Bump kernel to 7.1.5 and refresh Debian snapshot - #186
Draft
MoeMahhouk wants to merge 1 commit into
Draft
Conversation
Kernel 6.19 is EOL (last release 6.19.14, 2026-04-22) so recent CVE fixes no longer land in that series. Move to 7.1, the current upstream stable series, at point release 7.1.5. trixie-backports only carries 7.1.3-1~bpo13+1, so the linux-source package is fetched from sid instead, where 7.1.5-1 is available: - add sid (binary packages only) to the mkosi apt sources, pinned to priority 100 via shared/mkosi.pref so no package ever resolves from it unless explicitly requested - make the suite linux-source is installed from configurable via KERNEL_APT_SUITE (default: <release>-backports), set to sid, and include it in the kernel cache key - add shared/mkosi.apt.conf: skip translation indices and retry transient download failures Snapshot bumped 20260430T025253Z -> 20260728T082537Z across all images, which also picks up ~3 months of trixie userspace updates. Once a >=7.1.5 backport lands in trixie-backports, KERNEL_APT_SUITE can be dropped again.
MoeMahhouk
commented
Jul 28, 2026
Member
Author
There was a problem hiding this comment.
This is for a different issue emerged while building the image locally freezing at random times during the process. This fixed it
pablin-10
approved these changes
Jul 31, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Kernel 6.19 is EOL (last release 6.19.14, 2026-04-22) so recent CVE fixes no longer land in that series. Move to 7.1, the current upstream stable series, at point release 7.1.5.
trixie-backports only carries 7.1.3-1~bpo13+1, so the linux-source package is fetched from sid instead, where 7.1.5-1 is available:
Snapshot bumped 20260430T025253Z -> 20260728T082537Z across all images, which also picks up ~3 months of trixie userspace updates. Once a >=7.1.5 backport lands in trixie-backports, KERNEL_APT_SUITE can be dropped again.
Here is a screenshot from a dev-image running locally in qemu:
