Adding metadata

5 files changed, 644 insertions, 0 deletions

diff --git a/sys-kernel/vanilla-kernel/Manifest b/sys-kernel/vanilla-kernel/Manifest
index b9b167f21e73..14b003e9e807 100644
--- a/sys-kernel/vanilla-kernel/Manifest
+++ b/sys-kernel/vanilla-kernel/Manifest
@@ -49,8 +49,10 @@ DIST linux-6.6.tar.xz 140064536 BLAKE2B 5f02fd8696d42f7ec8c5fbadec8e7270bdcfcb1f
 DIST linux-6.x-sha256sums-20260411.asc 214835 BLAKE2B a0e3f38ba5511767967dfad9c218c5dff6064f2136f49e5dfd6bac26e24986b0cae953f544f99b2c27bdddf036c9d1044121f9006f509ef9a1e27a3b8ba8478d SHA512 67bb3611a20010f98e8fc2b22b699c1ad18ea72a7bb12eeb1834bc724782e70cf68e6e2021deeae6b84a34b9d714522ee3bd9d25c367aa51c9aedba7dd33abb5
 DIST linux-6.x-sha256sums-20260418.asc 216540 BLAKE2B 37655901ab474fec6a525ab7f8f3153688d2341fffb9c787f14f3ef8ec1783c8b5091624f3eb65bb02675e0c5e6f579e473e838ff8904f1d403aa3708a88c7cb SHA512 480d377ca47501687fa28d1ea196957f036fbfceb16eb98599c77784ce9295a3235ac9cb93315c3e91afd1c9c6a0c700f313e7c3d1c100c78854ceebc3c20e8c
 DIST linux-6.x-sha256sums-20260422.asc 217563 BLAKE2B 9ecce8faab520c811556d798ad154dc73837a333422645f9f353742b5515225a78355325cdd0a0c8d9a6a150a8e94d23bf34d9d44e96368a7ae49ad0dd52c045 SHA512 bec625711deaf6a3a8e8ab566d274c7dee893a526a190ba4c27ec18020ffce03f9a96211a893cc2bca90cdfaae80da77c7d6ece6018d163bd8bafab5357840d4
+DIST linux-6.x-sha256sums-20260427.asc 218586 BLAKE2B aba99f133ff56ebaaf4fe0774bd907e28aa1dc5b69992ff52eecb70a8e12890ca0f5009be43f446ea8c6ab9fd198efd12e3aedf5c07488da891fd91532007112 SHA512 a6d7be4d0f5c046be8d614228a6a51c4f8cd71ac5683a3088cd1c0f52530893efbcc76fb3decac823e31c05307b774d72c83d09c6b90667d88e93374ac964b8e
 DIST linux-7.0.tar.xz 157143652 BLAKE2B 3d9795083c8938f80f480de0d10bfd9c525640e59d5c7f22983de3f12ee42c84c31be902cafb05579ddb1c32bac5ed06b0d4953f9705450be185bd2d9ab08f89 SHA512 8c85b708342f8f09ca25b2234b22e93b62b144a9ef919fbb21827f52fa47498e778c79db1559524dd7fb360f95b2ce174171443c1859656c281be41d2b6c5a0b
 DIST linux-7.x-sha256sums-20260422.asc 1543 BLAKE2B 0519aae230dd8b59e778ddc22b68dc5dc3127606976f242cfeee71cc0523bf57d46952869b15ccc26aa28fd93b1143447315e548139dc7feaafa5e7387e6fe2c SHA512 24d65ee5a128c260aedd8c23fab47740d24749ee47b336caf639aafbb3bc1b4b9bb58b8a383413866a8e8df86731a70c377e3ae28a856fd78e3f2b351971f957
+DIST linux-7.x-sha256sums-20260427.asc 1876 BLAKE2B f423b97f3c241abe3cdd757f6bda34cd900c4140b371a5a7abb692dc3e404689266e162c177c66e8eee991ce5c3b7bb681d8b8cbf1c2005aaaf7291cba9efe7c SHA512 90be7186a920260a6553d08bcf6bd0ca142988134ff2d8277773624d18d0c92e048a2c620965185b35b4567708aafe610d58ef899eb306f2d4b1e2bd481253e4
 DIST patch-5.10.250.xz 7108816 BLAKE2B ad9c09595e4a05b50dc6b3ab6387116b7f4ed0d0cea3d2e0c5b390a00f3ea12cd5ef465628fb44f0f7aef230a6f6ff62c3d093d35a9a345db4c00d89abe182b1 SHA512 7aff51241e7378fe0601bade548fa32acafe1ace5c9390bbcbad0aec9eabcf88beb4055098d34c1bd9781665e92ed9ddd33987d3b790ec7e85e2812ea996d89f
 DIST patch-5.10.253.xz 7248732 BLAKE2B ea684b60dfb1c3b28f5f530d46e8933fa4ff3f4ea1a6498b9cfe8c995621f27d824fe8b40686494549981ac6e30c809cd626eef6a9536f44c929e91d28c5e2f1 SHA512 f195170a0e6f924aa114f66fb72fccf19bec43c4b69d15dd94052f6e00bcfd671a30d47cc1b86617d9bb6943e05df22d6df0a32dbfd5effb65b98f1c4fd99ae3
