···

       
30
       
30
       
 
       
      linux_5_4_hardened

     

       
31
       
31
       
 
       
      linux_5_10_hardened

     

       
32
       
32
       
 
       
      linux_5_15_hardened

     

       
33
       
33
       
-
       
      linux_5_19_hardened

     

       
33
       
33
       
+
       
      linux_6_0_hardened

     

       
34
       
34
       
 
       


     

       
35
       
35
       
 
       
      linux_testing;

     

       
36
       
36
       
 
       
  };

     

···

       
39
       
39
       
 
       
        "sha256": "0zymcp88654qk896djvc2ngdksvhkzh1ndhfk1dn5qqrqhha01wh",

     

       
40
       
40
       
 
       
        "version": "5.15.76"

     

       
41
       
41
       
 
       
    },

     

       
42
       
42
       
-
       
    "5.19": {

     

       
43
       
43
       
-
       
        "patch": {

     

       
44
       
44
       
-
       
            "extra": "-hardened1",

     

       
45
       
45
       
-
       
            "name": "linux-hardened-5.19.17-hardened1.patch",

     

       
46
       
46
       
-
       
            "sha256": "0fs9zdwxbcc3fi4w1qylvvv387ih3g0dnagw5pvq3r2k2g5fflya",

     

       
47
       
47
       
-
       
            "url": "https://github.com/anthraxx/linux-hardened/releases/download/5.19.17-hardened1/linux-hardened-5.19.17-hardened1.patch"

     

       
48
       
48
       
-
       
        },

     

       
49
       
49
       
-
       
        "sha256": "12cly10lad12idjwlgh2g0pp4hhj57h2qi4fy6jg1lbsm62b6fy9",

     

       
50
       
50
       
-
       
        "version": "5.19.17"

     

       
51
       
51
       
-
       
    },

     

       
52
       
42
       
 
       
    "5.4": {

     

       
53
       
43
       
 
       
        "patch": {

     

       
54
       
44
       
 
       
            "extra": "-hardened1",

     

···

       
1
       
1
       
-
       
{ lib, buildPackages, fetchurl, perl, buildLinux, nixosTests, modDirVersionArg ? null, ... } @ args:

     

       
2
       
2
       
-
       


     

       
3
       
3
       
-
       
with lib;

     

       
4
       
4
       
-
       


     

       
5
       
5
       
-
       
buildLinux (args // rec {

     

       
6
       
6
       
-
       
  version = "5.19.17";

     

       
7
       
7
       
-
       


     

       
8
       
8
       
-
       
  # modDirVersion needs to be x.y.z, will automatically add .0 if needed

     

       
9
       
9
       
-
       
  modDirVersion = if (modDirVersionArg == null) then concatStringsSep "." (take 3 (splitVersion "${version}.0")) else modDirVersionArg;

     

       
10
       
10
       
-
       


     

       
11
       
11
       
-
       
  # branchVersion needs to be x.y

     

       
12
       
12
       
-
       
  extraMeta.branch = versions.majorMinor version;

     

       
13
       
13
       
-
       


     

       
14
       
14
       
-
       
  src = fetchurl {

     

       
15
       
15
       
-
       
    url = "mirror://kernel/linux/kernel/v5.x/linux-${version}.tar.xz";

     

       
16
       
16
       
-
       
    sha256 = "12cly10lad12idjwlgh2g0pp4hhj57h2qi4fy6jg1lbsm62b6fy9";

     

       
17
       
17
       
-
       
  };

     

       
18
       
18
       
-
       
} // (args.argsOverride or { }))

     

···

       
16
       
16
       
 
       
, enablePython ? true

     

       
17
       
17
       
 
       


     

       
18
       
18
       
 
       
# for determining the latest compatible linuxPackages

     

       
19
       
19
       
-
       
, linuxPackages_5_19 ? pkgs.linuxKernel.packages.linux_5_19

     

       
19
       
19
       
+
       
, linuxPackages_5_15 ? pkgs.linuxKernel.packages.linux_5_15

     

       
20
       
20
       
 
       
, linuxPackages_6_0 ? pkgs.linuxKernel.packages.linux_6_0

     

       
21
       
21
       
 
       
}:

     

       
22
       
22
       
 
       


     
···

       
218
       
218
       
 
       
  zfsStable = common {

     

       
219
       
219
       
 
       
    # check the release notes for compatible kernels

     

       
220
       
220
       
 
       
    kernelCompatible = kernel.kernelOlder "5.20";

     

       
221
       
221
       
-
       
    latestCompatibleLinuxPackages = linuxPackages_5_19;

     

       
221
       
221
       
+
       
    latestCompatibleLinuxPackages = linuxPackages_5_15;

     

       
222
       
222
       
 
       


