ARG BUILD_IMAGE

FROM ${BUILD_IMAGE} AS kernel-build

ARG BUILD_IMAGE

RUN apk add \

argp-standalone \

automake \

bash \

bc \

binutils-dev \

bison \

build-base \

curl \

diffutils \

flex \

git \

gmp-dev \

gnupg \

installkernel \

kmod \

elfutils-dev \

libunwind-dev \

linux-headers \

mpc1-dev \

mpfr-dev \

ncurses-dev \

openssl \

openssl-dev \

patch \

rsync \

sed \

squashfs-tools \

tar \

xz \

xz-dev \

zlib-dev

ARG KERNEL_VERSION

ARG KERNEL_SERIES

ARG EXTRA

ARG DEBUG

COPY / /

RUN mkdir -p /out/src

RUN KERNEL_MAJOR=$(echo ${KERNEL_VERSION} | cut -d . -f 1) && \

KERNEL_MAJOR=v${KERNEL_MAJOR}.x && \

KERNEL_SOURCE=https://www.kernel.org/pub/linux/kernel/${KERNEL_MAJOR}/linux-${KERNEL_VERSION}.tar.xz && \

KERNEL_SHA256_SUMS=https://www.kernel.org/pub/linux/kernel/${KERNEL_MAJOR}/sha256sums.asc && \

KERNEL_PGP2_SIGN=https://www.kernel.org/pub/linux/kernel/${KERNEL_MAJOR}/linux-${KERNEL_VERSION}.tar.sign && \

curl -fsSLO ${KERNEL_SHA256_SUMS} && \

gpg2 -q --import keys.asc && \

gpg2 --verify sha256sums.asc && \

KERNEL_SHA256=$(grep linux-${KERNEL_VERSION}.tar.xz sha256sums.asc | cut -d ' ' -f 1) && \

[ -f linux-${KERNEL_VERSION}.tar.xz ] || curl -fsSLO ${KERNEL_SOURCE} && \

echo "${KERNEL_SHA256} linux-${KERNEL_VERSION}.tar.xz" | sha256sum -c - && \

xz -d linux-${KERNEL_VERSION}.tar.xz && \

curl -fsSLO ${KERNEL_PGP2_SIGN} && \

gpg2 --verify linux-${KERNEL_VERSION}.tar.sign linux-${KERNEL_VERSION}.tar && \

cat linux-${KERNEL_VERSION}.tar | tar --absolute-names -x && mv /linux-${KERNEL_VERSION} /linux && \

printf "KERNEL_SOURCE=${KERNEL_SOURCE}\n" > /out/kernel-source-info

WORKDIR /tmp

ENV UCODE_REPO=https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files

ENV UCODE_COMMIT=microcode-20210608

RUN set -e && \

if [ $(uname -m) == x86_64 ]; then \

git clone ${UCODE_REPO} ucode && \

cd ucode && \

git checkout ${UCODE_COMMIT} && \

iucode_tool --normal-earlyfw --write-earlyfw=/out/intel-ucode.cpio ./intel-ucode && \