 DIST patch-5.15.200.xz 7514048 BLAKE2B d46ef5fd5e4ac19193eb9f8890daff1dad3f1493f0d145621955f094d1538bf211ffecb996201a6503ec502fef73f2ed244c9cd3bc5a6bbf23b9e405566eaebc SHA512 1d65f996db49acf679ce8adaeb6dd5fc78c5dc940c2bd978daff378e9ea47ecd51e17a5a8cad8fb1d11560a1abd739d37021920e68c895ec763d083ba2aff24b
@@ -59,9 +61,13 @@ DIST patch-6.1.168.xz 7303464 BLAKE2B d7b290e3c4fb30cdbcacea7dbafcaf922195312b19
 DIST patch-6.1.169.xz 7317628 BLAKE2B c9ca4999f7433c27ebbb3d2592227e8097353ec084e1c58c328f3a887a2b0543c7c8d5ae1a140c13ee3d3861a958ebf29a21b6e935b44c28a322f6e3fc491855 SHA512 23aad9a93157c55907e168d5a492c4c9749833b90e051e590281b3cb075b17ef5227f79694008fdc3470ab78a13054c416f9c71f6dd9a205fcafa8645e1eae8f
 DIST patch-6.12.81.xz 4327232 BLAKE2B eb81e142bc7825061ae43efb062248f88868346bc6d449de0fd524b419ab1f5d524e9042390778971321229035c0f4dc5b481101bb2aa2f47512975e5ff5c790 SHA512 fbd813a24adeb4892079bae49b13c46acb7bb234f19a996de00b7ac2d95ca382d0e56195e393c1bd0a09051f1e36301e972924bd1fba2848e62c5d531d092b3d
 DIST patch-6.12.83.xz 4366124 BLAKE2B bbb23aa68747e7f7e66ad640f0ec2d2cbe9f16da295c0e8781df4cdd837a6bcefa869d1329b43efeb4e4edc4f48cb780876df6271986538553c844b3e69f388e SHA512 f2a3a17db26a92d2994a200044c57a8eba9fd6f6ceb3a976360ba7f0f82d0d30282c8ed7f032f548e7aee2c3f4fa510f9dca453022f5fe4190b13fc5f6b5bbd0
+DIST patch-6.12.84.xz 4372924 BLAKE2B 6d812556ee681bd0a22e66d79d7cf8e8f0bf6658cfbf5e4c82cf605503b1a0f715243d08ace6cf0346b77ddbddb100b30df075f4a9a8cdd15730555baa56c26f SHA512 ae0699ef647758fac5170bced18a1bf685758e1af2851597c36dfc2d43c386547c7127cd6aefaee0e78720e8d6c72a8dc1834a7506eaed6ef59909ee6813fec8
 DIST patch-6.18.22.xz 1461196 BLAKE2B cbf351ca526044c0e5c69053235886d2167173e24ae9c1887cbc96a286f389ae417a5c6c07ad0579a3fae5adcec33524ea811a2f1179e95e90abeed3bb0b5e21 SHA512 8171287486899d50262df42cbbeda81db86c3245334799f5517cb4f01fb2095bf6e27ad95abe01be635bb9992b20647a5cdbc6e19cd8cdf9cc8bdc6aa62509e9
 DIST patch-6.18.24.xz 1523672 BLAKE2B e271dc92f89d38df4dbc53db33afc926909e22d54c05af91da7b4ea4508ecc4c335dfbef573aa3de519c99f56fd7bfcbf136887baef1e4c8ddc098108a078f9b SHA512 5fad8d9d0734e46254d5362fcef5cc41dabaff63f6ba28a75f3a0717ec948f55a895cc2dfb44ae0df15accfa3d18adb49f2b4a94d18ceaff9250a154fd97d1ac
+DIST patch-6.18.25.xz 1538348 BLAKE2B b707adfc3d23d74ae882a0b4d15ce7b46e5c1011bcc35e8aa7b3a1c42f1a661ee84d2d91cf31801a3ceb2824cfcb6a050523c7e2aaac6045243df39477f01f0b SHA512 6c467d343470c645e3fce8b146c1d1f77d1ff1fac7d302681645e43a5e79d7f82a14d16a0760ab0feb9c1a22b0df2992cd1af7a6e76b21eb5e967f23b6b742d3
 DIST patch-6.19.14.xz 1021136 BLAKE2B 814807c704b74428010c7a6b47c7b07e261c3a67985869c9cf22cdd146fc4dd50639550ff93ac4573398f33f6c30a584da7148ac4e219d4033ae96b836c56e39 SHA512 741e55ff66dbcd553ef3a4b185bd145e82535f4e6d5c70b93bf83fefeda1572f17339b2bf04b2522fb17e9f0f6ea8ab3288db42c42b64d4788318cc0f1924fb2
 DIST patch-6.6.134.xz 5870752 BLAKE2B 5657be1187128c96f82f8988ec97bc77e43478c46a37e9e5d3e0d20b940848f112d6cf4cdaed1d9ca32c6b64c24d43f9ff5041df0b1313af38548f50353d1ea7 SHA512 dfc23509991b9f5320d054f9b26cd5e30579399ceb3fe7e9dda994c4c3a35a48d75eb3dd1bbf332ea965d99d9a69faa337ba5ad1c49ab9bfd8c61e21f09672ea
 DIST patch-6.6.135.xz 5878448 BLAKE2B 8e7f9aaf55506fa550bcabe90ff44abb61f7d35311a071a461bf1a86a2e0ba47e58f3c7f3228e728408aa833dddb61ba8200c3a46b12f33bab9e9e50fcefb578 SHA512 ccdf0867ea707b93210aa689425d1fab7dd710802ef2a6d0425bdf8f2226566c836474c38f23d7ae645d0f4454d1ea65600fede1ff2430b257af90a9fd00d9b1
