Bump kernel 6.19 -> 7.1.8 and refresh Debian snapshot (L2 cherry-pick of #186)" - #195
Draft
KA-ROM wants to merge 4 commits into
Draft
Bump kernel 6.19 -> 7.1.8 and refresh Debian snapshot (L2 cherry-pick of #186)"#195KA-ROM wants to merge 4 commits into
KA-ROM wants to merge 4 commits into
Conversation
Kernel 6.19 is EOL (last release 6.19.14, 2026-04-22) so recent CVE fixes no longer land in that series. Move to 7.1, the current upstream stable series, at point release 7.1.5. trixie-backports only carries 7.1.3-1~bpo13+1, so the linux-source package is fetched from sid instead, where 7.1.5-1 is available: - add sid (binary packages only) to the mkosi apt sources, pinned to priority 100 via shared/mkosi.pref so no package ever resolves from it unless explicitly requested - make the suite linux-source is installed from configurable via KERNEL_APT_SUITE (default: <release>-backports), set to sid, and include it in the kernel cache key - add shared/mkosi.apt.conf: skip translation indices and retry transient download failures Snapshot bumped 20260430T025253Z -> 20260728T082537Z across all images, which also picks up ~3 months of trixie userspace updates. Once a >=7.1.5 backport lands in trixie-backports, KERNEL_APT_SUITE can be dropped again.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Cherry-pick of the three commits from #186:
linux-sourcefrom sid (trixie-backports only carries 7.1.3). sid is added to apt sources pinned at priority 100, so no other package can ever resolve from it; onlylinux-sourceis explicitly requested via the newKERNEL_APT_SUITEenv var. Drop the override once a >=7.1.5 backport lands in trixie-backports.20260430T025253Z->20260814T023117Zso sid carries 7.1.8. Note this also pulls in ~3.5 months of trixie userspace updates across the images.Testing plan (L2 side, per kernel-update thread)
l2/op-rbuilder+rproxy, op-rbuilder v0.4.13), no cacheuname -a= 7.1.8-mkosi-cloud, services healthy, blocks/flashblocks producedAlready verified on
mainby @pablin-10: qemu boot of dev image shows7.1.8-mkosi-cloud.Notes
olddefconfig, which silently drops renamed/removed options (kernel.configdiff worth a look during review.)