[pull] main from WildKernels:main

.github/actions/apply-device-patches/action.yml

@@ -0,0 +1,35 @@
+name: 'Apply Device-Specific Patches'
+description: 'Apply WiFi/Bluetooth fixes for Samsung and Xiaomi 6.6 GKI devices'
+inputs:
+  kernel_version:
+    description: 'Kernel version (e.g., 6.6)'
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: Fix WiFi and Bluetooth on Samsung 6.6 GKI Devices
+      if: ${{ inputs.kernel_version == '6.6' }}
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel/common
+      run: |
+        SYMBOL_LIST=android/abi_gki_aarch64_galaxy
+        echo "kdp_set_cred_non_rcu" >> $SYMBOL_LIST
+        echo "kdp_usecount_dec_and_test" >> $SYMBOL_LIST
+        echo "kdp_usecount_inc" >> $SYMBOL_LIST
+
+        PATCH="${{ github.workspace }}/kernel_patches/samsung/min_kdp/add-min_kdp-symbols.patch"
+        if patch -p1 --dry-run < "$PATCH"; then
+          patch -p1 --no-backup-if-mismatch < $PATCH
+        fi
+
+        cp "${{ github.workspace }}/kernel_patches/samsung/min_kdp/min_kdp.c" drivers/min_kdp.c
+        echo "obj-y += min_kdp.o" >> drivers/Makefile
+
+    - name: Fix WiFi and Bluetooth on Xiaomi 6.6 GKI Devices
+      if: ${{ inputs.kernel_version == '6.6' }}
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel/common
+      run: |
+        SYMBOL_LIST=android/abi_gki_aarch64_xiaomi
+        echo "device_find_any_child" >> $SYMBOL_LIST

.github/actions/apply-kernel-branding/action.yml

@@ -0,0 +1,49 @@
+name: 'Apply Kernel Branding'
+description: 'Apply Wild kernel branding to kernel version string'
+inputs:
+  build_type:
+    description: 'Build type (Normal, Bypass, MarionKernel, Hakan, etc.)'
+    required: true
+  kernel_version:
+    description: 'Kernel version (e.g., 5.10, 6.1, 6.6)'
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: Apply Kernel Name Branding
+      if: false
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel
+      run: |
+        # Apply kernel branding based on version and variant
+        if [[ "${{ inputs.kernel_version }}" == "5."* ]] || [[ "${{ inputs.kernel_version }}" == "6.1" ]]; then
+          # Older kernels: append to end of version string
+          case ${{ inputs.build_type }} in
+            MarionKernel)
+              perl -i -0777 -pe 's/(.*)echo "\$res"/$1echo "\$res-Wild-MarionKernel"/s' ./common/scripts/setlocalversion
+              ;;
+            Hakan)
+              perl -i -0777 -pe 's/(.*)echo "\$res"/$1echo "\$res-Wild-Hakan"/s' ./common/scripts/setlocalversion
+              ;;
+            TheWildJames)
+              perl -i -0777 -pe 's/(.*)echo "\$res"/$1echo "\$res-Wild-TheWildJames"/s' ./common/scripts/setlocalversion
+              ;;
+            vTomsonek)
+              perl -i -0777 -pe 's/(.*)echo "\$res"/$1echo "\$res-Wild-vTomsonek"/s' ./common/scripts/setlocalversion
+              ;;
+            *)
+              perl -i -0777 -pe 's/(.*)echo "\$res"/$1echo "\$res-Wild"/s' ./common/scripts/setlocalversion
+              ;;
+          esac
+        else
+          # Newer kernels (6.6+): insert before scm_version
+          case ${{ inputs.build_type }} in
+            *)
+              perl -i -0777 -pe 's/(.*)echo "\$\{KERNELVERSION\}\$\{file_localversion\}\$\{config_localversion\}\$\{LOCALVERSION\}\$\{scm_version\}"/$1echo "\${KERNELVERSION}\${file_localversion}\${config_localversion}\${LOCALVERSION}-Wild\${scm_version}"/s' ./common/scripts/setlocalversion
+              ;;
+          esac
+        fi
+
+        # Set build timestamp
+        export KBUILD_BUILD_TIMESTAMP="$(date -u '+%a %b %e %H:%M:%S UTC %Y')"

