Commit Graph
14 Commits
Author SHA1 Message Date
Song Guo 60949a88a3 ANDROID: enable open-dice for x86_64 GKI
With recent patches to Kernel, open-dice supports ACPI device
configuration, this CL flips the flag for enabling it.

Bug: 510177847
Test: build
Change-Id: If9db8e6084883eae2c25370aafeadb624485c5bd
Signed-off-by: Song Guo <songguo@google.com>
2026-08-06 00:28:27 -07:00
Carlos Llamas b9e7d95076 ANDROID: kunit: add backtrace-suppression test module
Upstream added a new backtrace-suppression kunit test module that builds
by default with CONFIG_KUNIT_TEST, so add it to the list of kunit common
modules.

Fixes: bbc960d009 ("kunit: Add backtrace suppression self-tests")
Change-Id: I954b297b363b229d7458aabb553077df5cfbe28b
Signed-off-by: Carlos Llamas <cmllamas@google.com>
2026-07-28 10:33:11 -07:00
Will McVicker 4a8e512506 ANDROID: gki_defconfig: arm64: Enable the Wonder driver
This adds the Android Wonder Wi-Fi virtual device driver as a GKI
module.

Bug: 505327866
Change-Id: I015c1ff183805701d02495f8e4f45ddf84175282
Signed-off-by: Will McVicker <willmcvicker@google.com>
2026-06-12 10:52:17 -07:00
wuwei1 05c6fbd18c ANDROID: GKI: enable CONFIG_TCP_CONG_BBR
Enable support for BBR (Bottleneck Bandwidth and RTT) TCP congestion
control algorithm, which maximizes network utilization under certain
scenarios. Note this still maintains CUBIC as the default algorithm.

Bug: 362198193
Change-Id: I2885893e565f91d14cb2c139d975e4abfee80daf
Signed-off-by: wuwei1 <11150500@vivo.corp-partner.google.com>
Signed-off-by: Carlos Llamas <cmllamas@google.com>
(cherry picked from commit ee7395c4cb9b2e56e8f2dae5ac4a9f9cb9d78192)
(cherry picked from commit eadaba3bbc28dff77f64d21aec830b72f4e235de)
2026-06-11 16:35:50 -07:00
Eric Biggers 6f25e0da29 ANDROID: GKI: Enable crc_kunit and more crypto KUnit tests
Enable crc_kunit and some recently-added crypto tests.  The code tested
by these tests is already enabled in gki_defconfig.

Test: adb root; kernel/tests/tools/run_test_only.sh -s 0.0.0.0:6520 \
      -t kunit:crc_kunit \
      -t kunit:aes_cbc_macs_kunit \
      -t kunit:chacha20poly1305_kunit \
      -t kunit:ghash_kunit \
      -t kunit:nh_kunit \
      -td ~/src/android-mainline/out/virtual_device_x86_64/dist/tests.zip
Bug: 486247481
Change-Id: Ia83cf8c6a49bd5fac1fd763342825316535b5694
Signed-off-by: Eric Biggers <ebiggers@google.com>
2026-06-11 06:06:14 -07:00
Carlos Llamas 346219273d ANDROID: GKI: disable sha3_kunit module
CRYPTO_LIB_SHA3 is no longer implicitly enabled for non-FIPS kernels
after commit 4061bc8c03 ("crypto: rng - Don't pull in DRBG when
CRYPTO_FIPS=n"). Since this library is no longer built for GKI, let's
also disable its corresponding kunit testing module as its dependencies
are no longer met:

 | ERROR: CONFIG_CRYPTO_LIB_SHA3_KUNIT_TEST: actual '', expected 'm'

Cc: Eric Biggers <ebiggers@google.com>
Fixes: 4061bc8c03 ("crypto: rng - Don't pull in DRBG when CRYPTO_FIPS=n")
Change-Id: I38be6547adf6703dae6616fe9322d8481bcd4383
Signed-off-by: Carlos Llamas <cmllamas@google.com>
2026-05-20 19:38:48 +00:00
Will McVicker ae88169c77 Revert "ANDROID: GKI: cfg/mac 80211 as vendor modules"
This reverts commit 803c55fa56 to pull in
the cfg/mac80211 modules to GKI.

Bug: 505327866
Signed-off-by: Will McVicker <willmcvicker@google.com>
[willmcvicker: resolve trivial merge conflicts]
Change-Id: Icbaec0963cf0f7430c1f79e6b04df717789519d8
2026-05-13 16:17:22 -07:00
Carlos Llamas 18b8f659ef ANDROID: ext4: update kunit test module name
The ext4-inode-test.ko module has been renamed upstream to ext4-test.ko
so update our bazel and tradefed files accordingly.

