[News from Armbian] - Github Highlights

This week's work advances on three fronts: kernel and bleedingedge alignment across Rockchip and Sunxi trees, board and platform enablement spanning RV1106 to SpacemiT, and CI hardening with self-hosted runner maintenance.

On the kernel side, bleedingedge was bumped to 7.1-rc3, accompanied by cfg80211 API fixes and re-enablement of the rtl8189fs and rtl8852bs drivers for the new release. Both the rockchip64 and sunxi patch stacks for current and edge were rewritten, an upstream ptrace fix for CVE-2026-46333 was backported to linux-rockchip, and the odroidxu4-current kernel moved to 6.6.139.

Platform enablement was broad. The Ayn Odin2 gained 7.0 kernel support, the Mekotronics R58X-Pro switched its vendor build to mainline U-Boot with a corrected LCD driver, and the H96 TV box advanced to U-Boot v2026.04. RV1106 transitioned from extlinux to a bootscript and gained DS1307, PCF85063, and RV8803 RTC drivers, while SpacemiT received OpenSBI, U-Boot, and BPI-F3 DTS fixups. Smaller but user-visible improvements include NanoPi M5 second USB3 port exposure via DRD0 host-mode pinning, NORCO EMB-3531 LPDDR4X variants, RK3528 USB2 PHY corrections for high-speed NCM, and UEFI x86 images enabling iwlwifi MLD and Intel SOF audio for MTL, LNL, and PTL.

Infrastructure work centered on self-hosted runner reliability and supply-chain hygiene. A new runner-cleanup module provides hourly disk and memory maintenance, skips busy runners, and ships via .deb, while a maintenance watchdog was added to the SDK repository. Multiple StepSecurity hardening passes landed across build and SDK workflows, though an overly strict egress-policy was subsequently reverted after breaking builds.

