2022-10-27 16:16:22 +00:00
|
|
|
#!/bin/bash
|
|
|
|
|
|
|
|
# Set VAR
|
2024-01-25 19:44:24 +00:00
|
|
|
KVER='6.6.13-hardened1'
|
2022-10-27 16:16:22 +00:00
|
|
|
#KVER='5.10.145-hardened1'
|
|
|
|
#KVER='5.15.74-hardened1'
|
|
|
|
|
|
|
|
# Dependencies
|
2024-01-25 19:44:24 +00:00
|
|
|
sudo dnf install binutils /usr/include/{libelf.h,openssl/pkcs7.h} \
|
|
|
|
/usr/bin/{bc,bison,flex,gcc,git,openssl,make,perl,pahole,zstd}
|
2022-10-27 16:16:22 +00:00
|
|
|
|
|
|
|
# Staging w/ error handling
|
|
|
|
if [[ ! -f /usr/src/"$KVER".tar.gz ]]; then
|
|
|
|
/usr/bin/curl --verbose --tlsv1.3 --proto =https -L -O --url "https://github.com/anthraxx/linux-hardened/archive/refs/tags/$KVER.tar.gz"
|
|
|
|
fi
|
|
|
|
|
|
|
|
if [[ ! -d /usr/src/linux-hardened-"$KVER" ]]; then
|
|
|
|
tar -xf "$KVER".tar.gz -C /usr/src/
|
|
|
|
fi
|
|
|
|
|
|
|
|
cd /usr/src/linux-hardened-"$KVER"
|
2024-01-25 19:44:24 +00:00
|
|
|
wget https://0xacab.org/optout/plague-kernel/-/raw/main/6.6.13-hardened.config -O .config
|
2022-10-27 16:16:22 +00:00
|
|
|
|
|
|
|
|
|
|
|
# Compilation
|
2024-01-25 19:44:24 +00:00
|
|
|
yes "" | make olddefconfig
|
2022-10-27 16:16:22 +00:00
|
|
|
make menuconfig
|
2024-01-25 19:44:24 +00:00
|
|
|
# Exit if making no changes
|
|
|
|
|
2022-10-27 16:16:22 +00:00
|
|
|
echo "Compiling "$KVER""
|
2024-01-25 19:44:24 +00:00
|
|
|
make -j $(nproc --all)
|
2022-10-27 16:16:22 +00:00
|
|
|
|
2024-01-25 19:44:24 +00:00
|
|
|
# Installing kernel
|
|
|
|
## Ensure /boot is rw
|
2022-10-27 16:16:22 +00:00
|
|
|
mount -o remount,rw /boot
|
2024-01-25 19:44:24 +00:00
|
|
|
command -v installkernel && sudo make modules_install install
|
2022-10-27 16:16:22 +00:00
|
|
|
|
|
|
|
# remove sysmap/signing keys
|
|
|
|
rm /lib/modules/"$KVER"_1/source/certs/signing_key*
|
|
|
|
rm /lib/modules/"$KVER"_1/source/System.map
|
|
|
|
rm /lib/modules/"$KVER"_1/source
|
|
|
|
rm /lib/modules/"$KVER"_1/build
|