commit 7e97ba9c57745c352d91063a4086ba535efeb606
Author: lucascouts <lucascs@protonmail.com>
Date: Thu Nov 5 13:04:50 2026 -0300

sys-kernel/bentoo-kernel: add USE=rust for the drm_panic QR code

Fedora's base config already asks for CONFIG_RUST and the QR panic screen,
but init/Kconfig drops CONFIG_RUST without a word next to BTF under LTO
(our +lto +sched-ext default) or the GCC RANDSTRUCT plugin (hardened without
lto), and the QR encoder, written in Rust, goes with it. The running
7.3.1-bentoo-dist kernel has CONFIG_DRM_PANIC_SCREEN="qr_code" and no QR.

USE=rust (off by default, defaults unchanged, no revbump) merges
files/rust.config: CONFIG_RUST, the QR screen, and the URL
https://drm-panic.obentoo.org/#, whose fragment keeps the kmsg out of any
server log. REQUIRED_USE encodes the two Kconfig conflicts, src_configure
now dies if CONFIG_RUST or the QR code still goes missing, and
rust_pkg_setup selects a Rust slot with rust-src (>=1.85.0, bindgen
>=0.71.1, the 7.3 minimums).

Verified unprivileged through src_configure (USE=-secureboot -modules-sign:
signing needs root here) for "rust -lto -hardened" (GCC, BTF on) and
"rust lto -sched-ext -debug" (clang ThinLTO): both resolve CONFIG_RUST=y,
CONFIG_DRM_PANIC_SCREEN_QR_CODE=y and the URL. Not run: the full kernel
compile and a real panic.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit 3c96c7e978ff4173d99a823db244591b4fb85362
Author: lucascouts <lucascs@protonmail.com>
Date: Wed Nov 4 06:34:21 2026 -0300

add(metadata/md5-cache/sys-kernel/bentoo-kernel-7.3.1-r1), del(sci-ml/{ollama-0.40.13, ollama-0.40.14}), del(metadata/{md5-cache/sci-ml/ollama-0.40.13, md5-cache/sci-ml/ollama-0.40.14, md5-cache/sys-kernel/bentoo-kernel-7.3.1}), up(sys-kernel/bentoo-kernel-7.3.1 -> 7.3.1-r1)

commit a69a0d62dca6963bbaaef599725218e471840d1d
Author: lucascouts <lucascs@protonmail.com>
Date: Tue Nov 3 10:17:43 2026 -0300

del(sys-kernel/{bentoo-kernel-7.3.0-r1, bentoo-kernel-bin-7.3.0-r1}, virtual/dist-kernel-7.3.0, metadata/md5-cache/{sys-kernel/bentoo-kernel-7.3.0-r1, sys-kernel/bentoo-kernel-bin-7.3.0-r1, virtual/dist-kernel-7.3.0}), mod(sys-kernel/{bentoo-kernel, bentoo-kernel-bin}/Manifest): drop the 7.3.0 series

7.3.1 is booted and is the only version the registry keeps; the DIST
entries removed are the ones no 7.3.1 SRC_URI names.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit 837aa18b91c61917619af5b9e5cabcbdc724ff4d
Author: lucascouts <lucascs@protonmail.com>
Date: Sun Nov 1 03:01:30 2026 -0300

up(sys-kernel/bentoo-kernel-7.3.0-r1 -> 7.3.1), add(virtual/dist-kernel-7.3.1)

CachyOS released cachyos-7.3.1-1 (signature verified, key E8B9AA39) and
::gentoo now ships gentoo-kernel-7.3.1, so PATCHSET and CONFIG_VER follow
it (linux-gentoo-patches-7.3.1, 7.3.1-gentoo). BORE (kernel-patches
68476639) and the big-kernel Intel patches are unchanged; all of them
still apply forward.

USE=bore failed to compile: 7.3.1 backported a fair.c change that makes
update_protect_slice() read normalized_sysctl_sched_base_slice, which the
7.3 BORE patch only declares without CONFIG_SCHED_BORE.
files/7.3.1-bore-update_protect_slice.patch gives that function the BORE
base slice, the same way BORE already treats set_protect_slice(). Drop it
once CachyOS updates its 7.3 BORE patch.

virtual/dist-kernel-7.3.1 is ::gentoo's plus bentoo-kernel{,-bin}, at the
same PVR. 7.3.0 stays for bentoo-kernel-7.3.0-r1 and bentoo-kernel-bin,
which is rebuilt separately.

