summaryrefslogtreecommitdiff
path: root/portage
diff options
context:
space:
mode:
authorivan-boikov <ik.boikov.public@protonmail.com>2023-12-28 18:56:17 +0100
committerivan-boikov <ik.boikov.public@protonmail.com>2023-12-28 18:56:17 +0100
commit4e468a5f7091aaa3a4f8d656b1bb45c51d179a1a (patch)
tree0ea029450358ef471571459e9e26ad6f211da1d8 /portage
parent11b2b6aa0e95d3ee5741a877806ff798d8e1546f (diff)
gentoo-kernel goodies
Diffstat (limited to 'portage')
-rw-r--r--portage/portage/make.conf9
-rw-r--r--portage/portage/package.use/common2
2 files changed, 10 insertions, 1 deletions
diff --git a/portage/portage/make.conf b/portage/portage/make.conf
index 1769aa5..8a3c1b6 100644
--- a/portage/portage/make.conf
+++ b/portage/portage/make.conf
@@ -20,7 +20,8 @@ ACCEPT_KEYWORDS="amd64"
QEMU_SOFTMMU_TARGETS="arm x86_64"
QEMU_USER_TARGETS="x86_64"
-USE="caps filecaps seccomp verify-sig \
+USE="dist-kernel
+ caps filecaps seccomp verify-sig \
cjk bash-completion -emacs \
aac flac mp3 ogg opus \
apng eps gif jpeg jpeg2k jpegxl webp png postscript tiff \
@@ -33,3 +34,9 @@ USE="caps filecaps seccomp verify-sig \
gtk qt5 -kde -gnome -gnome-keyring -gtk-doc \
-bluetooth -smartcard \
-systemd -policykit -gstreamer -ldap -networkmanager -cups"
+
+# secure boot with gentoo-kernel
+MODULES_SIGN_KEY="/etc/secrets/efi/db.key"
+MODULES_SIGN_HASH="SHA512"
+SECUREBOOT_SIGN_KEY="/etc/secrets/efi/db.key"
+SECUREBOOT_SIGN_CERT="/etc/secrets/efi/db.crt"
diff --git a/portage/portage/package.use/common b/portage/portage/package.use/common
index bdde8a3..6fbb0d9 100644
--- a/portage/portage/package.use/common
+++ b/portage/portage/package.use/common
@@ -36,3 +36,5 @@ dev-python/PyQt5 -opengl
app-misc/nnn gitstatus
app-text/texlive -cjk l10n_fr
+
+sys-kernel/gentoo-kernel hardened