##// END OF EJS Templates
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch...
kernel features + nexmon monitor mode wlan patch(kali-kernel) with RPI3,RPI3B+ firmware patch - ENABLE_NEXMON to use raspberry pi kali kernel sources which include patched nl80211 driver. Needed to crosscompile nexmon. Firmware for RPI3 and RPI3B+ is patched in the process to enable moniotor mode and injection. - Support for precompiled kernel. RPI3 64bit kernel from sakaki and a multi kernel (supporting all RPI models) from hyperiotOS. Needs further testing! - start.elf isn't supplied from precompiled kernel so always install them - ENABLE_SYSTEMDSWAP enables swapping service supporting new KERNEL_ZSWAP feature and also manages swap files - KERNEL_SECURITY activates apparmor, keyring,str/mem cpy protection, audit funcionality, integrity checks - KERNEL_ZSWAP enables compressed swap kernel feature. -KERNEL_VIRT enables virtualisation on RPI2,3,3P -KERNEL_BPF enables bpf syscall (supress journald warning message) - KERNEL_NF enable netfilter firewall (iptables-legacy is not default anymore) - KERNEL_DEFAULT_GOV set default cpu governor

Fichier de la dernière révision:

r384:ebd8e6e39c8b
r502:3d4e292749a1
Show More
99-reduce.sh
76 lines | 2.5 KiB | application/x-sh | BashLexer
#
# Reduce system disk usage
#
# Load utility functions
. ./functions.sh
# Reduce the image size by various operations
if [ "$ENABLE_REDUCE" = true ] ; then
if [ "$REDUCE_APT" = true ] ; then
# Install dpkg configuration file
if [ "$REDUCE_DOC" = true ] || [ "$REDUCE_MAN" = true ] ; then
install_readonly files/dpkg/01nodoc "${ETC_DIR}/dpkg/dpkg.cfg.d/01nodoc"
fi
# Install APT configuration files
install_readonly files/apt/02nocache "${ETC_DIR}/apt/apt.conf.d/02nocache"
install_readonly files/apt/03compress "${ETC_DIR}/apt/apt.conf.d/03compress"
install_readonly files/apt/04norecommends "${ETC_DIR}/apt/apt.conf.d/04norecommends"
# Remove APT cache files
rm -fr "${R}/var/cache/apt/pkgcache.bin"
rm -fr "${R}/var/cache/apt/srcpkgcache.bin"
fi
# Remove all doc files
if [ "$REDUCE_DOC" = true ] ; then
find "${R}/usr/share/doc" -depth -type f ! -name copyright -print0 | xargs -0 rm || true
find "${R}/usr/share/doc" -empty -print0 | xargs -0 rmdir || true
fi
# Remove all man pages and info files
if [ "$REDUCE_MAN" = true ] ; then
rm -rf "${R}/usr/share/man" "${R}/usr/share/groff" "${R}/usr/share/info" "${R}/usr/share/lintian" "${R}/usr/share/linda" "${R}/var/cache/man"
fi
# Remove all locale translation files
if [ "$REDUCE_LOCALE" = true ] ; then
find "${R}/usr/share/locale" -mindepth 1 -maxdepth 1 ! -name 'en' -print0 | xargs -0 rm -r
fi
# Remove hwdb PCI device classes (experimental)
if [ "$REDUCE_HWDB" = true ] ; then
rm -fr "/lib/udev/hwdb.d/20-pci-*"
fi
# Replace bash shell by dash shell (experimental)
if [ "$REDUCE_BASH" = true ] ; then
# Purge bash and update alternatives
echo "Yes, do as I say!" | chroot_exec apt-get purge -qq -y --allow-remove-essential bash
chroot_exec update-alternatives --install /bin/bash bash /bin/dash 100
fi
# Remove sound utils and libraries
if [ "$ENABLE_SOUND" = false ] ; then
chroot_exec apt-get -qq -y purge alsa-utils libsamplerate0 libasound2 libasound2-data
fi
# Remove GPU kernels
if [ "$ENABLE_MINGPU" = true ] ; then
rm -f "${BOOT_DIR}/start.elf"
rm -f "${BOOT_DIR}/fixup.dat"
rm -f "${BOOT_DIR}/start_x.elf"
rm -f "${BOOT_DIR}/fixup_x.dat"
fi
# Remove kernel and initrd from /boot (already in /boot/firmware)
if [ "$BUILD_KERNEL" = false ] ; then
rm -f "${R}/boot/vmlinuz-*"
rm -f "${R}/boot/initrd.img-*"
fi
# Clean APT list of repositories
rm -fr "${R}/var/lib/apt/lists/*"
chroot_exec apt-get -qq -y update
fi