.github/actions/bbg/action.yml

@@ -0,0 +1,41 @@
+name: Setup Baseband Guard (BBG)
+description: Download and configure Baseband Guard security module
+
+runs:
+  using: composite
+  steps:
+    - name: Install Baseband Guard
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel
+      run: |
+        wget -O- https://github.com/vc-teahouse/Baseband-guard/raw/main/setup.sh | bash
+    
+    - name: Configure Baseband Guard
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel
+      run: |
+        # Add BBG to defconfig
+        echo "CONFIG_BBG=y" >> "${{ github.workspace }}/wild_gki.fragment"
+        
+        # Modify security Kconfig to include baseband_guard in LSM
+        sed -i '/^config LSM$/,/^help$/{ /^[[:space:]]*default/ { /baseband_guard/! s/selinux/selinux,baseband_guard/ } }' common/security/Kconfig
+    
+    - name: Verify BBG Installation
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel
+      run: |
+        if grep -q "baseband_guard" common/security/Kconfig; then
+          echo "✓ SUCCESS: baseband_guard found in common/security/Kconfig"
+          grep -n "baseband_guard" common/security/Kconfig || true
+        else
+          echo "✗ FAILED: baseband_guard not found in common/security/Kconfig"
+          exit 1
+        fi
+    
+    - name: Extract BBG Version
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel/Baseband-guard
+      run: |
+        # Extract and export BBG version info
+        BBG_COMMIT=$(git rev-parse --short HEAD 2>/dev/null)
+        echo "BBG_COMMIT=$BBG_COMMIT" >> $GITHUB_ENV

.github/actions/clean-kernel-flags/action.yml

@@ -0,0 +1,29 @@
+name: 'Clean Kernel Flags'
+description: 'Clean dirty flags and ABI exports to prevent build errors'
+
+runs:
+  using: "composite"
+  steps:
+    - name: Clean Dirty Flags and ABI Exports
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel
+      run: |
+        # Clean dirty flags and ABI exports based on build system
+        if [ -f "build/build.sh" ]; then
+          # Old build system (5.10, 5.15, early 6.1)
+          sed -i 's/-dirty//' ./common/scripts/setlocalversion
+        else
+          # Bazel build system (newer kernels)
+          sed -i "/stable_scmversion_cmd/s/-maybe-dirty//g" ./build/kernel/kleaf/impl/stamp.bzl
+          sed -i 's/-dirty//' ./common/scripts/setlocalversion
+          # Remove ABI protected exports to prevent build errors
+          rm -rf ./common/android/abi_gki_protected_exports_*
+          perl -pi -e 's/^\s*"protected_exports_list"\s*:\s*"android\/abi_gki_protected_exports_aarch64",\s*$//;' ./common/BUILD.bazel
+        fi
+
+        # Commit changes to avoid dirty state during build
+        cd ${{ github.workspace }}/kernel/common
+        git config --global user.name "github-actions[bot]"
+        git config --global user.email "github-actions[bot]@users.noreply.github.com"
+        git add .
+        git commit -m "Wild: Clean Dirty Flag"

.github/actions/configure-kernel/action.yml

@@ -0,0 +1,56 @@
+name: 'Configure Kernel Options'
+description: 'Set up kernel configuration fragment with required options'
+inputs:
+  kernel_version:
+    description: 'Kernel version (e.g., 6.6)'
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: Apply Kernel Configuration
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel
+      run: |
+        cat >> "${{ github.workspace }}/wild_gki.fragment" << 'EOF'
+        # Optional kernel config placeholders
+        # Networking Configuration
+        CONFIG_IP_NF_TARGET_TTL=y
+        CONFIG_IP6_NF_TARGET_HL=y
+        CONFIG_IP6_NF_MATCH_HL=y
+
+        # BBR TCP Congestion Control
+        CONFIG_TCP_CONG_ADVANCED=y
+        CONFIG_TCP_CONG_BBR=y
+        CONFIG_NET_SCH_FQ=y
+        # CONFIG_TCP_CONG_BIC is not set
+        # CONFIG_TCP_CONG_WESTWOOD is not set
+        # CONFIG_TCP_CONG_HTCP is not set
+
+        # IPSet Support
+        CONFIG_IP_SET=y
+        CONFIG_IP_SET_MAX=65534
+        CONFIG_IP_SET_BITMAP_IP=y
+        CONFIG_IP_SET_BITMAP_IPMAC=y
+        CONFIG_IP_SET_BITMAP_PORT=y
+        CONFIG_IP_SET_HASH_IP=y
+        CONFIG_IP_SET_HASH_IPMARK=y
+        CONFIG_IP_SET_HASH_IPPORT=y
+        CONFIG_IP_SET_HASH_IPPORTIP=y
+        CONFIG_IP_SET_HASH_IPPORTNET=y
+        CONFIG_IP_SET_HASH_IPMAC=y
+        CONFIG_IP_SET_HASH_MAC=y
+        CONFIG_IP_SET_HASH_NETPORTNET=y
+        CONFIG_IP_SET_HASH_NET=y
+        CONFIG_IP_SET_HASH_NETNET=y
+        CONFIG_IP_SET_HASH_NETPORT=y
+        CONFIG_IP_SET_HASH_NETIFACE=y
+        CONFIG_IP_SET_LIST_SET=y
+        EOF
+
+    - name: Apply Kernel Config for 5.10
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel/common
+      if: inputs.kernel_version == '5.10'
+      run: |
+        sed -i 's/CONFIG_IP_SET_MAX/65534/g' net/netfilter/ipset/ip_set_core.c

