Update 6.7.4 + tuning

README.md

@@ -4,10 +4,10 @@ Récupération, décompression des sources du Kernel linux sur kernel.org, optim
 
 ## Prérequis
 
-* Hyperviseur Proxmox
+- Hyperviseur Proxmox
-* Machine hôte avec processeur Intel
+- Machine hôte avec processeur Intel
-* Système d’exploitation pour VM sous Debian
+- Système d’exploitation pour VM sous Debian
-* Disposer du fichier de configuration noyeau de type Cloud
+- Disposer du fichier de configuration noyeau de type Cloud
 
 ## Usage
 
@@ -15,9 +15,9 @@ Récupération, décompression des sources du Kernel linux sur kernel.org, optim
 sudo bash kernel.sh [branch] [version] [compile]
 ```
 
-* branch : la branche majeur du kernel
+- branch : la branche majeur du kernel
-* version : la version du kernel à utiliser
+- version : la version du kernel à utiliser
-* compile : **optionnel**, utilisé pour passer la récupération des sources et leur décompression
+- compile : **optionnel**, utilisé pour passer la récupération des sources et leur décompression
 
 Exemple :
 
@@ -27,36 +27,43 @@ sudo bash kernel.sh 6.x 6.6.10
 
 ## Résultats
 
-* linux-headers-6.6.10-zogg-amd64_6.6.10-1_amd64.deb : 8.4 Mo
+- linux-headers-6.6.10-zogg-amd64_6.6.10-1_amd64.deb : 8.4 Mo
-* linux-image-6.6.10-zogg-amd64_6.6.10-1_amd64.deb : 20 Mo
+- linux-image-6.6.10-zogg-amd64_6.6.10-1_amd64.deb : 20 Mo
-* linux-image-6.6.10-zogg-amd64-dbg_6.6.10-1_amd64.deb : 151 Mo
+- linux-image-6.6.10-zogg-amd64-dbg_6.6.10-1_amd64.deb : 151 Mo
-* linux-libc-dev_6.6.10-1_amd64.deb : 1.3 Mo
+- linux-libc-dev_6.6.10-1_amd64.deb : 1.3 Mo
 
 ## TODO
 
-* voir s'il est possible d'optimiser encore plus les disable/enable en restant stable
+- ~~voir s'il est possible d'optimiser encore plus les disable/enable en restant stable~~
-* ~~trouver comment rendre compatible le kernel pour une VM avec drivers Nvidia~~
+- ~~trouver comment rendre compatible le kernel pour une VM avec drivers Nvidia~~
-* ajouter le test de la signature du kernel après téléchargement
+- ajouter le test de la signature du kernel après téléchargement
 
 ## CHANGELOG
 
+### 2024-02-10
+
+- Mise à jour de la configuration cloud du kernel (config-cloud-amd64 v6.6.9)
+- Retour au compilateur GCC par défaut (compatibilité)
+- Correction de bugs liés aux **\_ACL** et **\_XATTR** (réactivation des options)
+- Intégration des _crypto_ dans le kernel
+
 ### 2024-01-07
 
-* Mise à jour de la configuration cloud du kernel (config-cloud-amd64 v6.5.13)
+- Mise à jour de la configuration cloud du kernel (config-cloud-amd64 v6.5.13)
-* Mise à jour du patch pour ajouter des configurations processeurs (more-uarches-for-kernel.patch)
+- Mise à jour du patch pour ajouter des configurations processeurs (more-uarches-for-kernel.patch)
-* Mise à jour et optimisation du script (kernel.sh)
+- Mise à jour et optimisation du script (kernel.sh)
-* Passage de GCC à CLang pour les compilations
+- Passage de GCC à CLang pour les compilations
 
 ### 2023-11-30
 
-* Amélioration des sélections dans les options (enable/disable)
+- Amélioration des sélections dans les options (enable/disable)
-* Ajout d'un flag TESTING conditionnant l'appel de la fonction doDefaultsTesting _(pour tester d'autres options...)_
+- Ajout d'un flag TESTING conditionnant l'appel de la fonction doDefaultsTesting _(pour tester d'autres options...)_
 
 ### 2023-11-24
 
-* Correction de bugs liés aux disable/enable _(options du .config)_
+- Correction de bugs liés aux disable/enable _(options du .config)_
-* Test ok avec v6.6.1 et v6.6.2 du kernel sur VM Debian sous Proxmox
+- Test ok avec v6.6.1 et v6.6.2 du kernel sur VM Debian sous Proxmox
 
 ### 2023-11-22
 
-* Commit initial
+- Commit initial

config-cloud-amd64

@@ -1,15 +1,15 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 6.5.13 Kernel Configuration
+# Linux/x86 6.6.9 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="gcc-13 (Debian 13.2.0-7) 13.2.0"
+CONFIG_CC_VERSION_TEXT="gcc-13 (Debian 13.2.0-9) 13.2.0"
 CONFIG_CC_IS_GCC=y
 CONFIG_GCC_VERSION=130200
 CONFIG_CLANG_VERSION=0
 CONFIG_AS_IS_GNU=y
-CONFIG_AS_VERSION=24100
+CONFIG_AS_VERSION=24150
 CONFIG_LD_IS_BFD=y
-CONFIG_LD_VERSION=24100
+CONFIG_LD_VERSION=24150
 CONFIG_LLD_VERSION=0
 CONFIG_CC_CAN_LINK=y
 CONFIG_CC_CAN_LINK_STATIC=y
@@ -278,7 +278,6 @@ CONFIG_KCMP=y
 CONFIG_RSEQ=y
 CONFIG_CACHESTAT_SYSCALL=y
 # CONFIG_DEBUG_RSEQ is not set
-# CONFIG_EMBEDDED is not set
 CONFIG_HAVE_PERF_EVENTS=y
 CONFIG_GUEST_PERF_EVENTS=y
 # CONFIG_PC104 is not set
@@ -293,6 +292,23 @@ CONFIG_PERF_EVENTS=y
 CONFIG_SYSTEM_DATA_VERIFICATION=y
 CONFIG_PROFILING=y
 CONFIG_TRACEPOINTS=y
+
+#
+# Kexec and crash features
+#
+CONFIG_CRASH_CORE=y
+CONFIG_KEXEC_CORE=y
+CONFIG_HAVE_IMA_KEXEC=y
+CONFIG_KEXEC=y
+CONFIG_KEXEC_FILE=y
+CONFIG_KEXEC_SIG=y
+# CONFIG_KEXEC_SIG_FORCE is not set
+CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y
+# CONFIG_KEXEC_JUMP is not set
+CONFIG_CRASH_DUMP=y
+CONFIG_CRASH_HOTPLUG=y
+CONFIG_CRASH_MAX_MEMORY_RANGES=8192
+# end of Kexec and crash features
 # end of General setup
 
 CONFIG_64BIT=y
@@ -421,7 +437,8 @@ CONFIG_PERF_EVENTS_AMD_UNCORE=y
 # CONFIG_X86_16BIT is not set
 CONFIG_X86_VSYSCALL_EMULATION=y
 CONFIG_X86_IOPL_IOPERM=y
-# CONFIG_MICROCODE is not set
+CONFIG_MICROCODE=y
+# CONFIG_MICROCODE_LATE_LOADING is not set
 CONFIG_X86_MSR=m
 CONFIG_X86_CPUID=m
 CONFIG_X86_5LEVEL=y
@@ -451,12 +468,14 @@ CONFIG_X86_PAT=y
 CONFIG_ARCH_USES_PG_UNCACHED=y
 CONFIG_X86_UMIP=y
