github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-30 23:37:45 +00:00
Code Issues Projects Releases Wiki Activity

versions: Bump to 6.4.14 stable kernel

Browse Source 
This kernel update is needed in order to get the latest and greatest
commits related to EROFS, which will be used for allowing sharing the
container images between the guest and host for Confidential Containers
using the tarfs mode of EROFS.

We're removing a few options here, because:
* SECURITY_SELINUX_CHECKREQPROT_VALUE was deprecated as part of
  a7e4676e8e2c.
* CONFIG_IP_NF_TARGET_CLUSTERIP was removed as part of 9db5d918e2c0.
* CONFIG_NET_SCH_CBQ was removed as part of 051d44209842.

Fixes: #7845
Backports: #7846

Signed-off-by: Fabiano Fidêncio <fabiano.fidencio@intel.com>
This commit is contained in:
Fabiano Fidêncio
2023-09-06 10:43:39 +02:00
parent 83b020f4a3
commit 57001431b4
7 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
tools/packaging/kernel/configs/fragments/common/lsm.conf
View File

@@ -7,6 +7,5 @@ CONFIG_SECURITY_NETWORK=y
CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SELINUX_BOOTPARAM=y
CONFIG_SECURITY_SELINUX_DEVELOP=y
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0
CONFIG_SECURITY_SELINUX_SIDTAB_HASH_BITS=9
CONFIG_SECURITY_SELINUX_SID2STR_CACHE_SIZE=256

1
tools/packaging/kernel/configs/fragments/common/netfilter.conf
View File

@@ -190,7 +190,6 @@ CONFIG_IP_NF_TARGET_MASQUERADE=y
CONFIG_IP_NF_TARGET_NETMAP=y
CONFIG_IP_NF_TARGET_REDIRECT=y
CONFIG_IP_NF_MANGLE=y
CONFIG_IP_NF_TARGET_CLUSTERIP=y
CONFIG_IP_NF_TARGET_ECN=y
CONFIG_IP_NF_TARGET_TTL=y
CONFIG_IP_NF_RAW=y

1
tools/packaging/kernel/configs/fragments/common/network.conf
View File

@@ -42,7 +42,6 @@ CONFIG_BRIDGE=y
CONFIG_BRIDGE_IGMP_SNOOPING=y
CONFIG_LLC=y
CONFIG_NET_SCHED=y
CONFIG_NET_SCH_CBQ=y
CONFIG_NET_SCH_MULTIQ=y
CONFIG_NET_SCH_FQ_CODEL=y
CONFIG_NET_SCH_FQ=y

3
tools/packaging/kernel/configs/fragments/whitelist.conf
View File

@@ -18,3 +18,6 @@ CONFIG_ARM64_UAO
CONFIG_VFIO_MDEV_DEVICE
CONFIG_SPECULATION_MITIGATIONS
CONFIG_X86_SGX
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE
CONFIG_IP_NF_TARGET_CLUSTERIP
CONFIG_NET_SCH_CBQ

2
tools/packaging/kernel/kata_config_version
View File

@@ -1 +1 @@
112
114

0
tools/packaging/kernel/patches/6.4.x/no_patches.txt Normal file
View File

2
versions.yaml
View File

@@ -168,7 +168,7 @@ assets:
kernel:
description: "Linux kernel optimised for virtual machines"
url: "https://cdn.kernel.org/pub/linux/kernel/v6.x/"
version: "v6.1.38"
version: "v6.4.14"
sev:
description: "Linux kernel that supports SEV and SNP"
url: "https://cdn.kernel.org/pub/linux/kernel/v5.x/"