[ciq-6.18.y-next] Multiple patches tested (100 commits) - #1560

Merged

ciq-kernel-automation[bot] merged 128 commits into

ciq-6.18.y-nextfrom

{automation_tmp}_ciq-6.18.y-next

Sep 1, 2026

Commits on Aug 28, 2026

Add CIQ configs
bmastbergen
committed
35bb148
Add initial CIQ config tweaks
bmastbergen
committed
58163a9
github actions: Make Builds on Merge Request Work

PlaidCat
authored and
bmastbergen
committed
53850fa
arm64: add kernel config option to lock down when in Secure Boot mode

Linn Crosetto
authored and
bmastbergen
committed
3da3893
efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode

dhowells
authored and
bmastbergen
committed
299b983
efi: Lock down the kernel if booted in secure boot mode

bwhacks
authored and
bmastbergen
committed
79901ef
mtd: phram,slram: Disable when the kernel is locked down

bwhacks
authored and
bmastbergen
committed
e5ce137
Add efi_status_to_str() and rework efi_status_to_err().

vathpela
authored and
bmastbergen
committed
5f9bf2b
[CIQ] v6.18.3 - rebased configs

github-actions[bot]
authored and
bmastbergen
committed
e572bf2
[CIQ] v6.18.7 - rebased configs

github-actions[bot]
authored and
bmastbergen
committed
d0ad1f4
[CIQ] v6.18.9 - rebased configs

github-actions[bot]
authored and
bmastbergen
committed
593bf41
[CIQ] v6.18.14 - rebased configs

github-actions[bot]
authored and
bmastbergen
committed
2013805
[CIQ] v6.18.17 - rebased configs

github-actions[bot]
authored and
bmastbergen
committed
04c8dcc
configs: Enable INTEL_TDX_HOST for x86_64 configs
bmastbergen
committed
2e3f7c4
Import initial dist-git for 6.18.19
bmastbergen
committed
ed37c29
kernel.spec: Fix buildid and pkgrelease
bmastbergen
committed
aec1dd8
Remove gating.yaml
bmastbergen
committed
affdee2
Update sbat templates
bmastbergen
committed
8bcf7de
Ensure all qdiscs are in modules-core
bmastbergen
committed
87fa1dd
Remove modules-rt-kvm references
bmastbergen
committed
602ce3b
Set buildid to .1
bmastbergen
committed
f27a04f
rocky: generalize rule for kunit and test kmod placement
bmastbergen
committed
1ca5388
Rename package to kernel-clk6.18
bmastbergen
committed
21726c4
Remove gemini switch
bmastbergen
committed
b6d1366
Add Provides/Conflicts for non-parallel installable kernel-* packages
bmastbergen
committed
cdbcccc
Rename tool packages with pkg_suffix and add Provides/Conflicts
bmastbergen
committed
b64e5bf
Use gzip for symvers compression to match upstream

authored and
bmastbergen
committed
86a3598
Add +clk6.18 suffix to kernel version string (uname -r)

authored and
bmastbergen
committed
b22a8ee
Add kernel-clk6.18-default package to set default kernel
bmastbergen
committed
5281433
Consolidate spec version defines and prevent CLK kernel from hijacking boot default

authored and
bmastbergen
committed
caa4daf
Rework -default package and clean up tool subpackage naming

authored and
bmastbergen
committed
813fae7
Bundle bindgen-cli from source for Rocky 9.6 builds

authored and
bmastbergen
committed
52e66ee
[CIQ] v6.18.20 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
29b0837
[CIQ] v6.18.21 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
255a628
github actions: Inherit the Kernel CI Automated workflow from main
bmastbergen
committed
52d9006
spec: Skip certificate setup for noarch builds
bmastbergen
committed
6b2d1d1
Update spec for ciq_kernel-6.18.21-2
bmastbergen
committed
6563259
github actions: Use trigger for kernelCI
bmastbergen
committed
306690d
github actions: Trigger kernelCI on ciq-6.18.y-next branches
bmastbergen
committed
4e873eb
[CIQ] v6.18.22 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
718ff73
spec: Fix posttrans script to handle noarch package expansion
bmastbergen
committed
4a4168d
[CIQ] ciq_kernel-6.18.22-2 - updated spec
bmastbergen
committed
32a102a
spec: update branding in package descriptions and log messages
bmastbergen
committed
ac208dd
github actions: add RPM build workflow for x86_64 and aarch64
bmastbergen
committed
f35b46a
configs: enable legacy iptables/ip6tables support for all architectures
bmastbergen
committed
68396d1
Add generic kernel Provides to spec
bmastbergen
committed
c142dba
Add generic kernel-headers and kernel-devel Provides to spec
bmastbergen
committed
9f88625
bundle_bindgen: add set -e, curl --fail, and SHA256 verification
bmastbergen
committed
2f2cc8f
[CIQ] v6.18.27 - rebased configs
bmastbergen
committed
1c6e411
[CIQ] v6.18.27 - updated spec
bmastbergen
committed
148e6a4
generate_tarball: Also strip leading v from tags
bmastbergen
committed
ab7c53f
[CIQ] v6.18.28 - updated spec
bmastbergen
committed
0169d24
[CIQ] ciq_kernel-6.18.28-2 - updated spec
bmastbergen
committed
6697e70
[CIQ] v6.18.31 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
821bbad
[CIQ] v6.18.33 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
58c5844
bundle_bindgen: add User-Agent header to crates.io request
bmastbergen
committed
9a8829a
[CIQ] ciq_kernel-6.18.33-2 - updated spec
bmastbergen
committed
712d08e
kernel-clk6.18: require ciq-kmod and ship %clk_version macro file