 CONFIG_CC_HAS_IBT=y
+CONFIG_X86_CET=y
 CONFIG_X86_KERNEL_IBT=y
 CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y
 CONFIG_X86_INTEL_TSX_MODE_OFF=y
 # CONFIG_X86_INTEL_TSX_MODE_ON is not set
 # CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
 CONFIG_X86_SGX=y
+# CONFIG_X86_USER_SHADOW_STACK is not set
 CONFIG_EFI=y
 CONFIG_EFI_STUB=y
 CONFIG_EFI_HANDOVER_PROTOCOL=y
@@ -469,14 +488,16 @@ CONFIG_HZ_250=y
 # CONFIG_HZ_1000 is not set
 CONFIG_HZ=250
 CONFIG_SCHED_HRTICK=y
-CONFIG_KEXEC=y
+CONFIG_ARCH_SUPPORTS_KEXEC=y
-CONFIG_KEXEC_FILE=y
+CONFIG_ARCH_SUPPORTS_KEXEC_FILE=y
-CONFIG_ARCH_HAS_KEXEC_PURGATORY=y
+CONFIG_ARCH_SELECTS_KEXEC_FILE=y
-CONFIG_KEXEC_SIG=y
+CONFIG_ARCH_SUPPORTS_KEXEC_PURGATORY=y
-# CONFIG_KEXEC_SIG_FORCE is not set
+CONFIG_ARCH_SUPPORTS_KEXEC_SIG=y
-CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y
+CONFIG_ARCH_SUPPORTS_KEXEC_SIG_FORCE=y
-CONFIG_CRASH_DUMP=y
+CONFIG_ARCH_SUPPORTS_KEXEC_BZIMAGE_VERIFY_SIG=y
-# CONFIG_KEXEC_JUMP is not set
+CONFIG_ARCH_SUPPORTS_KEXEC_JUMP=y
+CONFIG_ARCH_SUPPORTS_CRASH_DUMP=y
+CONFIG_ARCH_SUPPORTS_CRASH_HOTPLUG=y
 CONFIG_PHYSICAL_START=0x1000000
 CONFIG_RELOCATABLE=y
 CONFIG_RANDOMIZE_BASE=y
@@ -519,7 +540,6 @@ CONFIG_CPU_SRSO=y
 CONFIG_SLS=y
 # CONFIG_GDS_FORCE_MITIGATION is not set
 CONFIG_ARCH_HAS_ADD_PAGES=y
-CONFIG_ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE=y
 
 #
 # Power management and ACPI options
@@ -709,18 +729,17 @@ CONFIG_X86_SGX_KVM=y
 CONFIG_KVM_AMD=m
 CONFIG_KVM_SMM=y
 # CONFIG_KVM_XEN is not set
+# CONFIG_KVM_PROVE_MMU is not set
 CONFIG_AS_AVX512=y
 CONFIG_AS_SHA1_NI=y
 CONFIG_AS_SHA256_NI=y
 CONFIG_AS_TPAUSE=y
 CONFIG_AS_GFNI=y
+CONFIG_AS_WRUSS=y
 
 #
 # General architecture-dependent options
 #
-CONFIG_CRASH_CORE=y
-CONFIG_KEXEC_CORE=y
-CONFIG_HAVE_IMA_KEXEC=y
 CONFIG_HOTPLUG_SMT=y
 CONFIG_HOTPLUG_CORE_SYNC=y
 CONFIG_HOTPLUG_CORE_SYNC_DEAD=y
@@ -810,6 +829,7 @@ CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD=y
 CONFIG_HAVE_ARCH_HUGE_VMAP=y
 CONFIG_HAVE_ARCH_HUGE_VMALLOC=y
 CONFIG_ARCH_WANT_HUGE_PMD_SHARE=y
+CONFIG_ARCH_WANT_PMD_MKWRITE=y
 CONFIG_HAVE_ARCH_SOFT_DIRTY=y
 CONFIG_HAVE_MOD_ARCH_SPECIFIC=y
 CONFIG_MODULES_USE_ELF_RELA=y
@@ -896,10 +916,11 @@ CONFIG_MODULE_SIG_SHA256=y
 # CONFIG_MODULE_SIG_SHA384 is not set
 # CONFIG_MODULE_SIG_SHA512 is not set
 CONFIG_MODULE_SIG_HASH="sha256"
-CONFIG_MODULE_COMPRESS_NONE=y
+# CONFIG_MODULE_COMPRESS_NONE is not set
 # CONFIG_MODULE_COMPRESS_GZIP is not set
-# CONFIG_MODULE_COMPRESS_XZ is not set
+CONFIG_MODULE_COMPRESS_XZ=y
 # CONFIG_MODULE_COMPRESS_ZSTD is not set
+# CONFIG_MODULE_DECOMPRESS is not set
 # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
 CONFIG_MODPROBE_PATH="/sbin/modprobe"
 # CONFIG_TRIM_UNUSED_KSYMS is not set
@@ -1001,6 +1022,7 @@ CONFIG_SLAB_FREELIST_RANDOM=y
 CONFIG_SLAB_FREELIST_HARDENED=y
 # CONFIG_SLUB_STATS is not set
 CONFIG_SLUB_CPU_PARTIAL=y
+# CONFIG_RANDOM_KMALLOC_CACHES is not set
 # end of SLAB allocator options
 
 CONFIG_SHUFFLE_PAGE_ALLOCATOR=y
@@ -1009,7 +1031,8 @@ CONFIG_SPARSEMEM=y
 CONFIG_SPARSEMEM_EXTREME=y
 CONFIG_SPARSEMEM_VMEMMAP_ENABLE=y
 CONFIG_SPARSEMEM_VMEMMAP=y
-CONFIG_ARCH_WANT_OPTIMIZE_VMEMMAP=y
+CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=y
+CONFIG_ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP=y
 CONFIG_HAVE_FAST_GUP=y
 CONFIG_NUMA_KEEP_MEMINFO=y
 CONFIG_MEMORY_ISOLATION=y
@@ -1021,6 +1044,7 @@ CONFIG_MEMORY_HOTPLUG=y
 CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE=y
 CONFIG_MEMORY_HOTREMOVE=y
 CONFIG_MHP_MEMMAP_ON_MEMORY=y
+CONFIG_ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE=y
 CONFIG_SPLIT_PTLOCK_CPUS=4
 CONFIG_ARCH_ENABLE_SPLIT_PMD_PTLOCK=y
 CONFIG_MEMORY_BALLOON=y
@@ -1073,6 +1097,7 @@ CONFIG_VM_EVENT_COUNTERS=y
 # CONFIG_GUP_TEST is not set
 # CONFIG_DMAPOOL_TEST is not set
 CONFIG_ARCH_HAS_PTE_SPECIAL=y
+CONFIG_MEMFD_CREATE=y
 CONFIG_SECRETMEM=y
 # CONFIG_ANON_VMA_NAME is not set
 CONFIG_USERFAULTFD=y
@@ -1096,6 +1121,7 @@ CONFIG_LOCK_MM_AND_FIND_VMA=y
 CONFIG_NET=y
 CONFIG_NET_INGRESS=y
 CONFIG_NET_EGRESS=y
+CONFIG_NET_XGRESS=y
 CONFIG_NET_REDIRECT=y
 CONFIG_SKB_EXTENSIONS=y
 
@@ -1964,6 +1990,11 @@ CONFIG_MHI_BUS_PCI_GENERIC=m
 # CONFIG_MHI_BUS_EP is not set
 # end of Bus devices
 
+#
+# Cache Drivers
+#
+# end of Cache Drivers
+
 CONFIG_CONNECTOR=y
 CONFIG_PROC_EVENTS=y
 
@@ -2070,7 +2101,8 @@ CONFIG_XEN_BLKDEV_FRONTEND=m
 CONFIG_XEN_BLKDEV_BACKEND=m
 CONFIG_VIRTIO_BLK=m
 CONFIG_BLK_DEV_RBD=m
-# CONFIG_BLK_DEV_UBLK is not set
+CONFIG_BLK_DEV_UBLK=m
+CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 
 #
 # NVME Support
@@ -2338,6 +2370,7 @@ CONFIG_ATA_GENERIC=m
 CONFIG_PATA_LEGACY=m
 CONFIG_MD=y
 CONFIG_BLK_DEV_MD=m
+CONFIG_MD_BITMAP_FILE=y
 CONFIG_MD_LINEAR=m
 CONFIG_MD_RAID0=m
 CONFIG_MD_RAID1=m
@@ -2434,6 +2467,7 @@ CONFIG_GENEVE=m
 CONFIG_MACSEC=m
 CONFIG_NETCONSOLE=m
 CONFIG_NETCONSOLE_DYNAMIC=y
+# CONFIG_NETCONSOLE_EXTENDED_LOG is not set
 CONFIG_NETPOLL=y
 CONFIG_NET_POLL_CONTROLLER=y
 CONFIG_TUN=m
@@ -2512,7 +2546,7 @@ CONFIG_MLX5_EN_RXNFC=y
 CONFIG_MLX5_MPFS=y
 CONFIG_MLX5_CORE_EN_DCB=y
 CONFIG_MLX5_CORE_IPOIB=y
-# CONFIG_MLX5_EN_MACSEC is not set
+# CONFIG_MLX5_MACSEC is not set
 # CONFIG_MLX5_EN_IPSEC is not set
 # CONFIG_MLX5_EN_TLS is not set
 # CONFIG_MLX5_SF is not set
@@ -2594,7 +2628,7 @@ CONFIG_WWAN_DEBUGFS=y
 CONFIG_MHI_WWAN_CTRL=m
 CONFIG_MHI_WWAN_MBIM=m
 CONFIG_IOSM=m
-# CONFIG_MTK_T7XX is not set
+CONFIG_MTK_T7XX=m
 # end of Wireless WAN
 
