Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)

Linux kernels 2025-05-19 (#408709)

authored by

Fabián Heredia Montiel and committed by
GitHub
2cbe2498 fa4cff02

+66 -51
+1
nixos/tests/kernel-generic.nix
··· 42 42 linux_6_6_hardened 43 43 linux_6_12_hardened 44 44 linux_6_13_hardened 45 + linux_6_14_hardened 45 46 linux_rt_5_4 46 47 linux_rt_5_10 47 48 linux_rt_5_15
+45 -35
pkgs/os-specific/linux/kernel/hardened/patches.json
··· 2 2 "5.10": { 3 3 "patch": { 4 4 "extra": "-hardened1", 5 - "name": "linux-hardened-v5.10.235-hardened1.patch", 6 - "sha256": "1xhpwy62jbwbc71s2cglxhrn7radpp256v05d587gf7jwhbi2zmc", 7 - "url": "https://github.com/anthraxx/linux-hardened/releases/download/v5.10.235-hardened1/linux-hardened-v5.10.235-hardened1.patch" 5 + "name": "linux-hardened-v5.10.237-hardened1.patch", 6 + "sha256": "09a4dx65vn96s62viyhpjnz2hwcwxq8araxhk7x6ximyky888kmr", 7 + "url": "https://github.com/anthraxx/linux-hardened/releases/download/v5.10.237-hardened1/linux-hardened-v5.10.237-hardened1.patch" 8 8 }, 9 - "sha256": "1k7iq4np3pflkq3d71ya8xs5czhslhy2iha4ls9lma81269y6fwm", 10 - "version": "5.10.235" 9 + "sha256": "098gvqfaahabqqz64m5fwri57drwiz3006pr805sxw74w0vjgj0z", 10 + "version": "5.10.237" 11 11 }, 12 12 "5.15": { 13 13 "patch": { 14 14 "extra": "-hardened1", 15 - "name": "linux-hardened-v5.15.179-hardened1.patch", 16 - "sha256": "18255w5x7fjx37zdzbmigp641izc5h8fp2h8z7lj33z2mf7gfs9y", 17 - "url": "https://github.com/anthraxx/linux-hardened/releases/download/v5.15.179-hardened1/linux-hardened-v5.15.179-hardened1.patch" 15 + "name": "linux-hardened-v5.15.182-hardened1.patch", 16 + "sha256": "1q6sm4542lb8zcgybxz9gjckvpll1nfyf87yqx9h5rn6a9mlwyl0", 17 + "url": "https://github.com/anthraxx/linux-hardened/releases/download/v5.15.182-hardened1/linux-hardened-v5.15.182-hardened1.patch" 18 18 }, 19 - "sha256": "0vqk4wd0cacigz42gigdzbj415hcdn2k2m01yr7k8pcv3rxs86ck", 20 - "version": "5.15.179" 19 + "sha256": "07m3yrkqpmh4cmsmhz8i6da0h7xlprc7r4hb0xcy812s659zmaxn", 20 + "version": "5.15.182" 21 21 }, 22 22 "5.4": { 23 23 "patch": { 24 24 "extra": "-hardened1", 25 - "name": "linux-hardened-v5.4.291-hardened1.patch", 26 - "sha256": "1i7x7pdmqbrj306jbqv75ij1lq4hvdmw1qnfa4975zyzdd8d0khq", 27 - "url": "https://github.com/anthraxx/linux-hardened/releases/download/v5.4.291-hardened1/linux-hardened-v5.4.291-hardened1.patch" 25 + "name": "linux-hardened-v5.4.293-hardened1.patch", 26 + "sha256": "0wblrpmwp3rh1adyg1jbyifdfsdlm3p2mgw2xm9a03vwd0jkdd6f", 27 + "url": "https://github.com/anthraxx/linux-hardened/releases/download/v5.4.293-hardened1/linux-hardened-v5.4.293-hardened1.patch" 28 28 }, 29 - "sha256": "0vpgb3lmhgv5iw9b1z0kqr6vdv44if49marfp5858z3a8yj69bdk", 30 - "version": "5.4.291" 29 + "sha256": "0b9p8l6ndm75751f7s03rnxg7yg9c4pj9rb537lhsv6pqx096n1l", 30 + "version": "5.4.293" 31 31 }, 32 32 "6.1": { 33 33 "patch": { 34 34 "extra": "-hardened1", 35 - "name": "linux-hardened-v6.1.131-hardened1.patch", 36 - "sha256": "005qvy3r69cy007fvj7m4b49m3vplndb280p2q72wnk9mpw8axrp", 37 - "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.1.131-hardened1/linux-hardened-v6.1.131-hardened1.patch" 35 + "name": "linux-hardened-v6.1.138-hardened1.patch", 36 + "sha256": "1llqkxp7kch0ryf6n658z06mv7a7igp0zpxcl3kiqysilm3f93nr", 37 + "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.1.138-hardened1/linux-hardened-v6.1.138-hardened1.patch" 38 38 }, 39 - "sha256": "05jvvv3khadvfgdrv43fcrnm606jk4064a7qivkvnk1vc08gbjj4", 40 - "version": "6.1.131" 39 + "sha256": "04br4ln81skk4lgrgxqhpn2qjvkifi4bm360rfw9zfj9j2xsa6g3", 40 + "version": "6.1.138" 41 41 }, 42 42 "6.12": { 43 43 "patch": { 44 44 "extra": "-hardened1", 45 - "name": "linux-hardened-v6.12.19-hardened1.patch", 46 - "sha256": "1f78k1bns49gfb8ari5jg5wkfai206nfpsnwj0y5h5yrjg0x8sx8", 47 - "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.12.19-hardened1/linux-hardened-v6.12.19-hardened1.patch" 45 + "name": "linux-hardened-v6.12.28-hardened1.patch", 46 + "sha256": "1l0r20i72p6x362a7i74qjrlf2c7yc92cgla7s1lflcb87yynnzl", 47 + "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.12.28-hardened1/linux-hardened-v6.12.28-hardened1.patch" 48 48 }, 49 - "sha256": "0cb5ri6xsd9fyf0s48xrrsbhqzbgjd0iddnid6qk8i60prbz0fyp", 50 - "version": "6.12.19" 49 + "sha256": "07kpsl6lbsr0zw6p8bglgbchdrv1jivcwwnyh7vwzbk24lc9k878", 50 + "version": "6.12.28" 51 51 }, 52 52 "6.13": { 53 53 "patch": { 54 54 "extra": "-hardened1", 55 - "name": "linux-hardened-v6.13.7-hardened1.patch", 56 - "sha256": "0s0h6z9qxqcfdz14zbaalapl2py7z40hf4p6405f2hy5hajdcxq3", 57 - "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.13.7-hardened1/linux-hardened-v6.13.7-hardened1.patch" 55 + "name": "linux-hardened-v6.13.12-hardened1.patch", 56 + "sha256": "0i9raq3qcc6pxvs9l6yn5b6k8kiywwlis33kkpd8byqhs57aqsic", 57 + "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.13.12-hardened1/linux-hardened-v6.13.12-hardened1.patch" 58 58 }, 59 - "sha256": "07c08x68fgcsgriss5z8w427h69y52s887vas91jzb5p70hbcf9s", 60 - "version": "6.13.7" 59 + "sha256": "0hhj49k3ksjcp0dg5yiahqzryjfdpr9c1a9ph6j9slzmkikbn7v1", 60 + "version": "6.13.12" 61 + }, 62 + "6.14": { 63 + "patch": { 64 + "extra": "-hardened1", 65 + "name": "linux-hardened-v6.14.6-hardened1.patch", 66 + "sha256": "0ph6kkgbc0pk83xisggk7xsacryqlzkxgc1nxx590lg285bh33ld", 67 + "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.14.6-hardened1/linux-hardened-v6.14.6-hardened1.patch" 68 + }, 69 + "sha256": "1acpjxscw5nvgp19jzd29zhl1c6wdzx0bxp4yy0hy8z2k0cpz091", 70 + "version": "6.14.6" 61 71 }, 62 72 "6.6": { 63 73 "patch": { 64 74 "extra": "-hardened1", 65 - "name": "linux-hardened-v6.6.83-hardened1.patch", 66 - "sha256": "0wzgkj4ypa3clbzq40jkm3qjhbnj8wj48wc9vxx8v15gl4rppgga", 67 - "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.6.83-hardened1/linux-hardened-v6.6.83-hardened1.patch" 75 + "name": "linux-hardened-v6.6.90-hardened1.patch", 76 + "sha256": "0w43dv0179drcg7w7j6gq8l6di0aj4rhfphyz7xlkx6x54jlxbvv", 77 + "url": "https://github.com/anthraxx/linux-hardened/releases/download/v6.6.90-hardened1/linux-hardened-v6.6.90-hardened1.patch" 68 78 }, 69 - "sha256": "0262q81mwhy8plql8hnnfvagp460vfl127kaayya113l7gkbnjw9", 70 - "version": "6.6.83" 79 + "sha256": "0kh1ax0j0vl0n267cpij5lf170ab1fg0j6gjzvzc2a8ncx46g1gz", 80 + "version": "6.6.90" 71 81 } 72 82 }
