forked from anduril/jetpack-nixos
-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathdefault.nix
162 lines (146 loc) · 6.65 KB
/
default.nix
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
{ pkgs
, lib
, fetchFromGitHub
, fetchpatch
, l4t-xusb-firmware
, realtime ? false
, kernelPatches ? [ ]
, structuredExtraConfig ? { }
, extraMeta ? { }
, argsOverride ? { }
, ...
}@args:
let
isNative = pkgs.stdenv.isAarch64;
pkgsAarch64 = if isNative then pkgs else pkgs.pkgsCross.aarch64-multiplatform;
in
pkgsAarch64.buildLinux (args // {
version = "5.10.120" + lib.optionalString realtime "-rt70";
extraMeta.branch = "5.10";
defconfig = "tegra_defconfig";
# Using applyPatches here since it's not obvious how to append an extra
# postPatch. This is not very efficient.
src = pkgs.applyPatches {
src = fetchFromGitHub {
owner = "OE4T";
repo = "linux-tegra-5.10";
rev = "76678311c10b59a385a6d74152f3a0b976ae2a67"; # latest on oe4t-patches-l4t-r35.4.ga as of 2023-09-27
sha256 = "sha256-jHqIYDztVs/yw/oMxr4oPabxXk+l+CPlRrODEaduBgg=";
};
# Remove device tree overlays with some incorrect "remote-endpoint" nodes.
# They are strings, but should be phandles. Otherwise, it fails to compile
postPatch = ''
rm \
nvidia/platform/t19x/galen/kernel-dts/tegra194-p2822-camera-imx185-overlay.dts \
nvidia/platform/t19x/galen/kernel-dts/tegra194-p2822-camera-dual-imx274-overlay.dts \
nvidia/platform/t23x/concord/kernel-dts/tegra234-p3737-camera-imx185-overlay.dts \
nvidia/platform/t23x/concord/kernel-dts/tegra234-p3737-camera-dual-imx274-overlay.dts
sed -i -e '/imx185-overlay/d' -e '/imx274-overlay/d' \
nvidia/platform/t19x/galen/kernel-dts/Makefile \
nvidia/platform/t23x/concord/kernel-dts/Makefile
'' + lib.optionalString realtime ''
for p in $(find $PWD/rt-patches -name \*.patch -type f | sort); do
echo "Applying $p"
patch -s -p1 < $p
done
'';
};
autoModules = false;
features = { }; # TODO: Why is this needed in nixpkgs master (but not NixOS 22.05)?
# As of 22.11, only kernel configs supplied through kernelPatches
# can override configs specified in the platforms
kernelPatches = [
# if USB_XHCI_TEGRA is built as module, the kernel won't build
{
name = "make-USB_XHCI_TEGRA-builtins";
patch = null;
extraConfig = ''
USB_XHCI_TEGRA y
'';
