Hi, I would like to compile a kernel for fedora following this security guide ( https://www.ssi.gouv.fr/guide/recommandations-de-securite-relatives-a-un-sys... v2) I have some parameters that i have put using an ansible role (https://github.com/robertdebock/ansible-role-kernel). The compilation works but when i reboot i get a black screen so i guess i am not doing it the right way. Ideally I would like to be able to compile new kernel on the fly with my custom .config file for almalinux server and my fedora workstation home pc. I have seen this fedora doc (https://docs.fedoraproject.org/en-US/quick-docs/kernel/build-custom-kernel/) but at the paragraph "Building a Kernel from the Fedora dist-git" it states 3. Make whatever changes or customizations you need, but no information is provided on how to do that. Could you help me in doing this? Thank you
On Sun, Jan 22, 2023 at 11:26:40PM +0100, A.Péré wrote:
Hi, I would like to compile a kernel for fedora following this security guide ( https://www.ssi.gouv.fr/guide/recommandations-de-securite-relatives-a-un-sys... v2)
Hi Aurel, Fedora maintains its own kernel and while it tries to follow the kernel upstream, it has minor differences. They do have a mailing list for fedora kernels that can be found at https://docs.fedoraproject.org/en-US/quick-docs/kernel/overview/ should you have specific questions about it.
I have some parameters that i have put using an ansible role (https://github.com/robertdebock/ansible-role-kernel). The compilation works but when i reboot i get a black screen so i guess i am not doing it the right way. Ideally I would like to be able to compile new kernel on the fly with my custom .config file for almalinux server and my fedora workstation home pc. I have seen this fedora doc (https://docs.fedoraproject.org/en-US/quick-docs/kernel/build-custom-kernel/) but at the paragraph "Building a Kernel from the Fedora dist-git" it states 3. Make whatever changes or customizations you need, but no information is provided on how to do that. Could you help me in doing this? Thank you
I must be honest with you that it's very unlikely that they will help you if you simply drop ansible playbooks and security best practices links. So far, the problem that you described is more related to sysadmin stuff IMO. My 2 cents for you to do would be: 1) use other mediums such as forums on the internet which a more focused on that kind of thing. 2) try stuff locally, read up on docs of tools you are not familiar with yet. With more details like errors I think you will more likely get across someone that has faced similar problems and can point you to a solution. So far your problem statement is a bit vague and it would be hard for anyone willing to help to actually do so. Good luck :-) thanks! - Paulo A.
_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
Hi I thought it was a mailing list for newbies ans i coulemd find answers or at least links... Let me rephrase the question: is there a distribution with automated tools to compile a kernel with custom config settings that ils easier and more accessible un particular for automated updates with automatic custom compiling config? Thanks 22 janv. 2023 23:52:52 Paulo Miguel Almeida <paulo.miguel.almeida.rodenas@gmail.com>:
On Sun, Jan 22, 2023 at 11:26:40PM +0100, A.Péré wrote:
Hi, I would like to compile a kernel for fedora following this security guide ( https://www.ssi.gouv.fr/guide/recommandations-de-securite-relatives-a-un-sys... v2)
Hi Aurel, Fedora maintains its own kernel and while it tries to follow the kernel upstream, it has minor differences. They do have a mailing list for fedora kernels that can be found at https://docs.fedoraproject.org/en-US/quick-docs/kernel/overview/ should you have specific questions about it.
I have some parameters that i have put using an ansible role (https://github.com/robertdebock/ansible-role-kernel). The compilation works but when i reboot i get a black screen so i guess i am not doing it the right way. Ideally I would like to be able to compile new kernel on the fly with my custom .config file for almalinux server and my fedora workstation home pc. I have seen this fedora doc (https://docs.fedoraproject.org/en-US/quick-docs/kernel/build-custom-kernel/) but at the paragraph "Building a Kernel from the Fedora dist-git" it states 3. Make whatever changes or customizations you need, but no information is provided on how to do that. Could you help me in doing this? Thank you
I must be honest with you that it's very unlikely that they will help you if you simply drop ansible playbooks and security best practices links. So far, the problem that you described is more related to sysadmin stuff IMO.
My 2 cents for you to do would be:
1) use other mediums such as forums on the internet which a more focused on that kind of thing. 2) try stuff locally, read up on docs of tools you are not familiar with yet. With more details like errors I think you will more likely get across someone that has faced similar problems and can point you to a solution. So far your problem statement is a bit vague and it would be hard for anyone willing to help to actually do so.
Good luck :-)
thanks!
- Paulo A.
_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
On Thu, 26 Jan 2023 at 03:25:08 +0530, A.Péré wrote:
Is there a distribution with automated tools to compile a kernel with custom config settings
Yes, it is your favourite distro, whichever that may be. You just need the tools to build, which you may already have, but can be seen in docs: https://www.kernel.org/doc/html/latest/process/changes.html
that ils easier and more accessible
If you want a GUI, use `make xconfig`.
un particular for automated updates with automatic custom compiling config?
Have your custom config options in a separate file somewhere, and use scripts/kconfig/merge_config.sh to merge. Example in a script: make defconfig ./scripts/kconfig/merge_config.sh .config common.config The script will take care of requisite stuff, which additional options to enable, etc. Or you can have your entire config saved in .config, and just run merge_config.sh everytime you pull newer kernel code. Thanks, Siddh
participants (4)
-
A.Péré -
aurel.pere＠gmail.com
-
Paulo Miguel Almeida -
Siddh Raman Pant