From ed3ef9d0ebf8c3b7e01e7379df6f670ba21bbb93 Mon Sep 17 00:00:00 2001 From: Austin Lane Date: Sun, 22 Feb 2026 20:55:03 -0500 Subject: [PATCH] rockchip: Enable Wireguard/TUN module in vendor kernel Allow VPN apps (wireguard, tailscale, etc) to function on rockchip armhf vendor kernel. Includes a `rewrite-kernel-config` to fix ordering/etc. --- config/kernel/linux-rockchip-vendor.config | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/config/kernel/linux-rockchip-vendor.config b/config/kernel/linux-rockchip-vendor.config index 40464af55e..9ae4fac3b6 100644 --- a/config/kernel/linux-rockchip-vendor.config +++ b/config/kernel/linux-rockchip-vendor.config @@ -96,6 +96,7 @@ CONFIG_INET=y CONFIG_INET_ESP=m # CONFIG_INET_DIAG is not set CONFIG_IPV6=m +CONFIG_IPV6_TUNNEL=m CONFIG_NETFILTER=y CONFIG_BRIDGE_NETFILTER=m CONFIG_NETFILTER_NETLINK_HOOK=m @@ -276,6 +277,8 @@ CONFIG_MTD_SPI_NOR=y CONFIG_MTD_SPI_NOR_MISC=y CONFIG_MTD_UBI=y CONFIG_MTD_UBI_BLOCK=y +# CONFIG_DTC_OMIT_DISABLED is not set +# CONFIG_DTC_OMIT_EMPTY is not set CONFIG_ZRAM=m CONFIG_ZRAM_WRITEBACK=y CONFIG_ZRAM_MEMORY_TRACKING=y @@ -286,9 +289,11 @@ CONFIG_BLK_DEV_SD=m # CONFIG_SCSI_LOWLEVEL is not set CONFIG_NETDEVICES=y CONFIG_DUMMY=m +CONFIG_WIREGUARD=m CONFIG_MACVLAN=m CONFIG_IPVLAN=m CONFIG_VXLAN=m +CONFIG_TUN=m CONFIG_VETH=m # CONFIG_NET_VENDOR_ALACRITECH is not set # CONFIG_NET_VENDOR_AMAZON is not set @@ -393,8 +398,8 @@ CONFIG_I2C_CHARDEV=y CONFIG_I2C_GPIO=y CONFIG_I2C_RK3X=y CONFIG_SPI=y -CONFIG_SPI_ROCKCHIP_FLEXBUS_FSPI=y CONFIG_SPI_ROCKCHIP=y +CONFIG_SPI_ROCKCHIP_FLEXBUS_FSPI=y CONFIG_SPI_ROCKCHIP_SFC=y CONFIG_SPI_SPIDEV=y # CONFIG_PTP_1588_CLOCK_KVM is not set @@ -490,8 +495,6 @@ CONFIG_FIQ_DEBUGGER_TRUST_ZONE=y CONFIG_RK_CONSOLE_THREAD=y CONFIG_ROCKCHIP_DEBUG=y CONFIG_ROCKCHIP_MINI_KERNEL=y -# CONFIG_DTC_OMIT_DISABLED is not set -# CONFIG_DTC_OMIT_EMPTY is not set CONFIG_PM_DEVFREQ=y CONFIG_DEVFREQ_GOV_SIMPLE_ONDEMAND=y CONFIG_DEVFREQ_GOV_USERSPACE=y