Tested unprivileged (USE="-secureboot -modules-sign -verify-sig"):
prepare + configure + compile exit 0, clang/LLD 23.1.4, all required
CONFIG_* present, BORE symbols in System.map. Not merged or booted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit 4652f5cdf2a2049e4d4ae061a74663534f547d43
Author: lucascouts <lucascs@protonmail.com>
Date: Sun Oct 25 00:38:51 2026 -0300

del(sys-kernel/{bentoo-kernel-7.2.11, bentoo-kernel-bin-7.2.11}, virtual/dist-kernel-, metadata/md5-cache/{sys-kernel/bentoo-kernel-7.2.11, sys-kernel/bentoo-kernel-bin-7.2.11, virtual/dist-kernel-7.2.9, virtual/dist-kernel-7.2.10, virtual/dist-kernel-7.2.11}), mod(sys-kernel/{bentoo-kernel, bentoo-kernel-bin}/Manifest): drop the 7.2 series

CachyOS moved on to 7.3 without a 7.2.12, and with the 7.3.0 mask lifted
bentoo-kernel{,-bin}-7.3.0-r1 is installable by everyone. The 7.2
virtual/dist-kernel copies existed only to list bentoo-kernel; ::gentoo
carries 7.2.11 and 7.2.12. virtual/dist-kernel-7.3.0 stays.

The Manifests lose the DIST entries only 7.2.11 named (CachyOS 7.2.11-1,
BORE c9ed808e, big-kernel 992fa6e5, the 7.2.11 gpkg); every entry the
7.3.0-r1 ebuilds fetch is kept.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit c4376bb0ee67f0ba431dad85b20c628db2cb041c
Author: lucascouts <lucascs@protonmail.com>
Date: Fri Oct 23 18:21:16 2026 -0300

up(sys-kernel/bentoo-kernel-7.3.0 -> 7.3.0-r1), mod(profiles/package.mask, metadata/md5-cache)

CachyOS respin cachyos-7.3.0-4 (from -2): AMD IOMMU identity-mode
revert, Intel remapped NVMe support, vga_switcheroo deferred probe on
T2 Macs. BORE moves to 7.0.0 (kernel-patches 68476639).

The mask atom becomes ~ so it keeps covering the kernel across
revisions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit 944b4aac6bd33f0436dc80c86196a26488a51660
Author: lucascouts <lucascs@protonmail.com>
Date: Wed Oct 21 10:40:14 2026 -0300