     

       
223
       
223
       
 
       
    # this package should point to the latest release.

     

       
224
       
224
       
 
       
    version = "2.1.6";

     

···

       
166
       
166
       
 
       


     

       
167
       
167
       
 
       
    linux_5_18 = throw "linux 5.18 was removed because it has reached its end of life upstream";

     

       
168
       
168
       
 
       


     

       
169
       
169
       
-
       
    linux_5_19 = callPackage ../os-specific/linux/kernel/linux-5.19.nix {

     

       
170
       
170
       
-
       
      kernelPatches = [

     

       
171
       
171
       
-
       
        kernelPatches.bridge_stp_helper

     

       
172
       
172
       
-
       
        kernelPatches.request_key_helper

     

       
173
       
173
       
-
       
      ];

     

       
174
       
174
       
-
       
    };

     

       
169
       
169
       
+
       
    linux_5_19 = throw "linux 5.19 was removed because it has reached its end of life upstream";

     

       
175
       
170
       
 
       


     

       
176
       
171
       
 
       
    linux_6_0 = callPackage ../os-specific/linux/kernel/linux-6.0.nix {

     

       
177
       
172
       
 
       
      kernelPatches = [

     
···

       
193
       
188
       
 
       
       else testing;

     

       
194
       
189
       
 
       


     

       
195
       
190
       
 
       
    linux_testing_bcachefs = callPackage ../os-specific/linux/kernel/linux-testing-bcachefs.nix rec {

     

       
196
       
196
       
-
       
      kernel = linux_5_19;

     

       
191
       
191
       
+
       
      kernel = linux_6_0;

     

       
197
       
192
       
 
       
      kernelPatches = kernel.kernelPatches;

     

       
198
       
193
       
 
       
   };

     

       
199
       
194
       
 
       


     
···

       
248
       
243
       
 
       
    linux_5_10_hardened = hardenedKernelFor kernels.linux_5_10 { };

     

       
249
       
244
       
 
       
    linux_5_15_hardened = hardenedKernelFor kernels.linux_5_15 { };

     

       
250
       
245
       
 
       
    linux_5_18_hardened = throw "linux 5.18 was removed because it has reached its end of life upstream";

     

       
251
       
251
       
-
       
    linux_5_19_hardened = hardenedKernelFor kernels.linux_5_19 { };

     

       
246
       
246
       
+
       
    linux_5_19_hardened = throw "linux 5.19 was removed because it has reached its end of life upstream";

     

       
252
       
247
       
 
       
    linux_6_0_hardened = hardenedKernelFor kernels.linux_6_0 { };

     

       
253
       
248
       
 
       


     

       
254
       
249
       
 
       
  }));

     
···

       
535
       
530
       
 
       
    linux_5_16 = throw "linux 5.16 was removed because it reached its end of life upstream"; # Added 2022-04-23

     

       
536
       
531
       
 
       
    linux_5_17 = throw "linux 5.17 was removed because it reached its end of life upstream"; # Added 2022-06-23

     

       
537
       
532
       
 
       
    linux_5_18 = throw "linux 5.18 was removed because it reached its end of life upstream"; # Added 2022-09-17

     

       
538
       
538
       
-
       
    linux_5_19 = recurseIntoAttrs (packagesFor kernels.linux_5_19);

     

       
533
       
533
       
+
       
    linux_5_19 = throw "linux 5.19 was removed because it reached its end of life upstream"; # Added 2022-11-01

     

       
539
       
534
       
 
       
    linux_6_0 = recurseIntoAttrs (packagesFor kernels.linux_6_0);

     

       
540
       
535
       
 
       
  };

     

       
541
       
536
       
 
       


     
···

       
575
       
570
       
 
       
    linux_5_10_hardened = recurseIntoAttrs (hardenedPackagesFor kernels.linux_5_10 { });

     

       
576
       
571
       
 
       
    linux_5_15_hardened = recurseIntoAttrs (hardenedPackagesFor kernels.linux_5_15 { });

     

       
577
       
572
       
 
       
    linux_5_18_hardened = throw "linux 5.18 was removed because it has reached its end of life upstream";

     

       
578
       
578
       
-
       
    linux_5_19_hardened = recurseIntoAttrs (hardenedPackagesFor kernels.linux_5_19 { });

     

       
573
       
573
       
+
       
    linux_5_19_hardened = throw "linux 5.19 was removed because it has reached its end of life upstream";

     

       
579
       
574
       
 
       
    linux_6_0_hardened = recurseIntoAttrs (hardenedPackagesFor kernels.linux_6_0 { });

     

       
580
       
575
       
 
       


     

       
581
       
576
       
 
       
    linux_zen = recurseIntoAttrs (packagesFor kernels.linux_zen);