Update Linux to 6.18

changelog/updates/2026-09-29-linux-6.18.md

@@ -0,0 +1 @@
+- Linux [6.18.45](https://lwn.net/Articles/1089546/)

sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-kernel/coreos-kernel-6.12.111.ebuild → sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-kernel/coreos-kernel-6.18.45.ebuild

@@ -1,4 +1,4 @@
-# Copyright 2014-2016 CoreOS, Inc.
+# Copyright 2026 The Flatcar Container Linux Maintainers
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -33,7 +33,6 @@ DEPEND="
 	sys-apps/busybox
 	sys-apps/coreutils
 	sys-apps/findutils
-	sys-apps/gptfdisk
 	sys-apps/grep
 	sys-apps/hwdata
 	sys-apps/ignition:=

sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/coreos-modules-6.12.111.ebuild → sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/coreos-modules-6.18.45.ebuild

@@ -1,4 +1,4 @@
-# Copyright 2014-2016 CoreOS, Inc.
+# Copyright 2026 The Flatcar Container Linux Maintainers
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=7
@@ -51,7 +51,7 @@ src_install() {
 	# Replace the broken /lib/modules/${KV_FULL}/build symlink with a copy of
 	# the files needed to build out-of-tree modules.
 	rm "${ED}/usr/${build}" || die
-	kmake run-command KBUILD_RUN_COMMAND="${KV_DIR}/scripts/package/install-extmod-build ${ED}/usr/${build}"
+	kmake run-command KBUILD_RUN_COMMAND="${KERNEL_DIR}/scripts/package/install-extmod-build ${ED}/usr/${build}"
 
 	# Install the original config because the above doesn't.
 	insinto "/usr/${build}"
@@ -61,6 +61,6 @@ src_install() {
 	dosym "../${build}/.config" "/usr/boot/config-${KV_FULL}"
 	dosym "../${build}/.config" "/usr/boot/config"
 
-	# Symlink "source" to "build" for compatibility. Fedora does this.
-	dosym build "/usr/${build}/../source"
+ 	# Symlink "source" to "build" for compatibility. Fedora does this.
+ 	dosym build "/usr/${build}/../source"
 }

sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/amd64_defconfig-6.12 → sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/amd64_defconfig-6.18

@@ -21,8 +21,6 @@ CONFIG_CMDLINE_BOOL=y
 CONFIG_CONNECTOR=y
 CONFIG_CRASH_DUMP=y
 CONFIG_CRYPTO_AES_NI_INTEL=m
-CONFIG_CRYPTO_SHA1_SSSE3=m
-CONFIG_CRYPTO_SHA256_SSSE3=m
 CONFIG_DCDBAS=m
 CONFIG_DEBUG_BOOT_PARAMS=y
 CONFIG_DELL_RBU=m

sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/arm64_defconfig-6.12 → sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/arm64_defconfig-6.18

@@ -31,8 +31,6 @@ CONFIG_CRYPTO_AES_ARM64_CE_CCM=y
 CONFIG_CRYPTO_AES_ARM64_NEON_BLK=y
 CONFIG_CRYPTO_ANSI_CPRNG=y
 CONFIG_CRYPTO_GHASH_ARM64_CE=y
-CONFIG_CRYPTO_SHA1_ARM64_CE=y
-CONFIG_CRYPTO_SHA2_ARM64_CE=y
 # CONFIG_DEBUG_PREEMPT is not set
 CONFIG_DMA_BCM2835=y
 CONFIG_DMA_CMA=y

sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-6.12 → sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-6.18