+DIST patch-6.6.136.xz 5905416 BLAKE2B eb486ebe595b66977c961fe5807882fd7896231d7be2a78584fa5a38b96642c77ce5c32bd8f5c3ba0c93651df7779d8dc53ff58b55440f39fd9f23d7e428601a SHA512 ecd8132ad994ed07d0dc2acf07dd980eec3c54eae038b1e84ce9b953b911fcefa1559619f0fbf376be9671039f283d6f71a2f4dcc1623f20cb9cfdf6b7593688
 DIST patch-7.0.1.xz 27324 BLAKE2B c26ea15a751364b5db59f84b62449a1e173d0e39e9996f16b22703e4eb2dfa449cc5098e666a01142a05fbc90588a654981474b77206164f0b43263599a48b6f SHA512 6811a2509d4f5df2723252d096f8cf7e37ab4673d1d969006c7403d0b3c5664b0aa9f22ce0136531812cb9c17a9d961faf888faf9082e90a0692953fc431651e
+DIST patch-7.0.2.xz 42396 BLAKE2B caa1d23581d32716ad853a1e43425a9277ed8e8a08e007f84107fddd8fa73e9a45dab01c35fb3a43d0ae2a80a11905e54f7a7c8ceed86c8f3eb74d283d4dfc7a SHA512 dac9f93fe01474b905211679618ad13c1a72c98a1b560be1545ed075448aa4a39b2d8ad437179af69a7b43f5fed67709cc7f51401b90c92c8f7af8843e39bd54
diff --git a/sys-kernel/vanilla-kernel/vanilla-kernel-6.12.84.ebuild b/sys-kernel/vanilla-kernel/vanilla-kernel-6.12.84.ebuild
new file mode 100644
index 000000000000..4cf2f75076d3
--- /dev/null
+++ b/sys-kernel/vanilla-kernel/vanilla-kernel-6.12.84.ebuild
@@ -0,0 +1,159 @@
+# Copyright 2020-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+KERNEL_IUSE_GENERIC_UKI=1
+
+inherit kernel-build toolchain-funcs verify-sig
+
+BASE_P=linux-${PV%.*}
+# https://koji.fedoraproject.org/koji/packageinfo?packageID=8
+# forked to https://github.com/projg2/fedora-kernel-config-for-gentoo
+CONFIG_VER=6.12.41-gentoo
+GENTOO_CONFIG_VER=g18
+SHA256SUM_DATE=20260427
+
+DESCRIPTION="Linux kernel built from vanilla upstream sources"
+HOMEPAGE="
+	https://wiki.gentoo.org/wiki/Project:Distribution_Kernel
+	https://www.kernel.org/
+"
+SRC_URI+="
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${BASE_P}.tar.xz
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/patch-${PV}.xz
+	https://github.com/projg2/gentoo-kernel-config/archive/${GENTOO_CONFIG_VER}.tar.gz
+		-> gentoo-kernel-config-${GENTOO_CONFIG_VER}.tar.gz
+	verify-sig? (
+		https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/sha256sums.asc
+			-> linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc
+	)
+	amd64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-x86_64-fedora.config
+			-> kernel-x86_64-fedora.config.${CONFIG_VER}
+	)
+	arm64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-aarch64-fedora.config
+			-> kernel-aarch64-fedora.config.${CONFIG_VER}
+	)
+	ppc64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-ppc64le-fedora.config
+			-> kernel-ppc64le-fedora.config.${CONFIG_VER}
+	)
+	riscv? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-riscv64-fedora.config
+			-> kernel-riscv64-fedora.config.${CONFIG_VER}
+	)
+	x86? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-i686-fedora.config
+			-> kernel-i686-fedora.config.${CONFIG_VER}
+	)
+"
+S=${WORKDIR}/${BASE_P}
+
+KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~loong ~ppc ~ppc64 ~riscv ~sparc ~x86"
+IUSE="debug hardened"
+REQUIRED_USE="
+	arm? ( savedconfig )
+	hppa? ( savedconfig )
+	sparc? ( savedconfig )
+"
+
+BDEPEND="
+	debug? ( dev-util/pahole )
+	verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 )
+"
+PDEPEND="
+	>=virtual/dist-kernel-${PV}
+"
+
+QA_FLAGS_IGNORED="
+	usr/src/linux-.*/scripts/gcc-plugins/.*.so
+	usr/src/linux-.*/vmlinux
+	usr/src/linux-.*/arch/powerpc/kernel/vdso.*/vdso.*.so.dbg
