##// END OF EJS Templates
Raspi2-3_GenImage
RSS

Cloner depuis https://github.com/drtyhlpr/rpi23-gen-image.git

a
Unknown -
r561:6e8eb71ca421
parent child
Show More
Show file before | Show file after | Hide comments
@@ -97,14 +97,39 if [ "$BUILD_KERNEL" = true ] ; then
97
97
98 #Switch to KERNELSRC_DIR so we can use set_kernel_config
98 #Switch to KERNELSRC_DIR so we can use set_kernel_config
99 cd "${KERNEL_DIR}" || exit
99 cd "${KERNEL_DIR}" || exit
100 if [ "$KERNEL_ARCH" = arm64 ]
101 #Fix SD_DRIVER mess in 64bit config
102 # use correct driver MMC_BCM2835_MMC instead of MMC_BCM2835_SDHOST - variable naming is bs
103 set_kernel_config CONFIG_MMC_BCM2835 n
104 set_kernel_config CONFIG_MMC_SDHCI_IPROC n
105 set_kernel_config CONFIG_USB_DWC2 n
106 sed -i "s|depends on MMC_BCM2835_MMC && MMC_BCM2835_DMA|depends on MMC_BCM2835_MMC|" "${KERNEL_DIR}"/drivers/mmc/host/Kconfig
107
108 #VLAN got disabled without reason in arm64bit
109 set_kernel_config CONFIG_IPVLAN m
110
111 #V4L2 sub-device userspace API
112 set_kernel_config CONFIG_VIDEO_V4L2_SUBDEV_API y
113
114 # GPIO-based bitbanging SPI Master
115 set_kernel_config CONFIG_SPI_GPIO m
116 #SPI Slave protocol
117 set_kernel_config CONFIG_SPI_SLAVE y
118
119 # Virtual (secure) IP: tunneling
120 set_kernel_config CONFIG_NET_IPVTI m
121
122 #Wlan driver debug info
123 set_kernel_config CONFIG_BRCMDBG m
124
125 #GPIO WATCHDOG
126 set_kernel_config CONFIG_GPIO_WATCHDOG m
127
128 #Camera
129 set_kernel_config VIDEO_BCM2835 m
130 set_kernel_config VIDEO_BCM2835_UNICAM m
131 fi
100
132
101 #Fix SD_DRIVER f* up in Raspberry PI upstream kernel
102 # use correct driver MMC_BCM2835_MMC instead of MMC_BCM2835_SDHOST - variable naming is bs
103 set_kernel_config CONFIG_MMC_BCM2835 n
104 set_kernel_config CONFIG_MMC_SDHCI_IPROC n
105 set_kernel_config CONFIG_USB_DWC2 n
106 sed -i "s|depends on MMC_BCM2835_MMC && MMC_BCM2835_DMA|depends on MMC_BCM2835_MMC|" "${KERNEL_DIR}"/drivers/mmc/host/Kconfig
107
108 # enable ZSWAP see https://askubuntu.com/a/472227 or https://wiki.archlinux.org/index.php/zswap
133 # enable ZSWAP see https://askubuntu.com/a/472227 or https://wiki.archlinux.org/index.php/zswap
109 if [ "$KERNEL_ZSWAP" = true ] ; then
134 if [ "$KERNEL_ZSWAP" = true ] ; then
110 set_kernel_config CONFIG_ZPOOL y
135 set_kernel_config CONFIG_ZPOOL y
@@ -169,8 +194,8 if [ "$BUILD_KERNEL" = true ] ; then
169 set_kernel_config CONFIG_SYSTEM_TRUSTED_KEYS ""
194 set_kernel_config CONFIG_SYSTEM_TRUSTED_KEYS ""
170
195
171 # This option provides support for retaining authentication tokens and access keys in the kernel.
196 # This option provides support for retaining authentication tokens and access keys in the kernel.
172 set_kernel_config CONFIG_KEYS=y
197 set_kernel_config CONFIG_KEYS y
173 set_kernel_config CONFIG_KEYS_COMPAT=y
198 set_kernel_config CONFIG_KEYS_COMPAT y
174
199
175 # Apparmor
200 # Apparmor
176 set_kernel_config CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE 0
201 set_kernel_config CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE 0
@@ -181,13 +206,13 if [ "$BUILD_KERNEL" = true ] ; then
181 set_kernel_config CONFIG_DEFAULT_SECURITY "apparmor"
206 set_kernel_config CONFIG_DEFAULT_SECURITY "apparmor"
182
207
183 # restrictions on unprivileged users reading the kernel
208 # restrictions on unprivileged users reading the kernel
184 set_kernel_config CONFIG_SECURITY_DMESG_RESTRICT=y
209 set_kernel_config CONFIG_SECURITY_DMESG_RESTRICT y
185
210
186 # network security hooks
211 # network security hooks
187 set_kernel_config CONFIG_SECURITY_NETWORK y
212 set_kernel_config CONFIG_SECURITY_NETWORK y
188 set_kernel_config CONFIG_SECURITY_NETWORK_XFRM=y
213 set_kernel_config CONFIG_SECURITY_NETWORK_XFRM y
189 set_kernel_config CONFIG_SECURITY_PATH=y
214 set_kernel_config CONFIG_SECURITY_PATH y
190 set_kernel_config CONFIG_SECURITY_YAMA=y
215 set_kernel_config CONFIG_SECURITY_YAMA n
191
216
192 # New Options
217 # New Options
193 if [ "$KERNEL_NF" = true ] ; then
218 if [ "$KERNEL_NF" = true ] ; then
@@ -229,7 +254,7 if [ "$BUILD_KERNEL" = true ] ; then
229 set_kernel_config CONFIG_CRYPTO_AES_ARM64_NEON_BLK m
254 set_kernel_config CONFIG_CRYPTO_AES_ARM64_NEON_BLK m
230 set_kernel_config CONFIG_CRYPTO_CHACHA20_NEON m
255 set_kernel_config CONFIG_CRYPTO_CHACHA20_NEON m
231 set_kernel_config CONFIG_CRYPTO_AES_ARM64_BS m
256 set_kernel_config CONFIG_CRYPTO_AES_ARM64_BS m
232 echo SYSTEM_TRUSTED_KEYS >> .config
257 echo CONFIG_SYSTEM_TRUSTED_KEYS="" >> .config
233 fi
258 fi
234
259
235 # Netfilter kernel support See https://github.com/raspberrypi/linux/issues/2177#issuecomment-354647406
260 # Netfilter kernel support See https://github.com/raspberrypi/linux/issues/2177#issuecomment-354647406
General Comments 0
Vous devez vous connecter pour laisser un commentaire. Se connecter maintenant