linuxboot · tlaurion · Jul 29, 2025 · Jul 29, 2025 · Jul 30, 2025 · Aug 11, 2025
diff --git a/Makefile b/Makefile
@@ -642,21 +642,21 @@ endef
 define initrd_bin_add =
 $(initrd_bin_dir)/$(notdir $1): $1
 	$(call do,INSTALL-BIN,$$(<:$(pwd)/%=%),cp -a --remove-destination "$$<" "$$@")
-	@$(CROSS)strip --preserve-dates "$$@" 2>&-; true
+	@$(CROSS)strip --preserve-dates --strip-all "$$@" 2>&-; true
 initrd_bins += $(initrd_bin_dir)/$(notdir $1)
 endef
 
 define initrd_lib_add =
 $(initrd_lib_dir)/$(notdir $1): $1
 	$(call do,INSTALL-LIB,$(1:$(pwd)/%=%),\
-		$(CROSS)strip --preserve-dates -o "$$@" "$$<")
+		$(CROSS)strip --preserve-dates --strip-all -o "$$@" "$$<")
 initrd_libs += $(initrd_lib_dir)/$(notdir $1)
 endef
 
 # Only some modules have binaries that we install
 # Shouldn't this be specified in the module file?
 #bin_modules-$(CONFIG_MUSL) += musl-cross-make
-bin_modules-$(CONFIG_KEXEC) += kexec
+bin_modules-$(CONFIG_KEXEC) += kexec-tools
 bin_modules-$(CONFIG_TPMTOTP) += tpmtotp
 bin_modules-$(CONFIG_PCIUTILS) += pciutils
 bin_modules-$(CONFIG_FLASHROM) += flashrom
@@ -705,6 +705,16 @@ $(foreach m, $(modules-y), \
 # this must be built *AFTER* musl, but since coreboot depends on other things
 # that depend on musl it should be ok.
 #
+# TODO_GCC_15_COREBOOT_CBMEM: GCC 15.1.0 compatibility fix for coreboot cbmem utility
+# The coreboot cbmem utility uses -Werror and GCC 15.1.0 generates new warnings 
+# about string initialization that weren't present in earlier versions.
+# Added -Wno-unterminated-string-initialization to suppress these warnings.
+# This should be moved to a proper coreboot module configuration when 
+# modules/coreboot is refactored to use standard module variables like other modules.
+# See: error "initializer-string for array of 'char' truncates NUL terminator"
+# Related modules: modules/coreboot (needs _configure and _target variables)
+# Alternative: Move this to use heads_cc extension or per-module CC override pattern
+#
 COREBOOT_UTIL_DIR=$(build)/$(coreboot_base_dir)/util
 ifeq ($(CONFIG_COREBOOT),y)
 $(eval $(call initrd_bin_add,$(COREBOOT_UTIL_DIR)/cbmem/cbmem))
@@ -718,6 +728,7 @@ $(COREBOOT_UTIL_DIR)/inteltool/inteltool \
 : $(build)/$(coreboot_base_dir)/.canary musl-cross-make
 	+$(call do,MAKE,$(notdir $@),\
 		$(MAKE) -C "$(dir $@)" $(CROSS_TOOLS) \
+			CC="$(heads_cc) -Wno-unterminated-string-initialization" \
 	)
 
 # superio depends on zlib and pciutils

diff --git a/modules/bash b/modules/bash
@@ -10,7 +10,10 @@ bash_hash := 5bac17218d3911834520dad13cd1f85ab944e1c09ae1aba55906be1f8192f558
 # --enable-debugger: Enables BASH_SOURCE tracing through functions as well as
 # BASH_ARGV/BASH_ARGC.  (Otherwise BASH_SOURCE[0] is empty when calling a
 # function, it's only set in top level script code.)
-bash_configure := CFLAGS="-g0 -Os" LDFLAGS="-s" ./configure \
+# TODO_GCC_15_BASH: Added -std=gnu11 for C23 keyword compatibility (bool, true, false conflicts)
+# Also patched lib/termcap/tparam.c to include <unistd.h> for write() function declaration
+# Consider reverting when bash is updated for GCC 15.1.0 compatibility
+bash_configure := CFLAGS="-g0 -Oz -std=gnu11" LDFLAGS="-s" ./configure \
 	$(CROSS_TOOLS) \
 	--host $(target) \
 	--prefix="/usr" \

diff --git a/modules/cairo b/modules/cairo
@@ -6,8 +6,13 @@ cairo_tar := cairo-$(cairo_version).tar.xz
 cairo_url := https://www.cairographics.org/releases/$(cairo_tar)
 cairo_hash := 8c90f00c500b2299c0a323dd9beead2a00353752b2092ead558139bd67f7bf16
 
