Update 6.8.1 + Clang by default

README.md

@@ -27,10 +27,10 @@ sudo bash kernel.sh 6.x 6.8
 
 ## Résultats
 
-- linux-headers-6.8.0-zogg-amd64_6.8.0-1_amd64.deb : 8.6 Mo
+- linux-headers-6.8.1-clang-amd64_6.8.1-1_amd64.deb : 8.5 Mo
-- linux-image-6.8.0-zogg-amd64-dbg_6.8.0-1_amd64.deb : 181 Mo
+- linux-image-6.8.1-clang-amd64-dbg_6.8.1-1_amd64.deb : 194 Mo
-- linux-image-6.8.0-zogg-amd64_6.8.0-1_amd64.deb : 21 Mo
+- linux-image-6.8.1-clang-amd64_6.8.1-1_amd64.deb : 22 Mo
-- linux-libc-dev_6.8.0-1_amd64.deb : 1.3 Mo
+- linux-libc-dev_6.8.1-1_amd64.deb : 1.3 Mo
 
 ## TODO
 
@@ -40,6 +40,12 @@ sudo bash kernel.sh 6.x 6.8
 
 ## CHANGELOG
 
+### 2024-03-16
+
+- Mise à jour Kernel 6.8.1
+- Utilisation par défaut de Clang (fonctionnel y compris pour Nvidia)
+- Désactication des mitigations par défaut
+
 ### 2024-03-11
 
 - Mise à jour Kernel 6.8
@@ -48,7 +54,7 @@ sudo bash kernel.sh 6.x 6.8
 ### 2024-03-02
 
 - Modularisation des options par variable de conditionnement
-- Ajout du 'Fast Kernel Headers' (désactivé pour le moment)
+- Ajout du 'Fast Kernel Headers' _(désactivé pour le moment)_
 - Ajustment des options permettant l'installation de pilote Nvidia
 - IPv6 remis (sinon certains conteneurs déconnent)
 

config-cloud-amd64

@@ -1,20 +1,21 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 6.6.9 Kernel Configuration
+# Linux/x86 6.7.9 Kernel Configuration
 #
-CONFIG_CC_VERSION_TEXT="gcc-13 (Debian 13.2.0-9) 13.2.0"
+CONFIG_CC_VERSION_TEXT="x86_64-linux-gnu-gcc-13 (Debian 13.2.0-18) 13.2.0"
 CONFIG_CC_IS_GCC=y
 CONFIG_GCC_VERSION=130200
 CONFIG_CLANG_VERSION=0
 CONFIG_AS_IS_GNU=y
-CONFIG_AS_VERSION=24150
+CONFIG_AS_VERSION=24200
 CONFIG_LD_IS_BFD=y
-CONFIG_LD_VERSION=24150
+CONFIG_LD_VERSION=24200
 CONFIG_LLD_VERSION=0
 CONFIG_CC_CAN_LINK=y
 CONFIG_CC_CAN_LINK_STATIC=y
 CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
 CONFIG_CC_HAS_ASM_GOTO_TIED_OUTPUT=y
+CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND=y
 CONFIG_TOOLS_SUPPORT_RELR=y
 CONFIG_CC_HAS_ASM_INLINE=y
 CONFIG_CC_HAS_NO_PROFILE_FN_ATTR=y
@@ -476,6 +477,7 @@ CONFIG_X86_INTEL_TSX_MODE_OFF=y
 # CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
 CONFIG_X86_SGX=y
 # CONFIG_X86_USER_SHADOW_STACK is not set
+# CONFIG_INTEL_TDX_HOST is not set
 CONFIG_EFI=y
 CONFIG_EFI_STUB=y
 CONFIG_EFI_HANDOVER_PROTOCOL=y
@@ -498,6 +500,7 @@ CONFIG_ARCH_SUPPORTS_KEXEC_BZIMAGE_VERIFY_SIG=y
 CONFIG_ARCH_SUPPORTS_KEXEC_JUMP=y
 CONFIG_ARCH_SUPPORTS_CRASH_DUMP=y
 CONFIG_ARCH_SUPPORTS_CRASH_HOTPLUG=y
+CONFIG_ARCH_HAS_GENERIC_CRASHKERNEL_RESERVATION=y
 CONFIG_PHYSICAL_START=0x1000000
 CONFIG_RELOCATABLE=y
 CONFIG_RANDOMIZE_BASE=y
@@ -539,6 +542,7 @@ CONFIG_CPU_IBRS_ENTRY=y
 CONFIG_CPU_SRSO=y
 CONFIG_SLS=y
 # CONFIG_GDS_FORCE_MITIGATION is not set
+CONFIG_MITIGATION_RFDS=y
 CONFIG_ARCH_HAS_ADD_PAGES=y
 
