Merge pull request #2958 from rn/kern-up

Enable IMA and multiple kernel updates
2025-07-20 09:39:08 +00:00 · 2018-03-12 21:34:49 +00:00 · 2018-03-12 21:34:49 +00:00 · 692067d58d
commit 692067d58d
parent b218449d73 fa21e15e66
121 changed files with 278 additions and 161 deletions
--- a/examples/aws.yml
+++ b/examples/aws.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/azure.yml
+++ b/examples/azure.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/cadvisor.yml
+++ b/examples/cadvisor.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/docker-for-mac.yml
+++ b/examples/docker-for-mac.yml
@ -1,6 +1,6 @@
 # This is an example for building the open source components of Docker for Mac
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 page_poison=1"
 init:
  - linuxkit/vpnkit-expose-port:v0.2 # install vpnkit-expose-port and vpnkit-iptables-wrapper on host
--- a/examples/docker.yml
+++ b/examples/docker.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/gcp.yml
+++ b/examples/gcp.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/getty.yml
+++ b/examples/getty.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/hostmount-writeable-overlay.yml
+++ b/examples/hostmount-writeable-overlay.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/influxdb-os.yml
+++ b/examples/influxdb-os.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:d899eee3560a40aa3b4bdd67b3bb82703714b2b9
--- a/examples/minimal.yml
+++ b/examples/minimal.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/node_exporter.yml
+++ b/examples/node_exporter.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/openstack.yml
+++ b/examples/openstack.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/packet.arm64.yml
+++ b/examples/packet.arm64.yml
@ -5,7 +5,7 @@
 # for arm64 then the 'ucode' line in the kernel section can be left
 # out.
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyAMA0"
  ucode: ""
 onboot:
--- a/examples/packet.yml
+++ b/examples/packet.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: console=ttyS1
  ucode: intel-ucode.cpio
 init:
--- a/examples/redis-os.yml
+++ b/examples/redis-os.yml
@ -1,7 +1,7 @@
 # Minimal YAML to run a redis server (used at DockerCon'17)
 # connect: nc localhost 6379
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/sshd.yml
+++ b/examples/sshd.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/swap.yml
+++ b/examples/swap.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/vmware.yml
+++ b/examples/vmware.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/vpnkit-forwarder.yml
+++ b/examples/vpnkit-forwarder.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/vsudd-containerd.yml
+++ b/examples/vsudd-containerd.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/vultr.yml
+++ b/examples/vultr.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/examples/wireguard.yml
+++ b/examples/wireguard.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/kernel/Makefile
+++ b/kernel/Makefile
@ -218,22 +218,22 @@ endef
 # Debug targets only for latest stable and LTS stable
 #
 ifeq ($(ARCH),x86_64)
-$(eval $(call kernel,4.15.7,4.15.x,$(EXTRA),$(DEBUG)))
-$(eval $(call kernel,4.14.24,4.14.x,$(EXTRA),$(DEBUG)))
-$(eval $(call kernel,4.14.24,4.14.x,,-dbg))
+$(eval $(call kernel,4.15.9,4.15.x,$(EXTRA),$(DEBUG)))
+$(eval $(call kernel,4.14.26,4.14.x,$(EXTRA),$(DEBUG)))
+$(eval $(call kernel,4.14.26,4.14.x,,-dbg))
 $(eval $(call kernel,4.14.18,4.14.x,-rt,))
-$(eval $(call kernel,4.9.86,4.9.x,$(EXTRA),$(DEBUG)))
-$(eval $(call kernel,4.4.120,4.4.x,$(EXTRA),$(DEBUG)))
+$(eval $(call kernel,4.9.87,4.9.x,$(EXTRA),$(DEBUG)))
+$(eval $(call kernel,4.4.121,4.4.x,$(EXTRA),$(DEBUG)))

 else ifeq ($(ARCH),aarch64)
-$(eval $(call kernel,4.15.7,4.15.x,$(EXTRA),$(DEBUG)))
-$(eval $(call kernel,4.14.24,4.14.x,$(EXTRA),$(DEBUG)))
+$(eval $(call kernel,4.15.9,4.15.x,$(EXTRA),$(DEBUG)))
+$(eval $(call kernel,4.14.26,4.14.x,$(EXTRA),$(DEBUG)))
 $(eval $(call kernel,4.14.18,4.14.x,-rt,))
-$(eval $(call kernel,4.9.86,4.9.x,$(EXTRA),$(DEBUG)))
+$(eval $(call kernel,4.9.87,4.9.x,$(EXTRA),$(DEBUG)))

 else ifeq ($(ARCH),s390x)
-$(eval $(call kernel,4.15.7,4.15.x,$(EXTRA),$(DEBUG)))
-$(eval $(call kernel,4.14.24,4.14.x,$(EXTRA),$(DEBUG)))
+$(eval $(call kernel,4.15.9,4.15.x,$(EXTRA),$(DEBUG)))
+$(eval $(call kernel,4.14.26,4.14.x,$(EXTRA),$(DEBUG)))
 endif

