From 76ed0e1c67cd2a7cf3a7540f51abf2d2b75375bc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20G=C3=B3rny?= Date: Mon, 24 Nov 2025 20:12:25 +0100 Subject: [PATCH] sys-kernel/gentoo-kernel-bin: Bump to 6.17.9 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michał Górny --- sys-kernel/gentoo-kernel-bin/Manifest | 6 + .../gentoo-kernel-bin-6.17.9.ebuild | 237 ++++++++++++++++++ 2 files changed, 243 insertions(+) create mode 100644 sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.17.9.ebuild diff --git a/sys-kernel/gentoo-kernel-bin/Manifest b/sys-kernel/gentoo-kernel-bin/Manifest index 1f9179861841c..f3e8e3180e2c4 100644 --- a/sys-kernel/gentoo-kernel-bin/Manifest +++ b/sys-kernel/gentoo-kernel-bin/Manifest @@ -42,6 +42,10 @@ DIST gentoo-kernel-6.17.8-1.amd64.gpkg.tar 334018560 BLAKE2B d34f3a1c485649f0046 DIST gentoo-kernel-6.17.8-1.arm64.gpkg.tar 297369600 BLAKE2B ef3ecd8c3830f605b79ecd7de447b0601a5f9d109a440b2bb37516b78569441bc19eb740dc6da7bc7456f7c123339c74c6adbbcfd4f03170b71ee34a500b3ece SHA512 3c215e00f93032d6456f7bf037a938fbc453050ea9dcb6667fd1fe80d1f0b0ba56d7f2a1a3326e26f1225b73397148441f44fb6cff464ce2dc2abe418db846be DIST gentoo-kernel-6.17.8-1.ppc64le.gpkg.tar 75560960 BLAKE2B f6904d612e446fdb9d6c95d663df84247f4873df2e3689e2836a50fed2464694a1a4278287f332093f7848522bd7d6a270fa36d3fb6fdb5086db7680a195382d SHA512 db1a8537e6cf83ebc65e165c8456590e21a5edae3e895384c9a3364ea1a4684fa6404413c736d055977752c2e56b494db6eee339eba5c65afb9705e8133f3600 DIST gentoo-kernel-6.17.8-1.x86.gpkg.tar 83425280 BLAKE2B 4d417efec3132495c44469fa58708d01d0c10b31e2160798c8ee9bd637540f65ae0c9e34fed5f737eea1439f0a4ca991b15c77168143e0a9335fac1f0bea3664 SHA512 59b796d98a781fd8b6264879c31b7afc31987856497c75149a8d3caca57d0ea5304f4ffa5f8c8be2c881a5442e2d6934b904bf363a03c7bd8e3d048b06124822 +DIST gentoo-kernel-6.17.9-1.amd64.gpkg.tar 336824320 BLAKE2B 93775e73c2dbfb5f6a6a0198f07dc80212624247853fb3a11169346818162820f3c7cef79aa550354bde0bac14ac0b612e0c3445dc897bcafde27df48130d7b9 SHA512 1dfea1091578eeec4bc518e01bb863a53b23098f2cbd85eb63a9a1b6a95ba629ad282f827e3a44fa8f63d9026abc3ba9e00b235e94a3d197885c618bbab7d820 +DIST gentoo-kernel-6.17.9-1.arm64.gpkg.tar 297553920 BLAKE2B 3a5e33d6fcff2b7b8284cff550a4a4b1db92f432ef0777646c8310e9750c1485a90082ca47ce837a3712812e8873468a31088193244b14e73f3a7431cda07b8a SHA512 89f8da0265d42c4178c0dad4c032c079c557ee0baf3c1fc5e446a794861f6a754eb7df33b2aee4bae175f8b0f782e5f86fe840086a06cc803b7fa152293c762d +DIST gentoo-kernel-6.17.9-1.ppc64le.gpkg.tar 75560960 BLAKE2B bdc9bd97291455f601dec9a5740387720600cbd327bc7e94e7ccc0daa6197d626bb6fcd7e6beac76a3aa126d9f50014730585d3602d84a10288d13aeb74c8366 SHA512 9f314b4a6f2ea024c9501da21bd13c664534565946b74f3544cba512445f2e7f3c8de79dc949d0010071c00d8b3d09de94d13485261d585112764a0af199f5a4 +DIST gentoo-kernel-6.17.9-1.x86.gpkg.tar 83425280 BLAKE2B b6b77e51aa377f22047819d0031f1014f02199b48b1bd23375207b1065c5ecea9a8ed6966a60ef084ea7daa21250d1ea7ff822290c1a60f497706a9442a68229 SHA512 