github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-29 21:03:03 +00:00
Code Issues Projects Releases Wiki Activity

Revert "versions: update kernel-confidential to Linux v6.16.1"

Browse Source 
This reverts commit 412a384aad.
This commit is contained in:
stevenhorsman 2025-08-21 14:51:08 +01:00 committed by Alex Lyn
parent 6f61ca6e0a
commit 87412a97e7
10 changed files with 5 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
tools/packaging/kernel/configs/fragments/common/confidential_containers/cryptsetup.conf
View File

@ -12,6 +12,7 @@ CONFIG_CRYPTO_MANAGER=y
CONFIG_CRYPTO_MANAGER2=y
CONFIG_CRYPTO_USER=y
CONFIG_CRYPTO_NULL=y
CONFIG_CRYPTO_NULL2=y
CONFIG_CRYPTO_CRYPTD=y
CONFIG_CRYPTO_AUTHENC=y
CONFIG_CRYPTO_CBC=y

3
tools/packaging/kernel/configs/fragments/common/hotplug.conf
View File

@ -9,6 +9,3 @@ CONFIG_PCIEPORTBUS=y
# Define hotplugs to be online immediately. Speeds things up, and makes things
# work smoother on some arch's.
CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE=y
# Linux v6.14+ dropped MEMORY_HOTPLUG_DEFAULT_ONLINE. The equivalent is:
CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_AUTO=y

7
tools/packaging/kernel/configs/fragments/s390/confidential/fips.conf
View File

@ -1,7 +0,0 @@
# To keep CRYPTO_FIPS enabled, the following dependencies
# are needed. This is done for confidential guest build
# target only since it's needed by v6.16+ kernels. Move
# to a common fragment once non-confidential guest kernels
# follow.
CONFIG_CRYPTO_SELFTESTS=y
CONFIG_EXPERT=y

3
tools/packaging/kernel/configs/fragments/whitelist.conf
View File

@ -39,6 +39,3 @@ CONFIG_MITIGATION_PAGE_TABLE_ISOLATION
CONFIG_VFIO_AP
CONFIG_VFIO_MDEV
CONFIG_BLK_DEV_WRITE_MOUNTED
CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE
CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_AUTO
CONFIG_CRYPTO_CRC32_S390

7
tools/packaging/kernel/configs/fragments/x86_64/confidential/fips.conf
View File

@ -1,7 +0,0 @@
# To keep CRYPTO_FIPS enabled, the following dependencies
# are needed. This is done for confidential guest build
# target only since it's needed by v6.16+ kernels. Move
# to a common fragment once non-confidential guest kernels
# follow.
CONFIG_CRYPTO_SELFTESTS=y
CONFIG_EXPERT=y

1
tools/packaging/kernel/configs/fragments/x86_64/crypto.conf
View File

@ -1,2 +1,3 @@
# x86 cryptographic instructions to improve AES encryption and SHA256 hashing.
CONFIG_CRYPTO_SHA256_SSSE3=y
CONFIG_CRYPTO_AES_NI_INTEL=y

1
tools/packaging/kernel/configs/fragments/x86_64/tdx/tdx.conf
View File

@ -7,5 +7,6 @@ CONFIG_INTEL_TDX_GUEST=y
CONFIG_OF=y
CONFIG_TDX_GUEST_DRIVER=y
CONFIG_VIRT_DRIVERS=y
CONFIG_X86_5LEVEL=y
CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y
CONFIG_X86_PLATFORM_DEVICES=y

2
tools/packaging/kernel/kata_config_version
View File

@ -1 +1 @@
162
161

0
tools/packaging/kernel/patches/6.16.x/no_patches.txt
View File

2
versions.yaml
View File

@ -200,7 +200,7 @@ assets:
confidential:
description: "Linux kernel with x86_64 TEEs (SNP and TDX) support"
url: "https://cdn.kernel.org/pub/linux/kernel/v6.x/"
version: "v6.16.1"
version: "v6.12.42"
kernel-arm-experimental:
description: "Linux kernel with cpu/mem hotplug support on arm64"