sys-fs/zfs-kmod: Add Linux kernel 6.3.x patchset

sys-fs/zfs-kmod/Manifest

 AUX 2.1.10-Revert-ZFS_IOC_COUNT_FILLED-does-unnecessary-txg_wai.patch 1932 BLAKE2B 761f1ed4a17c946fb08aa46c3b9defb0672897311dc61225f28298af7569f6350b264cb917696c091ebbf2a95aec8e2005385d27d3f996b99cc424ae0b503082 SHA512 ebdb7c6562eba403397b17dc0830f5c10a80b339ff62f52b569b4ddc28660e8ba353f2e54927e546812fe17539249ba6d1757d5cc150d3a2a75f41e702bcd239
+AUX 2.1.11-6.3-compat-idmapped-mount-api-changes.patch 95219 BLAKE2B bac74774b10ab4d0a06aa3e0d425c6e76566ff385ed3995a91bda3282ad62d80113df02f638fbfae24042b7bf8387d731554c7689f5c8280c68359cc6a21faf4 SHA512 47516410204e28540a8c29d3cf451fcfb6a7139561a036a46800ad7a402c20c6af7fa269302f8affa7b0e964b26a6b9bcdbd807fa648ed34d07a579ebeef951b
+AUX 2.1.11-6.3-compat-writepage_t-typedef-change.patch 5498 BLAKE2B 70a6a5589e14bd5de689d4d50956f3b2ae6820a36b8d84c872c36ce9042e067cea2022bba291c9711823fb8e6d2e1c3aa1d7935e3f4bf429c15bc7f2499ae23a SHA512 2b55930c10acb50f744362a9dcc29ce0132f55453258e907e5cb85f3205c25fafd4e76e986819650e6b7a8a64f442ba4dce78ff1d2d38e961aed9342bd9a7ddd
+AUX 2.1.11-expose-additional-attributes.patch 41613 BLAKE2B 495e656bffab4e282dd260f9d080d3543ebcb88eed79e3f1bb3dccdd303543dcb921e7cc5b5a3b2357ae7fd2343909e7184540df4b0b76a76530543610f7c5ba SHA512 17eaceeb490e0094b54d7c4e37bf653eb5cea2846316bdda0319a9c10c802084561a48aa7b1d72a4b6b08e09bf6ea688b93daa912a7c42feddad02c11749a399
+AUX 2.1.11-optimize-access-checks.patch 6850 BLAKE2B f4b5f05fd197668b23bcffcab661ab641cc9eedd84e23e39229e630fbc34441b2838f457739759df56e5ac80eb539b311f7e8f3f7abd4601a0ae169a1d464e9a SHA512 2876721ae59e918ced2ac439b32c350f3c6d4b9e23c6a830f81b69b63a05b55e0a15b774b03aeb85ded515825ccf29c783e19d7b52d6e09441ca3ba9e658427e
+AUX 2.1.11-support-idmapped-mount-in-user-ns.patch 69463 BLAKE2B e599d28bab727b800c5f654b1902c0001dd411ee24bbeb04957fce7eeb6d9d1f3e152058dc0d0a430e3422fb7bb4cadaf09460cd48fe1e7a2374954c8cfe66e7 SHA512 b8109a18c012f69be7cd5dfadf6fdf0d349ec5248316414acca92b40065c8d60d08fa8ed0c2214bf40ae0351443abf3897baef48065688fa408528877e2ae759
+AUX 2.1.11-support-idmapped-mount.patch 104745 BLAKE2B bc6611d64e5b296025aab9a42202f44ba6c14a629128dec6b5bc3eb5a244809f1c04a466d118cf5e41d5af8977bf84aca5edbb5930301ded060920796f8a7bb7 SHA512 fcf4380c49cf1066b68942de5ffac0e052a72bea4095af7dd27ab2b36e7629a245050f1c480c1267957b18f3429579f04f570cdd8209fcfd1a72b819a0b4534c
 AUX 2.1.7-ppc64-ieee128-compat.patch 6889 BLAKE2B 9214915ed5b1d149927d46f749903fbb9b4d243d993041b8c6db039dcb7a3968a315f211e010ef9373b721336d45daef264d951e7ea1e0aed01818ebccae9d02 SHA512 4e3edbe396d0c1fdb7b286417b2bf7fe114b392e09158b3f5d3e3d1c4844bf0d59263309883363175dacd63194fd0d6a120ace35c83989d0546dae825bbb91bd