+"
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/kernel.org.asc
+
+src_unpack() {
+	if use verify-sig; then
+		cd "${DISTDIR}" || die
+		verify-sig_verify_signed_checksums \
+			"linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc" \
+			sha256 "${BASE_P}.tar.xz patch-${PV}.xz"
+		cd "${WORKDIR}" || die
+	fi
+
+	default
+}
+
+src_prepare() {
+	eapply "${WORKDIR}/patch-${PV}"
+	default
+
+	local biendian=false
+
+	# prepare the default config
+	case ${ARCH} in
+		arm | hppa | loong | sparc)
+			> .config || die
+		;;
+		amd64)
+			cp "${DISTDIR}/kernel-x86_64-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		arm64)
+			cp "${DISTDIR}/kernel-aarch64-fedora.config.${CONFIG_VER}" .config || die
+			biendian=true
+			;;
+		ppc)
+			# assume powermac/powerbook defconfig
+			# we still package.use.force savedconfig
+			cp "${WORKDIR}/${BASE_P}/arch/powerpc/configs/pmac32_defconfig" .config || die
+			;;
+		ppc64)
+			cp "${DISTDIR}/kernel-ppc64le-fedora.config.${CONFIG_VER}" .config || die
+			biendian=true
+			;;
+		x86)
+			cp "${DISTDIR}/kernel-i686-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		*)
+			die "Unsupported arch ${ARCH}"
+			;;
+	esac
+
+	local myversion="-dist"
+	use hardened && myversion+="-hardened"
+	echo "CONFIG_LOCALVERSION=\"${myversion}\"" > "${T}"/version.config || die
+	local dist_conf_path="${WORKDIR}/gentoo-kernel-config-${GENTOO_CONFIG_VER}"
+
+	local merge_configs=(
+		"${T}"/version.config
+		"${dist_conf_path}"/base.config
+		"${dist_conf_path}"/6.12+.config
+	)
+	use debug || merge_configs+=(
+		"${dist_conf_path}"/no-debug.config
+	)
+	if use hardened; then
+		merge_configs+=( "${dist_conf_path}"/hardened-base.config )
+
+		tc-is-gcc && merge_configs+=( "${dist_conf_path}"/hardened-gcc-plugins.config )
+
+		if [[ -f "${dist_conf_path}/hardened-${ARCH}.config" ]]; then
+			merge_configs+=( "${dist_conf_path}/hardened-${ARCH}.config" )
+		fi
+	fi
+
+	# this covers ppc64 and aarch64_be only for now
+	if [[ ${biendian} == true && $(tc-endian) == big ]]; then
+		merge_configs+=( "${dist_conf_path}/big-endian.config" )
+	fi
+
+	use secureboot && merge_configs+=(
+		"${dist_conf_path}/secureboot.config"
+		"${dist_conf_path}/zboot.config"
+	)
+
+	kernel-build_merge_configs "${merge_configs[@]}"
+}
diff --git a/sys-kernel/vanilla-kernel/vanilla-kernel-6.18.25.ebuild b/sys-kernel/vanilla-kernel/vanilla-kernel-6.18.25.ebuild
new file mode 100644
index 000000000000..439d7c29eaee
--- /dev/null
+++ b/sys-kernel/vanilla-kernel/vanilla-kernel-6.18.25.ebuild
@@ -0,0 +1,162 @@
+# Copyright 2020-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+KERNEL_IUSE_GENERIC_UKI=1
+
+inherit kernel-build toolchain-funcs verify-sig
+
+BASE_P=linux-${PV%.*}
+# https://koji.fedoraproject.org/koji/packageinfo?packageID=8
+# forked to https://github.com/projg2/fedora-kernel-config-for-gentoo
+CONFIG_VER=6.18.12-gentoo
+GENTOO_CONFIG_VER=g18
+SHA256SUM_DATE=20260427
+
+DESCRIPTION="Linux kernel built from vanilla upstream sources"
+HOMEPAGE="
+	https://wiki.gentoo.org/wiki/Project:Distribution_Kernel
+	https://www.kernel.org/
+"
+SRC_URI+="
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${BASE_P}.tar.xz
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/patch-${PV}.xz
+	https://github.com/projg2/gentoo-kernel-config/archive/${GENTOO_CONFIG_VER}.tar.gz