 #
@@ -694,6 +698,7 @@ CONFIG_AMD_NB=y
 # Binary Emulations
 #
 CONFIG_IA32_EMULATION=y
+# CONFIG_IA32_EMULATION_DEFAULT_DISABLED is not set
 # CONFIG_X86_X32_ABI is not set
 CONFIG_COMPAT_32=y
 CONFIG_COMPAT=y
@@ -730,6 +735,7 @@ CONFIG_KVM_AMD=m
 CONFIG_KVM_SMM=y
 # CONFIG_KVM_XEN is not set
 # CONFIG_KVM_PROVE_MMU is not set
+CONFIG_KVM_MAX_NR_VCPUS=4096
 CONFIG_AS_AVX512=y
 CONFIG_AS_SHA1_NI=y
 CONFIG_AS_SHA256_NI=y
@@ -910,17 +916,18 @@ CONFIG_ASM_MODVERSIONS=y
 # CONFIG_MODULE_SRCVERSION_ALL is not set
 CONFIG_MODULE_SIG=y
 # CONFIG_MODULE_SIG_FORCE is not set
-# CONFIG_MODULE_SIG_SHA1 is not set
-# CONFIG_MODULE_SIG_SHA224 is not set
 CONFIG_MODULE_SIG_SHA256=y
 # CONFIG_MODULE_SIG_SHA384 is not set
 # CONFIG_MODULE_SIG_SHA512 is not set
+# CONFIG_MODULE_SIG_SHA3_256 is not set
+# CONFIG_MODULE_SIG_SHA3_384 is not set
+# CONFIG_MODULE_SIG_SHA3_512 is not set
 CONFIG_MODULE_SIG_HASH="sha256"
 # CONFIG_MODULE_COMPRESS_NONE is not set
 # CONFIG_MODULE_COMPRESS_GZIP is not set
 CONFIG_MODULE_COMPRESS_XZ=y
 # CONFIG_MODULE_COMPRESS_ZSTD is not set
-# CONFIG_MODULE_DECOMPRESS is not set
+CONFIG_MODULE_DECOMPRESS=y
 # CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
 CONFIG_MODPROBE_PATH="/sbin/modprobe"
 # CONFIG_TRIM_UNUSED_KSYMS is not set
@@ -1057,6 +1064,7 @@ CONFIG_DEVICE_MIGRATION=y
 CONFIG_ARCH_ENABLE_HUGEPAGE_MIGRATION=y
 CONFIG_ARCH_ENABLE_THP_MIGRATION=y
 CONFIG_CONTIG_ALLOC=y
+CONFIG_PCP_BATCH_SCALE_MAX=5
 CONFIG_PHYS_ADDR_T_64BIT=y
 CONFIG_MMU_NOTIFIER=y
 CONFIG_KSM=y
@@ -1100,9 +1108,9 @@ CONFIG_ARCH_HAS_PTE_SPECIAL=y
 CONFIG_MEMFD_CREATE=y
 CONFIG_SECRETMEM=y
 # CONFIG_ANON_VMA_NAME is not set
-CONFIG_USERFAULTFD=y
 CONFIG_HAVE_ARCH_USERFAULTFD_WP=y
 CONFIG_HAVE_ARCH_USERFAULTFD_MINOR=y
+CONFIG_USERFAULTFD=y
 CONFIG_PTE_MARKER_UFFD_WP=y
 CONFIG_LRU_GEN=y
 CONFIG_LRU_GEN_ENABLED=y
@@ -1213,6 +1221,8 @@ CONFIG_TCP_CONG_BBR=m
 CONFIG_DEFAULT_CUBIC=y
 # CONFIG_DEFAULT_RENO is not set
 CONFIG_DEFAULT_TCP_CONG="cubic"
+CONFIG_TCP_SIGPOOL=y
+# CONFIG_TCP_AO is not set
 CONFIG_TCP_MD5SIG=y
 CONFIG_IPV6=y
 CONFIG_IPV6_ROUTER_PREF=y
@@ -1851,6 +1861,7 @@ CONFIG_PCIEPORTBUS=y
 CONFIG_HOTPLUG_PCI_PCIE=y
 CONFIG_PCIEAER=y
 CONFIG_PCIEAER_INJECT=m
+CONFIG_PCIEAER_CXL=y
 # CONFIG_PCIE_ECRC is not set
 CONFIG_PCIEASPM=y
 CONFIG_PCIEASPM_DEFAULT=y
@@ -2055,6 +2066,11 @@ CONFIG_UNACCEPTED_MEMORY=y
 CONFIG_UEFI_CPER=y
 CONFIG_UEFI_CPER_X86=y
 
