Difference between pages "Package:Vim/Cheatsheet" and "Kernel/pt-br"

From Funtoo
< Package:Vim(Difference between pages)
Jump to navigation Jump to search
m
 
 
Line 1: Line 1:
* The description given in the "description" column is rather short, often it is best to try it your self and see what it actually does.
== Requerimentos Mínimos ==
* Even if not specified in the "command" column, most commands fired in normal mode accept a "<num> prefix" (Eg. `5w` is equivalent to `wwwww`).
* '''Entender as linhas de comando'''
* Most commands will work in visual mode as well as in normal mode.
* '''Saber aonde os arquivos do kernel ficam localizados'''


== Deplacements ==
== Assumptions ==
You start from an installed Funtoo system on the disk, or at least, you are on stage3 in a chrooted environment from a live cd, following somehow the Funto [[Installation (Tutorial)|Installation Tutorial]].
== Less advanced version ==
=== Emerging the kernel sources ===
To begin, we have to figure out which kernel sources we will use. If you are unsure about which sources are available and what their benefits and drawbacks are, check out the [[Funtoo_Linux_Kernels| Kernels]] page.


After you have made a decsion as to which kernel you want to install, emerge it:
<console>
###i## emerge sys-kernel/[kernel-name]
</console>
Portage will now go about installing the sources to ''/usr/src''. However, it is preferable to also create a symlink with eselect as such:
<console>
###i## eselect kernel set 1
</console>
You may use
<console>
###i## eselect kernel list
</console>
to display a list of kernels currently installed.


{{TableStart|striped=true}}
Using the above command is useful, because it allows you to always be able to go to the directory "/usr/src/linux" and find your current working kernel and build files.
<tr>
The "/usr/src/linux" directory is simply a symlink to the kernel you selected with eselect, in the "/usr/src" directory.
  <th>command</th>
  <th>meaning</th>
  <th>description</th>
</tr>
<tr>
  <td>w</td>
  <td>word</td>
  <td>move to next word</td>
</tr>
<tr>
  <td>W</td>
  <td>Word</td>
  <td>move to the next word (broad sens)</td>
</tr>
<tr>
  <td>b</td>
  <td>begin</td>
  <td>move to the previous word beginning</td>
</tr>
<tr>
  <td>B</td>
  <td>Begin</td>
  <td>move to the previous word beginning (broad sense)</td>
</tr>
<tr>
  <td>e</td>
  <td>end</td>
  <td>move to the next word end</td>
</tr>
<tr>
  <td>E</td>
  <td>End</td>
  <td>move to the next word end (broad sense)</td>
</tr>
<tr>
  <td><nowiki>{</nowiki></td>
  <td></td>
  <td>move to the previous blank line</td>
</tr>
<tr>
  <td><nowiki>}</nowiki></td>
  <td></td>
  <td>move to the next blank line</td>
</tr>
<tr>
  <td>f<char></td>
  <td>fetch</td>
  <td>move to the next occurrence of the character <char></td>
</tr>
<tr>
  <td>F<char></td>
  <td>Fetch</td>
  <td>move to the previous occurrence of the character <char></td>
</tr>
<tr>
  <td>$</td>
  <td></td>
  <td>move to the end of the line</td>
</tr>
<tr>
  <td>^</td>
  <td></td>
  <td>move to the first non-whitespace character of the line</td>
</tr>
<tr>
  <td>zz</td>
  <td></td>
  <td>center the viewport on the currently</td>
</tr>
<tr>
  <td><num>gg</td>
  <td>goto</td>
  <td>move to line number <num> (default is 1 if <num> is omitted)</td>
</tr>
<tr>
  <td>G</td>
  <td></td>
  <td>move to the last line</td>
</tr>
<tr>
  <td>C-o</td>
  <td></td>
  <td>Go to the previous cursor position</td>
</tr>
{{TableEnd}}


== Switch to insert mode ==
Note that portage can also set this up for you automatically, by setting the "symlink" USE flag for your kernel.