+		-> gentoo-kernel-config-${GENTOO_CONFIG_VER}.tar.gz
+	verify-sig? (
+		https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/sha256sums.asc
+			-> linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc
+	)
+	amd64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-x86_64-fedora.config
+			-> kernel-x86_64-fedora.config.${CONFIG_VER}
+	)
+	arm64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-aarch64-fedora.config
+			-> kernel-aarch64-fedora.config.${CONFIG_VER}
+	)
+	ppc64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-ppc64le-fedora.config
+			-> kernel-ppc64le-fedora.config.${CONFIG_VER}
+	)
+	riscv? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-riscv64-fedora.config
+			-> kernel-riscv64-fedora.config.${CONFIG_VER}
+	)
+	x86? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-i686-fedora.config
+			-> kernel-i686-fedora.config.${CONFIG_VER}
+	)
+"
+S=${WORKDIR}/${BASE_P}
+
+KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~loong ~ppc ~ppc64 ~riscv ~sparc ~x86"
+IUSE="debug hardened"
+REQUIRED_USE="
+	arm? ( savedconfig )
+	hppa? ( savedconfig )
+	sparc? ( savedconfig )
+"
+
+BDEPEND="
+	debug? ( dev-util/pahole )
+	verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 )
+"
+PDEPEND="
+	>=virtual/dist-kernel-${PV}
+"
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/kernel.org.asc
+
+QA_FLAGS_IGNORED="
+	usr/src/linux-.*/scripts/gcc-plugins/.*.so
+	usr/src/linux-.*/vmlinux
+	usr/src/linux-.*/arch/powerpc/kernel/vdso.*/vdso.*.so.dbg
+"
+
+src_unpack() {
+	if use verify-sig; then
+		cd "${DISTDIR}" || die
+		verify-sig_verify_signed_checksums \
+			"linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc" \
+			sha256 "${BASE_P}.tar.xz patch-${PV}.xz"
+		cd "${WORKDIR}" || die
+	fi
+
+	default
+}
+
+src_prepare() {
+	eapply "${WORKDIR}/patch-${PV}"
+	default
+
+	local biendian=false
+
+	# prepare the default config
+	case ${ARCH} in
+		arm | hppa | loong | sparc)
+			> .config || die
+		;;
+		amd64)
+			cp "${DISTDIR}/kernel-x86_64-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		arm64)
+			cp "${DISTDIR}/kernel-aarch64-fedora.config.${CONFIG_VER}" .config || die
+			biendian=true
+			;;
+		ppc)
+			# assume powermac/powerbook defconfig
+			# we still package.use.force savedconfig
+			cp "${WORKDIR}/${BASE_P}/arch/powerpc/configs/pmac32_defconfig" .config || die
+			;;
+		ppc64)
+			cp "${DISTDIR}/kernel-ppc64le-fedora.config.${CONFIG_VER}" .config || die
+			biendian=true
+			;;
+		riscv)
+			cp "${DISTDIR}/kernel-riscv64-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		x86)
+			cp "${DISTDIR}/kernel-i686-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		*)
+			die "Unsupported arch ${ARCH}"
+			;;
+	esac
+
+	local myversion="-dist"
+	use hardened && myversion+="-hardened"
+	echo "CONFIG_LOCALVERSION=\"${myversion}\"" > "${T}"/version.config || die
+	local dist_conf_path="${WORKDIR}/gentoo-kernel-config-${GENTOO_CONFIG_VER}"
+
+	local merge_configs=(
+		"${T}"/version.config
+		"${dist_conf_path}"/base.config
+		"${dist_conf_path}"/6.12+.config
+	)
+	use debug || merge_configs+=(
+		"${dist_conf_path}"/no-debug.config
+	)
+	if use hardened; then
+		merge_configs+=( "${dist_conf_path}"/hardened-base.config )
+
+		tc-is-gcc && merge_configs+=( "${dist_conf_path}"/hardened-gcc-plugins.config )