b22f85f31b114c4984bfe5cfa03ff06a0b1a4cc08ae1b499d653ac4aa375932320d1ba1564450314d36548f6735cdcb324a6068b0b8c0a6c8861760a670650c3 DIST gentoo-kernel-6.6.113-1.amd64.gpkg.tar 274739200 BLAKE2B 77b3537228b8df1ba59a3eb840457acc745a9a8b6bf9c38e0a1fea079ced550c352c8ec88aabd3472719363f048a0307631995fd7728fa5a99bb9a7523819869 SHA512 8e0a6240e8a295faa4ab964927c993de1fface82a1a57dc2307a530cfca5523b2646f13ac4e203729679632cf5864b866b0f4472b7174cbdb6135ac7b2d553b3 DIST gentoo-kernel-6.6.113-1.arm64.gpkg.tar 247490560 BLAKE2B b541fad421f0e3e11d60846e38ba8442a5a4ae75a02288f2d111dec73f406b0a6d1f025e25f8c5097efab809deab28d624541441d549411ed69c90116ece8053 SHA512 742307c75c4d149b870d763048b1ef7c5dab26095c7472f5a682ab34c8383c810a8199585f8998853e15a0b2dc1e84810fe2cf9ca3225df01cf613ac97885ebb DIST gentoo-kernel-6.6.113-1.ppc64le.gpkg.tar 64460800 BLAKE2B d879481a1d93a9587ee51347c47f21d0b9a32dc896f3650a684032bfd24b31793e0d044d2cd963b3e81b5aa998f1d88d18d7cd6ed965020ad5630d3bc3f0f62e SHA512 648b5ec791186750af120dd1400f49fa234bbe2c9eb97a5e2dc3ed114c1f727920323ab479b6c674de4ce7671ab5745fddb4b34c1433d8d3f109daa68ac4debe @@ -63,6 +67,7 @@ DIST linux-6.x-sha256sums-20251019.asc 179487 BLAKE2B 51ef5573677dadd88d0e221035 DIST linux-6.x-sha256sums-20251029.asc 181866 BLAKE2B 41be11114bd93ba05c9f283a777987f57fa83286eb7b3d947dae846af9f13566bcb4aaa2a378f37be8b08bf1e5111070208dc440855af9cb0d6044c729cbbf1b SHA512 d13ad4dd28128b0bd5b8b82d597948b78f6cc1c46b1e5092015cdb45431fd94ed6bd4c75307c1eb3c6b0b759a7eb80d5f39b232822925c00d1c3d57beafdce02 DIST linux-6.x-sha256sums-20251102.asc 182885 BLAKE2B b68fd39a212bc82676cc3bf552170aec347b02a9201ba653fe902fce7d455176ff1b25e8dfaaf16a80ef8939bd94200d30db4ad2d899b47d9891598a20533bf4 SHA512 0401c17568aae8ac9220f8074831cd0b1d390863f158fa2b08a3b0cb78c796ab83ac18f5236e52ac63da9090f00c9d54f3967a3d52b34449613e382ba976fe2a DIST linux-6.x-sha256sums-20251114.asc 183563 BLAKE2B 9ad7236123c2b68b490b355f64f35ed2c13f77a0c93fc4a7a0b8402e5975e48541816ce02f8fc7155eb97f3ab8bd1596389a8a091a9e2b8b840cbef8d716fa2b SHA512 b477ffa9c91ff03a4c705e1a80ad20b71cc8f6566ad2d6d7d87b9b1404e292a0c913020463abc7b1d2c7c83909324e1e779e67b674fdca7661601fd0dd3c1535 +DIST linux-6.x-sha256sums-20251124.asc 184582 BLAKE2B da9114953874df49abaebf346521e5c91967f2b1ac5481b5b9b79dea76f25ac9658e3b4fc167dacad58362a56140ac41dfb832a610ae644d5397f09cd713339e SHA512 f98942036fd70768f732cb4718b24ed5cb55c2e7aa21e5a4d12206be03b36309e66594140c3f678ed03c1c9ae6efd13da980fc7c13d0d0cf836fd80fcc68792e DIST linux-gentoo-patches-5.10.241.tar.xz 21004 BLAKE2B 80efb313e1581e8a086bb20d1f30f59ea7982dc0fc3140974182a3802a49a00fae266222c08d3cb34eda7e315ef429bed25f145959c084843c58fdddfa68a2e9 SHA512 3a1b24d2fe5f3130e88abda428638d31adf6617332fe3baa7dfe6425d146e7607e5f8b571f406f0370acaf779cdd45f57af964bd955a3b5d5622d792527a5de0 DIST linux-gentoo-patches-5.10.246.tar.xz 23580 BLAKE2B 1184fd10a1321cfde67d276426103c73993fbe93e81047b494d358c433daa10a3c141349d01daa7147a05eeaccaa0eb87256b4f523e66f2f7f7022385982776b SHA512 31dd105101372b569c98bc72d6d8fd15fe95ece08ec9f48de10f91112f1526ccfbb349a67913ef1f8c798dd3dceeecc6312eeefc097d9ccd3b55edc70d3dcf10 