millerson.name/gentoo-overlay
1
0
Fork 0
Code Issues Pull Requests Releases Activity

sys-kernel/hardened-kernel: update SRC_URI

Browse Source 
Signed-off-by: Alexander Miroshnichenko <alex@millerson.name>
This commit is contained in:
Alexander Miroshnichenko
2025-10-13 17:47:56 +03:00
parent b3935cf52c
commit ef2489b777
2 changed files with 33 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
sys-kernel/hardened-kernel/hardened-kernel-6.16.10.ebuild
View File

@@ -65,8 +65,6 @@ REQUIRED_USE="
sparc? ( savedconfig ) sparc? ( savedconfig )
" "
RDEPEND="
"
BDEPEND=" BDEPEND="
debug? ( dev-util/pahole ) debug? ( dev-util/pahole )
verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 ) verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 )
@@ -98,20 +96,21 @@ src_unpack() {
src_prepare() { src_prepare() {
local patch local patch
mkdir ${WORKDIR}/${USER_PATCHSET} mkdir "${WORKDIR}/${USER_PATCHSET}"
# remove some genpatches causes conflicts with linux-hardened patch # remove some genpatches causes conflicts with linux-hardened patch
for patch in ${GENPATCHES_EXCLUDE}; do for patch in "${GENPATCHES_EXCLUDE}"; do
rm -f ${WORKDIR}/${PATCHSET}/${patch} rm -f "${WORKDIR}/${PATCHSET}/${patch}"
done done
# Remove already exists changes in linux-hardened patch # Remove already exists changes in linux-hardened patch
sed -i '344,356d' "${WORKDIR}/${PATCHSET}/0010-Add-Gentoo-Linux-support-config-settings-and-default.patch" sed -i '344,356d' "${WORKDIR}/${PATCHSET}/0010-Add-Gentoo-Linux-support-config-settings-and-default.patch"
# include linux-hardened patch with priority # include linux-hardened patch with priority
cp ${DISTDIR}/linux-hardened-v${HARDENED_PATCH_VER}.patch ${WORKDIR}/${USER_PATCHSET}/1198_linux-hardened-${HARDENED_PATCH_VER}.patch cp "${DISTDIR}/linux-hardened-v${HARDENED_PATCH_VER}.patch" \
"${WORKDIR}/${USER_PATCHSET}/1198_linux-hardened-${HARDENED_PATCH_VER}.patch"
# copy pkg maintainer supplied patches # copy pkg maintainer supplied patches
if [ -d "${FILESDIR}/${MY_P}" ]; then if [ -d "${FILESDIR}/${MY_P}" ]; then
cp "${FILESDIR}/${MY_P}"/*.patch ${WORKDIR}/${USER_PATCHSET}/ cp "${FILESDIR}/${MY_P}"/*.patch "${WORKDIR}/${USER_PATCHSET}"/
fi fi
eapply "${WORKDIR}/patch-${PV}" eapply "${WORKDIR}/patch-${PV}"

13
sys-kernel/hardened-kernel/metadata.xml
View File

@@ -1,11 +1,20 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd"> <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata> <pkgmetadata>
<maintainer type="person"> <maintainer type="person">
<email>alex@millerson.name</email> <email>alex@millerson.name</email>
<name>Alexander Miroshnichenko</name> <name>Alexander Miroshnichenko</name>
</maintainer> </maintainer>
<use> <use>
<flag name='initramfs'>Build initramfs along with the kernel.</flag> <flag name="experimental">
Apply experimental patches; for more information, see "https://wiki.gentoo.org/wiki/Project:Kernel/Experimental".
</flag>
<flag name="hardened">
Use selection of hardening options recommended by Kernel Self
Protection Project
</flag>
<flag name="initramfs">
Build initramfs along with the kernel.
</flag>
</use> </use>
</pkgmetadata> </pkgmetadata>