aboutsummaryrefslogtreecommitdiffstats
path: root/config
Commit message (Collapse)AuthorAgeFilesLines
* x86: bump default kernel partition size to 16MFelix Fietkau2016-11-091-1/+1
| | | | | | | This leaves more room for sysupgrade config data or for having multiple kernel images to choose from Signed-off-by: Felix Fietkau <nbd@nbd.name>
* config: ext4: increase x86 rootfs size to 2GB to support online resize2fsJo-Philipp Wich2016-10-271-1/+2
| | | | | | | | | | | | | | | | | | | The current default rootfs size of 256MB in conjunction with 4K blocks produces an ext4 filesystem which lacks the appropriate amount of backup GDT entries to support online-resizing. For x86 targets, increase the default rootfs size to 2048MB which allows online resizing the filesystem to up to 2TB which is the current theoretical maximum for LEDE, due to missing GPT support on the root block device. Note that the filesystem artefact will not occupy 2GB on the build system as the make_ext4fs utility uses sparse files to generate the filesystem images, so the actual disk usage is much lower. Furthermore the filesystem images are gzip compressed, shrinking them to only a few megabytes on the download server. Signed-off-by: Jo-Philipp Wich <jo@mein.io> Acked-by: Michael Heimpold <mhei@heimpold.de>
* config: ext4: drop option to set maximum number of inodesJo-Philipp Wich2016-10-271-7/+0
| | | | | | | | | | | There is very little practical use to limit the number of available inodes on an ext4 filesystem and the make_ext4fs utility is able to calculate useful defaults by itself. Drop the option to make resulting ext4 filesystems more flexible by default. Signed-off-by: Jo-Philipp Wich <jo@mein.io> Acked-by: Michael Heimpold <mhei@heimpold.de>
* config: enable shadow passwords unconditionallyMatthias Schiffer2016-09-261-3/+0
| | | | | | | | | | | | | Configurations without shadow passwords have been broken since the removal of telnet: as the default entry in /etc/passwd is not empty (but rather unset), there will be no way to log onto such a system by default. As disabling shadow passwords is not useful anyways, remove this configuration option. The config symbol is kept (for a while), as packages from feeds depend on it. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* images: bump default rootfs size to 256 MBFelix Fietkau2016-09-081-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mvebu: add sdcard image creation scriptJosua Mayer2016-09-021-1/+1
| | | | | | | | | | | | | | | | Added gen_mvebu_sdcard_img.sh to facilitate creating an fixed-size sdcard image, adding the bootloader and populating it with actual data. Added the required rules for creating a 4GB sdcard image according to this layout: p0: boot (fat32) p1: rootfs (squashfs) p2: rootfs_data (ext4) This should be generic to any mvebu boards that can boot from block storage. Added the new sdcard image to the Clearfog image profile. Signed-off-by: Josua Mayer <josua.mayer97@gmail.com> Signed-off-by: Felix Fietkau <nbd@nbd.name> [cleanup]
* Add config symbols for kernel keyring supportNathaniel Wesley Filardo2016-09-021-0/+19
| | | | | | | | Enable selection of the kernel key retention framework and some of its additional facilities; see Documentation/security/keys.txt and security/keys/Kconfig for details Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>
* apm821xx: use lzma compression for the initramfs imagesChristian Lamparter2016-07-251-0/+1
| | | | | | | | | | | | | | | | | | | | | | The MR24's u-boot takes it sweet time decompressing the LZMA-packed initramfs image. A user reported that compared to the old gzip method in v2: it "takes a ton longer to decompress like 4\x the old boot time for decompression". This patch also fixes a issue with the WNDR4700's initramfs image getting to big and causing the following u-boot crash during the decompression: "Uncompressing Multi-File Image ... Error: inflate() returned -5 out-of-mem or overwrite error - must RESET board to recover" This patch fixes both issues by reverting the MR24's initramfs compression method back to gzip. And choosing to compress the initramfs within the initramfs image as LZMA by default. Cc: chrisrblake93@gmail.com Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* config: remove options for including kernel/dtb in rootfsFelix Fietkau2016-07-201-41/+0
| | | | | | These options were a big design flaw to begin with Signed-off-by: Felix Fietkau <nbd@nbd.name>
* build: make TARGET_ROOTFS_JFFS2 depend on USES_JFFS2Felix Fietkau2016-07-201-1/+1
| | | | | | | If jffs2 support was not enabled by the target, jffs2 are quite likely to be broken, so we shouldn't build them. Signed-off-by: Felix Fietkau <nbd@nbd.name>
* toolchain: get rid of GCC_VERSION_5 config symbolFelix Fietkau2016-07-151-2/+2
| | | | | | Replace it with !GCC_VERSION_4_8 to be more future compatible Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: Move POSIX ACL and attr support options into submenuDaniel Dickinson2016-07-051-72/+75