 # Target for kernel config
--- a/kernel/config-4.14.x-aarch64
+++ b/kernel/config-4.14.x-aarch64
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 4.14.24 Kernel Configuration
+# Linux/arm64 4.14.26 Kernel Configuration
 #
 CONFIG_ARM64=y
 CONFIG_64BIT=y
@ -4032,7 +4032,7 @@ CONFIG_STRICT_DEVMEM=y
 CONFIG_KEYS=y
 CONFIG_PERSISTENT_KEYRINGS=y
 CONFIG_BIG_KEYS=y
-CONFIG_TRUSTED_KEYS=m
+CONFIG_TRUSTED_KEYS=y
 CONFIG_ENCRYPTED_KEYS=y
 CONFIG_KEY_DH_OPERATIONS=y
 CONFIG_SECURITY_DMESG_RESTRICT=y
@ -4055,10 +4055,26 @@ CONFIG_STATIC_USERMODEHELPER_PATH="/sbin/usermode-helper"
 # CONFIG_SECURITY_LOADPIN is not set
 CONFIG_SECURITY_YAMA=y
 CONFIG_INTEGRITY=y
-# CONFIG_INTEGRITY_SIGNATURE is not set
+CONFIG_INTEGRITY_SIGNATURE=y
+CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
 CONFIG_INTEGRITY_AUDIT=y
-# CONFIG_IMA is not set
-# CONFIG_EVM is not set
+CONFIG_IMA=y
+CONFIG_IMA_MEASURE_PCR_IDX=10
+# CONFIG_IMA_TEMPLATE is not set
+CONFIG_IMA_NG_TEMPLATE=y
+# CONFIG_IMA_SIG_TEMPLATE is not set
+CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
+# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
+CONFIG_IMA_DEFAULT_HASH_SHA256=y
+# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
+# CONFIG_IMA_DEFAULT_HASH_WP512 is not set
+CONFIG_IMA_DEFAULT_HASH="sha256"
+# CONFIG_IMA_WRITE_POLICY is not set
+CONFIG_IMA_READ_POLICY=y
+CONFIG_IMA_APPRAISE=y
+CONFIG_IMA_APPRAISE_BOOTPARAM=y
+CONFIG_EVM=y
+CONFIG_EVM_ATTR_FSUUID=y
 CONFIG_DEFAULT_SECURITY_DAC=y
 CONFIG_DEFAULT_SECURITY=""
 CONFIG_XOR_BLOCKS=m
@ -4315,6 +4331,7 @@ CONFIG_CLZ_TAB=y
 # CONFIG_DDR is not set
 # CONFIG_IRQ_POLL is not set
 CONFIG_MPILIB=y
+CONFIG_SIGNATURE=y
 CONFIG_LIBFDT=y
 CONFIG_OID_REGISTRY=y
 CONFIG_UCS2_STRING=y
--- a/kernel/config-4.14.x-s390x
+++ b/kernel/config-4.14.x-s390x
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/s390 4.14.24 Kernel Configuration
+# Linux/s390 4.14.26 Kernel Configuration
 #
 CONFIG_MMU=y
 CONFIG_ZONE_DMA=y
@ -1874,12 +1874,18 @@ CONFIG_VIRTIO_CONSOLE=y
 CONFIG_HW_RANDOM=y
 # CONFIG_HW_RANDOM_TIMERIOMEM is not set
 CONFIG_HW_RANDOM_VIRTIO=y
+CONFIG_HW_RANDOM_TPM=y
 CONFIG_HW_RANDOM_S390=y
 # CONFIG_R3964 is not set
 # CONFIG_APPLICOM is not set
 # CONFIG_RAW_DRIVER is not set
 # CONFIG_HANGCHECK_TIMER is not set
-# CONFIG_TCG_TPM is not set
+CONFIG_TCG_TPM=y
+# CONFIG_TCG_TIS_I2C_ATMEL is not set
+# CONFIG_TCG_TIS_I2C_INFINEON is not set
+# CONFIG_TCG_TIS_I2C_NUVOTON is not set
+# CONFIG_TCG_VTPM_PROXY is not set
+# CONFIG_TCG_TIS_ST33ZP24_I2C is not set
 CONFIG_DEVPORT=y