+
+		if [[ -f "${dist_conf_path}/hardened-${ARCH}.config" ]]; then
+			merge_configs+=( "${dist_conf_path}/hardened-${ARCH}.config" )
+		fi
+	fi
+
+	# this covers ppc64 and aarch64_be only for now
+	if [[ ${biendian} == true && $(tc-endian) == big ]]; then
+		merge_configs+=( "${dist_conf_path}/big-endian.config" )
+	fi
+
+	use secureboot && merge_configs+=(
+		"${dist_conf_path}/secureboot.config"
+		"${dist_conf_path}/zboot.config"
+	)
+
+	kernel-build_merge_configs "${merge_configs[@]}"
+}
diff --git a/sys-kernel/vanilla-kernel/vanilla-kernel-6.6.136.ebuild b/sys-kernel/vanilla-kernel/vanilla-kernel-6.6.136.ebuild
new file mode 100644
index 000000000000..e72afba968cf
--- /dev/null
+++ b/sys-kernel/vanilla-kernel/vanilla-kernel-6.6.136.ebuild
@@ -0,0 +1,155 @@
+# Copyright 2020-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+KERNEL_IUSE_GENERIC_UKI=1
+
+inherit kernel-build toolchain-funcs verify-sig
+
+BASE_P=linux-${PV%.*}
+# https://koji.fedoraproject.org/koji/packageinfo?packageID=8
+# forked to https://github.com/projg2/fedora-kernel-config-for-gentoo
+CONFIG_VER=6.6.12-gentoo
+GENTOO_CONFIG_VER=g17
+SHA256SUM_DATE=20260427
+
+DESCRIPTION="Linux kernel built from vanilla upstream sources"
+HOMEPAGE="
+	https://wiki.gentoo.org/wiki/Project:Distribution_Kernel
+	https://www.kernel.org/
+"
+SRC_URI+="
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${BASE_P}.tar.xz
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/patch-${PV}.xz
+	https://github.com/projg2/gentoo-kernel-config/archive/${GENTOO_CONFIG_VER}.tar.gz
+		-> gentoo-kernel-config-${GENTOO_CONFIG_VER}.tar.gz
+	verify-sig? (
+		https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/sha256sums.asc
+			-> linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc
+	)
+	amd64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-x86_64-fedora.config
+			-> kernel-x86_64-fedora.config.${CONFIG_VER}
+	)
+	arm64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-aarch64-fedora.config
+			-> kernel-aarch64-fedora.config.${CONFIG_VER}
+	)
+	ppc64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-ppc64le-fedora.config
+			-> kernel-ppc64le-fedora.config.${CONFIG_VER}
+	)
+	x86? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-i686-fedora.config
+			-> kernel-i686-fedora.config.${CONFIG_VER}
+	)
+"
+S=${WORKDIR}/${BASE_P}
+
+KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~loong ~ppc ~ppc64 ~riscv ~sparc ~x86"
+IUSE="debug hardened"
+REQUIRED_USE="
+	arm? ( savedconfig )
+	hppa? ( savedconfig )
+	riscv? ( savedconfig )
+	sparc? ( savedconfig )
+"
+
+BDEPEND="
+	debug? ( dev-util/pahole )
+	verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 )
+"
+PDEPEND="
+	>=virtual/dist-kernel-${PV}
+"
+
+QA_FLAGS_IGNORED="
+	usr/src/linux-.*/scripts/gcc-plugins/.*.so
+	usr/src/linux-.*/vmlinux
+	usr/src/linux-.*/arch/powerpc/kernel/vdso.*/vdso.*.so.dbg
+"
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/kernel.org.asc
+
+src_unpack() {
+	if use verify-sig; then
+		cd "${DISTDIR}" || die
+		verify-sig_verify_signed_checksums \
+			"linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc" \
+			sha256 "${BASE_P}.tar.xz patch-${PV}.xz"
+		cd "${WORKDIR}" || die
+	fi
+
+	default
+}
+
+src_prepare() {
+	eapply "${WORKDIR}/patch-${PV}"
+	default
+
+	local biendian=false
+
+	# prepare the default config
