gentoo resync : 24.09.2020

3 files changed, 260 insertions, 0 deletions

diff --git a/sys-kernel/vanilla-kernel/Manifest b/sys-kernel/vanilla-kernel/Manifest
index 9df5fd506938..3cbaa341a64b 100644
--- a/sys-kernel/vanilla-kernel/Manifest
+++ b/sys-kernel/vanilla-kernel/Manifest
@@ -22,10 +22,12 @@ DIST linux-5.4.63.tar.xz 109583360 BLAKE2B f1afaf0d30b26ce325e9b7e4c8b328749f466
 DIST linux-5.4.64.tar.xz 109593152 BLAKE2B f0bea4ef1fac7a4744848d6328175d1cd200023eba9398bc46511e88e7ad51b559732202d642df60bb5032004e42aae753eb9d7b049781d12303f48e3aece6bc SHA512 135e62581e9bef772a5c68a2b1945bbe09689d5d8bda41a09efdd7ba7cd99afa8010c4157a5d23badeb8b6f9832c53ffda49d1dd6c5862f01b9756ceca9ebcec
 DIST linux-5.4.65.tar.xz 109587504 BLAKE2B 3cc1040e324ba0ffb95b1b075621264623a1f17b929b77af4231dfff0a494fbab2d4acbe20fcd39bc216ac21ad425ed8ff3b703b46aebf9df7009626621b8f8b SHA512 f457e7cf3f1a241a187ab8251238e0fad5308ca0f30623908ddaead32041797db02438a4a926c73b504774516db400e9c95427f4f24f60efbde65bb9e7926f0f
 DIST linux-5.4.66.tar.xz 109584352 BLAKE2B 5b2f08dfac6069f2a5a842de69b572691d4d6857f07c38c3fee2e2d327b3ddfd2ed7c17e18ef60bfaad3f36161ca61d8796ac537b2a783c5a6580d0abae49357 SHA512 06cfd689542805cb843b19993242adee5d41a383ae6f4c730073f4d56e78a2d9e92f8d012de7635a67290c83cf204302a839ca8d4395869a4c0d4e2457283c05
+DIST linux-5.4.67.tar.xz 109587704 BLAKE2B 0870c932888bbd75e04195e2a8106bf83e1df0ba99d1bab625cdd973d4c96d6ca99e8ec2d2cf9633c116c431beaa035046c4b971a9b6e50733eb64051d5f52d6 SHA512 1b1b1db72df2dc4a438ae64f1a099a5e5ca4e9aeec0d18688fdb4310cd8080b57d0c4bd718b715a5b1f608bb372079a0a49994f0cadefe68a8bc4189d5d9d658
 DIST linux-5.7.17.tar.xz 112744000 BLAKE2B ef73f9c940d678465d1ff2c4eb880b6878827f563942666aab0fb49be9c24d6a12a78a2c569c9cb35023c82a195945b392ca00a933726701c0cff092f71141b6 SHA512 e4618e3d28882b81699892eb04b266a3e0b508806d02bd9671c84027a5a343535561b7094755ab6358ffd72e9ce5a2296b126ce9218a334b260c31535e2de59f
 DIST linux-5.7.18.tar.xz 112759392 BLAKE2B 22fb5388521bd824a8ecbde7484db3319817eaebc6c74b5f615b872ec18b1cf6abd6b9aed651400bfee2b12e2d759a066ea79412021202a05b8fa1934b9b14aa SHA512 d84a1dfb3ae6fad1f4ca3b42bbd01e9b6e1543e23f319237bc4db2381770df5a30d799cf5ed6ca85c5ece6779502327afdb4892452f612b9e4dbca3305c9901c
 DIST linux-5.7.19.tar.xz 112742648 BLAKE2B 408fdc49f8a341f6d7c0fead1ddc1b0816caf4a7393286127440a6ec1b513cd413067d6e56180310cc9d634b95c9583b7f38ae4711cd115f4ac2f08918e6b916 SHA512 c64aacd11f90dd1fb4f163ba3757ba52543c8a3c3932b9600109ad2b8ac97c8819d430067266e1e347998b5e9df92f7c0f1945a73142442ba5bccd41439a4988
 DIST linux-5.8.10.tar.xz 114493036 BLAKE2B 9cfc3a8ac707e3b08ee690661b9b5ad1ac249158c34416563ccb3bd8988814faf3ead9b2ec7405ef5d75a9672365ee96e1d4c0c659a63728e5c5bdea768bee7a SHA512 cff8cbbf30b8a8b3e151573d36dd6a36e3ddf849f1866f02c811c30a95945d76752051aff6c5b680d19d72dc42a6238ba438f3e00755c1eb64b5ba0276fbad0f