+#
+# Qualcomm firmware drivers
+#
+# end of Qualcomm firmware drivers
+
 #
 # Tegra firmware driver
 #
@@ -2115,7 +2131,8 @@ CONFIG_NVME_FABRICS=m
 CONFIG_NVME_RDMA=m
 CONFIG_NVME_FC=m
 CONFIG_NVME_TCP=m
-# CONFIG_NVME_AUTH is not set
+# CONFIG_NVME_TCP_TLS is not set
+# CONFIG_NVME_HOST_AUTH is not set
 CONFIG_NVME_TARGET=m
 # CONFIG_NVME_TARGET_PASSTHRU is not set
 # CONFIG_NVME_TARGET_LOOP is not set
@@ -2123,6 +2140,7 @@ CONFIG_NVME_TARGET_RDMA=m
 CONFIG_NVME_TARGET_FC=m
 # CONFIG_NVME_TARGET_FCLOOP is not set
 CONFIG_NVME_TARGET_TCP=m
+# CONFIG_NVME_TARGET_TCP_TLS is not set
 # CONFIG_NVME_TARGET_AUTH is not set
 # end of NVME Support
 
@@ -2380,7 +2398,6 @@ CONFIG_MD_MULTIPATH=m
 CONFIG_MD_FAULTY=m
 CONFIG_BCACHE=m
 # CONFIG_BCACHE_DEBUG is not set
-# CONFIG_BCACHE_CLOSURES_DEBUG is not set
 # CONFIG_BCACHE_ASYNC_REGISTRATION is not set
 CONFIG_BLK_DEV_DM_BUILTIN=y
 CONFIG_BLK_DEV_DM=m
@@ -2476,6 +2493,7 @@ CONFIG_TAP=m
 CONFIG_VETH=m
 CONFIG_VIRTIO_NET=m
 CONFIG_NLMON=m
+# CONFIG_NETKIT is not set
 CONFIG_NET_VRF=m
 CONFIG_VSOCKMON=m
 CONFIG_MHI_NET=m
@@ -2529,6 +2547,7 @@ CONFIG_IXGBEVF_IPSEC=y
 # CONFIG_ICE is not set
 # CONFIG_FM10K is not set
 # CONFIG_IGC is not set
+# CONFIG_IDPF is not set
 # CONFIG_JME is not set
 CONFIG_NET_VENDOR_LITEX=y
 # CONFIG_NET_VENDOR_MARVELL is not set
@@ -2550,6 +2569,7 @@ CONFIG_MLX5_CORE_IPOIB=y
 # CONFIG_MLX5_EN_IPSEC is not set
 # CONFIG_MLX5_EN_TLS is not set
 # CONFIG_MLX5_SF is not set
+# CONFIG_MLX5_DPLL is not set
 # CONFIG_MLXSW_CORE is not set
 CONFIG_MLXFW=m
 # CONFIG_NET_VENDOR_MICREL is not set
@@ -3001,7 +3021,6 @@ CONFIG_MFD_CORE=m
 # CONFIG_MFD_RDC321X is not set
 # CONFIG_MFD_SM501 is not set
 # CONFIG_MFD_SYSCON is not set
-# CONFIG_MFD_TI_AM335X_TSCADC is not set
 # CONFIG_MFD_TQMX86 is not set
 # CONFIG_MFD_VX855 is not set
 # CONFIG_RAVE_SP_CORE is not set
@@ -3092,7 +3111,9 @@ CONFIG_FB_SYS_IMAGEBLIT=y
 # CONFIG_FB_FOREIGN_ENDIAN is not set
 CONFIG_FB_SYS_FOPS=y
 CONFIG_FB_DEFERRED_IO=y
+CONFIG_FB_IOMEM_FOPS=y
 CONFIG_FB_IOMEM_HELPERS=y
+CONFIG_FB_IOMEM_HELPERS_DEFERRED=y
 CONFIG_FB_SYSMEM_HELPERS=y
 CONFIG_FB_SYSMEM_HELPERS_DEFERRED=y
 CONFIG_FB_MODE_HELPERS=y
@@ -3527,7 +3548,6 @@ CONFIG_COMEDI_MISC_DRIVERS=y
 CONFIG_COMEDI_BOND=m
 CONFIG_COMEDI_TEST=m
 CONFIG_COMEDI_PARPORT=m
-# CONFIG_COMEDI_ISA_DRIVERS is not set
 CONFIG_COMEDI_PCI_DRIVERS=m
 CONFIG_COMEDI_8255_PCI=m
 CONFIG_COMEDI_ADDI_WATCHDOG=m
@@ -3724,6 +3744,31 @@ CONFIG_SOUNDWIRE=m
 # end of Xilinx SoC drivers
 # end of SOC (System On Chip) specific Drivers
 
