Compare commits

...

4 Commits

Author SHA1 Message Date
optout 2f7fe2558b
Update documentation 2024-03-03 18:41:59 +00:00
optout ac4ee63b6c
Update documentation config hyperlinks 2024-03-03 18:41:03 +00:00
optout 5b9fb229af
Update naming schema | WIP warning with virt_hardened 2024-03-03 18:39:16 +00:00
optout 6629c52042
Update naming schema | WIP warning with virt_hardened 2024-03-03 18:37:09 +00:00
4 changed files with 10 additions and 4 deletions

View File

@ -1,6 +1,10 @@
### What is the Plague kernel?
The Plague kernel was initially designed for PlagueOS (hardened Void Linux musl), however the project has taken a life of its own. The kernel is distro-agnostic, therefore it can be ran on Debian, Fedora, Void Linux, and many more. The script detailed below allows for self-compilation of the Plague kernel, along with the option to tailor a custom kernel to your specific hardware.
- [host_hardened.config](https://0xacab.org/optout/plague-kernel/-/blob/main/host_hardened.config?ref_type=heads) - Feature-complete baseline designed for the host
- [virt_hardened.config](https://0xacab.org/optout/plague-kernel/-/blob/main/virt_hardened.config?ref_type=heads) - Work-in-progress baseline designed to work within various guest Virtual Machines
- Note: This is currently bootable, but a comprehensive test is still needed within a set of VMs. Most notable issues at the moment are video/media drivers preventing video playback
The script performs a variety of functions:
- Installs needed dependencies for compilation
- Stages desired linux-hardened kernel under `/usr/src/`
@ -9,8 +13,8 @@ The script performs a variety of functions:
- Remove unnecessary artifacts such as System.map & signing keys
### Steps to self-compile
1. Set the KVER variable to which version you want to obtain from Anthraxx's [linux-hardened](https://github.com/anthraxx/linux-hardened) repository
2. Run `bash self_compilation.sh`
1. Run `bash self_compilation.sh`
2. Set the Kernel version (KVER) variable to a released version you want to obtain from Anthraxx's [linux-hardened](https://github.com/anthraxx/linux-hardened/releases) repository
> Note: If you are planning on mapping modules used by your system when prompted via the script, we highly recommend that you access peripherals such as Webcams, adapters, USBs, protocols such as Bluetooth prior to running the script, if they are desired.
@ -18,7 +22,7 @@ The script performs a variety of functions:
### Trimming Efforts
While linux-hardened security patchsets along with kernel configurations are notable for this kernel project, the purpose was to practice minimalism by reducing the size of the linux kernel, thereby cutting attack surface. This is not a trivial thing to record, therefore we are displaying the size purely as a point of comparison.
| | Plague (Virt) | Plague | TAILS | Whonix | Vanilla |
| | Plague (Virt) | Plague (Host) | TAILS | Whonix | Vanilla |
| --- | --- |--- | --- | --- | --- |
| Size (/lib/modules/)| 1.8 MB | 31.0 MB | 89.0 MB | 89.0 MB | 126.0 MB |
| Size (vmlinuz) | 7.9 MB | 8.0 MB | 7.8 MB | 7.8 MB | 14.0 MB |

View File

@ -60,7 +60,9 @@ fi
cd /usr/src/linux-hardened-"$KVER"
# Pull down plague kconfig
wget https://0xacab.org/optout/plague-kernel/-/raw/main/6.6.18-hardened1.config -O .config
wget https://0xacab.org/optout/plague-kernel/-/raw/main/host_hardened.config -O .config
# wget https://0xacab.org/optout/plague-kernel/-/raw/main/virt_hardened.config -O .config
## virt_hardened.config is still a WIP
# Prompt if baseline Plague kernel is desired
## If not, proceed to fingerprint device