+DIST linux-5.8.11.tar.xz 114496860 BLAKE2B 64a128f29cc18146625e5a7424438324cd41da18a10fc6cac89a0da2b9deda9df039b516b79a8d3e8fdabf23d03608cc30aff15bf673e27c8febfbbd8a200540 SHA512 bb6994f09aabfb0076f3023dd8359c5c569a4b398d3a3c3c8d6b27052092cab56ad675f45dd6ceba7fe431f2a6a587858f3c21415b5a00adb346bd2c68d85b0f
 DIST linux-5.8.3.tar.xz 114473912 BLAKE2B 9d2913bbaf4afabd8f654abd0a2a3c62df043a613cbc2518944f5889d1a760ab6401e76d0b67b0cc9fbe05c8a0e280fe9b2ebf125f50ff5962f097956642fd8e SHA512 a23973139bf105e202621f6181be366e1a933aefd1da9a347d3a19c0917ba16dd271b5c8d90a8c527791fb0f7535a1cc1bbecd118598b500c881d16ff7d64157
 DIST linux-5.8.4.tar.xz 114478188 BLAKE2B d9cb7a130e69de2fd176e5ce4236cfe5f4f31cf96f963a1f04e94958d0b064a7cf34c5a2d7e37500892fd840214ce1fc6f2ffb3050cbf8678ffe612bbd1cf51d SHA512 b1fb4586932369f2853360aaab702baaa994be5a88c0a746b7272d7c29c864ac2f0302bd82664f58d29f7b464bc98603167211ea886aa15ea1cd6d12d422ba61
 DIST linux-5.8.5.tar.xz 114482912 BLAKE2B 751cded511b08dd541cd6ae2365602068138641d4a6ade4205936dd1ec1de5a01441a2822afde25fd83004896e8ae02a70af37482dc4b09fa9fc52ca8bd05a8c SHA512 30832e10d14f87f62542cc8a58d2d7d54cbfd0e99de772f79364354a09c2aff2c5bd07bcd06e1e7523a404aa39829355b6b198334472d3070dc7a4f810ed0f20
@@ -40,10 +42,12 @@ EBUILD vanilla-kernel-5.4.63.ebuild 2331 BLAKE2B 2db7af661ddee2c8e34e869a94608cd
 EBUILD vanilla-kernel-5.4.64.ebuild 4058 BLAKE2B 48fcc3d1a3acc6065ed9fed27e6953d9c4cdd73c15d034bf77baf271aef89455e0d3bab7df8ef69e8fd67036a268fd21f55f67772f2d69dae185329282cebcda SHA512 54a487cbd08a736b880bc8897aaaf44684158d93eb190d7ca95eaebbda8534694842c11239bd829061c7693467735fae325a243c6634da97a193e72ba5f50d7b
 EBUILD vanilla-kernel-5.4.65.ebuild 4058 BLAKE2B 48fcc3d1a3acc6065ed9fed27e6953d9c4cdd73c15d034bf77baf271aef89455e0d3bab7df8ef69e8fd67036a268fd21f55f67772f2d69dae185329282cebcda SHA512 54a487cbd08a736b880bc8897aaaf44684158d93eb190d7ca95eaebbda8534694842c11239bd829061c7693467735fae325a243c6634da97a193e72ba5f50d7b
 EBUILD vanilla-kernel-5.4.66.ebuild 4058 BLAKE2B 48fcc3d1a3acc6065ed9fed27e6953d9c4cdd73c15d034bf77baf271aef89455e0d3bab7df8ef69e8fd67036a268fd21f55f67772f2d69dae185329282cebcda SHA512 54a487cbd08a736b880bc8897aaaf44684158d93eb190d7ca95eaebbda8534694842c11239bd829061c7693467735fae325a243c6634da97a193e72ba5f50d7b
+EBUILD vanilla-kernel-5.4.67.ebuild 4058 BLAKE2B 48fcc3d1a3acc6065ed9fed27e6953d9c4cdd73c15d034bf77baf271aef89455e0d3bab7df8ef69e8fd67036a268fd21f55f67772f2d69dae185329282cebcda SHA512 54a487cbd08a736b880bc8897aaaf44684158d93eb190d7ca95eaebbda8534694842c11239bd829061c7693467735fae325a243c6634da97a193e72ba5f50d7b
 EBUILD vanilla-kernel-5.7.17.ebuild 2122 BLAKE2B 75a9ccc58ce263daf9a3b0639c234aad384338fb59d14d98cf28ad60b5b27caeace35328a34b13cf137f38c6da6cd16644781fa9530d6be209567b0ba3ac5a5c SHA512 c8636b5da9930ad315b5339005492fe5f9b6932d1b088c0fc69e0a842406ad1755a84d39a88aaa40636cd073dd9c9543fc7180d77b740f1a4ca383b0b160b70b
