Skip to content

tb323fu-linux t41

Choose a tag to compare

@joonhoekim joonhoekim released this 06 Oct 10:58

tb323fu-linux t41 — kernel for the Lenovo Legion Tab Y700 gen 5 (TB323FU)

Kernel: 7.3.0-rc4-tb323fu-t41 — Linux version 7.3.0-rc4-tb323fu-t41 (tb323fu@build) (Ubuntu clang version 18.1.3 (1ubuntu1), Ubuntu LLD 18.1.3) #1 SMP PREEMPT Tue Oct 6 10:52:06 UTC 2026

Mainline Linux v7.3-rc4 with the 126 patches 0001–0127 of kernel/patches,
built from tb323fu-linux commit 3f7e42ad79f912dc591d301185be9cc0ae8a6a23. What works and what does not: docs/hardware-status.md.

Read this first

  • New in t41: camera and imported buffers on the GPU work. Every earlier release (t38–t40) was built with CONFIG_DMABUF_DEBUG,
    which hands drivers that import a buffer from another device a copy without the page information the GPU driver
    maps from. Every such buffer reached the GPU as nothing: libcamera's GPU image processing gave black frames, and the
    camera app (GNOME Snapshot) stayed black or stopped responding. This kernel turns the option off; with it both
    cameras show a picture in Snapshot, and switching between them works.

  • Memory latency (patches 0120–0127, memlat): the CPUCP firmware now raises DDR, LLCC and DDR QoS for
    latency-bound CPU work; without it DDR stayed low and memory latency was about twice as high. Patch 0119 describes
    the UFS MCQ registers.

  • CPU cluster idle state left out of runtime idle (patch 0118). With it the tablet reset when left idle
    (twice in 78 minutes); this kernel's built-in command line sets cpuidle_psci_domain.allow_cluster_off=0, and the
    tablet then ran 3 hours idle without a reset at the same display-off power. Suspend (s2idle) still uses the state;
    the cause in its power-down path is not fixed.

  • CPU capacities (patch 0117): the device tree describes the big and little cores, so the scheduler places
    tasks by capacity (energy-aware scheduling).

  • No USB root shell. Development images open a root shell without password on the USB serial port and telnet
    over USB networking while the initramfs runs; this release does not (the USB gadget itself is still set up, so a
    root's serial getty and usb0 networking work). To turn it on for recovery work, build your own image: the
    initramfs with kernel/initramfs/build.sh -u, or the kernel with tb323fu.usbshell=1 added to CONFIG_CMDLINE
    (kernel/initramfs/README.md). Anyone with a cable
    gets root while that shell runs.

  • If it does not boot: the boot summary on the panel says how far it got. Holding volume up + down for 10 s
    restores Android from boot_b (needs the Android image hash, below). Otherwise write your saved Android boot.img
    back to boot_a from a PC in EDL mode (fastboot is read-only on this bootloader):
    docs/recovery.md.

What is in this release

File What
Image-tb323fu-t41 the kernel as a raw arm64 Image, with its device tree, command line and initramfs built in — and all its modules: the initramfs carries lib/modules/7.3.0-rc4-tb323fu-t41 (782 modules, the out-of-tree speaker amplifier driver in extra/) as a squashfs and mounts it on /lib/modules/7.3.0-rc4-tb323fu-t41 of the root it boots, so the roots need no modules of their own
Image-tb323fu-t41.gz the same kernel, gzip-compressed (the bootloader decompresses it); the helper's kernel updates download this one
modules-tb323fu-t41.tar.gz the same modules tree as a tarball — only for a root that opts out of the shared modules (own in its /etc/tb323fu/modules); normally not needed
boot-repack-kernel.py puts Image-tb323fu-t41 into your own stock boot image (Python 3, no dependencies; same as tools/boot-repack-kernel.py)
config-tb323fu-t41 the kernel .config
initramfs-t41.list, initramfs-t41.files the initramfs: gen_init_cpio list and file list
busybox-1.36.1.config configuration of the BusyBox binary in the initramfs
busybox-1.36.1.tar.bz2 the complete source of that BusyBox binary (the unmodified upstream tarball)
THIRD-PARTY-NOTICES.txt copyright and license texts of the third-party files in the initramfs (BusyBox, wireless-regdb, Terminus Font)
SHA256SUMS checksums of all of the above (they catch a damaged download; they are not a signature)

There is no ready-made boot.img, on purpose. A boot image for this tablet is the stock image with only the kernel
replaced: its header, Lenovo's GKI boot signature and the vbmeta/AVB footer are copied from a stock boot.img. Those
blobs are Lenovo's, not ours to redistribute, and they have to match the firmware version and region of your
tablet. So you build the image yourself, from the stock boot.img you saved during the backup step:

python3 boot-repack-kernel.py stock-boot.img Image-tb323fu-t41 linux-boot.img

tools/install/install.sh boot does this for you. Install: see docs/install.md
(repacked image → boot_a; nothing is installed into the roots).