DIST linux-gentoo-patches-5.15.195.tar.xz 12876 BLAKE2B d675d4150c8292c4f4b9846a26c53099910905e04e3015cfb3cb60e53dea99028b2e6fcbc345255246103699910aecf916054a09598e931d110b31db59a0b517 SHA512 e86691215cdab56a1a4fbe9aa3de44bda93db5659c39b04bfce53ed6ad8ed6923853431abb9444471b227421619c40e8841dab582b8007216e3c22e2b348a549 @@ -81,5 +86,6 @@ DIST patch-6.12.57.xz 3166572 BLAKE2B d3de49aef49104485236672f0d932a790f81f43d10 DIST patch-6.12.58.xz 3286180 BLAKE2B 6a96368f7c0db35442897ef811f2601c985e61d87928be77c84dd460dd935cfc0562239ab88341877535a25e84d571fd50641560b2f9b496905c1f22403af183 SHA512 dcbe11090c4c2020b05ad3930cad292191608b953676158255679f56075639baf666eed7421f775218d06798dbc99a9816ccf31cdaf6ab09cdc9b022527ed79c DIST patch-6.17.7.xz 443556 BLAKE2B 732800a96e7be442d190a70ff7476a3f21116741338895f24f2f24e5fd8cc7073ef7606cec8b878d9103395ed7a7b0692bdfcbe5f03b978f3c5508b0fa48e758 SHA512 8388e1271e03d99a6edd05169bb44037fa20cd585f632f50da1aa677a5a466feb716dffaa6482bce35d22699abdb3ba9901443869683b520cc84e5ea3f9bfd6f DIST patch-6.17.8.xz 697436 BLAKE2B 663b9970d6039e00c8e33c8a01696e0d7d3613b4b235c20aa8443e328b262154a5babcd7be8a37eabe2584b40e4360cccec12416d12ea1f34525a684dc8bf190 SHA512 a457f9bb4ec031a3bc4a4286a85794e16e16e81935cf6b69d37f0c48d40a6d138a8ebeb449d5dc27cb4ae57c39a145bedc1a3281da21e4b33e11e81fdf5d3e9c +DIST patch-6.17.9.xz 764968 BLAKE2B a0ce8311be7c251ad21b7cc11be4f30ec5125e3763f97a750afef855be385a3ceae24df3b65b5dd751729575aa0cd254a95cbae0f2e8cc8f95539dcfa2d9d3a1 SHA512 35593bc973cc7f626aa7a41cf8b7dea1b46fe8922bd57194db363d26e8854af514d103e39d02c642c26748bd933d5e402ff89d2a20d2da5f8d901e4713eafc46 DIST patch-6.6.113.xz 5000480 BLAKE2B 6f9b360db1f92e80a5faae98ab399aba43f307df6fbc37d106b768aff02b0abea69dd4d20cb3db82ecb7b778ecf769bd49998c0b3a0e00f7e81af4fff49a39c5 SHA512 37622c883ae85ada9ec01852b1b8b40ab8e6533ee1f59b6dc080599cf03eddc77901043ef25dcd3872698fa59029297727c31f83e1891332896c2b597fa2fcb9 DIST patch-6.6.116.xz 5054680 BLAKE2B 0ff38d6f77204767a2a2f79080405634a53ee304754156fc1c5f0c8aa339b39b2382d3d4e33132a2a5c02d0c2c81ae07e20eb55ef76b62788411321399c49569 SHA512 60d1d70b217a4908d3b67b61596013b3ecc06d44ab095ad50accb21a71bb9b3d20128d38cb73790b9999e0e922092c06a414cad0efaab4c1739accc7cf8b5510 diff --git a/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.17.9.ebuild b/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.17.9.ebuild new file mode 100644 index 0000000000000..266acdaa0482d --- /dev/null +++ b/sys-kernel/gentoo-kernel-bin/gentoo-kernel-bin-6.17.9.ebuild @@ -0,0 +1,237 @@ +# Copyright 2020-2025 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +KERNEL_IUSE_GENERIC_UKI=1 +KERNEL_IUSE_MODULES_SIGN=1 + +inherit kernel-install toolchain-funcs unpacker verify-sig + +BASE_P=linux-${PV%.