github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-18 16:08:25 +00:00
Code Issues Projects Releases Wiki Activity

Merge 2a59505df5 into 9379a18c8a

Browse Source
This commit is contained in:
Mikko Ylinen 2025-08-12 10:43:32 +03:00 committed by GitHub
commit 8c25c785e1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
9 changed files with 14 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
tools/packaging/kernel/configs/fragments/common/confidential_containers/cryptsetup.conf
View File

@ -12,7 +12,6 @@ CONFIG_CRYPTO_MANAGER=y
CONFIG_CRYPTO_MANAGER2=y CONFIG_CRYPTO_MANAGER2=y
CONFIG_CRYPTO_USER=y CONFIG_CRYPTO_USER=y
CONFIG_CRYPTO_NULL=y CONFIG_CRYPTO_NULL=y
CONFIG_CRYPTO_NULL2=y
CONFIG_CRYPTO_CRYPTD=y CONFIG_CRYPTO_CRYPTD=y
CONFIG_CRYPTO_AUTHENC=y CONFIG_CRYPTO_AUTHENC=y
CONFIG_CRYPTO_CBC=y CONFIG_CRYPTO_CBC=y

3
tools/packaging/kernel/configs/fragments/common/hotplug.conf
View File

@ -9,3 +9,6 @@ CONFIG_PCIEPORTBUS=y
# Define hotplugs to be online immediately. Speeds things up, and makes things # Define hotplugs to be online immediately. Speeds things up, and makes things
# work smoother on some arch's. # work smoother on some arch's.
CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE=y CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE=y
# Linux v6.14+ dropped MEMORY_HOTPLUG_DEFAULT_ONLINE. The equivalent is:
CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_AUTO=y

2
tools/packaging/kernel/configs/fragments/whitelist.conf
View File

@ -39,3 +39,5 @@ CONFIG_MITIGATION_PAGE_TABLE_ISOLATION
CONFIG_VFIO_AP CONFIG_VFIO_AP
CONFIG_VFIO_MDEV CONFIG_VFIO_MDEV
CONFIG_BLK_DEV_WRITE_MOUNTED CONFIG_BLK_DEV_WRITE_MOUNTED
CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE
CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_AUTO

7
tools/packaging/kernel/configs/fragments/x86_64/confidential/fips.conf Normal file
View File

@ -0,0 +1,7 @@
# To keep CRYPTO_FIPS enabled, the following dependencies
# are needed. This is done for confidential guest build
# target only since it's needed by v6.16+ kernels. Move
# to a common fragment once non-confidential guest kernels
# follow.
CONFIG_CRYPTO_SELFTESTS=y
CONFIG_EXPERT=y

1
tools/packaging/kernel/configs/fragments/x86_64/crypto.conf
View File

@ -1,3 +1,2 @@
# x86 cryptographic instructions to improve AES encryption and SHA256 hashing. # x86 cryptographic instructions to improve AES encryption and SHA256 hashing.
CONFIG_CRYPTO_SHA256_SSSE3=y
CONFIG_CRYPTO_AES_NI_INTEL=y CONFIG_CRYPTO_AES_NI_INTEL=y

1
tools/packaging/kernel/configs/fragments/x86_64/tdx/tdx.conf
View File

@ -7,6 +7,5 @@ CONFIG_INTEL_TDX_GUEST=y
CONFIG_OF=y CONFIG_OF=y
CONFIG_TDX_GUEST_DRIVER=y CONFIG_TDX_GUEST_DRIVER=y
CONFIG_VIRT_DRIVERS=y CONFIG_VIRT_DRIVERS=y
CONFIG_X86_5LEVEL=y
CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y
CONFIG_X86_PLATFORM_DEVICES=y CONFIG_X86_PLATFORM_DEVICES=y

2
tools/packaging/kernel/kata_config_version
View File

@ -1 +1 @@
160 161

0
tools/packaging/kernel/patches/6.16.x/no_patches.txt Normal file
View File

2
versions.yaml
View File

@ -200,7 +200,7 @@ assets:
confidential: confidential:
description: "Linux kernel with x86_64 TEEs (SNP and TDX) support" description: "Linux kernel with x86_64 TEEs (SNP and TDX) support"
url: "https://cdn.kernel.org/pub/linux/kernel/v6.x/" url: "https://cdn.kernel.org/pub/linux/kernel/v6.x/"
version: "v6.12.36" version: "v6.16"
kernel-arm-experimental: kernel-arm-experimental:
description: "Linux kernel with cpu/mem hotplug support on arm64" description: "Linux kernel with cpu/mem hotplug support on arm64"