 CONFIG_XEN_NETDEV_FRONTEND=m
@@ -2813,6 +2847,7 @@ CONFIG_PTP_1588_CLOCK_OPTIONAL=y
 # Enable PHYLIB and NETWORK_PHY_TIMESTAMPING to see the additional clocks.
 #
 CONFIG_PTP_1588_CLOCK_KVM=m
+# CONFIG_PTP_1588_CLOCK_MOCK is not set
 CONFIG_PTP_1588_CLOCK_VMW=m
 # end of PTP clock support
 
@@ -2954,6 +2989,7 @@ CONFIG_BCMA_POSSIBLE=y
 # Multifunction device drivers
 #
 CONFIG_MFD_CORE=m
+# CONFIG_MFD_CS42L43_SDW is not set
 # CONFIG_MFD_MADERA is not set
 # CONFIG_LPC_ICH is not set
 # CONFIG_LPC_SCH is not set
@@ -2992,39 +3028,17 @@ CONFIG_CEC_SECO=m
 CONFIG_APERTURE_HELPERS=y
 CONFIG_VIDEO_CMDLINE=y
 CONFIG_VIDEO_NOMODESET=y
+# CONFIG_AUXDISPLAY is not set
 # CONFIG_AGP is not set
 # CONFIG_VGA_SWITCHEROO is not set
 # CONFIG_DRM is not set
 # CONFIG_DRM_DEBUG_MODESET_LOCK is not set
-
-#
-# ARM devices
-#
-# end of ARM devices
-
 CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y
 
 #
 # Frame buffer Devices
 #
-CONFIG_FB_NOTIFY=y
 CONFIG_FB=y
-CONFIG_FIRMWARE_EDID=y
-CONFIG_FB_CFB_FILLRECT=y
-CONFIG_FB_CFB_COPYAREA=y
-CONFIG_FB_CFB_IMAGEBLIT=y
-CONFIG_FB_SYS_FILLRECT=y
-CONFIG_FB_SYS_COPYAREA=y
-CONFIG_FB_SYS_IMAGEBLIT=y
-# CONFIG_FB_FOREIGN_ENDIAN is not set
-CONFIG_FB_SYS_FOPS=y
-CONFIG_FB_DEFERRED_IO=y
-CONFIG_FB_MODE_HELPERS=y
-CONFIG_FB_TILEBLITTING=y
-
-#
-# Frame buffer hardware drivers
-#
 # CONFIG_FB_CIRRUS is not set
 # CONFIG_FB_PM2 is not set
 # CONFIG_FB_CYBER2000 is not set
@@ -3065,6 +3079,24 @@ CONFIG_XEN_FBDEV_FRONTEND=y
 CONFIG_FB_HYPERV=m
 # CONFIG_FB_SIMPLE is not set
 # CONFIG_FB_SM712 is not set
+CONFIG_FB_CORE=y
+CONFIG_FB_NOTIFY=y
+CONFIG_FIRMWARE_EDID=y
+CONFIG_FB_DEVICE=y
+CONFIG_FB_CFB_FILLRECT=y
+CONFIG_FB_CFB_COPYAREA=y
+CONFIG_FB_CFB_IMAGEBLIT=y
+CONFIG_FB_SYS_FILLRECT=y
+CONFIG_FB_SYS_COPYAREA=y
+CONFIG_FB_SYS_IMAGEBLIT=y
+# CONFIG_FB_FOREIGN_ENDIAN is not set
+CONFIG_FB_SYS_FOPS=y
+CONFIG_FB_DEFERRED_IO=y
+CONFIG_FB_IOMEM_HELPERS=y
+CONFIG_FB_SYSMEM_HELPERS=y
+CONFIG_FB_SYSMEM_HELPERS_DEFERRED=y
+CONFIG_FB_MODE_HELPERS=y
+CONFIG_FB_TILEBLITTING=y
 # end of Frame buffer Devices
 
 #
@@ -3123,6 +3155,7 @@ CONFIG_HID_GEMBIRD=m
 CONFIG_HID_GFRM=m
 CONFIG_HID_GLORIOUS=m
 CONFIG_HID_VIVALDI_COMMON=m
+# CONFIG_HID_GOOGLE_STADIA_FF is not set
 CONFIG_HID_VIVALDI=m
 CONFIG_HID_KEYTOUCH=m
 CONFIG_HID_KYE=m
@@ -3167,7 +3200,6 @@ CONFIG_HID_SEMITEK=m
 CONFIG_HID_SPEEDLINK=m
 CONFIG_HID_STEAM=m
 # CONFIG_STEAM_FF is not set
-CONFIG_HID_STEELSERIES=m
 CONFIG_HID_SUNPLUS=m
 # CONFIG_HID_RMI is not set
 CONFIG_HID_GREENASIA=m
@@ -3354,7 +3386,6 @@ CONFIG_RTC_DRV_CMOS=y
 # CONFIG_RTC_DRV_M48T35 is not set
 # CONFIG_RTC_DRV_M48T59 is not set
 # CONFIG_RTC_DRV_MSM6242 is not set
-# CONFIG_RTC_DRV_BQ4802 is not set
 # CONFIG_RTC_DRV_RP5C01 is not set
 
 #
@@ -3380,7 +3411,6 @@ CONFIG_RTC_DRV_CMOS=y
 # CONFIG_DMABUF_SYSFS_STATS is not set
 # end of DMABUF options
 
-# CONFIG_AUXDISPLAY is not set
 CONFIG_UIO=m
 CONFIG_UIO_CIF=m
 # CONFIG_UIO_PDRV_GENIRQ is not set
@@ -3393,6 +3423,7 @@ CONFIG_UIO_NETX=m
 CONFIG_UIO_MF624=m
 CONFIG_UIO_HV_GENERIC=m
 CONFIG_VFIO=m
+CONFIG_VFIO_GROUP=y
 CONFIG_VFIO_CONTAINER=y
 CONFIG_VFIO_IOMMU_TYPE1=m
 # CONFIG_VFIO_NOIOMMU is not set
@@ -3413,19 +3444,28 @@ CONFIG_VFIO_PCI_IGD=y
 CONFIG_IRQ_BYPASS_MANAGER=m
 # CONFIG_VIRT_DRIVERS is not set
 CONFIG_VIRTIO_ANCHOR=y
-CONFIG_VIRTIO=m
+CONFIG_VIRTIO=y
-CONFIG_VIRTIO_PCI_LIB=m
+CONFIG_VIRTIO_PCI_LIB=y
-CONFIG_VIRTIO_PCI_LIB_LEGACY=m
+CONFIG_VIRTIO_PCI_LIB_LEGACY=y
 CONFIG_VIRTIO_MENU=y
-CONFIG_VIRTIO_PCI=m
+CONFIG_VIRTIO_PCI=y
 CONFIG_VIRTIO_PCI_LEGACY=y
+CONFIG_VIRTIO_VDPA=m
 CONFIG_VIRTIO_PMEM=m
 CONFIG_VIRTIO_BALLOON=m
 CONFIG_VIRTIO_MEM=m
 CONFIG_VIRTIO_INPUT=m
 CONFIG_VIRTIO_MMIO=m
 # CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES is not set
-# CONFIG_VDPA is not set
+CONFIG_VDPA=m
+# CONFIG_VDPA_SIM is not set
+CONFIG_VDPA_USER=m
+# CONFIG_IFCVF is not set
+# CONFIG_MLX5_VDPA_NET is not set
+# CONFIG_MLX5_VDPA_STEERING_DEBUG is not set
+# CONFIG_VP_VDPA is not set
+# CONFIG_ALIBABA_ENI_VDPA is not set
+# CONFIG_SNET_VDPA is not set
 CONFIG_VHOST_IOTLB=m
 CONFIG_VHOST_TASK=y
 CONFIG_VHOST=m
@@ -3433,6 +3473,7 @@ CONFIG_VHOST_MENU=y
 CONFIG_VHOST_NET=m
 CONFIG_VHOST_SCSI=m
 CONFIG_VHOST_VSOCK=m
+CONFIG_VHOST_VDPA=m
 # CONFIG_VHOST_CROSS_ENDIAN_LEGACY is not set
 
 #
@@ -3571,7 +3612,6 @@ CONFIG_SURFACE_PRO3_BUTTON=m
 CONFIG_SURFACE_AGGREGATOR=m
 CONFIG_SURFACE_AGGREGATOR_BUS=y
 # CONFIG_X86_PLATFORM_DEVICES is not set
-# CONFIG_P2SB is not set
 # CONFIG_COMMON_CLK is not set
 # CONFIG_HWSPINLOCK is not set
 
@@ -3760,7 +3800,13 @@ CONFIG_DEV_DAX_KMEM=m
 #
 # HW tracing support
 #
-# CONFIG_STM is not set
+CONFIG_STM=m
+CONFIG_STM_PROTO_BASIC=m
+CONFIG_STM_PROTO_SYS_T=m
+CONFIG_STM_DUMMY=m
+CONFIG_STM_SOURCE_CONSOLE=m
+CONFIG_STM_SOURCE_HEARTBEAT=m
+CONFIG_STM_SOURCE_FTRACE=m