+#TODO_GCC_15_CAIRO: Requires all three flags for GCC 15.1.0 compatibility
+# -std=gnu11 (C23 bool keyword conflicts), -Wno-inline (inlining warnings), 
+# -Wno-incompatible-pointer-types (pointer type compatibility errors)
+#TODO_CAIRO_VERSION_BUMP: Cairo 1.14.12 is very old (2017-12-06), consider upgrading to cairo-1.18.4
+# or newer version which may have better GCC 15.1.0 compatibility and eliminate need for warning flags
 cairo_configure := \
-	CFLAGS="-DCAIRO_NO_MUTEX=1 -Os"  \
+	CFLAGS="-DCAIRO_NO_MUTEX=1 -Oz -std=gnu11 -Wno-inline -Wno-incompatible-pointer-types"  \
 	$(CROSS_TOOLS) \
 	./configure \
 	--host $(MUSL_ARCH)-elf-linux \

diff --git a/modules/coreboot b/modules/coreboot
@@ -1,5 +1,13 @@
 ifeq "$(CONFIG_COREBOOT)" "y"
 
+# TODO_GCC_15_COREBOOT: Consider refactoring coreboot module to use standard module patterns
+# The coreboot module currently doesn't follow the standard module pattern used by other 
+# modules (with _configure, _target variables, etc.). This makes it difficult to apply
+# per-module compiler flags like those needed for GCC 15.1.0 compatibility.
+# Current workaround: cbmem utility build in main Makefile uses CC override with 
+# -Wno-unterminated-string-initialization flag.
+# Future: Refactor to use standard module pattern or implement per-module heads_cc extension.
+
 CONFIG_COREBOOT_ROM			?= coreboot.rom
 CONFIG_COREBOOT_BOOTBLOCK	?=
 
@@ -82,6 +90,18 @@ $(eval $(call coreboot_module,24.02.01,))
 # talos_2 could use the 4.20.1 toolchain, but it's the only ppc64 fork, so
 # there is no point preparing another coreboot module that won't be shared with
 # anything.
+
+# GCC_15_PPC64_COREBOOT: PowerPC64 dual-compiler architecture GCC 15.1 compatibility
+# PowerPC64 builds use two different compilers:
+# 1. Coreboot components (bootblock/romstage/ramstage): Big-endian, coreboot's GCC 11.2.0 - no issues
+# 2. Skiboot payload: Little-endian, Heads' GCC 15.1 musl cross-compiler - requires patches
+# Skiboot compilation fixes applied via patches/coreboot-talos_2/0003-ugly_skiboot-patch_fix_for_newer_gcc_from_musl_125.patch
+# - Adds -Wno-error=unterminated-string-initialization for hardware definition arrays
+# - Adds -Wno-error=misleading-indentation for conditional statement formatting
+# - Maintains existing -Wno-error=address-of-packed-member and -Wno-error=format-overflow
+# Rationale: Third-party skiboot firmware has minimal upstream maintenance, warning suppressions
+# more maintainable than invasive code changes. Monitor for additional GCC 16+ warnings.
+
 coreboot-talos_2_repo := https://github.com/Dasharo/coreboot
 coreboot-talos_2_commit_hash := fc47236e9877f4113dfcce07fa928f52d4d2c8ee
 $(eval $(call coreboot_module,talos_2,))

diff --git a/modules/cryptsetup b/modules/cryptsetup
@@ -12,7 +12,7 @@ cryptsetup_hash := af2b04e8475cf40b8d9ffd97a1acfa73aa787c890430afd89804fb544d6ad
 # build path.
 cryptsetup_configure := \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os" \
+	CFLAGS="-Oz" \
 	./configure \
 	--host $(MUSL_ARCH)-elf-linux \
 	--prefix "/" \

diff --git a/modules/cryptsetup2 b/modules/cryptsetup2
@@ -12,7 +12,7 @@ cryptsetup2_hash := 410ded65a1072ab9c8e41added37b9729c087fef4d2db02bb4ef529ad6da
 # build path.
 cryptsetup2_configure := \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os" \
+	CFLAGS="-Oz" \
 	./configure \
 	--host $(MUSL_ARCH)-elf-linux \
 	--prefix "/" \

diff --git a/modules/dropbear b/modules/dropbear
@@ -1,11 +1,11 @@
 # dropbear is a tiny ssh client
 modules-$(CONFIG_DROPBEAR) += dropbear
 