add(metadata/{md5-cache/app-admin/awscli2-2.38.3, md5-cache/app-containers/docker-buildx-0.38.1, md5-cache/app-containers/kata-containers-4.3.0, md5-cache/app-editors/cursor-3.26.13, md5-cache/app-editors/kiro-1.4.13, md5-cache/app-misc/claude-desktop-bin-3.1623.0, md5-cache/app-office/designcraft-bin-0.10.0, md5-cache/dev-util/ai-memory-3.1.2, md5-cache/dev-util/ai-memory-bin-3.1.2, md5-cache/dev-util/claude-code-2.1.306, md5-cache/dev-util/codex-desktop-bin-26.1016.51333, md5-cache/dev-util/copilot-cli-bin-1.0.101, md5-cache/dev-util/gemini-cli-0.65.0, md5-cache/dev-util/glslang-1.4.363.0_p20261020, md5-cache/dev-util/mesa_clc-27.0.0_pre20261021, md5-cache/dev-vcs/gitkraken-12.6.1, md5-cache/media-gfx/photocraft-bin-0.11.1, md5-cache/media-libs/mesa-27.0.0_pre20261021, md5-cache/media-libs/vulkan-layers-1.4.365_p20261021, md5-cache/media-libs/vulkan-loader-1.4.365_p20261020, md5-cache/net-misc/postman-bin-12.33.2, md5-cache/net-proxy/snowflake-2.15.2, md5-cache/net-vpn/obscura-1.184_p20261020, md5-cache/sci-ml/ik_llama-cpp-0_pre20261021, md5-cache/sci-ml/ollama-bin-0.40.7, md5-cache/sys-apps/ai-jail-2.11.1, md5-cache/sys-apps/ai-jail-bin-2.11.1, md5-cache/www-client/librewolf-bin-158.0.1_p1}), del(sys-kernel/{bentoo-kernel-7.2.10, bentoo-kernel-7.2.9-r2}), del(metadata/{md5-cache/app-admin/awscli2-2.38.2, md5-cache/app-containers/docker-buildx-0.38.0, md5-cache/app-containers/kata-containers-4.2.0, md5-cache/app-editors/cursor-3.25.9, md5-cache/app-editors/kiro-1.4.5, md5-cache/app-misc/claude-desktop-bin-2.42304.2, md5-cache/app-office/designcraft-bin-0.9.0, md5-cache/dev-util/ai-memory-3.1.1, md5-cache/dev-util/ai-memory-bin-3.1.1, md5-cache/dev-util/claude-code-2.1.304, md5-cache/dev-util/codex-desktop-bin-26.1013.40934, md5-cache/dev-util/copilot-cli-bin-1.0.100, md5-cache/dev-util/gemini-cli-0.64.0, md5-cache/dev-util/glslang-1.4.363.0_p20261019, md5-cache/dev-util/mesa_clc-27.0.0_pre20261020, md5-cache/dev-vcs/gitkraken-12.6.0, md5-cache/media-gfx/photocraft-bin-0.10.0, md5-cache/media-libs/mesa-27.0.0_pre20261020, md5-cache/media-libs/vulkan-layers-1.4.365_p20261020, md5-cache/media-libs/vulkan-loader-1.4.365_p20261019, md5-cache/net-misc/postman-bin-12.33.1, md5-cache/net-proxy/snowflake-2.15.1, md5-cache/net-vpn/obscura-1.182_p20261019, md5-cache/sci-ml/ik_llama-cpp-0_pre20261020, md5-cache/sci-ml/ollama-bin-0.40.6, md5-cache/sys-apps/ai-jail-2.10.0, md5-cache/sys-apps/ai-jail-bin-2.10.0, md5-cache/www-client/librewolf-bin-158.0_p1}), mod(.autoupdate/packages.toml), up(app-admin/awscli2-2.38.2 -> 2.38.3, app-containers/{docker-buildx-0.38.0 -> 0.38.1, kata-containers-4.2.0 -> 4.3.0}, app-editors/{cursor-3.25.9 -> 3.26.13, kiro-1.4.5 -> 1.4.13}, app-misc/claude-desktop-bin-2.42304.2 -> 3.1623.0, app-office/designcraft-bin-0.9.0 -> 0.10.0, dev-util/ai-memory{,-bin}-3.1.1 -> 3.1.2, dev-vcs/gitkraken-12.6.0 -> 12.6.1, media-gfx/photocraft-bin-0.10.0 -> 0.11.1, media-libs/{mesa-27.0.0_pre20261020 -> 27.0.0_pre20261021, vulkan-layers-1.4.365_p20261020 -> 1.4.365_p20261021, vulkan-loader-1.4.365_p20261019 -> 1.4.365_p20261020}, net-misc/postman-bin-12.33.1 -> 12.33.2, net-proxy/snowflake-2.15.1 -> 2.15.2, net-vpn/obscura-1.182_p20261019 -> 1.184_p20261020, sci-ml/{ik_llama-cpp-0_pre20261020 -> 0_pre20261021, ollama-bin-0.40.6 -> 0.40.7}, sys-apps/ai-jail{,-bin}-2.10.0 -> 2.11.1, www-client/librewolf-bin-158.0_p1 -> 158.0.1_p1)

commit 24f68f9b4dd30f83df2c9fbe0848598338d52146
Author: lucascouts <lucascs@protonmail.com>
Date: Wed Oct 21 10:31:02 2026 -0300

add(sys-kernel/bentoo-kernel{,-bin}-7.3.0, metadata/md5-cache), mod(.autoupdate/packages.toml, profiles/package.mask)

CachyOS 7.3.0-2, BORE 2b4e3ce8, big-kernel Intel patches at 4c1de6a9
(adds 0104). 0002 no longer applies on 7.3 (drm_WARN_ON_ONCE became
xe_gt_WARN_ON_ONCE in its context), so it ships rebased in files/ via the
new INTEL_PATCHES_REBASED list, applied at the same position.