 # CONFIG_INTEL_TH is not set
 # end of HW tracing support
 
@@ -3781,6 +3827,7 @@ CONFIG_DEV_DAX_KMEM=m
 CONFIG_DCACHE_WORD_ACCESS=y
 # CONFIG_VALIDATE_FS_PARSER is not set
 CONFIG_FS_IOMAP=y
+CONFIG_BUFFER_HEAD=y
 CONFIG_LEGACY_DIRECT_IO=y
 # CONFIG_EXT2_FS is not set
 # CONFIG_EXT3_FS is not set
@@ -3838,9 +3885,9 @@ CONFIG_QFMT_V1=m
 CONFIG_QFMT_V2=m
 CONFIG_QUOTACTL=y
 CONFIG_AUTOFS_FS=m
-CONFIG_FUSE_FS=m
+CONFIG_FUSE_FS=y
 CONFIG_CUSE=m
-CONFIG_VIRTIO_FS=m
+CONFIG_VIRTIO_FS=y
 CONFIG_FUSE_DAX=y
 CONFIG_OVERLAY_FS=m
 # CONFIG_OVERLAY_FS_REDIRECT_DIR is not set
@@ -3848,6 +3895,7 @@ CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW=y
 # CONFIG_OVERLAY_FS_INDEX is not set
 # CONFIG_OVERLAY_FS_XINO_AUTO is not set
 # CONFIG_OVERLAY_FS_METACOPY is not set
+# CONFIG_OVERLAY_FS_DEBUG is not set
 
 #
 # Caches
@@ -3904,11 +3952,11 @@ CONFIG_TMPFS=y
 CONFIG_TMPFS_POSIX_ACL=y
 CONFIG_TMPFS_XATTR=y
 CONFIG_TMPFS_INODE64=y
+# CONFIG_TMPFS_QUOTA is not set
 CONFIG_HUGETLBFS=y
 CONFIG_HUGETLB_PAGE=y
 CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y
 # CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP_DEFAULT_ON is not set
-CONFIG_MEMFD_CREATE=y
 CONFIG_ARCH_HAS_GIGANTIC_PAGE=y
 CONFIG_CONFIGFS_FS=m
 CONFIG_EFIVAR_FS=m
@@ -3953,15 +4001,7 @@ CONFIG_ROMFS_BACKED_BY_BLOCK=y
 CONFIG_ROMFS_ON_BLOCK=y
 CONFIG_PSTORE=y
 CONFIG_PSTORE_DEFAULT_KMSG_BYTES=10240
-CONFIG_PSTORE_DEFLATE_COMPRESS=y
-# CONFIG_PSTORE_LZO_COMPRESS is not set
-# CONFIG_PSTORE_LZ4_COMPRESS is not set
-# CONFIG_PSTORE_LZ4HC_COMPRESS is not set
-# CONFIG_PSTORE_842_COMPRESS is not set
-# CONFIG_PSTORE_ZSTD_COMPRESS is not set
 CONFIG_PSTORE_COMPRESS=y
-CONFIG_PSTORE_DEFLATE_COMPRESS_DEFAULT=y
-CONFIG_PSTORE_COMPRESS_DEFAULT="deflate"
 # CONFIG_PSTORE_CONSOLE is not set
 # CONFIG_PSTORE_PMSG is not set
 # CONFIG_PSTORE_FTRACE is not set
@@ -3980,6 +4020,7 @@ CONFIG_EROFS_FS_POSIX_ACL=y
 CONFIG_EROFS_FS_SECURITY=y
 CONFIG_EROFS_FS_ZIP=y
 # CONFIG_EROFS_FS_ZIP_LZMA is not set
+# CONFIG_EROFS_FS_ZIP_DEFLATE is not set
 # CONFIG_EROFS_FS_PCPU_KTHREAD is not set
 CONFIG_NETWORK_FILESYSTEMS=y
 CONFIG_NFS_FS=m
@@ -4001,7 +4042,7 @@ CONFIG_NFS_FSCACHE=y
 CONFIG_NFS_USE_KERNEL_DNS=y
 CONFIG_NFS_DEBUG=y
 CONFIG_NFS_DISABLE_UDP_SUPPORT=y
-# CONFIG_NFS_V4_2_READ_PLUS is not set
+CONFIG_NFS_V4_2_READ_PLUS=y
 CONFIG_NFSD=m
 # CONFIG_NFSD_V2 is not set
 CONFIG_NFSD_V3_ACL=y
@@ -4023,8 +4064,6 @@ CONFIG_SUNRPC_GSS=m
 CONFIG_SUNRPC_BACKCHANNEL=y
 CONFIG_SUNRPC_SWAP=y
 CONFIG_RPCSEC_GSS_KRB5=m
-CONFIG_RPCSEC_GSS_KRB5_CRYPTOSYSTEM=y
-# CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_DES is not set
 CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1=y
 # CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA is not set
 # CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2 is not set
@@ -4105,6 +4144,7 @@ CONFIG_NLS_MAC_INUIT=m
 CONFIG_NLS_MAC_ROMANIAN=m
 CONFIG_NLS_MAC_TURKISH=m
 CONFIG_NLS_UTF8=m
+CONFIG_NLS_UCS2_UTILS=m
 # CONFIG_DLM is not set
 CONFIG_UNICODE=y
 # CONFIG_UNICODE_NORMALIZATION_SELFTEST is not set
@@ -4140,6 +4180,7 @@ CONFIG_SECURITY_SELINUX_DEVELOP=y
 CONFIG_SECURITY_SELINUX_AVC_STATS=y
 CONFIG_SECURITY_SELINUX_SIDTAB_HASH_BITS=9
 CONFIG_SECURITY_SELINUX_SID2STR_CACHE_SIZE=256
+# CONFIG_SECURITY_SELINUX_DEBUG is not set
 # CONFIG_SECURITY_SMACK is not set
 CONFIG_SECURITY_TOMOYO=y
 CONFIG_SECURITY_TOMOYO_MAX_ACCEPT_ENTRY=2048
@@ -4183,6 +4224,7 @@ CONFIG_IMA_SIG_TEMPLATE=y
 CONFIG_IMA_DEFAULT_TEMPLATE="ima-sig"
 # CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
 CONFIG_IMA_DEFAULT_HASH_SHA256=y
+# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
 CONFIG_IMA_DEFAULT_HASH="sha256"
 # CONFIG_IMA_WRITE_POLICY is not set
 # CONFIG_IMA_READ_POLICY is not set
@@ -4224,6 +4266,13 @@ CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
 # CONFIG_ZERO_CALL_USED_REGS is not set
 # end of Memory initialization
 
+#
+# Hardening of kernel data structures
+#
+CONFIG_LIST_HARDENED=y
+CONFIG_BUG_ON_DATA_CORRUPTION=y
+# end of Hardening of kernel data structures
+
 CONFIG_RANDSTRUCT_NONE=y
 # end of Kernel hardening options
 # end of Security options
@@ -4253,7 +4302,7 @@ CONFIG_CRYPTO_HASH=y
 CONFIG_CRYPTO_HASH2=y
 CONFIG_CRYPTO_RNG=y
 CONFIG_CRYPTO_RNG2=y
-CONFIG_CRYPTO_RNG_DEFAULT=m
+CONFIG_CRYPTO_RNG_DEFAULT=y
 CONFIG_CRYPTO_AKCIPHER2=y
 CONFIG_CRYPTO_AKCIPHER=y
 CONFIG_CRYPTO_KPP2=y
@@ -4279,9 +4328,9 @@ CONFIG_CRYPTO_SIMD=m
 CONFIG_CRYPTO_RSA=y
 CONFIG_CRYPTO_DH=y
 # CONFIG_CRYPTO_DH_RFC7919_GROUPS is not set
-CONFIG_CRYPTO_ECC=m
+CONFIG_CRYPTO_ECC=y
 CONFIG_CRYPTO_ECDH=m
-# CONFIG_CRYPTO_ECDSA is not set
+CONFIG_CRYPTO_ECDSA=y
 CONFIG_CRYPTO_ECRDSA=m
 # CONFIG_CRYPTO_SM2 is not set
 CONFIG_CRYPTO_CURVE25519=m
@@ -4314,7 +4363,7 @@ CONFIG_CRYPTO_ADIANTUM=m
 CONFIG_CRYPTO_CHACHA20=m
 CONFIG_CRYPTO_CBC=y