-dropbear_version := 2016.74
+dropbear_version := 2025.88
 dropbear_dir := dropbear-$(dropbear_version)
 dropbear_tar := dropbear-$(dropbear_version).tar.bz2
-dropbear_url := https://mirror.dropbear.nl/mirror/releases/$(dropbear_tar)
-dropbear_hash := 2720ea54ed009af812701bcc290a2a601d5c107d12993e5d92c0f5f81f718891
+dropbear_url := https://matt.ucc.asn.au/dropbear/releases/$(dropbear_tar)
+dropbear_hash := 783f50ea27b17c16da89578fafdb6decfa44bb8f6590e5698a4e4d3672dc53d4
 
 dropbear_configure := ./configure \
 	$(CROSS_TOOLS) \
@@ -17,7 +17,12 @@ dropbear_configure := ./configure \
 	--disable-utmpx \
 	--disable-wtmp \
 	--disable-wtmpx \
-
+	--disable-loginfunc \
+	--disable-pututline \
+	--disable-pututxline \
+	--disable-openpty \
+	--disable-shadow \
+
 dropbear_output := ssh scp dropbear
 dropbear_target := \
 	$(MAKE_JOBS) \

diff --git a/modules/e2fsprogs b/modules/e2fsprogs
@@ -13,9 +13,11 @@ e2fsprogs_hash := 144af53f2bbd921cef6f8bea88bb9faddca865da3fbc657cc9b4d2001097d5
 # be generated with the correct paths, but then re-write them when
 # we use the install target so that they will be copied to the correct
 # location.
+#TODO_GCC_15_E2FSPROGS: Added -std=gnu11 for C23 compatibility (bool keyword redefinition conflicts)
+# Remove this TODO when e2fsprogs is updated for GCC 15.1.0 compatibility
 e2fsprogs_configure := \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os"  \
+	CFLAGS="-Oz -std=gnu11"  \
 	./configure \
 	--host $(MUSL_ARCH)-linux-musl \
 	--prefix "" \

diff --git a/modules/exfatprogs b/modules/exfatprogs
@@ -15,7 +15,7 @@ exfatprogs_hash := a6f3b1fb4bd37835c8f8cb421aac4eb75b880a51342b29850c40639731622
 # location.
 exfatprogs_configure := \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os"  \
+	CFLAGS="-Oz"  \
 	./configure \
 	--host $(MUSL_ARCH)-linux-musl \
 	--prefix "" \

diff --git a/modules/fbwhiptail b/modules/fbwhiptail
@@ -10,7 +10,7 @@ fbwhiptail_hash := 2eb8fadfd3e2d574de52327bbc80ed6313739a3db9f4d87840c534352c66d
 
 fbwhiptail_target := \
 	$(MAKE_JOBS) \
-    CFLAGS="-g0 -Os" \
+    CFLAGS="-g0 -Oz" \
     LDFLAGS="-s" \
 	$(CROSS_TOOLS) \
 	fbwhiptail

diff --git a/modules/flashprog b/modules/flashprog
@@ -29,7 +29,7 @@ endif
 
 flashprog_target := \
 	$(MAKE_JOBS) \
-	CFLAGS="-Os -I$(INSTALL)/include/pci" \
+	CFLAGS="-Oz -I$(INSTALL)/include/pci" \
 	DESTDIR="$(INSTALL)" \
 	INSTALL="$(INSTALL)" \
 	LDFLAGS="-L$(INSTALL)/lib" \

diff --git a/modules/flashrom b/modules/flashrom
@@ -29,7 +29,7 @@ endif
 
 flashrom_target := \
 	$(MAKE_JOBS) \
-	CFLAGS="-Os -I$(INSTALL)/include/pci" \
+	CFLAGS="-Oz -I$(INSTALL)/include/pci" \
 	DESTDIR="$(INSTALL)" \
 	INSTALL="$(INSTALL)" \
 	LDFLAGS="-L$(INSTALL)/lib" \

diff --git a/modules/flashtools b/modules/flashtools
@@ -11,7 +11,7 @@ flashtools_hash := a68cdb4a2e312f96862119a6d829ac900b53d0cbc80caa5632efd43b5b7ee
 flashtools_target := \
 	$(CROSS_TOOLS) \
 	$(MAKE_JOBS) \
-	CFLAGS="-Os -I$(INSTALL)/include" \
+	CFLAGS="-Oz -I$(INSTALL)/include" \
 	LDFLAGS="-L$(INSTALL)/lib" \
 
