mikael/linux-hardened
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

experiment

Browse source
This commit is contained in:
Mikael 2024-07-31 19:52:48 +02:00
parent e5c2785e47
commit 264153f81c
1 changed files with 23 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
flake.nix
View file

@ -16,9 +16,16 @@
linux-hardened = pkgs: arch: configfile: linux-hardened = pkgs: arch: configfile:
let let
inherit (pkgs) linuxKernel fetchFromGitHub gccStdenv; inherit (pkgs)
callPackage
gccStdenv
linuxPackagesFor
recurseIntoAttrs;
package = { stdenv, linuxKernel, fetchFromGitHub, ... }:
linuxKernel.manualConfig rec {
inherit configfile stdenv;
kernel = linuxKernel.manualConfig rec {
pname = "linux-hardened"; pname = "linux-hardened";
version = "6.10.2-hardened1"; version = "6.10.2-hardened1";
@ -29,18 +36,13 @@
hash = "sha256-a9kxt09pQjUJUsdqaIMyA7Us6sxueaacetWKv59Xy3s="; hash = "sha256-a9kxt09pQjUJUsdqaIMyA7Us6sxueaacetWKv59Xy3s=";
}; };
stdenv = gccStdenv;
extraMakeFlags = [ "KCFLAGS=-march=${arch}" ]; extraMakeFlags = [ "KCFLAGS=-march=${arch}" ];
isHardened = true; isHardened = true;
inherit configfile features; features = { efiBootStub = true; };
}; };
features = { efiBootStub = true; }; kernel = callPackage package { stdenv = gccStdenv; };
in kernel.overrideAttrs (base: { in recurseIntoAttrs (linuxPackagesFor kernel);
passthru = base.passthru // { inherit features; };
});
in { in {
packages.x86_64-linux = packages.x86_64-linux =
let let