 EBUILD vanilla-kernel-5.7.18.ebuild 2122 BLAKE2B 75a9ccc58ce263daf9a3b0639c234aad384338fb59d14d98cf28ad60b5b27caeace35328a34b13cf137f38c6da6cd16644781fa9530d6be209567b0ba3ac5a5c SHA512 c8636b5da9930ad315b5339005492fe5f9b6932d1b088c0fc69e0a842406ad1755a84d39a88aaa40636cd073dd9c9543fc7180d77b740f1a4ca383b0b160b70b
 EBUILD vanilla-kernel-5.7.19.ebuild 2122 BLAKE2B 75a9ccc58ce263daf9a3b0639c234aad384338fb59d14d98cf28ad60b5b27caeace35328a34b13cf137f38c6da6cd16644781fa9530d6be209567b0ba3ac5a5c SHA512 c8636b5da9930ad315b5339005492fe5f9b6932d1b088c0fc69e0a842406ad1755a84d39a88aaa40636cd073dd9c9543fc7180d77b740f1a4ca383b0b160b70b
 EBUILD vanilla-kernel-5.8.10.ebuild 4007 BLAKE2B 6ed6d6dadc0939bcad36d1f5730a7806dc1e5bdb77b413d7ae209596ad344fc5186a00cc12ea07becd6d378359c6e129b1db1b1a08cf0d4e412385d66b3067ea SHA512 39267d528574bb9dc9ae3e55fd4e6f09c177b13a7659af04b732fd5c18a131a842b3f40d1090d0304af2a9136b55f071b140f4a37ae99baa40991d12013d8527
+EBUILD vanilla-kernel-5.8.11.ebuild 4007 BLAKE2B 6ed6d6dadc0939bcad36d1f5730a7806dc1e5bdb77b413d7ae209596ad344fc5186a00cc12ea07becd6d378359c6e129b1db1b1a08cf0d4e412385d66b3067ea SHA512 39267d528574bb9dc9ae3e55fd4e6f09c177b13a7659af04b732fd5c18a131a842b3f40d1090d0304af2a9136b55f071b140f4a37ae99baa40991d12013d8527
 EBUILD vanilla-kernel-5.8.3.ebuild 2122 BLAKE2B b63ecbbaa471585533431f70a6a78c0848f7d865237119ad9ef8b7d0009997ecc62d9dd7438620c1fb588094e3b690c12f538ac12bdb3dac7462dfd2f57f8b97 SHA512 b24e8a73fd13087fca5d9b45ddd8f601a449de5a28bebda4132e3c418700147264910357e95791d257543c9c218b201ab3b7de2393c2f7da1afc3e2d2d0cefc4
 EBUILD vanilla-kernel-5.8.4.ebuild 2122 BLAKE2B b63ecbbaa471585533431f70a6a78c0848f7d865237119ad9ef8b7d0009997ecc62d9dd7438620c1fb588094e3b690c12f538ac12bdb3dac7462dfd2f57f8b97 SHA512 b24e8a73fd13087fca5d9b45ddd8f601a449de5a28bebda4132e3c418700147264910357e95791d257543c9c218b201ab3b7de2393c2f7da1afc3e2d2d0cefc4
 EBUILD vanilla-kernel-5.8.5.ebuild 2122 BLAKE2B 4999640130cf746272878a92aababaa6c60dde9853bb91c14ad2917ca44629565e2445184e8ad3cdfc6a1d4e48169fa050c619c30f93de293b7439130e8ac613 SHA512 9cf4fda01b9e4f5f4ee7cb725f0dde5040e72b9a117abc133e19eab753faa64aea32d335133e0841625c837ffaed696c95f78c20dd6b8cd67640c6b569c3d3b2
diff --git a/sys-kernel/vanilla-kernel/vanilla-kernel-5.4.67.ebuild b/sys-kernel/vanilla-kernel/vanilla-kernel-5.4.67.ebuild
new file mode 100644
index 000000000000..ee1e12c459a7
--- /dev/null
+++ b/sys-kernel/vanilla-kernel/vanilla-kernel-5.4.67.ebuild
@@ -0,0 +1,129 @@
+# Copyright 2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit kernel-build
+
+MY_P=linux-${PV}
+# https://koji.fedoraproject.org/koji/packageinfo?packageID=8
+CONFIG_VER=5.4.21