 flashtools_output := \

diff --git a/modules/gpg b/modules/gpg
@@ -18,7 +18,7 @@ gpg_hash := 6b47a3100c857dcab3c60e6152e56a997f2c7862c1b8b2b25adf3884a1ae2276
 # Otherwise it wil try to run tests.
 #
 gpg_configure := \
-	CFLAGS="-Os"  \
+	CFLAGS="-Oz"  \
 	$(CROSS_TOOLS) \
 	./configure \
 	--build $(MUSL_ARCH)-elf-linux \

diff --git a/modules/gpg2 b/modules/gpg2
@@ -12,11 +12,13 @@ gpg2_depends := libgpg-error libgcrypt libksba libassuan npth libusb $(musl_dep)
 # be generated with the correct paths, but then re-write them when
 # we use the install target so that they will be copied to the correct
 # location.
+
+#TODO: remove -std=gnu11 when bumping gpg2 version (current 2.4.0 has C23 compatibility issues with GCC 15.1.0 true keyword conflicts)
 gpg2_configure := \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os"  \
+	CFLAGS="-Oz -std=gnu11"  \
 	./configure \
-	CPPFLAGS="-I$(INSTALL)/include/libusb-1.0" \
+	CPPFLAGS="-I$(INSTALL)/include/libusb-1.0 -DDISABLE_PHOTO_VIEWER" \
 	--host $(MUSL_ARCH)-linux-musl \
 	--prefix "/" \
 	--libexecdir "/bin" \

diff --git a/modules/io386 b/modules/io386
@@ -11,7 +11,7 @@ io386_hash := 874898af57d86dc057cea39b4a7e0621fc64aa4fb777dfb1eeb11e9134bc9a06
 io386_target := \
 	$(MAKE_JOBS) \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os" \
+	CFLAGS="-Oz" \
 	SHARED=yes \
 	PREFIX="/" \
 	&& \

diff --git a/modules/ioport b/modules/ioport
@@ -6,7 +6,7 @@ ioport_tar := ioport_$(ioport_version).tar.gz
 ioport_url := https://deb.debian.org/debian/pool/main/i/ioport/$(ioport_tar)
 ioport_hash := 7fac1c4b61eb9411275de0e1e7d7a8c3f34166f64f16413f50741e8fce2b8dc0
 
-ioport_configure := CFLAGS=-Os ./configure \
+ioport_configure := CFLAGS=-Oz ./configure \
 	$(CROSS_TOOLS) \
 	--host i386-elf-linux \
 	--prefix "/" \

diff --git a/modules/kbd b/modules/kbd
@@ -14,7 +14,7 @@ kbd_tar := kbd-$(kbd_version).tar.gz
 kbd_url := https://www.kernel.org/pub/linux/utils/kbd/$(kbd_tar)
 kbd_hash := aaed530a1490d63d041448372e2ad4f38c3179042903251000b71d527c46e945
 
-kbd_configure := CFLAGS=-Os ./configure \
+kbd_configure := CFLAGS=-Oz ./configure \
 	$(CROSS_TOOLS) \
 	--host i386-elf-linux \
 	--prefix "" \

diff --git a/modules/kexec b/modules/kexec
diff --git a/modules/kexec-tools b/modules/kexec-tools
@@ -0,0 +1,27 @@
+modules-$(CONFIG_KEXEC) += kexec-tools
+
+kexec-tools_version := 2.0.31
+kexec-tools_dir := kexec-tools-$(kexec-tools_version)
+kexec-tools_tar := kexec-tools-$(kexec-tools_version).tar.gz
+kexec-tools_url := https://kernel.org/pub/linux/utils/kernel/kexec/$(kexec-tools_tar)
+kexec-tools_hash := ddaaa65b02b4f8aa9222586b1f26565b93a4baeffd35bcbd523f15fae7aa4897
+
+kexec-tools_configure := \
+	CFLAGS="-g -Oz -fno-strict-aliasing -Wall -Wstrict-prototypes" \
+	./configure \
+	$(CROSS_TOOLS) \
+	--host $(MUSL_ARCH)-elf-linux \
+	--target $(MUSL_ARCH) \
+	--prefix="/" \
+	--without-lzma \
+	&& $(MAKE) clean
+
+kexec-tools_target := \
+	$(MAKE_JOBS) \
+	$(CROSS_TOOLS) \
+	DESTDIR="$(INSTALL)" \
+	install \
+
+kexec-tools_output := build/sbin/kexec
+
+kexec-tools_depends := zlib $(musl_dep)
diff --git a/modules/libassuan b/modules/libassuan
@@ -7,7 +7,7 @@ libassuan_url := https://gnupg.org/ftp/gcrypt/libassuan/$(libassuan_tar)
 libassuan_hash := 8e8c2fcc982f9ca67dcbb1d95e2dc746b1739a4668bc20b3a3c5be632edb34e4
 