#Armbian #EmbeddedLinux #Rockchip #RISCV #KernelDevelopment

Changes

• Actions: Cleanup "Release" workflow. by @vidplace7 in armbian/MorseMicro-DKMS#4
• Actions: Create release workflow. by @vidplace7 in armbian/MorseMicro-DKMS#3
• Ayn Odin2 kernel 7.0 support. by @kasimling in armbian/build#9706
• Build for riscv64. by @vidplace7 in armbian/MorseMicro-DKMS#5
• Bump actions/download-artifact from 7 to 8. by @igorpecovnik in armbian/os#464
• Bump versions: stable 26.5.0, nightly 26.8.0-trunk.1. by @igorpecovnik in armbian/os#461
• bump bleedingedge to 7.1-rc3. by @EvilOlaf in armbian/build#9806
• cfg80211: fix API changes for Linux 7.1. by @EvilOlaf in armbian/wifi-rtl8852bs#5
• change recomputer rk35xx fan speed. by @ackPeng in armbian/linux-rockchip#472
• ci: add maintenance watchdog + rename action.yml → build-armbian-sdk.yml. by @igorpecovnik in armbian/sdk#25
• ci: drop step-security/harden-runner steps (egress-policy was breaking builds). by @igorpecovnik in armbian/sdk#26
• desktops: ship fprintd userspace at mid tier. by @igorpecovnik in armbian/configng#918
• desktops: split light/dark wallpapers in gnome + bianbu postinsts. by @igorpecovnik in armbian/configng#905
• Disable: SpacemiT: fix RX DMA params not set when TX is running. by @pyavitz in armbian/build#9808
• drivers_network: bump rtl8852bs commit ref to 35d3e266 (May 17). by @igorpecovnik in armbian/build#9841
• drop old lcd_vk2c21 LCD driver that never worked; backport workingvinka,vk2c21 driver; fix Mekos DTs. by @rpardini in armbian/linux-rockchip#482
• ebyte-ecb41-pge: Add spidev overlays (RPi-compatible). by @vidplace7 in armbian/linux-rockchip#467
• firmware-sof-signed: move from cli/amd64 baseline to UEFI common. by @igorpecovnik in armbian/build#9857
• fix(deps): add Pygments to requirements.txt (rich.syntax dep). by @iav in armbian/build#9819
• luckfox-lyra-zero-w: Default to onboard wifi antenna, add ipex overlay. by @vidplace7 in armbian/linux-rockchip#468
• maintenance-watchdog: target the workflow that actually exists. by @igorpecovnik in armbian/configng#915
• Mekotronics R58X-Pro (vendor): use mainline u-boot for vendor; use new LCD driver. by @rpardini in armbian/build#9836
• module_armbian_runners: skip busy runners + ship runner-cleanup assets via .deb. by @igorpecovnik in armbian/configng#914
• module_qbittorrent: poll for temporary password before showing dialog. by @igorpecovnik in armbian/configng#916
• nanopi-m5: pin DRD0 dwc3 to host mode to expose the second USB3 port. by @SuperKali in armbian/build#9844
• NORCO EMB-3531: Add LPDDR4X variants support. by @retro98boy in armbian/build#9823
• patch/sunxi-6.12: drop two Rockchip SPI patches (not applicable to sunxi). by @igorpecovnik in armbian/build#9827
• postinst/gnome: enable tap-to-click + clickpad right-click out of the box. by @igorpecovnik in armbian/configng#917
• Potential fix for code scanning alert no. 2: Code injection. by @iav in armbian/build#9799
• ptrace: backport upstream fix for CVE-2026-46333 (ssh-keysign-pwn). by @SuperKali in armbian/linux-rockchip#481
• restore backwards compatibility. by @EvilOlaf in armbian/wifi-rtl8852bs#6
• rockchip rk3566: h96-TVbox: bump to uboot v2026.04. by @hqnicolas in armbian/build#9807
• rockchip64-6.18: rebase rk3399 dwc3 phy-reset-quirk patch for 6.18.32. by @SuperKali in armbian/build#9847
• rockchip64: fix RK3528 USB2 PHY regmap split for high-speed NCM. by @rubycomm in armbian/build#9785
• rockchip64: opt-in helios64 CPU stability overlay (current + edge). by @iav in armbian/build#9822
• rockchip64: rewrite patches of current and edge. by @EvilOlaf in armbian/build#9829
• rtl8189fs: fix compilation for 7.1 and re-enable. by @EvilOlaf in armbian/build#9813
• rtl8852bs: re-enable for bleedingedge. by @EvilOlaf in armbian/build#9831
• runner-cleanup: drop redundant age-based _diag prune. by @igorpecovnik in armbian/configng#921
• runner-cleanup: hourly disk + memory maintenance for self-hosted runner hosts. by @igorpecovnik in armbian/configng#913
• runner-cleanup: wipe _diag/pages/ alongside _work/. by @igorpecovnik in armbian/configng#919
• runner-cleanup: wipe ~/_diag/ on every runner each pass. by @igorpecovnik in armbian/configng#920
• RV1106: add support for additional RTC drivers (DS1307, PCF85063, RV8803). by @vidplace7 in armbian/build#9812
• RV1106: Switch u-boot from extlinux to bootscript. by @vidplace7 in armbian/build#9801
• SpacemiT: Fixup OpenSBI, U-Boot and BPI-F3 DTS. by @pyavitz in armbian/build#9838
• sunxi: rewrite kernel patches of current and edge. by @EvilOlaf in armbian/build#9828
• uefi-x86: enable iwlwifi MLD + Intel SOF (MTL/LNL/PTL) audio. by @igorpecovnik in armbian/build#9846
• Update documentation / packaging URLs. by @vidplace7 in armbian/MorseMicro-DKMS#2
• Update MorseMicro suite to 1.17.8. by @vidplace7 in armbian/MorseMicro-DKMS#1
• Update nanopi r5s udev rule tweak for persistent net interface names. by @ruabmbua in armbian/build#9811
• Update odroidxu4-current to 6.6.139. by @belegdol in armbian/build#9837
• Workaround devcontainer/ci platform issues. by @vidplace7 in armbian/MorseMicro-DKMS#6
• [StepSecurity] Apply security best practices. by @step-security-bot in armbian/build#9833
• [StepSecurity] Apply security best practices. by @step-security-bot in armbian/build#9839
• [StepSecurity] Apply security best practices. by @step-security-bot in armbian/sdk#24
• [StepSecurity] ci: Harden GitHub Actions. by @step-security-bot in armbian/build#9803
• [StepSecurity] ci: Harden GitHub Actions. by @step-security-bot in armbian/build#9825

View the full article