Gentoo patchset/config are still the 7.2 ones the gentoo-kernel-7.3.0
mirror uses; ::gentoo has published none for 7.3 yet. Both packages join
the existing 7.3.0 package.mask entry, since virtual/dist-kernel-7.3.0 stays
masked until a gentoo-kernel-bin-7.3 exists.

Verified: test build (clang + ThinLTO) compiles; the -bin gpkg built by
scripts/build-bentoo-kernel-bin.sh passed its checks and is on
distfiles.obentoo.org (SHA512 matches the Manifest). Not booted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit 31bcbcb4c71cda170d01bbb1fc3eeffc9370e037
Author: lucascouts <lucascs@protonmail.com>
Date: Thu Oct 15 20:15:33 2026 -0300

up(sys-kernel/bentoo-kernel-7.2.10 -> 7.2.11), add(virtual/dist-kernel-7.2.11, sys-kernel/bentoo-kernel/files/cfi.config), mod(sys-kernel/bentoo-kernel-7.2.10, virtual/linux-sources-3-r9, profiles/targets/container/package.mask, .autoupdate/packages.toml, metadata/md5-cache)

bentoo-kernel 7.2.11: CachyOS cachyos-7.2.11-1 (signature verified),
Gentoo fedora-kernel-config 7.2.10-gentoo; patchset, BORE and the Intel
patches unchanged and all still apply forward. virtual/dist-kernel-7.2.11
mirrors ::gentoo's at the same PVR, with bentoo-kernel{,-bin} added.

Both 7.2.10 and 7.2.11:
- USE="hardened lto" merges kCFI (CONFIG_CFI) and requires it in the
resolved config: a clang build cannot use the GCC hardening plugins.
- pkg_postinst warns when modules-sign runs without MODULES_SIGN_KEY:
modules signed later with the user's own key would not load.
- RDEPEND notes that pkgcheck's NonexistentDeps on the pin is by design.
- the 7.3 series checklist lives in the ebuild and the autoupdate record.

virtual/linux-sources and targets/container already list
sys-kernel/bentoo-kernel-bin, which lands separately.

Verified: ebuild clean prepare compile install of 7.2.11 as non-root
(USE=-modules-sign), exit 0; image is 7.2.11-bentoo-dist with clang
ThinLTO, BORE, sched_ext, BTF, x86-64-v3, HZ_1000. Not merged, not
booted; USE=hardened (kCFI) not built.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit ceaac3aa12b91a23f9a10b355a4aec1647b246e1
Author: lucascouts <lucascs@protonmail.com>
Date: Tue Oct 13 13:34:31 2026 -0300

add(sys-kernel/bentoo-kernel-7.2.10), mod(.autoupdate/packages.toml, metadata/md5-cache)

CachyOS published cachyos-7.2.10-1 on 2026-10-13, which unblocks the 7.2.10
bump that was deliberately held until then. CACHY_REL 2 -> 1; nothing else
changes:
- PATCHSET, CONFIG_VER and GENTOO_CONFIG_P are identical in ::gentoo's
gentoo-kernel-7.2.9 and 7.2.10;
- BORE_COMMIT is still the last commit touching 7.2/sched/0001-bore-cachy.patch;
- the 7 Intel patches have the same blob SHAs at big-kernel's 7.2.10 commit
(117ad046) as at the pinned 992fa6e5, and all still apply forward, so none
is in the kernel yet and BIGK_COMMIT stays.

virtual/dist-kernel-7.2.10 already lists bentoo-kernel at ::gentoo's PVR.
7.2.9-r2 stays in the tree as a boot fallback (with its virtual).

