Commit Graph

723 Commits

Author SHA1 Message Date
Rolf Neugebauer
b33bda7a33
Merge pull request #3722 from gabchab/openssl-in-kernel-build
Add openssl to the kernel-build
2022-06-03 21:55:47 +01:00
Frédéric Dalleau
4ec8ef8784 Update amd64 kernel config to 5.10.104
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2022-05-25 13:39:09 +02:00
Frédéric Dalleau
71c04547b2 Update arm64 kernel config to 5.10.104
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2022-05-25 13:39:09 +02:00
Frédéric Dalleau
2028ed927d Update kernel version to 5.10.104
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2022-05-25 13:39:09 +02:00
Frédéric Dalleau
7e79fd449a Update amd64 kernel config to 5.15.27
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2022-05-25 13:39:09 +02:00
Frédéric Dalleau
420a08c709 Update arm64 kernel config to 5.15.27
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2022-05-25 13:39:09 +02:00
Frédéric Dalleau
2e62dd078c Update kernel version to 5.15.27
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2022-05-25 13:39:09 +02:00
Rolf Neugebauer
ae87f6a1e2 kernel: Bump Intel ucode to microcode-20210608
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2022-01-18 01:08:45 +00:00
Rolf Neugebauer
bd4d8ff44e kernel: Add support for 5.15.x kernel
The kernel config is derived from the 5.12 kernel
config we used to have

We explicitly enable RANDOMIZE_KSTACK_OFFSET_DEFAULT
which is off by default.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2022-01-18 01:07:41 +00:00
Rolf Neugebauer
ff606216e4 kernel: Update to 5.10.92/5.4.156
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2022-01-18 00:46:21 +00:00
Rolf Neugebauer
8e03866f69 kernel: Remove 5.12.x kernel since it has been EOLed
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2022-01-18 00:37:23 +00:00
Frédéric Dalleau
56c08df66b Refresh configs for kernel update
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2021-11-05 10:28:24 +01:00
Frédéric Dalleau
3cf25af73e kernel: update LTS kernels to 5.10.76/5.4.156
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2021-11-05 10:28:24 +01:00
Frédéric Dalleau
e9e3a8ddce Refresh configs for virtiofs
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2021-11-05 10:28:12 +01:00
Frédéric Dalleau
ad4f9a77a0 Enable CONFIG_VIRTIO_FS=y
Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2021-11-05 10:16:18 +01:00
Gabriel Chabot
c37046f617 Add openssl to the kernel-build
Signed-off-by: Gabriel Chabot <gabriel.chabot@qarnot-computing.com>
2021-10-28 10:55:16 +02:00
Rolf Neugebauer
f20e08bcb8 kernel: Enable CONFIG_SQUASHFS_ZSTD
requested/suggested by @olljanat

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-07-04 11:16:45 +01:00
Rolf Neugebauer
01b46ba789 kernel: Add support for 5.12.x kernel
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-07-04 11:16:45 +01:00
Rolf Neugebauer
1e97e29be3 kernel: Remove 5.11.x as it is not longer maintained
Leave it for -rt kernels

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-07-04 11:16:45 +01:00
Rolf Neugebauer
43d3ff0630 kernel: Update LTS kernels to 5.10.47/5.4.129
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-07-04 11:16:45 +01:00
Rolf Neugebauer
25c796e854 kernel: Fix Dockerfile.kconfig
KERNEL_VERSIONS apparently needs to be specified as
argument after the FROM

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-07-04 11:16:45 +01:00
Rolf Neugebauer
a4c518f696 kernel: Remove support for s390x
WIP #3676

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-07-04 11:16:45 +01:00
Rolf Neugebauer
36d8026b17
Merge pull request #3700 from TiejunChina/master-dev
enable 5.11.x-rt
2021-07-03 10:13:15 +01:00
Rolf Neugebauer
aaa30dfc55
Merge pull request #3691 from kmjohansen/topics/kj/bcc-up
Upgrade bcc to 0.20.0 and re-enable it in the kernel build
2021-07-03 00:30:03 +01:00
Tiejun Chen
8183676233 enable 5.11.x-rt build
Signed-off-by: Tiejun Chen <tiejun.china@gmail.com>
2021-06-29 11:09:23 -07:00
Tiejun Chen
ab288c4526 port 5.11.4-rt
Signed-off-by: Tiejun Chen <tiejun.china@gmail.com>
2021-06-29 11:09:20 -07:00
Frederic Dalleau
194a055d1c Disable CONFIG_BPFILTER and CONFIG_BPFILTER_UMH
CONFIG_BPFILTER is aimed to provide a replacement for netfilter.

When CONFIG_BPFILTER is enabled, the kernel tries to contact a user mode helper
for each iptable rule update. However the implementation of this helper has not
been upstreamed yet. The communication thus fails and the kernel then falls back
to netfilter.
As a result, the rule update takes more than ten times the duration of the
netfilter implementation alone.