 AUX zfs-kmod-2.1.6-fgrep.patch 2183 BLAKE2B b8c9b58cc6d94e9ddeacbe3c5eca9d040f1c6fba84b814c8c553d5c1e15334765d3190286a4ad2298762bc54f66a8b89ef69d115cfbd5a25d928170a1d46a770 SHA512 f65e7ffa8cfd00da7ad6d1fcbf5d61172c52e55ea2630f719b49750692c1c046e8baed0e04cadc841adbd804cf861ec712b0d07dbbcae7c1c3b475326045ae8c
 DIST zfs-2.1.11.tar.gz 35100716 BLAKE2B 991ac2347bcd452812e247358e2c44a04a88e700d25878b5b95f86939e6114e1205e7afabfd2a1ea9220947876511374d7224aa587d3d66184838d705f71a89a SHA512 335a543644d2dbba919213a28cc5922bf6a118fc19069db84562ce056449a2d6ca4ba827e54f304ab7d9be22260aa9b255134f1b12e2bc98890f757f35e48bd7
 DIST zfs-2.1.11.tar.gz.asc 836 BLAKE2B 0b904d8e1de2dd08a377efc94e32862192d6b9ccb8628af058a71b3ea51f5e483e0cf527906cd222fe9b41b28ca0b30b0efa07d97c480e5546f6e2bed8cbcb01 SHA512 7329e62012ba64288345d8959611de82502ef1da4020e215462fbb2ed209413ec8638d211a31dd6e70be71c998f1da1d8a0d19e5df1f2778782ebb988c94aa41
-EBUILD zfs-kmod-2.1.11.ebuild 5435 BLAKE2B 5cc4835c1cff1a4d78b8710cd21f557b5d7de99a135d1b60e96b5f738755e219c66092b686dc2299f94baa58b84abac4d8cabac02b14b5e2031e867cd2f405fb SHA512 929af77ae88751937a97dbeb53bd3f8ce8161df48b34ab82a96f888642328bd0fa3346ff0646b92c1835048725162e23f6d45d6ebffe012d4b69ba787ddf21d4
+EBUILD zfs-kmod-2.1.11.ebuild 6588 BLAKE2B 59815b0bc24c8f84e3a4362c3df66cc7e08b0e16e7ef7a7fdb098003c5465905cce095df7315b2ad0cadbb7f7a81c4bdbeeea4cd48a400caff1c7fa8e7507551 SHA512 241c3977cb69c6e5266690acc3ec73007a08ea27db44756dedfa20c32ff0f0942e964ad226b8e252eaba3b312f1a73e53500b2f97819d29d0b5e6d9502d8abe0
 EBUILD zfs-kmod-9999.ebuild 6569 BLAKE2B 2bf117650742e0044bf78d4838c0f8b1a2895d4bac31df742be78ce93aa321074840233d825b8844d01a2de0d1923d0f42bacb53109b7c034592babdb5c4dde9 SHA512 f0342de93072653647992b0b1c22c81f026697446b721fb44cde9808beea93651d58323ebdefb783adfc9eb3b2d8ff02fb267fdf6e4109e1b2355e1867ffedba
 MISC metadata.xml 651 BLAKE2B 477c5d768a2eddab7bc0c14d0845801e25bfd9298fe229a132d7ff11a8560988d0230ec5d4b1447df32f58b9754df0cbe989f2a5600cd3fa99124ea4edc45cdd SHA512 d9bf0598c87bcdaab7d81dd5502caf1400f3c8d3834a6770630d85ed365cd4ebb3beeebae72d2d4d49bcdd0aa6cd709aa57cb2af4195dfc04a9c0cef89cfd724

sys-fs/zfs-kmod/files/2.1.11-6.3-compat-writepage_t-typedef-change.patch

+From 87b91626330696dc57d3f1de6d6659b1b71fed1b Mon Sep 17 00:00:00 2001
+From: Spotlight <spotlight@joscomputing.space>
+Date: Wed, 26 Apr 2023 13:04:16 -0500
+Subject: [PATCH 1/2] Backport "Linux 6.3 compat: writepage_t first arg struct
+ folio*"
+
+---
