[Assist] Compile custom kernel based on linux-libre-grsec-knock

Benoît benoit at neviani.fr
Thu Mar 30 20:59:47 BST 2017

Just to let you know guys that I left most of the choice as default and 
I have succesfully be able to build a working kernel based on 
grsec+knock with a working hibernation :)

I got a related question regarding knock if any of you have been able to 
play with it : 

I have tested the knockd (from http://www.zeroflux.org/projects/knock)  
and it is working very well :) but the knock from Gnunet doesnt seems  
to work.. I have installed openssh-knock and I added "TCPStealthSecret" 
secret in my conf on ssh client and server side but it doesnt take care 
I can always connect even if my secret is not the same on both side...

any idea?

(I have double checked that the kernel is compiled with CONFIG_TCP_STEALTH=y)


On Wed, Mar 29, 2017 at 02:51:34PM +0200, Benoît wrote:
>Thanks but it seems to be important choices, is there any problem to 
>say yes or no to all? what do you guys use to do here?
>On Wed, Mar 29, 2017 at 09:06:38AM -0300, Megver83 wrote:
>>so then answer them recursively when running makepkg
>>If you want "yes" for all
>>$ yes | makepkg
>>If you want "no" for all
>>$ yes n | makepkg
>>if you want "?" for all
>>$ yes ? | makepkg
>>El 29/03/17 a las 04:24, Benoît escribió:
>>>Thanks André,
>>>I followed the steps and I am failing in the same questions during the
>>>steps e)
>>>I got this:
>>>Hunk #1 succeeded at 2078 (offset 89 lines).
>>> HOSTCC  scripts/basic/fixdep
>>> HOSTCC  scripts/kconfig/conf.o
>>> SHIPPED scripts/kconfig/zconf.tab.c
>>> SHIPPED scripts/kconfig/zconf.lex.c
>>> SHIPPED scripts/kconfig/zconf.hash.c
>>> HOSTCC  scripts/kconfig/zconf.tab.o
>>> HOSTLD  scripts/kconfig/conf
>>>scripts/kconfig/conf  --silentoldconfig Kconfig
>>>* Restart config...
>>>* IRQ subsystem
>>>Expose hardware/virtual IRQ mapping via debugfs (IRQ_DOMAIN_DEBUG)
>>>[N/y/?] (NEW)
>>>and much more questions after this one, like:
>>>* GCOV-based kernel profiling
>>>Enable gcov-based kernel profiling (GCOV_KERNEL) [N/y/?] (NEW)
>>>Enable IOSF sideband access through debugfs (IOSF_MBI_DEBUG) [N/y/?] (NEW)
>>>I am not a specialits on theses question and I thought it could use the
>>>config.x86_64 ?
>>>Many thanks for your help
>>>On Wed, Mar 29, 2017 at 12:44:17AM +0000, André Silva wrote:
>>>>On 03/28/2017 11:18 PM, Benoît wrote:
>>>>>Many thanks for your help and excuse me for the basic question as it is
>>>>>the first time ever I need to build a custom kernel.
>>>>I suggest you download our build project in abslibre following the next
>>>>a) Clone abslibre project with git:
>>>>git clone https://git.parabola.nu/abslibre.git
>>>>b) Go to Linux-libre-grsec-knock folder:
>>>>cd abslibre/kernels/linux-libre-grsec-knock
>>>>c) Edit config.x86_64 with any editor (eg. vim or nano):
>>>>vim config.x86_64
>>>>d) Upgrade checksums:
>>>>makepkg -g >> PKGBUILD
>>>>e) Build it (it requires fakeroot):
>>>>f) Install your custom package (eg.
>>>>sudo pacman -U
>>SIP: megver83 at sip.linphone.org
>>XMPP: megver83 at diasp.org
>>Kontalk: +56 9 5630 2363
>>GNUSocial: @megver82 at gnusocial.net
>>Diaspora*: David P. (same XMPP ID)
>>Assist mailing list
>>Assist at lists.parabola.nu
>Assist mailing list
>Assist at lists.parabola.nu


More information about the Assist mailing list