Already running Linux with Open Device Helper? tb323fu-ctl kernel update (or About → Kernel Updates in the
settings app) installs this release the same way, runs it on trial and goes back to the previous kernel by itself if
it does not start (docs/helper.md).

What you must provide

  • Firmware — none is included. Vendor firmware may not be redistributed. Extract it from your own tablet with
    firmware/extract-on-device.sh
    (the list is firmware/manifest.tsv) and put it into each root's /lib/firmware (the root builders do this).
    The initramfs carries only regulatory.db (wireless-regdb, ISC).
  • The Android image hash for the emergency way back (volume up + down held 10 s): /etc/tb323fu/android-boot.sha256
    on baldur-root (or baldur-root-sd). Without it the chord does nothing in the initramfs.
  • Your own stock boot.img (saved in the backup step, docs/install.md) to repack Image-tb323fu-t41 into.

Firmware-free initramfs: what that means

Drivers that probe before a root is mounted cannot find their firmware in this image (measured on the tablet; table in
kernel/initramfs/README.md):

  • Wi-Fi (ath12k) is a module: udev loads it from the root, where the firmware is, so it comes up with the root
    (no Wi-Fi in the initramfs itself).
  • GPU and Bluetooth log a missing-firmware error in the initramfs and recover after the root is mounted.
  • Touch is loaded by the root (udev), not by the initramfs; the initramfs' touch echo is not available.
  • The boot summary's GPU line is empty (the GPU has no firmware yet at that point).

Source code (GPL)

  • Kernel: upstream torvalds/linux v7.3-rc4 (93f51579e7df248780214094418f205253383cc5) + the patch series in
    kernel/patches of tb323fu-linux kernel-t41
    (commit 3f7e42ad79f912dc591d301185be9cc0ae8a6a23); configuration: config-tb323fu-t41 (= defconfig + kaanapali-oneplus-infiniti_defconfig
    • kernel/config/baldur.fragment + kernel/config/baldur-display.fragment + kernel/config/baldur-netfilter.fragment, CONFIG_LOCALVERSION="-tb323fu-t41",
      built with make LOCALVERSION=). Origins of every patch: kernel/PROVENANCE.md.
  • Out-of-tree module snd-soc-aw882xx (GPL-2.0, Awinic): kernel/out-of-tree/aw882xx.
  • Initramfs: kernel/initramfs (init, build.sh; gpu-probe.c GPL-2.0),
    userspace/platform/src/keyhold.c, android/back-to-android; file list initramfs-t41.list.
  • BusyBox 1.36.1 (GPL-2.0), unmodified: the source is attached to this release as busybox-1.36.1.tar.bz2
    (sha256 b8cc24c9574d809e7279c3be349795c5d5ceb6fdf19ca709f80cde50e47de314, the same file as https://busybox.net/downloads/busybox-1.36.1.tar.bz2),
    configuration busybox-1.36.1.config, static aarch64 build (binary sha256 9ebb421890774102b38919eced19cd3ccd51a984ac0599cbc763f1b09dad11e7).
  • Console font: console-setup Lat15-Terminus28x14 (Terminus Font, SIL OFL 1.1).
  • regulatory.db: wireless-regdb (ISC), sha256 2fb33ca0074db573e05ef7dd50bb45b63c0ff98b7e852e1105ebad536fae8e6b.

Copyright and license texts of these third-party files: THIRD-PARTY-NOTICES.txt.

Licenses of the repository's parts: NOTICE.
Redistributors: modified builds use their own name, see TRADEMARKS.md.

Checksums

d2427452153f8ea15e349e9730bc2e00991f49e55e57b80a09f1c7a8b246e24e  Image-tb323fu-t41
9597bf8e18590bbd30b4debd02e8fded167b1b3de959e96a41835a0416c5ce91  Image-tb323fu-t41.gz
dddf84ab8e3a682669b2cfb00805fe17d1f94e611a5380fb5e6365b3421495ab  modules-tb323fu-t41.tar.gz
05c514e5901c676d42607ed936a1eb3eea64c74db9e7eff45e4527b50d1806b4  config-tb323fu-t41
bbcaec189c2166dbf97d69602d69c0a0e4b52e0bcb78123d9d60073aaae9ad97  initramfs-t41.list
45aebe06c73a35eb574b3e9bce33a3067dd1d5cf0ec6ad8062f5d59015220d3c  initramfs-t41.files
5bea14190056e80da14cafb633fd483374441aea80dbf5b3f8e58acbec2ebd26  busybox-1.36.1.config
b8cc24c9574d809e7279c3be349795c5d5ceb6fdf19ca709f80cde50e47de314  busybox-1.36.1.tar.bz2
24ee3d01c835a5a71bb0133e8fff3990cbd7f78b0f46ca2b58f592ac2cb4509e  THIRD-PARTY-NOTICES.txt
48a1eddea802e3ea3cc8c16a59cb4c51185d05132d65397bc521dc09ee3c49cc  boot-repack-kernel.py