 CONFIG_CRYPTO_CFB=m
-CONFIG_CRYPTO_CTR=m
+CONFIG_CRYPTO_CTR=y
 CONFIG_CRYPTO_CTS=m
 CONFIG_CRYPTO_ECB=m
 # CONFIG_CRYPTO_HCTR2 is not set
@@ -4353,8 +4402,8 @@ CONFIG_CRYPTO_POLY1305=m
 CONFIG_CRYPTO_RMD160=m
 CONFIG_CRYPTO_SHA1=y
 CONFIG_CRYPTO_SHA256=y
-CONFIG_CRYPTO_SHA512=m
+CONFIG_CRYPTO_SHA512=y
-CONFIG_CRYPTO_SHA3=m
+CONFIG_CRYPTO_SHA3=y
 # CONFIG_CRYPTO_SM3_GENERIC is not set
 CONFIG_CRYPTO_STREEBOG=m
 CONFIG_CRYPTO_VMAC=m
@@ -4375,7 +4424,7 @@ CONFIG_CRYPTO_CRC64_ROCKSOFT=y
 #
 # Compression
 #
-CONFIG_CRYPTO_DEFLATE=y
+CONFIG_CRYPTO_DEFLATE=m
 CONFIG_CRYPTO_LZO=m
 # CONFIG_CRYPTO_842 is not set
 CONFIG_CRYPTO_LZ4=m
@@ -4387,12 +4436,12 @@ CONFIG_CRYPTO_ZSTD=m
 # Random number generation
 #
 CONFIG_CRYPTO_ANSI_CPRNG=m
-CONFIG_CRYPTO_DRBG_MENU=m
+CONFIG_CRYPTO_DRBG_MENU=y
 CONFIG_CRYPTO_DRBG_HMAC=y
 CONFIG_CRYPTO_DRBG_HASH=y
 CONFIG_CRYPTO_DRBG_CTR=y
-CONFIG_CRYPTO_DRBG=m
+CONFIG_CRYPTO_DRBG=y
-CONFIG_CRYPTO_JITTERENTROPY=m
+CONFIG_CRYPTO_JITTERENTROPY=y
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
@@ -4465,8 +4514,8 @@ CONFIG_SIGNED_PE_FILE_VERIFICATION=y
 #
 # Certificates for signature checking
 #
-CONFIG_MODULE_SIG_KEY_TYPE_RSA=y
+# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
-# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set
+CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
 CONFIG_SYSTEM_TRUSTED_KEYRING=y
 # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
 CONFIG_SECONDARY_TRUSTED_KEYRING=y
@@ -4588,6 +4637,7 @@ CONFIG_NEED_DMA_MAP_STATE=y
 CONFIG_ARCH_DMA_ADDR_T_64BIT=y
 CONFIG_ARCH_HAS_FORCE_DMA_UNENCRYPTED=y
 CONFIG_SWIOTLB=y
+# CONFIG_SWIOTLB_DYNAMIC is not set
 CONFIG_DMA_COHERENT_POOL=y
 # CONFIG_DMA_API_DEBUG is not set
 # CONFIG_DMA_MAP_BENCHMARK is not set
@@ -4838,12 +4888,9 @@ CONFIG_DEBUG_LIST=y
 # CONFIG_DEBUG_PLIST is not set
 # CONFIG_DEBUG_SG is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
-CONFIG_BUG_ON_DATA_CORRUPTION=y
 # CONFIG_DEBUG_MAPLE_TREE is not set
 # end of Debug kernel data structures
 
-# CONFIG_DEBUG_CREDENTIALS is not set
-
 #
 # RCU Debugging
 #

kernel.sh

@@ -1,7 +1,8 @@
 #!/bin/bash
-UPDATED="2024-01-07"
+UPDATED="2024-02-10"
 
 TESTING=0
+CLANG=0
 
 #
 # Sources:
@@ -23,39 +24,39 @@ TESTING=0
 
 #
 # Prerequisites:
-#   sudo apt install build-essential fakeroot dpkg-dev perl libssl-dev bc gnupg dirmngr libncurses-dev libelf-dev flex bison lsb-release rsync dwarves clang llvm lld
+#   sudo apt install build-essential fakeroot dpkg-dev perl libssl-dev bc gnupg dirmngr libncurses-dev libelf-dev flex bison lsb-release rsync dwarves clang llvm lld debhelper
 #
 
 doBuildSystem() {
-	echo "v$UPDATED"
+    echo "v$UPDATED"
 }
 
 # Display introduction
 doIntro() {
-	echo
+    echo
     if [ $TESTING == 1 ]; then
         echo "Debian Kernel Builder: $HOSTNAME [TEST]"
     else
         echo "Debian Kernel Builder: $HOSTNAME"
     fi
-	doBuildSystem
+    doBuildSystem
-	echo
+    echo
 }
 
 # Show date/time header
 doHeader() {
-	NOW=`date +"%Y/%m/%d %H:%M:%S"`
+    NOW=$(date +"%Y/%m/%d %H:%M:%S")
-	echo "- $NOW"
+    echo "- $NOW"
-	echo ""
+    echo ""
 }
 
 if [ "$(id -u)" != "0" ]; then
-		doIntro
+    doIntro
-		doHeader
+    doHeader
-		echo
+    echo
-        echo "This script must be run as root" 1>&2
+    echo "This script must be run as root" 1>&2
-		echo
+    echo
-        exit 1
+    exit 1
 fi
 
 KERNEL=/opt/kernel
@@ -83,33 +84,33 @@ cd $CURRENT
 
 # Force sync & flush
 doSync() {
-	sync
+    sync
-	echo 3 > /proc/sys/vm/drop_caches
+    echo 3 >/proc/sys/vm/drop_caches
 }
 
 doHead() {
-	doIntro
+    doIntro
-	doHeader
+    doHeader
 }
 
 # Display help
 doHelp() {
-	doIntro
+    doIntro
-	doHeader
+    doHeader
 
-	if [ $BRANCH != "help" ]; then
+    if [ $BRANCH != "help" ]; then
-		echo ">>> Unspecified, unknown or invalid option specified !"
+        echo ">>> Unspecified, unknown or invalid option specified !"
-		echo
+        echo
-	fi
+    fi
-	echo "Usage: $SCRIPT 'branch' 'version'"
+    echo "Usage: $SCRIPT 'branch' 'version'"
-	echo
+    echo
-	echo "branch : Main branch (eg. 6.x)"
+    echo "branch : Main branch (eg. 6.x)"
-	echo "version: Full version tag (eg. 6.6.1)"
+    echo "version: Full version tag (eg. 6.6.1)"
-	echo
+    echo
 }
 
 doEchoStep() {
-	NOW=`date +"%Y/%m/%d %H:%M:%S"`
+    NOW=$(date +"%Y/%m/%d %H:%M:%S")
     echo "### $NOW - $1"
 }
 
@@ -154,8 +155,11 @@ doCleanup() {
     cd $WORKDIR
 
     doEchoStep "Cleanup"
-    # make -j$(nproc) CC="ccache gcc" mrproper
+    if [ "$CLANG" == "1" ]; then
-    make -j$(nproc) LLVM=1 CC="ccache clang" mrproper
+        make -j$(nproc) LLVM=1 CC="ccache clang" mrproper
+    else
+        make -j$(nproc) CC="ccache gcc" mrproper
+    fi
     result=$?
     if [ ! result==0 ]; then
         echo ">>> Error in cleanup !"