{{TableStart|striped=true}}
=== Configuring the kernel ===
<tr>
Now that the kernel sources are on your system, you should configure them. To do this, change your directory to ''/usr/src/linux''
  <th>command</th>
<console>
  <th>meaning</th>
###i## cd /usr/src/linux
  <th>description</th>
</console>
</tr>
<tr>
  <td>i</td>
  <td>insert</td>
  <td>insert before the cursor</td>
</tr>
<tr>
  <td>I</td>
  <td>Insert</td>
  <td>insert at the beginning of the line (= <code>^i</code>)</td>
</tr>
<tr>
  <td>a</td>
  <td>append</td>
  <td>insert after the cursor/td>
</tr>
<tr>
  <td>A</td>
  <td>Append</td>
  <td>insert at the end of the line (= <code>$a</code>)</td>
</tr>
<tr>
  <td>o</td>
  <td></td>
  <td>insert on a new blank line after the current line</td>
</tr>
<tr>
  <td>O</td>
  <td></td>
  <td>insert on a new blank line before the current line</td>
</tr>
<tr>
  <td>s</td>
  <td>substitute</td>
  <td>remove the current character and instert instead (= <code>xi</code>)</td>
</tr>
<tr>
  <td>S</td>
  <td>Substitute</td>
  <td>remove the current line and insert instead (= <code>ddi</code></td>
</tr>
<tr>
  <td>R</td>
  <td>Replace</td>
  <td>insert and override on the fly</td>
</tr>
{{TableEnd}}


== Actions ==
We are now in the kernel sources directory, next sanitize the sources:
{{warning|this will delete your .config}}
<console>###i## make clean && make distclean && make mrproper</console>


{{TableStart|striped=true}}
Copy configurations if you have previous configurations to copy:
<tr>
<console>###i## cp /boot/config-3.13.7 .config</console>
  <th>command</th>
 
  <th>meaning</th>
We can run a script that allows us to modify the configuration. Run:
  <th>description</th>
<console>
</tr>
###i## make menuconfig
<tr>
</console>
  <td><num>dd</td>
 
  <td>delete</td>
or
  <td>delete <num> lines</td>
 
</tr>
<console>
<tr>
###i## make nconfig
  <td><num>yy</td>
</console>
  <td>yank</td>
 
  <td>copy <num> lines to vim's default buffer</td>
{{kernelop||desc=here is where you insert kernel configs, or press / to search for kernel modules by name}}
</tr>
 
<tr>
While you edit the sources, keep the following in mind:
   <td>x</td>
* To build something into your kernel, press y when you have it selected.
   <td></td>
* To exclude something from your kernel, press n when you have it selected.
   <td>remove the character under the cursor</td>
* To build something as a module, press m.
</tr>
 
<tr>
 
   <td><num>p</td>
Things that you may need to include in your kernel:
   <td>paste</td>
 
   <td>paste <num> times vim's default buffer after the cursor</td>
as '''modules''':
</tr>
 
<tr>
* Wireless/LAN drivers
   <td><num>P</td>
* Support for your graphics card
   <td>Paste</td>
* Support for your audio card
   <td>paste <num> times vim's default buffer before the cursor</td>
* Support for USB devices
</tr>
 
<tr>
 
   <td>~</td>
as '''built in''':
   <td></td>
* scsi sata & or ata controllers
   <td>swap case under the cursor</td>
* file system used
</tr>
 
<tr>
{{note|1=
  <td>.</td>
Many pages on the wiki will tell you the kernel requirements for the application that they are about. Keep your eyes open for the blue background, white text sections of pages. Like on this one: [[uvesafb| uvesafb]]}}
  <td></td>
 
  <td>repeat previous action (kind of "live macro", try it yourself and see)</td>
=== Building and installing the kernel sources ===
</tr>
After you finish configuring your kernel sources, you will need to build them. To build your sources, run the following:
<tr>
<console>
   <td>/<pattern><CR></td>
###i## make
   <td></td>
</console>
   <td>search next occurrence of <pattern></td>
{{tip|1=
</tr>
You can add -j<number of processing cores + 1> after make to build the kernel more quickly.}}
<tr>
 
   <td>?<pattern><CR></td>
When the kernel and its modules finish building, install them:
   <td></td>
<console>
   <td>search previous occurrence of <pattern></td>
###i## make modules_install && make install
</tr>
</console>
<tr>
Now that you have installed your kernel and modules, it is a good idea to install an [[Building_a_Kernel_from_Source#Initramfs| Initramfs]].
   <td>*</td>
* If your system has a separate ''/usr'' partition, is encrypted, or uses some other non-standard configuration, it will probably not boot without an initramfs.
   <td></td>
* If your system is unencrypted, with file system, and hard drive controllers compiled in rather than as modules, it will not need an initramfs.
  <td>look for the next occurrence of the word under the cursor</td>
== Advanced version ==
</tr>
=== Getting ready to start ===
<tr>
 