}
# Fix "FAILED: load BTF from vmlinux: Unknown error -22" by including a
# number of patches from the 5.10 LTS branch. Unclear exactly which one is needed.
# See also: https://github.com/NixOS/nixpkgs/pull/194551
{ patch = ./0001-bpf-Generate-BTF_KIND_FLOAT-when-linking-vmlinux.patch; }
{ patch = ./0002-kbuild-Quote-OBJCOPY-var-to-avoid-a-pahole-call-brea.patch; }
{ patch = ./0003-kbuild-skip-per-CPU-BTF-generation-for-pahole-v1.18-.patch; }
{ patch = ./0004-kbuild-Unify-options-for-BTF-generation-for-vmlinux-.patch; }
{ patch = ./0005-kbuild-Add-skip_encoding_btf_enum64-option-to-pahole.patch; }
# Fix "FAILED: resolved symbol udp_sock"
# This is caused by having multiple structs of the same name in the BTF output.
# For example, `bpftool btf dump file vmlinux | grep "STRUCT 'udp_sock'"`
# [507] STRUCT 'file' size=256 vlen=22
# [121957] STRUCT 'file' size=256 vlen=22
# Without this patch, resolve_btfids doesn't handle this case and
# miscounts, leading to the failure. The underlying cause of why we have
# multiple structs of the same name is still unresolved as of 2023-07-29
{ patch = ./0006-tools-resolve_btfids-Warn-when-having-multiple-IDs-f.patch; }
# Fix Ethernet "downshifting" (e.g.1000Base-T -> 100Base-T) with realtek
# PHY used on Xavier NX
{ patch = ./0007-net-phy-realtek-read-actual-speed-on-rtl8211f-to-det.patch; }
# Lower priority of tegra-se crypto modules since they're slow and flaky
{ patch = ./0008-Lower-priority-of-tegra-se-crypto.patch; }
# Include patch from linux-stable that (for some reason) appears to fix
# random crashes very early in boot process on Xavier NX specifically
# Remove when updating to 35.5.0
{ patch = ./0009-Revert-random-use-static-branch-for-crng_ready.patch; }
] ++ kernelPatches;
structuredExtraConfig = with lib.kernel; {
# MODPOST modules-only.symvers
#ERROR: modpost: "xhci_hc_died" [drivers/usb/host/xhci-tegra.ko] undefined!
#ERROR: modpost: "xhci_hub_status_data" [drivers/usb/host/xhci-tegra.ko] undefined!
#ERROR: modpost: "xhci_enable_usb3_lpm_timeout" [drivers/usb/host/xhci-tegra.ko] undefined!
#ERROR: modpost: "xhci_hub_control" [drivers/usb/host/xhci-tegra.ko] undefined!
#ERROR: modpost: "xhci_get_rhub" [drivers/usb/host/xhci-tegra.ko] undefined!
#ERROR: modpost: "xhci_urb_enqueue" [drivers/usb/host/xhci-tegra.ko] undefined!
#ERROR: modpost: "xhci_irq" [drivers/usb/host/xhci-tegra.ko] undefined!
#USB_XHCI_TEGRA = module;
USB_XHCI_TEGRA = yes;
# stage-1 links /lib/firmware to the /nix/store path in the initramfs.
# However, since it's builtin and not a module, that's too late, since
# the kernel will have already tried loading!
EXTRA_FIRMWARE_DIR = freeform "${l4t-xusb-firmware}/lib/firmware";
EXTRA_FIRMWARE = freeform "nvidia/tegra194/xusb.bin";
# Override the default CMA_SIZE_MBYTES=32M setting in common-config.nix with the default from tegra_defconfig
# Otherwise, nvidia's driver craps out
CMA_SIZE_MBYTES = lib.mkForce (freeform "64");
### So nat.service and firewall work ###
NF_TABLES = module; # This one should probably be in common-config.nix
NFT_NAT = module;
NFT_MASQ = module;
NFT_REJECT = module;
NFT_COMPAT = module;
NFT_LOG = module;
NFT_COUNTER = module;
# IPv6 is enabled by default and without some of these `firewall.service` will explode.
IP6_NF_MATCH_AH = module;
IP6_NF_MATCH_EUI64 = module;
IP6_NF_MATCH_FRAG = module;
IP6_NF_MATCH_OPTS = module;
IP6_NF_MATCH_HL = module;
IP6_NF_MATCH_IPV6HEADER = module;
IP6_NF_MATCH_MH = module;
IP6_NF_MATCH_RPFILTER = module;
IP6_NF_MATCH_RT = module;
IP6_NF_MATCH_SRH = module;
# Needed since mdadm stuff is currently unconditionally included in the initrd
# This will hopefully get changed, see: https://github.com/NixOS/nixpkgs/pull/183314
MD = yes;
BLK_DEV_MD = module;
MD_LINEAR = module;
MD_RAID0 = module;
MD_RAID1 = module;
MD_RAID10 = module;
MD_RAID456 = module;
} // (lib.optionalAttrs realtime {
PREEMPT_VOLUNTARY = lib.mkForce no; # Disable the one set in common-config.nix
# These are the options enabled/disabled by scripts/rt-patch.sh
PREEMPT_RT = yes;
DEBUG_PREEMPT = no;
KVM = no;
CPU_IDLE_TEGRA18X = no;
CPU_FREQ_GOV_INTERACTIVE = no;
CPU_FREQ_TIMES = no;
FAIR_GROUP_SCHED = no;
}) // structuredExtraConfig;
} // argsOverride)