@@ -183,8 +187,11 @@ doOldOne() {
     cd $WORKDIR
 
     doEchoStep "Generate config from old kernel .config"
-    # make -j$(nproc) CC="ccache gcc" olddefconfig
+    if [ "$CLANG" == "1" ]; then
-    make -j$(nproc) LLVM=1 CC="ccache clang" olddefconfig
+        make -j$(nproc) LLVM=1 CC="ccache clang" olddefconfig
+    else
+        make -j$(nproc) CC="ccache gcc" olddefconfig
+    fi
     result=$?
     if [ ! result==0 ]; then
         echo ">>> Error in generate .config !"
@@ -198,8 +205,11 @@ doAllMods() {
     cd $WORKDIR
 
     doEchoStep "Set all modules to be 'module'"
-    # make -j$(nproc) CC="ccache gcc" allmodconfig
+    if [ "$CLANG" == "1" ]; then
-    make -j$(nproc) LLVM=1 CC="ccache clang" allmodconfig
+        make -j$(nproc) LLVM=1 CC="ccache clang" allmodconfig
+    else
+        make -j$(nproc) CC="ccache gcc" allmodconfig
+    fi
     result=$?
     if [ ! result==0 ]; then
         echo ">>> Error in set all modules not in kernel !"
@@ -290,7 +300,6 @@ doDefaultsDisable() {
     ./scripts/config --disable CONFIG_BTRFS_DEBUG
     ./scripts/config --disable CONFIG_BTRFS_FS
     ./scripts/config --disable CONFIG_BTRFS_FS_CHECK_INTEGRITY
-    ./scripts/config --disable CONFIG_BTRFS_FS_POSIX_ACL
     ./scripts/config --disable CONFIG_BTRFS_FS_REF_VERIFY
     ./scripts/config --disable CONFIG_BTRFS_FS_RUN_SANITY_TESTS
     ./scripts/config --disable CONFIG_CACHEFILES_DEBUG
@@ -357,8 +366,6 @@ doDefaultsDisable() {
     ./scripts/config --disable CONFIG_EXT2_FS
     ./scripts/config --disable CONFIG_EXT3_FS
     ./scripts/config --disable CONFIG_EXT4_DEBUG
-    ./scripts/config --disable CONFIG_EXT4_FS_POSIX_ACL
-    ./scripts/config --disable CONFIG_EXT4_FS_SECURITY
     ./scripts/config --disable CONFIG_EXT4_KUNIT_TESTS
     ./scripts/config --disable CONFIG_F2FS_FS
     ./scripts/config --disable CONFIG_FAT_KUNIT_TEST
@@ -427,7 +434,6 @@ doDefaultsDisable() {
     ./scripts/config --disable CONFIG_NO_HZ
     ./scripts/config --disable CONFIG_NTFS_DEBUG
     ./scripts/config --disable CONFIG_NTFS3_64BIT_CLUSTER
-    ./scripts/config --disable CONFIG_NTFS3_FS_POSIX_ACL
     ./scripts/config --disable CONFIG_OCFS2_FS
     ./scripts/config --disable CONFIG_OSF_PARTITION
     ./scripts/config --disable CONFIG_PAGE_POOL_STATS
@@ -513,7 +519,6 @@ doDefaultsDisable() {
     ./scripts/config --disable CONFIG_XFS_ONLINE_REPAIR
     ./scripts/config --disable CONFIG_XFS_ONLINE_SCRUB
     ./scripts/config --disable CONFIG_XFS_ONLINE_SCRUB_STATS
-    ./scripts/config --disable CONFIG_XFS_POSIX_ACL
     ./scripts/config --disable CONFIG_XFS_QUOTA
     ./scripts/config --disable CONFIG_XFS_RT
     ./scripts/config --disable CONFIG_XFS_SUPPORT_ASCII_CI
@@ -565,6 +570,28 @@ doDefaultsDisable() {
     ./scripts/config --disable CONFIG_CPU_IBRS_ENTRY
     ./scripts/config --disable CONFIG_GDS_FORCE_MITIGATION
     ./scripts/config --disable CONFIG_SPECULATION_MITIGATIONS
+    ./scripts/config --disable CONFIG_VIRT_CPU_ACCOUNTING_GEN
+    ./scripts/config --disable CONFIG_IRQ_TIME_ACCOUNTING
+    ./scripts/config --disable CONFIG_TASKSTATS
+    ./scripts/config --disable CONFIG_PSI
+    ./scripts/config --disable CONFIG_RCU_NOCB_CPU
+    ./scripts/config --disable CONFIG_KALLSYMS
+    ./scripts/config --disable CONFIG_KALLSYMS_ALL
+    ./scripts/config --disable CONFIG_SCHED_MC
+    ./scripts/config --disable CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS
+    ./scripts/config --disable CONFIG_SPECULATION_MITIGATIONS
+    ./scripts/config --disable CONFIG_PAGE_TABLE_ISOLATION
+    ./scripts/config --disable CONFIG_RETPOLINE
+    ./scripts/config --disable CONFIG_CPU_IBRS_ENTRY
+    ./scripts/config --disable CONFIG_GDS_FORCE_MITIGATION
+    ./scripts/config --disable CONFIG_INIT_ON_ALLOC_DEFAULT_ON
+    ./scripts/config --disable CONFIG_LIST_HARDENED
+    ./scripts/config --disable CONFIG_BUG_ON_DATA_CORRUPTION
+    ./scripts/config --disable CONFIG_CALL_THUNKS_DEBUG
+    ./scripts/config --disable CONFIG_KPROBES
+    ./scripts/config --disable CONFIG_IPV6
+    ./scripts/config --disable WIRELESS
+    ./scripts/config --disable CONFIG_SLUB_DEBUG
 }
 doDefaultsEnable() {
     doEchoStep "Options: enable"
@@ -583,7 +610,6 @@ doDefaultsEnable() {
     ./scripts/config --enable CONFIG_BPF_SYSCALL
     ./scripts/config --enable CONFIG_BSD_PROCESS_ACCT
     ./scripts/config --enable CONFIG_CALL_DEPTH_TRACKING
-    ./scripts/config --enable CONFIG_CALL_THUNKS_DEBUG
     ./scripts/config --enable CONFIG_CGROUP_CPUACCT
     ./scripts/config --enable CONFIG_CGROUP_DEVICE
     ./scripts/config --enable CONFIG_CGROUP_MISC
@@ -598,7 +624,6 @@ doDefaultsEnable() {
     ./scripts/config --enable CONFIG_CIFS_DFS_UPCALL
     ./scripts/config --enable CONFIG_CIFS_STATS2
     ./scripts/config --enable CONFIG_CIFS_SWN_UPCALL
-    ./scripts/config --enable CONFIG_CIFS_XATTR
     ./scripts/config --enable CONFIG_COMPAT_32BIT_TIME
     ./scripts/config --enable CONFIG_CONFIGFS_FS
     ./scripts/config --enable CONFIG_CPU_FREQ
@@ -818,9 +843,141 @@ doDefaultsEnable() {
     ./scripts/config --enable CONFIG_CRYPTO_LZO
     ./scripts/config --enable CONFIG_CRYPTO_LZ4
     ./scripts/config --enable CONFIG_CRYPTO_ZSTD
-    ./scripts/config --enable CONFIG_GENERIC_CPU4
     ./scripts/config --enable CONFIG_HZ_100
     ./scripts/config --enable CONFIG_PREEMPT_NONE
+    ./scripts/config --enable CONFIG_INTEL_TDX_HOST
+    ./scripts/config --enable CONFIG_MODULE_COMPRESS_NONE
+    ./scripts/config --enable CONFIG_ZSWAP
+    ./scripts/config --enable CONFIG_ZSWAP_DEFAULT_ON
+    ./scripts/config --enable CONFIG_TRANSPARENT_HUGEPAGE_MADVISE
+    ./scripts/config --enable CONFIG_BTRFS_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_XFS_POSIX_ACL
+    ./scripts/config --enable CONFIG_CEPH_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_EROFS_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_NFS_V3_ACL
+    ./scripts/config --enable CONFIG_NFSD_V3_ACL
+    ./scripts/config --enable CONFIG_NTFS3_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_TMPFS_POSIX_ACL
+    ./scripts/config --enable CONFIG_EXT4_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_EXT2_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_REISERFS_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_JFS_POSIX_ACL
