kernel/kernel-rt/debian/deb_patches/0018-Debian-Enable-WireGuard-config.patch
Jiping Ma 164d95f290 Kernel: Enable the use of WireGuard secure network tunnel.
This commit enables WIREGUARD and its related kernel configuration
options to support WireGuard secure network tunnel.

Verification:
- CentOS-based StarlingX
 - An ISO image was successfully built with this change.
 - There is wireguard.ko in kernel-core package.
 - Install the lab with ISO successfully.
 - Can modprobe wireguard successfully.

- Debian-based StarlingX
 - An ISO image was successfully built with this change.
 - Install the lab with ISO successfully.
 - Can modprobe wireguard successfully.

Closes-Bug: 1984125

Signed-off-by: Jiping Ma <jiping.ma2@windriver.com>
Change-Id: I31c5420fe50e49c98e52618c244223d1d2e059b1
2022-09-18 22:05:52 -04:00

76 lines
2.4 KiB
Diff

From 3e46fe44511727f3eb42bdeabfc374ae03c038bb Mon Sep 17 00:00:00 2001
From: Jiping Ma <jiping.ma2@windriver.com>
Date: Wed, 14 Sep 2022 20:35:22 -0700
Subject: [PATCH] Debian: Enable WireGuard config
This commit enables WIREGUARD and its related kernel configuration
options to support WireGuard secure network tunnel.
Signed-off-by: Jiping Ma <jiping.ma2@windriver.com>
---
debian/config/amd64/none/config | 21 +++++++++++++--------
1 file changed, 13 insertions(+), 8 deletions(-)
diff --git a/debian/config/amd64/none/config b/debian/config/amd64/none/config
index 0d66cef..37c250a 100644
--- a/debian/config/amd64/none/config
+++ b/debian/config/amd64/none/config
@@ -2372,7 +2372,8 @@ CONFIG_MII=m
CONFIG_NET_CORE=y
CONFIG_BONDING=m
CONFIG_DUMMY=m
-# CONFIG_WIREGUARD is not set
+CONFIG_WIREGUARD=m
+# CONFIG_WIREGUARD_DEBUG is not set
# CONFIG_EQUALIZER is not set
# CONFIG_NET_FC is not set
CONFIG_IFB=m
@@ -5753,7 +5754,7 @@ CONFIG_CRYPTO_ECDH=m
# CONFIG_CRYPTO_ECRDSA is not set
# CONFIG_CRYPTO_SM2 is not set
# CONFIG_CRYPTO_CURVE25519 is not set
-# CONFIG_CRYPTO_CURVE25519_X86 is not set
+CONFIG_CRYPTO_CURVE25519_X86=m
#
# Authenticated Encryption with Associated Data
@@ -5802,7 +5803,7 @@ CONFIG_CRYPTO_CRC32_PCLMUL=m
# CONFIG_CRYPTO_XXHASH is not set
# CONFIG_CRYPTO_BLAKE2B is not set
# CONFIG_CRYPTO_BLAKE2S is not set
-# CONFIG_CRYPTO_BLAKE2S_X86 is not set
+CONFIG_CRYPTO_BLAKE2S_X86=m
CONFIG_CRYPTO_CRCT10DIF=y
CONFIG_CRYPTO_CRCT10DIF_PCLMUL=m
CONFIG_CRYPTO_GHASH=y
@@ -5898,17 +5899,21 @@ CONFIG_CRYPTO_HASH_INFO=y
#
CONFIG_CRYPTO_LIB_AES=y
CONFIG_CRYPTO_LIB_ARC4=m
-# CONFIG_CRYPTO_LIB_BLAKE2S is not set
+CONFIG_CRYPTO_ARCH_HAVE_LIB_BLAKE2S=m
+CONFIG_CRYPTO_LIB_BLAKE2S_GENERIC=m
+CONFIG_CRYPTO_LIB_BLAKE2S=m
CONFIG_CRYPTO_ARCH_HAVE_LIB_CHACHA=m
CONFIG_CRYPTO_LIB_CHACHA_GENERIC=m
-# CONFIG_CRYPTO_LIB_CHACHA is not set
-# CONFIG_CRYPTO_LIB_CURVE25519 is not set
+CONFIG_CRYPTO_LIB_CHACHA=m
+CONFIG_CRYPTO_ARCH_HAVE_LIB_CURVE25519=m
+CONFIG_CRYPTO_LIB_CURVE25519_GENERIC=m
+CONFIG_CRYPTO_LIB_CURVE25519=m
CONFIG_CRYPTO_LIB_DES=m
CONFIG_CRYPTO_LIB_POLY1305_RSIZE=11
CONFIG_CRYPTO_ARCH_HAVE_LIB_POLY1305=m
CONFIG_CRYPTO_LIB_POLY1305_GENERIC=m
-# CONFIG_CRYPTO_LIB_POLY1305 is not set
-# CONFIG_CRYPTO_LIB_CHACHA20POLY1305 is not set
+CONFIG_CRYPTO_LIB_POLY1305=m
+CONFIG_CRYPTO_LIB_CHACHA20POLY1305=m
CONFIG_CRYPTO_LIB_SHA256=y
CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_DEV_PADLOCK is not set
--
2.35.1