+CONFIG_HASH=2809b7faa6a8cb232cd825096c146b7bdc1e08ea
+
+DESCRIPTION="Linux kernel built from vanilla upstream sources"
+HOMEPAGE="https://www.kernel.org/"
+SRC_URI+=" https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${MY_P}.tar.xz
+	amd64? (
+		https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-x86_64.config
+			-> kernel-x86_64.config.${CONFIG_VER}
+	)
+	arm64? (
+		https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-aarch64.config
+			-> kernel-aarch64.config.${CONFIG_VER}
+	)
+	ppc64? (
+		https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-ppc64le.config
+			-> kernel-ppc64le.config.${CONFIG_VER}
+	)
+	x86? (
+		https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-i686.config
+			-> kernel-i686.config.${CONFIG_VER}
+	)"
+S=${WORKDIR}/${MY_P}
+
+LICENSE="GPL-2"
+KEYWORDS="~amd64 ~arm64 ~x86"
+IUSE="debug"
+
+RDEPEND="
+	!sys-kernel/vanilla-kernel-bin:${SLOT}"
+BDEPEND="
+	debug? ( dev-util/dwarves )"
+
+pkg_pretend() {
+	ewarn "Starting with 5.4.52, Distribution Kernels are switching from Arch"
+	ewarn "Linux configs to Fedora.  Please keep a backup kernel just in case."
+
+	kernel-install_pkg_pretend
+}
+
+src_prepare() {
+	default
+
+	# prepare the default config
+	case ${ARCH} in
+		amd64)
+			cp "${DISTDIR}/kernel-x86_64.config.${CONFIG_VER}" .config || die
+			;;
+		arm64)
+			cp "${DISTDIR}/kernel-aarch64.config.${CONFIG_VER}" .config || die
+			;;
+		ppc64)
+			cp "${DISTDIR}/kernel-ppc64le.config.${CONFIG_VER}" .config || die
+			;;
+		x86)
+			cp "${DISTDIR}/kernel-i686.config.${CONFIG_VER}" .config || die
+			;;
+		*)
+			die "Unsupported arch ${ARCH}"
+			;;
+	esac
+
+	local config_tweaks=(
+		# replace (none) with gentoo
+		-e 's:^CONFIG_DEFAULT_HOSTNAME=:&"gentoo":'
+		# we do support x32
+		-e '/CONFIG_X86_X32/s:.*:CONFIG_X86_X32=y:'
+		# disable signatures
+		-e '/CONFIG_MODULE_SIG/d'
+		-e '/CONFIG_SECURITY_LOCKDOWN/d'
+		-e '/CONFIG_KEXEC_SIG/d'
+		-e '/CONFIG_KEXEC_BZIMAGE_VERIFY_SIG/d'
+		-e '/CONFIG_SYSTEM_EXTRA_CERTIFICATE/d'
+		-e '/CONFIG_SIGNATURE/d'
+		# remove massive array of LSMs
+		-e 's/CONFIG_LSM=.*/CONFIG_LSM="yama"/'
+		-e 's/CONFIG_DEFAULT_SECURITY_SELINUX=y/CONFIG_DEFAULT_SECURITY_DAC=y/'
+		# nobody actually wants fips
+		-e '/CONFIG_CRYPTO_FIPS/d'
+		# these tests are really not necessary
+		-e 's/.*CONFIG_CRYPTO_MANAGER_DISABLE_TESTS.*/CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y/'
+		# probably not needed by anybody but developers
+		-e '/CONFIG_CRYPTO_STATS/d'
+		# 1000hz is excessive for laptops
+		-e 's/CONFIG_HZ_1000=y/CONFIG_HZ_300=y/'
+		# nobody is using this kernel on insane super computers
+		-e 's/CONFIG_NR_CPUS=.*/CONFIG_NR_CPUS=512/'
+		# we're not actually producing live patches for folks
+		-e 's/CONFIG_LIVEPATCH=y/CONFIG_LIVEPATCH=n/'
+		# this slows down networking in general
