This week's work advances on three fronts: kernel and bleedingedge alignment across Rockchip and Sunxi trees, board and platform enablement spanning RV1106 to SpacemiT, and CI hardening with self-hosted runner maintenance.
On the kernel side, bleedingedge was bumped to 7.1-rc3, accompanied by cfg80211 API fixes and re-enablement of the rtl8189fs and rtl8852bs drivers for the new release. Both the rockchip64 and sunxi patch stacks for current and edge were rewritten, an upstream ptrace fix for CVE-2026-46333 was backported to linux-rockchip, and the odroidxu4-current kernel moved to 6.6.139.
Platform enablement was broad. The Ayn Odin2 gained 7.0 kernel support, the Mekotronics R58X-Pro switched its vendor build to mainline U-Boot with a corrected LCD driver, and the H96 TV box advanced to U-Boot v2026.04. RV1106 transitioned from extlinux to a bootscript and gained DS1307, PCF85063, and RV8803 RTC drivers, while SpacemiT received OpenSBI, U-Boot, and BPI-F3 DTS fixups. Smaller but user-visible improvements include NanoPi M5 second USB3 port exposure via DRD0 host-mode pinning, NORCO EMB-3531 LPDDR4X variants, RK3528 USB2 PHY corrections for high-speed NCM, and UEFI x86 images enabling iwlwifi MLD and Intel SOF audio for MTL, LNL, and PTL.
Infrastructure work centered on self-hosted runner reliability and supply-chain hygiene. A new runner-cleanup module provides hourly disk and memory maintenance, skips busy runners, and ships via .deb, while a maintenance watchdog was added to the SDK repository. Multiple StepSecurity hardening passes landed across build and SDK workflows, though an overly strict egress-policy was subsequently reverted after breaking builds.
#Armbian #EmbeddedLinux #Rockchip #RISCV #KernelDevelopment
Changes
- Actions: Cleanup "Release" workflow. by @vidplace7 in armbian/MorseMicro-DKMS#4
- Actions: Create release workflow. by @vidplace7 in armbian/MorseMicro-DKMS#3
- Ayn Odin2 kernel 7.0 support. by @kasimling in armbian/build#9706
- Build for riscv64. by @vidplace7 in armbian/MorseMicro-DKMS#5
- Bump actions/download-artifact from 7 to 8. by @igorpecovnik in armbian/os#464
- Bump versions: stable 26.5.0, nightly 26.8.0-trunk.1. by @igorpecovnik in armbian/os#461
- bump
bleedingedgeto 7.1-rc3. by @EvilOlaf in armbian/build#9806 - cfg80211: fix API changes for Linux 7.1. by @EvilOlaf in armbian/wifi-rtl8852bs#5
- change recomputer rk35xx fan speed. by @ackPeng in armbian/linux-rockchip#472
- ci: add maintenance watchdog + rename action.yml → build-armbian-sdk.yml. by @igorpecovnik in armbian/sdk#25
- ci: drop step-security/harden-runner steps (egress-policy was breaking builds). by @igorpecovnik in armbian/sdk#26
- desktops: ship fprintd userspace at mid tier. by @igorpecovnik in armbian/configng#918
- desktops: split light/dark wallpapers in gnome + bianbu postinsts. by @igorpecovnik in armbian/configng#905
- Disable: SpacemiT: fix RX DMA params not set when TX is running. by @pyavitz in armbian/build#9808
- drivers_network: bump rtl8852bs commit ref to 35d3e266 (May 17). by @igorpecovnik in armbian/build#9841
- drop old
lcd_vk2c21LCD driver that never worked; backport workingvinka,vk2c21driver; fix Mekos DTs. by @rpardini in armbian/linux-rockchip#482 - ebyte-ecb41-pge: Add spidev overlays (RPi-compatible). by @vidplace7 in armbian/linux-rockchip#467
- firmware-sof-signed: move from cli/amd64 baseline to UEFI common. by @igorpecovnik in armbian/build#9857
- fix(deps): add Pygments to requirements.txt (rich.syntax dep). by @iav in armbian/build#9819
- luckfox-lyra-zero-w: Default to onboard wifi antenna, add ipex overlay. by @vidplace7 in armbian/linux-rockchip#468