*} +PATCH_PV=${PV%_p*} +PATCHSET=linux-gentoo-patches-6.17.2 +BINPKG=${P/-bin}-1 +SHA256SUM_DATE=20251124 + +DESCRIPTION="Pre-built Linux kernel with Gentoo patches" +HOMEPAGE=" + https://wiki.gentoo.org/wiki/Project:Distribution_Kernel + https://www.kernel.org/ +" +SRC_URI+=" + https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${BASE_P}.tar.xz + https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/patch-${PATCH_PV}.xz + https://dev.gentoo.org/~mgorny/dist/linux/${PATCHSET}.tar.xz + verify-sig? ( + https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/sha256sums.asc + -> linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc + ) + amd64? ( + https://dev.gentoo.org/~mgorny/binpkg/amd64/kernel/sys-kernel/gentoo-kernel/${BINPKG}.gpkg.tar + -> ${BINPKG}.amd64.gpkg.tar + ) + arm64? ( + https://dev.gentoo.org/~mgorny/binpkg/arm64/kernel/sys-kernel/gentoo-kernel/${BINPKG}.gpkg.tar + -> ${BINPKG}.arm64.gpkg.tar + ) + ppc64? ( + https://dev.gentoo.org/~mgorny/binpkg/ppc64le/kernel/sys-kernel/gentoo-kernel/${BINPKG}.gpkg.tar + -> ${BINPKG}.ppc64le.gpkg.tar + ) + x86? ( + https://dev.gentoo.org/~mgorny/binpkg/x86/kernel/sys-kernel/gentoo-kernel/${BINPKG}.gpkg.tar + -> ${BINPKG}.x86.gpkg.tar + ) +" +S=${WORKDIR} + +KEYWORDS="~amd64 ~arm64 ~ppc64 ~x86" +IUSE="debug" + +RDEPEND=" + !sys-kernel/gentoo-kernel:${SLOT} +" +PDEPEND=" + >=virtual/dist-kernel-${PATCH_PV} +" +BDEPEND=" + app-alternatives/bc + app-alternatives/lex + dev-util/pahole + virtual/libelf + app-alternatives/yacc + amd64? ( app-crypt/sbsigntools ) + arm64? ( app-crypt/sbsigntools ) + verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 ) +" + +KV_LOCALVERSION='-gentoo-dist' +KV_FULL=${PV/_p/-p}${KV_LOCALVERSION} + +QA_PREBUILT='*' + +VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/kernel.org.asc + +src_unpack() { + if use verify-sig; then + cd "${DISTDIR}" || die + verify-sig_verify_signed_checksums \ + "linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc" \ + sha256 "${BASE_P}.tar.xz patch-${PATCH_PV}.xz" + cd "${WORKDIR}" || die + fi + + unpacker +} + +src_prepare() { + local patch + cd "${BASE_P}" || die + eapply "${WORKDIR}/patch-${PATCH_PV}" + for patch in "${WORKDIR}/${PATCHSET}"/*.patch; do + eapply "${patch}" + # non-experimental patches always finish with Gentoo Kconfig + # we built -bins without them + if [[ ${patch} == *Add-Gentoo-Linux-support-config-settings* ]] + then + break + fi + done + + default + + # add Gentoo patchset version + local extraversion=${PV#${PATCH_PV}} + sed -i -e "s:^\(EXTRAVERSION =\).*:\1 ${extraversion/_/-}:" Makefile || die +} + +src_configure() { + # force ld.bfd if we can find it easily + local HOSTLD="$(tc-getBUILD_LD)" + if type -P "${HOSTLD}.bfd" &>/dev/null; then + HOSTLD+=.bfd + fi + local LD="$(tc-getLD)" + if type -P "${LD}.bfd" &>/dev/null; then + LD+=.bfd + fi + tc-export_build_env + local makeargs=( + V=1 + WERROR=0 + + HOSTCC="$(tc-getBUILD_CC)" + HOSTCXX="$(tc-getBUILD_CXX)" + HOSTLD="${HOSTLD}" + HOSTAR="$(tc-getBUILD_AR)" + HOSTCFLAGS="${BUILD_CFLAGS}" + HOSTLDFLAGS="${BUILD_LDFLAGS}" + + CROSS_COMPILE=${CHOST}- + AS="$(tc-getAS)" + CC="$(tc-getCC)" + LD="${LD}" + AR="$(tc-getAR)" + NM="$(tc-getNM)" + STRIP="$(tc-getSTRIP)" + OBJCOPY="$(tc-getOBJCOPY)" + OBJDUMP="$(tc-getOBJDUMP)" + READELF="$(tc-getREADELF)" + + # we