+		-e 's/CONFIG_IP_FIB_TRIE_STATS=y/CONFIG_IP_FIB_TRIE_STATS=n/'
+		# include font for normal and hidpi screens
+		-e 's/.*CONFIG_FONTS.*/CONFIG_FONTS=y\nCONFIG_FONT_8x16=y\nCONFIG_FONT_TER16x32=y/'
+		# we don't need to actually install system headers from this ebuild
+		-e '/CONFIG_HEADERS_INSTALL/d'
+		# enable /proc/config.gz, used by linux-info.eclass
+		-e '/CONFIG_IKCONFIG/s:.*:CONFIG_IKCONFIG=y\nCONFIG_IKCONFIG_PROC=y:'
+		# WireGuard was backported to 5.4 but we use old configs (#739128)
+		-e '$aCONFIG_WIREGUARD=m'
+	)
+	use debug || config_tweaks+=(
+		-e '/CONFIG_DEBUG_INFO/d'
+		-e '/CONFIG_DEBUG_RODATA_TEST/d'
+		-e '/CONFIG_DEBUG_VM/d'
+		-e '/CONFIG_DEBUG_SHIRQ/d'
+		-e '/CONFIG_DEBUG_LIST/d'
+		-e '/CONFIG_BUG_ON_DATA_CORRUPTION/d'
+		-e '/CONFIG_TORTURE_TEST/d'
+		-e '/CONFIG_BOOTTIME_TRACING/d'
+		-e '/CONFIG_RING_BUFFER_BENCHMARK/d'
+		-e '/CONFIG_X86_DECODER_SELFTEST/d'
+		-e '/CONFIG_KGDB/d'
+	)
+	[[ ${ARCH} == x86 ]] && config_tweaks+=(
+		# fix autoenabling 64bit
+		-e '2i\
+# CONFIG_64BIT is not set'
+	)
+	sed -i "${config_tweaks[@]}" .config || die
+}
diff --git a/sys-kernel/vanilla-kernel/vanilla-kernel-5.8.11.ebuild b/sys-kernel/vanilla-kernel/vanilla-kernel-5.8.11.ebuild
new file mode 100644
index 000000000000..540a5ea3c744
--- /dev/null
+++ b/sys-kernel/vanilla-kernel/vanilla-kernel-5.8.11.ebuild
@@ -0,0 +1,127 @@
+# Copyright 2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit kernel-build
+
+MY_P=linux-${PV}
+# https://koji.fedoraproject.org/koji/packageinfo?packageID=8
+CONFIG_VER=5.8.5
+CONFIG_HASH=af8da8d54d21231fd8c7b943216bb985f0a4e223
+
+DESCRIPTION="Linux kernel built from vanilla upstream sources"
+HOMEPAGE="https://www.kernel.org/"
+SRC_URI+=" https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${MY_P}.tar.xz
+	amd64? (
+		https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-x86_64-fedora.config
+			-> kernel-x86_64-fedora.config.${CONFIG_VER}
+	)
+	arm64? (
+		https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-aarch64-fedora.config
+			-> kernel-aarch64-fedora.config.${CONFIG_VER}
+	)
+	ppc64? (
+		https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-ppc64le-fedora.config
+			-> kernel-ppc64le-fedora.config.${CONFIG_VER}
+	)
+	x86? (
+		https://src.fedoraproject.org/rpms/kernel/raw/${CONFIG_HASH}/f/kernel-i686-fedora.config
+			-> kernel-i686-fedora.config.${CONFIG_VER}
+	)"
+S=${WORKDIR}/${MY_P}
+
+LICENSE="GPL-2"
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~x86"
+IUSE="debug"
+REQUIRED_USE="
+	arm? ( savedconfig )"
+
+RDEPEND="
+	!sys-kernel/vanilla-kernel-bin:${SLOT}"
+BDEPEND="
+	debug? ( dev-util/dwarves )"
+
+pkg_pretend() {
+	ewarn "Starting with 5.7.9, Distribution Kernels are switching from Arch"
+	ewarn "Linux configs to Fedora.  Please keep a backup kernel just in case."