@@ -42,6 +42,7 @@ CONFIG_BLK_DEV_SR=m
 CONFIG_BLK_DEV_THROTTLING=y
 CONFIG_BLK_WBT=y
 CONFIG_BNA=m
+CONFIG_BNGE=m
 CONFIG_BNX2X=m
 CONFIG_BNXT=m
 CONFIG_BONDING=m
@@ -75,6 +76,7 @@ CONFIG_BRIDGE_EBT_T_NAT=m
 CONFIG_BRIDGE_EBT_VLAN=m
 CONFIG_BRIDGE_NETFILTER=y
 CONFIG_BRIDGE_NF_EBTABLES=m
+CONFIG_BRIDGE_NF_EBTABLES_LEGACY=m
 CONFIG_BRIDGE_VLAN_FILTERING=y
 CONFIG_BROADCOM_PHY=m
 CONFIG_BSD_DISKLABEL=y
@@ -125,6 +127,7 @@ CONFIG_CPU_FREQ_GOV_USERSPACE=m
 CONFIG_CPU_FREQ_STAT=y
 # CONFIG_CROSS_MEMORY_ATTACH is not set
 CONFIG_CRYPTO_AES=m
+CONFIG_CRYPTO_CRC32C=y
 CONFIG_CRYPTO_CTR=m
 CONFIG_CRYPTO_CTS=m
 CONFIG_CRYPTO_DES=m
@@ -138,7 +141,7 @@ CONFIG_CRYPTO_LIB_GF128MUL=m
 CONFIG_CRYPTO_LZO=m
 # CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set
 CONFIG_CRYPTO_NULL=m
-CONFIG_CRYPTO_NULL2=m
+CONFIG_CRYPTO_SELFTESTS=y
 CONFIG_CRYPTO_SHA1=y
 CONFIG_CRYPTO_USER_API_HASH=m
 CONFIG_CRYPTO_USER_API_SKCIPHER=m
@@ -170,14 +173,14 @@ CONFIG_DM_ZERO=m
 CONFIG_DNS_RESOLVER=y
 CONFIG_DRM=y
 CONFIG_DRM_FBDEV_EMULATION=y
+CONFIG_DRM_HYPERV=m
 CONFIG_DRM_QXL=m
 CONFIG_DRM_SIMPLEDRM=m
 CONFIG_DRM_TTM_HELPER=m
 CONFIG_DRM_VIRTIO_GPU=y
 CONFIG_DST_CACHE=y
 CONFIG_DUMMY=m
 CONFIG_DYNAMIC_DEBUG=y
-CONFIG_DYNAMIC_FTRACE=y
 CONFIG_E100=m
 CONFIG_E1000=m
 CONFIG_E1000E=m
@@ -201,15 +204,14 @@ CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y
 CONFIG_FAT_DEFAULT_IOCHARSET="ascii"
 CONFIG_FB=y
 CONFIG_FB_EFI=y
-CONFIG_FB_HYPERV=m
 CONFIG_FCOE=m
 # CONFIG_FIRMWARE_IN_KERNEL is not set
 CONFIG_FORCEDETH=m
 CONFIG_FORTIFY_SOURCE=y
 CONFIG_FRAMEBUFFER_CONSOLE=y
 CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY=y
 CONFIG_FRAMEBUFFER_CONSOLE_ROTATION=y
-CONFIG_FSCACHE=m
+CONFIG_FSCACHE=y
 CONFIG_FSCACHE_STATS=y
 CONFIG_FS_DAX=y
 CONFIG_FS_ENCRYPTION=y
@@ -232,15 +234,10 @@ CONFIG_GRO_CELLS=y
 CONFIG_GTP=m
 CONFIG_HARDENED_USERCOPY=y
 CONFIG_HIDRAW=y
-CONFIG_HID_A4TECH=m
 CONFIG_HID_APPLE=m
 CONFIG_HID_BELKIN=m
-CONFIG_HID_CHERRY=m
-CONFIG_HID_EZKEY=m
 CONFIG_HID_HYPERV_MOUSE=m
-CONFIG_HID_LOGITECH=m
 CONFIG_HID_MICROSOFT=m
-CONFIG_HID_MONTEREY=m