  <td>n</td>
{{note|In this case we are building a kernel that is booting root in LVM over encrypted LUKS container.
  <td></td>
If you don't have this setup, don't worry, you just don't need all the modules, but everything else is similar.}}
  <td>forward search last searched pattern</td>
First, there is the decision which linux kernel sources we need.
</tr>
There are plenty of them in the repositories around, often it is not easy to distinguish between them.
<tr>
 
  <td>N</td>
I would always trust my distribution of choice and take what is has to offer - and funtoo has a lot to offer!
  <td></td>
 
  <td>backward search last searched pattern</td>
I really do recommend (especially if it is your first time) to build a debian-sourced genkernel like described in chapter 5 "Using Debian-Sources with Genkernel" in the [[Funtoo_Linux_Kernels| Funtoo Kernels Tutorial]].
</tr>
 
{{TableEnd}}
From there you should have a running system booting nicely from your own build (just little bit bloated) kernel. This is more than you can expect from any other ready to go distribution.
 
{{note|1=
We are using Red Hat's dracut in order to build a nice initramfs (containing all the necessary tools and extra drivers our kernel might need to start the system). Although dracut is the way to go, more sophisticated and not as buggy as gentoo's genkernel approach, more and more funtoo geeks start using slashbeast's better-initramfs, which we will cover at the end of this howto! So after having set up a genkernel from debian or gentoo sources we are going to build a kernel with either (or both) dracut or/and better-initramfs. So gentoo sources with genkernel is always my backup if anything is not working correctly on my system. For the slightly more geeky approach with my own initram I am using pf-sources, ck-sources or any other more or less heavily patched sources.}}
 
Let's go!
 
=== Kernel Sources ===
The source you use on your system is up to you. For a laptop or desktop system, the following are recommended:
* '''{{Package|sys-kernel/pf-sources}}'''
* '''{{Package|sys-kernel/ck-sources}}'''
* '''{{Package|sys-kernel/gentoo-sources}}'''
* '''{{Package|sys-kernel/git-sources}}'''
* '''{{Package|sys-kernel/sysrescue-std-sources}}'''
* '''{{Package|sys-kernel/debian-sources}}'''
{{note|If you are unsure of which sources you would like to use, emerge <code>gentoo-sources</code>. That's always a safe bet for a general system. For more information on available kernels, check out: [[Funtoo Linux Kernels]]}}
 
=== Prerequisites ===
 
Regardless of the tools you already have installed, it is recommended to follow the steps below, even if you find them to be redundant.
First, we edit our <code>/etc/portage/[[make.conf]]</code>:
 
<pre>
#These compiler flags are just tweaking (optimazation) and NOT necessary:
CFLAGS="-O2 -pipe -march=native -ftracer -fforce-addr"
CXXFLAGS="${CFLAGS} -fpermissive -fomit-frame-pointer"
KDIR=/usr/src/linux
KERNEL="symlink build"
USE="$KERNEL ....here are your use flags...."
## These modules are available:
## DRACUT_MODULES="dracut_modules_biosdevname dracut_modules_btrfs dracut_modules_caps dracut_modules_crypt dracut_modules_crypt-gpg dracut_modules_dmraid dracut_modules_dmsquash-live dracut_modules_gensplash dracut_modules_iscsi dracut_modules_livenet dracut_modules_lvm dracut_modules_mdraid dracut_modules_multipath dracut_modules_nbd dracut_modules_nfs dracut_modules_plymouth dracut_modules_ssh-client dracut_modules_syslog"
## We will use these modules for LVM / LUKS:
DRACUT_MODULES="crypt lvm plymouth biosdevname dmraid crypt-gpg dmsquash-live ssh-client syslog"
</pre>
 
Next, we set the package keywords by adding the following to <code>/etc/portage/package.use</code>:
 
<pre>
sys-kernel/dracut dm net device-mapper crypt lvm
</pre>
 
{{note|If you don't have lvm over encrypted LUKS you just add the "net" keyword here, or "selinux".}}
 
 
Next, we build our packages:
<console>
###i## emerge -av app-portage/gentoolkit sys-kernel/pf-sources sys-kernel/dracut sys-boot/plymouth sys-boot/plymouth-openrc-plugin
</console>
 