.github/actions/download-kernel/action.yml

@@ -0,0 +1,47 @@
+name: 'Download Kernel Repository'
+description: 'Initialize and sync Android kernel source repository'
+
+inputs:
+  android_version:
+    description: 'Android version (e.g., android14)'
+    required: true
+  kernel_version:
+    description: 'Kernel version (e.g., 5.15, 6.1)'
+    required: true
+  os_patch_level:
+    description: 'OS patch level (e.g., 2024-01)'
+    required: true
+
+outputs:
+  deprecated_branch:
+    description: 'Whether the branch is deprecated'
+    value: ${{ steps.sync.outputs.deprecated }}
+
+runs:
+  using: composite
+  steps:
+    - name: Initialize and Sync Kernel Repository
+      id: sync
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel
+      run: |
+        FORMATTED_BRANCH="${{ inputs.android_version }}-${{ inputs.kernel_version }}-${{ inputs.os_patch_level }}"
+
+        # Initialize repo with the target branch
+        repo init -u https://android.googlesource.com/kernel/manifest -b common-${FORMATTED_BRANCH} --depth=1
+
+        # Check if branch is deprecated
+        REMOTE_BRANCH=$(git ls-remote https://android.googlesource.com/kernel/common ${FORMATTED_BRANCH})
+        DEFAULT_MANIFEST_PATH=.repo/manifests/default.xml
+        DEPRECATED=false
+        
+        if grep -q deprecated <<< $REMOTE_BRANCH; then
+          sed -i "s/\"${FORMATTED_BRANCH}\"/\"deprecated\/${FORMATTED_BRANCH}\"/g" $DEFAULT_MANIFEST_PATH
+          echo "⚠ Note: Branch ${FORMATTED_BRANCH} is considered deprecated."
+          DEPRECATED=true
+        fi
+        
+        echo "deprecated=$DEPRECATED" >> $GITHUB_OUTPUT
+        
+        # Sync kernel source
+        repo --trace sync -c -j$(nproc --all) --fail-fast --no-tags --force-sync --no-clone-bundle

