Building a Kernel from Source - Revision history

24.212.242.183: /* preparing the kernel */

2013-05-12T15:39:34Z

‎preparing the kernel

Oleg: Reverted edits by 90.227.134.5 (talk) to last revision by Drobbins

2013-04-20T11:19:06Z

Reverted edits by 90.227.134.5 (talk) to last revision by Drobbins

90.227.134.5: /* preparing the kernel */

2013-04-19T04:07:56Z

‎preparing the kernel

Drobbins: Drobbins moved page Kernel to Building a Kernel from Source

2012-12-23T04:01:29Z

Drobbins moved page Kernel to Building a Kernel from Source

Drobbins: /* Option one: Initrd with dracut */

2012-12-23T04:00:17Z

‎Option one: Initrd with dracut

Drobbins: /* Building the Kernel */

2012-12-23T04:00:05Z

‎Building the Kernel

Drobbins: /* Building the Kernel */

2012-12-23T03:59:54Z

‎Building the Kernel

Drobbins: /* prerequisites */

2012-12-23T03:59:27Z

‎prerequisites

Drobbins: /* preparing the kernel */

2012-12-23T03:58:49Z

‎preparing the kernel

Drobbins at 03:57, 23 December 2012

2012-12-23T03:57:44Z

@@ Line 132: / Line 132: @@
 You will get some questions which you can answer mostly with either M (compiled as a module) or Y (compiled directly into the kernel).
+<pre>
 Enable different security models (SECURITY) [Y/n/?] y
 Enable the securityfs filesystem (SECURITYFS) [Y/?] y

← Older revision		Revision as of 11:19, 20 April 2013
Line 95:		Line 95:

	Finished? Well, then let's go on and		Finished? Well, then let's go on and
		+
		+	== preparing the kernel ==
		+
		+	We go now to the sources directory and enter the following commands to update the kernel's .config file:
		+	<console>
		+	# ##i##cd /usr/src/linux/
		+	# ##i##make clean
		+	CLEAN .
		+	CLEAN arch/x86/kernel/acpi/realmode
		+	CLEAN arch/x86/kernel/cpu
		+	CLEAN arch/x86/kernel
		+	CLEAN arch/x86/vdso
		+	CLEAN arch/x86/lib
		+	CLEAN drivers/gpu/drm/radeon
		+	CLEAN drivers/net/wan
		+	CLEAN drivers/scsi/aic7xxx
		+	CLEAN drivers/tty/vt
		+	CLEAN drivers/video/logo
		+	CLEAN firmware
		+	CLEAN kernel
		+	CLEAN lib/raid6
		+	CLEAN lib
		+	CLEAN security/apparmor
		+	CLEAN security/selinux
		+	CLEAN usr
		+	CLEAN arch/x86/boot/compressed
		+	CLEAN arch/x86/boot
		+	CLEAN .tmp_versions
		+	CLEAN vmlinux System.map .tmp_kallsyms2.S .tmp_kallsyms1.o .tmp_kallsyms2.o .tmp_kallsyms1.S .tmp_vmlinux1 .tmp_vmlinux2 .tmp_System.map
		+	# ##i##zcat /proc/config.gz > /usr/src/linux/.config
		+	</console>
		+
		+	<console>
		+	# ##i##make localmodconfig
		+	</console>
		+
		+	You will get some questions which you can answer mostly with either M (compiled as a module) or Y (compiled directly into the kernel).
		+
		+	Enable different security models (SECURITY) [Y/n/?] y
		+	Enable the securityfs filesystem (SECURITYFS) [Y/?] y
		+	Socket and Networking Security Hooks (SECURITY_NETWORK) [Y/?] y
		+	Security hooks for pathname based access control (SECURITY_PATH) [Y/?] y
		+	Low address space for LSM to protect from user allocation (LSM_MMAP_MIN_ADDR) [65536] 65536
		+	NSA SELinux Support (SECURITY_SELINUX) [Y/n/?] y
		+	NSA SELinux boot parameter (SECURITY_SELINUX_BOOTPARAM) [N/y/?] n
		+	NSA SELinux runtime disable (SECURITY_SELINUX_DISABLE) [N/y/?] n
		+	NSA SELinux Development Support (SECURITY_SELINUX_DEVELOP) [Y/n/?] y
		+	NSA SELinux AVC Statistics (SECURITY_SELINUX_AVC_STATS) [Y/n/?] y
		+	NSA SELinux checkreqprot default value (SECURITY_SELINUX_CHECKREQPROT_VALUE) [1] 1
		+	NSA SELinux maximum supported policy format version (SECURITY_SELINUX_POLICYDB_VERSION_MAX) [Y/n/?] y
		+	NSA SELinux maximum supported policy format version value (SECURITY_SELINUX_POLICYDB_VERSION_MAX_VALUE) [19] 19
		+	TOMOYO Linux Support (SECURITY_TOMOYO) [Y/n/?] y
		+	Default maximal count for learning mode (SECURITY_TOMOYO_MAX_ACCEPT_ENTRY) [2048] 2048
		+	Default maximal count for audit log (SECURITY_TOMOYO_MAX_AUDIT_LOG) [1024] 1024
		+	Activate without calling userspace policy loader. (SECURITY_TOMOYO_OMIT_USERSPACE_LOADER) [Y/n/?] y
		+	AppArmor support (SECURITY_APPARMOR) [Y/n/?] y
		+	AppArmor boot parameter default value (SECURITY_APPARMOR_BOOTPARAM_VALUE) [1] 1
		+	Integrity Measurement Architecture(IMA) (IMA) [Y/n/?] y
		+	EVM support (EVM) [N/y/?] (NEW)
		+	Default security module
		+	1. SELinux (DEFAULT_SECURITY_SELINUX)
		+	2. TOMOYO (DEFAULT_SECURITY_TOMOYO)
		+	3. AppArmor (DEFAULT_SECURITY_APPARMOR)
		+	> 4. Unix Discretionary Access Controls (DEFAULT_SECURITY_DAC)
		+	choice[1-4?]: 4
		+	warning: (ACPI_HOTPLUG_CPU) selects ACPI_CONTAINER which has unmet direct dependencies (ACPI && EXPERIMENTAL)
		+	warning: (MEDIA_TUNER) selects MEDIA_TUNER_TEA5761 which has unmet direct dependencies (MEDIA_SUPPORT && VIDEO_MEDIA && I2C && EXPERIMENTAL)
		+	#
		+	# configuration written to .config
		+	#
		+	warning: (GFS2_FS) selects DLM which has unmet direct dependencies (EXPERIMENTAL && INET && SYSFS && CONFIGFS_FS && (IPV6 \|\| IPV6=n))
		+	warning: (IMA) selects TCG_TPM which has unmet direct dependencies (HAS_IOMEM && EXPERIMENTAL)
		+	warning: (MEDIA_TUNER) selects MEDIA_TUNER_TEA5761 which has unmet direct dependencies (MEDIA_SUPPORT && VIDEO_MEDIA && I2C && EXPERIMENTAL)
		+	warning: (ACPI_HOTPLUG_CPU) selects ACPI_CONTAINER which has unmet direct dependencies (ACPI && EXPERIMENTAL)
		+	root@[~src/linux] #
		+
		+	</pre>
		+
		+	Now comes the most adventurous part!

	= Building the Kernel =		= Building the Kernel =

← Older revision		Revision as of 04:07, 19 April 2013
Line 95:		Line 95:

