Aster Boese
30e5479de2
main/postmarketos-base: switch from doas to sudo-rs
...
The version of OpenBSD's doas packaged by Alpine had its last commit
21-02-2022. This in itself is not bad, but the issue is that in that time,
there have been many MRs and issues filed to the repo that see no action.
One major MR, that being a hardening patch against rowhammer attacks,
has layed stale since 03-03-2024. After Natanael Copa asked if the repo
was still maintained, the response was that it is low-priority.
As such switching to sudo-rs, despite its larger size and attack surface, makes
sense due to more users and thus more eyes on it performing analysis and fixing
security issues quicker. OpenBSD doas does not have this itself, and a low-usage
fork of it definitely does not. While there are snazzier, more modern
alternatives like run0, capsudo, or s6-sudo, none of these are in a state where
they can fully replace all the features that sudo provides.
sudo-rs was chosen over the original sudo due to a few factors. The first is
memory safety, as Rust generally solves that issue in the codebase, so a whole
class of possible vulns are eliminated. Second is that sudo-rs is already in
use by larger distributions like Canonical's Ubuntu, meaning that the user base
is already quite large, leading to similar amounts of eyes on the source code.
Third, sudo-rs has had support from the original authors of sudo, allowing the
project to avoid the pitfalls of the legacy C codebase. Finally, sudo-rs has
already had two fairly recent independent security audits, meaning that their
security posture is diligent enough to be trusted.
See https://github.com/trifectatechfoundation/sudo-rs/tree/main/docs/audit
In the future, any further switch in the privilege-escalation tool should keep
the sudo command, be it through a symlink, shim, or a binary itself. This is
maintained currently due to having installed doas-sudo-shim by default, but
more care should be taken in the future to not break user workflows.
Partially reverts 0f327af853
See https://gitlab.postmarketos.org/postmarketOS/pmaports/-/issues/4144
Signed-off-by: Aster Boese <asterboese@mailbox.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7967 >
2026-03-18 17:36:30 +00:00
Ingo Reitz
e96de8dd47
main/cros-keyboard-map: update to 0_git20251218
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8174 >
2026-03-18 17:22:28 +00:00
Federico Amedeo Izzo
25b69f8ce3
firmware-nothing-spacewar: Change hexagonfs files path to fix bootloop.
...
The bootloop on spacewar was caused by ADSP crash due to hexagonfs files
being installed in the wrong path ("nothing" instead of "Nothing").
The path is derived by hexagonfs based on dts properties, we should
match that.
Additionally this makes sensors work on the phone.
See https://github.com/mainlining/firmware-nothing-spacewar/pull/1
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8196 >
2026-03-18 17:53:24 +01:00
TuxMan
af799f41e5
sony-tulip: move from downstream to testing and make myself as the maintainer
...
[ci:skip-vercheck]
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8185 >
2026-03-18 14:46:41 +01:00
Antoine Martin
078b5564c4
linux-pine64-pinenote: upgrade to 6.19.8, enable ultra suspend
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8190 >
2026-03-18 06:31:14 +00:00
Achill Gilgenast
2478dbed46
main/postmarketos-base-ui-gnome: remove fractional scaling override
...
Has been stablized and enabled by default in upstream GNOME 50, which is
in pmOS edge. GNOME Mobile which is on 48, had it enabled anyway.
Ref: <https://gitlab.gnome.org/GNOME/mutter/-/commit/74965cdb047df0f2159d53cb12770949924c60e9 >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8194 >
2026-03-17 11:31:57 +00:00
Achill Gilgenast
5a60da6d16
{temp,systemd}/gnome-shell-mobile: backport some GNOME 50 patches to GNOME 48
...
Closes: https://gitlab.postmarketos.org/postmarketOS/pmaports/-/issues/4409
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8193 >
2026-03-17 12:17:02 +01:00
Aelin
09e0c6f079
linux-postmarketos-mainline: Upgrade to 7.0_rc4
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8187 >
2026-03-16 20:46:16 +00:00
Achill Gilgenast
d15637099c
systemd/gdm: fix logging into user-mode
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8189 >
2026-03-16 14:58:42 +01:00
Aelin
49b4848ae3
systemd/systemd-stage0: upgrade to 259.5
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8176 >
2026-03-16 00:44:33 +00:00
Aelin
13ba50b337
systemd/systemd: upgrade to 259.5
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8176 >
2026-03-16 00:44:33 +00:00
Achill Gilgenast
605969d5b5
main/postmarketos-base-ui-gnome: recommend gnome-user-share & rygel
...
Enables the "Sharing"-panel in g-c-c for file & media sharing between
local computers.