+2 -2
pkgs/os-specific/linux/kernel/kernels-org.json
··· 1 1 { 2 2 "testing": { 3 - "version": "6.15-rc6", 4 - "hash": "sha256:1l18hsnzh28m2f34rsvq4khwblzl60qc61qs6ic13jbd8jsnhsi9" 3 + "version": "6.15-rc7", 4 + "hash": "sha256:0b9149pyg4lzzxqwx6sg8nz9ca1md7aijg9nrcagrq9sypl53hxn" 5 5 }, 6 6 "6.1": { 7 7 "version": "6.1.139",
+2 -2
pkgs/os-specific/linux/kernel/linux-libre.nix
··· 5 5 linux, 6 6 scripts ? fetchsvn { 7 7 url = "https://www.fsfla.org/svn/fsfla/software/linux-libre/releases/branches/"; 8 - rev = "19769"; 9 - sha256 = "0mfn2pa587laj45zlah424g953yjxmlh49x36byjylmzj079a42n"; 8 + rev = "19792"; 9 + sha256 = "1ygpb3i0m6zi2jhxl9kasf54blygsv7qh45nafv4shfk8bg80sn6"; 10 10 }, 11 11 ... 12 12 }@args:
+3 -3
pkgs/os-specific/linux/kernel/linux-rt-5.10.nix
··· 10 10 }@args: 11 11 12 12 let 13 - version = "5.10.234-rt127"; # updated by ./update-rt.sh 13 + version = "5.10.237-rt131"; # updated by ./update-rt.sh 14 14 branch = lib.versions.majorMinor version; 15 15 kversion = builtins.elemAt (lib.splitString "-" version) 0; 16 16 in ··· 25 25 26 26 src = fetchurl { 27 27 url = "mirror://kernel/linux/kernel/v5.x/linux-${kversion}.tar.xz"; 28 - sha256 = "1rgb4v6dvqlw1mgzsli0hxaj2d5d4m1nylgcrwm4bkpiwbzc95wm"; 28 + sha256 = "098gvqfaahabqqz64m5fwri57drwiz3006pr805sxw74w0vjgj0z"; 29 29 }; 30 30 31 31 kernelPatches = ··· 34 34 name = "rt"; 35 35 patch = fetchurl { 36 36 url = "mirror://kernel/linux/kernel/projects/rt/${branch}/older/patch-${version}.patch.xz"; 37 - sha256 = "1pmfba5sjmhai2hbzgbwhak46jhc45rcxf7zdgx5hbhbpgbl9d49"; 37 + sha256 = "15f4dylrwm9q0dl3jhcy57611w5kzz74rf9aqfvh7cqxi5q4g8fs"; 38 38 }; 39 39 }; 40 40 in
+3 -3
pkgs/os-specific/linux/kernel/linux-rt-5.15.nix
··· 10 10 }@args: 11 11 12 12 let 13 - version = "5.15.177-rt83"; # updated by ./update-rt.sh 13 + version = "5.15.179-rt84"; # updated by ./update-rt.sh 14 14 branch = lib.versions.majorMinor version; 15 15 kversion = builtins.elemAt (lib.splitString "-" version) 0; 16 16 in ··· 29 29 30 30 src = fetchurl { 31 31 url = "mirror://kernel/linux/kernel/v5.x/linux-${kversion}.tar.xz"; 32 - sha256 = "1q56w3lqwi3ynny6z7siqzv3h8nryksyw70r3fhghca2il4bi7pa"; 32 + sha256 = "0vqk4wd0cacigz42gigdzbj415hcdn2k2m01yr7k8pcv3rxs86ck"; 33 33 }; 34 34 35 35 kernelPatches = ··· 38 38 name = "rt"; 39 39 patch = fetchurl { 40 40 url = "mirror://kernel/linux/kernel/projects/rt/${branch}/older/patch-${version}.patch.xz"; 41 - sha256 = "1rc0cbc5jkgr3q3q2syqidak744lxcq3f5zdq6si2rsfxjz45www"; 41 + sha256 = "0p2yq4ahv0rwynivvlldhalpw65ka6hmjxh26p3pi5qrv3rbwja1"; 42 42 }; 43 43 }; 44 44 in
+3 -3
pkgs/os-specific/linux/kernel/linux-rt-6.1.nix