Verified locally, unprivileged: the tarball signature checks out against
ptr1337's key (E8B9AA39...57F654FE, the one sec-keys/openpgp-keys-cachyos
pins); a full `ebuild compile` (USE="bore lto -secureboot -modules-sign")
exits 0 with CACHY, SCHED_BORE, SCHED_CLASS_EXT, X86_64_VERSION=3 and
LTO_CLANG_THIN set; emerge -pv against the maintainer profile resolves the
virtual to 7.2.10 and rebuilds the four out-of-tree modules. Not merged, not
booted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit 678640217989a1f05f0684d90ab9f025182e88be
Author: lucascouts <lucascs@protonmail.com>
Date: Sun Oct 11 23:38:43 2026 -0300

fix(sys-kernel/bentoo-kernel-7.2.9-r2, virtual/dist-kernel-7.2.10, virtual/linux-sources-3-r9): stop pulling other kernels onto bentoo-kernel hosts

::gentoo bumped virtual/dist-kernel to 7.2.10 before CachyOS released it,
so -uDN @world installed gentoo-kernel-7.2.10 next to bentoo-kernel-7.2.9.
bentoo-kernel now holds the virtual at its own PV until a newer
bentoo-kernel exists; the || keeps older kernel slots installable.

virtual/linux-sources (linux-mod-r1's DEPEND) did not list bentoo-kernel,
so every out-of-tree module pulled gentoo-sources.

Existing hosts need one `emerge -1 sys-kernel/bentoo-kernel
virtual/linux-sources`: the installed copies still carry the old deps.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit 18b2b05ac3de1401fb882a8d468fb02e8c642c22
Author: lucascouts <lucascs@protonmail.com>
Date: Sun Oct 11 08:36:23 2026 -0300

fix(sys-kernel/bentoo-kernel-7.2.9-r1): drop the LLVM toolchain env before post-merge phases

7.2.9 died in pkg_postinst: Portage carries the CC/LD/OBJDUMP/... exported
in pkg_setup into every later phase, and dracut builds the UKI with
`${OBJDUMP:-objdump} -h`, parsing GNU's column layout; llvm-objdump's
output left it with "16#: invalid integer constant". pkg_preinst,
pkg_postinst, pkg_postrm and pkg_config now unset those variables first.

pkg_postinst also tells the user to point /usr/src/linux at this kernel
and run @module-rebuild: with the same PV as gentoo-kernel the
virtual/dist-kernel subslot does not move, so nothing is rebuilt on its
own.

Verified: clean unprivileged `ebuild clean install` with LLVM 23 and
-j32, exit 0, 0 QA notices, 5024 modules, CLANG_VERSION=230103; the saved
environment after `setup` reproduces the dracut failure and parses
correctly once the new helper runs. Not verified: pkg_postinst itself,
which needs root.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

commit 82d81d7588957891aad539502756aa0bfba27dd0
Author: lucascouts <lucascs@protonmail.com>
Date: Sun Oct 11 07:28:45 2026 -0300

add(sys-kernel/bentoo-kernel-7.2.9, sec-keys/openpgp-keys-cachyos-20261011, virtual/dist-kernel-7.2.9)

bentoo's distribution kernel, layered on kernel.org 7.2.9:
- CachyOS signed source release cachyos-7.2.9-2 (cachy tweaks, ADIOS,
POC, BBRv3, HDMI VRR, T2 Macs, ...);
- Gentoo's dist-kernel patchset and config, as gentoo-kernel-7.2.9;
- BORE (USE=bore), pinned to a CachyOS kernel-patches commit;
- Intel Xe/i915 fixes for Arrow Lake / Meteor Lake from big-comm/big-kernel.

USE +lto (clang ThinLTO), +bore, +sched-ext (re-enables the BTF that
no-debug.config drops), debug, hardened. Always on: x86-64-v3, 1000 Hz,
full preemption, and mainline's split lock mitigation (CONFIG_CACHY turns
it off). src_configure dies if the resolved config lost an option a USE
flag promises.

virtual/dist-kernel-7.2.9 is ::gentoo's at the same PVR plus
~sys-kernel/bentoo-kernel-$: a revbump would change the subslot and
rebuild every out-of-tree module for every user.

Verified: two clean `ebuild clean install` builds (unprivileged, exit 0);
image has 5024 modules, LTO_CLANG_THIN, X86_64_VERSION=3, SCHED_BORE,
SCHED_CLASS_EXT with BTF in vmlinux; ~2400 v3-only instructions vs 91 in
gentoo-dist; QA_EXECSTACK checked with Portage's own scanelf call.
Not verified: merge, boot, out-of-tree modules, non-default USE.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>