.github/actions/fetch-commits/action.yml

@@ -0,0 +1,96 @@
+name: Fetch Latest Commits
+description: "Fetches the latest commit hashes for Wild KSU, AnyKernel3, Kernel Patches, and SUSFS"
+inputs:
+  ksu_commit:
+    description: "Optional: Specific Wild KSU commit to use"
+    required: false
+    default: ""
+outputs:
+  ksu_commit:
+    description: "Wild KSU Commit"
+    value: ${{ steps.commits.outputs.ksu_commit }}
+  anykernel_commit:
+    description: "AnyKernel3 Commit"
+    value: ${{ steps.commits.outputs.anykernel_commit }}
+  patches_commit:
+    description: "Kernel Patches Commit"
+    value: ${{ steps.commits.outputs.patches_commit }}
+  susfs_commit:
+    description: "SUSFS Commit (Map)"
+    value: ${{ steps.commits.outputs.susfs_commit }}
+
+runs:
+  using: "composite"
+  steps:
+    - name: Get Latest Commits
+      id: commits
+      shell: bash
+      run: |
+        # Helper to get latest commit from remote without cloning full repo
+        get_commit() {
+          git ls-remote "$1" "$2" | awk '{print $1}'
+        }
+
+        echo "Fetching latest commits..."
+        
+        # Wild KSU
+        if [ -n "${{ inputs.ksu_commit }}" ]; then
+          # Try to resolve input as a ref (branch/tag)
+          resolved_commit=$(get_commit "https://github.com/WildKernels/Wild_KSU.git" "${{ inputs.ksu_commit }}")
+          
+          if [ -n "$resolved_commit" ]; then
+            ksu_commit="$resolved_commit"
+          else
+            # If resolution failed, assume input is a commit SHA
+            ksu_commit="${{ inputs.ksu_commit }}"
+          fi
+          echo "Using provided Wild KSU commit: $ksu_commit"
+        else
+          ksu_commit=$(get_commit "https://github.com/WildKernels/Wild_KSU.git" "refs/heads/canary")
+          echo "Wild KSU: $ksu_commit"
+        fi
+        echo "ksu_commit=$ksu_commit" >> $GITHUB_OUTPUT
+        
+        # AnyKernel3
+        AK3_COMMIT=$(get_commit "https://github.com/WildKernels/AnyKernel3.git" "refs/heads/gki-2.0")
+        echo "AnyKernel3: $AK3_COMMIT"
+        echo "anykernel_commit=$AK3_COMMIT" >> $GITHUB_OUTPUT
+        
+        # Kernel Patches
+        PATCHES_COMMIT=$(get_commit "https://github.com/WildKernels/kernel_patches.git" "HEAD")
+        echo "Kernel Patches: $PATCHES_COMMIT"
+        echo "patches_commit=$PATCHES_COMMIT" >> $GITHUB_OUTPUT
+        
+        # SUSFS (using gitlab) - Fetch all relevant branches
+        SUSFS_REPO="https://gitlab.com/simonpunk/susfs4ksu.git"
+        echo "Fetching SUSFS commits for all branches..."
+        
+        # We need to construct a JSON object or a simple string map
+        # Format: branch1:commit1,branch2:commit2,...
+        
+        BRANCHES=(
+          "gki-android12-5.10"
+          "gki-android13-5.10"
+          "gki-android13-5.15"
+          "gki-android14-5.15"
+          "gki-android14-6.1"
+          "gki-android15-6.6"
+          "gki-android16-6.12"
+        )
+        
+        SUSFS_MAP=""
+        for branch in "${BRANCHES[@]}"; do
+          COMMIT=$(get_commit "$SUSFS_REPO" "refs/heads/$branch")
+          if [ -n "$COMMIT" ]; then
+             echo "  $branch: $COMMIT"
+             if [ -z "$SUSFS_MAP" ]; then
+               SUSFS_MAP="$branch:$COMMIT"
+             else
+               SUSFS_MAP="$SUSFS_MAP,$branch:$COMMIT"
+             fi
+          else
+             echo "  $branch: Not found"
+          fi
+        done
+        
+        echo "susfs_commit=$SUSFS_MAP" >> $GITHUB_OUTPUT

.github/actions/hakan/action.yml

@@ -0,0 +1,21 @@
+name: Setup RFKILL Modules
+description: Configure WiFi/Bluetooth RFKILL modules for Hakan variant
+
+runs:
+  using: composite
+  steps:
+    - name: Configure RFKILL for WiFi/Bluetooth
+      shell: bash
+      working-directory: ${{ github.workspace }}/kernel
+      run: |
+        cat >> "${{ github.workspace }}/wild_gki.fragment" << 'EOF'
+        CONFIG_RFKILL=y
+        CONFIG_CFG80211=y
+        CONFIG_MAC80211=y
+        EOF
+
+        # Remove libarc4.ko and rfkill.ko from modules list
+        sed -i \
+          -e '/_COMMON_GKI_MODULES_LIST = \[/,/^[[:space:]]*\]/{/^[[:space:]]*"lib\/crypto\/libarc4\.ko",[[:space:]]*$/d}' \
+          -e '/_COMMON_GKI_MODULES_LIST = \[/,/^[[:space:]]*\]/{/^[[:space:]]*"net\/rfkill\/rfkill\.ko",[[:space:]]*$/d}' \
+          common/modules.bzl