| | | | | | | Make global options menuconfig cleaner by moving POSIX ACL and attr support options into a submenu. Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>
* kernel: Add option to make using filesystem ACL support the defaultDaniel Dickinson2016-06-301-0/+85
| | | | | | | This adds a configuration options that allows to make filesystem ACL support the default in the kernel, except for old nfs. Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>
* config: add a small_flash featureJohn Crispin2016-06-131-1/+1
| | | | | | this causes KALLSYMS to be off by default Signed-off-by: John Crispin <john@phrozen.org>
* kernel: add missing symbolDaniel Golle2016-05-161-0/+6
| | | | | | | Add missing symbol When building kernel with profiling enabled and ARM or ARM64 targets. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* build: remove leftover dependenices on TARGET_rdcFelix Fietkau2016-05-121-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* global: introduce ALL_NONSHARED symbolJo-Philipp Wich2016-04-131-0/+5
| | | | | | | | Introduce a new symbol ALL_NONSHARED which selects all non-sharable packages by default. This option is mainly intented for buildbot setups to build the target dependant software subset only. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* build: don't add -fno-plt for ARCFelix Fietkau2016-02-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | Curent ARC toolchain fails to build libstdc++ if -fno-plt is used. Lots of following error messages appear: ------------------->8------------------ ... staging_dir/toolchain-arc_arc700_gcc-arc-2015.06_uClibc-1.0.9/arc-openwrt-linux-uclibc/bin/ld: BFD (GNU Binutils) 2.23.2 assertion fail elf32-arc.c:2786 collect2: error: ld returned 1 exit status ------------------->8------------------ In newer binutils (still in development) for ARC rewritten from scratch this seem to not happen, so once new binutils for ARC hit the street this patch might be reverted. Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com> Cc: Felix Fietkau <nbd@openwrt.org> Cc: Jo-Philipp Wich <jow@openwrt.org> Cc: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 48642
* buildroot: add options to build the kernel for NFS bootFlorian Fainelli2016-02-011-0/+34
| | | | | | | | | Add the basic set of kernel options to allow it from mounting a NFS root and boot from it. Signed-off-by: Florian Fainelli <florian@openwrt.org> SVN-Revision: 48590
* include/kernel: add custom USER/DOMAIN config optionsFelix Fietkau2016-01-281-0/+16
| | | | | | | | | | | | | | | These allow the generated kernel's build metadata to be defined explicitly. This metadata is reported, eg, at boot time and in `uname -a` on running systems. If the variables aren't configured, the current build system username and hostname are used as normal. The motivation for this option is to achive reproducible (bit-for-bit identical) kernel builds of official openwrt releases. Signed-off-by: bryan newbold <bnewbold@robocracy.org> Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48541
* build: do not deselect CONFIG_USE_SSTRIP if CONFIG_DEBUG is enabledFelix Fietkau2016-01-261-2/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48504
* build: add -fno-plt to default cflags, it improves PIC code optimizationFelix Fietkau2016-01-241-0/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48470
* build: use sstrip by default for muslFelix Fietkau2016-01-181-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48313
* Configure IPv6 kernel options in config/Config-kernel.inFelix Fietkau2016-01-041-0/+23
| | | | | | | | | | | | | | | | | | | Revision 46834 changed IPv6 support from a module to builtin. But since the configuration of the IPv6 kernel options was left in package/kernel/linux/modules/netsupport.mk, this means that an empty kmod-ipv6 module was still being generated (not packaged). This patch moves the configuration of the IPv6 kernel options to config/Config-kernel.in to remove this last bit of the module. Note that CONFIG_IPV6_PRIVACY was dropped (enabled by default since Linux v3.13), so this option is no longer needed. See https://github.com/torvalds/linux/commit/5d9efa7ee99eed58388f186c13cf2e2a87e9ceb4 Signed-off-by: Arjen de Korte <arjen+openwrt@de-korte.org> SVN-Revision: 48132
* kernel: add support for KERNEL_CGROUP_PIDSJohn Crispin2015-10-261-0/+7
| | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 47275
* cosmetic: remove trailing whitespacesLuka Perkov2015-10-151-1/+1
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 47197
* linux: make IPv6 builtin if selected (saves >30KB)Steven Barth2015-09-091-1/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46834
* gcc: remove version 4.9-linaroFelix Fietkau2015-09-061-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 46798
* enable strong SSP / Stackprotector on gcc5Steven Barth2015-08-181-2/+2
| | | | | | Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de> SVN-Revision: 46685
* build: disable kernel stack protector support for i386/x86_64Felix Fietkau2015-08-021-0/+1