This has been reported by Docker Desktop users for whom it can take minutes to
start a container sharing a few hundred ports. https://github.com/for-mac/issues/5668

More details on the situation is described in https://lwn.net/Articles/822744/.

Signed-off-by: Frederic Dalleau <frederic.dalleau@docker.com>
2021-06-28 21:14:27 +02:00
Krister Johansen
13068d54d4 Enable bcc in the kernel build again.
The bcc portion of the build had been disabled because it wasn't
building.  Now that bcc is building again, add it back to the list of
default targets in the kernel build.

Signed-off-by: Krister Johansen <krister.johansen@oracle.com>
2021-06-08 21:00:05 -07:00
Krister Johansen
898232ceab Get BCC building again.
This moves up to bcc 0.20.0 and builds on the latest 3.13 Alpine base
image.  It uses libelf from Alpine, which allows us to drop a number of
the patches we were carrying and reduce the number of steps taken in the
bcc build.

This builds for me on a branch of tip against 5.11.x, 5.10.x,
5.10.x-dbg, and 5.4.x on x86_65.  I have not had a chance to attempt
this on other platforms due to lack of hardware.

Signed-off-by: Krister Johansen <krister.johansen@oracle.com>
2021-06-08 20:57:10 -07:00
Rolf Neugebauer
5f959a9bcd kernel: Move build label add to Makefile
where the other labels are defined

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-27 13:06:15 +01:00
Rolf Neugebauer
70ac373206 kernel: Fix ARG handling in Dockerfiles
At least for the perf image I got an error when
not having the ARG up front.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-27 00:16:26 +00:00
Rolf Neugebauer
c25cc37643 kernel: Remove remnants of DOCKER_CONTENT_TRUST
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-27 00:16:26 +00:00
Rolf Neugebauer
2c728f89d9 kernel: Update to 5.11.22/5.10.39/5.4.121
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-26 22:33:23 +01:00
Rolf Neugebauer
9c7f158bd1 kernel: Fix KERNEL_SOURCE
Declare KERNEL_SOURCE as an environment variable so it
get's picked up in kernel-source-info

fixes #3653

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-26 22:33:23 +01:00
Rolf Neugebauer
fb283d2baf kernel: Remove out of kernel WireGuard build
5.4.x is the only kernel left which does not have
WireGuard in tree and it people should be using more
recent kernels. Remove the now special case for
compiling out of tree WireGuard.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-26 22:33:23 +01:00
Rolf Neugebauer
1337e07d3e kernel: Remove 4.19 patches
Must have missed those when removing 4.19 support in
f9f85bd4b3 ("kernel: Remove older LTS kernels")

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-26 22:33:23 +01:00
Avi Deitcher
d053a0f279 tag kernel with builder version; simplify Makefile
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2021-05-25 15:51:01 +03:00
Rolf Neugebauer
c0f50012d2 kernel: Disable bcc
The build fails, see https://github.com/linuxkit/linuxkit/issues/3652

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 17:05:39 +00:00
Rolf Neugebauer
198f6222dd kernel: Update kernel config to new alpine tools
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 15:59:01 +00:00
Rolf Neugebauer
5167746df9 kernel: Add patches for 5.10.x/5.11.x
This fixes some compile issues with bcc.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 15:58:48 +00:00
Rolf Neugebauer
a87a666408 kernel: Pick python3 for bcc builds
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 14:20:24 +00:00
Rolf Neugebauer
2d92dc189c kernel: Add libelf-static to perf build
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 13:54:20 +00:00
Rolf Neugebauer
310811a6cb kernel: Update kernel build to latest linuxkit/alpine
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 13:53:10 +00:00
Rolf Neugebauer
c2de64a23a kernel: Build debug kernel for 5.10.x on x86
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 11:23:35 +01:00
Rolf Neugebauer
faa0450b14 kernel: Adjust perf and bcc builds
Build both only recent LTS and latest stable kernel

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 11:23:35 +01:00
Rolf Neugebauer
f3f9c56d60 kernel: Bump to 5.11.18/5.10.34/5.4.116
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 11:23:35 +01:00
Rolf Neugebauer
f9f85bd4b3 kernel: Remove older LTS kernels
- 5.4.x for amr64/s390x
- 4.19.x for x86

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-05-03 11:20:26 +01:00
Frédéric Dalleau
38869459ab Add support for building the arm64 kernel on MacBook M1
On these machines, the output of `uname -m` is arm64.

Signed-off-by: Frédéric Dalleau <frederic.dalleau@docker.com>
2021-04-18 18:03:12 +01:00
Rolf Neugebauer
602a6c3ff5 kernel: Bump wirebuard to v1.0.20210219
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-04-18 18:03:12 +01:00
Rolf Neugebauer
86252f10ca kernel: Add 5.11.x kernel
The config file is derived from the 5.10.x kernel.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2021-04-17 20:13:41 +00:00