Update 6.8.1 + Clang by default
This commit is contained in:
parent
8fae847587
commit
e217406e4f
16
README.md
16
README.md
@ -27,10 +27,10 @@ sudo bash kernel.sh 6.x 6.8
|
||||
|
||||
## Résultats
|
||||
|
||||
- linux-headers-6.8.0-zogg-amd64_6.8.0-1_amd64.deb : 8.6 Mo
|
||||
- linux-image-6.8.0-zogg-amd64-dbg_6.8.0-1_amd64.deb : 181 Mo
|
||||
- linux-image-6.8.0-zogg-amd64_6.8.0-1_amd64.deb : 21 Mo
|
||||
- linux-libc-dev_6.8.0-1_amd64.deb : 1.3 Mo
|
||||
- linux-headers-6.8.1-clang-amd64_6.8.1-1_amd64.deb : 8.5 Mo
|
||||
- linux-image-6.8.1-clang-amd64-dbg_6.8.1-1_amd64.deb : 194 Mo
|
||||
- linux-image-6.8.1-clang-amd64_6.8.1-1_amd64.deb : 22 Mo
|
||||
- linux-libc-dev_6.8.1-1_amd64.deb : 1.3 Mo
|
||||
|
||||
## TODO
|
||||
|
||||
@ -40,6 +40,12 @@ sudo bash kernel.sh 6.x 6.8
|
||||
|
||||
## CHANGELOG
|
||||
|
||||
### 2024-03-16
|
||||
|
||||
- Mise à jour Kernel 6.8.1
|
||||
- Utilisation par défaut de Clang (fonctionnel y compris pour Nvidia)
|
||||
- Désactication des mitigations par défaut
|
||||
|
||||
### 2024-03-11
|
||||
|
||||
- Mise à jour Kernel 6.8
|
||||
@ -48,7 +54,7 @@ sudo bash kernel.sh 6.x 6.8
|
||||
### 2024-03-02
|
||||
|
||||
- Modularisation des options par variable de conditionnement
|
||||
- Ajout du 'Fast Kernel Headers' (désactivé pour le moment)
|
||||
- Ajout du 'Fast Kernel Headers' _(désactivé pour le moment)_
|
||||
- Ajustment des options permettant l'installation de pilote Nvidia
|
||||
- IPv6 remis (sinon certains conteneurs déconnent)
|
||||
|
||||
|
||||
@ -1,20 +1,21 @@
|
||||
#
|
||||
# Automatically generated file; DO NOT EDIT.
|
||||
# Linux/x86 6.6.9 Kernel Configuration
|
||||
# Linux/x86 6.7.9 Kernel Configuration
|
||||
#
|
||||
CONFIG_CC_VERSION_TEXT="gcc-13 (Debian 13.2.0-9) 13.2.0"
|
||||
CONFIG_CC_VERSION_TEXT="x86_64-linux-gnu-gcc-13 (Debian 13.2.0-18) 13.2.0"
|
||||
CONFIG_CC_IS_GCC=y
|
||||
CONFIG_GCC_VERSION=130200
|
||||
CONFIG_CLANG_VERSION=0
|
||||
CONFIG_AS_IS_GNU=y
|
||||
CONFIG_AS_VERSION=24150
|
||||
CONFIG_AS_VERSION=24200
|
||||
CONFIG_LD_IS_BFD=y
|
||||
CONFIG_LD_VERSION=24150
|
||||
CONFIG_LD_VERSION=24200
|
||||
CONFIG_LLD_VERSION=0
|
||||
CONFIG_CC_CAN_LINK=y
|
||||
CONFIG_CC_CAN_LINK_STATIC=y
|
||||
CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
|
||||
CONFIG_CC_HAS_ASM_GOTO_TIED_OUTPUT=y
|
||||
CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND=y
|
||||
CONFIG_TOOLS_SUPPORT_RELR=y
|
||||
CONFIG_CC_HAS_ASM_INLINE=y
|
||||