Don't need a user preset, since they should be disabled by default, but
can be enabled in g-c-c.
Might need more configuration for mDNS/Avahi/zeroconf to work, but can be done
seperately, see
<https://gitlab.postmarketos.org/postmarketOS/pmaports/-/issues/1380 > &
<https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8102 >
Closes: https://gitlab.postmarketos.org/postmarketOS/pmaports/-/issues/3256
[ci:skip-vercheck]: pmb_recommends
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8184 >
2026-03-15 18:23:53 +00:00
TuxMan
442d503ae5
device-sony-yuga: fix DTB file path with mainline kernel
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8179 >
2026-03-15 18:05:08 +00:00
Aster Boese
fc9ba9b787
.gitlab: update issue template to reflect new default branch
...
Signed-off-by: Aster Boese <asterboese@mailbox.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8183 >
2026-03-15 17:47:41 +00:00
Aster Boese
5da1b74db0
ci: replace master strings with main
...
Signed-off-by: Aster Boese <asterboese@mailbox.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8183 >
2026-03-15 17:47:40 +00:00
Achill Gilgenast
9ca92f0d6d
systemd/gnome-settings-daemon: remove
...
- user units are upstream
- sharing-panel is fine if linked against elogind
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8178 >
2026-03-15 16:25:20 +00:00
Achill Gilgenast
1de8e0bc48
systemd/gdm: upgrade to 50.0
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8178 >
2026-03-15 16:25:20 +00:00
Achill Gilgenast
ffc5605453
systemd/gnome-shell: upgrade to 50.0
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8178 >
2026-03-15 16:25:20 +00:00
Achill Gilgenast
afdfedf26d
systemd/mutter: upgrade to 50.0
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8178 >
2026-03-15 16:25:20 +00:00
Achill Gilgenast
a00bb2161b
systemd/gnome-session: upgrade to 50.0
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8178 >
2026-03-15 16:25:20 +00:00
Aster Boese
7d8b935704
treewide: change pmaports-specific master strings to main
...
Signed-off-by: Aster Boese <asterboese@mailbox.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7566 >
2026-03-15 13:54:37 +00:00
Oliver Smith
f4ca5fb76c
channels.cfg: branch_pmaports: master -> main
...
With this change, pmbootstrap will know that the branch is called "main"
from now on.
Related: https://docs.postmarketos.org/pmcr/main/0005-default-git-branch-rename.html
Related: https://gitlab.postmarketos.org/postmarketOS/postmarketos/-/issues/122
Signed-off-by: Oliver Smith <ollieparanoid@postmarketos.org >
2026-03-15 12:39:44 +01:00
Mithil Bavishi
61001d4233
device/community: Update maintainer details
...
Use correct name and email address for devices I maintain
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8180 >
2026-03-15 10:43:05 +00:00
Aster Boese
fde59e75e1
linux-postmarketos-apple-{4,16}k: add note to modify at same time
...
Both the kernels are practially the same, with only one config option changed.
Thus, any changes done to one shall be done to the other.
Signed-off-by: Aster Boese <asterboese@mailbox.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7850 >
2026-03-15 05:52:37 +01:00
Aster Boese
b3ec402e42
linux-postmarketos-apple-{4,16}k: upgrade to 6.19.0 and sync kconfig
...
Upgrades both kernels to 6.19.0.
Syncs both kernel's kconfigs with kconfigcheck and enables the rust
kconfigcheck category. Rust is enabled as future-proofing in-case pmOS enables
a Rust option so devices can be tested with Rust enabled beforehand.
Signed-off-by: Aster Boese <asterboese@mailbox.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7850 >
2026-03-15 05:51:44 +01:00
Aster Boese
d7ee136f4e
testing/m1n1-apple-idevice: upgrade to 1.5.0_git20250208
...
Signed-off-by: Aster Boese <asterboese@mailbox.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7850 >
2026-03-14 21:31:23 +01:00
Clayton Craft
f6a9e0e277
systemd/postmarketos-base-systemd: update list of maintainers
...
