Обновление README.md, исходников, пакетки

assets/var/gnu/linux-kernel.md

@@ -0,0 +1,105 @@
+linux-kernel 6.18.7
+=
+https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.7.tar.xz
+
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_OHCI_HCD=m
+CONFIG_USB_XHCI_HCD=m
+CONFIG_USB_XHCI_PLATFORM=m
+CONFIG_USB_HID=m
+CONFIG_HID_GENERIC=m
+CONFIG_USB_COMMON=m
+
+CONFIG_KEYBOARD_ATKBD=m
+CONFIG_MOUSE_PS2=m
+CONFIG_MOUSE_PS2_ALPS=m
+
+CONFIG_I2C_CHARDEV=m
+CONFIG_I2C_DESIGNWARE_PLATFORM=m
+CONFIG_I2C_GPIO=m
+7299
+
+
+``` sh *** build ***
+#
+# Configuration
+#
+cat > .config.base <<ENDCONFIG
+# Kernel settings
+CONFIG_KERNEL_LZ4=y
+CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y
+CONFIG_CPU_IDLE_GOV_LADDER=y
+CONFIG_PREEMPT=y
+CONFIG_TRANSPARENT_HUGEPAGE=y
+CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS=y
+
+# Video
+CONFIG_FB=y
+CONFIG_FB_EFI=y
+CONFIG_FB_SIMPLE=y
+CONFIG_DRM_SIMPLEDRM=y
+CONFIG_FRAMEBUFFER_CONSOLE=y
+CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY=y
+CONFIG_DRM_FBDEV_EMULATION=y
+
+# Security 
+CONFIG_INTEGRITY=n
+CONFIG_SECURITY_SELINUX=n
+CONFIG_KEY_DH_OPERATIONS=y
+CONFIG_TCG_TPM=y
+CONFIG_TRUSTED_KEYS_TPM=y
+CONFIG_SECURITYFS=y
+CONFIG_HARDENED_USERCOPY=y
+CONFIG_FORTIFY_SOURCE=y
+CONFIG_SECURITY_DMESG_RESTRICT=y
+CONFIG_SECURITY_LANDLOCK=y
+CONFIG_SECURITY_YAMA=y
+CONFIG_SECURITY_LOADPIN=y
+CONFIG_SECURITY_SAFESETID=y
+CONFIG_LSM="landlock,yama,loadpin,safesetid"
+
+# Block devices
+CONFIG_BLK_DEV_NVME=y
+CONFIG_BLK_WBT=y
+CONFIG_NVME_CORE=y
+CONFIG_NVME_HWMON=y
+CONFIG_F2FS_FS=y
+
+# AeroLinux conf
+CONFIG_CMDLINE_BOOL=y
+CONFIG_CMDLINE="root=PARTLABEL=aerolinux init=/pkg/gnu/s6/bin/s6-init rootwait rw console=tty0 earlycon=efifb loglevel=8 debug"
+CONFIG_MODPROBE_PATH="/pkg/gnu/bin/modprobe"
+ENDCONFIG
+
+make defconfig
+./scripts/kconfig/merge_config.sh -m .config .config.base
+find . -name Kconfig -exec awk '
+    /^(config|menuconfig) [A-Za-z0-9_]+$/ {
+        config_name = $2
+        getline next_line
+        if (next_line ~ /^[[:space:]]*tristate([[:space:]]|$)/) {
+            print "CONFIG_" config_name "=m"
+        }
+    }
+' {} + > .config.modules
+./scripts/kconfig/merge_config.sh .config .config.modules
+sed -E '/.*DEBUG.*/ s/=(y|m)/=n/' -i .config
+make olddefconfig
+./scripts/kconfig/merge_config.sh -m .config .config.base
+make -j$(nproc) bzImage modules
+make INSTALL_MOD_PATH=/pkg/gnu/linux-kernel modules_install
+mkdir -p /pkg/gnu/linux-kernel/var/certs
+objcopy arch/x86/boot/bzImage /pkg/gnu/linux-kernel/var/BOOTX64.EFI
+cp System.map /pkg/gnu/linux-kernel/var/System.map
+cp .config /pkg/gnu/linux-kernel/var/config
+cp {certs/signing_key.pem,certs/signing_key.x509} /pkg/gnu/linux-kernel/var/certs || true
+```
+
+``` sh *** config ***
+cp -rPl /pkg/gnu/linux-kernel/lib /
+pkg run set linux-kernel
+```
+
+``` sh *** set ***
+cp -r /pkg/gnu/linux-kernel/var/BOOTX64.EFI /boot/efi/EFI/BOOT/BOOTX64.EFI
+```