 #
@ -3039,6 +3045,7 @@ CONFIG_KEYS=y
 CONFIG_KEYS_COMPAT=y
 CONFIG_PERSISTENT_KEYRINGS=y
 CONFIG_BIG_KEYS=y
+CONFIG_TRUSTED_KEYS=y
 CONFIG_ENCRYPTED_KEYS=y
 CONFIG_KEY_DH_OPERATIONS=y
 CONFIG_SECURITY_DMESG_RESTRICT=y
@ -3060,10 +3067,26 @@ CONFIG_STATIC_USERMODEHELPER_PATH="/sbin/usermode-helper"
 # CONFIG_SECURITY_LOADPIN is not set
 CONFIG_SECURITY_YAMA=y
 CONFIG_INTEGRITY=y
-# CONFIG_INTEGRITY_SIGNATURE is not set
+CONFIG_INTEGRITY_SIGNATURE=y
+CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
 CONFIG_INTEGRITY_AUDIT=y
-# CONFIG_IMA is not set
-# CONFIG_EVM is not set
+CONFIG_IMA=y
+CONFIG_IMA_MEASURE_PCR_IDX=10
+# CONFIG_IMA_TEMPLATE is not set
+CONFIG_IMA_NG_TEMPLATE=y
+# CONFIG_IMA_SIG_TEMPLATE is not set
+CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
+# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
+CONFIG_IMA_DEFAULT_HASH_SHA256=y
+# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
+# CONFIG_IMA_DEFAULT_HASH_WP512 is not set
+CONFIG_IMA_DEFAULT_HASH="sha256"
+# CONFIG_IMA_WRITE_POLICY is not set
+CONFIG_IMA_READ_POLICY=y
+CONFIG_IMA_APPRAISE=y
+CONFIG_IMA_APPRAISE_BOOTPARAM=y
+CONFIG_EVM=y
+CONFIG_EVM_ATTR_FSUUID=y
 CONFIG_DEFAULT_SECURITY_DAC=y
 CONFIG_DEFAULT_SECURITY=""
 CONFIG_XOR_BLOCKS=m
@ -3299,6 +3322,7 @@ CONFIG_CLZ_TAB=y
 # CONFIG_DDR is not set
 # CONFIG_IRQ_POLL is not set
 CONFIG_MPILIB=y
+CONFIG_SIGNATURE=y
 CONFIG_OID_REGISTRY=y
 # CONFIG_SG_SPLIT is not set
 CONFIG_SG_POOL=y
--- a/kernel/config-4.14.x-x86_64
+++ b/kernel/config-4.14.x-x86_64
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.14.24 Kernel Configuration
+# Linux/x86 4.14.26 Kernel Configuration
 #
 CONFIG_64BIT=y
 CONFIG_X86_64=y
@ -2219,9 +2219,9 @@ CONFIG_HPET=y
 CONFIG_HPET_MMAP=y
 CONFIG_HPET_MMAP_DEFAULT=y
 CONFIG_HANGCHECK_TIMER=y
-CONFIG_TCG_TPM=m
-CONFIG_TCG_TIS_CORE=m
-CONFIG_TCG_TIS=m
+CONFIG_TCG_TPM=y
+CONFIG_TCG_TIS_CORE=y
+CONFIG_TCG_TIS=y
 CONFIG_TCG_TIS_I2C_ATMEL=m
 CONFIG_TCG_TIS_I2C_INFINEON=m
 CONFIG_TCG_TIS_I2C_NUVOTON=m
@ -3850,7 +3850,7 @@ CONFIG_KEYS=y
 CONFIG_KEYS_COMPAT=y
 CONFIG_PERSISTENT_KEYRINGS=y
 CONFIG_BIG_KEYS=y
-CONFIG_TRUSTED_KEYS=m
+CONFIG_TRUSTED_KEYS=y
 CONFIG_ENCRYPTED_KEYS=y
 CONFIG_KEY_DH_OPERATIONS=y
 CONFIG_SECURITY_DMESG_RESTRICT=y
@ -3874,10 +3874,26 @@ CONFIG_STATIC_USERMODEHELPER_PATH="/sbin/usermode-helper"
 # CONFIG_SECURITY_LOADPIN is not set
 CONFIG_SECURITY_YAMA=y
 CONFIG_INTEGRITY=y
-# CONFIG_INTEGRITY_SIGNATURE is not set
+CONFIG_INTEGRITY_SIGNATURE=y
+CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
 CONFIG_INTEGRITY_AUDIT=y
-# CONFIG_IMA is not set
-# CONFIG_EVM is not set
+CONFIG_IMA=y
+CONFIG_IMA_MEASURE_PCR_IDX=10
+# CONFIG_IMA_TEMPLATE is not set
+CONFIG_IMA_NG_TEMPLATE=y
+# CONFIG_IMA_SIG_TEMPLATE is not set
+CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
+# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
+CONFIG_IMA_DEFAULT_HASH_SHA256=y
+# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
+# CONFIG_IMA_DEFAULT_HASH_WP512 is not set
+CONFIG_IMA_DEFAULT_HASH="sha256"
+# CONFIG_IMA_WRITE_POLICY is not set
+CONFIG_IMA_READ_POLICY=y
+CONFIG_IMA_APPRAISE=y
+CONFIG_IMA_APPRAISE_BOOTPARAM=y
+CONFIG_EVM=y
+CONFIG_EVM_ATTR_FSUUID=y
 CONFIG_DEFAULT_SECURITY_DAC=y
 CONFIG_DEFAULT_SECURITY=""
 CONFIG_XOR_BLOCKS=m
@ -4176,6 +4192,7 @@ CONFIG_CLZ_TAB=y
 # CONFIG_DDR is not set
 # CONFIG_IRQ_POLL is not set
 CONFIG_MPILIB=y
+CONFIG_SIGNATURE=y
 CONFIG_OID_REGISTRY=y
 CONFIG_UCS2_STRING=y
 CONFIG_FONT_SUPPORT=y
--- a/kernel/config-4.15.x-aarch64
+++ b/kernel/config-4.15.x-aarch64
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 4.15.7 Kernel Configuration
+# Linux/arm64 4.15.9 Kernel Configuration
 #
 CONFIG_ARM64=y
 CONFIG_64BIT=y
@ -4076,7 +4076,7 @@ CONFIG_STRICT_DEVMEM=y
 CONFIG_KEYS=y
 CONFIG_PERSISTENT_KEYRINGS=y
 CONFIG_BIG_KEYS=y
-CONFIG_TRUSTED_KEYS=m
+CONFIG_TRUSTED_KEYS=y
 CONFIG_ENCRYPTED_KEYS=y
 CONFIG_KEY_DH_OPERATIONS=y
 CONFIG_SECURITY_DMESG_RESTRICT=y
@ -4099,10 +4099,26 @@ CONFIG_STATIC_USERMODEHELPER_PATH="/sbin/usermode-helper"
 # CONFIG_SECURITY_LOADPIN is not set
 CONFIG_SECURITY_YAMA=y
 CONFIG_INTEGRITY=y
-# CONFIG_INTEGRITY_SIGNATURE is not set
+CONFIG_INTEGRITY_SIGNATURE=y
+CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
 CONFIG_INTEGRITY_AUDIT=y
-# CONFIG_IMA is not set
-# CONFIG_EVM is not set
+CONFIG_IMA=y
+CONFIG_IMA_MEASURE_PCR_IDX=10
+# CONFIG_IMA_TEMPLATE is not set
+CONFIG_IMA_NG_TEMPLATE=y
+# CONFIG_IMA_SIG_TEMPLATE is not set
+CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
+# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
+CONFIG_IMA_DEFAULT_HASH_SHA256=y
+# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
+# CONFIG_IMA_DEFAULT_HASH_WP512 is not set
+CONFIG_IMA_DEFAULT_HASH="sha256"
+# CONFIG_IMA_WRITE_POLICY is not set
+CONFIG_IMA_READ_POLICY=y
+CONFIG_IMA_APPRAISE=y
+CONFIG_IMA_APPRAISE_BOOTPARAM=y
+CONFIG_EVM=y
+CONFIG_EVM_ATTR_FSUUID=y
 CONFIG_DEFAULT_SECURITY_DAC=y
 CONFIG_DEFAULT_SECURITY=""
 CONFIG_XOR_BLOCKS=m
@ -4359,6 +4375,7 @@ CONFIG_CLZ_TAB=y
 # CONFIG_DDR is not set
 # CONFIG_IRQ_POLL is not set
 CONFIG_MPILIB=y
+CONFIG_SIGNATURE=y
 CONFIG_LIBFDT=y
 CONFIG_OID_REGISTRY=y
 CONFIG_UCS2_STRING=y
--- a/kernel/config-4.15.x-s390x
+++ b/kernel/config-4.15.x-s390x
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/s390 4.15.7 Kernel Configuration
+# Linux/s390 4.15.9 Kernel Configuration
 #
 CONFIG_MMU=y
 CONFIG_ZONE_DMA=y
@ -1895,12 +1895,18 @@ CONFIG_VIRTIO_CONSOLE=y
 CONFIG_HW_RANDOM=y
 # CONFIG_HW_RANDOM_TIMERIOMEM is not set
 CONFIG_HW_RANDOM_VIRTIO=y
+CONFIG_HW_RANDOM_TPM=y
 CONFIG_HW_RANDOM_S390=y
 # CONFIG_R3964 is not set
 # CONFIG_APPLICOM is not set
 # CONFIG_RAW_DRIVER is not set
 # CONFIG_HANGCHECK_TIMER is not set
-# CONFIG_TCG_TPM is not set
+CONFIG_TCG_TPM=y
+# CONFIG_TCG_TIS_I2C_ATMEL is not set
+# CONFIG_TCG_TIS_I2C_INFINEON is not set
+# CONFIG_TCG_TIS_I2C_NUVOTON is not set
+# CONFIG_TCG_VTPM_PROXY is not set
+# CONFIG_TCG_TIS_ST33ZP24_I2C is not set
 CONFIG_DEVPORT=y