CONFIG_CC_HAS_NO_PROFILE_FN_ATTR=y
|
||||
@ -476,6 +477,7 @@ CONFIG_X86_INTEL_TSX_MODE_OFF=y
|
||||
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
|
||||
CONFIG_X86_SGX=y
|
||||
# CONFIG_X86_USER_SHADOW_STACK is not set
|
||||
# CONFIG_INTEL_TDX_HOST is not set
|
||||
CONFIG_EFI=y
|
||||
CONFIG_EFI_STUB=y
|
||||
CONFIG_EFI_HANDOVER_PROTOCOL=y
|
||||
@ -498,6 +500,7 @@ CONFIG_ARCH_SUPPORTS_KEXEC_BZIMAGE_VERIFY_SIG=y
|
||||
CONFIG_ARCH_SUPPORTS_KEXEC_JUMP=y
|
||||
CONFIG_ARCH_SUPPORTS_CRASH_DUMP=y
|
||||
CONFIG_ARCH_SUPPORTS_CRASH_HOTPLUG=y
|
||||
CONFIG_ARCH_HAS_GENERIC_CRASHKERNEL_RESERVATION=y
|
||||
CONFIG_PHYSICAL_START=0x1000000
|
||||
CONFIG_RELOCATABLE=y
|
||||
CONFIG_RANDOMIZE_BASE=y
|
||||
@ -539,6 +542,7 @@ CONFIG_CPU_IBRS_ENTRY=y
|
||||
CONFIG_CPU_SRSO=y
|
||||
CONFIG_SLS=y
|
||||
# CONFIG_GDS_FORCE_MITIGATION is not set
|
||||
CONFIG_MITIGATION_RFDS=y
|
||||
CONFIG_ARCH_HAS_ADD_PAGES=y
|
||||
|
||||
#
|
||||
@ -694,6 +698,7 @@ CONFIG_AMD_NB=y
|
||||
# Binary Emulations
|
||||
#
|
||||
CONFIG_IA32_EMULATION=y
|
||||
# CONFIG_IA32_EMULATION_DEFAULT_DISABLED is not set
|
||||
# CONFIG_X86_X32_ABI is not set
|
||||
CONFIG_COMPAT_32=y
|
||||
CONFIG_COMPAT=y
|
||||
@ -730,6 +735,7 @@ CONFIG_KVM_AMD=m
|
||||
CONFIG_KVM_SMM=y
|
||||
# CONFIG_KVM_XEN is not set
|
||||
# CONFIG_KVM_PROVE_MMU is not set
|
||||
CONFIG_KVM_MAX_NR_VCPUS=4096
|
||||
CONFIG_AS_AVX512=y
|
||||
CONFIG_AS_SHA1_NI=y
|
||||
CONFIG_AS_SHA256_NI=y
|
||||
@ -910,17 +916,18 @@ CONFIG_ASM_MODVERSIONS=y
|
||||
# CONFIG_MODULE_SRCVERSION_ALL is not set
|
||||
CONFIG_MODULE_SIG=y
|
||||
# CONFIG_MODULE_SIG_FORCE is not set
|
||||
# CONFIG_MODULE_SIG_SHA1 is not set
|
||||
# CONFIG_MODULE_SIG_SHA224 is not set
|
||||
CONFIG_MODULE_SIG_SHA256=y
|
||||
# CONFIG_MODULE_SIG_SHA384 is not set
|
||||
# CONFIG_MODULE_SIG_SHA512 is not set
|
||||
# CONFIG_MODULE_SIG_SHA3_256 is not set
|
||||
# CONFIG_MODULE_SIG_SHA3_384 is not set
|
||||
# CONFIG_MODULE_SIG_SHA3_512 is not set
|
||||
CONFIG_MODULE_SIG_HASH="sha256"
|
||||
# CONFIG_MODULE_COMPRESS_NONE is not set
|
||||
# CONFIG_MODULE_COMPRESS_GZIP is not set
|
||||
CONFIG_MODULE_COMPRESS_XZ=y
|
||||
# CONFIG_MODULE_COMPRESS_ZSTD is not set
|
||||
# CONFIG_MODULE_DECOMPRESS is not set
|
||||
CONFIG_MODULE_DECOMPRESS=y
|
||||
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
|
||||
CONFIG_MODPROBE_PATH="/sbin/modprobe"
|
||||
# CONFIG_TRIM_UNUSED_KSYMS is not set
|
||||
@ -1057,6 +1064,7 @@ CONFIG_DEVICE_MIGRATION=y
|
||||
