kraoc/kernel
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

updates

Browse Source
This commit is contained in:
Olivier 2024-03-19 14:05:19 +01:00
parent e217406e4f
commit 526a32b6cb
2 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored Normal file
View File

@ -0,0 +1 @@
build/

17
kernel.sh
View File

@ -1,9 +1,9 @@
#!/bin/bash
UPDATED="2024-03-16"
UPDATED="2024-03-19"
DISABLE=1 # disable some options
ENABLE=1 # enable some options
MITIGATIONS=0 # enable/disable all mitigations
SECURED=1 # enable/disable security
UARCH=1 # apply more uarch patch
FKH=0 # apply fast kernel headers patch
CLANG=1 # use Clang compiler (if not, use GCC)
@ -1041,6 +1041,9 @@ doDefaultsEnable() {
./scripts/config --enable CONFIG_CRYPTO_LIB_CHACHA
./scripts/config --enable CONFIG_CRYPTO_LIB_CURVE25519
./scripts/config --enable CONFIG_CRYPTO_LIB_POLY1305
./scripts/config --enable CONFIG_CORDIC
./scripts/config --enable CONFIG_CRC7
./scripts/config --enable CONFIG_CRC8
./scripts/config --enable CRYPTO_LIB_CHACHA20POLY1305
./scripts/config --enable CONFIG_CRC4
./scripts/config --enable CONFIG_NO_HZ_IDLE
@ -1124,15 +1127,15 @@ doDefaultMitigations() {
if [ -f .config ]; then
cp .config .config.mitigations.before
fi
if [ $MITIGATIONS == 0 ]; then
doEchoStep "Options: mitigations OFF"
if [ $SECURED == 0 ]; then
doEchoStep "Options: secured OFF"
./scripts/config --disable CONFIG_SPECULATION_MITIGATIONS
./scripts/config --disable CONFIG_RETPOLINE
./scripts/config --disable CONFIG_CPU_IBRS_ENTRY
./scripts/config --disable CONFIG_SLS
./scripts/config --disable CONFIG_GDS_FORCE_MITIGATION
else
doEchoStep "Options: mitigations ON"
doEchoStep "Options: secured ON"
./scripts/config --enable CONFIG_SPECULATION_MITIGATIONS
./scripts/config --enable CONFIG_RETPOLINE
./scripts/config --enable CONFIG_CPU_IBRS_ENTRY
@ -1200,7 +1203,7 @@ doEditSettings() {
doGenerateUninstall() {
# remove old files
READY=$CURRENT/$BRANCH/$VERSION/ready
READY=$CURRENT/build/$BRANCH/$VERSION/ready
mkdir -p $READY
rm -rf $READY/*.*
@ -1332,7 +1335,7 @@ doCompile() {
# Proceed for Kernel build
doKernel() {
WORKDIR=$CURRENT/$BRANCH/$VERSION
WORKDIR=$CURRENT/build/$BRANCH/$VERSION
doScratch
if [ ! -d $WORKDIR ]; then