# Credits: https://github.com/jordanisaacs/kernel-module-flake
# Original Copyright Notice:
# MIT License
# Copyright (c) 2022 Jordan Isaacs
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to deal
# in the Software without restriction, including without limitation the rights
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
# copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
# The above copyright notice and this permission notice shall be included in all
# copies or substantial portions of the Software.
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
# SOFTWARE.
{
pkgs,
lib ? pkgs.lib,
tag,
version ? tag,
sha256,
source,
...
}:
let
localVersion = "-ukci";
kernelOrgTag = lib.strings.removePrefix "v" tag;
kernelOrgMajor = builtins.head (lib.strings.splitString "." kernelOrgTag);
sources = {
mirror = "mirror://kernel/linux/kernel/v6.x/linux-${tag}.tar.xz";
mirror-v5 = "mirror://kernel/linux/kernel/v5.x/linux-${tag}.tar.xz";
kernel-org = "https://cdn.kernel.org/pub/linux/kernel/v${kernelOrgMajor}.x/linux-${kernelOrgTag}.tar.xz";
torvalds = "https://git.kernel.org/torvalds/t/linux-${kernelOrgTag}.tar.gz";
linus = "https://github.com/torvalds/linux/archive/refs/tags/${tag}.tar.gz";
bpf-next = "https://git.kxxt.dev/kxxt/bpf-next/archive/${tag}.tar.gz";
};
in
{
kernelArgs = {
inherit version;
src = pkgs.fetchurl {
url = sources.${source};
inherit sha256;
};
# Add kernel patches here
kernelPatches =
let
fetchSet = lib.imap1 (
i: hash: {
# name = " "kbuild-v${builtins.toString i}";
patch = pkgs.fetchpatch {
inherit hash;
url = "https://lore.kernel.org/rust-for-linux/20230109204520.539080-${builtins.toString i}-ojeda@kernel.org/raw";
};
}
);
patches = fetchSet [
];
in
patches;
inherit localVersion;
modDirVersion = version + localVersion;
};
kernelConfig =
let
isAarch64 = pkgs.stdenv.hostPlatform.system == "aarch64-linux";
isX86_64 = pkgs.stdenv.hostPlatform.system == "x86_64-linux";
isRiscv64 = pkgs.stdenv.hostPlatform.system == "riscv64-linux";
riscv64SpecificConfig = lib.optionalAttrs isRiscv64 (
with lib.kernel;
with (lib.kernel.whenHelpers version);
{
# FUNCTION_TRACER depends on !PREEMPT on older versions of riscv kernels
PREEMPT = if lib.versionAtLeast version "6.18" then yes else no;
PCIEPORTBUS = yes;
PCI_HOST_GENERIC = yes;
HIGH_RES_TIMERS = yes;
SERIAL_OF_PLATFORM = yes;
# Necessary to get console working on 6.1. Thanks to ziyao!
SOC_VIRT = whenOlder "6.6" yes;
# Workaround RISC-V specific quirk https://github.com/nixos/nixpkgs/issues/447117
KERNEL_UNCOMPRESSED = whenAtLeast "6.12" yes;
KERNEL_GZIP = whenAtLeast "6.12" no;
}
);
aarch64SpecificConfig = lib.optionalAttrs isAarch64 (
with lib.kernel;
{
PREEMPT = yes;
SERIAL_AMBA_PL011 = yes;
SERIAL_AMBA_PL011_CONSOLE = yes;
PCIEPORTBUS = yes;
PCI_HOST_GENERIC = yes;
HIGH_RES_TIMERS = yes;
ARM_ARCH_TIMER_EVTSTREAM = yes;
ARM64_ERRATUM_2067961 = yes;
ARM64_ERRATUM_2054223 = yes;
}
);
x86_64SpecificConfig = lib.optionalAttrs isX86_64 (
with lib.kernel;
{
PREEMPT_DYNAMIC = yes;
# Power
ACPI = yes;
# 32bit
IA32_EMULATION = yes;
UNWINDER_FRAME_POINTER = yes;
DEBUG_BOOT_PARAMS = yes;
EARLY_PRINTK = yes;
}
);
in
{
# See https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/system/boot/kernel_config.nix
structuredExtraConfig =
with lib.kernel;
{
DEBUG_FS = yes;
DEBUG_KERNEL = yes;
DEBUG_INFO = yes;
DEBUG_MISC = yes;
DEBUG_BUGVERBOSE = yes;
DEBUG_STACK_USAGE = yes;
DEBUG_SHIRQ = yes;
DEBUG_ATOMIC_SLEEP = yes;
IKCONFIG = yes;
IKCONFIG_PROC = yes;
# Compile with headers
IKHEADERS = yes;
