From 3f597792c1ecb7b07b9c43c72fa8c00d64dcbe39 Mon Sep 17 00:00:00 2001 From: Stefan Hansson Date: Sat, 18 Jul 2026 13:33:46 +0200 Subject: [PATCH] linux-purism-librem5: Use kconfig fragments And remove references to old "config rebasing" procedure that no longer is necessary since pmbootstrap's kconfig generation effectively does the same thing. Also remove kconfigcheck category for Librem 5 and replace it with a fragment. Signed-off-by: Stefan Hansson Part-of: --- .../community/linux-purism-librem5/APKBUILD | 28 +- .../config-purism-librem5.aarch64 | 8 +- .../linux-purism-librem5/librem5.config | 2 + .../linux-purism-librem5/pmos.config | 493 ++++++++++++++++++ kconfigcheck.toml | 2 - 5 files changed, 501 insertions(+), 32 deletions(-) create mode 100644 device/community/linux-purism-librem5/librem5.config create mode 100644 device/community/linux-purism-librem5/pmos.config diff --git a/device/community/linux-purism-librem5/APKBUILD b/device/community/linux-purism-librem5/APKBUILD index d3640b424..c5d5057a5 100644 --- a/device/community/linux-purism-librem5/APKBUILD +++ b/device/community/linux-purism-librem5/APKBUILD @@ -3,8 +3,7 @@ maintainer="Alistair Francis " pkgname=linux-purism-librem5 pkgver=6.12.94 -pkgrel=1 -# NOTE: Don't forget to rebase the config! See prepare() for instructions. +pkgrel=2 _purismrel=1 _purismver=${pkgver}pureos$_purismrel _commit=db350fb91e60d12fde6bc7b1ece03836b215e444 @@ -17,7 +16,6 @@ license="GPL-2.0-only" options="!strip !check !tracedeps pmb:cross-native pmb:kconfigcheck-community - pmb:kconfigcheck-librem5 " makedepends=" bison @@ -36,7 +34,7 @@ makedepends=" zstd " -# kconfig generated with: ARCH=arm64 make defconfig KBUILD_DEFCONFIG=librem5_defconfig +_defconfig="librem5_defconfig" _config="config-$_flavor.$arch" @@ -49,26 +47,6 @@ builddir="$srcdir/linux-pureos-$_purismver-$_commit" prepare() { default_prepare cp "$srcdir/config-$_flavor.$arch" .config - - ####### Rebase config - # The kernel config needs to be periodically rebased to enable new - # modules/features that Purism has enabled in their defconfig. This is done - # by: 1) generate .config using librem5_defconfig, 2) diff that .config - # with the config in this package, 3) carefully going over the diff and - # selecting new things enabled in their config. - # - # This can be uncommented to help generate the defconfig using "pmbootstrap - # build linux-purism-librem5". The build will fail (exit 1) to let you grab - # the config before it starts building the kernel: - # make ARCH="$_carch" LLVM=1 \ - # defconfig KBUILD_DEFCONFIG=librem5_defconfig - # exit 1 - # - # After that run the following - # cp \ - # device/community/linux-purism-librem5/config-purism-librem5.aarch64 - # pmbootstrap kconfig edit linux-purism-librem5 - # pmbootstrap kconfig check linux-purism-librem5 } build() { @@ -94,5 +72,5 @@ package() { sha512sums=" 94050892d45a94c9e518d380e16523ada1b4af6c321cfccd42255297b06ad891eb6b3fe30235b59cd7f45401b7d7d50a11eb93d130c2f4bba38af3bd85c92d7e linux-purism-librem5-6.12.94pureos1.tar.gz -29d63830ef8ff73f5d76615622580a019f48e8a3f4a8a404721020ae4ff3efd8b230f61b6e9ce124134164dfe28b93a85052f2b841466d244013d0d1e02e8a24 config-purism-librem5.aarch64 +1b0003a702872899a3a588806caa70eb3e1030a1d7daa3134c669ba0657e6c8c211c22f25f08d7f56eed4c2419782050b3ee4dbf9db6549d9c4b6b5b81ca2942 config-purism-librem5.aarch64 " diff --git a/device/community/linux-purism-librem5/config-purism-librem5.aarch64 b/device/community/linux-purism-librem5/config-purism-librem5.aarch64 index 013e85f6d..40cf1181f 100644 --- a/device/community/linux-purism-librem5/config-purism-librem5.aarch64 +++ b/device/community/linux-purism-librem5/config-purism-librem5.aarch64 @@ -13,8 +13,6 @@ CONFIG_LD_IS_LLD=y CONFIG_LLD_VERSION=220108 CONFIG_RUSTC_VERSION=0 CONFIG_RUSTC_LLVM_VERSION=0 -CONFIG_CC_CAN_LINK=y -CONFIG_CC_CAN_LINK_STATIC=y CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y CONFIG_CC_HAS_ASM_GOTO_TIED_OUTPUT=y CONFIG_TOOLS_SUPPORT_RELR=y @@ -7916,7 +7914,7 @@ CONFIG_CRYPTO_ESSIV=y # # Hashes, digests, and MACs # -CONFIG_CRYPTO_BLAKE2B=y +CONFIG_CRYPTO_BLAKE2B=m CONFIG_CRYPTO_CMAC=m CONFIG_CRYPTO_GHASH=y CONFIG_CRYPTO_HMAC=y @@ -7935,7 +7933,7 @@ CONFIG_CRYPTO_STREEBOG=m # CONFIG_CRYPTO_VMAC is not set CONFIG_CRYPTO_WP512=m CONFIG_CRYPTO_XCBC=m -CONFIG_CRYPTO_XXHASH=y +CONFIG_CRYPTO_XXHASH=m # end of Hashes, digests, and MACs # @@ -8139,7 +8137,7 @@ CONFIG_CRC32_SLICEBY8=y CONFIG_CRC64=y # CONFIG_CRC4 is not set CONFIG_CRC7=y -CONFIG_LIBCRC32C=y +CONFIG_LIBCRC32C=m # CONFIG_CRC8 is not set CONFIG_XXHASH=y CONFIG_AUDIT_GENERIC=y diff --git a/device/community/linux-purism-librem5/librem5.config b/device/community/linux-purism-librem5/librem5.config new file mode 100644 index 000000000..1f95fa293 --- /dev/null +++ b/device/community/linux-purism-librem5/librem5.config @@ -0,0 +1,2 @@ +# Use packaged firmware for RS9116 +CONFIG_RS9116_FLASH_MODE=n