+#
+# PM Domains
+#
+
+#
+# Amlogic PM Domains
+#
+# end of Amlogic PM Domains
+
+#
+# Broadcom PM Domains
+#
+# end of Broadcom PM Domains
+
+#
+# i.MX PM Domains
+#
+# end of i.MX PM Domains
+
+#
+# Qualcomm PM Domains
+#
+# end of Qualcomm PM Domains
+# end of PM Domains
+
 # CONFIG_PM_DEVFREQ is not set
 # CONFIG_EXTCON is not set
 # CONFIG_MEMORY is not set
@@ -3854,13 +3899,21 @@ CONFIG_XFS_RT=y
 # CONFIG_OCFS2_FS is not set
 CONFIG_BTRFS_FS=m
 CONFIG_BTRFS_FS_POSIX_ACL=y
-# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set
 # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set
 # CONFIG_BTRFS_DEBUG is not set
 # CONFIG_BTRFS_ASSERT is not set
 # CONFIG_BTRFS_FS_REF_VERIFY is not set
 # CONFIG_NILFS2_FS is not set
 # CONFIG_F2FS_FS is not set
+CONFIG_BCACHEFS_FS=m
+CONFIG_BCACHEFS_QUOTA=y
+# CONFIG_BCACHEFS_ERASURE_CODING is not set
+CONFIG_BCACHEFS_POSIX_ACL=y
+# CONFIG_BCACHEFS_DEBUG_TRANSACTIONS is not set
+# CONFIG_BCACHEFS_DEBUG is not set
+# CONFIG_BCACHEFS_TESTS is not set
+# CONFIG_BCACHEFS_LOCK_TIME_STATS is not set
+# CONFIG_BCACHEFS_NO_LATENCY_ACCT is not set
 CONFIG_ZONEFS_FS=m
 CONFIG_FS_DAX=y
 CONFIG_FS_DAX_PMD=y
@@ -4224,7 +4277,6 @@ CONFIG_IMA_SIG_TEMPLATE=y
 CONFIG_IMA_DEFAULT_TEMPLATE="ima-sig"
 # CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
 CONFIG_IMA_DEFAULT_HASH_SHA256=y
-# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
 CONFIG_IMA_DEFAULT_HASH="sha256"
 # CONFIG_IMA_WRITE_POLICY is not set
 # CONFIG_IMA_READ_POLICY is not set
@@ -4302,7 +4354,7 @@ CONFIG_CRYPTO_HASH=y
 CONFIG_CRYPTO_HASH2=y
 CONFIG_CRYPTO_RNG=y
 CONFIG_CRYPTO_RNG2=y
-CONFIG_CRYPTO_RNG_DEFAULT=y
+CONFIG_CRYPTO_RNG_DEFAULT=m
 CONFIG_CRYPTO_AKCIPHER2=y
 CONFIG_CRYPTO_AKCIPHER=y
 CONFIG_CRYPTO_KPP2=y
@@ -4328,9 +4380,9 @@ CONFIG_CRYPTO_SIMD=m
 CONFIG_CRYPTO_RSA=y
 CONFIG_CRYPTO_DH=y
 # CONFIG_CRYPTO_DH_RFC7919_GROUPS is not set
-CONFIG_CRYPTO_ECC=y
+CONFIG_CRYPTO_ECC=m
 CONFIG_CRYPTO_ECDH=m
-CONFIG_CRYPTO_ECDSA=y
+# CONFIG_CRYPTO_ECDSA is not set
 CONFIG_CRYPTO_ECRDSA=m
 # CONFIG_CRYPTO_SM2 is not set
 CONFIG_CRYPTO_CURVE25519=m
@@ -4363,9 +4415,9 @@ CONFIG_CRYPTO_ADIANTUM=m
 CONFIG_CRYPTO_CHACHA20=m
 CONFIG_CRYPTO_CBC=y
 CONFIG_CRYPTO_CFB=m
-CONFIG_CRYPTO_CTR=y
+CONFIG_CRYPTO_CTR=m
 CONFIG_CRYPTO_CTS=m
-CONFIG_CRYPTO_ECB=m
+CONFIG_CRYPTO_ECB=y