Signed-off-by: Clayton Craft <craftyguy@postmarketos.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8162 >
2026-03-14 14:46:15 +00:00
Aelin
1f12afeeea
cross/systemd-boot-x86: upgrade to 259.5
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8177 >
2026-03-14 11:32:10 +00:00
Aelin
a3e0b0db8d
ci: Require maintainers for new packages
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8171 >
2026-03-14 11:23:21 +00:00
Aelin
0acec3c456
linux-postmarketos-lts: Upgrade to 6.18.18
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8173 >
2026-03-14 06:53:37 +00:00
Aelin
a7d875d095
linux-postmarketos-stable: Upgrade to 6.19.8
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8172 >
2026-03-13 22:16:08 +01:00
postmarketOS CI
b79395e612
linux-next: upgrade to next-20260313
2026-03-13 16:38:28 +00:00
polyfloyd
37569a73bd
Add new kconfig flags for Docker
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8002 >
2026-03-13 15:36:07 +00:00
Aelin
14b19d975c
linux-postmarketos-lts: Upgrade to 6.18.17
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8160 >
2026-03-13 15:11:02 +00:00
Aelin
cc8396b5d0
linux-postmarketos-stable: Upgrade to 6.19.7
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8159 >
2026-03-13 15:07:50 +00:00
Aelin
577667f338
kconfigcheck: BPF_LSM depends on SECURITY
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8168 >
2026-03-13 13:01:48 +00:00
Achill Gilgenast
58e2497f91
systemd/gnome-logs: upgrade to 50.0
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8167 >
2026-03-13 11:18:58 +00:00
Aelin
59915347fa
systemd/systemd-stage0: upgrade to 259.4
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8164 >
2026-03-13 11:16:58 +00:00
Aelin
a82fcd42d9
systemd/systemd: upgrade to 259.4
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8164 >
2026-03-13 11:16:58 +00:00
Raymond Hackley
7cc1def416
linux-postmarketos-qcom-msm8226: add zinitix touchscreen and regulator haptic for ms013g
...
Manual kconfig changes:
* CONFIG_INPUT_REGULATOR_HAPTIC=m
* CONFIG_TOUCHSCREEN_ZINITIX=m
Link: https://lore.kernel.org/r/20240630132859.2885-3-raymondhackley@protonmail.com
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7299 >
2026-03-13 07:30:09 +00:00
postmarketOS CI
7ccf25268d
linux-next: upgrade to next-20260312
2026-03-13 05:38:35 +00:00
Aelin
a81bd1f150
cross/systemd-boot-x86: upgrade to 259.4
...
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8165 >
2026-03-12 20:20:31 +00:00
Pablo Correa Gómez
2e12f24b15
docs: add documentation on how hw-ci integration works in this repo
...
[ci:skip-vercheck] gitlab-ci.yml.j2 files changed
Signed-off-by: Pablo Correa Gómez <pabloyoyoista@postmarketos.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7881 >
2026-03-12 19:17:36 +00:00
Pablo Correa Gómez
cb182b59ca
ci: don't set the CI_TRON_KERNEL_CMDLINE__DEVICEINFO globally
...
This breaks the oneplus-fajita, since its own console argument is not
picked. And the other options don't make sense there anyway.
Signed-off-by: Pablo Correa Gómez <pabloyoyoista@postmarketos.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7881 >
2026-03-12 19:17:36 +00:00
Pablo Correa Gómez
ee7c30c4f6
ci: skip "docs" folder as part of get_changed_packages test
...
Signed-off-by: Pablo Correa Gómez <pabloyoyoista@postmarketos.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7881 >
2026-03-12 19:17:36 +00:00
Pablo Correa Gómez
cd91997729
main/postmarketos-initramfs: don't halt execution if IN_CI
...
This is already done in the CI hook
Signed-off-by: Pablo Correa Gómez <pabloyoyoista@postmarketos.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7881 >
2026-03-12 19:17:36 +00:00
Pablo Correa Gómez
37980a2ac7
main/postmarketos-test: add myself as Co-Maintainer
...
Signed-off-by: Pablo Correa Gómez <pabloyoyoista@postmarketos.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7881 >
2026-03-12 19:17:36 +00:00
Pablo Correa Gómez
e510376e8b
main/postmarketos-mkinitfs-hook-ci: add myself as Co-Maintainer
...
Signed-off-by: Pablo Correa Gómez <pabloyoyoista@postmarketos.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7881 >
2026-03-12 19:17:36 +00:00
Pablo Correa Gómez
61f52ad05c
main/postmarketos-mkinitfs-hook-ci: halt booting process after finishing
...
This is currently done in the initramfs itself, and there's no need to
leak that information, so follow-up commits will remove it from the
initramfs.
Signed-off-by: Pablo Correa Gómez <pabloyoyoista@postmarketos.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7881 >
2026-03-12 19:17:36 +00:00
Pablo Correa Gómez
864a894594
main/bootrr: upgrade to git20240706
...
Which includes the patches we were carrying
Signed-off-by: Pablo Correa Gómez <pabloyoyoista@postmarketos.org >
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7881 >
2026-03-12 19:17:32 +00:00