commit dd3f2e648a6ee5dc7ba88bf2e3d13b6b47686350 · pyrox.dev/nixpkgs

+27

pkgs/os-specific/linux/kernel/linux-hardened-copperhead.nix

···

       1
       1
       +
       { stdenv, fetchFromGitHub, perl, buildLinux, ... } @ args:

     

       2
       2
       +
       

     

       3
       3
       +
       let

     

       4
       4
       +
         version = "4.11.6";

     

       5
       5
       +
         revision = "c";

     

       6
       6
       +
         sha256 = "1n1j1y5g5fcvgpqjfq14fbg4cm32k420kbazipqbi84h9zwifa69";

     

       7
       7
       +
       in

     

       8
       8
       +
       

     

       9
       9
       +
       import ./generic.nix (args // {

     

       10
       10
       +
         version = "${version}-${revision}";

     

       11
       11
       +
         extraMeta.branch = "4.11";

     

       12
       12
       +
         modDirVersion = version;

     

       13
       13
       +
       

     

       14
       14
       +
         src = fetchFromGitHub {

     

       15
       15
       +
           inherit sha256;

     

       16
       16
       +
           owner = "copperhead";

     

       17
       17
       +
           repo = "linux-hardened";

     

       18
       18
       +
           rev = "${version}.${revision}";

     

       19
       19
       +
         };

     

       20
       20
       +
       

     

       21
       21
       +
         kernelPatches = args.kernelPatches;

     

       22
       22
       +
       

     

       23
       23
       +
         features.iwlwifi = true;

     

       24
       24
       +
         features.efiBootStub = true;

     

       25
       25
       +
         features.needsCifsUtils = true;

     

       26
       26
       +
         features.netfilterRPFilter = true;

     

       27
       27
       +
       } // (args.argsOverride or {}))

+12

pkgs/top-level/all-packages.nix

···

       11841
       11841
        
       

     

       11842
       11842
        
         klibcShrunk = lowPrio (callPackage ../os-specific/linux/klibc/shrunk.nix { });

     

       11843
       11843
        
       

     

       11844
       11844
       +
         linux_hardened_copperhead = callPackage ../os-specific/linux/kernel/linux-hardened-copperhead.nix {

     

       11845
       11845
       +
           kernelPatches = with kernelPatches; [

     

       11846
       11846
       +
             kernelPatches.bridge_stp_helper

     

       11847
       11847
       +
             kernelPatches.p9_fixes

     

       11848
       11848
       +
           ];

     

       11849
       11849
       +
           extraConfig = import ../os-specific/linux/kernel/hardened-config.nix {

     

       11850
       11850
       +
             inherit stdenv;

     

       11851
       11851
       +
             inherit (linux) version;

     

       11852
       11852
       +
           };

     

       11853
       11853
       +
         };

     

       11854
       11854
       +
       

     

       11844
       11855
        
         linux_mptcp = callPackage ../os-specific/linux/kernel/linux-mptcp.nix {

     

       11845
       11856
        
           kernelPatches =

     

       11846
       11857
        
             [ kernelPatches.bridge_stp_helper

     
···

       12092
       12103
        
         linux_latest = linuxPackages_latest.kernel;

     

       12093
       12104
        
       

     

       12094
       12105
        
         # Build the kernel modules for the some of the kernels.

     

       12106
       12106
       +
         linuxPackages_hardened_copperhead = linuxPackagesFor pkgs.linux_hardened_copperhead;

     

       12095
       12107
        
         linuxPackages_mptcp = linuxPackagesFor pkgs.linux_mptcp;

     

       12096
       12108
        
         linuxPackages_rpi = linuxPackagesFor pkgs.linux_rpi;

     

       12097
       12109
        
         linuxPackages_3_10 = recurseIntoAttrs (linuxPackagesFor pkgs.linux_3_10);