+	case ${ARCH} in
+		arm | hppa | loong | riscv | sparc)
+			> .config || die
+		;;
+		amd64)
+			cp "${DISTDIR}/kernel-x86_64-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		arm64)
+			cp "${DISTDIR}/kernel-aarch64-fedora.config.${CONFIG_VER}" .config || die
+			biendian=true
+			;;
+		ppc)
+			# assume powermac/powerbook defconfig
+			# we still package.use.force savedconfig
+			cp "${WORKDIR}/${BASE_P}/arch/powerpc/configs/pmac32_defconfig" .config || die
+			;;
+		ppc64)
+			cp "${DISTDIR}/kernel-ppc64le-fedora.config.${CONFIG_VER}" .config || die
+			biendian=true
+			;;
+		x86)
+			cp "${DISTDIR}/kernel-i686-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		*)
+			die "Unsupported arch ${ARCH}"
+			;;
+	esac
+
+	local myversion="-dist"
+	use hardened && myversion+="-hardened"
+	echo "CONFIG_LOCALVERSION=\"${myversion}\"" > "${T}"/version.config || die
+	local dist_conf_path="${WORKDIR}/gentoo-kernel-config-${GENTOO_CONFIG_VER}"
+
+	local merge_configs=(
+		"${T}"/version.config
+		"${dist_conf_path}"/base.config
+	)
+	use debug || merge_configs+=(
+		"${dist_conf_path}"/no-debug.config
+	)
+	if use hardened; then
+		merge_configs+=( "${dist_conf_path}"/hardened-base.config )
+
+		tc-is-gcc && merge_configs+=( "${dist_conf_path}"/hardened-gcc-plugins.config )
+
+		if [[ -f "${dist_conf_path}/hardened-${ARCH}.config" ]]; then
+			merge_configs+=( "${dist_conf_path}/hardened-${ARCH}.config" )
+		fi
+	fi
+
+	# this covers ppc64 and aarch64_be only for now
+	if [[ ${biendian} == true && $(tc-endian) == big ]]; then
+		merge_configs+=( "${dist_conf_path}/big-endian.config" )
+	fi
+
+	use secureboot && merge_configs+=(
+		"${dist_conf_path}/secureboot.config"
+		"${dist_conf_path}/zboot.config"
+	)
+
+	kernel-build_merge_configs "${merge_configs[@]}"
+}
diff --git a/sys-kernel/vanilla-kernel/vanilla-kernel-7.0.2.ebuild b/sys-kernel/vanilla-kernel/vanilla-kernel-7.0.2.ebuild
new file mode 100644
index 000000000000..3b60ea511942
--- /dev/null
+++ b/sys-kernel/vanilla-kernel/vanilla-kernel-7.0.2.ebuild
@@ -0,0 +1,162 @@
+# Copyright 2020-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+KERNEL_IUSE_GENERIC_UKI=1
+
+inherit kernel-build toolchain-funcs verify-sig
+
+BASE_P=linux-${PV%.*}
+# https://koji.fedoraproject.org/koji/packageinfo?packageID=8
+# forked to https://github.com/projg2/fedora-kernel-config-for-gentoo
+CONFIG_VER=7.0.1-gentoo
+GENTOO_CONFIG_VER=g18
+SHA256SUM_DATE=20260427
+
+DESCRIPTION="Linux kernel built from vanilla upstream sources"
+HOMEPAGE="
+	https://wiki.gentoo.org/wiki/Project:Distribution_Kernel
+	https://www.kernel.org/
+"
+SRC_URI+="
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${BASE_P}.tar.xz
+	https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/patch-${PV}.xz
+	https://github.com/projg2/gentoo-kernel-config/archive/${GENTOO_CONFIG_VER}.tar.gz
+		-> gentoo-kernel-config-${GENTOO_CONFIG_VER}.tar.gz
+	verify-sig? (
+		https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/sha256sums.asc
+			-> linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc
+	)
+	amd64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-x86_64-fedora.config
+			-> kernel-x86_64-fedora.config.${CONFIG_VER}
+	)
+	arm64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-aarch64-fedora.config
+			-> kernel-aarch64-fedora.config.${CONFIG_VER}
