LWN.net weekly: Android vendor hooks, reproducible kernel builds, Rust data structures

The latest LWN.net Weekly Edition surveys several active Linux kernel development fronts. Lead articles examine Android vendor hooks, efforts to make kernel builds reproducible for supply-chain integrity, and Rust data structures including XArray and cross-crate declarations. The issue also covers NFS server changes, a proposal to set no_new_privs for PID 1, and Nix flakes. Brief sections report on an eMudhra CA compromise, PHP and Node.js/musl vulnerabilities, and releases including OpenBSD 8.0 and Ubuntu 26.10.

Kernel development topics this week

• Android vendor hooks: Mechanisms allowing device vendors to modify kernel behavior without upstreaming changes, a persistent tension point for mainline compatibility
• Reproducible builds: Work toward deterministic kernel compilation to enable verification that distributed binaries match published source
• Rust XArray: Implementation of the kernel's sparse array data structure in Rust, following earlier porting of other core data structures
• Rust cross-crate declarations: Addressing how Rust kernel modules can share types across compilation units
• no_new_privs for PID 1: Proposal to prevent init from gaining privileges, hardening the boot-time security boundary
• Nix flakes: Coverage of the declarative package/build system increasingly used in developer and CI environments

Why it matters

The concentration of Rust-in-kernel content signals continued maturation of the Rust-for-Linux project, while reproducible builds work addresses growing industry demand for software supply-chain verification. The Android vendor hooks discussion touches directly on the fragmentation challenges facing the Linux mobile ecosystem.