Upgrade Linux kernel to 4.14.336

This is the last LTS version buildable using GCC 4.0.x. The next one,
version 4.19, requires at least GCC 4.6.

Fortunately, this is also the first version of the Linux kernel
without firmware blobs being included in /firmware, so the FSFLA
deblob scripts aren't needed anymore to ensure a fully auditable
kernel - the 3 remaining drivers that do include blobs masquerading
as source code are removed via a patch, avoiding all the other side
effects of the deblob scripts.
This doesn't compromise the trustworthiness of the bootstrapped
environment, since all the other drivers deblob would remove use
the firmware loader mechanism, which does nothing when the actual
firmware blobs aren't installed on the system separately. Features
dependent on firmware still won't work, but many drivers that load
firmware do so only optionally. This includes r8169, the driver for
the Realtek gigabit NICs found on many x86 motherboards.

This kernel is considerably larger than 4.9.10, and we build more
of it (including drivers that would previously get stripped away by
the deblob script, such as r8169), so to accommodate that, Fiwix
initrd size is increased by 64MiB, while lowering kexec space by
the same amount to ensure enough userspace memory available in Fiwix.
Fiwix's maximum open file count is also bumped from 1.5K to 2.5K.

The Documentation folder is deleted before build, to further save
space in the ramdisk.
This commit is contained in:
Gábor Stefanik 2024-02-16 12:58:27 +01:00
parent 32138d13b9
commit 11d3605b08
34 changed files with 10004 additions and 310 deletions

View file

@ -5,7 +5,7 @@
#undef NR_CALLOUTS
#define NR_CALLOUTS NR_PROCS
#undef NR_OPENS
#define NR_OPENS 1536
#define NR_OPENS 4096
#undef NR_FLOCKS
#define NR_FLOCKS (NR_PROCS * 5)
#undef MAX_PID_VALUE

View file

@ -3,6 +3,6 @@
#undef CHILD_MAX
#define CHILD_MAX 4096
#undef OPEN_MAX
#define OPEN_MAX 1536
#define OPEN_MAX 4096
#undef FD_SETSIZE
#define FD_SETSIZE OPEN_MAX

View file

@ -1 +1 @@
5aee0b059f5dddb096779b9fb7d6f5f47b56da750623a0a506f47632d31efac6 /boot/fiwix
2c6d2d24bc1ffcec1af415b031846d06f581cd4d2b8ba721fed55f98863a79f9 /boot/fiwix