+
+	kernel-install_pkg_pretend
+}
+
+src_prepare() {
+	default
+
+	# prepare the default config
+	case ${ARCH} in
+		amd64)
+			cp "${DISTDIR}/kernel-x86_64-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		arm)
+			return
+			;;
+		arm64)
+			cp "${DISTDIR}/kernel-aarch64-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		ppc64)
+			cp "${DISTDIR}/kernel-ppc64le-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		x86)
+			cp "${DISTDIR}/kernel-i686-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		*)
+			die "Unsupported arch ${ARCH}"
+			;;
+	esac
+
+	local config_tweaks=(
+		# replace (none) with gentoo
+		-e 's:^CONFIG_DEFAULT_HOSTNAME=:&"gentoo":'
+		# we do support x32
+		-e '/CONFIG_X86_X32/s:.*:CONFIG_X86_X32=y:'
+		# disable signatures
+		-e '/CONFIG_MODULE_SIG/d'
+		-e '/CONFIG_SECURITY_LOCKDOWN/d'
+		-e '/CONFIG_KEXEC_SIG/d'
+		-e '/CONFIG_KEXEC_BZIMAGE_VERIFY_SIG/d'
+		-e '/CONFIG_SYSTEM_EXTRA_CERTIFICATE/d'
+		-e '/CONFIG_SIGNATURE/d'
+		# remove massive array of LSMs
+		-e 's/CONFIG_LSM=.*/CONFIG_LSM="yama"/'
+		-e 's/CONFIG_DEFAULT_SECURITY_SELINUX=y/CONFIG_DEFAULT_SECURITY_DAC=y/'
+		# nobody actually wants fips
+		-e '/CONFIG_CRYPTO_FIPS/d'
+		# these tests are really not necessary
+		-e 's/.*CONFIG_CRYPTO_MANAGER_DISABLE_TESTS.*/CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y/'
+		# probably not needed by anybody but developers
+		-e '/CONFIG_CRYPTO_STATS/d'
+		# 1000hz is excessive for laptops
+		-e 's/CONFIG_HZ_1000=y/CONFIG_HZ_300=y/'
+		# nobody is using this kernel on insane super computers
+		-e 's/CONFIG_NR_CPUS=.*/CONFIG_NR_CPUS=512/'
+		# we're not actually producing live patches for folks
+		-e 's/CONFIG_LIVEPATCH=y/CONFIG_LIVEPATCH=n/'
+		# this slows down networking in general
+		-e 's/CONFIG_IP_FIB_TRIE_STATS=y/CONFIG_IP_FIB_TRIE_STATS=n/'
+		# include font for normal and hidpi screens
+		-e 's/.*CONFIG_FONTS.*/CONFIG_FONTS=y\nCONFIG_FONT_8x16=y\nCONFIG_FONT_TER16x32=y/'
+		# we don't need to actually install system headers from this ebuild
+		-e '/CONFIG_HEADERS_INSTALL/d'
+		# enable /proc/config.gz, used by linux-info.eclass
+		-e '/CONFIG_IKCONFIG/s:.*:CONFIG_IKCONFIG=y\nCONFIG_IKCONFIG_PROC=y:'
+	)
+	use debug || config_tweaks+=(
+		-e '/CONFIG_DEBUG_INFO/d'
+		-e '/CONFIG_DEBUG_RODATA_TEST/d'
+		-e '/CONFIG_DEBUG_VM/d'
+		-e '/CONFIG_DEBUG_SHIRQ/d'
+		-e '/CONFIG_DEBUG_LIST/d'
+		-e '/CONFIG_BUG_ON_DATA_CORRUPTION/d'
+		-e '/CONFIG_TORTURE_TEST/d'
+		-e '/CONFIG_BOOTTIME_TRACING/d'
+		-e '/CONFIG_RING_BUFFER_BENCHMARK/d'
+		-e '/CONFIG_X86_DECODER_SELFTEST/d'
+		-e '/CONFIG_KGDB/d'
+	)
+	sed -i "${config_tweaks[@]}" .config || die
+}