Automatic kernel config rewrite

[github-actions]

Rewrite kernel configs

What this PR does

• Regenerates and synchronizes Linux kernel config fragments across boards/families based on the prepared inventory.
• Runs ./compile.sh rewrite-kernel-config for each scheduled (family, branch) and aggregates all changes into one PR.
• No userspace changes; only Kconfig option updates (enable/disable/modules/values) aligned with the targeted kernel branches.

How it was produced

This PR is produced from this GHA script.

1. Built a matrix: ./compile.sh inventory-boards (deduped, sanitized).
2. Executed rewrite-kernel-config per matrix.
3. Collected only changed files from each job as artifacts; aggregated and committed them here.

Review tips

• Skim the table below for big deltas; open those configs to verify intent.
• If a particular change is undesirable, comment on that file and we can exclude/adjust and re-run.

Files changed

File	+	-	Δ
config/kernel/linux-filogic-current.config	101	7	94
config/kernel/linux-genio-collabora.config	48	73	-25
config/kernel/linux-imx6-current.config	1	1	0
config/kernel/linux-imx6-edge.config	12	47	-35
config/kernel/linux-k3-beagle-edge.config	100	3	97
config/kernel/linux-k3-current.config	6	16	-10
config/kernel/linux-meson-current.config	1	0	1
config/kernel/linux-meson64-current.config	0	2	-2
config/kernel/linux-meson64-edge.config	0	2	-2
config/kernel/linux-mt7623-current.config	7	1	6
config/kernel/linux-mvebu-current.config	3	4	-1
config/kernel/linux-mvebu-edge.config	10	35	-25
config/kernel/linux-rk35xx-vendor.config	11	3	8
config/kernel/linux-rockchip-current.config	3	2	1
config/kernel/linux-rockchip-edge.config	10	29	-19
config/kernel/linux-rockchip-vendor.config	108	3	105
config/kernel/linux-rockchip64-current.config	4	6	-2
config/kernel/linux-sm8550-current.config	154	2	152
config/kernel/linux-sm8550-edge.config	154	2	152
config/kernel/linux-spacemit-current.config	18	10	8
config/kernel/linux-spacemit-edge.config	19	4	15
config/kernel/linux-starfive2-vendor.config	164	8	156
config/kernel/linux-sun55iw3-syterkit-legacy.config	178	1	177
config/kernel/linux-sunxi64-edge.config	1	26	-25
config/kernel/linux-uefi-arm64-cloud.config	110	3	107
config/kernel/linux-uefi-arm64-current.config	2	3	-1
config/kernel/linux-uefi-arm64-legacy.config	2	2	0
config/kernel/linux-uefi-loong64-current.config	2	4	-2
config/kernel/linux-uefi-riscv64-current.config	4	1	3
config/kernel/linux-uefi-riscv64-legacy.config	12	3	9
config/kernel/linux-uefi-x86-cloud.config	283	182	101
config/kernel/linux-uefi-x86-current.config	1	3	-2
config/kernel/linux-uefi-x86-legacy.config	1	6	-5
config/kernel/linux-wsl2-arm64-current.config	78	2	76
config/kernel/linux-wsl2-arm64-edge.config	78	3	75
config/kernel/linux-wsl2-x86-current.config	78	3	75
config/kernel/linux-wsl2-x86-edge.config	79	3	76
config/kernel/linux-xpressreal-t3-6.6.config	62	3	59

Files: 38 • Lines: +1905 / -508 (Δ 1397)

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

The PR updates numerous kernel config fragments across many platforms. The dominant changes enable extensive Netfilter/NF_TABLES/NFT/XTables/IPSet options (including NETFILTER_NETLINK_HOOK/GLUE_CT), bridge/NF_TABLES_BRIDGE, and IPv4/IPv6 NAT/mangle targets and matches. Several legacy or specific options are removed or swapped (e.g., NF_CONNTRACK_MARK/LABELS, NETFILTER_XT_TARGET_CT, some TLS entries, architecture/vendor-specific drivers). Additional system features are toggled: ZSWAP/ZRAM (with WRITEBACK/MEMORY_TRACKING), persistent/encrypted keys and KEY_DH, AppArmor, CFG80211, and various schedulers (RT_GROUP_SCHED, CFS bandwidth). Some configs adjust filesystems, DRM/panel entries, and platform-specific drivers.