+ config/kernel-writepage_t.m4   | 26 ++++++++++++++++++++++++++
+ config/kernel.m4               |  2 ++
+ module/os/linux/zfs/zpl_file.c | 17 +++++++++++++++++
+ 3 files changed, 45 insertions(+)
+ create mode 100644 config/kernel-writepage_t.m4
+
+diff --git a/config/kernel-writepage_t.m4 b/config/kernel-writepage_t.m4
+new file mode 100644
+index 00000000000..3a0cffd9857
+--- /dev/null
++++ b/config/kernel-writepage_t.m4
+@@ -0,0 +1,26 @@
++AC_DEFUN([ZFS_AC_KERNEL_SRC_WRITEPAGE_T], [
++	dnl #
++	dnl # 6.3 API change
++	dnl # The writepage_t function type now has its first argument as
++	dnl # struct folio* instead of struct page*
++	dnl #
++	ZFS_LINUX_TEST_SRC([writepage_t_folio], [
++		#include <linux/writeback.h>
++		int putpage(struct folio *folio,
++		    struct writeback_control *wbc, void *data)
++		{ return 0; }
++		writepage_t func = putpage;
++	],[])
++])
++
++AC_DEFUN([ZFS_AC_KERNEL_WRITEPAGE_T], [
++	AC_MSG_CHECKING([whether int (*writepage_t)() takes struct folio*])
++	ZFS_LINUX_TEST_RESULT([writepage_t_folio], [
++		AC_MSG_RESULT(yes)
++		AC_DEFINE(HAVE_WRITEPAGE_T_FOLIO, 1,
++		   [int (*writepage_t)() takes struct folio*])
++	],[
++		AC_MSG_RESULT(no)
++	])
++])
++
+diff --git a/config/kernel.m4 b/config/kernel.m4
+index b376a151694..b64cca7a1f9 100644
+--- a/config/kernel.m4
++++ b/config/kernel.m4
+@@ -148,6 +148,7 @@ AC_DEFUN([ZFS_AC_KERNEL_TEST_SRC], [
+ 	ZFS_AC_KERNEL_SRC___COPY_FROM_USER_INATOMIC
+ 	ZFS_AC_KERNEL_SRC_IDMAP_MNT_API
+ 	ZFS_AC_KERNEL_SRC_IATTR_VFSID
++	ZFS_AC_KERNEL_SRC_WRITEPAGE_T
+ 
+ 	AC_MSG_CHECKING([for available kernel interfaces])
+ 	ZFS_LINUX_TEST_COMPILE_ALL([kabi])
+@@ -269,6 +270,7 @@ AC_DEFUN([ZFS_AC_KERNEL_TEST_RESULT], [
+ 	ZFS_AC_KERNEL___COPY_FROM_USER_INATOMIC
+ 	ZFS_AC_KERNEL_IDMAP_MNT_API
+ 	ZFS_AC_KERNEL_IATTR_VFSID
++	ZFS_AC_KERNEL_WRITEPAGE_T
+ ])
+ 
+ dnl #
+diff --git a/module/os/linux/zfs/zpl_file.c b/module/os/linux/zfs/zpl_file.c
+index f124599393f..2bdb53579ae 100644
+--- a/module/os/linux/zfs/zpl_file.c
++++ b/module/os/linux/zfs/zpl_file.c
+@@ -701,6 +701,15 @@ zpl_putpage(struct page *pp, struct writeback_control *wbc, void *data)
+ 	return (0);
+ }
+ 
++#ifdef HAVE_WRITEPAGE_T_FOLIO
++static int
++zpl_putfolio(struct folio *pp, struct writeback_control *wbc, void *data)
++{
++	(void) zpl_putpage(&pp->page, wbc, data);
++	return (0);
++}
++#endif
++
+ static int
+ zpl_writepages(struct address_space *mapping, struct writeback_control *wbc)
+ {
+@@ -723,7 +732,11 @@ zpl_writepages(struct address_space *mapping, struct writeback_control *wbc)
+ 	 * and then we commit it all in one go.