··· 10 10 }@args: 11 11 12 12 let 13 - version = "6.1.128-rt49"; # updated by ./update-rt.sh 13 + version = "6.1.134-rt51"; # updated by ./update-rt.sh 14 14 branch = lib.versions.majorMinor version; 15 15 kversion = builtins.elemAt (lib.splitString "-" version) 0; 16 16 in ··· 29 29 30 30 src = fetchurl { 31 31 url = "mirror://kernel/linux/kernel/v6.x/linux-${kversion}.tar.xz"; 32 - sha256 = "1wshgkgcxaf4mnm4ngngsj8gq1cg8kq56f5kqsdfcw0m339nfkc7"; 32 + sha256 = "08xx0w5gz7w5hqsnpckmizi1zpg38iwfchj20163ivnxf3fhriv0"; 33 33 }; 34 34 35 35 kernelPatches = ··· 38 38 name = "rt"; 39 39 patch = fetchurl { 40 40 url = "mirror://kernel/linux/kernel/projects/rt/${branch}/older/patch-${version}.patch.xz"; 41 - sha256 = "1gyy9zwfcczy9v8790f06kaz7gg75a4cf4qpyjffqx3s21lwzbjf"; 41 + sha256 = "18nznajrbjx9y76lki6aa10jkh33v60fnmyrbc0ds9x9xsnfahzz"; 42 42 }; 43 43 }; 44 44 in
+3 -3
pkgs/os-specific/linux/kernel/linux-rt-6.6.nix
··· 10 10 }@args: 11 11 12 12 let 13 - version = "6.6.77-rt50"; # updated by ./update-rt.sh 13 + version = "6.6.87-rt54"; # updated by ./update-rt.sh 14 14 branch = lib.versions.majorMinor version; 15 15 kversion = builtins.elemAt (lib.splitString "-" version) 0; 16 16 in ··· 29 29 30 30 src = fetchurl { 31 31 url = "mirror://kernel/linux/kernel/v6.x/linux-${kversion}.tar.xz"; 32 - sha256 = "0km855dnimg1clilnpcz293bd2gpbycvn3llm9kyynhjrzgqj408"; 32 + sha256 = "1iks6msk4cajyy0khyhrwsdl123hr81n67xzdnhlgg6dvb1famw9"; 33 33 }; 34 34 35 35 kernelPatches = ··· 38 38 name = "rt"; 39 39 patch = fetchurl { 40 40 url = "mirror://kernel/linux/kernel/projects/rt/${branch}/older/patch-${version}.patch.xz"; 41 - sha256 = "10kzns1c6yqn7az2i7zwm1lnss56mi6w44rw7xm2kk6n1h80590n"; 41 + sha256 = "0qxfs10y1ndq346gvcmhv0a02bbd3804yn1hvpx3p7bjp91j2as6"; 42 42 }; 43 43 }; 44 44 in
+2
pkgs/top-level/all-packages.nix
··· 11200 11200 linux_6_12_hardened = linuxKernel.kernels.linux_6_12_hardened; 11201 11201 linuxPackages_6_13_hardened = linuxKernel.packages.linux_6_13_hardened; 11202 11202 linux_6_13_hardened = linuxKernel.kernels.linux_6_13_hardened; 11203 + linuxPackages_6_14_hardened = linuxKernel.packages.linux_6_14_hardened; 11204 + linux_6_14_hardened = linuxKernel.kernels.linux_6_14_hardened; 11203 11205 11204 11206 # GNU Linux-libre kernels 11205 11207 linuxPackages-libre = linuxKernel.packages.linux_libre;
+2
pkgs/top-level/linux-kernels.nix
··· 327 327 linux_6_6_hardened = hardenedKernelFor kernels.linux_6_6 { }; 328 328 linux_6_12_hardened = hardenedKernelFor kernels.linux_6_12 { }; 329 329 linux_6_13_hardened = hardenedKernelFor kernels.linux_6_13 { }; 330 + linux_6_14_hardened = hardenedKernelFor kernels.linux_6_14 { }; 330 331 331 332 } 332 333 // lib.optionalAttrs config.allowAliases { ··· 793 794 linux_6_6_hardened = recurseIntoAttrs (packagesFor kernels.linux_6_6_hardened); 794 795 linux_6_12_hardened = recurseIntoAttrs (packagesFor kernels.linux_6_12_hardened); 795 796 linux_6_13_hardened = recurseIntoAttrs (packagesFor kernels.linux_6_13_hardened); 797 + linux_6_14_hardened = recurseIntoAttrs (packagesFor kernels.linux_6_14_hardened); 796 798 797 799 linux_zen = recurseIntoAttrs (packagesFor kernels.linux_zen); 798 800 linux_lqx = recurseIntoAttrs (packagesFor kernels.linux_lqx);