[Assist] Compile custom kernel based on linux-libre-grsec-knock

Benoît benoit at neviani.fr
Thu Mar 30 20:59:47 BST 2017


Just to let you know guys that I left most of the choice as default and 
I have succesfully be able to build a working kernel based on 
grsec+knock with a working hibernation :)

I got a related question regarding knock if any of you have been able to 
play with it : 

I have tested the knockd (from http://www.zeroflux.org/projects/knock)  
and it is working very well :) but the knock from Gnunet doesnt seems  
to work.. I have installed openssh-knock and I added "TCPStealthSecret" 
secret in my conf on ssh client and server side but it doesnt take care 
I can always connect even if my secret is not the same on both side...

any idea?

(I have double checked that the kernel is compiled with CONFIG_TCP_STEALTH=y)

Thanks
belette

On Wed, Mar 29, 2017 at 02:51:34PM +0200, Benoît wrote:
>Thanks but it seems to be important choices, is there any problem to 
>say yes or no to all? what do you guys use to do here?
>
>On Wed, Mar 29, 2017 at 09:06:38AM -0300, Megver83 wrote:
>>so then answer them recursively when running makepkg
>>
>>If you want "yes" for all
>>$ yes | makepkg
>>
>>If you want "no" for all
>>$ yes n | makepkg
>>
>>if you want "?" for all
>>$ yes ? | makepkg
>>
>>El 29/03/17 a las 04:24, Benoît escribió:
>>>Thanks André,
>>>I followed the steps and I am failing in the same questions during the
>>>steps e)
>>>
>>>I got this:
>>>
>>>Hunk #1 succeeded at 2078 (offset 89 lines).
>>> HOSTCC  scripts/basic/fixdep
>>> HOSTCC  scripts/kconfig/conf.o
>>> SHIPPED scripts/kconfig/zconf.tab.c
>>> SHIPPED scripts/kconfig/zconf.lex.c
>>> SHIPPED scripts/kconfig/zconf.hash.c
>>> HOSTCC  scripts/kconfig/zconf.tab.o
>>> HOSTLD  scripts/kconfig/conf
>>>scripts/kconfig/conf  --silentoldconfig Kconfig
>>>*
>>>* Restart config...
>>>*
>>>*
>>>* IRQ subsystem
>>>*
>>>Expose hardware/virtual IRQ mapping via debugfs (IRQ_DOMAIN_DEBUG)
>>>[N/y/?] (NEW)
>>>
>>>and much more questions after this one, like:
>>>
>>>* GCOV-based kernel profiling
>>>*
>>>Enable gcov-based kernel profiling (GCOV_KERNEL) [N/y/?] (NEW)
>>>
>>>Enable IOSF sideband access through debugfs (IOSF_MBI_DEBUG) [N/y/?] (NEW)
>>>
>>>...
>>>
>>>I am not a specialits on theses question and I thought it could use the
>>>config.x86_64 ?
>>>
>>>Many thanks for your help
>>>
>>>On Wed, Mar 29, 2017 at 12:44:17AM +0000, André Silva wrote:
>>>>On 03/28/2017 11:18 PM, Benoît wrote:
>>>>>Many thanks for your help and excuse me for the basic question as it is
>>>>>the first time ever I need to build a custom kernel.
>>>>
>>>>I suggest you download our build project in abslibre following the next
>>>>steps:
>>>>
>>>>a) Clone abslibre project with git:
>>>>
>>>>git clone https://git.parabola.nu/abslibre.git
>>>>
>>>>b) Go to Linux-libre-grsec-knock folder:
>>>>
>>>>cd abslibre/kernels/linux-libre-grsec-knock
>>>>
>>>>c) Edit config.x86_64 with any editor (eg. vim or nano):
>>>>
>>>>vim config.x86_64
>>>>
>>>>d) Upgrade checksums:
>>>>
>>>>makepkg -g >> PKGBUILD
>>>>
>>>>e) Build it (it requires fakeroot):
>>>>
>>>>makepkg
>>>>
>>>>f) Install your custom package (eg.
>>>>linux-libre-grsec-knock-1:4.9.16_gnu.r201703180820-1):
>>>>
>>>>sudo pacman -U
>>>>linux-libre-grsec-knock-1\:4.9.16_gnu.r201703180820-1-x86_64.pkg.tar.xz
>>>>
>>>
>>>
>>>
>>>
>>
>>-- 
>>SIP: megver83 at sip.linphone.org
>>XMPP: megver83 at diasp.org
>>Kontalk: +56 9 5630 2363
>>Tox:
>>EF62A7ABCFADD97088FFE925A2F17F0711B49CAC155871B9823A9E9D0D4F9A38077AB0FA3791
>>GNUSocial: @megver82 at gnusocial.net
>>Diaspora*: David P. (same XMPP ID)
>>_______________________________________________
>>Assist mailing list
>>Assist at lists.parabola.nu
>>https://lists.parabola.nu/mailman/listinfo/assist
>
>-- 
>Benoit
>_______________________________________________
>Assist mailing list
>Assist at lists.parabola.nu
>https://lists.parabola.nu/mailman/listinfo/assist

-- 
Benoit


More information about the Assist mailing list