Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PineNote config categorization + crypto modules enablement + wireless update + IPsec enablement #8

Open
wants to merge 10 commits into
base: branch_pinenote_6-12_v1
Choose a base branch
from

Conversation

diederikdehaas
Copy link

@diederikdehaas diederikdehaas commented Dec 27, 2024

This PR does the following updates:

  • Categorize quite some modules so it's clear where those modules are coming from (instead of just a huge list)
  • Enable various/lots of crypto, which includes hashing, modules as they're used a LOT
  • Update wireless configuration
  • Enable modules for IPsec (VPN) support

This also makes it more in line with Debian's kernel config.

The blocks started with ``file: <path>/Kconfig[.ext]`` should be sorted
alphabetically. Fix the sort order so that they are.
Move the various USB module configuration options under their
appropriate header. This makes it easier to see to what category they
belong and where to look in the kernel sources.
It's also the catogorization as used by the Debian kernel, which makes
comparing with that easier.
The ``I2C_COMPAT`` module was dropped due to upstream commit
7e72208 ("i2c: Remove I2C_COMPAT config symbol and related code")

Link: https://git.kernel.org/linus/7e722083fcc3e148838fc3dc2486c498908c4677
The CYTTSP4 modules were dropped due to upstream commit
25162a4 ("Input: cyttsp4 - remove driver")

Link: https://git.kernel.org/linus/25162a4f64f8ba0065f300977589fe1f6af332f0
Before updating the configuration, let's categorize them first.
Cryptography, which includes hashing algorithms, are used in MANY places
and you want to use the modules provided by the kernel, so enable the
most common ones as modules, just like is being done in the Debian
kernel package. Only make CRYPTO_SHA256 built-in just like the Debian
kernel even though the precise reason for that does not apply here.

Also enable support for crypto hardware modules.

Link: https://www.wireguard.com/papers/wireguard.pdf
Several modules were defined more then once, 2 went from "XZY is not
set" to being defined and the others were just defined twice.
Categorize the modules under the ``/net/`` directory. It's (quite)
possible I missed several, but those can be added later.
The networking drivers, which can be found under ``/drivers/net``, are
deliberately not part of this commit.

Drop ``WIRELESS_EXT`` as that module is not user selectable.
Primary motivation for updating was removing the ``CFG80211_WEXT``
module as Wireless Extensions have been deprecated for over a decade
now, so there really is no reason to enable it for the PineNote.

Furthermore, make the config more in line with Debian's, but don't
include the ones Debian has because they want to support ancient stuff.
Enable the modules for strongSwan's IPsec support.
While at it, also enable ``INET_DIAG`` as that's really useful.

Link: https://docs.strongswan.org/docs/latest/install/kernelModules.html
@diederikdehaas diederikdehaas changed the title PineNote config categorization + crypto module enablement PineNote config categorization + crypto modules enablement + wireless update + IPsec enablement Dec 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant