diff options
| -rw-r--r-- | portage/portage/make.conf | 9 | ||||
| -rw-r--r-- | portage/portage/package.use/common | 2 |
2 files changed, 10 insertions, 1 deletions
diff --git a/portage/portage/make.conf b/portage/portage/make.conf index 1769aa5..8a3c1b6 100644 --- a/portage/portage/make.conf +++ b/portage/portage/make.conf @@ -20,7 +20,8 @@ ACCEPT_KEYWORDS="amd64" QEMU_SOFTMMU_TARGETS="arm x86_64" QEMU_USER_TARGETS="x86_64" -USE="caps filecaps seccomp verify-sig \ +USE="dist-kernel + caps filecaps seccomp verify-sig \ cjk bash-completion -emacs \ aac flac mp3 ogg opus \ apng eps gif jpeg jpeg2k jpegxl webp png postscript tiff \ @@ -33,3 +34,9 @@ USE="caps filecaps seccomp verify-sig \ gtk qt5 -kde -gnome -gnome-keyring -gtk-doc \ -bluetooth -smartcard \ -systemd -policykit -gstreamer -ldap -networkmanager -cups" + +# secure boot with gentoo-kernel +MODULES_SIGN_KEY="/etc/secrets/efi/db.key" +MODULES_SIGN_HASH="SHA512" +SECUREBOOT_SIGN_KEY="/etc/secrets/efi/db.key" +SECUREBOOT_SIGN_CERT="/etc/secrets/efi/db.crt" diff --git a/portage/portage/package.use/common b/portage/portage/package.use/common index bdde8a3..6fbb0d9 100644 --- a/portage/portage/package.use/common +++ b/portage/portage/package.use/common @@ -36,3 +36,5 @@ dev-python/PyQt5 -opengl app-misc/nnn gitstatus app-text/texlive -cjk l10n_fr + +sys-kernel/gentoo-kernel hardened |