 #
@ -3076,6 +3082,7 @@ CONFIG_KEYS=y
 CONFIG_KEYS_COMPAT=y
 CONFIG_PERSISTENT_KEYRINGS=y
 CONFIG_BIG_KEYS=y
+CONFIG_TRUSTED_KEYS=y
 CONFIG_ENCRYPTED_KEYS=y
 CONFIG_KEY_DH_OPERATIONS=y
 CONFIG_SECURITY_DMESG_RESTRICT=y
@ -3098,10 +3105,26 @@ CONFIG_STATIC_USERMODEHELPER_PATH="/sbin/usermode-helper"
 # CONFIG_SECURITY_LOADPIN is not set
 CONFIG_SECURITY_YAMA=y
 CONFIG_INTEGRITY=y
-# CONFIG_INTEGRITY_SIGNATURE is not set
+CONFIG_INTEGRITY_SIGNATURE=y
+CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
 CONFIG_INTEGRITY_AUDIT=y
-# CONFIG_IMA is not set
-# CONFIG_EVM is not set
+CONFIG_IMA=y
+CONFIG_IMA_MEASURE_PCR_IDX=10
+# CONFIG_IMA_TEMPLATE is not set
+CONFIG_IMA_NG_TEMPLATE=y
+# CONFIG_IMA_SIG_TEMPLATE is not set
+CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
+# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
+CONFIG_IMA_DEFAULT_HASH_SHA256=y
+# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
+# CONFIG_IMA_DEFAULT_HASH_WP512 is not set
+CONFIG_IMA_DEFAULT_HASH="sha256"
+# CONFIG_IMA_WRITE_POLICY is not set
+CONFIG_IMA_READ_POLICY=y
+CONFIG_IMA_APPRAISE=y
+CONFIG_IMA_APPRAISE_BOOTPARAM=y
+CONFIG_EVM=y
+CONFIG_EVM_ATTR_FSUUID=y
 CONFIG_DEFAULT_SECURITY_DAC=y
 CONFIG_DEFAULT_SECURITY=""
 CONFIG_XOR_BLOCKS=m
@ -3337,6 +3360,7 @@ CONFIG_CLZ_TAB=y
 # CONFIG_DDR is not set
 # CONFIG_IRQ_POLL is not set
 CONFIG_MPILIB=y
+CONFIG_SIGNATURE=y
 CONFIG_OID_REGISTRY=y
 # CONFIG_SG_SPLIT is not set
 CONFIG_SG_POOL=y
--- a/kernel/config-4.15.x-x86_64
+++ b/kernel/config-4.15.x-x86_64
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.15.7 Kernel Configuration
+# Linux/x86 4.15.9 Kernel Configuration
 #
 CONFIG_64BIT=y
 CONFIG_X86_64=y
@ -2232,9 +2232,9 @@ CONFIG_HPET=y
 CONFIG_HPET_MMAP=y
 CONFIG_HPET_MMAP_DEFAULT=y
 CONFIG_HANGCHECK_TIMER=y
-CONFIG_TCG_TPM=m
-CONFIG_TCG_TIS_CORE=m
-CONFIG_TCG_TIS=m
+CONFIG_TCG_TPM=y
+CONFIG_TCG_TIS_CORE=y
+CONFIG_TCG_TIS=y
 CONFIG_TCG_TIS_I2C_ATMEL=m
 CONFIG_TCG_TIS_I2C_INFINEON=m
 CONFIG_TCG_TIS_I2C_NUVOTON=m
@ -3879,7 +3879,7 @@ CONFIG_KEYS=y
 CONFIG_KEYS_COMPAT=y
 CONFIG_PERSISTENT_KEYRINGS=y
 CONFIG_BIG_KEYS=y
-CONFIG_TRUSTED_KEYS=m
+CONFIG_TRUSTED_KEYS=y
 CONFIG_ENCRYPTED_KEYS=y
 CONFIG_KEY_DH_OPERATIONS=y
 CONFIG_SECURITY_DMESG_RESTRICT=y
@ -3903,10 +3903,26 @@ CONFIG_STATIC_USERMODEHELPER_PATH="/sbin/usermode-helper"
 # CONFIG_SECURITY_LOADPIN is not set
 CONFIG_SECURITY_YAMA=y
 CONFIG_INTEGRITY=y
-# CONFIG_INTEGRITY_SIGNATURE is not set
+CONFIG_INTEGRITY_SIGNATURE=y
+CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
 CONFIG_INTEGRITY_AUDIT=y
-# CONFIG_IMA is not set
-# CONFIG_EVM is not set
+CONFIG_IMA=y
+CONFIG_IMA_MEASURE_PCR_IDX=10
+# CONFIG_IMA_TEMPLATE is not set
+CONFIG_IMA_NG_TEMPLATE=y
+# CONFIG_IMA_SIG_TEMPLATE is not set
+CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
+# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
+CONFIG_IMA_DEFAULT_HASH_SHA256=y
+# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
+# CONFIG_IMA_DEFAULT_HASH_WP512 is not set
+CONFIG_IMA_DEFAULT_HASH="sha256"
+# CONFIG_IMA_WRITE_POLICY is not set
+CONFIG_IMA_READ_POLICY=y
+CONFIG_IMA_APPRAISE=y
+CONFIG_IMA_APPRAISE_BOOTPARAM=y
+CONFIG_EVM=y
+CONFIG_EVM_ATTR_FSUUID=y
 CONFIG_DEFAULT_SECURITY_DAC=y
 CONFIG_DEFAULT_SECURITY=""
 CONFIG_XOR_BLOCKS=m
@ -4205,6 +4221,7 @@ CONFIG_CLZ_TAB=y
 # CONFIG_DDR is not set
 # CONFIG_IRQ_POLL is not set
 CONFIG_MPILIB=y
+CONFIG_SIGNATURE=y
 CONFIG_OID_REGISTRY=y
 CONFIG_UCS2_STRING=y
 CONFIG_FONT_SUPPORT=y
--- a/kernel/config-4.4.x-x86_64
+++ b/kernel/config-4.4.x-x86_64
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.4.120 Kernel Configuration
+# Linux/x86 4.4.121 Kernel Configuration
 #
 CONFIG_64BIT=y
 CONFIG_X86_64=y
--- a/kernel/config-4.9.x-aarch64
+++ b/kernel/config-4.9.x-aarch64
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 4.9.86 Kernel Configuration
+# Linux/arm64 4.9.87 Kernel Configuration
 #
 CONFIG_ARM64=y
 CONFIG_64BIT=y
--- a/kernel/config-4.9.x-x86_64
+++ b/kernel/config-4.9.x-x86_64
@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 4.9.86 Kernel Configuration
+# Linux/x86 4.9.87 Kernel Configuration
 #
 CONFIG_64BIT=y
 CONFIG_X86_64=y
--- a/kernel/patches-4.14.x/0001-NVDIMM-reducded-ND_MIN_NAMESPACE_SIZE-from-4MB-to-4K.patch
+++ b/kernel/patches-4.14.x/0001-NVDIMM-reducded-ND_MIN_NAMESPACE_SIZE-from-4MB-to-4K.patch
