Linux Kernel

This page and repository are being updated, information is not accurate, links may be broken, etc...

Page with various kernel version releases information, to build kernel for debug check developing page. System documentation contains information about configuration flags, build and install process. Kernel code is hosted at git repository with various LTS versions per branch; stable-4.9, stable-4.19 and stable-5.4. Stable branch track Libre / GNU while versions with blobs have tags start name with "blob".

Sources and packages are available at mirror packages and distfiles.


Version 5.4

Git repository and port is being updated with this new version, links may fail.

Stable-5.4 is based on linux-gnu 5.4 and represents the latest 5.4 patch release. Additional patches for 5.4 are forked from this branch. Blob tags contains upstream firmware.

Port linux-blob-5.4 tracks upstream releases with blobs / binaries.

Configuration

Port linux-gnu-5.4 default configuration is based on arch-harden x86_64 - 5.4, port contains other configurations.

Arch x86_64 - 5.4
Arch configuration from kernel 5.4 for x86_64 (port config-all-standard).
Arch harden x86_64 - 5.4
Arch kernel-hardened 5.4 from linux-hardened for x86_64 (config-x86_64).
Crux x86_64 - 5.4
Crux configuration available on installation media.

External links

linux-lts54
Arch linux-lts54 port.

Version 4.19

Stable-4.19 is based on linux-gnu 4.19 and represents the latest 4.19 patch release. Additional patches for 4.19 are forked from this branch. Blob tags contains upstream firmware.

Port linux-blob-4.19 tracks upstream releases with blobs / binaries.

Configuration

Port linux-gnu-4.19 default configuration is based on arch-harden x86_64 - 4.19, port contains other configurations.

Arch x86_64 - 4.19
Arch kernel 4.19 for x86_64.
Arch harden x86_64 - 4.19
Arch kernel 4.19 from linux-hardened for x86_64.

External links

linux-lts419
Arch linux-lts419 port.

Version 4.9

Stable-4.9 is based on linux-gnu 4.9 and represents the latest 4.9 patch release. Additional patches for 4.9 are forked from this branch. Blob tags contains upstream firmware.

Configuration

Port linux-gnu-4.9 default configuration is based on arch x86_64 - 4.9.

Hyperbola x86_64 - 4.9
Hyperbola kernel 4.9 configuration for x86_64.
Arch x86_64 - 4.9
Arch kernel 4.9 for x86_64.
Hyperbola i686 - 4.9
Hyperbola kernel 4.9 configuration for i686.

Branches

There is various forks and minor revisions such as grsecurity patches, real time for beaglebone, etc.

Grs-4.9
Clean upstream linux libre with gresecurity grsecurity-3.1-4.9.24-201704252333.patch) patch.
Cpu-4.9
Clean upstream linux libre with kernel and gcc cpu optimizations (for gcc v9.1+ kernel v4.13+) patch from graysky2.
Dapper-4.9
Clean upstream linux libre with dapper linux gresecurity patches without Meltdown and Spectre fixes since version 4.9.74.
Beagle-4.9
Upstream linux with binary / blobs with beagle board patches.
RT-4.9
Upstream linux with binary / blobs with real time patches.

External links

linux-lts49
Arch linux-lts49 port

Documentation


Notes

Notes to be corrected on linux configure documentation.

CONFIG_PAGE_TABLE_ISOLATION=y

      Meltdown and Spectre;

Set net.core.bpf_jit_enable to 0.

Test current config; # zgrep CONFIG_PAGE_TABLE_ISOLATION /proc/config.gz

Intel

Notes on how to checkup cpu vulnerabilities and update cpu firmware, intel calls firmware microcode. Generally this is handled by updating the bios, but is possible to update using kernel. Updating the firmware for MDS will also mean correction of MEI_ME intel-sa-00075 and intel-sa-00086.