- maintenance-watchdog: target the workflow that actually exists. by @igorpecovnik in armbian/configng#915
- Mekotronics R58X-Pro (vendor): use mainline u-boot for vendor; use new LCD driver. by @rpardini in armbian/build#9836
- module_armbian_runners: skip busy runners + ship runner-cleanup assets via .deb. by @igorpecovnik in armbian/configng#914
- module_qbittorrent: poll for temporary password before showing dialog. by @igorpecovnik in armbian/configng#916
- nanopi-m5: pin DRD0 dwc3 to host mode to expose the second USB3 port. by @SuperKali in armbian/build#9844
- NORCO EMB-3531: Add LPDDR4X variants support. by @retro98boy in armbian/build#9823
- patch/sunxi-6.12: drop two Rockchip SPI patches (not applicable to sunxi). by @igorpecovnik in armbian/build#9827
- postinst/gnome: enable tap-to-click + clickpad right-click out of the box. by @igorpecovnik in armbian/configng#917
- Potential fix for code scanning alert no. 2: Code injection. by @iav in armbian/build#9799
- ptrace: backport upstream fix for CVE-2026-46333 (ssh-keysign-pwn). by @SuperKali in armbian/linux-rockchip#481
- restore backwards compatibility. by @EvilOlaf in armbian/wifi-rtl8852bs#6
- rockchip rk3566: h96-TVbox: bump to uboot v2026.04. by @hqnicolas in armbian/build#9807
- rockchip64-6.18: rebase rk3399 dwc3 phy-reset-quirk patch for 6.18.32. by @SuperKali in armbian/build#9847
- rockchip64: fix RK3528 USB2 PHY regmap split for high-speed NCM. by @rubycomm in armbian/build#9785
- rockchip64: opt-in helios64 CPU stability overlay (current + edge). by @iav in armbian/build#9822
- rockchip64: rewrite patches of current and edge. by @EvilOlaf in armbian/build#9829
- rtl8189fs: fix compilation for 7.1 and re-enable. by @EvilOlaf in armbian/build#9813
- rtl8852bs: re-enable for bleedingedge. by @EvilOlaf in armbian/build#9831
- runner-cleanup: drop redundant age-based _diag prune. by @igorpecovnik in armbian/configng#921
- runner-cleanup: hourly disk + memory maintenance for self-hosted runner hosts. by @igorpecovnik in armbian/configng#913
- runner-cleanup: wipe _diag/pages/ alongside _work/. by @igorpecovnik in armbian/configng#919
- runner-cleanup: wipe ~/_diag/ on every runner each pass. by @igorpecovnik in armbian/configng#920
- RV1106: add support for additional RTC drivers (DS1307, PCF85063, RV8803). by @vidplace7 in armbian/build#9812
- RV1106: Switch u-boot from extlinux to bootscript. by @vidplace7 in armbian/build#9801
- SpacemiT: Fixup OpenSBI, U-Boot and BPI-F3 DTS. by @pyavitz in armbian/build#9838
- sunxi: rewrite kernel patches of current and edge. by @EvilOlaf in armbian/build#9828
- uefi-x86: enable iwlwifi MLD + Intel SOF (MTL/LNL/PTL) audio. by @igorpecovnik in armbian/build#9846
- Update documentation / packaging URLs. by @vidplace7 in armbian/MorseMicro-DKMS#2
- Update MorseMicro suite to 1.17.8. by @vidplace7 in armbian/MorseMicro-DKMS#1
- Update nanopi r5s udev rule tweak for persistent net interface names. by @ruabmbua in armbian/build#9811
- Update odroidxu4-current to 6.6.139. by @belegdol in armbian/build#9837
- Workaround devcontainer/ci platform issues. by @vidplace7 in armbian/MorseMicro-DKMS#6
- [StepSecurity] Apply security best practices. by @step-security-bot in armbian/build#9833
- [StepSecurity] Apply security best practices. by @step-security-bot in armbian/build#9839
- [StepSecurity] Apply security best practices. by @step-security-bot in armbian/sdk#24
- [StepSecurity] ci: Harden GitHub Actions. by @step-security-bot in armbian/build#9803
- [StepSecurity] ci: Harden GitHub Actions. by @step-security-bot in armbian/build#9825