diff options
| author | ivan-boikov <ik.boikov.public@protonmail.com> | 2023-12-28 18:56:17 +0100 |
|---|---|---|
| committer | ivan-boikov <ik.boikov.public@protonmail.com> | 2023-12-28 18:56:17 +0100 |
| commit | 4e468a5f7091aaa3a4f8d656b1bb45c51d179a1a (patch) | |
| tree | 0ea029450358ef471571459e9e26ad6f211da1d8 | |
| parent | 11b2b6aa0e95d3ee5741a877806ff798d8e1546f (diff) | |
gentoo-kernel goodies
| -rw-r--r-- | portage/portage/make.conf | 9 | ||||
| -rw-r--r-- | portage/portage/package.use/common | 2 |
2 files changed, 10 insertions, 1 deletions
diff --git a/portage/portage/make.conf b/portage/portage/make.conf index 1769aa5..8a3c1b6 100644 --- a/portage/portage/make.conf +++ b/portage/portage/make.conf @@ -20,7 +20,8 @@ ACCEPT_KEYWORDS="amd64" QEMU_SOFTMMU_TARGETS="arm x86_64" QEMU_USER_TARGETS="x86_64" -USE="caps filecaps seccomp verify-sig \ +USE="dist-kernel + caps filecaps seccomp verify-sig \ cjk bash-completion -emacs \ aac flac mp3 ogg opus \ apng eps gif jpeg jpeg2k jpegxl webp png postscript tiff \ @@ -33,3 +34,9 @@ USE="caps filecaps seccomp verify-sig \ gtk qt5 -kde -gnome -gnome-keyring -gtk-doc \ -bluetooth -smartcard \ -systemd -policykit -gstreamer -ldap -networkmanager -cups" + +# secure boot with gentoo-kernel +MODULES_SIGN_KEY="/etc/secrets/efi/db.key" +MODULES_SIGN_HASH="SHA512" +SECUREBOOT_SIGN_KEY="/etc/secrets/efi/db.key" +SECUREBOOT_SIGN_CERT="/etc/secrets/efi/db.crt" diff --git a/portage/portage/package.use/common b/portage/portage/package.use/common index bdde8a3..6fbb0d9 100644 --- a/portage/portage/package.use/common +++ b/portage/portage/package.use/common @@ -36,3 +36,5 @@ dev-python/PyQt5 -opengl app-misc/nnn gitstatus app-text/texlive -cjk l10n_fr + +sys-kernel/gentoo-kernel hardened |