CONFIG_ARCH_ENABLE_HUGEPAGE_MIGRATION=y
|
||||
CONFIG_ARCH_ENABLE_THP_MIGRATION=y
|
||||
CONFIG_CONTIG_ALLOC=y
|
||||
CONFIG_PCP_BATCH_SCALE_MAX=5
|
||||
CONFIG_PHYS_ADDR_T_64BIT=y
|
||||
CONFIG_MMU_NOTIFIER=y
|
||||
CONFIG_KSM=y
|
||||
@ -1100,9 +1108,9 @@ CONFIG_ARCH_HAS_PTE_SPECIAL=y
|
||||
CONFIG_MEMFD_CREATE=y
|
||||
CONFIG_SECRETMEM=y
|
||||
# CONFIG_ANON_VMA_NAME is not set
|
||||
CONFIG_USERFAULTFD=y
|
||||
CONFIG_HAVE_ARCH_USERFAULTFD_WP=y
|
||||
CONFIG_HAVE_ARCH_USERFAULTFD_MINOR=y
|
||||
CONFIG_USERFAULTFD=y
|
||||
CONFIG_PTE_MARKER_UFFD_WP=y
|
||||
CONFIG_LRU_GEN=y
|
||||
CONFIG_LRU_GEN_ENABLED=y
|
||||
@ -1213,6 +1221,8 @@ CONFIG_TCP_CONG_BBR=m
|
||||
CONFIG_DEFAULT_CUBIC=y
|
||||
# CONFIG_DEFAULT_RENO is not set
|
||||
CONFIG_DEFAULT_TCP_CONG="cubic"
|
||||
CONFIG_TCP_SIGPOOL=y
|
||||
# CONFIG_TCP_AO is not set
|
||||
CONFIG_TCP_MD5SIG=y
|
||||
CONFIG_IPV6=y
|
||||
CONFIG_IPV6_ROUTER_PREF=y
|
||||
@ -1851,6 +1861,7 @@ CONFIG_PCIEPORTBUS=y
|
||||
CONFIG_HOTPLUG_PCI_PCIE=y
|
||||
CONFIG_PCIEAER=y
|
||||
CONFIG_PCIEAER_INJECT=m
|
||||
CONFIG_PCIEAER_CXL=y
|
||||
# CONFIG_PCIE_ECRC is not set
|
||||
CONFIG_PCIEASPM=y
|
||||
CONFIG_PCIEASPM_DEFAULT=y
|
||||
@ -2055,6 +2066,11 @@ CONFIG_UNACCEPTED_MEMORY=y
|
||||
CONFIG_UEFI_CPER=y
|
||||
CONFIG_UEFI_CPER_X86=y
|
||||
|
||||
#
|
||||
# Qualcomm firmware drivers
|
||||
#
|
||||
# end of Qualcomm firmware drivers
|
||||
|
||||
#
|
||||
# Tegra firmware driver
|
||||
#
|
||||
@ -2115,7 +2131,8 @@ CONFIG_NVME_FABRICS=m
|
||||
CONFIG_NVME_RDMA=m
|
||||
CONFIG_NVME_FC=m
|
||||
CONFIG_NVME_TCP=m
|
||||
# CONFIG_NVME_AUTH is not set
|
||||
# CONFIG_NVME_TCP_TLS is not set
|
||||
# CONFIG_NVME_HOST_AUTH is not set
|
||||
CONFIG_NVME_TARGET=m
|
||||
# CONFIG_NVME_TARGET_PASSTHRU is not set
|
||||
# CONFIG_NVME_TARGET_LOOP is not set
|
||||
@ -2123,6 +2140,7 @@ CONFIG_NVME_TARGET_RDMA=m
|
||||
CONFIG_NVME_TARGET_FC=m
|
||||
# CONFIG_NVME_TARGET_FCLOOP is not set
|
||||
CONFIG_NVME_TARGET_TCP=m
|
||||
# CONFIG_NVME_TARGET_TCP_TLS is not set
|
||||
# CONFIG_NVME_TARGET_AUTH is not set
|
||||
# end of NVME Support
|
||||
|
||||
@ -2380,7 +2398,6 @@ CONFIG_MD_MULTIPATH=m
|
||||
CONFIG_MD_FAULTY=m
|
||||
CONFIG_BCACHE=m
|
||||
# CONFIG_BCACHE_DEBUG is not set
|
||||
# CONFIG_BCACHE_CLOSURES_DEBUG is not set
|
||||
# CONFIG_BCACHE_ASYNC_REGISTRATION is not set
|
||||
CONFIG_BLK_DEV_DM_BUILTIN=y
|
||||
CONFIG_BLK_DEV_DM=m
|
||||
@ -2476,6 +2493,7 @@ CONFIG_TAP=m
|
||||
CONFIG_VETH=m