cp license /out/intel-ucode-license.txt && \

mkdir -p /lib/firmware && \

cp -rav ./intel-ucode /lib/firmware; \

fi

WORKDIR /linux

RUN set -e && \

if [ -n "${EXTRA}" ] && [ -d /patches-${KERNEL_SERIES}${EXTRA} ]; then \

echo "Patching ${EXTRA} kernel"; \

for patch in /patches-${KERNEL_SERIES}${EXTRA}/*.patch; do \

echo "Applying $patch"; \

patch -t -F0 -N -u -p1 < "$patch"; \

done; \

fi

RUN set -e && \

if [ -d /patches-${KERNEL_SERIES} ]; then \

for patch in /patches-${KERNEL_SERIES}/*.patch; do \

echo "Applying $patch"; \

patch -t -F0 -N -u -p1 < "$patch"; \

done; \

fi

RUN tar cJf /out/src/linux.tar.xz /linux

RUN case $(uname -m) in \

x86_64) \

KERNEL_DEF_CONF=/linux/arch/x86/configs/x86_64_defconfig; \

;; \

aarch64) \

KERNEL_DEF_CONF=/linux/arch/arm64/configs/defconfig; \

;; \

esac && \

cp /config-${KERNEL_SERIES}-$(uname -m) ${KERNEL_DEF_CONF}; \

if [ -n "${EXTRA}" ] && [ -f "/config-${KERNEL_SERIES}-$(uname -m)${EXTRA}" ]; then \

cat /config-${KERNEL_SERIES}-$(uname -m)${EXTRA} >> ${KERNEL_DEF_CONF}; \

fi; \

sed -i "s/CONFIG_LOCALVERSION=\"-linuxkit\"/CONFIG_LOCALVERSION=\"-linuxkit${EXTRA}${DEBUG}\"/" ${KERNEL_DEF_CONF}; \

if [ -n "${DEBUG}" ]; then \

sed -i 's/CONFIG_PANIC_ON_OOPS=y/# CONFIG_PANIC_ON_OOPS is not set/' ${KERNEL_DEF_CONF}; \

cat /config${DEBUG} >> ${KERNEL_DEF_CONF}; \

fi && \

make defconfig && \

make oldconfig && \

if [ -z "${EXTRA}" ] && [ -z "${DEBUG}" ]; then diff -u .config ${KERNEL_DEF_CONF}; fi

RUN make -j "$(getconf _NPROCESSORS_ONLN)" KCFLAGS="-fno-pie" && \

case $(uname -m) in \

x86_64) \

cp arch/x86_64/boot/bzImage /out/kernel; \

;; \

aarch64) \

cp arch/arm64/boot/Image.gz /out/kernel; \

;; \

esac && \

cp System.map /out && \

([ -n "${DEBUG}" ] && cp vmlinux /out || true)

RUN make INSTALL_MOD_PATH=/tmp/kernel-modules modules_install && \

( DVER=$(basename $(find /tmp/kernel-modules/lib/modules/ -mindepth 1 -maxdepth 1)) && \

cd /tmp/kernel-modules/lib/modules/$DVER && \

rm build source && \

ln -s /usr/src/linux-headers-$DVER build ) && \

case $(uname -m) in \

aarch64) \

make INSTALL_DTBS_PATH=/tmp/kernel-modules/boot/dtb dtbs_install; \

;; \

esac && \

( cd /tmp/kernel-modules && tar cf /out/kernel.tar . )

RUN mkdir -p /tmp/kernel-headers/usr && \

make INSTALL_HDR_PATH=/tmp/kernel-headers/usr headers_install && \

( cd /tmp/kernel-headers && tar cf /out/kernel-headers.tar usr )

RUN DVER=$(basename $(find /tmp/kernel-modules/lib/modules/ -mindepth 1 -maxdepth 1)) && \

dir=/tmp/usr/src/linux-headers-$DVER && \

mkdir -p $dir && \

cp /linux/.config $dir && \

cp /linux/Module.symvers $dir && \

find . -path './include/*' -prune -o \

-path './arch/*/include' -prune -o \

-path './scripts/*' -prune -o \

-type f \( -name 'Makefile*' -o -name 'Kconfig*' -o -name 'Kbuild*' -o \

-name '*.lds' -o -name '*.pl' -o -name '*.sh' -o \

-name 'objtool' -o -name 'fixdep' -o -name 'randomize_layout_seed.h' \) | \

tar cf - -T - | (cd $dir; tar xf -) && \

( cd /tmp && tar cf /out/kernel-dev.tar usr/src )

RUN printf "${BUILD_IMAGE}" > /out/kernel-builder

FROM scratch

ENTRYPOINT []

CMD []

WORKDIR /

COPY --from=kernel-build /out/* /