=== Preparing the kernel ===
 
We go now to the sources directory and enter the following commands to update the kernel's .config  file:
<console>
###i## cd /usr/src/linux/
###i## make clean
  CLEAN  .
  CLEAN  arch/x86/kernel/acpi/realmode
   CLEAN  arch/x86/kernel/cpu
   CLEAN  arch/x86/kernel
   CLEAN  arch/x86/vdso
  CLEAN  arch/x86/lib
  CLEAN  drivers/gpu/drm/radeon
   CLEAN  drivers/net/wan
   CLEAN  drivers/scsi/aic7xxx
   CLEAN  drivers/tty/vt
  CLEAN  drivers/video/logo
  CLEAN  firmware
  CLEAN  kernel
   CLEAN  lib/raid6
   CLEAN  lib
   CLEAN  security/apparmor
  CLEAN  security/selinux
  CLEAN  usr
   CLEAN  arch/x86/boot/compressed
   CLEAN  arch/x86/boot
  CLEAN  .tmp_versions
   CLEAN  vmlinux System.map .tmp_kallsyms2.S .tmp_kallsyms1.o .tmp_kallsyms2.o .tmp_kallsyms1.S .tmp_vmlinux1 .tmp_vmlinux2 .tmp_System.map
###i## zcat /proc/config.gz > /usr/src/linux/.config
</console>
 
Next, we run <code>make localmodconfig</code>. You will get some questions which you can answer mostly with either M (compiled as a module) or Y (compiled directly into the kernel). If you are not sure what to choose, press enter, and the default option will be selected.
<console>
###i## make localmodconfig
Enable different security models (SECURITY) [Y/n/?] y
Enable the securityfs filesystem (SECURITYFS) [Y/?] y
Socket and Networking Security Hooks (SECURITY_NETWORK) [Y/?] y
Security hooks for pathname based access control (SECURITY_PATH) [Y/?] y
Low address space for LSM to protect from user allocation (LSM_MMAP_MIN_ADDR) [65536] 65536
NSA SELinux Support (SECURITY_SELINUX) [Y/n/?] y
   NSA SELinux boot parameter (SECURITY_SELINUX_BOOTPARAM) [N/y/?] n
   NSA SELinux runtime disable (SECURITY_SELINUX_DISABLE) [N/y/?] n
   NSA SELinux Development Support (SECURITY_SELINUX_DEVELOP) [Y/n/?] y
  NSA SELinux AVC Statistics (SECURITY_SELINUX_AVC_STATS) [Y/n/?] y
  NSA SELinux checkreqprot default value (SECURITY_SELINUX_CHECKREQPROT_VALUE) [1] 1
   NSA SELinux maximum supported policy format version (SECURITY_SELINUX_POLICYDB_VERSION_MAX) [Y/n/?] y
    NSA SELinux maximum supported policy format version value (SECURITY_SELINUX_POLICYDB_VERSION_MAX_VALUE) [19] 19
TOMOYO Linux Support (SECURITY_TOMOYO) [Y/n/?] y
  Default maximal count for learning mode (SECURITY_TOMOYO_MAX_ACCEPT_ENTRY) [2048] 2048
  Default maximal count for audit log (SECURITY_TOMOYO_MAX_AUDIT_LOG) [1024] 1024
   Activate without calling userspace policy loader. (SECURITY_TOMOYO_OMIT_USERSPACE_LOADER) [Y/n/?] y
AppArmor support (SECURITY_APPARMOR) [Y/n/?] y
   AppArmor boot parameter default value (SECURITY_APPARMOR_BOOTPARAM_VALUE) [1] 1
Integrity Measurement Architecture(IMA) (IMA) [Y/n/?] y
EVM support (EVM) [N/y/?] (NEW)
Default security module
  1. SELinux (DEFAULT_SECURITY_SELINUX)
   2. TOMOYO (DEFAULT_SECURITY_TOMOYO)
   3. AppArmor (DEFAULT_SECURITY_APPARMOR)
> 4. Unix Discretionary Access Controls (DEFAULT_SECURITY_DAC)
choice[1-4?]: 4
warning: (ACPI_HOTPLUG_CPU) selects ACPI_CONTAINER which has unmet direct dependencies (ACPI && EXPERIMENTAL)
warning: (MEDIA_TUNER) selects MEDIA_TUNER_TEA5761 which has unmet direct dependencies (MEDIA_SUPPORT && VIDEO_MEDIA && I2C && EXPERIMENTAL)
#
# configuration written to .config
#
warning: (GFS2_FS) selects DLM which has unmet direct dependencies (EXPERIMENTAL && INET && SYSFS && CONFIGFS_FS && (IPV6 || IPV6=n))
warning: (IMA) selects TCG_TPM which has unmet direct dependencies (HAS_IOMEM && EXPERIMENTAL)
warning: (MEDIA_TUNER) selects MEDIA_TUNER_TEA5761 which has unmet direct dependencies (MEDIA_SUPPORT && VIDEO_MEDIA && I2C && EXPERIMENTAL)
warning: (ACPI_HOTPLUG_CPU) selects ACPI_CONTAINER which has unmet direct dependencies (ACPI && EXPERIMENTAL)
</console>
 
Now comes the most adventurous part!
 
