millerson.name/gentoo-overlay
1
0
Fork 0
Code Issues Pull Requests Releases Activity

sys-kernel/hardened-kernel: update SRC_URI

Browse Source 
Signed-off-by: Alexander Miroshnichenko <alex@millerson.name>
This commit is contained in:
Alexander Miroshnichenko
2025-10-13 17:47:56 +03:00
parent b3935cf52c
commit ef2489b777
2 changed files with 33 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

45
sys-kernel/hardened-kernel/hardened-kernel-6.16.10.ebuild
View File

@@ -27,15 +27,15 @@ HOMEPAGE="
https://www.kernel.org/ https://www.kernel.org/
" "
SRC_URI+=" SRC_URI+="
https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${MY_P}.tar.xz https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/${MY_P}.tar.xz
https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/patch-${PV}.xz https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/patch-${PV}.xz
https://dev.gentoo.org/~mgorny/dist/linux/${PATCHSET}.tar.xz https://dev.gentoo.org/~mgorny/dist/linux/${PATCHSET}.tar.xz
https://github.com/anthraxx/linux-hardened/releases/download/v${HARDENED_PATCH_VER}/linux-hardened-v${HARDENED_PATCH_VER}.patch https://github.com/anthraxx/linux-hardened/releases/download/v${HARDENED_PATCH_VER}/linux-hardened-v${HARDENED_PATCH_VER}.patch
https://github.com/projg2/gentoo-kernel-config/archive/${GENTOO_CONFIG_VER}.tar.gz https://github.com/projg2/gentoo-kernel-config/archive/${GENTOO_CONFIG_VER}.tar.gz
-> gentoo-kernel-config-${GENTOO_CONFIG_VER}.tar.gz -> gentoo-kernel-config-${GENTOO_CONFIG_VER}.tar.gz
verify-sig? ( verify-sig? (
https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/sha256sums.asc https://cdn.kernel.org/pub/linux/kernel/v$(ver_cut 1).x/sha256sums.asc
-> linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc -> linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc
) )
amd64? ( amd64? (
https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-x86_64-fedora.config https://raw.githubusercontent.com/projg2/fedora-kernel-config-for-gentoo/${CONFIG_VER}/kernel-x86_64-fedora.config
@@ -65,8 +65,6 @@ REQUIRED_USE="
sparc? ( savedconfig ) sparc? ( savedconfig )
" "
RDEPEND="
"
BDEPEND=" BDEPEND="
debug? ( dev-util/pahole ) debug? ( dev-util/pahole )
verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 ) verify-sig? ( >=sec-keys/openpgp-keys-kernel-20250702 )
@@ -84,35 +82,36 @@ QA_FLAGS_IGNORED="
VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/kernel.org.asc VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/kernel.org.asc
src_unpack() { src_unpack() {
if use verify-sig; then if use verify-sig; then
cd "${DISTDIR}" || die cd "${DISTDIR}" || die
verify-sig_verify_signed_checksums \ verify-sig_verify_signed_checksums \
"linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc" \ "linux-$(ver_cut 1).x-sha256sums-${SHA256SUM_DATE}.asc" \
sha256 "${MY_P}.tar.xz patch-${PV}.xz" sha256 "${MY_P}.tar.xz patch-${PV}.xz"
cd "${WORKDIR}" || die cd "${WORKDIR}" || die
fi fi
default default
} }
src_prepare() { src_prepare() {
local patch local patch
mkdir ${WORKDIR}/${USER_PATCHSET} mkdir "${WORKDIR}/${USER_PATCHSET}"
# remove some genpatches causes conflicts with linux-hardened patch # remove some genpatches causes conflicts with linux-hardened patch
for patch in ${GENPATCHES_EXCLUDE}; do for patch in "${GENPATCHES_EXCLUDE}"; do
rm -f ${WORKDIR}/${PATCHSET}/${patch} rm -f "${WORKDIR}/${PATCHSET}/${patch}"
done done
# Remove already exists changes in linux-hardened patch # Remove already exists changes in linux-hardened patch
sed -i '344,356d' "${WORKDIR}/${PATCHSET}/0010-Add-Gentoo-Linux-support-config-settings-and-default.patch" sed -i '344,356d' "${WORKDIR}/${PATCHSET}/0010-Add-Gentoo-Linux-support-config-settings-and-default.patch"
# include linux-hardened patch with priority # include linux-hardened patch with priority
cp ${DISTDIR}/linux-hardened-v${HARDENED_PATCH_VER}.patch ${WORKDIR}/${USER_PATCHSET}/1198_linux-hardened-${HARDENED_PATCH_VER}.patch cp "${DISTDIR}/linux-hardened-v${HARDENED_PATCH_VER}.patch" \
"${WORKDIR}/${USER_PATCHSET}/1198_linux-hardened-${HARDENED_PATCH_VER}.patch"
# copy pkg maintainer supplied patches # copy pkg maintainer supplied patches
if [ -d "${FILESDIR}/${MY_P}" ]; then if [ -d "${FILESDIR}/${MY_P}" ]; then
cp "${FILESDIR}/${MY_P}"/*.patch ${WORKDIR}/${USER_PATCHSET}/ cp "${FILESDIR}/${MY_P}"/*.patch "${WORKDIR}/${USER_PATCHSET}"/
fi fi
eapply "${WORKDIR}/patch-${PV}" eapply "${WORKDIR}/patch-${PV}"
for patch in "${WORKDIR}/${PATCHSET}"/*.patch; do for patch in "${WORKDIR}/${PATCHSET}"/*.patch; do

13
sys-kernel/hardened-kernel/metadata.xml
View File

@@ -1,11 +1,20 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd"> <!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata> <pkgmetadata>
<maintainer type="person"> <maintainer type="person">
<email>alex@millerson.name</email> <email>alex@millerson.name</email>
<name>Alexander Miroshnichenko</name> <name>Alexander Miroshnichenko</name>
</maintainer> </maintainer>
<use> <use>
<flag name='initramfs'>Build initramfs along with the kernel.</flag> <flag name="experimental">
Apply experimental patches; for more information, see "https://wiki.gentoo.org/wiki/Project:Kernel/Experimental".
</flag>
<flag name="hardened">
Use selection of hardening options recommended by Kernel Self
Protection Project
</flag>
<flag name="initramfs">
Build initramfs along with the kernel.
</flag>
</use> </use>
</pkgmetadata> </pkgmetadata>