+    ./scripts/config --enable CONFIG_F2FS_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_JFFS2_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_NFSD_V2_ACL
+    ./scripts/config --enable CONFIG_9P_FS_POSIX_ACL
+    ./scripts/config --enable CONFIG_EROFS_FS_XATTR
+    ./scripts/config --enable CONFIG_EVM_ADD_XATTRS
+    ./scripts/config --enable CONFIG_SQUASHFS_XATTR
+    ./scripts/config --enable CONFIG_CIFS_XATTR
+    ./scripts/config --enable CONFIG_TMPFS_XATTR
+    ./scripts/config --enable CONFIG_EXT2_FS_XATTR
+    ./scripts/config --enable CONFIG_EXT4_FS_XATTR
+    ./scripts/config --enable CONFIG_REISERFS_FS_XATTR
+    ./scripts/config --enable CONFIG_F2FS_FS_XATTR
+    ./scripts/config --enable CONFIG_JFFS2_FS_XATTR
+    ./scripts/config --enable CONFIG_UBIFS_FS_XATTR
+    ./scripts/config --enable CONFIG_EXT4_FS_SECURITY
+    ./scripts/config --enable CONFIG_EXT2_FS_SECURITY
+    ./scripts/config --enable CONFIG_REISERFS_FS_SECURITY
+    ./scripts/config --enable CONFIG_JFS_SECURITY
+    ./scripts/config --enable CONFIG_F2FS_FS_SECURITY
+    ./scripts/config --enable CONFIG_JFFS2_FS_SECURITY
+    ./scripts/config --enable CONFIG_UBIFS_FS_SECURITY
+    ./scripts/config --enable CONFIG_EROFS_FS_SECURITY
+    ./scripts/config --enable CONFIG_SECURITYFS
+    ./scripts/config --enable CONFIG_KEYS_REQUEST_CACHE
+    ./scripts/config --enable CONFIG_IMA_READ_POLICY
+    ./scripts/config --enable CONFIG_CRYPTO_ECDH
+    ./scripts/config --enable CONFIG_CRYPTO_ECRDSA
+    ./scripts/config --enable CONFIG_CRYPTO_SM2
+    ./scripts/config --enable CONFIG_CRYPTO_CURVE25519
+    ./scripts/config --enable CONFIG_CRYPTO_AES_TI
+    ./scripts/config --enable CONFIG_CRYPTO_ARIA
+    ./scripts/config --enable CONFIG_CRYPTO_BLOWFISH
+    ./scripts/config --enable CONFIG_CRYPTO_CAMELLIA
+    ./scripts/config --enable CONFIG_CRYPTO_CAST5
+    ./scripts/config --enable CONFIG_CRYPTO_CAST6
+    ./scripts/config --enable CONFIG_CRYPTO_DES
+    ./scripts/config --enable CONFIG_CRYPTO_FCRYPT
+    ./scripts/config --enable CONFIG_CRYPTO_SERPENT
+    ./scripts/config --enable CONFIG_CRYPTO_SM4_GENERIC
+    ./scripts/config --enable CONFIG_CRYPTO_TWOFISH
+    ./scripts/config --enable CONFIG_CRYPTO_ADIANTUM
+    ./scripts/config --enable CONFIG_CRYPTO_CHACHA20
+    ./scripts/config --enable CONFIG_CRYPTO_CFB
+    ./scripts/config --enable CONFIG_CRYPTO_CTS
+    ./scripts/config --enable CONFIG_CRYPTO_HCTR2
+    ./scripts/config --enable CONFIG_CRYPTO_KEYWRAP
+    ./scripts/config --enable CONFIG_CRYPTO_LRW
+    ./scripts/config --enable CONFIG_CRYPTO_OFB
+    ./scripts/config --enable CONFIG_CRYPTO_PCBC
+    ./scripts/config --enable CONFIG_CRYPTO_XTS
+    ./scripts/config --enable CONFIG_CRYPTO_AEGIS128
+    ./scripts/config --enable CONFIG_CRYPTO_CHACHA20POLY1305
+    ./scripts/config --enable CONFIG_CRYPTO_ESSIV
+    ./scripts/config --enable CONFIG_CRYPTO_BLAKE2B
+    ./scripts/config --enable CONFIG_CRYPTO_MD4
+    ./scripts/config --enable CONFIG_CRYPTO_MICHAEL_MIC
+    ./scripts/config --enable CONFIG_CRYPTO_POLY1305
+    ./scripts/config --enable CONFIG_CRYPTO_RMD160
+    ./scripts/config --enable CONFIG_CRYPTO_SM3_GENERIC
+    ./scripts/config --enable CONFIG_CRYPTO_STREEBOG
+    ./scripts/config --enable CONFIG_CRYPTO_VMAC
+    ./scripts/config --enable CONFIG_CRYPTO_WP512
+    ./scripts/config --enable CONFIG_CRYPTO_XCBC
+    ./scripts/config --enable CONFIG_CRYPTO_XXHASH
+    ./scripts/config --enable CONFIG_CRYPTO_CRC32
+    ./scripts/config --enable CONFIG_CRYPTO_LZ4HC
+    ./scripts/config --enable CONFIG_CRYPTO_ANSI_CPRNG
+    ./scripts/config --enable CONFIG_CRYPTO_USER_API_HASH
+    ./scripts/config --enable CONFIG_CRYPTO_USER_API_SKCIPHER
+    ./scripts/config --enable CONFIG_CRYPTO_USER_API_RNG
+    ./scripts/config --enable CONFIG_CRYPTO_USER_API_AEAD
+    ./scripts/config --enable CONFIG_CRYPTO_AES_NI_INTEL
+    ./scripts/config --enable CONFIG_CRYPTO_SHA1_SSSE3
+    ./scripts/config --enable CONFIG_CRYPTO_SHA256_SSSE3
+    ./scripts/config --enable CONFIG_CRYPTO_SHA512_SSSE3
+    ./scripts/config --enable CONFIG_CRYPTO_CRC32C_INTEL
+    ./scripts/config --enable CONFIG_CRYPTO_CRC32_PCLMUL
+    ./scripts/config --enable CONFIG_CRYPTO_LIB_CHACHA
+    ./scripts/config --enable CONFIG_CRYPTO_LIB_CURVE25519
+    ./scripts/config --enable CONFIG_CRYPTO_LIB_POLY1305
+    ./scripts/config --enable CRYPTO_LIB_CHACHA20POLY1305
+    ./scripts/config --enable CONFIG_CRC4
+    ./scripts/config --enable CONFIG_NO_HZ_IDLE
+    ./scripts/config --enable CONFIG_PSI
+    ./scripts/config --enable CONFIG_PARAVIRT_SPINLOCKS
+    ./scripts/config --enable CONFIG_PERF_EVENTS_INTEL_UNCORE
+    ./scripts/config --enable CONFIG_PERF_EVENTS_INTEL_RAPL
+    ./scripts/config --enable CONFIG_PERF_EVENTS_INTEL_CSTATE
+    ./scripts/config --enable CONFIG_X86_CPA_STATISTICS
+    ./scripts/config --enable CONFIG_X86_USER_SHADOW_STACK
+    ./scripts/config --enable CONFIG_LEGACY_VSYSCALL_XONLY
+    ./scripts/config --enable CONFIG_ACPI_FPDT
+    ./scripts/config --enable CONFIG_ACPI_BGRT
+    ./scripts/config --enable CONFIG_ACPI_NFIT
+    ./scripts/config --enable CONFIG_ACPI_DPTF
+    ./scripts/config --enable CONFIG_ACPI_FFH
+    ./scripts/config --enable CONFIG_ACPI_PFRUT
+    ./scripts/config --enable CONFIG_DEVTMPFS_MOUNT
+    ./scripts/config --enable CONFIG_FW_LOADER_COMPRESS_ZSTD
+    ./scripts/config --enable CONFIG_FW_CFG_SYSFS
+    ./scripts/config --enable CONFIG_EFI_COCO_SECRET
+    ./scripts/config --enable CONFIG_VIRTIO_NET
+    ./scripts/config --enable CONFIG_MEDIA_PLATFORM_SUPPORT
+    ./scripts/config --enable CONFIG_FB_VESA
+    ./scripts/config --enable CONFIG_FB_NVIDIA
+    ./scripts/config --enable CONFIG_FB_RIVA
+    ./scripts/config --enable CONFIG_FB_SIMPLE
+    ./scripts/config --enable CONFIG_DMADEVICES
+    ./scripts/config --enable CONFIG_INTEL_IDMA64
+    ./scripts/config --enable CONFIG_INTEL_IDXD
+    ./scripts/config --enable CONFIG_INTEL_IOATDMA
+    ./scripts/config --enable CONFIG_VFIO_PCI_VGA
+    ./scripts/config --enable CONFIG_NFS_FS
+    ./scripts/config --enable CONFIG_GENERIC_CPU4
 }
 doDefaultsTesting() {
     doEchoStep "Options: testings activated..."