# SLUB_DEBUG = yes;
# DEBUG_MEMORY_INIT = yes;
# KASAN = yes;
# FRAME_WARN - warn at build time for stack frames larger than this.
MAGIC_SYSRQ = yes;
LOCALVERSION = freeform localVersion;
LOCK_STAT = yes;
PROVE_LOCKING = yes;
FTRACE = yes;
STACKTRACE = yes;
IRQSOFF_TRACER = yes;
KGDB = yes;
# UBSAN is buggy on at least 6.1 and 6.6 for riscv64
UBSAN = if !isRiscv64 then yes else no;
BUG_ON_DATA_CORRUPTION = yes;
SCHED_STACK_END_CHECK = yes;
"64BIT" = yes;
SMP = yes;
# initramfs/initrd support
BLK_DEV_INITRD = yes;
PRINTK = yes;
PRINTK_TIME = yes;
# Support elf and #! scripts
BINFMT_ELF = yes;
BINFMT_SCRIPT = yes;
# Create a tmpfs/ramfs early at bootup.
DEVTMPFS = yes;
DEVTMPFS_MOUNT = yes;
TTY = yes;
SERIAL_8250 = yes;
SERIAL_8250_CONSOLE = yes;
PROC_FS = yes;
SYSFS = yes;
MODULES = yes;
MODULE_UNLOAD = yes;
# FW_LOADER = yes;
##
SYSVIPC = yes;
NET = yes;
PACKET = yes;
INET = yes;
NETDEVICES = yes;
NET_CORE = yes;
ETHERNET = yes;
PCI = yes;
NET_VENDOR_INTEL = yes;
E1000 = yes;
UNIX = yes;
EXPERT = yes;
TMPFS = yes;
MEMFD_CREATE = yes;
PID_NS = yes;
CGROUPS = yes;
SECCOMP = yes;
## BPF
DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT = yes;
DEBUG_INFO_SPLIT = no;
DEBUG_INFO_REDUCED = no;
DEBUG_INFO_BTF = yes;
BPF_SYSCALL = yes;
BPF_JIT = yes;
FUNCTION_TRACER = yes;
# Enable kprobes and kallsyms: https://www.kernel.org/doc/html/latest/trace/kprobes.html#configuring-kprobes
# Debug FS is be enabled (done above) to show registered kprobes in /sys/kernel/debug: https://www.kernel.org/doc/html/latest/trace/kprobes.html#the-kprobes-debugfs-interface
KPROBES = yes;
PERF_EVENTS = yes;
BPF_EVENTS = yes;
KPROBE_EVENTS = yes;
UPROBE_EVENTS = yes;
KALLSYMS_ALL = yes;
# Necessary for attaching sleepable fentry program
FUNCTION_ERROR_INJECTION = yes;
}
// x86_64SpecificConfig
// aarch64SpecificConfig
// riscv64SpecificConfig;
# Flags that get passed to generate-config.pl
generateConfigFlags = {
# Ignores any config errors (eg unused config options)
ignoreConfigErrors = false;
# Build every available module
autoModules = false;
preferBuiltin = false;
};
};
}