josephtate
authored and
bmastbergen
committed
0a138b0
random: Add hook to override device reads and getrandom(2)

jallisonciq
authored and
bmastbergen
committed
553ff04
crypto: rng - Override drivers/char/random in FIPS mode

jallisonciq
authored and
bmastbergen
committed
a0928be
not upstream: Disable vdso getrandom when FIPS is enabled

jallisonciq
authored and
bmastbergen
committed
5523039
crypto: ecdh - implement FIPS PCT

jallisonciq
authored and
bmastbergen
committed
2660fc7
crypto: essiv - Zeroize keys on exit in essiv_aead_setkey()

jason-rodri
authored and
bmastbergen
committed
193c57d
crypto: drbg - Align buffers to at least a cache line

kerneltoast
authored and
bmastbergen
committed
4f25ea0
mm/gup: introduce pin_user_pages_fast_only()

kerneltoast
authored and
bmastbergen
committed
0a201ca
crypto: rng - Convert crypto_default_rng_refcnt into an unsigned int

kerneltoast
authored and
bmastbergen
committed
008ca41
crypto: rng - Fix priority inversions due to mutex locks

kerneltoast
authored and
bmastbergen
committed
b9d0fda
crypto: rng - Implement fast per-CPU DRBG instances

kerneltoast
authored and
bmastbergen
committed
112e44c
lib/crypto: Add FIPS self-tests for SHA-1 and SHA-2

Eric Biggers
authored and
bmastbergen
committed
421fe85
byteorder: Add le64_to_cpu_array() and cpu_to_le64_array()

Eric Biggers
authored and
bmastbergen
committed
fc62542
lib/crypto: blake2b: Add BLAKE2b library functions

jallisonciq
authored and
bmastbergen
committed
dbe5361
btrfs: switch to library APIs for checksums

jallisonciq
authored and
bmastbergen
committed
b1df36c
crypto: testmgr - block Crypto API xxhash64 in FIPS mode

jallisonciq
authored and
bmastbergen
committed
16cd8f3
When in fips mode, self-test errors must panic.

jallisonciq
authored and
bmastbergen
committed
ecd2837
When in fips mode, self-test errors must panic.

jallisonciq
authored and
bmastbergen
committed
cb9c6ae
Change CONFIG_CRYPTO_JITTERENTROPY_OSR from 1 to 3 in all configs.

jallisonciq
authored and
bmastbergen
committed
c60e055
dh_compute_value misses the check SP800-56Arev3, 5.6.2.1.4 which is typically implemented after dh_is_pubkey_valid.

jallisonciq
authored and
bmastbergen
committed
5ee032d
In crypto_kdf108_ctr_generate() there is no minimum length check for the digest to be generated - it must be at least 112 bits.

jallisonciq
authored and
bmastbergen
committed
3a59e69
Add fips_approved flag to SHA1 and HMAC-SHA1 structs.

jallisonciq
authored and
bmastbergen
committed
cda8401
Add fips_approved flag to SHA224 and HMAC-SHA224 structs.

jallisonciq
authored and
bmastbergen
committed
2bd3e6f
Add fips_approved flag to SHA256 and HMAC-SHA256 structs.

jallisonciq
authored and
bmastbergen
committed
8d27631
Add fips_approved flag to SHA384 and HMAC-SHA384 structs.

jallisonciq
authored and
bmastbergen
committed
bb9e20f
Add fips_approved flag to SHA512 and HMAC-SHA512 structs.

jallisonciq
authored and
bmastbergen
committed
24c01e0
Add fips_approved indicator to struct crypto_aes_ctx.

jallisonciq
authored and
bmastbergen
committed
7704a3c
Add CONFIG_CRYPTO_FIPS_CUSTOM_VERSION=y, CONFIG_CRYPTO_FIPS_VERSION="ciq.6.18.20260531"

jallisonciq
authored and
bmastbergen
committed
32e5e60
Unset CRYPTO_JITTERENTROPY_MEMSIZE_2, set CRYPTO_JITTERENTROPY_MEMSIZE_128.