|
||||
CONFIG_VIRTIO_NET=m
|
||||
CONFIG_NLMON=m
|
||||
# CONFIG_NETKIT is not set
|
||||
CONFIG_NET_VRF=m
|
||||
CONFIG_VSOCKMON=m
|
||||
CONFIG_MHI_NET=m
|
||||
@ -2529,6 +2547,7 @@ CONFIG_IXGBEVF_IPSEC=y
|
||||
# CONFIG_ICE is not set
|
||||
# CONFIG_FM10K is not set
|
||||
# CONFIG_IGC is not set
|
||||
# CONFIG_IDPF is not set
|
||||
# CONFIG_JME is not set
|
||||
CONFIG_NET_VENDOR_LITEX=y
|
||||
# CONFIG_NET_VENDOR_MARVELL is not set
|
||||
@ -2550,6 +2569,7 @@ CONFIG_MLX5_CORE_IPOIB=y
|
||||
# CONFIG_MLX5_EN_IPSEC is not set
|
||||
# CONFIG_MLX5_EN_TLS is not set
|
||||
# CONFIG_MLX5_SF is not set
|
||||
# CONFIG_MLX5_DPLL is not set
|
||||
# CONFIG_MLXSW_CORE is not set
|
||||
CONFIG_MLXFW=m
|
||||
# CONFIG_NET_VENDOR_MICREL is not set
|
||||
@ -3001,7 +3021,6 @@ CONFIG_MFD_CORE=m
|
||||
# CONFIG_MFD_RDC321X is not set
|
||||
# CONFIG_MFD_SM501 is not set
|
||||
# CONFIG_MFD_SYSCON is not set
|
||||
# CONFIG_MFD_TI_AM335X_TSCADC is not set
|
||||
# CONFIG_MFD_TQMX86 is not set
|
||||
# CONFIG_MFD_VX855 is not set
|
||||
# CONFIG_RAVE_SP_CORE is not set
|
||||
@ -3092,7 +3111,9 @@ CONFIG_FB_SYS_IMAGEBLIT=y
|
||||
# CONFIG_FB_FOREIGN_ENDIAN is not set
|
||||
CONFIG_FB_SYS_FOPS=y
|
||||
CONFIG_FB_DEFERRED_IO=y
|
||||
CONFIG_FB_IOMEM_FOPS=y
|
||||
CONFIG_FB_IOMEM_HELPERS=y
|
||||
CONFIG_FB_IOMEM_HELPERS_DEFERRED=y
|
||||
CONFIG_FB_SYSMEM_HELPERS=y
|
||||
CONFIG_FB_SYSMEM_HELPERS_DEFERRED=y
|
||||
CONFIG_FB_MODE_HELPERS=y
|
||||
@ -3527,7 +3548,6 @@ CONFIG_COMEDI_MISC_DRIVERS=y
|
||||
CONFIG_COMEDI_BOND=m
|
||||
CONFIG_COMEDI_TEST=m
|
||||
CONFIG_COMEDI_PARPORT=m
|
||||
# CONFIG_COMEDI_ISA_DRIVERS is not set
|
||||
CONFIG_COMEDI_PCI_DRIVERS=m
|
||||
CONFIG_COMEDI_8255_PCI=m
|
||||
CONFIG_COMEDI_ADDI_WATCHDOG=m
|
||||
@ -3724,6 +3744,31 @@ CONFIG_SOUNDWIRE=m
|
||||
# end of Xilinx SoC drivers
|
||||
# end of SOC (System On Chip) specific Drivers
|
||||
|
||||
#
|
||||
# PM Domains
|
||||
#
|
||||
|
||||
#
|
||||
# Amlogic PM Domains
|
||||
#
|
||||
# end of Amlogic PM Domains
|
||||
|
||||
#
|
||||
# Broadcom PM Domains
|
||||
#
|
||||
# end of Broadcom PM Domains
|
||||
|
||||
#
|
||||
# i.MX PM Domains
|
||||
#
|
||||
# end of i.MX PM Domains
|
||||
|
||||
#
|
||||
# Qualcomm PM Domains
|
||||
#
|
||||
# end of Qualcomm PM Domains
|
||||
# end of PM Domains
|
||||
|
||||
# CONFIG_PM_DEVFREQ is not set
|
||||
# CONFIG_EXTCON is not set
|
||||
# CONFIG_MEMORY is not set
|
||||
@ -3854,13 +3899,21 @@ CONFIG_XFS_RT=y
|
