git.ipfire.org Git - people/stevee/ipfire-3.x.git/log

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 15:19:24 +0000 (15:19 +0000)]

python-disutils-extra: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 15:17:23 +0000 (15:17 +0000)]

pcapy: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 15:15:33 +0000 (15:15 +0000)]

fail2ban: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 15:15:04 +0000 (15:15 +0000)]

python-yaml: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 15:13:50 +0000 (15:13 +0000)]

python-progressbar: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 15:13:15 +0000 (15:13 +0000)]

pygpgme: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 15:11:56 +0000 (15:11 +0000)]

python-IPy: Drop package

This is not being used anywhere

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 14:32:29 +0000 (14:32 +0000)]

libtevent: Update to 0.13.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:59:17 +0000 (13:59 +0000)]

libtirpc: Update to 1.3.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:58:40 +0000 (13:58 +0000)]

libtalloc: Update to 2.3.4

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:42:10 +0000 (13:42 +0000)]

libtdb: Update to 1.4.7

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:15:52 +0000 (13:15 +0000)]

python-urlgrabber: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:15:08 +0000 (13:15 +0000)]

pyxattr: Drop package

This was used by Pakfire but is not longer needed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:13:25 +0000 (13:13 +0000)]

sip: Drop package

Nothing depends on this any longer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:12:18 +0000 (13:12 +0000)]

swig: Update to 4.1.1

And drop the dependency to Python 2.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:11:13 +0000 (13:11 +0000)]

subversion: Drop package

We no longer use this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:06:54 +0000 (13:06 +0000)]

syslinux: Drop package

This is no longer maintained, and we currently use GRUB for our ISO
image.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 13:00:46 +0000 (13:00 +0000)]

kernel: Disable the RANDSTRUCT plugin

This does not seem to have the benefit we are expecting and comes with a
huge compile time cost that I would like to disable this for now.

As a disitribution kernel we do/have to publish the seed which makes
this entire feature very questionable.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 12:55:31 +0000 (12:55 +0000)]

pango: Update to 1.90.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 12:54:23 +0000 (12:54 +0000)]

cairo: Update to 1.17.6

This patch also changes that we use meson instead of autotools to build
cairo. The autotools build seems to have been incomplete and did not
allow us to build pango against cairo.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Mon, 19 Dec 2022 12:53:38 +0000 (12:53 +0000)]

harfbuzz: Enable GObject Introspection

This is required to build pango.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 17:57:32 +0000 (17:57 +0000)]

passwd: Update to 0.80

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 17:55:47 +0000 (17:55 +0000)]

bzip2: Update to 1.0.8

This patch also splits the library into a separate package.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 17:48:22 +0000 (17:48 +0000)]

kernel: Create a -debuginfo package for the tools

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 17:28:05 +0000 (17:28 +0000)]

MAKEDEV: Drop package

Nothing has ever used this I think.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 17:23:38 +0000 (17:23 +0000)]

asciidoc: Fix build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 17:16:29 +0000 (17:16 +0000)]

ppp: Update to 2.4.9

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 17:08:31 +0000 (17:08 +0000)]

wpa_supplicant: Depend on network without epoch

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 17:02:34 +0000 (17:02 +0000)]

batctl: Drop package

We currently do not have B.A.T.M.A.N. enabled in our kernel, so this
tools is not of much use.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 17:01:30 +0000 (17:01 +0000)]

upower: Drop package

I don't think that we need to worry about battery-powered firewalls
right now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:58:12 +0000 (16:58 +0000)]

openldap: Update to 2.6.3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:57:29 +0000 (16:57 +0000)]

cyrus-sasl: Update to 2.1.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:56:45 +0000 (16:56 +0000)]

tftp: Drop package

This is probably not needed right now, and tftp is pretty much out of
fashion.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:52:20 +0000 (16:52 +0000)]

libpwquality: Update to 1.4.5

The project has moved to GitHub.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:39:03 +0000 (16:39 +0000)]

cracklib: Remove Python module

The Python module does not build with Python 3 and we do not need it
anyways. So this patch disables it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:24:25 +0000 (16:24 +0000)]

audit: Drop package

This package is not very useful as we do not have any sources
configured, nor do we have the audit subsystem enabled in the kernel.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:23:24 +0000 (16:23 +0000)]