@ -1,4 +1,4 @@
-From da15005d90cf70441ceb8ed504c3d890b0e53f7d Mon Sep 17 00:00:00 2001
+From 449e0e84b4db13ad44ac22b554060b89e886675e Mon Sep 17 00:00:00 2001
 From: Cheng-mean Liu <soccerl@microsoft.com>
 Date: Tue, 11 Jul 2017 16:58:26 -0700
 Subject: [PATCH 01/19] NVDIMM: reducded ND_MIN_NAMESPACE_SIZE from 4MB to 4KB
--- a/kernel/patches-4.14.x/0002-hyper-v-trace-vmbus_on_msg_dpc.patch
+++ b/kernel/patches-4.14.x/0002-hyper-v-trace-vmbus_on_msg_dpc.patch
@ -1,4 +1,4 @@
-From e9fd07e6c521b194f44b8852d5158d48165b8b8f Mon Sep 17 00:00:00 2001
+From 8a802507e3be115d0d9a262caf4d9a23cda85c66 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:00 -0700
 Subject: [PATCH 02/19] hyper-v: trace vmbus_on_msg_dpc()
--- a/kernel/patches-4.14.x/0003-hyper-v-trace-vmbus_on_message.patch
+++ b/kernel/patches-4.14.x/0003-hyper-v-trace-vmbus_on_message.patch
@ -1,4 +1,4 @@
-From 78c85990427d825732dc5e464eb09f486cf74948 Mon Sep 17 00:00:00 2001
+From 9823ce98fbe834b4098617b3bc1bc894e3a75d1a Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:01 -0700
 Subject: [PATCH 03/19] hyper-v: trace vmbus_on_message()
--- a/kernel/patches-4.14.x/0004-hyper-v-trace-vmbus_onoffer.patch
+++ b/kernel/patches-4.14.x/0004-hyper-v-trace-vmbus_onoffer.patch
@ -1,4 +1,4 @@
-From b3f6828cd908d0e7bdb58cca4907ebaf8c9a9657 Mon Sep 17 00:00:00 2001
+From 384874473e5ba0fb4ccad476f91068e768e026c9 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:02 -0700
 Subject: [PATCH 04/19] hyper-v: trace vmbus_onoffer()
--- a/kernel/patches-4.14.x/0005-hyper-v-trace-vmbus_onoffer_rescind.patch
+++ b/kernel/patches-4.14.x/0005-hyper-v-trace-vmbus_onoffer_rescind.patch
@ -1,4 +1,4 @@
-From 864773011fa74d6c2bc36c12350aaa54afe857b1 Mon Sep 17 00:00:00 2001
+From 36bf4a63f52d71bdb55c2092e17c81d7114a5f6a Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:03 -0700
 Subject: [PATCH 05/19] hyper-v: trace vmbus_onoffer_rescind()
--- a/kernel/patches-4.14.x/0006-hyper-v-trace-vmbus_onopen_result.patch
+++ b/kernel/patches-4.14.x/0006-hyper-v-trace-vmbus_onopen_result.patch
@ -1,4 +1,4 @@
-From c1ca87ee553a13d58dc646334e74b47e7a746b1a Mon Sep 17 00:00:00 2001
+From 992dab46e03988520fb08d3b079dbdf4bfaa1895 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:04 -0700
 Subject: [PATCH 06/19] hyper-v: trace vmbus_onopen_result()
--- a/kernel/patches-4.14.x/0007-hyper-v-trace-vmbus_ongpadl_created.patch
+++ b/kernel/patches-4.14.x/0007-hyper-v-trace-vmbus_ongpadl_created.patch
@ -1,4 +1,4 @@
-From c162337f3956a9ae3c8df37e2f3ac22e5cb06dc1 Mon Sep 17 00:00:00 2001
+From 928ceefd0c70246b967f5cea7438232549362350 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:05 -0700
 Subject: [PATCH 07/19] hyper-v: trace vmbus_ongpadl_created()
--- a/kernel/patches-4.14.x/0008-hyper-v-trace-vmbus_ongpadl_torndown.patch
+++ b/kernel/patches-4.14.x/0008-hyper-v-trace-vmbus_ongpadl_torndown.patch
@ -1,4 +1,4 @@
-From af304c5292a9d0f441660850d4482cea83da5263 Mon Sep 17 00:00:00 2001
+From 1fcc02127d917dfe02c0f51c644031b7db4feef0 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:06 -0700
 Subject: [PATCH 08/19] hyper-v: trace vmbus_ongpadl_torndown()
--- a/kernel/patches-4.14.x/0009-hyper-v-trace-vmbus_onversion_response.patch
+++ b/kernel/patches-4.14.x/0009-hyper-v-trace-vmbus_onversion_response.patch
@ -1,4 +1,4 @@
-From 7d4cfefa0dddaa0893170eed5bdfdc34b83feb2a Mon Sep 17 00:00:00 2001
+From 049c3097fb0810e08c65614138ea10907629d606 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:07 -0700
 Subject: [PATCH 09/19] hyper-v: trace vmbus_onversion_response()
--- a/kernel/patches-4.14.x/0010-hyper-v-trace-vmbus_request_offers.patch
+++ b/kernel/patches-4.14.x/0010-hyper-v-trace-vmbus_request_offers.patch
@ -1,4 +1,4 @@
-From d11be2042c7d4ebe7de401fdd67592260d8ec689 Mon Sep 17 00:00:00 2001
+From 75e7dce8fd3b4c82ac17a8e4e956d9e0e5603af4 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:08 -0700
 Subject: [PATCH 10/19] hyper-v: trace vmbus_request_offers()
--- a/kernel/patches-4.14.x/0011-hyper-v-trace-vmbus_open.patch
+++ b/kernel/patches-4.14.x/0011-hyper-v-trace-vmbus_open.patch
@ -1,4 +1,4 @@
-From 5c0bdec259f102a1a8183133724f706ef8cdd733 Mon Sep 17 00:00:00 2001
+From c3f319809cf80fd73c94b6f539a2402b400aade0 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:09 -0700