+ 	 */
+ 	wbc->sync_mode = WB_SYNC_NONE;
++#ifdef HAVE_WRITEPAGE_T_FOLIO
++	result = write_cache_pages(mapping, wbc, zpl_putfolio, mapping);
++#else
+ 	result = write_cache_pages(mapping, wbc, zpl_putpage, mapping);
++#endif
+ 	if (sync_mode != wbc->sync_mode) {
+ 		ZPL_ENTER(zfsvfs);
+ 		ZPL_VERIFY_ZP(zp);
+@@ -739,7 +752,11 @@ zpl_writepages(struct address_space *mapping, struct writeback_control *wbc)
+ 		 * details). That being said, this is a no-op in most cases.
+ 		 */
+ 		wbc->sync_mode = sync_mode;
++#ifdef HAVE_WRITEPAGE_T_FOLIO
++		result = write_cache_pages(mapping, wbc, zpl_putfolio, mapping);
++#else
+ 		result = write_cache_pages(mapping, wbc, zpl_putpage, mapping);
++#endif
+ 	}
+ 	return (result);
+ }
+
+From 04e8c37ff2490d1933fcb7f5c42da3e11b50bf7c Mon Sep 17 00:00:00 2001
+From: Spotlight <spotlight@joscomputing.space>
+Date: Wed, 26 Apr 2023 13:11:02 -0500
+Subject: [PATCH 2/2] Backport "Add zpl_write_cache_pages()"
+
+---
+ module/os/linux/zfs/zpl_file.c | 26 ++++++++++++++++----------
+ 1 file changed, 16 insertions(+), 10 deletions(-)
+
+diff --git a/module/os/linux/zfs/zpl_file.c b/module/os/linux/zfs/zpl_file.c
+index 2bdb53579ae..30013c38d8e 100644
+--- a/module/os/linux/zfs/zpl_file.c
++++ b/module/os/linux/zfs/zpl_file.c
+@@ -710,6 +710,20 @@ zpl_putfolio(struct folio *pp, struct writeback_control *wbc, void *data)
+ }
+ #endif
+ 
++static inline int
++zpl_write_cache_pages(struct address_space *mapping,
++    struct writeback_control *wbc, void *data)
++{
++	int result;
++
++#ifdef HAVE_WRITEPAGE_T_FOLIO
++	result = write_cache_pages(mapping, wbc, zpl_putfolio, data);
++#else
++	result = write_cache_pages(mapping, wbc, zpl_putpage, data);
++#endif
++	return (result);
++}
++
+ static int
+ zpl_writepages(struct address_space *mapping, struct writeback_control *wbc)
+ {
+@@ -732,11 +746,7 @@ zpl_writepages(struct address_space *mapping, struct writeback_control *wbc)
+ 	 * and then we commit it all in one go.
+ 	 */
+ 	wbc->sync_mode = WB_SYNC_NONE;
+-#ifdef HAVE_WRITEPAGE_T_FOLIO
+-	result = write_cache_pages(mapping, wbc, zpl_putfolio, mapping);
+-#else
+-	result = write_cache_pages(mapping, wbc, zpl_putpage, mapping);
+-#endif
++	result = zpl_write_cache_pages(mapping, wbc, mapping);
+ 	if (sync_mode != wbc->sync_mode) {
+ 		ZPL_ENTER(zfsvfs);
+ 		ZPL_VERIFY_ZP(zp);
+@@ -752,11 +762,7 @@ zpl_writepages(struct address_space *mapping, struct writeback_control *wbc)
+ 		 * details). That being said, this is a no-op in most cases.