	Finished? Well, then let's go on and		Finished? Well, then let's go on and
−
−	~~== preparing the kernel ==~~
−
−	~~We go now to the sources directory and enter the following commands to update the kernel's .config file:~~
−	~~<console>~~
−	~~# ##i##cd /usr/src/linux/~~
−	~~# ##i##make clean~~
−	~~CLEAN .~~
−	~~CLEAN arch/x86/kernel/acpi/realmode~~
−	~~CLEAN arch/x86/kernel/cpu~~
−	~~CLEAN arch/x86/kernel~~
−	~~CLEAN arch/x86/vdso~~
−	~~CLEAN arch/x86/lib~~
−	~~CLEAN drivers/gpu/drm/radeon~~
−	~~CLEAN drivers/net/wan~~
−	~~CLEAN drivers/scsi/aic7xxx~~
−	~~CLEAN drivers/tty/vt~~
−	~~CLEAN drivers/video/logo~~
−	~~CLEAN firmware~~
−	~~CLEAN kernel~~
−	~~CLEAN lib/raid6~~
−	~~CLEAN lib~~
−	~~CLEAN security/apparmor~~
−	~~CLEAN security/selinux~~
−	~~CLEAN usr~~
−	~~CLEAN arch/x86/boot/compressed~~
−	~~CLEAN arch/x86/boot~~
−	~~CLEAN .tmp_versions~~
−	~~CLEAN vmlinux System.map .tmp_kallsyms2.S .tmp_kallsyms1.o .tmp_kallsyms2.o .tmp_kallsyms1.S .tmp_vmlinux1 .tmp_vmlinux2 .tmp_System.map~~
−	~~# ##i##zcat /proc/config.gz > /usr/src/linux/.config~~
−	~~</console>~~
−
−	~~<console>~~
−	~~# ##i##make localmodconfig~~
−	~~</console>~~
−
−	~~You will get some questions which you can answer mostly with either M (compiled as a module) or Y (compiled directly into the kernel).~~
−
−	~~Enable different security models (SECURITY) [Y/n/?] y~~
−	~~Enable the securityfs filesystem (SECURITYFS) [Y/?] y~~
−	~~Socket and Networking Security Hooks (SECURITY_NETWORK) [Y/?] y~~
−	~~Security hooks for pathname based access control (SECURITY_PATH) [Y/?] y~~
−	~~Low address space for LSM to protect from user allocation (LSM_MMAP_MIN_ADDR) [65536] 65536~~
−	~~NSA SELinux Support (SECURITY_SELINUX) [Y/n/?] y~~
−	~~NSA SELinux boot parameter (SECURITY_SELINUX_BOOTPARAM) [N/y/?] n~~
−	~~NSA SELinux runtime disable (SECURITY_SELINUX_DISABLE) [N/y/?] n~~
−	~~NSA SELinux Development Support (SECURITY_SELINUX_DEVELOP) [Y/n/?] y~~
−	~~NSA SELinux AVC Statistics (SECURITY_SELINUX_AVC_STATS) [Y/n/?] y~~
−	~~NSA SELinux checkreqprot default value (SECURITY_SELINUX_CHECKREQPROT_VALUE) [1] 1~~
−	~~NSA SELinux maximum supported policy format version (SECURITY_SELINUX_POLICYDB_VERSION_MAX) [Y/n/?] y~~
−	~~NSA SELinux maximum supported policy format version value (SECURITY_SELINUX_POLICYDB_VERSION_MAX_VALUE) [19] 19~~
−	~~TOMOYO Linux Support (SECURITY_TOMOYO) [Y/n/?] y~~
−	~~Default maximal count for learning mode (SECURITY_TOMOYO_MAX_ACCEPT_ENTRY) [2048] 2048~~
−	~~Default maximal count for audit log (SECURITY_TOMOYO_MAX_AUDIT_LOG) [1024] 1024~~
−	~~Activate without calling userspace policy loader. (SECURITY_TOMOYO_OMIT_USERSPACE_LOADER) [Y/n/?] y~~
−	~~AppArmor support (SECURITY_APPARMOR) [Y/n/?] y~~
−	~~AppArmor boot parameter default value (SECURITY_APPARMOR_BOOTPARAM_VALUE) [1] 1~~
−	~~Integrity Measurement Architecture(IMA) (IMA) [Y/n/?] y~~
−	~~EVM support (EVM) [N/y/?] (NEW)~~
−	~~Default security module~~
−	~~1. SELinux (DEFAULT_SECURITY_SELINUX)~~
−	~~2. TOMOYO (DEFAULT_SECURITY_TOMOYO)~~
−	~~3. AppArmor (DEFAULT_SECURITY_APPARMOR)~~
−	~~> 4. Unix Discretionary Access Controls (DEFAULT_SECURITY_DAC)~~
−	~~choice[1-4?]: 4~~
−	~~warning: (ACPI_HOTPLUG_CPU) selects ACPI_CONTAINER which has unmet direct dependencies (ACPI && EXPERIMENTAL)~~
−	~~warning: (MEDIA_TUNER) selects MEDIA_TUNER_TEA5761 which has unmet direct dependencies (MEDIA_SUPPORT && VIDEO_MEDIA && I2C && EXPERIMENTAL)~~
−	#
−	~~# configuration written to .config~~
−	#
−	~~warning: (GFS2_FS) selects DLM which has unmet direct dependencies (EXPERIMENTAL && INET && SYSFS && CONFIGFS_FS && (IPV6 \|\| IPV6=n))~~
−	~~warning: (IMA) selects TCG_TPM which has unmet direct dependencies (HAS_IOMEM && EXPERIMENTAL)~~
−	~~warning: (MEDIA_TUNER) selects MEDIA_TUNER_TEA5761 which has unmet direct dependencies (MEDIA_SUPPORT && VIDEO_MEDIA && I2C && EXPERIMENTAL)~~
−	~~warning: (ACPI_HOTPLUG_CPU) selects ACPI_CONTAINER which has unmet direct dependencies (ACPI && EXPERIMENTAL)~~
−	~~root@[~src/linux] #~~
−
−	~~</pre>~~
−
−	~~Now comes the most adventurous part!~~