||||
# CONFIG_OCFS2_FS is not set
|
||||
CONFIG_BTRFS_FS=m
|
||||
CONFIG_BTRFS_FS_POSIX_ACL=y
|
||||
# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set
|
||||
# CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set
|
||||
# CONFIG_BTRFS_DEBUG is not set
|
||||
# CONFIG_BTRFS_ASSERT is not set
|
||||
# CONFIG_BTRFS_FS_REF_VERIFY is not set
|
||||
# CONFIG_NILFS2_FS is not set
|
||||
# CONFIG_F2FS_FS is not set
|
||||
CONFIG_BCACHEFS_FS=m
|
||||
CONFIG_BCACHEFS_QUOTA=y
|
||||
# CONFIG_BCACHEFS_ERASURE_CODING is not set
|
||||
CONFIG_BCACHEFS_POSIX_ACL=y
|
||||
# CONFIG_BCACHEFS_DEBUG_TRANSACTIONS is not set
|
||||
# CONFIG_BCACHEFS_DEBUG is not set
|
||||
# CONFIG_BCACHEFS_TESTS is not set
|
||||
# CONFIG_BCACHEFS_LOCK_TIME_STATS is not set
|
||||
# CONFIG_BCACHEFS_NO_LATENCY_ACCT is not set
|
||||
CONFIG_ZONEFS_FS=m
|
||||
CONFIG_FS_DAX=y
|
||||
CONFIG_FS_DAX_PMD=y
|
||||
@ -4224,7 +4277,6 @@ CONFIG_IMA_SIG_TEMPLATE=y
|
||||
CONFIG_IMA_DEFAULT_TEMPLATE="ima-sig"
|
||||
# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
|
||||
CONFIG_IMA_DEFAULT_HASH_SHA256=y
|
||||
# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
|
||||
CONFIG_IMA_DEFAULT_HASH="sha256"
|
||||
# CONFIG_IMA_WRITE_POLICY is not set
|
||||
# CONFIG_IMA_READ_POLICY is not set
|
||||
@ -4302,7 +4354,7 @@ CONFIG_CRYPTO_HASH=y
|
||||
CONFIG_CRYPTO_HASH2=y
|
||||
CONFIG_CRYPTO_RNG=y
|
||||
CONFIG_CRYPTO_RNG2=y
|
||||
CONFIG_CRYPTO_RNG_DEFAULT=y
|
||||
CONFIG_CRYPTO_RNG_DEFAULT=m
|
||||
CONFIG_CRYPTO_AKCIPHER2=y
|
||||
CONFIG_CRYPTO_AKCIPHER=y
|
||||
CONFIG_CRYPTO_KPP2=y
|
||||
@ -4328,9 +4380,9 @@ CONFIG_CRYPTO_SIMD=m
|
||||
CONFIG_CRYPTO_RSA=y
|
||||
CONFIG_CRYPTO_DH=y
|
||||
# CONFIG_CRYPTO_DH_RFC7919_GROUPS is not set
|
||||
CONFIG_CRYPTO_ECC=y
|
||||
CONFIG_CRYPTO_ECC=m
|
||||
CONFIG_CRYPTO_ECDH=m
|
||||
CONFIG_CRYPTO_ECDSA=y
|
||||
# CONFIG_CRYPTO_ECDSA is not set
|
||||
CONFIG_CRYPTO_ECRDSA=m
|
||||
# CONFIG_CRYPTO_SM2 is not set
|
||||
CONFIG_CRYPTO_CURVE25519=m
|
||||
@ -4363,9 +4415,9 @@ CONFIG_CRYPTO_ADIANTUM=m
|
||||
CONFIG_CRYPTO_CHACHA20=m
|
||||
CONFIG_CRYPTO_CBC=y
|
||||
CONFIG_CRYPTO_CFB=m
|
||||
CONFIG_CRYPTO_CTR=y
|
||||
CONFIG_CRYPTO_CTR=m
|
||||
CONFIG_CRYPTO_CTS=m
|
||||
CONFIG_CRYPTO_ECB=m
|
||||
CONFIG_CRYPTO_ECB=y
|
||||
# CONFIG_CRYPTO_HCTR2 is not set
|
||||
CONFIG_CRYPTO_KEYWRAP=m
|
||||
CONFIG_CRYPTO_LRW=m
|
||||
@ -4402,8 +4454,8 @@ CONFIG_CRYPTO_POLY1305=m
|
||||
CONFIG_CRYPTO_RMD160=m
|
||||
CONFIG_CRYPTO_SHA1=y
|