+	)
+	ppc64? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-ppc64le-fedora.config
+			-> kernel-ppc64le-fedora.config.${CONFIG_VER}
+	)
+	riscv? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-riscv64-fedora.config
+			-> kernel-riscv64-fedora.config.${CONFIG_VER}
+	)
+	x86? (
+		https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-i686-fedora.config
+			-> kernel-i686-fedora.config.${CONFIG_VER}
+	)
+"
+S=${WORKDIR}/${BASE_P}
+
+KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~loong ~ppc ~ppc64 ~riscv ~sparc ~x86"
+IUSE="debug hardened"
+REQUIRED_USE="
+	arm? ( savedconfig )
+	hppa? ( savedconfig )
+	sparc? ( savedconfig )
+"
+
+BDEPEND="
+	debug? ( dev-util/pahole )
+	verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 )
+"
+PDEPEND="
+	>=virtual/dist-kernel-${PV}
+"
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/kernel.org.asc
+
+QA_FLAGS_IGNORED="
+	usr/src/linux-.*/scripts/gcc-plugins/.*.so
+	usr/src/linux-.*/vmlinux
+	usr/src/linux-.*/arch/powerpc/kernel/vdso.*/vdso.*.so.dbg
+"
+
+src_unpack() {
+	if use verify-sig; then
+		cd "${DISTDIR}" || die
+		verify-sig_verify_signed_checksums \
+			"linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc" \
+			sha256 "${BASE_P}.tar.xz patch-${PV}.xz"
+		cd "${WORKDIR}" || die
+	fi
+
+	default
+}
+
+src_prepare() {
+	eapply "${WORKDIR}/patch-${PV}"
+	default
+
+	local biendian=false
+
+	# prepare the default config
+	case ${ARCH} in
+		arm | hppa | loong | sparc)
+			> .config || die
+		;;
+		amd64)
+			cp "${DISTDIR}/kernel-x86_64-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		arm64)
+			cp "${DISTDIR}/kernel-aarch64-fedora.config.${CONFIG_VER}" .config || die
+			biendian=true
+			;;
+		ppc)
+			# assume powermac/powerbook defconfig
+			# we still package.use.force savedconfig
+			cp "${WORKDIR}/${BASE_P}/arch/powerpc/configs/pmac32_defconfig" .config || die
+			;;
+		ppc64)
+			cp "${DISTDIR}/kernel-ppc64le-fedora.config.${CONFIG_VER}" .config || die
+			biendian=true
+			;;
+		riscv)
+			cp "${DISTDIR}/kernel-riscv64-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		x86)
+			cp "${DISTDIR}/kernel-i686-fedora.config.${CONFIG_VER}" .config || die
+			;;
+		*)
+			die "Unsupported arch ${ARCH}"
+			;;
+	esac
+
+	local myversion="-dist"
+	use hardened && myversion+="-hardened"
+	echo "CONFIG_LOCALVERSION=\"${myversion}\"" > "${T}"/version.config || die
+	local dist_conf_path="${WORKDIR}/gentoo-kernel-config-${GENTOO_CONFIG_VER}"
+
+	local merge_configs=(
+		"${T}"/version.config
+		"${dist_conf_path}"/base.config
+		"${dist_conf_path}"/6.12+.config
+	)
+	use debug || merge_configs+=(
+		"${dist_conf_path}"/no-debug.config
+	)
+	if use hardened; then
+		merge_configs+=( "${dist_conf_path}"/hardened-base.config )
+
+		tc-is-gcc && merge_configs+=( "${dist_conf_path}"/hardened-gcc-plugins.config )
+
+		if [[ -f "${dist_conf_path}/hardened-${ARCH}.config" ]]; then
+			merge_configs+=( "${dist_conf_path}/hardened-${ARCH}.config" )
+		fi
+	fi
+
+	# this covers ppc64 and aarch64_be only for now
+	if [[ ${biendian} == true && $(tc-endian) == big ]]; then
+		merge_configs+=( "${dist_conf_path}/big-endian.config" )
+	fi
+
+	use secureboot && merge_configs+=(
+		"${dist_conf_path}/secureboot.config"
+		"${dist_conf_path}/zboot.config"
+	)
+
+	kernel-build_merge_configs "${merge_configs[@]}"
+}