Commit Graph

666 Commits

Author SHA1 Message Date
Riyaz Faizullabhoy
87b4688923 Harden kernel config with page poisoning, randomized mem, disabling ia32 and ldt syscall modification
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-02-13 10:13:48 -08:00
Riyaz Faizullabhoy
331719f098 Bump kernel config to 4.9.8
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-02-13 10:13:48 -08:00
Justin Cormack
e25ee0b142 alpine-build-c is only used for kernel builds so rename
Also remove some unecessary packages.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-02-13 16:59:38 +00:00
Justin Cormack
dc8b41eb3f Update kernel to 4.9.9, 4.4.48
Security update, severity low.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-02-13 11:13:34 +00:00
Rolf Neugebauer
5af19ac52b kernel: Rebase kernel patches proper
Regenerate the kernel patches from
https://github.com/rneugeba/linux-stable/

Note, the last two 4.9 patches are no properly
cherry-picked from linux-next. We previously had
0011-Drivers-hv-vmbus-Use-all... from an email.
0012-Drivers-hv-Log-the... is new, but may further aid
debugging version mismatch issues.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-02-06 17:57:26 +00:00
Riyaz Faizullabhoy
46fde10eaf Update kernel to 4.9.8 and 4.4.47
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-02-06 09:14:35 -08:00
Justin Cormack
2470af59a0 Update aufs to 20170206
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-02-06 11:57:30 +00:00
Justin Cormack
3f81edee37 Move kernel directory to top level
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-02-04 09:17:16 +01:00
Justin Cormack
70d8143e48 move kernel under rest of build and pull through aufs tools
Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
2015-12-17 15:26:42 +00:00
Justin Cormack
fdeb106f3a Build aufs support
Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
2015-12-17 13:51:43 +00:00
Justin Cormack
b7a7a2e850 tweak kernel config
Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
2015-12-11 17:44:22 +00:00
Justin Cormack
d89b06a71f slim down kernel config some more; make it support modules, but not ship with any
Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
2015-12-11 15:43:14 +00:00
Justin Cormack
5e5e4b5549 fix kernel make clean
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2015-12-10 23:49:18 +00:00
Justin Cormack
8693ca9c64 remove -i option since pinata fixed
Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
2015-12-09 15:48:09 +00:00
Justin Cormack
a9b3c89290 more gitignore files
Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
2015-12-09 15:35:59 +00:00
Justin Cormack
33056820a4 Add a (non modular) upstream kernel build, for pinata alpha and general testing
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2015-12-02 10:17:51 +00:00