 # CONFIG_CRYPTO_HCTR2 is not set
 CONFIG_CRYPTO_KEYWRAP=m
 CONFIG_CRYPTO_LRW=m
@@ -4402,8 +4454,8 @@ CONFIG_CRYPTO_POLY1305=m
 CONFIG_CRYPTO_RMD160=m
 CONFIG_CRYPTO_SHA1=y
 CONFIG_CRYPTO_SHA256=y
-CONFIG_CRYPTO_SHA512=y
+CONFIG_CRYPTO_SHA512=m
-CONFIG_CRYPTO_SHA3=y
+CONFIG_CRYPTO_SHA3=m
 # CONFIG_CRYPTO_SM3_GENERIC is not set
 CONFIG_CRYPTO_STREEBOG=m
 CONFIG_CRYPTO_VMAC=m
@@ -4436,12 +4488,19 @@ CONFIG_CRYPTO_ZSTD=m
 # Random number generation
 #
 CONFIG_CRYPTO_ANSI_CPRNG=m
-CONFIG_CRYPTO_DRBG_MENU=y
+CONFIG_CRYPTO_DRBG_MENU=m
 CONFIG_CRYPTO_DRBG_HMAC=y
 CONFIG_CRYPTO_DRBG_HASH=y
 CONFIG_CRYPTO_DRBG_CTR=y
-CONFIG_CRYPTO_DRBG=y
+CONFIG_CRYPTO_DRBG=m
-CONFIG_CRYPTO_JITTERENTROPY=y
+CONFIG_CRYPTO_JITTERENTROPY=m
+CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
+# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
+# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_1024 is not set
+# CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
+CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
+CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
+CONFIG_CRYPTO_JITTERENTROPY_OSR=1
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
@@ -4514,11 +4573,11 @@ CONFIG_SIGNED_PE_FILE_VERIFICATION=y
 #
 # Certificates for signature checking
 #
-# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
+CONFIG_MODULE_SIG_KEY_TYPE_RSA=y
-CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
 CONFIG_SYSTEM_TRUSTED_KEYRING=y
 # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
 CONFIG_SECONDARY_TRUSTED_KEYRING=y
+# CONFIG_SECONDARY_TRUSTED_KEYRING_SIGNED_BY_BUILTIN is not set
 CONFIG_SYSTEM_BLACKLIST_KEYRING=y
 CONFIG_SYSTEM_BLACKLIST_HASH_LIST=""
 # CONFIG_SYSTEM_REVOCATION_LIST is not set
@@ -4601,7 +4660,6 @@ CONFIG_ZSTD_DECOMPRESS=y
 CONFIG_XZ_DEC=y
 CONFIG_XZ_DEC_X86=y
 # CONFIG_XZ_DEC_POWERPC is not set
-# CONFIG_XZ_DEC_IA64 is not set
 # CONFIG_XZ_DEC_ARM is not set
 # CONFIG_XZ_DEC_ARMTHUMB is not set
 # CONFIG_XZ_DEC_SPARC is not set
@@ -4626,6 +4684,7 @@ CONFIG_TEXTSEARCH_FSM=m
 CONFIG_INTERVAL_TREE=y
 CONFIG_XARRAY_MULTI=y
 CONFIG_ASSOCIATIVE_ARRAY=y
+CONFIG_CLOSURES=y
 CONFIG_HAS_IOMEM=y
 CONFIG_HAS_IOPORT=y
 CONFIG_HAS_IOPORT_MAP=y
@@ -4684,8 +4743,11 @@ CONFIG_ARCH_HAS_COPY_MC=y
 CONFIG_ARCH_STACKWALK=y
 CONFIG_STACKDEPOT=y
 CONFIG_SBITMAP=y
+# CONFIG_LWQ_TEST is not set
 # end of Library routines
 