need to pass it to override colliding Gentoo envvar + ARCH="$(tc-arch-kernel)" + + O="${WORKDIR}"/modprep + ) + + local kernel_dir="${BINPKG}/image/usr/src/linux-${KV_FULL}" + + # If this is set it will have an effect on the name of the output + # image. Set this variable to track this setting. + if grep -q "CONFIG_EFI_ZBOOT=y" "${kernel_dir}/.config"; then + KERNEL_EFI_ZBOOT=1 + elif use arm64 && use generic-uki; then + die "USE=generic-uki requires a CONFIG_EFI_ZBOOT enabled build" + fi + + local image="${kernel_dir}/$(dist-kernel_get_image_path)" + local uki="${image%/*}/uki.efi" + + # Override user variable with the cert used during build + openssl x509 \ + -inform DER -in "${kernel_dir}/certs/signing_key.x509" \ + -outform PEM -out "${T}/cert.pem" || + die "Failed to convert pcrpkey to PEM format" + export SECUREBOOT_SIGN_CERT=${T}/cert.pem + + if [[ -s ${uki} ]]; then + # We need to extract the plain image for the test phase + # and USE=-generic-uki. + kernel-install_extract_from_uki linux "${uki}" "${image}" + fi + + mkdir modprep || die + cp "${kernel_dir}/.config" modprep/ || die + emake -C "${BASE_P}" "${makeargs[@]}" modules_prepare +} + +src_test() { + local kernel_dir="${BINPKG}/image/usr/src/linux-${KV_FULL}" + kernel-install_test "${KV_FULL}" \ + "${WORKDIR}/${kernel_dir}/$(dist-kernel_get_image_path)" \ + "${BINPKG}/image/lib/modules/${KV_FULL}" +} + +src_install() { + local rel_kernel_dir=/usr/src/linux-${KV_FULL} + local kernel_dir="${BINPKG}/image${rel_kernel_dir}" + local image="${kernel_dir}/$(dist-kernel_get_image_path)" + local uki="${image%/*}/uki.efi" + if [[ -s ${uki} ]]; then + # Keep the kernel image type we don't want out of install tree + # Replace back with placeholder + if use generic-uki; then + > "${image}" || die + else + > "${uki}" || die + fi + fi + + # Overwrite the identifier in the prebuilt package + echo "${CATEGORY}/${PF}:${SLOT}" > "${kernel_dir}/dist-kernel" || die + + mv "${BINPKG}"/image/{lib,usr} "${ED}"/ || die + + # FIXME: requires proper mount-boot + if [[ -d ${BINPKG}/image/boot/dtbs ]]; then + mv "${BINPKG}"/image/boot "${ED}"/ || die + fi + + # strip out-of-source build stuffs from modprep + # and then copy built files + find modprep -type f '(' \ + -name Makefile -o \ + -name '*.[ao]' -o \ + '(' -name '.*' -a -not -name '.config' ')' \ + ')' -delete || die + rm modprep/source || die + cp -p -R modprep/. "${ED}${rel_kernel_dir}"/ || die + + # Update timestamps on all modules to ensure cleanup works correctly + # when switching USE=modules-compress. + find "${ED}/lib" -name '*.ko' -exec touch {} + || die + + # Modules were already stripped before signing + dostrip -x /lib/modules + kernel-install_compress_modules + + # Mirror the logic from kernel-build_src_install, for architectures + # where USE=debug is used. + if use ppc64; then + dostrip -x "${rel_kernel_dir}/$(dist-kernel_get_image_path)" + elif use debug && { use amd64 || use arm64; }; then + dostrip -x "${rel_kernel_dir}/vmlinux" + dostrip -x "${rel_kernel_dir}/vmlinux.ctfa" + fi +}