+ 		 */
+ 		wbc->sync_mode = sync_mode;
+-#ifdef HAVE_WRITEPAGE_T_FOLIO
+-		result = write_cache_pages(mapping, wbc, zpl_putfolio, mapping);
+-#else
+-		result = write_cache_pages(mapping, wbc, zpl_putpage, mapping);
+-#endif
++		result = zpl_write_cache_pages(mapping, wbc, mapping);
+ 	}
+ 	return (result);
+ }

sys-fs/zfs-kmod/files/2.1.11-optimize-access-checks.patch

+From 9e7724f9011c0b42b982ed9d67ce3a5d75e33441 Mon Sep 17 00:00:00 2001
+From: Andrew Walker <awalker@ixsystems.com>
+Date: Tue, 15 Mar 2022 11:03:29 -0400
+Subject: [PATCH 1/2] Linux optimize access checks when ACL is trivial
+
+Bypass check of ZFS aces if the ACL is trivial. When an ACL is
+trivial its permissions are represented by the mode without any
+loss of information. In this case, it is safe to convert the
+access request into equivalent mode and then pass desired mask
+and inode to generic_permission(). This has the added benefit
+of also checking whether entries in a POSIX ACL on the file grant
+the desired access.
+
+This commit also skips the ACL check on looking up the xattr dir
+since such restrictions don't exist in Linux kernel and it makes
+xattr lookup behavior inconsistent between SA and file-based
+xattrs. We also don't want to perform a POSIX ACL check while
+looking up the POSIX ACL if for some reason it is located in
+the xattr dir rather than an SA.
+
+Signed-off-by: Andrew Walker <awalker@ixsystems.com>
+---
+ module/os/linux/zfs/zfs_acl.c      | 70 ++++++++++++++++++++++++++++++
+ module/os/linux/zfs/zfs_vnops_os.c |  2 +-
+ 2 files changed, 71 insertions(+), 1 deletion(-)
+
+diff --git a/module/os/linux/zfs/zfs_acl.c b/module/os/linux/zfs/zfs_acl.c
+index 351e4dad799..b70691ab31c 100644
+--- a/module/os/linux/zfs/zfs_acl.c
++++ b/module/os/linux/zfs/zfs_acl.c
+@@ -863,6 +863,26 @@ zfs_unix_to_v4(uint32_t access_mask)
+ 	return (new_mask);
+ }
+ 
++
++static int
++zfs_v4_to_unix(uint32_t access_mask, int *unmapped)
++{
++	int new_mask = 0;
++
++	*unmapped = access_mask &
++	    (ACE_WRITE_OWNER | ACE_WRITE_ACL | ACE_DELETE);
++
++	if (access_mask & WRITE_MASK)
++		new_mask |= S_IWOTH;
++	if (access_mask & ACE_READ_DATA)
++		new_mask |= S_IROTH;
++	if (access_mask & ACE_EXECUTE)
++		new_mask |= S_IXOTH;
++
++	return (new_mask);
++}
++
++
+ static void
+ zfs_set_ace(zfs_acl_t *aclp, void *acep, uint32_t access_mask,
+     uint16_t access_type, uint64_t fuid, uint16_t entry_type)
+@@ -2399,6 +2419,53 @@ zfs_has_access(znode_t *zp, cred_t *cr)
+ 	return (B_TRUE);
+ }
+ 
++/*
++ * Simplified access check for case where ACL is known to not contain
++ * information beyond what is defined in the mode. In this case, we
++ * can pass along to the kernel / vfs generic_permission() check, which
++ * evaluates the mode and POSIX ACL.
++ *
++ * NFSv4 ACLs allow granting permissions that are usually relegated only
++ * to the file owner or superuser. Examples are ACE_WRITE_OWNER (chown),
++ * ACE_WRITE_ACL(chmod), and ACE_DELETE. ACE_DELETE requests must fail
++ * because with conventional posix permissions, right to delete file
++ * is determined by write bit on the parent dir.
