upd and patches

assets/var/gnu/linux/kernel-usb.md

@@ -0,0 +1,102 @@
+linux/kernel-usb 7.0.12
+=
+https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.0.12.tar.xz
+
+``` sh *** patch ***
+mkdir -p certs
+cp /pkg/gnu/linux/kernel/var/certs/* certs || true
+sed -i '/^static const char \* const fw_path\[\] = {$/,/^};$/ s|"/lib/firmware|"/pkg/gnu/linux/kernel/firmware/lib|g' drivers/base/firmware_loader/main.c
+```
+
+``` sh *** build ***
+#
+# Configuration
+#
+cat > .config.base <<ENDCONFIG
+# Kernel settings
+CONFIG_KERNEL_LZ4=y
+CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y
+CONFIG_CPU_IDLE_GOV_LADDER=y
+CONFIG_PREEMPT=y
+CONFIG_TRANSPARENT_HUGEPAGE=y
+CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS=y
+
+# Video
+CONFIG_FB=y
+CONFIG_FB_EFI=y
+CONFIG_FB_SIMPLE=y
+CONFIG_DRM_SIMPLEDRM=y
+CONFIG_FRAMEBUFFER_CONSOLE=y
+CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY=y
+CONFIG_DRM_FBDEV_EMULATION=y
+
+# Security 
+CONFIG_INTEGRITY=n
+CONFIG_SECURITY_SELINUX=n
+CONFIG_KEY_DH_OPERATIONS=y
+CONFIG_TCG_TPM=y
+CONFIG_TRUSTED_KEYS_TPM=y
+CONFIG_SECURITYFS=y
+CONFIG_HARDENED_USERCOPY=y
+CONFIG_FORTIFY_SOURCE=y
+CONFIG_SECURITY_DMESG_RESTRICT=y
+CONFIG_SECURITY_LANDLOCK=y
+CONFIG_SECURITY_YAMA=y
+CONFIG_SECURITY_LOADPIN=y
+CONFIG_SECURITY_SAFESETID=y
+CONFIG_LSM="landlock,yama,loadpin,safesetid"
+
+# Block devices
+CONFIG_BLK_DEV_NVME=y
+CONFIG_BLK_WBT=y
+CONFIG_NVME_CORE=y
+CONFIG_NVME_HWMON=y
+
+# USB Support
+CONFIG_SCSI=y
+CONFIG_USB=y
+CONFIG_USB_XHCI_HCD=y
+CONFIG_USB_EHCI_HCD=y
+CONFIG_USB_OHCI_HCD=y
+CONFIG_BLK_DEV_SD=y
+CONFIG_USB_STORAGE=y
+
+CONFIG_USB_COMMON=y
+CONFIG_USB_HID=y
+CONFIG_HID=y
+CONFIG_HID_GENERIC=y
+
+
+# AeroLinux conf
+CONFIG_F2FS_FS=y
+CONFIG_CMDLINE_BOOL=y
+CONFIG_CMDLINE="root=PARTLABEL=aerolinux-usb init=/pkg/gnu/s6/bin/s6-init rootwait rw console=tty0 earlycon=efifb loglevel=8 debug"
+CONFIG_MODPROBE_PATH="/pkg/gnu/bin/modprobe"
+ENDCONFIG
+
+make defconfig
+./scripts/kconfig/merge_config.sh -m .config .config.base
+find . -name Kconfig -exec awk '
+    /^(config|menuconfig) [A-Za-z0-9_]+$/ {
+        config_name = $2
+        getline next_line
+        if (next_line ~ /^[[:space:]]*tristate([[:space:]]|$)/) {
+            print "CONFIG_" config_name "=m"
+        }
+    }
+' {} + > .config.modules
+./scripts/kconfig/merge_config.sh .config .config.modules
+sed -E '/.*DEBUG.*/ s/=(y|m)/=n/' -i .config
+make olddefconfig
+./scripts/kconfig/merge_config.sh -m .config .config.base
+make -j$(nproc) bzImage
+mkdir -p /pkg/gnu/linux/kernel-usb/var/certs
+objcopy arch/x86/boot/bzImage /pkg/gnu/linux/kernel-usb/var/BOOTX64.EFI
+cp System.map /pkg/gnu/linux/kernel-usb/var/System.map
+cp .config /pkg/gnu/linux/kernel-usb/var/config
+cp {certs/signing_key.pem,certs/signing_key.x509} /pkg/gnu/linux/kernel-usb/var/certs || true
+```
+
+``` sh *** set ***
+cp -r /pkg/gnu/linux/kernel-usb/var/BOOTX64.EFI /boot/efi/EFI/aerolinux/LinuxStub.efi
+```