 Subject: [PATCH 11/19] hyper-v: trace vmbus_open()
--- a/kernel/patches-4.14.x/0012-hyper-v-trace-vmbus_close_internal.patch
+++ b/kernel/patches-4.14.x/0012-hyper-v-trace-vmbus_close_internal.patch
@ -1,4 +1,4 @@
-From b551da04970dc5b7fc1af270d91fe66110cd285a Mon Sep 17 00:00:00 2001
+From 8b850417d7393b124f70ec3587ef10099a1a7c1c Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:10 -0700
 Subject: [PATCH 12/19] hyper-v: trace vmbus_close_internal()
--- a/kernel/patches-4.14.x/0013-hyper-v-trace-vmbus_establish_gpadl.patch
+++ b/kernel/patches-4.14.x/0013-hyper-v-trace-vmbus_establish_gpadl.patch
@ -1,4 +1,4 @@
-From a2602941017c56bb4ba24c619c51d71acd6d3d3a Mon Sep 17 00:00:00 2001
+From 685fe8604510f24ac7bcdefc61a01cc781ab6744 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:11 -0700
 Subject: [PATCH 13/19] hyper-v: trace vmbus_establish_gpadl()
--- a/kernel/patches-4.14.x/0014-hyper-v-trace-vmbus_teardown_gpadl.patch
+++ b/kernel/patches-4.14.x/0014-hyper-v-trace-vmbus_teardown_gpadl.patch
@ -1,4 +1,4 @@
-From 2faaee17c616cf51bbdb1b5c83dbb0a9db2b5979 Mon Sep 17 00:00:00 2001
+From 355c723e7dc45ac030cf5f7cc72e8646b13ec66a Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:12 -0700
 Subject: [PATCH 14/19] hyper-v: trace vmbus_teardown_gpadl()
--- a/kernel/patches-4.14.x/0015-hyper-v-trace-vmbus_negotiate_version.patch
+++ b/kernel/patches-4.14.x/0015-hyper-v-trace-vmbus_negotiate_version.patch
@ -1,4 +1,4 @@
-From 6a0e97caea97d2129d33c37c3ce454304debf5f8 Mon Sep 17 00:00:00 2001
+From dcbc9bcf482ae36ec7d02cdbbd2775400f8dcaeb Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:13 -0700
 Subject: [PATCH 15/19] hyper-v: trace vmbus_negotiate_version()
--- a/kernel/patches-4.14.x/0016-hyper-v-trace-vmbus_release_relid.patch
+++ b/kernel/patches-4.14.x/0016-hyper-v-trace-vmbus_release_relid.patch
@ -1,4 +1,4 @@
-From 731058cff1d1cbfb8552e942b7ae24b2414e9701 Mon Sep 17 00:00:00 2001
+From 0da131104af0352678d7f0b6da527e9dbc5dfc17 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:14 -0700
 Subject: [PATCH 16/19] hyper-v: trace vmbus_release_relid()
--- a/kernel/patches-4.14.x/0017-hyper-v-trace-vmbus_send_tl_connect_request.patch
+++ b/kernel/patches-4.14.x/0017-hyper-v-trace-vmbus_send_tl_connect_request.patch
@ -1,4 +1,4 @@
-From 1e366484cd3517c5925cd32a59568732820e023b Mon Sep 17 00:00:00 2001
+From 702129d36a9d4d2b31407ef96b6d6a5acfad2ca0 Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:15 -0700
 Subject: [PATCH 17/19] hyper-v: trace vmbus_send_tl_connect_request()
--- a/kernel/patches-4.14.x/0018-hyper-v-trace-channel-events.patch
+++ b/kernel/patches-4.14.x/0018-hyper-v-trace-channel-events.patch
@ -1,4 +1,4 @@
-From 398d38c415476ed86b6e5b592785080a2da9dd7b Mon Sep 17 00:00:00 2001
+From 229476e67920fa9856da91062539d04585188c5a Mon Sep 17 00:00:00 2001
 From: Vitaly Kuznetsov <vkuznets@redhat.com>
 Date: Sun, 29 Oct 2017 12:21:16 -0700
 Subject: [PATCH 18/19] hyper-v: trace channel events
--- a/kernel/patches-4.14.x/0019-serial-forbid-8250-on-s390.patch
+++ b/kernel/patches-4.14.x/0019-serial-forbid-8250-on-s390.patch
@ -1,4 +1,4 @@
-From 2c4a06245c886fea33d384029e5ab6aea5d349fb Mon Sep 17 00:00:00 2001
+From 942132e05281a1c62ce955cbb023dabe16f2d8b0 Mon Sep 17 00:00:00 2001
 From: Christian Borntraeger <borntraeger@de.ibm.com>
 Date: Tue, 12 Dec 2017 09:08:35 +0100
 Subject: [PATCH 19/19] serial: forbid 8250 on s390
--- a/kernel/patches-4.15.x/0001-serial-forbid-8250-on-s390.patch
+++ b/kernel/patches-4.15.x/0001-serial-forbid-8250-on-s390.patch
@ -1,4 +1,4 @@
-From 1598e38c0770b08c4d6371b670f9ee61a42ec68b Mon Sep 17 00:00:00 2001
+From 85762ddf6cc357c70b6854d8070104bc3e39c0f3 Mon Sep 17 00:00:00 2001
 From: Christian Borntraeger <borntraeger@de.ibm.com>
 Date: Tue, 12 Dec 2017 09:08:35 +0100
 Subject: [PATCH] serial: forbid 8250 on s390
@ -13,6 +13,7 @@ Reported-by: Alice Frosi <alice@linux.vnet.ibm.com>
 Signed-off-by: Christian Borntraeger <borntraeger@de.ibm.com>
 Reviewed-by: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+(cherry picked from commit 1598e38c0770b08c4d6371b670f9ee61a42ec68b)
 ---
 drivers/tty/serial/8250/Kconfig | 1 +
 1 file changed, 1 insertion(+)
@ -30,5 +31,5 @@ index a5c0ef1e7695..16b1496e6105 100644
 	---help---
 	  This selects whether you want to include the driver for the standard
 -- 
-2.13.5
+2.16.0