	= Building the Kernel =		= Building the Kernel =

@@ Line 194: / Line 194: @@
 <console>
-dracut -f --fstab --xz /boot/initramfs-3.2.6-pf.img  3.2.6-pf
+# ##i##dracut -f --fstab --xz /boot/initramfs-3.2.6-pf.img  3.2.6-pf
 </console>

@@ Line 178: / Line 178: @@
 <console>
 # ##i##make -j8  bzImage
-# ##i## make -j8 modules
+# ##i##make -j8 modules
-# ##i## make modules_install
+# ##i##make modules_install
-# ##i## make install
+# ##i##make install
 </console>

@@ Line 91: / Line 91: @@
 After that we are going to build our packages:
 <console>
-emerge -av app-portage/gentoolkit sys-kernel/pf-sources sys-kernel/dracut sys-boot/plymouth sys-boot/plymouth-openrc-plugin
+# ##i##emerge -av app-portage/gentoolkit sys-kernel/pf-sources sys-kernel/dracut sys-boot/plymouth sys-boot/plymouth-openrc-plugin
 </console>

@@ Line 100: / Line 100: @@
 We go now to the sources directory and enter the following commands to update the kernel's  .config  file:
 <console>
-cd /usr/src/linux/
+# ##i##cd /usr/src/linux/
+# ##i##make clean
-<pre>
-root@[~src/linux] # make clean
    CLEAN   .
    CLEAN   arch/x86/kernel/acpi/realmode
@@ Line 126: / Line 124: @@
    CLEAN   .tmp_versions
    CLEAN   vmlinux System.map .tmp_kallsyms2.S .tmp_kallsyms1.o .tmp_kallsyms2.o .tmp_kallsyms1.S .tmp_vmlinux1 .tmp_vmlinux2 .tmp_System.map
-</pre>
+# ##i##zcat /proc/config.gz > /usr/src/linux/.config
+</console>
 zcat /proc/config.gz > /usr/src/linux/.config
 </console>
 You will get some questions which you can answer mostly with either M (compiled as a module) or Y (compiled directly into the kernel).

@@ Line 1: / Line 1: @@
 Setting up a proper kernel yourself - lean, mean and tailored to your hardware,  is the challenge by which a linux user can graduate to becoming a Funtoo knight ;-)
-Even though many of us are using entreprise ready kernels in the operation centres, there is almost nobody who hasn't at least considered building a kernel for his Laptop / PC.
+Even though many of us are using enterprise-ready kernels in datacenters, there is almost nobody who hasn't at least considered building a kernel for his laptop / PC.
-We are showing here how an intermediate LINUX user can use an alternative to the standard beginners "genkernel" approach,  to compile a custom kernel,  in a relatively still speedy and easy set up.
+We are showing here how an intermediate Linux user can use an alternative to the standard beginners "genkernel" approach,  to compile a custom kernel,  in a relatively still speedy and easy set up.
 '''minimum requirements'''