++ *
++ * If unmappable perms are requested, then we must return EPERM
++ * and include those bits in the working_mode so that the caller of
++ * zfs_zaccess_common() can decide whether to perform additional
++ * policy / capability checks. EACCES is used in zfs_zaccess_aces_check()
++ * to indicate access check failed due to explicit DENY entry, and so
++ * we want to avoid that here.
++ */
++static int
++zfs_zaccess_trivial(znode_t *zp, uint32_t *working_mode, cred_t *cr)
++{
++	int err, mask;
++	int unmapped = 0;
++
++	ASSERT(zp->z_pflags & ZFS_ACL_TRIVIAL);
++
++	mask = zfs_v4_to_unix(*working_mode, &unmapped);
++	if (mask == 0 || unmapped) {
++		*working_mode = unmapped;
++		return (unmapped ? SET_ERROR(EPERM) : 0);
++	}
++
++#if defined(HAVE_IOPS_PERMISSION_USERNS)
++	err = generic_permission(cr->user_ns, ZTOI(zp), mask);
++#else
++	err = generic_permission(ZTOI(zp), mask);
++#endif
++	if (err != 0) {
++		return (SET_ERROR(EPERM));
++	}
++
++	*working_mode = unmapped;
++
++	return (0);
++}
++
+ static int
+ zfs_zaccess_common(znode_t *zp, uint32_t v4_mode, uint32_t *working_mode,
+     boolean_t *check_privs, boolean_t skipaclchk, cred_t *cr)
+@@ -2450,6 +2517,9 @@ zfs_zaccess_common(znode_t *zp, uint32_t v4_mode, uint32_t *working_mode,
+ 		return (SET_ERROR(EPERM));
+ 	}
+ 
++	if (zp->z_pflags & ZFS_ACL_TRIVIAL)
++		return (zfs_zaccess_trivial(zp, working_mode, cr));
++
+ 	return (zfs_zaccess_aces_check(zp, working_mode, B_FALSE, cr));
+ }
+ 
+diff --git a/module/os/linux/zfs/zfs_vnops_os.c b/module/os/linux/zfs/zfs_vnops_os.c
+index ece7c373e85..b65728f0d4c 100644
+--- a/module/os/linux/zfs/zfs_vnops_os.c
++++ b/module/os/linux/zfs/zfs_vnops_os.c
+@@ -474,7 +474,7 @@ zfs_lookup(znode_t *zdp, char *nm, znode_t **zpp, int flags, cred_t *cr,
+ 		 */
+ 
+ 		if ((error = zfs_zaccess(*zpp, ACE_EXECUTE, 0,
+-		    B_FALSE, cr))) {
++		    B_TRUE, cr))) {
+ 			zrele(*zpp);
+ 			*zpp = NULL;
+ 		}
+
+From 6947cd4d94945b1014f69801efbd92fc526ab373 Mon Sep 17 00:00:00 2001
+From: Ryan Moeller <ryan@iXsystems.com>
+Date: Wed, 3 Nov 2021 08:03:08 -0400
+Subject: [PATCH 2/2] Add configure check for "permission" inode operation
+
+The "permission" inode operation takes a new `struct user_namespace *`
+parameter starting in Linux 5.12.
+
+Add a configure check and adapt accordingly.
+
+Signed-off-by: Ryan Moeller <ryan@iXsystems.com>
+---
+ config/kernel-inode-permission.m4 | 29 +++++++++++++++++++++++++++++
+ config/kernel.m4                  |  2 ++
+ 2 files changed, 31 insertions(+)
+ create mode 100644 config/kernel-inode-permission.m4
+
+diff --git a/config/kernel-inode-permission.m4 b/config/kernel-inode-permission.m4
+new file mode 100644
+index 00000000000..ba9ff5d43d4
+--- /dev/null
++++ b/config/kernel-inode-permission.m4
+@@ -0,0 +1,29 @@
++AC_DEFUN([ZFS_AC_KERNEL_SRC_PERMISSION], [
++	dnl #
++	dnl # 5.12 API change that added the struct user_namespace* arg
++	dnl # to the front of this function type's arg list.