Fixes: 519b76ac0b ("ext4: fix mballoc-test.c is not compiled when EXT4_KUNIT_TESTS=M"
Change-Id: I42c7ca1d7d0d280d90cac669dbd5deae19668e54
Signed-off-by: Carlos Llamas <cmllamas@google.com>
2026-04-22 21:28:00 +00:00
Carlos Llamas f913cf91bd ANDROID: GKI: defconfig: implicit POWER_SEQUENCING
Upstream now selects POWER_SEQUENCING indirectly through PCIE_QCOM ->
PCI_PWRCTRL_SLOT -> POWER_SEQUENCING, so we no longer need to enable
this option explicitly. However, PCIE_QCOM is a built-in option only,
which forces the other tristate options to also be built-in.

Cc: Todd Kjos <tkjos@google.com>
Fixes: 9cb64f61ec ("PCI/pwrctrl: Add PCIe M.2 connector support")
Change-Id: I0cd66aa0d65ca2ec3ef549e6dce9aadc0c749d6d
Signed-off-by: Carlos Llamas <cmllamas@google.com>
2026-03-28 11:39:00 -07:00
HONG Yifan e9fa963b5c ANDROID: bazel: disable rust on --kasan_sw_tags.
When --kasan, --kasan_sw_tags or --kasan_generic is specified, do not
build rust modules.

This change alone has no effect, but it is created so that it can be
easily cherry-picked to other branches.

Bug: 485668317
Change-Id: I59d4c983a4adbd759fdc0de04a17b6a31d2cb386
Signed-off-by: HONG Yifan <elsk@google.com>
2026-03-02 17:19:43 -08:00
HONG Yifan 4b62da2082 ANDROID: bazel: delete unused variable.
The COMMON_GKI_MODULES_LIST is not used anywhere. This is ensured
by visibility private of modules_private.bzl.

Bug: 485668317
Change-Id: I035497f7efb3d67e7f05d831daf11eee13399d12
Signed-off-by: HONG Yifan <elsk@google.com>
2026-02-27 06:57:15 -08:00
Eric Biggers c2b30d15f3 ANDROID: GKI: Enable crypto library KUnit tests
The kernel's crypto library now has KUnit tests.  Enable them as modules
in gki_defconfig for both arm64 and x86_64, and add them to the Tradefed
test config.

Specifically, enable the tests for algorithms that are already enabled
in the kconfig.  However, that just means all the tests, since all
algorithms with KUnit tests are already enabled in gki_defconfig.

Bug: 486247481
Test: kernel/tests/tools/run_test_only.sh -s 0.0.0.0:6520 \
      -t kunit:blake2b_kunit \
      -t kunit:blake2s_kunit \
      -t kunit:curve25519_kunit \
      -t kunit:md5_kunit \
      -t kunit:poly1305_kunit \
      -t kunit:polyval_kunit \
      -t kunit:sha1_kunit \
      -t kunit:sha224_kunit \
      -t kunit:sha256_kunit \
      -t kunit:sha3_kunit \
      -t kunit:sha384_kunit \
      -t kunit:sha512_kunit \
      -td ~/src/android-mainline/out/virtual_device_x86_64/dist/tests.zip
Test: same as above but with arm64 cuttlefish instead of x86_64 cuttlefish
Change-Id: Ie9af6c77deead6b9d6add82fff901cff56641ff7
Signed-off-by: Eric Biggers <ebiggers@google.com>
2026-02-24 13:54:48 -08:00
Lee Jones 1f6e8eeef3 Revert "ANDROID: GKI: enable CONFIG_TLS=m as a GKI module"
This reverts commit 1b5a5cb71d.

CONFIG_TLS introduces and unacceptable attack surface.  Since it was
enabled in December 2024, we have received an influx of security reports
which have been directly attributable to the aforementioned commit.  To
ensure a greater level of system integrity going forward, we are
disabling its use completely.

BoringSSL remains the sole approved implementation of TLS in Android.
Current users of CONFIG_TLS should convert their workflows back over to
BoringSSL immediately.

Bug: 459542688
Change-Id: Ifb828e6fcb7f8fda75a50a3338dbdafe6c9de4a7
Signed-off-by: Lee Jones <joneslee@google.com>
2026-01-12 15:14:21 +00:00
HONG Yifan fd19bf440c ANDROID: kleaf: move Bazel files to bazel/ folder.
Move most bazel files, like abi.bzl and modules.bzl, to the
bazel/ folder. This is so that our top-level directory
is clean from Android-specific files.

Re-export some symbols in the top-level modules.bzl file. This is
so that we still allow mixed builds to use it.

Bug: 448148817
Change-Id: Id6b7565c4de57fb8951d98896e027657d456a75f
Signed-off-by: HONG Yifan <elsk@google.com>
2025-10-02 13:02:57 -07:00