| | | | | | | | | | | | When stack protector support is disabled in libc (always the case for !musl), gcc assumes that it needs to use __stack_chk_guard for the stack canary. This causes kernel build errors, because the kernel is only set up to handle TLS stack canaries. Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 46543
* hardening: disable user-space SSP for !muslSteven Barth2015-06-291-0/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46146
* toolchain: add fortify-headers, enable FORTIFY_SOURCE by defaultSteven Barth2015-06-231-0/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46117
* gcc/musl: rework SSP-supportSteven Barth2015-06-221-2/+2
| | | | | | | | | | | Make musl provide libssp_nonshared.a and make GCC link it unconditionally if musl is used. This should be a no-op if SSP is disabled and seems to be the only reliable way of dealing with SSP over all packages due to the mess that is linkerflags handling in packages. Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46108
* kernel: mitigate cgroups config dependency changesFelix Fietkau2015-06-181-1/+1
| | | | | | | | | | | Memory Resource Controller no longer depends on Resource counters since Kernel version 4.0. 3.18 is the only still supported version needing Resource counters for MEMCG, thus declare the dependency only for that version. Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 46024
* hardening: enable regular SSP support by defaultSteven Barth2015-06-171-2/+2
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46020
* hardening: enable RELRO by defaultSteven Barth2015-06-161-0/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46004
* hardening: enable format security checking by defaultSteven Barth2015-06-161-1/+1
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46003
* build: enable package list signing by defaultFelix Fietkau2015-05-051-0/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45614
* build: add integration for managing opkg package feed keysFelix Fietkau2015-04-061-0/+3
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45286
* config: add an option to enable KPROBEJohn Crispin2015-04-011-0/+17
| | | | | | Signed-off-by: Mathieu Olivari <mathieu@codeaurora.org> SVN-Revision: 45212
* x86: clean up default grub baudrate settingsFelix Fietkau2015-03-291-4/+3
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45113
* build: remove leftover olpc support codeFelix Fietkau2015-03-281-4/+4
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 45084
* kernel: cleanup seccomp symbol selectionJohn Crispin2015-03-261-7/+5
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 45005
* x86: use PARTUUID instead explicitly specifying the device by defaultJo-Philipp Wich2015-03-241-2/+0
| | | | | | | | | | | | | This changes the x86 image generation to match x86_64, using the PARTUUID for the rootfs instead of explicitly configuring the device. It unbreaks KVM with VirtIO, which uses /dev/vda2 instead of /dev/sda2. Tested in QEMU/KVM with VirtIO, VirtualBox and VMware. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> SVN-Revision: 44966
* build: remove obsolete references to cris and avr32Felix Fietkau2015-03-241-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44965
* kernel: Support kernel options required by systemdJohn Crispin2015-03-211-6/+28
| | | | | | | | | | | | | These kernel options are all likely to be widely useful in this modern age, but are immediately useful for systemd support. c.f. http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/sys-apps/systemd/systemd-9999.ebuild?&view=markup#l118 Adapted from a patch by Adam Porter. Signed-off-by: Jeff Waugh <jdub@bethesignal.org> SVN-Revision: 44929
* config: add function tracersJohn Crispin2015-03-181-0/+20
| | | | | | | | Adds menuconfig options for ftrace function tracers Signed-off-by: Bryan Forbes <bryan@reigndropsfall.net> SVN-Revision: 44878
* buildroot: make it easier to build all kmodsJonas Gorski2015-03-161-1/+5
| | | | | | | | | Split out kmods from ALL to make it easier to create local builds that are compatible kmod-wise with releases. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 44830
* kernel: enable open by fhandle syscallsJohn Crispin2015-03-151-0/+6
| | | | | | | | | | | | | | | | | | | | This is needed by many services to function properly and as all modern distributions got it enabled, it starts to be a de-facto standard, i.e. user-space starts to silently depend on it. This also pulls in EXPORTFS, however, the kernel binary size increases only a little. On ARM systems comes down to 800 bytes uncompressed and about 200 bytes compressed size. On MIPS systems it's about 1.2 kB size increase of the LZMA compressed kernel. v2: use menuconfig option instead of just enabling the option Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 44765
* toolchain: The glorious return of glibc, ver 2.21John Crispin2015-03-121-3/+2
| | | | | | | | | | | It's the eglibc packaging with a bit of spit-polishing. And testing. :-) [blogic: merged glibc and eglibc into 1 and made eglibc a glibc variant] Signed-off-by: Jeff Waugh <jdub@bethesignal.org> Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 44701