drivers, eliminating the necessity for the 'community/aws-ena-driver' aport.

AWS Elastic File System works best with NFS v4.1, Docker's cloudstor:aws plugin requires it.
This is already enabled in config-vanilla.s390x; simply enabling it in the other configs.

The most recent generation of AWS EC2 instances (c5, i3, m5) expose EBS volums as NVMe devices.
This patch simply builds the same NVMe kernel modules for the 'virt' flavor as it does for 'vanilla'.

fixes #8778

This should fix a regression that caused console go black.

http://lists.alpinelinux.org/alpine-devel/6125.html

fixes #8401

This commit brings kernel and userspace into agreement about squashfs
compression algorithms: zlib, xz, lzo, and lz4 (except on S/390 and PPC64LE).

Some kernels has LZO, some had LZ4, some had both.
Userspace had LZO, but not LZ4.

XZ and LZO were added to squashfs-tools in commit
151deb4c

Most compression options were added to kernels through default configs:
* LZO had been enabled in RPI, RPI2, S/390, PPC64le, and squashfs-tools.
* LZ4 had been enabled in x86, x86_64, aarch64, armhf, rpi, rpi2.

Default linux kernel config does not currently include LZ4 for S/390 or
PPC64le, so I did not change their config. XZ and ZLIB are in everything.

fixes #7607

main/linux-grsec: rename to linux-hardened (no functional change, just to allow us to orphan linux-grsec)

disable CONFIG_WAN

ref #6695

fixes #6529

fixes #6425

fixes #5886

The syscall is obsolete and unmaintained upstream.

Add features which linux-grsec provides:
    - POSIX message queues
    - memory resource controller
    - CPU bandwidth provisioning
    - profiling support
    - seccomp
    - ia32 emulation
    - generic network virtualization encapsulation (Geneve)
    - network priority cgroup
    - zram
    - DM verity target
    - PAX xattr support
    - grsec bruteforce prevention

Remove features present in linux-grsec:
    - dependency on linux-firmware
    - RDS network
    - TIPC network
    - ATM network
    - DecNet network
    - IPX network
    - AppleTalk network
    - X.25 network
    - LAPB network
    - Phonet network
    - IEEE 802.15.4 network
    - EEPROM support
    - specific scsi drivers
    - firewire support
    - I2O support
    - specific net drivers
    - PPP support
    - USB net support
    - Joystick support
    - specific mice drivers
    - parallel port printer support
    - I2C chip support
    - GPIO support
    - specific backplane drivers
    - AGP graphics support
    - DRI graphics support
    - LCD backlight support
    - sound support
    - specific USB storage drivers
    - LED drivers

Remove features not present in linux-grsec:
    - xz ramdisk compression
    - NFS swap