GitLab

Add features which linux-grsec provides:
    - POSIX message queues
    - memory resource controller
    - CPU bandwidth provisioning
    - profiling support
    - seccomp
    - ia32 emulation
    - generic network virtualization encapsulation (Geneve)
    - network priority cgroup
    - zram
    - DM verity target
    - PAX xattr support
    - grsec bruteforce prevention

Remove features present in linux-grsec:
    - dependency on linux-firmware
    - RDS network
    - TIPC network
    - ATM network
    - DecNet network
    - IPX network
    - AppleTalk network
    - X.25 network
    - LAPB network
    - Phonet network
    - IEEE 802.15.4 network
    - EEPROM support
    - specific scsi drivers
    - firewire support
    - I2O support
    - specific net drivers
    - PPP support
    - USB net support
    - Joystick support
    - specific mice drivers
    - parallel port printer support
    - I2C chip support
    - GPIO support
    - specific backplane drivers
    - AGP graphics support
    - DRI graphics support
    - LCD backlight support
    - sound support
    - specific USB storage drivers
    - LED drivers

Remove features not present in linux-grsec:
    - xz ramdisk compression
    - NFS swap

ref #4434

and cherry-pick a pmtu fix from linux.git

we need more headers for gcc plugins

fixes #4246

enable pci and some framebuffer drivers.

ref #4074

make it possible to build various kernel subpackage from same patched
source, but with different configs.

This simplifies maintenance.

fix spi-nor build on arm
add some more arm boards

needed for the vdso2c tool during build

fixes #3504

migrate to pax xattr marking and enable usb host support on armhf

needed by docker

and update the gre fix inner mac header in nbma tunnel xmit patch