||||
CONFIG_CRYPTO_SHA256=y
|
||||
CONFIG_CRYPTO_SHA512=y
|
||||
CONFIG_CRYPTO_SHA3=y
|
||||
CONFIG_CRYPTO_SHA512=m
|
||||
CONFIG_CRYPTO_SHA3=m
|
||||
# CONFIG_CRYPTO_SM3_GENERIC is not set
|
||||
CONFIG_CRYPTO_STREEBOG=m
|
||||
CONFIG_CRYPTO_VMAC=m
|
||||
@ -4436,12 +4488,19 @@ CONFIG_CRYPTO_ZSTD=m
|
||||
# Random number generation
|
||||
#
|
||||
CONFIG_CRYPTO_ANSI_CPRNG=m
|
||||
CONFIG_CRYPTO_DRBG_MENU=y
|
||||
CONFIG_CRYPTO_DRBG_MENU=m
|
||||
CONFIG_CRYPTO_DRBG_HMAC=y
|
||||
CONFIG_CRYPTO_DRBG_HASH=y
|
||||
CONFIG_CRYPTO_DRBG_CTR=y
|
||||
CONFIG_CRYPTO_DRBG=y
|
||||
CONFIG_CRYPTO_JITTERENTROPY=y
|
||||
CONFIG_CRYPTO_DRBG=m
|
||||
CONFIG_CRYPTO_JITTERENTROPY=m
|
||||
CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
|
||||
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
|
||||
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_1024 is not set
|
||||
# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
|
||||
CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
|
||||
CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
|
||||
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
|
||||
# CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
|
||||
CONFIG_CRYPTO_KDF800108_CTR=y
|
||||
# end of Random number generation
|
||||
@ -4514,11 +4573,11 @@ CONFIG_SIGNED_PE_FILE_VERIFICATION=y
|
||||
#
|
||||
# Certificates for signature checking
|
||||
#
|
||||
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
|
||||
CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
|
||||
CONFIG_MODULE_SIG_KEY_TYPE_RSA=y
|
||||
CONFIG_SYSTEM_TRUSTED_KEYRING=y
|
||||
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
|
||||
CONFIG_SECONDARY_TRUSTED_KEYRING=y
|
||||
# CONFIG_SECONDARY_TRUSTED_KEYRING_SIGNED_BY_BUILTIN is not set
|
||||
CONFIG_SYSTEM_BLACKLIST_KEYRING=y
|
||||
CONFIG_SYSTEM_BLACKLIST_HASH_LIST=""
|
||||
# CONFIG_SYSTEM_REVOCATION_LIST is not set
|
||||
@ -4601,7 +4660,6 @@ CONFIG_ZSTD_DECOMPRESS=y
|
||||
CONFIG_XZ_DEC=y
|
||||
CONFIG_XZ_DEC_X86=y
|
||||
# CONFIG_XZ_DEC_POWERPC is not set
|
||||
# CONFIG_XZ_DEC_IA64 is not set
|
||||
# CONFIG_XZ_DEC_ARM is not set
|
||||
# CONFIG_XZ_DEC_ARMTHUMB is not set
|
||||
# CONFIG_XZ_DEC_SPARC is not set
|
||||
@ -4626,6 +4684,7 @@ CONFIG_TEXTSEARCH_FSM=m
|
||||
CONFIG_INTERVAL_TREE=y
|
||||
CONFIG_XARRAY_MULTI=y
|
||||
CONFIG_ASSOCIATIVE_ARRAY=y
|
||||
CONFIG_CLOSURES=y
|
||||
CONFIG_HAS_IOMEM=y
|
||||
CONFIG_HAS_IOPORT=y
|
||||
CONFIG_HAS_IOPORT_MAP=y
|
||||
