Skip to content

Add server 6.6 configuration#54

Merged
zenmonkeykstop merged 2 commits intomainfrom
server-6.6
Oct 29, 2024
Merged

Add server 6.6 configuration#54
zenmonkeykstop merged 2 commits intomainfrom
server-6.6

Conversation

@legoktm
Copy link
Member

@legoktm legoktm commented Oct 22, 2024

Generated roughly the same as 4f7504a, by taking the 5.15 config and running make olddefconfig with a grsec-patched 6.6.57 kernel in a bookworm container.

Fixes #53.

Generated roughly the same as 4f7504a, by taking the 5.15 config
and running `make olddefconfig` with a grsec-patched 6.6.57 kernel
in a bookworm container.
@legoktm
Copy link
Member Author

legoktm commented Oct 22, 2024

Probably ready for review, let me actually build and try the kernels on noble before we merge this.

@legoktm
Copy link
Member Author

legoktm commented Oct 23, 2024

This is ready to be reviewed/land now, I built a kernel using this (see freedomofpress/securedrop-apt-test#249) and it booted on a NUC 10 running noble.

@legoktm
Copy link
Member Author

legoktm commented Oct 25, 2024

Missing some nftables modules:

$ rg -i nf_table config-securedrop-6.6
1246:CONFIG_NF_TABLES=m
1247:# CONFIG_NF_TABLES_INET is not set
1248:# CONFIG_NF_TABLES_NETDEV is not set
1435:# CONFIG_NF_TABLES_IPV4 is not set
1436:# CONFIG_NF_TABLES_ARP is not set
1471:# CONFIG_NF_TABLES_IPV6 is not set
1499:CONFIG_NF_TABLES_BRIDGE=m

Copy link
Contributor

@zenmonkeykstop zenmonkeykstop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Visual review (focused on nftables and grsec sections only) seems good. Approving.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

Build 6.6 kernel for server on noble

2 participants