Archlinux: linux-hardened kernel

2021-03-28

Check list:

• install linux-hardened and linux-hardened-headers
• remove linux
• re-create grub.cfg: grub-mkconfig -o /boot/grub/grub.cfg

root@vetinari ~ # grub-mkconfig -o /boot/grub/grub.cfg
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-linux-hardened
Found initrd image: /boot/intel-ucode.img /boot/initramfs-linux-hardened.img
Found fallback initrd image(s) in /boot: initramfs-linux-hardened-fallback.img
Found linux image: /boot/vmlinuz-linux
Found initrd image: /boot/intel-ucode.img /boot/initramfs-linux.img
Found fallback initrd image(s) in /boot: initramfs-linux-fallback.img
done
root@vetinari ~ # vim /boot/grub/grub.cfg
root@vetinari ~ # pacman --remove linux
checking dependencies...
:: base optionally requires linux: bare metal support

Package (1)  Old Version      Net Change

linux        5.11.10.arch1-1  -97.48 MiB

Total Removed Size:  97.48 MiB

:: Do you want to remove these packages? [Y/n]
:: Running pre-transaction hooks...
(1/1) Removing linux initcpios...
:: Processing package changes...
(1/1) removing linux                                                  [######################################] 100%
:: Running post-transaction hooks...
(1/2) Arming ConditionNeedsUpdate...
(2/2) Updating module dependencies...
root@vetinari ~ # grub-mkconfig -o /boot/grub/grub.cfg
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-linux-hardened
Found initrd image: /boot/intel-ucode.img /boot/initramfs-linux-hardened.img
Found fallback initrd image(s) in /boot: initramfs-linux-hardened-fallback.img
done

toe@detritus2 ~ % ssh vetinari-disk-unlock
Enter passphrase for /dev/md2: 
Connection to vetinari.oepkes.net closed.

root@vetinari ~ # uname -a 
Linux vetinari 5.11.10-hardened1-1-hardened #1 SMP PREEMPT Thu, 25 Mar 2021 21:32:46 +0000 x86_64 GNU/Linux