@ -4684,8 +4743,11 @@ CONFIG_ARCH_HAS_COPY_MC=y
|
||||
CONFIG_ARCH_STACKWALK=y
|
||||
CONFIG_STACKDEPOT=y
|
||||
CONFIG_SBITMAP=y
|
||||
# CONFIG_LWQ_TEST is not set
|
||||
# end of Library routines
|
||||
|
||||
CONFIG_FIRMWARE_TABLE=y
|
||||
|
||||
#
|
||||
# Kernel hacking
|
||||
#
|
||||
@ -4888,6 +4950,7 @@ CONFIG_DEBUG_LIST=y
|
||||
# CONFIG_DEBUG_PLIST is not set
|
||||
# CONFIG_DEBUG_SG is not set
|
||||
# CONFIG_DEBUG_NOTIFIERS is not set
|
||||
# CONFIG_DEBUG_CLOSURES is not set
|
||||
# CONFIG_DEBUG_MAPLE_TREE is not set
|
||||
# end of Debug kernel data structures
|
||||
|
||||
@ -5079,6 +5142,7 @@ CONFIG_RUNTIME_TESTING_MENU=y
|
||||
# CONFIG_TEST_FREE_PAGES is not set
|
||||
# CONFIG_TEST_FPU is not set
|
||||
# CONFIG_TEST_CLOCKSOURCE_WATCHDOG is not set
|
||||
# CONFIG_TEST_OBJPOOL is not set
|
||||
CONFIG_ARCH_USE_MEMTEST=y
|
||||
# CONFIG_MEMTEST is not set
|
||||
# CONFIG_HYPERV_TESTING is not set
|
||||
|
||||
35
kernel.sh
35
kernel.sh
@ -1,12 +1,12 @@
|
||||
#!/bin/bash
|
||||
UPDATED="2024-03-11"
|
||||
UPDATED="2024-03-16"
|
||||
|
||||
DISABLE=1 # disable some options
|
||||
ENABLE=1 # enable some options
|
||||
MITIGATIONS=0 # enable/disable all mitigations
|
||||
UARCH=1 # apply more uarch patch
|
||||
FKH=0 # apply fast kernel headers patch
|
||||
CLANG=0 # use Clang compiler (if not, use GCC)
|
||||
CLANG=1 # use Clang compiler (if not, use GCC)
|
||||
O3=1 # use -O3 vs -O2 (optimisation)
|
||||
ARCH="x86-64-v4" # target architecture (uarch patch)
|
||||
CONFIGCLOUD=1 # enable cloud 'from' config
|
||||
@ -25,9 +25,9 @@ TESTING=0 # add testing options
|
||||
|
||||
# config-cloud-amd64:
|
||||
# https://packages.debian.org/source/sid/linux
|
||||
# linux-image-6.6.9-cloud-amd64-unsigned
|
||||
# linux-image-6.7.9-cloud-amd64-unsigned
|
||||
# Go down to download section, select amd64 and download deb.
|
||||
# Open .deb with archiver, browse to boot folder and grab 'config-6.6.9-cloud-amd64'.
|
||||
# Open .deb with archiver, browse to boot folder and grab 'config-6.7.9-cloud-amd64'.
|
||||
#
|
||||
|
||||
# more-uarches-for-kernel.patch:
|
||||
@ -206,9 +206,9 @@ doCleanup() {
|
||||
|
||||
doEchoStep "Cleanup"
|
||||
if [ "$CLANG" == "1" ]; then
|
||||
make -j${NPROC} LLVM=1 CC="ccache clang" mrproper
|
||||
make -j${NPROC} LLVM=1 CC="ccache clang" distclean
|
||||
else
|
||||
make -j${NPROC} CC="ccache gcc" mrproper
|
||||
make -j${NPROC} CC="ccache gcc" distclean
|
||||
fi
|
||||
result=$?