+CONFIG_FIRMWARE_TABLE=y
+
 #
 # Kernel hacking
 #
@@ -4888,6 +4950,7 @@ CONFIG_DEBUG_LIST=y
 # CONFIG_DEBUG_PLIST is not set
 # CONFIG_DEBUG_SG is not set
 # CONFIG_DEBUG_NOTIFIERS is not set
+# CONFIG_DEBUG_CLOSURES is not set
 # CONFIG_DEBUG_MAPLE_TREE is not set
 # end of Debug kernel data structures
 
@@ -5079,6 +5142,7 @@ CONFIG_RUNTIME_TESTING_MENU=y
 # CONFIG_TEST_FREE_PAGES is not set
 # CONFIG_TEST_FPU is not set
 # CONFIG_TEST_CLOCKSOURCE_WATCHDOG is not set
+# CONFIG_TEST_OBJPOOL is not set
 CONFIG_ARCH_USE_MEMTEST=y
 # CONFIG_MEMTEST is not set
 # CONFIG_HYPERV_TESTING is not set

kernel.sh

@@ -1,12 +1,12 @@
 #!/bin/bash
-UPDATED="2024-03-11"
+UPDATED="2024-03-16"
 
 DISABLE=1        # disable some options
 ENABLE=1         # enable some options
 MITIGATIONS=0    # enable/disable all mitigations
 UARCH=1          # apply more uarch patch
 FKH=0            # apply fast kernel headers patch
-CLANG=0          # use Clang compiler (if not, use GCC)
+CLANG=1          # use Clang compiler (if not, use GCC)
 O3=1             # use -O3 vs -O2 (optimisation)
 ARCH="x86-64-v4" # target architecture (uarch patch)
 CONFIGCLOUD=1    # enable cloud 'from' config
@@ -25,9 +25,9 @@ TESTING=0        # add testing options
 
