# Maintainer: jc_gargma # Maintainer (Arch): Levente Polyak # Contributor: Aqua-sama # Contributor (Arch): Daniel Micay # Contributor (Arch): Tobias Powalowski # Contributor (Arch): Thomas Baechler # # I maintain this because: # Parabola version patch script does not apply consistently # Parabola version lacks ath9k, bdver2, greysky2, and raid6 patches # Parabola version lacks ck patches # Parabola version allows SEED, SM3, SM4, and Streebog # Parabola version is 300 Hz # Parabola version supports Intel ME # Parabola version is not configured for openrc # Parabola version builds docs using python and graphviz pkgbase=linux-libre-hardened-ck _majver=5.0 _minver=12 _pkgver=${_majver}.${_minver} _gnumajver=${_majver}-gnu _gnupkgver=${_pkgver}-gnu _hardenedver=a _ckpatchversion=1 _ckpatch="patch-5.0-ck${_ckpatchversion}" _gcc_more_v='20180509' _srcname=linux-${_majver} pkgver=${_pkgver}.${_hardenedver} pkgrel=1 url='https://github.com/anthraxx/linux-hardened' #url='http://ck.kolivas.org/patches/' arch=('x86_64') license=('GPL2') makedepends=('xmlto' 'kmod' 'inetutils' 'bc' 'libelf') conflicts=('linux-hardened-ck') options=('!strip') source=( https://linux-libre.fsfla.org/pub/linux-libre/releases/${_gnumajver}/linux-libre-${_gnumajver}.tar.xz{,.sign} https://linux-libre.fsfla.org/pub/linux-libre/releases/${_gnupkgver}/patch-${_gnumajver}-${_gnupkgver}.xz{,.sign} https://github.com/anthraxx/linux-hardened/releases/download/${pkgver}/linux-hardened-${pkgver}.patch{,.sig} remove-excess-ck-extraversion.patch modify-ck-for-hardened.patch http://ck.kolivas.org/patches/5.0/${_majver}/${_majver}-ck${_ckpatchversion}/${_ckpatch}.xz enable_additional_cpu_optimizations-$_gcc_more_v.tar.gz::https://github.com/graysky2/kernel_gcc_patch/archive/$_gcc_more_v.tar.gz bdver2-fix-for-graysky.patch ath9k-regdom-hack.patch raid6-default-algo.patch config.x86_64 # the main kernel config files 60-linux.hook # pacman hook for depmod 90-linux.hook # pacman hook for initramfs regeneration linux.preset # standard config files for mkinitcpio ramdisk ) sha256sums=('7df5025d1960520bfea158054130467770eca379999d5ac48175ed5ee804faa1' 'SKIP' 'cbecd2d3acf5997db3a7d416e673fcf5d6e797f5d141822814b2e7c527e37ca2' 'SKIP' '710ea9f7aab089ac15012ecd09254241301ae336ebd41778cd7f7ad86e787b6f' 'SKIP' '2a551169f8cbb424900372fe698ae9003fbcad3614a46ca3f56b103f9c1ea763' 'b6defd1ef672b73631ecfa79fc204d6219175f333b53d86af668c1e1a9b6288e' '661f64bbd8bf49afcc7c760c4148b2e2108511a1eadcae917cfe6056a83d8476' '226e30068ea0fecdb22f337391385701996bfbdba37cdcf0f1dbf55f1080542d' 'd35338c92d0dbf27ffedaf100bd852dd13fd9b5d49b12a10b91194a2ae654447' 'e7ebf050c22bcec0028c0b3c79fd6d3913b0370ecc6a23dfe78ce475630cf503' '0f81d6e4158b7beeb0eb514f1b9401f7e23699cb0f7b0d513e25dae1815daaeb' '4e9a8b97837a16be027b13a2059ac14e33cf6959b91dc3fa7ca95df7c1df7e0d' 'ae2e95db94ef7176207c690224169594d49445e04249d2499e9d2fbc117a0b21' '75f99f5239e03238f88d1a834c50043ec32b1dc568f2cc291b07d04718483919' 'ad6344badc91ad0630caacde83f7f9b97276f80d26a20619a87952be65492c65') validpgpkeys=( '474402C8C582DAFBE389C427BCB7CF877E7D47A7' # Alexandre Oliva 'E240B57E2C4630BA768E2F26FC1B547C8D8172C8' # Levente Polyak ) _kernelname=${pkgbase#linux-libre} : ${_kernelname:=-hardened} prepare() { cd $_srcname # add upstream patch msg2 "Applying upstream patch" patch -Np1 < ../patch-${_gnumajver}-${_gnupkgver} # Hotfixes # msg2 "Applying hotfixes" # linux hardened patch msg2 "Applying hardened patch" patch -Np1 < ../linux-hardened-${pkgver}.patch # ck hotfixes msg2 "Applying ck patch hotfixes" patch -p1 -i ../remove-excess-ck-extraversion.patch "$srcdir/${_ckpatch}" patch -p1 -i ../modify-ck-for-hardened.patch "$srcdir/${_ckpatch}" sed -i '/-CFLAGS/ s/$/ \$(LIBELF_FLAGS)/' "$srcdir/${_ckpatch}" # ck patch msg2 "Applying ck patch" patch -F 3 -Np1 -i ../${_ckpatch} # graysky2 gcc patch msg2 "Applying graysky2 cpu patch" patch -p1 -i ../kernel_gcc_patch-${_gcc_more_v}/enable_additional_cpu_optimizations_for_gcc_v8.1+_kernel_v4.13+.patch # Fix stack warnings and ldconfig segfaults on bdver2 with graysky2 gcc patch msg2 "Applying bdver2 fix for graysky2 cpu patch" patch -p1 -i ../bdver2-fix-for-graysky.patch # Ignore ath9k eeprom patch msg2 "Applying ath9k patch" patch -p1 -i ../ath9k-regdom-hack.patch # Set default raid6 algo patch msg2 " Applying raid6 patch" patch -p1 -i ../raid6-default-algo.patch msg2 "Setting version..." sed -e "/^EXTRAVERSION =/s/=.*/= .${_hardenedver}/" -i Makefile scripts/setlocalversion --save-scmversion echo "-$pkgrel" > localversion.10-pkgrel echo "-libre$_kernelname" > localversion.20-pkgname msg2 "Setting config..." # we are in src/linux-x.yy.zz, looking for a config next to the pkgbuild #if [ -f ${SRCDEST}/config.libre-hardened-ck.previous ]; then # cp ${SRCDEST}/config.libre-hardened-ck.previous .config #else cp ../config.x86_64 .config #fi make olddefconfig make menuconfig # Remove sublevel when no sublevel exists # sed -i '/SUBLEVEL = 0/d' Makefile make -s kernelrelease > ../version # workaround for make -s kernelrelease not applying # localversion to version when changed using menuconfig grep -Po '(?<=CONFIG_LOCALVERSION=").*(?=")' .config > ../localversion echo "$_pkgver" > ../version.temp echo ".$_hardenedver" >> ../version.temp cat "localversion.10-pkgrel" >> ../version.temp cat "localversion.20-pkgname" >> ../version.temp cat ../localversion >> ../version.temp cat ../version.temp | tr -d "\n" > ../version # back up the config #msg2 "Backing up config..." #cp .config ${SRCDEST}/config.libre-hardened-ck.previous msg2 "Prepared %s version %s" "$pkgbase" "$(<../version)" } build() { cd $_srcname make bzImage modules } _package() { pkgdesc="The ${pkgbase/linux/Linux} kernel and modules" [[ ${pkgbase} = linux-libre ]] && groups=(base) depends=(coreutils linux-libre-firmware kmod mkinitcpio) optdepends=('crda: to set the correct wireless channels of your country' 'usbctl: deny_new_usb control') backup=("etc/mkinitcpio.d/$pkgbase.preset") install=linux.install local kernver="$( "$startdir/$install.pkg" true && install=$install.pkg # fill in mkinitcpio preset and pacman hooks sed "$subst" ../linux.preset | install -Dm644 /dev/stdin \ "$pkgdir/etc/mkinitcpio.d/$pkgbase.preset" sed "$subst" ../60-linux.hook | install -Dm644 /dev/stdin \ "$pkgdir/usr/share/libalpm/hooks/60-$pkgbase.hook" sed "$subst" ../90-linux.hook | install -Dm644 /dev/stdin \ "$pkgdir/usr/share/libalpm/hooks/90-$pkgbase.hook" msg2 "Fixing permissions..." chmod -Rc u=rwX,go=rX "$pkgdir" } _package-headers() { pkgdesc="Header files and scripts for building modules for ${pkgbase/linux/Linux} kernel" local builddir="$pkgdir/usr/lib/modules/$(