Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add server 6.6 configuration #54

Merged
merged 2 commits into from
Oct 29, 2024
Merged

Add server 6.6 configuration #54

merged 2 commits into from
Oct 29, 2024

Conversation

legoktm
Copy link
Member

@legoktm legoktm commented Oct 22, 2024

Generated roughly the same as 4f7504a, by taking the 5.15 config and running make olddefconfig with a grsec-patched 6.6.57 kernel in a bookworm container.

Fixes #53.

Generated roughly the same as 4f7504a, by taking the 5.15 config
and running `make olddefconfig` with a grsec-patched 6.6.57 kernel
in a bookworm container.
@legoktm
Copy link
Member Author

legoktm commented Oct 22, 2024

Probably ready for review, let me actually build and try the kernels on noble before we merge this.

@legoktm
Copy link
Member Author

legoktm commented Oct 23, 2024

This is ready to be reviewed/land now, I built a kernel using this (see freedomofpress/securedrop-apt-test#249) and it booted on a NUC 10 running noble.

@legoktm
Copy link
Member Author

legoktm commented Oct 25, 2024

Missing some nftables modules:

$ rg -i nf_table config-securedrop-6.6
1246:CONFIG_NF_TABLES=m
1247:# CONFIG_NF_TABLES_INET is not set
1248:# CONFIG_NF_TABLES_NETDEV is not set
1435:# CONFIG_NF_TABLES_IPV4 is not set
1436:# CONFIG_NF_TABLES_ARP is not set
1471:# CONFIG_NF_TABLES_IPV6 is not set
1499:CONFIG_NF_TABLES_BRIDGE=m

Copy link
Contributor

@zenmonkeykstop zenmonkeykstop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Visual review (focused on nftables and grsec sections only) seems good. Approving.

@zenmonkeykstop zenmonkeykstop merged commit 4f9a3dc into main Oct 29, 2024
12 checks passed
@zenmonkeykstop zenmonkeykstop deleted the server-6.6 branch October 29, 2024 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

Build 6.6 kernel for server on noble
2 participants