 # config-cloud-amd64:
 #   https://packages.debian.org/source/sid/linux
-#       linux-image-6.6.9-cloud-amd64-unsigned
+#       linux-image-6.7.9-cloud-amd64-unsigned
 #   Go down to download section, select amd64 and download deb.
-#   Open .deb with archiver, browse to boot folder and grab 'config-6.6.9-cloud-amd64'.
+#   Open .deb with archiver, browse to boot folder and grab 'config-6.7.9-cloud-amd64'.
 #
 
 # more-uarches-for-kernel.patch:
@@ -206,9 +206,9 @@ doCleanup() {
 
         doEchoStep "Cleanup"
         if [ "$CLANG" == "1" ]; then
-            make -j${NPROC} LLVM=1 CC="ccache clang" mrproper
+            make -j${NPROC} LLVM=1 CC="ccache clang" distclean
         else
-            make -j${NPROC} CC="ccache gcc" mrproper
+            make -j${NPROC} CC="ccache gcc" distclean
         fi
         result=$?
         if [ ! result==0 ]; then
@@ -672,8 +672,6 @@ doDefaultsDisable() {
         ./scripts/config --disable CONFIG_VIRT_CPU_ACCOUNTING_GEN
         ./scripts/config --disable CONFIG_TASKSTATS
         ./scripts/config --disable CONFIG_PSI
-        ./scripts/config --disable CONFIG_KALLSYMS
-        ./scripts/config --disable CONFIG_KALLSYMS_ALL
         ./scripts/config --disable CONFIG_SCHED_MC
         ./scripts/config --disable CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS
         ./scripts/config --disable CONFIG_INIT_ON_ALLOC_DEFAULT_ON
@@ -707,6 +705,16 @@ doDefaultsEnable() {
         if [ -f .config ]; then
             cp .config .config.enable.before
         fi
+
+        if [ "$CLANG" == "1" ]; then
+            ./scripts/config --enable CONFIG_HAS_LTO_CLANG
+            ./scripts/config --enable CONFIG_ARCH_SUPPORTS_CFI_CLANG
+            ./scripts/config --enable CONFIG_ARCH_SUPPORTS_LTO_CLANG_THIN
+            ./scripts/config --enable CONFIG_ARCH_SUPPORTS_LTO_CLANG
+            ./scripts/config --enable CONFIG_LTO_CLANG_THIN
+            ./scripts/config --enable CONFIG_LTO_CLANG_FULL
+        fi
+
         ./scripts/config --enable CONFIG_ADDRESS_MASKING
         ./scripts/config --enable CONFIG_AF_KCM
         ./scripts/config --enable CONFIG_ARCH_CPUIDLE_HALTPOLL
@@ -1093,6 +1101,8 @@ doDefaultsEnable() {
         ./scripts/config --enable CONFIG_IO_STRICT_DEVMEM
         ./scripts/config --enable CONFIG_IPV6
         ./scripts/config --enable CONFIG_KSM
+        ./scripts/config --enable CONFIG_KALLSYMS
+        ./scripts/config --enable CONFIG_KALLSYMS_ALL
         ./scripts/config --enable CONFIG_COMPILE_TEST
 
         case ${ARCH} in
@@ -1153,7 +1163,11 @@ doDefaults() {
     doFastKernelHeaders
 
     doEchoStep "Define options"
-    ./scripts/config --set-str CONFIG_LOCALVERSION '-zogg'
+    if [ "$CLANG" == "1" ]; then
+        ./scripts/config --set-str CONFIG_LOCALVERSION '-clang'
+    else
+        ./scripts/config --set-str CONFIG_LOCALVERSION '-gcc'
+    fi
 
     doDefaultsDisable
     doDefaultsEnable
@@ -1288,8 +1302,9 @@ doCompile() {
     if [ "$CLANG" == "1" ]; then
         make \
             -j${NPROC} \
-            LLVM=1 \
+            LLVM=1 LLVM_IAS=1 \
             CC='ccache clang' \
+            HOSTCC='ccache clang' \
             bindeb-pkg \
             LOCALVERSION=-"$(dpkg --print-architecture)" \
             KDEB_PKGVERSION="$(make kernelversion)-1"