 CONFIG_HIGH_RES_TIMERS=y
 CONFIG_HOTPLUG_PCI=y
 CONFIG_HOTPLUG_PCI_ACPI=y
@@ -251,7 +248,8 @@ CONFIG_HWMON=m
 CONFIG_HW_RANDOM=y
 CONFIG_HW_RANDOM_TIMERIOMEM=m
 CONFIG_HW_RANDOM_VIRTIO=y
-CONFIG_HYPERV=m
+CONFIG_HYPERV=y
+CONFIG_HYPERV_VMBUS=m
 CONFIG_HYPERV_BALLOON=m
 CONFIG_HYPERV_NET=m
 CONFIG_HYPERV_UTILS=m
@@ -354,7 +352,6 @@ CONFIG_IPV6_SUBTREES=y
 CONFIG_IPV6_VTI=m
 CONFIG_IPVLAN=m
 CONFIG_IP_ADVANCED_ROUTER=y
-CONFIG_IP_DCCP=m
 CONFIG_IP_FIB_TRIE_STATS=y
 CONFIG_IP_MROUTE=y
 CONFIG_IP_MROUTE_MULTIPLE_TABLES=y
@@ -534,6 +531,7 @@ CONFIG_NETFILTER_ADVANCED=y
 CONFIG_NETFILTER_NETLINK_GLUE_CT=y
 CONFIG_NETFILTER_NETLINK_QUEUE=m
 CONFIG_NETFILTER_XTABLES=y
+CONFIG_NETFILTER_XTABLES_LEGACY=y
 CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
 CONFIG_NETFILTER_XT_MATCH_BPF=m
 CONFIG_NETFILTER_XT_MATCH_CGROUP=m
@@ -787,6 +785,7 @@ CONFIG_OPENVSWITCH=m
 CONFIG_OVERLAY_FS=m
 CONFIG_OVERLAY_FS_METACOPY=y
 CONFIG_OVERLAY_FS_REDIRECT_DIR=y
+CONFIG_OVPN=m
 CONFIG_PACKET=y
 CONFIG_PACKET_DIAG=m
 CONFIG_PANIC_ON_OOPS=y
@@ -800,6 +799,7 @@ CONFIG_PCI=y
 CONFIG_PCIEAER=y
 CONFIG_PCIEPORTBUS=y
 CONFIG_PCIE_ECRC=y
+CONFIG_PCIE_THERMAL=y
 CONFIG_PCI_HYPERV=m
 CONFIG_PCI_IOV=y
 CONFIG_PCI_MSI=y
@@ -896,7 +896,6 @@ CONFIG_SCSI_SCAN_ASYNC=y
 CONFIG_SCSI_SMARTPQI=m
 CONFIG_SCSI_SYM53C8XX_2=m
 CONFIG_SCSI_VIRTIO=m
-CONFIG_SCTP_COOKIE_HMAC_SHA1=y
 CONFIG_SECURITY=y
 CONFIG_SECURITY_LANDLOCK=y
 CONFIG_SECURITY_LOCKDOWN_LSM=y
@@ -965,6 +964,7 @@ CONFIG_TLS_DEVICE=y
 CONFIG_TLS_TOE=y
 CONFIG_TMPFS=y
 CONFIG_TMPFS_POSIX_ACL=y
+CONFIG_TRACEFS_AUTOMOUNT_DEPRECATED=n
 CONFIG_TRANSPARENT_HUGEPAGE=y
 CONFIG_TRUSTED_KEYS=m
 CONFIG_TTY_PRINTK=y
@@ -1003,7 +1003,6 @@ CONFIG_VFIO=m
 CONFIG_VFIO_PCI=m
 CONFIG_VFIO_PCI_CORE=m
 CONFIG_VFIO_PCI_INTX=y
-CONFIG_VFIO_PCI_MMAP=y
 CONFIG_VHOST_IOTLB=m
 CONFIG_VHOST_NET=m
 CONFIG_VHOST_RING=m
@@ -1018,6 +1017,7 @@ CONFIG_VIRTIO_MMIO=y
 CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y
 CONFIG_VIRTIO_NET=m
 CONFIG_VIRTIO_PCI=y
+CONFIG_VIRTIO_RTC=m
 CONFIG_VIRTIO_VSOCKETS=m
 CONFIG_VIRT_DRIVERS=y
 CONFIG_VLAN_8021Q=m

sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-sources/Manifest

@@ -1,2 +1,2 @@
-DIST linux-6.12.tar.xz 147906904 BLAKE2B b2ec2fc69218cacabbbe49f78384a5d259ca581b717617c12b000b16f4a4c59ee348ea886b37147f5f70fb9a7a01c1e2c8f19021078f6b23f5bc62d1c48d5e5e SHA512 a37b1823df7b4f72542f689b65882634740ba0401a42fdcf6601d9efd2e132e5a7650e70450ba76f6cd1f13ca31180f2ccee9d54fe4df89bc0000ade4380a548
-DIST patch-6.12.111.xz 6351668 BLAKE2B 5c82ae2deb7ee2abffa91f6126b4dbba602cff5ca0ed2cd18814ba3f354edec332d2a9c8055c9f44c9bcd0276c6526ea85859ea625d4e7e577942830e335bb9b SHA512 f640e8bf53d4ece7dd1cfc76f316945ad7e7c0bd3fcc06ec97d198e992202f2da439208b556934d897f43f828b67a987c1e38a4249b5f31aed38711a3990da0e
+DIST linux-6.18.tar.xz 154309096 BLAKE2B b94b7b9bf18aca0c3e50baf79b009a1448fc6cd9c3ee019f641cc247dcf53a4abef4274ee0608ad8cd4943af69854363a95d26e117ff23620bb07dccb158859f SHA512 88599ffdec96d150c1feb9b261ba93bb0301a9d0e1ad6bef7aeab1f5372cbfc57d8b43c7e902bd8f76921d1dbd8189663c142ea869e51d0e2b483b150ee00fe0
+DIST patch-6.18.45.xz 3184312 BLAKE2B aba9fb2692dffd6815719605d067f67b78fe9d829ad41c7b235c3eef8b8259b0a7f48cf74ba71b7e485cb0fe33efc43dcd6bc5aa2d80f43965cc0319bee47dc6 SHA512 07cb6bc7d2ef0ce5ccfc2c68333d0490a452ba18063473e40ec458066f371e17b871edf937c517f318573bbe3836f0e62f21e3caa481051738a47d9eed858bfb

sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-sources/coreos-sources-6.18.45.ebuild

@@ -0,0 +1,45 @@
+# Copyright 2026 The Flatcar Container Linux Maintainers
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+ETYPE="sources"
+
+# -rc releases should be versioned L.M_rcN
+# Final releases should be versioned L.M.N, even for N == 0
+
+# Only needed for RCs
+K_BASE_VER="5.15"
+
+inherit kernel-2
+detect_version
+EXTRAVERSION="-flatcar"
+
+DESCRIPTION="Full sources for the CoreOS Linux kernel"
+HOMEPAGE="http://www.kernel.org"
+if [[ "${PV%%_rc*}" != "${PV}" ]]; then
+  SRC_URI="https://git.kernel.org/torvalds/p/v${KV%-coreos}/v${OKV} -> patch-${KV%-coreos}.patch ${KERNEL_BASE_URI}/linux-${OKV}.tar.xz"
+  PATCH_DIR="${FILESDIR}/${KV_MAJOR}.${KV_PATCH}"
+else
+  SRC_URI="${KERNEL_URI}"
+  PATCH_DIR="${FILESDIR}/${KV_MAJOR}.${KV_MINOR}"
+fi
+
+# make modules_prepare depends on pahole
+RDEPEND="dev-util/pahole"
+
+KEYWORDS="amd64 arm64"
+IUSE=""
+
+# XXX: Note we must prefix the patch filenames with "z" to ensure they are
+# applied _after_ a potential patch-${KV}.patch file, present when building a
+# patchlevel revision.  We mustn't apply our patches first, it fails when the
+# local patches overlap with the upstream patch.
+UNIPATCH_LIST="
+  ${PATCH_DIR}/z0001-pahole-support-reproducible-builds.patch \
+  ${PATCH_DIR}/z0002-Revert-x86-boot-Remove-the-bugger-off-message.patch \
+  ${PATCH_DIR}/z0003-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-b.patch \
+  ${PATCH_DIR}/z0004-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mo.patch \
+  ${PATCH_DIR}/z0005-mtd-phram-slram-Disable-when-the-kernel-is-locked-do.patch \
+  ${PATCH_DIR}/z0006-arm64-add-kernel-config-option-to-lock-down-when-in-.patch \
+  ${PATCH_DIR}/z0007-tools-hv-fix-cross-compilation.patch \
+"