Deterministic kernel build scripts, for Linux, mainly for Debian for now.
This scripts will build kernel in deterministic way, and also apply our default settings and patches.
It will also use Grsecurity patch to create secure hardened grsecurity/pax kernel (optional).
See doc/build.txt
As end user who just wishes to run a Grsecurity kernel on Debian, see http://deb.mempo.org (check the GPG key as given below).
READ FILE security.txt here for list of known existing and past problems.
Please DO read the doc/pgp.txt.sig file that is signed version of doc/pgp.txt; Public key files are in doc/ too.
You should verify data with both github.com by https/SSL or SSH downloads and you should check git tag -v tagname e.g.: git tag -v v0.1.26-rc3 to see if tag is signed by: pgp key 45953F23 rfree-mempo, pubkey here in doc/
First of, read the details in doc/build.txt and rest of doc/ folder!
Maintainers of this project should do following in reaction to new version of codes:
linux-image-3.2.54-grsec-mempo.good.0.1.21_01_amd64.deb
VVVVVV LLLL MMMMMM RR AAAAA
V.V.V - vanilla kernel
M.M.M - version of Mempo, increased with grsecurity updates; usullay with other config
RR - release. for now is set to -RC (and 50 for finall)
LLLLL - level of security (will be option in future)
AAAAA - architecture (will be option in future)
When releasing new tag (RR)
- changelog
DEBIAN_REVISION="X"in env.sh
When incresing Mempo (M.M.M)
- changelog
- reset RR=0 as written above
- linux-mempo/configs/(every).config - write the proper version in
CONFIG_LOCALVERSION - change CURRENT_SEED in env.sh
When upstream grsecurity/patches change, then update:
- changelog
- sourcecode.list - the checksum and file name of patch
- linux-mempo/env.sh -
KERNEL_DATE - increase M.M.M as written above
When new upstream vanilla kernel (V.V.V)
- changelog
- sourcecode.list - the checksum and file name of kernel
- linux-mempo/env.sh -
kernel_general_versionandKERNEL_DATE - increase M.M.M