diff --git a/device/community/linux-purism-librem5/pmos.config b/device/community/linux-purism-librem5/pmos.config new file mode 100644 index 000000000..05a7a8d04 --- /dev/null +++ b/device/community/linux-purism-librem5/pmos.config @@ -0,0 +1,493 @@ +# default +# CONFIG_ANDROID_PARANOID_NETWORK is not set +CONFIG_BINFMT_ELF=y +CONFIG_BLK_DEV_INITRD=y +CONFIG_CGROUPS=y +CONFIG_CRYPTO_AES=y +CONFIG_CRYPTO_CBC=y +CONFIG_CRYPTO_XTS=y +CONFIG_DEVTMPFS=y +CONFIG_DM_CRYPT=y +CONFIG_FB=y +CONFIG_INPUT_EVDEV=m +# CONFIG_KINETO_GAN is not set +CONFIG_NLS_ASCII=y +# CONFIG_PFT is not set +# CONFIG_SEC_RESTRICT_ROOTING is not set +CONFIG_SYN_COOKIES=y +CONFIG_SYSVIPC=y +CONFIG_TMPFS_POSIX_ACL=y +# CONFIG_USE_VFB is not set +CONFIG_VFAT_FS=y +CONFIG_VT=y +CONFIG_DRM_FBDEV_EMULATION=y +CONFIG_BINFMT_SCRIPT=y +CONFIG_UEVENT_HELPER=y +CONFIG_USER_NS=y +CONFIG_NULL_TTY=m +CONFIG_MODULE_COMPRESS=y +CONFIG_MODULE_COMPRESS_ZSTD=y +CONFIG_MODULE_DECOMPRESS=y +CONFIG_FW_LOADER_COMPRESS=y +CONFIG_FW_LOADER_COMPRESS_ZSTD=y +CONFIG_PSI=y +# CONFIG_PSI_DEFAULT_DISABLED is not set +CONFIG_UDMABUF=y +CONFIG_BPF=y +CONFIG_BPF_JIT=y +CONFIG_BPF_LSM=y +CONFIG_DEBUG_INFO_BTF=y +CONFIG_DEBUG_INFO_BTF_MODULES=y +CONFIG_DEBUG_INFO_DWARF5=y +# CONFIG_DEBUG_INFO_REDUCED is not set +CONFIG_IPC_NS=y +CONFIG_KPROBES=y +CONFIG_KPROBE_EVENTS=y +CONFIG_NET_NS=y +CONFIG_PID_NS=y +CONFIG_SECURITY=y +CONFIG_SECURITYFS=y +CONFIG_SECURITY_PATH=y +CONFIG_USER_NS=y +CONFIG_UTS_NS=y + +# netmount +CONFIG_CACHEFILES=m +CONFIG_CRYPTO_CAMELLIA=m +CONFIG_CRYPTO_CMAC=m +CONFIG_CRYPTO_CTS=y +CONFIG_CRYPTO_HMAC=y +CONFIG_CRYPTO_SHA256=y +CONFIG_CRYPTO_SHA512=y +CONFIG_FSCACHE=y +CONFIG_NFSD=m +CONFIG_NFSD_BLOCKLAYOUT=y +CONFIG_NFSD_PNFS=y +CONFIG_NFSD_SCSILAYOUT=y +CONFIG_NFSD_V3_ACL=y +CONFIG_NFSD_V4=y +CONFIG_NFSD_V4_2_INTER_SSC=y +CONFIG_NFS_FS=m +CONFIG_NFS_FSCACHE=y +CONFIG_NFS_V3=m +CONFIG_NFS_V4=m +CONFIG_NFS_V4_2=y +CONFIG_RPCSEC_GSS_KRB5=m +CONFIG_CRYPTO_AES_ARM64_CE_BLK=y +CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y +CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2=y +CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA=y +CONFIG_CRYPTO_AES_TI=m +CONFIG_NFS_V4_1=y + +# accessibility +CONFIG_A11Y_BRAILLE_CONSOLE=y +CONFIG_ACCESSIBILITY=y +CONFIG_SPEAKUP=m +CONFIG_SPEAKUP_SYNTH_ACNTSA=m +CONFIG_SPEAKUP_SYNTH_APOLLO=m +CONFIG_SPEAKUP_SYNTH_AUDPTR=m +CONFIG_SPEAKUP_SYNTH_BNS=m +CONFIG_SPEAKUP_SYNTH_DECEXT=m +CONFIG_SPEAKUP_SYNTH_DECTLK=m +CONFIG_SPEAKUP_SYNTH_LTLK=m +CONFIG_SPEAKUP_SYNTH_SOFT=m +CONFIG_SPEAKUP_SYNTH_SPKOUT=m +CONFIG_SPEAKUP_SYNTH_TXPRT=m + +# waydroid +# CONFIG_ANDROID_BINDERFS is not set +CONFIG_ANDROID_BINDER_DEVICES="binder,hwbinder,vndbinder" +CONFIG_ANDROID_BINDER_IPC=y +# CONFIG_ANDROID_BINDER_IPC_SELFTEST is not set +CONFIG_BLK_DEV_LOOP=y +CONFIG_BPF_SYSCALL=y +CONFIG_BRIDGE=m +CONFIG_BRIDGE_VLAN_FILTERING=y +CONFIG_CGROUP_BPF=y +CONFIG_CROSS_MEMORY_ATTACH=y +CONFIG_FUSE_FS=m +CONFIG_IP_NF_MANGLE=m +CONFIG_NETFILTER_XTABLES=m +CONFIG_NETFILTER_XT_MATCH_COMMENT=m +CONFIG_SQUASHFS=m +CONFIG_SQUASHFS_XATTR=y +CONFIG_SQUASHFS_XZ=y +CONFIG_TMPFS_XATTR=y +CONFIG_TUN=m +CONFIG_VETH=m +CONFIG_VLAN_8021Q=m +CONFIG_IP_NF_IPTABLES_LEGACY=m + +# iwd +CONFIG_ASYMMETRIC_KEY_TYPE=y +CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y +CONFIG_CRYPTO_CMAC=m +CONFIG_CRYPTO_DES=m +CONFIG_CRYPTO_ECB=y +CONFIG_CRYPTO_HMAC=y +CONFIG_CRYPTO_MD4=m +CONFIG_CRYPTO_MD5=y +CONFIG_CRYPTO_SHA1=y +CONFIG_CRYPTO_SHA256=y +CONFIG_CRYPTO_SHA512=y +CONFIG_CRYPTO_USER_API_HASH=m +CONFIG_CRYPTO_USER_API_SKCIPHER=m +CONFIG_KEYS=y +CONFIG_KEY_DH_OPERATIONS=y +CONFIG_PKCS7_MESSAGE_PARSER=y +CONFIG_PKCS8_PRIVATE_KEY_PARSER=m +CONFIG_RFKILL=m +CONFIG_X509_CERTIFICATE_PARSER=y + +# nftables +CONFIG_IP6_NF_FILTER=m +CONFIG_IP6_NF_IPTABLES=m +CONFIG_IP6_NF_NAT=m +CONFIG_IP6_NF_TARGET_REJECT=m +CONFIG_IP_NF_FILTER=m +CONFIG_IP_NF_IPTABLES=m +CONFIG_IP_NF_NAT=m +CONFIG_IP_NF_TARGET_REJECT=m +CONFIG_NETFILTER=y +CONFIG_NFT_CT=m +CONFIG_NFT_LIMIT=m +CONFIG_NFT_LOG=m +CONFIG_NFT_MASQ=m +CONFIG_NFT_NAT=m +CONFIG_NFT_REJECT=m +CONFIG_NF_CONNTRACK=m +CONFIG_NF_REJECT_IPV4=m +CONFIG_NF_REJECT_IPV6=m +CONFIG_NF_TABLES=m +CONFIG_NF_TABLES_INET=y +CONFIG_NF_TABLES_IPV4=y +CONFIG_NF_TABLES_IPV6=y +CONFIG_IP6_NF_IPTABLES_LEGACY=m +CONFIG_IP_NF_IPTABLES_LEGACY=m + +# containers +CONFIG_BLK_CGROUP=y +CONFIG_BLK_DEV_DM=y +CONFIG_BLK_DEV_THROTTLING=y +CONFIG_BRIDGE=m +CONFIG_BRIDGE_NETFILTER=m +CONFIG_BRIDGE_VLAN_FILTERING=y +CONFIG_CFS_BANDWIDTH=y +CONFIG_CGROUP_BPF=y +CONFIG_CGROUP_CPUACCT=y +CONFIG_CGROUP_DEVICE=y +CONFIG_CGROUP_FREEZER=y +CONFIG_CGROUP_NET_PRIO=y +CONFIG_CGROUP_PERF=y +CONFIG_CGROUP_PIDS=y +CONFIG_CGROUP_SCHED=y +CONFIG_CHECKPOINT_RESTORE=y +CONFIG_CPUSETS=y +CONFIG_DM_THIN_PROVISIONING=m +CONFIG_DUMMY=m +CONFIG_EXT4_FS_POSIX_ACL=y +CONFIG_EXT4_FS_SECURITY=y +CONFIG_FAIR_GROUP_SCHED=y +CONFIG_IP6_NF_MANGLE=m +CONFIG_IP6_NF_NAT=m +CONFIG_IP6_NF_RAW=m +CONFIG_IP6_NF_TARGET_MASQUERADE=m +CONFIG_IPC_NS=y +CONFIG_IPVLAN=m +CONFIG_IP_NF_FILTER=m +CONFIG_IP_NF_MANGLE=m +CONFIG_IP_NF_NAT=m +CONFIG_IP_NF_RAW=m +CONFIG_IP_NF_TARGET_MASQUERADE=m +CONFIG_IP_NF_TARGET_REDIRECT=m +CONFIG_IP_VS=m +CONFIG_IP_VS_NFCT=y +CONFIG_IP_VS_PROTO_TCP=y +CONFIG_IP_VS_PROTO_UDP=y +CONFIG_IP_VS_RR=m +CONFIG_KEYS=y +CONFIG_MACVLAN=m +CONFIG_MD=y +CONFIG_MEMCG=y +CONFIG_NAMESPACES=y +CONFIG_NETFILTER_XT_MARK=m +CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m +CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m +CONFIG_NETFILTER_XT_MATCH_IPVS=m +CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m +CONFIG_NET_CLS_CGROUP=m +CONFIG_NET_NS=y +CONFIG_NET_SCHED=y +CONFIG_NFT_COMPAT=m +CONFIG_NFT_CT=m +CONFIG_NFT_FIB=m +CONFIG_NFT_FIB_IPV4=m +CONFIG_NFT_FIB_IPV6=m +CONFIG_NFT_MASQ=m +CONFIG_NFT_NAT=m +CONFIG_NF_NAT=m +CONFIG_NF_TABLES=m +CONFIG_OVERLAY_FS=m +CONFIG_PID_NS=y +CONFIG_POSIX_MQUEUE=y +CONFIG_SECCOMP=y +CONFIG_SWAP=y +CONFIG_UTS_NS=y +CONFIG_VETH=m +CONFIG_VXLAN=m +CONFIG_IP6_NF_FILTER=m + +# zram +CONFIG_SWAP=y +CONFIG_ZRAM=y +CONFIG_ZSMALLOC=y +CONFIG_ZRAM_BACKEND_842=y +CONFIG_ZRAM_BACKEND_DEFLATE=y +CONFIG_ZRAM_BACKEND_LZ4=y +CONFIG_ZRAM_BACKEND_LZ4HC=y +CONFIG_ZRAM_BACKEND_LZO=y +CONFIG_ZRAM_BACKEND_ZSTD=y + +# netboot +CONFIG_BLK_DEV_NBD=m +CONFIG_BLK_DEV_UBLK=m + +# wireguard +CONFIG_IPV6_MULTIPLE_TABLES=y +CONFIG_IP_ADVANCED_ROUTER=y +CONFIG_IP_MULTIPLE_TABLES=y +CONFIG_NFT_CT=m +CONFIG_NFT_FIB=m +CONFIG_NFT_FIB_IPV4=m +CONFIG_NFT_FIB_IPV6=m +CONFIG_NF_CONNTRACK_MARK=y +CONFIG_NF_TABLES=m +CONFIG_NF_TABLES_IPV4=y +CONFIG_NF_TABLES_IPV6=y +CONFIG_WIREGUARD=m + +# filesystems +CONFIG_BTRFS_FS=m +CONFIG_BTRFS_FS_POSIX_ACL=y +CONFIG_EROFS_FS=m +CONFIG_EROFS_FS_ZIP=y +CONFIG_EROFS_FS_ZIP_LZMA=y +CONFIG_EXFAT_FS=m +CONFIG_EXT4_FS=y +CONFIG_F2FS_FS=m +CONFIG_UDF_FS=m +CONFIG_XFS_FS=m +CONFIG_EROFS_FS_ZIP_DEFLATE=y +CONFIG_EROFS_FS_ZIP_ZSTD=y + +# usb_gadgets +CONFIG_USB_CONFIGFS=m +CONFIG_USB_CONFIGFS_ACM=y +CONFIG_USB_CONFIGFS_F_FS=y +CONFIG_USB_CONFIGFS_MASS_STORAGE=y +CONFIG_USB_CONFIGFS_NCM=y +CONFIG_USB_CONFIGFS_RNDIS=y +# CONFIG_USB_ETH is not set +# CONFIG_USB_FUNCTIONFS is not set +CONFIG_USB_F_FS=m +CONFIG_USB_GADGET=y +# CONFIG_USB_G_SERIAL is not set +# CONFIG_USB_MASS_STORAGE is not set + +# community_various +CONFIG_BINFMT_MISC=m +CONFIG_CIFS=m +CONFIG_CPU_FREQ=y +CONFIG_CPU_FREQ_GOV_SCHEDUTIL=y +CONFIG_DM_INTEGRITY=m +CONFIG_LEDS_TRIGGER_PATTERN=m +CONFIG_LEDS_TRIGGER_TIMER=m +CONFIG_NETFILTER_ADVANCED=y +CONFIG_NETFILTER_XT_MATCH_MARK=m +CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m +CONFIG_NETFILTER_XT_MATCH_STATISTIC=m +CONFIG_NETFILTER_XT_MATCH_TCPMSS=m +CONFIG_NETFILTER_XT_TARGET_TCPMSS=m +CONFIG_NETWORK_FILESYSTEMS=y +# CONFIG_RT_GROUP_SCHED is not set +CONFIG_UCLAMP_TASK=y +CONFIG_UCLAMP_TASK_GROUP=y + +# input +CONFIG_BT=m +CONFIG_BT_HIDP=m +CONFIG_GPIOLIB=y +CONFIG_HIDRAW=y +CONFIG_HID_A4TECH=m +CONFIG_HID_ACCUTOUCH=m +CONFIG_HID_ACRUX=m +CONFIG_HID_ACRUX_FF=y +CONFIG_HID_ALPS=m +CONFIG_HID_APPLE=m +CONFIG_HID_APPLEIR=m +CONFIG_HID_AUREAL=m +CONFIG_HID_BATTERY_STRENGTH=y +CONFIG_HID_BELKIN=m +CONFIG_HID_BETOP_FF=m +CONFIG_HID_BIGBEN_FF=m +CONFIG_HID_CHERRY=m +CONFIG_HID_CHICONY=m +CONFIG_HID_CMEDIA=m +CONFIG_HID_CORSAIR=m +CONFIG_HID_COUGAR=m +CONFIG_HID_CP2112=m +CONFIG_HID_CREATIVE_SB0540=m +CONFIG_HID_CYPRESS=m +CONFIG_HID_DRAGONRISE=m +CONFIG_HID_ELAN=m +CONFIG_HID_ELECOM=m +CONFIG_HID_ELO=m +CONFIG_HID_EMS_FF=m +CONFIG_HID_EZKEY=m +CONFIG_HID_FT260=m +CONFIG_HID_GEMBIRD=m +CONFIG_HID_GENERIC=m +CONFIG_HID_GFRM=m +CONFIG_HID_GLORIOUS=m +CONFIG_HID_GREENASIA=m +CONFIG_HID_GT683R=m +CONFIG_HID_GYRATION=m +CONFIG_HID_HOLTEK=m +CONFIG_HID_ICADE=m +CONFIG_HID_ITE=m +CONFIG_HID_JABRA=m +CONFIG_HID_KENSINGTON=m +CONFIG_HID_KEYTOUCH=m +CONFIG_HID_KYE=m +CONFIG_HID_LCPOWER=m +CONFIG_HID_LED=m +CONFIG_HID_LETSKETCH=m +CONFIG_HID_LOGITECH=m +CONFIG_HID_LOGITECH_DJ=m +CONFIG_HID_LOGITECH_HIDPP=m +CONFIG_HID_MACALLY=m +CONFIG_HID_MAGICMOUSE=m +CONFIG_HID_MALTRON=m +CONFIG_HID_MAYFLASH=m +CONFIG_HID_MCP2221=m +CONFIG_HID_MEGAWORLD_FF=m +CONFIG_HID_MICROSOFT=m +CONFIG_HID_MONTEREY=m +CONFIG_HID_MULTITOUCH=m +CONFIG_HID_NINTENDO=m +CONFIG_HID_NTI=m +CONFIG_HID_NTRIG=m +CONFIG_HID_ORTEK=m +CONFIG_HID_PANTHERLORD=m +CONFIG_HID_PENMOUNT=m +CONFIG_HID_PETALYNX=m +CONFIG_HID_PICOLCD=m +CONFIG_HID_PICOLCD_BACKLIGHT=y +CONFIG_HID_PICOLCD_LCD=y +CONFIG_HID_PICOLCD_LEDS=y +CONFIG_HID_PID=y +CONFIG_HID_PLANTRONICS=m +CONFIG_HID_PLAYSTATION=m +CONFIG_HID_PRIMAX=m +CONFIG_HID_PRODIKEYS=m +CONFIG_HID_PXRC=m +CONFIG_HID_RAZER=m +CONFIG_HID_RETRODE=m +CONFIG_HID_RMI=m +CONFIG_HID_ROCCAT=m +CONFIG_HID_SAITEK=m +CONFIG_HID_SAMSUNG=m +CONFIG_HID_SEMITEK=m +CONFIG_HID_SENSOR_ACCEL_3D=m +CONFIG_HID_SENSOR_ALS=m +CONFIG_HID_SENSOR_CUSTOM_INTEL_HINGE=m +CONFIG_HID_SENSOR_DEVICE_ROTATION=m +CONFIG_HID_SENSOR_GYRO_3D=m +CONFIG_HID_SENSOR_HUB=m +CONFIG_HID_SENSOR_HUMIDITY=m +CONFIG_HID_SENSOR_IIO_COMMON=m +CONFIG_HID_SENSOR_IIO_TRIGGER=m +CONFIG_HID_SENSOR_INCLINOMETER_3D=m +CONFIG_HID_SENSOR_MAGNETOMETER_3D=m +CONFIG_HID_SENSOR_TEMP=m +CONFIG_HID_SIGMAMICRO=m +CONFIG_HID_SMARTJOYPLUS=m +CONFIG_HID_SONY=m +CONFIG_HID_SPEEDLINK=m +CONFIG_HID_STEAM=m +CONFIG_HID_STEELSERIES=m +CONFIG_HID_SUNPLUS=m +CONFIG_HID_THINGM=m +CONFIG_HID_THRUSTMASTER=m +CONFIG_HID_TIVO=m +CONFIG_HID_TOPRE=m +CONFIG_HID_TOPSEED=m +CONFIG_HID_TWINHAN=m +CONFIG_HID_U2FZERO=m +CONFIG_HID_UCLOGIC=m +CONFIG_HID_UDRAW_PS3=m +CONFIG_HID_VIEWSONIC=m +CONFIG_HID_VIVALDI=m +CONFIG_HID_WACOM=m +CONFIG_HID_WALTOP=m +CONFIG_HID_WIIMOTE=m +CONFIG_HID_XIAOMI=m +CONFIG_HID_XINMO=m +CONFIG_HID_ZEROPLUS=m +CONFIG_HID_ZYDACRON=m +CONFIG_IIO=y +CONFIG_INPUT_JOYSTICK=y +CONFIG_INPUT_MISC=y +CONFIG_INPUT_UINPUT=y +CONFIG_JOYSTICK_XPAD=m +CONFIG_JOYSTICK_XPAD_FF=y +CONFIG_JOYSTICK_XPAD_LEDS=y +CONFIG_LCD_CLASS_DEVICE=m +CONFIG_LEDS_CLASS_MULTICOLOR=m +CONFIG_UHID=m +CONFIG_USB_ANNOUNCE_NEW_DEVICES=y +CONFIG_USB_HIDDEV=y +CONFIG_USB_PRINTER=m +CONFIG_HID_EVISION=m +CONFIG_HID_SUPPORT=y +CONFIG_HID_NVIDIA_SHIELD=m +CONFIG_HID_GOOGLE_STADIA_FF=m +CONFIG_HID_WINWING=m +CONFIG_HID_GOODIX_SPI=m +CONFIG_SPI=y + +# usb +CONFIG_DRM=y +CONFIG_DRM_UDL=m +CONFIG_SND_USB_AUDIO=m +CONFIG_SND_USB_AUDIO_MIDI_V2=y +CONFIG_USB_NET_RNDIS_HOST=m +CONFIG_USB_RTL8152=m +CONFIG_USB_SERIAL=m +CONFIG_USB_SERIAL_CP210X=m +CONFIG_USB_SERIAL_SIMPLE=m +CONFIG_USB_STORAGE=m +CONFIG_USB_UAS=m +CONFIG_USB_USBNET=m + +# debug +CONFIG_DYNAMIC_DEBUG=y +CONFIG_DYNAMIC_FTRACE=y +CONFIG_FTRACE=y +CONFIG_FUNCTION_TRACER=y + +# immutable +CONFIG_EFIVAR_FS=m +CONFIG_DM_VERITY=m + +# hardening +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf" +CONFIG_SECURITY_DMESG_RESTRICT=y +CONFIG_SECURITY_LOCKDOWN_LSM=y +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y +CONFIG_SECURITY_YAMA=y +CONFIG_SHADOW_CALL_STACK=y +CONFIG_CFI_CLANG=y +# CONFIG_CFI_PERMISSIVE is not set +CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y diff --git a/kconfigcheck.toml b/kconfigcheck.toml index 4da4588b4..1b3c3ee08 100644 --- a/kconfigcheck.toml +++ b/kconfigcheck.toml @@ -645,8 +645,6 @@ DYNAMIC_DEBUG = "y" # Enable debug dynamically DYNAMIC_FTRACE = "y" # Enable function tracing dynamically # Device specific settings to prevent regressions -["category:librem5".">=0.0.0"."aarch64"] -RS9116_FLASH_MODE = "n" # pma!2059 ["category:pinephonepro".">=0.0.0"."aarch64"] LEDS_GROUP_MULTICOLOR = "y" # pma!5991