@@ -831,7 +988,7 @@ doDefaults() {
     cd $WORKDIR
 
     doEchoStep "Apply 'uarches' patch"
-    patch -p1 < ../../../more-uarches-for-kernel.patch
+    patch -p1 <../../../more-uarches-for-kernel.patch
 
     doEchoStep "Define options"
     ./scripts/config --set-str CONFIG_LOCALVERSION '-zogg'
@@ -851,8 +1008,11 @@ doEditSettings() {
     cd $WORKDIR
 
     doEchoStep "Settings tuning !"
-    # make -j$(nproc) CC="ccache gcc" menuconfig
+    if [ "$CLANG" == "1" ]; then
-    make -j$(nproc) LLVM=1 CC="ccache clang" menuconfig
+        make -j$(nproc) LLVM=1 CC="ccache clang" menuconfig
+    else
+        make -j$(nproc) CC="ccache gcc" menuconfig
+    fi
     result=$?
     if [ ! result==0 ]; then
         echo ">>> Error in settings edit !"
@@ -869,7 +1029,7 @@ doGenerateUninstall() {
     mkdir -p $READY
     rm -rf $READY/*.*
 
-    if ls $WORKDIR/../*.deb 1> /dev/null 2>&1; then
+    if ls $WORKDIR/../*.deb 1>/dev/null 2>&1; then
 
         # find .deb packages and generate
         #   uninstall commands
@@ -877,21 +1037,20 @@ doGenerateUninstall() {
         PACKAGES=
         TAG="_$VERSION-1_amd64.deb"
         search_dir=$WORKDIR/../
-        for entry in "$search_dir"/*.deb
+        for entry in "$search_dir"/*.deb; do
-        do
             name="${entry##*/}"
             pname=${name//$TAG/}
             if [ ! "$pname" == "linux-libc-dev" ]; then
                 PACKAGES="$PACKAGES $pname"
             fi
-            echo "$name" >> $READY/packages.log
+            echo "$name" >>$READY/packages.log
         done
 
         # move files to destination folder
-        mv -f $WORKDIR/../*.deb             $READY/
+        mv -f $WORKDIR/../*.deb $READY/
 
         # prepare uninstall script
-        cat <<EOF > $READY/uninstall.sh
+        cat <<EOF >$READY/uninstall.sh
 #!/bin/bash
 # ${UPDATED}
 apt remove --purge ${PACKAGES}
@@ -900,10 +1059,10 @@ exit 0
 EOF
 
         # generate install script
-        cat <<EOF > $READY/install.sh
+        cat <<EOF >$READY/install.sh
 #!/bin/bash
 # ${UPDATED}
-echo 'blacklist pcspkr' > /etc/modprobe.d/blacklist-pcspkr.conf
+echo 'blacklist pcspkr' > /etc/modprobe.d/pcspkr.conf
 sudo dpkg -i *.deb
 sudo sync
 exit 0
@@ -943,7 +1102,7 @@ doCompile() {
 
     doEchoStep "Compilation time... Be patient!"
     NB_CORES=$(grep -c '^processor' /proc/cpuinfo)
-    export MAKEFLAGS="-j$((NB_CORES+1)) -l${NB_CORES} -Werror=maybe-uninitialized -Werror=nonnull -Wno-maybe-uninitialized -Wno-uninitialized -Wno-free-nonheap-object -Wno-nonnull"
+    export MAKEFLAGS="-j$((NB_CORES + 1)) -l${NB_CORES} -Werror=maybe-uninitialized -Werror=nonnull -Wno-maybe-uninitialized -Wno-uninitialized -Wno-free-nonheap-object -Wno-nonnull"
     export CFLAGS='-march=x86-64-v4 -O2 -flto -pipe'
     export CXXFLAGS='-march=x86-64-v4 -O2 -flto -pipe'
     export KCFLAGS=' -march=x86-64-v4 -O2'
@@ -952,19 +1111,22 @@ doCompile() {
     set DEB_BUILD_OPTIONS=nocheck
 
     doEchoStep "make bindeb-pkg"
-    # make \
+    if [ "$CLANG" == "1" ]; then
-    #     -j$(nproc) \
+        make \
-    #     CC='ccache gcc' \
+            -j$(nproc) \
-    #     bindeb-pkg \
+            LLVM=1 \
-    #     LOCALVERSION=-"$(dpkg --print-architecture)" \
+            CC='ccache clang' \
-    #     KDEB_PKGVERSION="$(make kernelversion)-1"
+            bindeb-pkg \
-    make \
+            LOCALVERSION=-"$(dpkg --print-architecture)" \
-        -j$(nproc) \
+            KDEB_PKGVERSION="$(make kernelversion)-1"
-        LLVM=1 \
+    else
-        CC='ccache clang' \
+        make \
-        bindeb-pkg \
+            -j$(nproc) \
-        LOCALVERSION=-"$(dpkg --print-architecture)" \
+            CC='ccache gcc' \
-        KDEB_PKGVERSION="$(make kernelversion)-1"
+            bindeb-pkg \
+            LOCALVERSION=-"$(dpkg --print-architecture)" \
+            KDEB_PKGVERSION="$(make kernelversion)-1"
+    fi
     result=$?
 
     doEchoStep "make bindeb-pkg: $result"
@@ -987,25 +1149,28 @@ doKernel() {
     touch $LOGFILE
 
     if [ "$STEPS" != "compile" ]; then
-        doDownload      > >(tee -a $LOGFILE) 2>&1
+        doDownload > >(tee -a $LOGFILE) 2>&1
-        doUncompress    > >(tee -a $LOGFILE) 2>&1
+        doUncompress > >(tee -a $LOGFILE) 2>&1
     fi
     WORKDIR=$WORKDIR/linux-$VERSION
-    doCleanup       > >(tee -a $LOGFILE) 2>&1
+    doCleanup > >(tee -a $LOGFILE) 2>&1
-    doConfigCloud   > >(tee -a $LOGFILE) 2>&1
+    doConfigCloud > >(tee -a $LOGFILE) 2>&1
-    doOldOne        > >(tee -a $LOGFILE) 2>&1
+    doOldOne > >(tee -a $LOGFILE) 2>&1
     # doAllMods       > >(tee -a $LOGFILE) 2>&1
     # doStripDebug    > >(tee -a $LOGFILE) 2>&1
-    doDefaults      > >(tee -a $LOGFILE) 2>&1
+    doDefaults > >(tee -a $LOGFILE) 2>&1
-    doPermissions   > >(tee -a $LOGFILE) 2>&1
+    doPermissions > >(tee -a $LOGFILE) 2>&1
     doEditSettings
 
     while true; do
         read -p "Do you wish to run compile? " yn
         case $yn in
-            [Yy]* ) doCompile > >(tee -a $LOGFILE) 2>&1; break;;
+        [Yy]*)
-            [Nn]* ) exit;;
+            doCompile > >(tee -a $LOGFILE) 2>&1
-            * ) echo "Please answer yes or no.";;
+            break
+            ;;
+        [Nn]*) exit ;;
+        *) echo "Please answer yes or no." ;;
         esac
     done
 }
@@ -1020,4 +1185,4 @@ else
     doKernel
 fi
 
-exit 0
+exit 0