 libassuan_configure := \
-	CFLAGS="-Os" \
+	CFLAGS="-Oz" \
 	$(CROSS_TOOLS) \
 	./configure \
 	--host $(MUSL_ARCH)-linux-musl \

diff --git a/modules/libgcrypt b/modules/libgcrypt
@@ -8,12 +8,13 @@ libgcrypt_hash := ef14ae546b0084cd84259f61a55e07a38c3b53afc0f546bffcef2f01baffe9
 
 libgcrypt_configure := \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os"  \
+	CFLAGS="-Oz"  \
 	./configure \
 	--host=$(MUSL_ARCH)-linux-musl \
 	--prefix "/" \
 	--disable-doc \
 	--disable-static \
+	--disable-jent-support \
 	--with-gpg-error-prefix="$(INSTALL)" \
 
 libgcrypt_target := $(MAKE_JOBS) \

diff --git a/modules/libgpg-error b/modules/libgpg-error
@@ -8,7 +8,7 @@ libgpg-error_hash := b7e11a64246bbe5ef37748de43b245abd72cfcd53c9ae5e7fc5ca59f1c8
 
 libgpg-error_configure := \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os"  \
+	CFLAGS="-Oz"  \
 	./configure \
 	--host=$(MUSL_ARCH)-linux-musl \
 	--prefix "/" \

diff --git a/modules/libhidapi-libusb b/modules/libhidapi-libusb
@@ -9,7 +9,7 @@ libhidapi-libusb_url := https://github.com/libusb/hidapi/archive/$(libhidapi-lib
 libhidapi-libusb_hash := 630ee1834bdd5c5761ab079fd04f463a89585df8fcae51a7bfe4229b1e02a652
 
 MY_CROSS_TOOLS := \
-	CC="$(heads_cc) -Os" \
+	CC="$(heads_cc) -Oz" \
 	$(CROSS_TOOLS_NOCC) \
 
 

diff --git a/modules/libksba b/modules/libksba
@@ -8,7 +8,7 @@ libksba_hash := 3f72c68db30971ebbf14367527719423f0a4d5f8103fc9f4a1c01a9fa440de5c
 
 libksba_configure := \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os" \
+	CFLAGS="-Oz" \
 	./configure \
 	--host $(MUSL_ARCH)-linux-musl \
 	--prefix "/" \

diff --git a/modules/libnitrokey b/modules/libnitrokey
@@ -15,7 +15,7 @@ libnitrokey_hash := 4f3382b6193afe69c2001321038fce9490bc28803ed687152a397ccd8914
 cmake_cross := "-DCMAKE_AR=$(CROSS)ar" \
 	-DCMAKE_CXX_COMPILER="$(CROSS)g++" \
 	-DCMAKE_CXX_COMPILER_AR="$(CROSS)ar" \
-	-DCMAKE_CXX_FLAGS="-Os -fdata-sections -ffunction-sections -ffile-prefix-map=$(pwd)=heads -gno-record-gcc-switches -D__MUSL__ -I$(INSTALL)/include -L$(INSTALL)/lib " \
+	-DCMAKE_CXX_FLAGS="-Oz -fdata-sections -ffunction-sections -ffile-prefix-map=$(pwd)=heads -gno-record-gcc-switches -D__MUSL__ -I$(INSTALL)/include -L$(INSTALL)/lib " \
 	-DCMAKE_C_COMPILER="$(CROSS)gcc" \
 	-DCMAKE_LINKER="$(CROSS)ld"
 	-DCMAKE_NM="$(CROSS)nm" \

diff --git a/modules/libpng b/modules/libpng
@@ -8,7 +8,7 @@ libpng_hash := 574623a4901a9969080ab4a2df9437026c8a87150dfd5c235e28c94b212964a7
 
 libpng_configure := \
 	$(CROSS_TOOLS) \
-	CFLAGS="-Os" \
+	CFLAGS="-Oz" \
 	./configure \
 	--host $(MUSL_ARCH)-elf-linux \
 	--prefix="/" \