++	dnl #
++	ZFS_LINUX_TEST_SRC([permission_userns], [
++		#include <linux/fs.h>
++		#include <linux/sched.h>
++
++		int inode_permission(struct user_namespace *userns,
++		    struct inode *inode, int mask) { return 0; }
++
++		static const struct inode_operations
++			iops __attribute__ ((unused)) = {
++			.permission		= inode_permission,
++		};
++	],[])
++])
++
++AC_DEFUN([ZFS_AC_KERNEL_PERMISSION], [
++	AC_MSG_CHECKING([whether iops->permission() takes struct user_namespace*])
++	ZFS_LINUX_TEST_RESULT([permission_userns], [
++		AC_MSG_RESULT(yes)
++		AC_DEFINE(HAVE_IOPS_PERMISSION_USERNS, 1,
++		   [iops->permission() takes struct user_namespace*])
++	],[
++		AC_MSG_RESULT(no)
++	])
++])
+diff --git a/config/kernel.m4 b/config/kernel.m4
+index d1d3dede175..639d1837712 100644
+--- a/config/kernel.m4
++++ b/config/kernel.m4
+@@ -82,6 +82,7 @@ AC_DEFUN([ZFS_AC_KERNEL_TEST_SRC], [
+ 	ZFS_AC_KERNEL_SRC_MKDIR
+ 	ZFS_AC_KERNEL_SRC_LOOKUP_FLAGS
+ 	ZFS_AC_KERNEL_SRC_CREATE
++	ZFS_AC_KERNEL_SRC_PERMISSION
+ 	ZFS_AC_KERNEL_SRC_GET_LINK
+ 	ZFS_AC_KERNEL_SRC_PUT_LINK
+ 	ZFS_AC_KERNEL_SRC_TMPFILE
+@@ -193,6 +194,7 @@ AC_DEFUN([ZFS_AC_KERNEL_TEST_RESULT], [
+ 	ZFS_AC_KERNEL_MKDIR
+ 	ZFS_AC_KERNEL_LOOKUP_FLAGS
+ 	ZFS_AC_KERNEL_CREATE
++	ZFS_AC_KERNEL_PERMISSION
+ 	ZFS_AC_KERNEL_GET_LINK
+ 	ZFS_AC_KERNEL_PUT_LINK
+ 	ZFS_AC_KERNEL_TMPFILE

sys-fs/zfs-kmod/zfs-kmod-2.1.11.ebuild

@@ -60,6 +60,27 @@ RESTRICT="debug? ( strip ) test"
 
 DOCS=( AUTHORS COPYRIGHT META README.md )
 
+PATCHES=(
+       # Prerequisite to idmap patch: "Use generic_permission() on Linux if ACL is trivial"
+       # https://github.com/openzfs/zfs/pull/13237
+       "${FILESDIR}"/2.1.11-optimize-access-checks.patch
+       # Prerequesite to idmap patch: "Expose additional file level attributes"
+       # https://github.com/openzfs/zfs/pull/13118
+       "${FILESDIR}"/2.1.11-expose-additional-attributes.patch
+       # Backported version of "Support idmapped mount"
+       # https://github.com/openzfs/zfs/pull/13671
+       "${FILESDIR}"/2.1.11-support-idmapped-mount.patch
+       # Backported version of "Support idmapped mount in user namespace"
+       # https://github.com/openzfs/zfs/pull/14097
+       "${FILESDIR}"/2.1.11-support-idmapped-mount-in-user-ns.patch
+       # Backported version of "Linux 6.3 compat: idmapped mount API changes"
+       # https://github.com/openzfs/zfs/pull/14682
+       "${FILESDIR}"/2.1.11-6.3-compat-idmapped-mount-api-changes.patch
+       # "Linux 6.3 compat: writepage_t first arg struct folio*"
+       # https://github.com/openzfs/zfs/pull/14699
+       "${FILESDIR}"/2.1.11-6.3-compat-writepage_t-typedef-change.patch
+)
+
 pkg_pretend() {
 	use rootfs || return 0