This commit is contained in:
Olivier 2024-03-19 14:05:19 +01:00
parent e217406e4f
commit 526a32b6cb
2 changed files with 11 additions and 7 deletions

1
.gitignore vendored Normal file
View File

@ -0,0 +1 @@
build/

View File

@ -1,9 +1,9 @@
#!/bin/bash #!/bin/bash
UPDATED="2024-03-16" UPDATED="2024-03-19"
DISABLE=1 # disable some options DISABLE=1 # disable some options
ENABLE=1 # enable some options ENABLE=1 # enable some options
MITIGATIONS=0 # enable/disable all mitigations SECURED=1 # enable/disable security
UARCH=1 # apply more uarch patch UARCH=1 # apply more uarch patch
FKH=0 # apply fast kernel headers patch FKH=0 # apply fast kernel headers patch
CLANG=1 # use Clang compiler (if not, use GCC) CLANG=1 # use Clang compiler (if not, use GCC)
@ -1041,6 +1041,9 @@ doDefaultsEnable() {
./scripts/config --enable CONFIG_CRYPTO_LIB_CHACHA ./scripts/config --enable CONFIG_CRYPTO_LIB_CHACHA
./scripts/config --enable CONFIG_CRYPTO_LIB_CURVE25519 ./scripts/config --enable CONFIG_CRYPTO_LIB_CURVE25519
./scripts/config --enable CONFIG_CRYPTO_LIB_POLY1305 ./scripts/config --enable CONFIG_CRYPTO_LIB_POLY1305
./scripts/config --enable CONFIG_CORDIC
./scripts/config --enable CONFIG_CRC7
./scripts/config --enable CONFIG_CRC8
./scripts/config --enable CRYPTO_LIB_CHACHA20POLY1305 ./scripts/config --enable CRYPTO_LIB_CHACHA20POLY1305
./scripts/config --enable CONFIG_CRC4 ./scripts/config --enable CONFIG_CRC4
./scripts/config --enable CONFIG_NO_HZ_IDLE ./scripts/config --enable CONFIG_NO_HZ_IDLE
@ -1124,15 +1127,15 @@ doDefaultMitigations() {
if [ -f .config ]; then if [ -f .config ]; then
cp .config .config.mitigations.before cp .config .config.mitigations.before
fi fi
if [ $MITIGATIONS == 0 ]; then if [ $SECURED == 0 ]; then
doEchoStep "Options: mitigations OFF" doEchoStep "Options: secured OFF"
./scripts/config --disable CONFIG_SPECULATION_MITIGATIONS ./scripts/config --disable CONFIG_SPECULATION_MITIGATIONS
./scripts/config --disable CONFIG_RETPOLINE ./scripts/config --disable CONFIG_RETPOLINE
./scripts/config --disable CONFIG_CPU_IBRS_ENTRY ./scripts/config --disable CONFIG_CPU_IBRS_ENTRY
./scripts/config --disable CONFIG_SLS ./scripts/config --disable CONFIG_SLS
./scripts/config --disable CONFIG_GDS_FORCE_MITIGATION ./scripts/config --disable CONFIG_GDS_FORCE_MITIGATION
else else
doEchoStep "Options: mitigations ON" doEchoStep "Options: secured ON"
./scripts/config --enable CONFIG_SPECULATION_MITIGATIONS ./scripts/config --enable CONFIG_SPECULATION_MITIGATIONS
./scripts/config --enable CONFIG_RETPOLINE ./scripts/config --enable CONFIG_RETPOLINE
./scripts/config --enable CONFIG_CPU_IBRS_ENTRY ./scripts/config --enable CONFIG_CPU_IBRS_ENTRY
@ -1200,7 +1203,7 @@ doEditSettings() {
doGenerateUninstall() { doGenerateUninstall() {
# remove old files # remove old files
READY=$CURRENT/$BRANCH/$VERSION/ready READY=$CURRENT/build/$BRANCH/$VERSION/ready
mkdir -p $READY mkdir -p $READY
rm -rf $READY/*.* rm -rf $READY/*.*
@ -1332,7 +1335,7 @@ doCompile() {
# Proceed for Kernel build # Proceed for Kernel build
doKernel() { doKernel() {
WORKDIR=$CURRENT/$BRANCH/$VERSION WORKDIR=$CURRENT/build/$BRANCH/$VERSION
doScratch doScratch
if [ ! -d $WORKDIR ]; then if [ ! -d $WORKDIR ]; then