jallisonciq
authored and
bmastbergen
committed
030dbaf
github actions: Add FIPS protected directory check for PRs
bmastbergen
committed
6ad1f96
Restore CRYPTO_TFM_FIPS_COMPLIANCE flag as an indicator to differentiate between internal and external IV generation when AES-GCM

jallisonciq
authored and
bmastbergen
committed
f0bc377
[CIQ] v6.18.35 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
dac105e
[CIQ] ciq_kernel-6.18.35-2 - updated spec
bmastbergen
committed
09b181a
github-actions: extend trigger glob to match suffix branches

shreeya-patel98
authored and
bmastbergen
committed
63b7a38
crypto: Kconfig - Make CRYPTO_FIPS depend on the DRBG being built-in

kerneltoast
authored and
bmastbergen
committed
f002c5b
random: Restrict extrng registration to init time

kerneltoast
authored and
bmastbergen
committed
c6fd8f0
crypto: rng - Only allow the DRBG to register as "stdrng" in FIPS mode

kerneltoast
authored and
bmastbergen
committed
8e94bec
crypto: rng - Fix tabs vs spaces in the per-CPU DRBG code

kerneltoast
authored and
bmastbergen
committed
bfbbbc6
crypto: rng - Make the per-CPU DRBG instances permanent

kerneltoast
authored and
bmastbergen
committed
84ff3c5
crypto: rng - Skip leading zero-length iovec segments

kerneltoast
authored and
bmastbergen
committed
3fbc3c8
crypto: rng - Fix spurious EFAULT when the destination PTE is zapped

kerneltoast
authored and
bmastbergen
committed
68a36d3
Revert "mm/gup: reintroduce pin_user_pages_fast_only()"

kerneltoast
authored and
bmastbergen
committed
b3aa897
[CIQ] ciq_kernel-6.18.35-3 - updated spec
bmastbergen
committed
56a54f9
[CIQ] v6.18.36 - rebased configs
bmastbergen
committed
994fc3f
[CIQ] v6.18.36 - updated spec
bmastbergen
committed
289847b
[CIQ] v6.18.38 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
5e26768
Add x86_64 minimal kernel variant to spec
bmastbergen
committed
fc6428b
[CIQ] ciq_kernel-6.18.38-2 - updated spec
bmastbergen
committed
6acd448
[CIQ] v6.18.39 - updated spec
bmastbergen
committed
e3ab1a1
[CIQ] v6.18.40 - rebased configs
bmastbergen
committed
5452f02
[CIQ] v6.18.40 - updated spec
bmastbergen
committed
57f0355
spec: relax UKI systemd requirement to 252-31 on RHEL
bmastbergen
committed
4134cc1
[CIQ] v6.18.41 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
fcd8d0b
[CIQ] v6.18.42 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
5462d83
Set kpatch/driver certs for all builds

skip77
authored and
bmastbergen
committed
9384fab
[CIQ] v6.18.43 - updated spec

github-actions[bot]
authored and
bmastbergen
committed
1365756
spec: use %{rhel} for el version and conditionally use system bindgen
bmastbergen
committed
b838cba
crypto: rng - Fix double percpu offset in local_unlock() calls

kerneltoast
authored and
bmastbergen
committed
6119a0b
bpf: Support BPF_F_EGRESS with bpf_redirect_peer
bmastbergen
committed
1d87b42
selftests/bpf: Add tests for bpf_redirect_peer with BPF_F_EGRESS
bmastbergen
committed
c8d7ffa
bpf: Reject redirect helpers without a bpf_net_context
bmastbergen
committed
c4e17cf
net: Clear the dst when performing encap / decap
bmastbergen
committed
d000990
bpf: Name the enum for BPF_FUNC_skb_adjust_room flags
bmastbergen
committed
c850045
bpf: Refactor masks for ADJ_ROOM flags and encap validation
bmastbergen
committed
92a8e8f
bpf: Add BPF_F_ADJ_ROOM_DECAP_* flags for tunnel decapsulation
bmastbergen
committed
113638a
bpf: Allow new DECAP flags and add guard rails
bmastbergen
committed
2d9e42c
bpf: Clear decap state on skb_adjust_room shrink path
bmastbergen
committed
565eaf4
selftests/bpf: tc_tunnel - validate decap GSO and encapsulation state
bmastbergen
committed
4c336d7
[CIQ] ciq_kernel-6.18.43-2 - updated spec
bmastbergen
committed
a32c1cf
[CIQ] v6.18.48 - rebased configs
bmastbergen
committed
72572e7
[CIQ] v6.18.48 - updated spec
bmastbergen
committed
289bd93

Uh oh!

Commits

Commits on Aug 28, 2026