mirror of
https://github.com/armbian/build.git
synced 2026-04-10 08:01:06 +02:00
c4b99b47d4
Board/family separation: - Move boot chain URLs (U-Boot, ATF, RCW) from family to board config - Family config now requires board to set all platform-specific variables - Split bootenv into family-generic ls1046a.txt and board-specific gateway-dk.txt - Move fancontrol/lm-sensors install and IP forwarding to board config - Delete unused family-level BSP files (packages/bsp/ls1046a/) Extension hardening: - Replace bare git clone with fetch_from_repo (fmlib, fmc, libcli, FMAN ucode) - Replace trap EXIT with Armbian add_cleanup_handler API - Add exit_with_error to all chroot build commands and depmod - Add prerm/postrm scripts to ASK .deb package - Remove unnecessary host build deps (chroot-only libraries) - Compute kernel version once (ASK_KERNEL_VER), remove 3x duplication - Quote variables in chroot command strings - Use GIT_CONFIG_COUNT env vars instead of git config --global - Move conntrack sysctl to packages/bsp/ (no inline heredocs) - Fix DEBIAN/control comment (dpkg-deb rejects # comments) - Make ASK extension optional (ENABLE_ASK=yes by default) - Use BOOTENV_FILE for mkenvimage (was hardcoded to ls1046a.txt) Kernel config: - Enable KASLR, FORTIFY_SOURCE, HARDENED_USERCOPY - Disable SLUB_TINY (switch to standard SLUB) - Enable NF_REJECT_IPV4, IP_NF_TARGET_REJECT, NFT_REJECT, NET_SCH_INGRESS - Enable NET_ACT_POLICE, NET_ACT_GACT, NF_FLOW_TABLE, NFT_LIMIT, NFT_REDIR - Enable PSTORE + MTD_PSTORE with pstore.backend=mtdoops boot args - Enable SOFTLOCKUP_DETECTOR, DEBUG_FS_DISALLOW_MOUNT - Disable PM_DEBUG, UIO drivers, MLX4/MLX5, HFSPLUS, UFS - Switch NO_HZ_FULL to NO_HZ_IDLE (matches NXP reference) Driver fixes: - sfp-led: move debug_count into per-port struct - sfp-led: replace rtnl_lock with rtnl_trylock to prevent deadlock - sfp-led: consistent pushd/make pattern (matches lp5812) Patches: - DTS: fix typo "genenerator", remove redundant status="okay" - DTS: update header comment, remove unused PWM include - DTS: update patch hunk line counts - INA234: remove Yocto Upstream-Status header