Drop epoch from all files

We are having a fresh start, so let's use it for better version numbers.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:20:08 +0000 (16:20 +0000)]

ipfire-release: Install pakfire by default and try to install vim

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:19:10 +0000 (16:19 +0000)]

ipfire-release: No longer install pakfire-build into the build environment

Pakfire does not need any internal components any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:16:49 +0000 (16:16 +0000)]

newt: Fix build against Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:08:21 +0000 (16:08 +0000)]

python3-gobject3: Update to 3.42.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:06:37 +0000 (16:06 +0000)]

gobject-introspection: Update to 1.74.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:04:57 +0000 (16:04 +0000)]

python3-cairo: Update to 1.23.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 16:03:05 +0000 (16:03 +0000)]

avahi: Update to 0.8

Drop dependency to Python 2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 15:40:26 +0000 (15:40 +0000)]

rrdtool: Update to 1.8.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 15:27:11 +0000 (15:27 +0000)]

cairo: Update to 1.16.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Fri, 16 Dec 2022 15:04:40 +0000 (15:04 +0000)]

python3-dbus: Update to 1.3.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 17:35:29 +0000 (17:35 +0000)]

kernel: Disable all sorts of useless Device Mapper targets

This patch also compiles all sorts of device mapper stuff as modules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 17:29:37 +0000 (17:29 +0000)]

kernel: Disable support for floppy drives and block ramdisks

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 17:25:35 +0000 (17:25 +0000)]

kernel: Enable modern features of the block layer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 16:57:38 +0000 (16:57 +0000)]

kernel: Disable the Distributed Lock Manager

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 16:53:26 +0000 (16:53 +0000)]

kernel: Enable support for ExFAT & NTFS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 16:48:45 +0000 (16:48 +0000)]

kernel: Enable support for Hyper-V across the board

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Thu, 15 Dec 2022 15:50:02 +0000 (15:50 +0000)]

kernel: Disable I3C

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 20:02:45 +0000 (20:02 +0000)]

kernel: Update Ethernet driver configuration

Enable what hasn't been enabled before, and disable PIO mode where
possible.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 18:32:33 +0000 (18:32 +0000)]

kernel: Merge aarch64 & x86_64

This only sync configuration that seems to have been different between
those two architectures for no reason.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 18:12:08 +0000 (18:12 +0000)]

kernel: Compile EHCI/OHCI/UHCI support as modules

The USB core will always be compiled into the kernel (because I believe
that we have virtually no systems which won't have a USB bus).

The others will only be loaded when necessary.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 18:04:39 +0000 (18:04 +0000)]

kernel: Compile the entire SCSI subsystem as modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 17:40:35 +0000 (17:40 +0000)]

kernel: Compile the ATA subsystem as a module

It probably was a good assumption to compile this in, but since more
hardware is using NVMe, I think this might not be used on all systems
any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 17:39:12 +0000 (17:39 +0000)]

kernel: Compile the MMC subsystem as a module

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 17:37:30 +0000 (17:37 +0000)]

kernel: Disable the multimedia subsystem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 17:32:56 +0000 (17:32 +0000)]

kernel: Enable all supported platforms for ARM

These are the platforms that are currently supported in IPFire 2 and
their depending drivers.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:23:57 +0000 (16:23 +0000)]

kernel: Disable overloading ACPI methods

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:21:04 +0000 (16:21 +0000)]

kernel: Wipe all memory when rebooting on EFI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:18:39 +0000 (16:18 +0000)]

kernel: Wipe all caller-used registers on exit from the function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:14:18 +0000 (16:14 +0000)]

kernel: Make the scheduler aware of SMT

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:12:13 +0000 (16:12 +0000)]

kernel: Trust the CPU's RNG

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:10:21 +0000 (16:10 +0000)]

kernel: Enable all TPM devices

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:08:09 +0000 (16:08 +0000)]