Estimated code review effort

🎯 5 (Critical) | ⏱️ ~120+ minutes

Possibly related PRs

• GHA: Kernel config rewrite automation #8705 — Adds/uses the “rewrite-kernel-config” workflow; this PR’s mass config edits align with such automated rewrites.
• armbian build machinery - force all iptables/nftables to be built #8661 — Broad enablement of Netfilter/NFT/IPSet across configs, overlapping with this PR’s networking config expansions.
• uefi: bump to 6.17 #8716 — Similar UEFI kernel config edits adding NETFILTER_NETLINK_HOOK and extensive XT/NFT targets/matches and removing NF_CONNTRACK_MARK/LABELS.

Suggested labels

Build, size/large, GitHub Actions, GitHub, Framework

Suggested reviewers

• igorpecovnik
• rpardini
• leggewie
• teknoid
• paolosabatino
• PanderMusubi
• chraac
• clee

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch update-kernel-configs

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

Disabled knowledge base sources:

• Jira integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between bc0005b and 2a14f5e.

📒 Files selected for processing (38)

• config/kernel/linux-filogic-current.config (5 hunks)
• config/kernel/linux-genio-collabora.config (14 hunks)
• config/kernel/linux-imx6-current.config (1 hunks)
• config/kernel/linux-imx6-edge.config (7 hunks)
• config/kernel/linux-k3-beagle-edge.config (2 hunks)
• config/kernel/linux-k3-current.config (3 hunks)
• config/kernel/linux-meson-current.config (1 hunks)
• config/kernel/linux-meson64-current.config (0 hunks)
• config/kernel/linux-meson64-edge.config (0 hunks)
• config/kernel/linux-mt7623-current.config (5 hunks)
• config/kernel/linux-mvebu-current.config (3 hunks)
• config/kernel/linux-mvebu-edge.config (7 hunks)
• config/kernel/linux-rk35xx-vendor.config (7 hunks)
• config/kernel/linux-rockchip-current.config (3 hunks)
• config/kernel/linux-rockchip-edge.config (6 hunks)
• config/kernel/linux-rockchip-vendor.config (1 hunks)
• config/kernel/linux-rockchip64-current.config (4 hunks)
• config/kernel/linux-sm8550-current.config (7 hunks)
• config/kernel/linux-sm8550-edge.config (7 hunks)
• config/kernel/linux-spacemit-current.config (12 hunks)
• config/kernel/linux-spacemit-edge.config (13 hunks)
• config/kernel/linux-starfive2-vendor.config (7 hunks)
• config/kernel/linux-sun55iw3-syterkit-legacy.config (7 hunks)
• config/kernel/linux-sunxi64-edge.config (1 hunks)
• config/kernel/linux-uefi-arm64-cloud.config (1 hunks)
• config/kernel/linux-uefi-arm64-current.config (2 hunks)
• config/kernel/linux-uefi-arm64-legacy.config (2 hunks)
• config/kernel/linux-uefi-loong64-current.config (2 hunks)
• config/kernel/linux-uefi-riscv64-current.config (3 hunks)
• config/kernel/linux-uefi-riscv64-legacy.config (7 hunks)
• config/kernel/linux-uefi-x86-cloud.config (4 hunks)
• config/kernel/linux-uefi-x86-current.config (1 hunks)
• config/kernel/linux-uefi-x86-legacy.config (1 hunks)
• config/kernel/linux-wsl2-arm64-current.config (9 hunks)
• config/kernel/linux-wsl2-arm64-edge.config (9 hunks)
• config/kernel/linux-wsl2-x86-current.config (9 hunks)
• config/kernel/linux-wsl2-x86-edge.config (9 hunks)
• config/kernel/linux-xpressreal-t3-6.6.config (4 hunks)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

✅ This PR has been reviewed and approved — all set for merge!

[EvilOlaf]

@coderabbitai review

[EvilOlaf]

just curious if AI detects anything unusual

[coderabbitai]

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.