=== Building the Kernel ===
<console>
###i## make -j8  bzImage
###i## make -j8 modules
###i## make modules_install
###i## make install
</console>
== Initramfs ==
{{warning|Make sure that you have built and installed your kernel sources / modules before building an initramfs.}}
To get your initramfs up and running, check out the [http://www.funtoo.org/Initramfs Initramfs] page. After following all the directions on the page to get your initramfs set up, continue following the ones here.
 
Update the <code>grub.cfg</code> with boot update, then reboot and see how it works!
<console>
###i## boot-update -v
###i## reboot
</console>
 
[[Category:HOWTO]]
[[Category:Featured]]
[[Category:Kernel]]

Revision as of 01:14, April 8, 2015

Requerimentos Mínimos

  • Entender as linhas de comando
  • Saber aonde os arquivos do kernel ficam localizados

Assumptions

You start from an installed Funtoo system on the disk, or at least, you are on stage3 in a chrooted environment from a live cd, following somehow the Funto Installation Tutorial.

Less advanced version

Emerging the kernel sources

To begin, we have to figure out which kernel sources we will use. If you are unsure about which sources are available and what their benefits and drawbacks are, check out the Kernels page.

After you have made a decsion as to which kernel you want to install, emerge it:

root # emerge sys-kernel/[kernel-name]

Portage will now go about installing the sources to /usr/src. However, it is preferable to also create a symlink with eselect as such:

root # eselect kernel set 1

You may use

root # eselect kernel list

to display a list of kernels currently installed.

Using the above command is useful, because it allows you to always be able to go to the directory "/usr/src/linux" and find your current working kernel and build files. The "/usr/src/linux" directory is simply a symlink to the kernel you selected with eselect, in the "/usr/src" directory.

Note that portage can also set this up for you automatically, by setting the "symlink" USE flag for your kernel.

Configuring the kernel

Now that the kernel sources are on your system, you should configure them. To do this, change your directory to /usr/src/linux

root # cd /usr/src/linux

We are now in the kernel sources directory, next sanitize the sources:

   Warning

this will delete your .config

root # make clean && make distclean && make mrproper

Copy configurations if you have previous configurations to copy:

root # cp /boot/config-3.13.7 .config

We can run a script that allows us to modify the configuration. Run:

root # make menuconfig

or

root # make nconfig


here is where you insert kernel configs, or press / to search for kernel modules by name

While you edit the sources, keep the following in mind:

  • To build something into your kernel, press y when you have it selected.
  • To exclude something from your kernel, press n when you have it selected.
  • To build something as a module, press m.


Things that you may need to include in your kernel:

as modules:

  • Wireless/LAN drivers
  • Support for your graphics card
  • Support for your audio card
  • Support for USB devices


as built in:

  • scsi sata & or ata controllers
  • file system used
   Note

Many pages on the wiki will tell you the kernel requirements for the application that they are about. Keep your eyes open for the blue background, white text sections of pages. Like on this one: uvesafb

Building and installing the kernel sources

After you finish configuring your kernel sources, you will need to build them. To build your sources, run the following:

root # make
   Tip

You can add -j<number of processing cores + 1> after make to build the kernel more quickly.

When the kernel and its modules finish building, install them:

root # make modules_install && make install

Now that you have installed your kernel and modules, it is a good idea to install an Initramfs.

  • If your system has a separate /usr partition, is encrypted, or uses some other non-standard configuration, it will probably not boot without an initramfs.
  • If your system is unencrypted, with file system, and hard drive controllers compiled in rather than as modules, it will not need an initramfs.

Advanced version

Getting ready to start

   Note

In this case we are building a kernel that is booting root in LVM over encrypted LUKS container. If you don't have this setup, don't worry, you just don't need all the modules, but everything else is similar.

First, there is the decision which linux kernel sources we need. There are plenty of them in the repositories around, often it is not easy to distinguish between them.