--- a/kernel/patches-4.9.x/0001-tools-build-Add-test-for-sched_getcpu.patch
+++ b/kernel/patches-4.9.x/0001-tools-build-Add-test-for-sched_getcpu.patch
@ -1,4 +1,4 @@
-From 2ea3e2bf7c52346eb15a50c477b0b3f73fa26234 Mon Sep 17 00:00:00 2001
+From 318dfe6fb39533df22142c38730039d78df3f59e Mon Sep 17 00:00:00 2001
 From: Arnaldo Carvalho de Melo <acme@redhat.com>
 Date: Thu, 2 Mar 2017 12:55:49 -0300
 Subject: [PATCH 01/12] tools build: Add test for sched_getcpu()
--- a/kernel/patches-4.9.x/0002-perf-jit-Avoid-returning-garbage-for-a-ret-variable.patch
+++ b/kernel/patches-4.9.x/0002-perf-jit-Avoid-returning-garbage-for-a-ret-variable.patch
@ -1,4 +1,4 @@
-From ec99912b69897cfc4741b4422eba3eb646a7fec1 Mon Sep 17 00:00:00 2001
+From fa54d00da4106b5159b15e3da2ad7d4114329dc9 Mon Sep 17 00:00:00 2001
 From: Arnaldo Carvalho de Melo <acme@redhat.com>
 Date: Thu, 13 Oct 2016 17:12:35 -0300
 Subject: [PATCH 02/12] perf jit: Avoid returning garbage for a ret variable
--- a/kernel/patches-4.9.x/0003-hv_sock-introduce-Hyper-V-Sockets.patch
+++ b/kernel/patches-4.9.x/0003-hv_sock-introduce-Hyper-V-Sockets.patch
@ -1,4 +1,4 @@
-From b2050e596c6c6c465c79e5516877632664622cba Mon Sep 17 00:00:00 2001
+From 6de8bc3ac6127b61231ac74d6b6333770804f18d Mon Sep 17 00:00:00 2001
 From: Dexuan Cui <decui@microsoft.com>
 Date: Sat, 23 Jul 2016 01:35:51 +0000
 Subject: [PATCH 03/12] hv_sock: introduce Hyper-V Sockets
--- a/kernel/patches-4.9.x/0004-vmbus-Don-t-spam-the-logs-with-unknown-GUIDs.patch
+++ b/kernel/patches-4.9.x/0004-vmbus-Don-t-spam-the-logs-with-unknown-GUIDs.patch
@ -1,4 +1,4 @@
-From 25573c80ebc30353691a2a60f8fb498dac225fed Mon Sep 17 00:00:00 2001
+From 6098294c09c266baf0e91ae50bbb49f3d1c7a6a7 Mon Sep 17 00:00:00 2001
 From: Rolf Neugebauer <rolf.neugebauer@gmail.com>
 Date: Mon, 23 May 2016 18:55:45 +0100
 Subject: [PATCH 04/12] vmbus: Don't spam the logs with unknown GUIDs
--- a/kernel/patches-4.9.x/0005-Drivers-hv-utils-Fix-the-mapping-between-host-versio.patch
+++ b/kernel/patches-4.9.x/0005-Drivers-hv-utils-Fix-the-mapping-between-host-versio.patch
@ -1,4 +1,4 @@
-From 8a80f6175bc0279890b18b9ef8bc3ff1f6515aa0 Mon Sep 17 00:00:00 2001
+From ea7f9f835aeb13fc163ace51cef88fe7c1e24918 Mon Sep 17 00:00:00 2001
 From: Alex Ng <alexng@messages.microsoft.com>
 Date: Sun, 6 Nov 2016 13:14:07 -0800
 Subject: [PATCH 05/12] Drivers: hv: utils: Fix the mapping between host
--- a/kernel/patches-4.9.x/0006-Drivers-hv-vss-Improve-log-messages.patch
+++ b/kernel/patches-4.9.x/0006-Drivers-hv-vss-Improve-log-messages.patch
@ -1,4 +1,4 @@
-From b63b7e853b69948e5458669f7d49e74584007ae0 Mon Sep 17 00:00:00 2001
+From 7802eeaf5441e315d38b5e72c5474a1b9fed8ecc Mon Sep 17 00:00:00 2001
 From: Alex Ng <alexng@messages.microsoft.com>
 Date: Sun, 6 Nov 2016 13:14:10 -0800
 Subject: [PATCH 06/12] Drivers: hv: vss: Improve log messages.
--- a/kernel/patches-4.9.x/0007-Drivers-hv-vss-Operation-timeouts-should-match-host-.patch
+++ b/kernel/patches-4.9.x/0007-Drivers-hv-vss-Operation-timeouts-should-match-host-.patch
@ -1,4 +1,4 @@
-From c57379ead91fda6488745b52e08cdd420af1862c Mon Sep 17 00:00:00 2001
+From 7b8efc472c447799f341a50ef397c33790019953 Mon Sep 17 00:00:00 2001
 From: Alex Ng <alexng@messages.microsoft.com>
 Date: Sun, 6 Nov 2016 13:14:11 -0800
 Subject: [PATCH 07/12] Drivers: hv: vss: Operation timeouts should match host
--- a/kernel/patches-4.9.x/0008-Drivers-hv-vmbus-Use-all-supported-IC-versions-to-ne.patch
+++ b/kernel/patches-4.9.x/0008-Drivers-hv-vmbus-Use-all-supported-IC-versions-to-ne.patch
@ -1,4 +1,4 @@
-From 094df61af096f789203ef2d113ae9f1f6fcdd2e8 Mon Sep 17 00:00:00 2001
+From fcad395c35919f092a43306cfdffa81f1557f322 Mon Sep 17 00:00:00 2001
 From: Alex Ng <alexng@messages.microsoft.com>
 Date: Sat, 28 Jan 2017 12:37:17 -0700
 Subject: [PATCH 08/12] Drivers: hv: vmbus: Use all supported IC versions to
--- a/kernel/patches-4.9.x/0009-Drivers-hv-Log-the-negotiated-IC-versions.patch
+++ b/kernel/patches-4.9.x/0009-Drivers-hv-Log-the-negotiated-IC-versions.patch
@ -1,4 +1,4 @@
-From 47bcff61900a9327cde17d3cf2bc1b8525101743 Mon Sep 17 00:00:00 2001
+From 8f498d05d6dc69c50b76fd785917b340aed5ecf2 Mon Sep 17 00:00:00 2001
 From: Alex Ng <alexng@messages.microsoft.com>
 Date: Sat, 28 Jan 2017 12:37:18 -0700
 Subject: [PATCH 09/12] Drivers: hv: Log the negotiated IC versions.
--- a/kernel/patches-4.9.x/0010-vmbus-fix-missed-ring-events-on-boot.patch
+++ b/kernel/patches-4.9.x/0010-vmbus-fix-missed-ring-events-on-boot.patch
@ -1,4 +1,4 @@
-From ab164b889b79d8e9e1b073525a123c464e70a948 Mon Sep 17 00:00:00 2001
+From abf2f8df3c66b842768c4271100a59ad90614376 Mon Sep 17 00:00:00 2001
 From: Dexuan Cui <decui@microsoft.com>
 Date: Sun, 26 Mar 2017 16:42:20 +0800
 Subject: [PATCH 10/12] vmbus: fix missed ring events on boot
--- a/kernel/patches-4.9.x/0011-vmbus-remove-goto-error_clean_msglist-in-vmbus_open.patch
+++ b/kernel/patches-4.9.x/0011-vmbus-remove-goto-error_clean_msglist-in-vmbus_open.patch
@ -1,4 +1,4 @@
-From a98c11033238a997dce371c3c9c6bf56014478c7 Mon Sep 17 00:00:00 2001
+From db9330a4c6bc7f827e45571bad2b8782f7b31ac3 Mon Sep 17 00:00:00 2001
 From: Dexuan Cui <decui@microsoft.com>
 Date: Wed, 29 Mar 2017 18:37:10 +0800
 Subject: [PATCH 11/12] vmbus: remove "goto error_clean_msglist" in
--- a/kernel/patches-4.9.x/0012-vmbus-dynamically-enqueue-dequeue-the-channel-on-vmb.patch
+++ b/kernel/patches-4.9.x/0012-vmbus-dynamically-enqueue-dequeue-the-channel-on-vmb.patch
@ -1,4 +1,4 @@
-From 3f0cefed7838d8bd0ef8ed91a8548ae2869dd09f Mon Sep 17 00:00:00 2001
+From 8c4bd0b3024e24ba1bc8fe13b993ab8a59732c78 Mon Sep 17 00:00:00 2001
 From: Dexuan Cui <decui@microsoft.com>
 Date: Fri, 24 Mar 2017 20:53:18 +0800
 Subject: [PATCH 12/12] vmbus: dynamically enqueue/dequeue the channel on
--- a/linuxkit.yml
+++ b/linuxkit.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/projects/compose/compose-dynamic.yml
+++ b/projects/compose/compose-dynamic.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 page_poison=1"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/projects/compose/compose-static.yml
+++ b/projects/compose/compose-static.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 page_poison=1"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/projects/logging/examples/logging.yml
+++ b/projects/logging/examples/logging.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 console=tty0 page_poison=1"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a # with runc, logwrite, startmemlogd
--- a/projects/miragesdk/examples/mirage-dhcp.yml
+++ b/projects/miragesdk/examples/mirage-dhcp.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 page_poison=1"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/000_build/000_formats/test.yml
+++ b/test/cases/000_build/000_formats/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/010_platforms/000_qemu/000_run_kernel/test.yml
+++ b/test/cases/010_platforms/000_qemu/000_run_kernel/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/010_platforms/000_qemu/010_run_iso/test.yml
+++ b/test/cases/010_platforms/000_qemu/010_run_iso/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/010_platforms/000_qemu/020_run_efi/test.yml
+++ b/test/cases/010_platforms/000_qemu/020_run_efi/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml
+++ b/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml
+++ b/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/010_platforms/000_qemu/050_run_aws/test.yml
+++ b/test/cases/010_platforms/000_qemu/050_run_aws/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/010_platforms/000_qemu/100_container/test.yml
+++ b/test/cases/010_platforms/000_qemu/100_container/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/010_platforms/010_hyperkit/000_run_kernel/test.yml
+++ b/test/cases/010_platforms/010_hyperkit/000_run_kernel/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml
+++ b/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/000_config_4.4.x/test.yml
+++ b/test/cases/020_kernel/000_config_4.4.x/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.4.120
+  image: linuxkit/kernel:4.4.121
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/001_config_4.9.x/test.yml
+++ b/test/cases/020_kernel/001_config_4.9.x/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.9.86
+  image: linuxkit/kernel:4.9.87
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/006_config_4.14.x/test.yml
+++ b/test/cases/020_kernel/006_config_4.14.x/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/007_config_4.15.x/test.yml
+++ b/test/cases/020_kernel/007_config_4.15.x/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.15.7
+  image: linuxkit/kernel:4.15.9
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/010_kmod_4.4.x/Dockerfile
+++ b/test/cases/020_kernel/010_kmod_4.4.x/Dockerfile
@ -3,7 +3,7 @@
 # In the last stage, it creates a package, which can be used for
 # testing.