kernel: Enable IOMMU and set it to strict mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 16:04:03 +0000 (16:04 +0000)]

kernel: Improve memory hardening with KFENCE

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:53:51 +0000 (15:53 +0000)]

kernel: Enable Kernel Lockdown in Confidentiality Mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:50:37 +0000 (15:50 +0000)]

kernel: Set HZ=100

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:43:57 +0000 (15:43 +0000)]

kernel: Enable cpufreq support for AMD processors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:40:33 +0000 (15:40 +0000)]

kernel: Enable support for all sorts of ACPI components

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:32:32 +0000 (15:32 +0000)]

kernel: Disable some character devices that do not make sense

Like vibrators.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:27:22 +0000 (15:27 +0000)]

kernel: Make graphics configruation sane

This patch disables lots of legacy hardware that should not be found in
the IPFire context and enables any modern GPUs.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:19:38 +0000 (15:19 +0000)]

kernel: Disable syscalls that allows processes to r/w other processes' memory

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:14:14 +0000 (15:14 +0000)]

kernel: Mount devtmpfs with noexec, etc.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 15:11:06 +0000 (15:11 +0000)]

kernel: Enable/disable (mainly wireless) network hardware

This patch enables modules for various modern WiFi/WWAN devices, and
disables support for devices that are not supported by us any more (i.e.
802.11b only cards).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 14:22:52 +0000 (14:22 +0000)]

kernel: Enable WireGuard

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:34:55 +0000 (11:34 +0000)]

kernel: Enable SLS on x86

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:29:43 +0000 (11:29 +0000)]

kernel: Disable option to execute 32 bit binaries

Since we are a 64 bit only distribution, there is no need to compile in
any support for 32 bit binaries.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:09:11 +0000 (11:09 +0000)]

kernel: Compile binfmt_misc as a module

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:07:04 +0000 (11:07 +0000)]

kernel: Disable /dev/mem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 11:04:36 +0000 (11:04 +0000)]

kernel: Build all HWRNGs as modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:59:29 +0000 (10:59 +0000)]

kernel: Do not automatically load TTY line disciplines

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:58:04 +0000 (10:58 +0000)]

kernel: Enable Yama

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:54:15 +0000 (10:54 +0000)]

kernel: Enable Landlock

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:34:58 +0000 (10:34 +0000)]

kernel: Build all library routines as modules and disable self-tests

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:31:14 +0000 (10:31 +0000)]

kernel: Build BTRFS as a module

I am not sure why I built it into the kernel as it pulls in lots of
other stuff which will probably make the kernel image really large.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:27:18 +0000 (10:27 +0000)]

kernel: Enable various modern ciphers/hashes/etc. and acceleration

Most of them have been added in recent kernel releases, but since we
have not been running "make oldconfig" for each of them, they have not
been enabled by default.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Wed, 14 Dec 2022 10:20:23 +0000 (10:20 +0000)]

kernel: Enable parallel crypto by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 18:13:34 +0000 (18:13 +0000)]

kernel: Disable the entire framebuffer subsystem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 18:05:17 +0000 (18:05 +0000)]

kernel: Disable bcache

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 18:03:32 +0000 (18:03 +0000)]

kernel: Disable the entire PCMCIA/CardBus subsystem

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:56:40 +0000 (17:56 +0000)]

kernel: Disable all connection tracking helper modules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:53:47 +0000 (17:53 +0000)]

kernel: Drop the entire xtables subsystem

This is being replaced by nf_tables.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:44:42 +0000 (17:44 +0000)]

kernel: Enable RANDSTRUCT plugin

This is currently configured to performance mode in order to avoid too
much performance impact.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:40:28 +0000 (17:40 +0000)]

kernel: Disable the latent entropy plugin

It does not generate cryptographically secure entropy.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit | commitdiff | tree

Michael Tremer [Tue, 13 Dec 2022 17:32:37 +0000 (17:32 +0000)]

kernel: Compress the kernel, modules and firmware using Zstandard

Zstandard is an ideal compression algorithm with great performance for
this purpose. The kernel is still able to load firmware compressed using
XZ and ramdisks compressed with various other algorirthms.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>