|
||||
if [ ! result==0 ]; then
|
||||
@ -672,8 +672,6 @@ doDefaultsDisable() {
|
||||
./scripts/config --disable CONFIG_VIRT_CPU_ACCOUNTING_GEN
|
||||
./scripts/config --disable CONFIG_TASKSTATS
|
||||
./scripts/config --disable CONFIG_PSI
|
||||
./scripts/config --disable CONFIG_KALLSYMS
|
||||
./scripts/config --disable CONFIG_KALLSYMS_ALL
|
||||
./scripts/config --disable CONFIG_SCHED_MC
|
||||
./scripts/config --disable CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS
|
||||
./scripts/config --disable CONFIG_INIT_ON_ALLOC_DEFAULT_ON
|
||||
@ -707,6 +705,16 @@ doDefaultsEnable() {
|
||||
if [ -f .config ]; then
|
||||
cp .config .config.enable.before
|
||||
fi
|
||||
|
||||
if [ "$CLANG" == "1" ]; then
|
||||
./scripts/config --enable CONFIG_HAS_LTO_CLANG
|
||||
./scripts/config --enable CONFIG_ARCH_SUPPORTS_CFI_CLANG
|
||||
./scripts/config --enable CONFIG_ARCH_SUPPORTS_LTO_CLANG_THIN
|
||||
./scripts/config --enable CONFIG_ARCH_SUPPORTS_LTO_CLANG
|
||||
./scripts/config --enable CONFIG_LTO_CLANG_THIN
|
||||
./scripts/config --enable CONFIG_LTO_CLANG_FULL
|
||||
fi
|
||||
|
||||
./scripts/config --enable CONFIG_ADDRESS_MASKING
|
||||
./scripts/config --enable CONFIG_AF_KCM
|
||||
./scripts/config --enable CONFIG_ARCH_CPUIDLE_HALTPOLL
|
||||
@ -1093,6 +1101,8 @@ doDefaultsEnable() {
|
||||
./scripts/config --enable CONFIG_IO_STRICT_DEVMEM
|
||||
./scripts/config --enable CONFIG_IPV6
|
||||
./scripts/config --enable CONFIG_KSM
|
||||
./scripts/config --enable CONFIG_KALLSYMS
|
||||
./scripts/config --enable CONFIG_KALLSYMS_ALL
|
||||
./scripts/config --enable CONFIG_COMPILE_TEST
|
||||
|
||||
case ${ARCH} in
|
||||
@ -1153,7 +1163,11 @@ doDefaults() {
|
||||
doFastKernelHeaders
|
||||
|
||||
doEchoStep "Define options"
|
||||
./scripts/config --set-str CONFIG_LOCALVERSION '-zogg'
|
||||
if [ "$CLANG" == "1" ]; then
|
||||
./scripts/config --set-str CONFIG_LOCALVERSION '-clang'
|
||||
else
|
||||
./scripts/config --set-str CONFIG_LOCALVERSION '-gcc'
|
||||
fi
|
||||
|
||||
doDefaultsDisable
|
||||
doDefaultsEnable
|
||||
@ -1288,8 +1302,9 @@ doCompile() {
|
||||
if [ "$CLANG" == "1" ]; then
|
||||
make \
|
||||
-j${NPROC} \
|
||||
LLVM=1 \
|
||||
LLVM=1 LLVM_IAS=1 \
|
||||
CC='ccache clang' \
|
||||
HOSTCC='ccache clang' \
|
||||
bindeb-pkg \
|
||||
LOCALVERSION=-"$(dpkg --print-architecture)" \
|
||||
KDEB_PKGVERSION="$(make kernelversion)-1"
|
||||
|
||||
Loading…
Reference in New Issue
Block a user