-FROM linuxkit/kernel:4.4.120 AS ksrc
+FROM linuxkit/kernel:4.4.121 AS ksrc

 # Extract headers and compile module
 FROM linuxkit/alpine:d307c8a386fa3f32cddda9409b9687e191cdd6f1 AS build
--- a/test/cases/020_kernel/010_kmod_4.4.x/test.sh
+++ b/test/cases/020_kernel/010_kmod_4.4.x/test.sh
@ -19,7 +19,7 @@ clean_up() {
 trap clean_up EXIT

 # Make sure we have the latest kernel image
-docker pull linuxkit/kernel:4.4.120
+docker pull linuxkit/kernel:4.4.121
 # Build a package
 docker build -t ${IMAGE_NAME} .

--- a/test/cases/020_kernel/010_kmod_4.4.x/test.yml
+++ b/test/cases/020_kernel/010_kmod_4.4.x/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.4.120
+  image: linuxkit/kernel:4.4.121
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/011_kmod_4.9.x/Dockerfile
+++ b/test/cases/020_kernel/011_kmod_4.9.x/Dockerfile
@ -3,7 +3,7 @@
 # In the last stage, it creates a package, which can be used for
 # testing.

-FROM linuxkit/kernel:4.9.86 AS ksrc
+FROM linuxkit/kernel:4.9.87 AS ksrc

 # Extract headers and compile module
 FROM linuxkit/alpine:d307c8a386fa3f32cddda9409b9687e191cdd6f1 AS build
--- a/test/cases/020_kernel/011_kmod_4.9.x/test.sh
+++ b/test/cases/020_kernel/011_kmod_4.9.x/test.sh
@ -19,7 +19,7 @@ clean_up() {
 trap clean_up EXIT

 # Make sure we have the latest kernel image
-docker pull linuxkit/kernel:4.9.86
+docker pull linuxkit/kernel:4.9.87
 # Build a package
 docker build -t ${IMAGE_NAME} .

--- a/test/cases/020_kernel/011_kmod_4.9.x/test.yml
+++ b/test/cases/020_kernel/011_kmod_4.9.x/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.9.86
+  image: linuxkit/kernel:4.9.87
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/016_kmod_4.14.x/Dockerfile
+++ b/test/cases/020_kernel/016_kmod_4.14.x/Dockerfile
@ -3,7 +3,7 @@
 # In the last stage, it creates a package, which can be used for
 # testing.

-FROM linuxkit/kernel:4.14.24 AS ksrc
+FROM linuxkit/kernel:4.14.26 AS ksrc

 # Extract headers and compile module
 FROM linuxkit/alpine:d307c8a386fa3f32cddda9409b9687e191cdd6f1 AS build
--- a/test/cases/020_kernel/016_kmod_4.14.x/test.sh
+++ b/test/cases/020_kernel/016_kmod_4.14.x/test.sh
@ -19,7 +19,7 @@ clean_up() {
 trap clean_up EXIT

 # Make sure we have the latest kernel image
-docker pull linuxkit/kernel:4.14.24
+docker pull linuxkit/kernel:4.14.26
 # Build a package
 docker build -t ${IMAGE_NAME} .

--- a/test/cases/020_kernel/016_kmod_4.14.x/test.yml
+++ b/test/cases/020_kernel/016_kmod_4.14.x/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/017_kmod_4.15.x/Dockerfile
+++ b/test/cases/020_kernel/017_kmod_4.15.x/Dockerfile
@ -3,7 +3,7 @@
 # In the last stage, it creates a package, which can be used for
 # testing.

-FROM linuxkit/kernel:4.15.7 AS ksrc
+FROM linuxkit/kernel:4.15.9 AS ksrc

 # Extract headers and compile module
 FROM linuxkit/alpine:d307c8a386fa3f32cddda9409b9687e191cdd6f1 AS build
--- a/test/cases/020_kernel/017_kmod_4.15.x/test.sh
+++ b/test/cases/020_kernel/017_kmod_4.15.x/test.sh
@ -19,7 +19,7 @@ clean_up() {
 trap clean_up EXIT

 # Make sure we have the latest kernel image
-docker pull linuxkit/kernel:4.15.7
+docker pull linuxkit/kernel:4.15.9
 # Build a package
 docker build -t ${IMAGE_NAME} .

--- a/test/cases/020_kernel/017_kmod_4.15.x/test.yml
+++ b/test/cases/020_kernel/017_kmod_4.15.x/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.15.7
+  image: linuxkit/kernel:4.15.9
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/110_namespace/000_kernel-4.4.x/common.yml
+++ b/test/cases/020_kernel/110_namespace/000_kernel-4.4.x/common.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.4.120
+  image: linuxkit/kernel:4.4.121
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/110_namespace/001_kernel-4.9.x/common.yml
+++ b/test/cases/020_kernel/110_namespace/001_kernel-4.9.x/common.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.9.86
+  image: linuxkit/kernel:4.9.87
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/020_kernel/110_namespace/006_kernel-4.14.x/common.yml
+++ b/test/cases/020_kernel/110_namespace/006_kernel-4.14.x/common.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 console=ttyAMA0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/030_security/000_docker-bench/test.yml
+++ b/test/cases/030_security/000_docker-bench/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/test/cases/030_security/010_ports/test.yml
+++ b/test/cases/030_security/010_ports/test.yml
@ -1,5 +1,5 @@
 kernel:
-  image: linuxkit/kernel:4.14.24
+  image: linuxkit/kernel:4.14.26
  cmdline: "console=ttyS0 page_poison=1"
 init:
  - linuxkit/init:b212cfeb4bb6330e0a7547d8010fe2e8489b677a
--- a/Show More
+++ b/Show More