I would always trust my distribution of choice and take what is has to offer - and funtoo has a lot to offer!

I really do recommend (especially if it is your first time) to build a debian-sourced genkernel like described in chapter 5 "Using Debian-Sources with Genkernel" in the Funtoo Kernels Tutorial.

From there you should have a running system booting nicely from your own build (just little bit bloated) kernel. This is more than you can expect from any other ready to go distribution.

   Note

We are using Red Hat's dracut in order to build a nice initramfs (containing all the necessary tools and extra drivers our kernel might need to start the system). Although dracut is the way to go, more sophisticated and not as buggy as gentoo's genkernel approach, more and more funtoo geeks start using slashbeast's better-initramfs, which we will cover at the end of this howto! So after having set up a genkernel from debian or gentoo sources we are going to build a kernel with either (or both) dracut or/and better-initramfs. So gentoo sources with genkernel is always my backup if anything is not working correctly on my system. For the slightly more geeky approach with my own initram I am using pf-sources, ck-sources or any other more or less heavily patched sources.

Let's go!

Kernel Sources

The source you use on your system is up to you. For a laptop or desktop system, the following are recommended:

   Note

If you are unsure of which sources you would like to use, emerge gentoo-sources. That's always a safe bet for a general system. For more information on available kernels, check out: Funtoo Linux Kernels

Prerequisites

Regardless of the tools you already have installed, it is recommended to follow the steps below, even if you find them to be redundant. First, we edit our /etc/portage/make.conf:

#These compiler flags are just tweaking (optimazation) and NOT necessary:
CFLAGS="-O2 -pipe -march=native -ftracer -fforce-addr"
CXXFLAGS="${CFLAGS} -fpermissive -fomit-frame-pointer"
KDIR=/usr/src/linux
KERNEL="symlink build"
USE="$KERNEL ....here are your use flags...."
## These modules are available:
## DRACUT_MODULES="dracut_modules_biosdevname dracut_modules_btrfs dracut_modules_caps dracut_modules_crypt dracut_modules_crypt-gpg dracut_modules_dmraid dracut_modules_dmsquash-live dracut_modules_gensplash dracut_modules_iscsi dracut_modules_livenet dracut_modules_lvm dracut_modules_mdraid dracut_modules_multipath dracut_modules_nbd dracut_modules_nfs dracut_modules_plymouth dracut_modules_ssh-client dracut_modules_syslog"
## We will use these modules for LVM / LUKS:
DRACUT_MODULES="crypt lvm plymouth biosdevname dmraid crypt-gpg dmsquash-live ssh-client syslog"

Next, we set the package keywords by adding the following to /etc/portage/package.use:

sys-kernel/dracut dm net device-mapper crypt lvm
   Note

If you don't have lvm over encrypted LUKS you just add the "net" keyword here, or "selinux".


Next, we build our packages:

root # emerge -av app-portage/gentoolkit sys-kernel/pf-sources sys-kernel/dracut sys-boot/plymouth sys-boot/plymouth-openrc-plugin

Preparing the kernel

We go now to the sources directory and enter the following commands to update the kernel's .config file:

root # cd /usr/src/linux/
root # make clean
  CLEAN   .
  CLEAN   arch/x86/kernel/acpi/realmode
  CLEAN   arch/x86/kernel/cpu
  CLEAN   arch/x86/kernel
  CLEAN   arch/x86/vdso
  CLEAN   arch/x86/lib
  CLEAN   drivers/gpu/drm/radeon
  CLEAN   drivers/net/wan
  CLEAN   drivers/scsi/aic7xxx
  CLEAN   drivers/tty/vt
  CLEAN   drivers/video/logo
  CLEAN   firmware
  CLEAN   kernel
  CLEAN   lib/raid6
  CLEAN   lib
  CLEAN   security/apparmor
  CLEAN   security/selinux
  CLEAN   usr
  CLEAN   arch/x86/boot/compressed
  CLEAN   arch/x86/boot
  CLEAN   .tmp_versions
  CLEAN   vmlinux System.map .tmp_kallsyms2.S .tmp_kallsyms1.o .tmp_kallsyms2.o .tmp_kallsyms1.S .tmp_vmlinux1 .tmp_vmlinux2 .tmp_System.map
root # zcat /proc/config.gz > /usr/src/linux/.config

Next, we run make localmodconfig. You will get some questions which you can answer mostly with either M (compiled as a module) or Y (compiled directly into the kernel). If you are not sure what to choose, press enter, and the default option will be selected.

root # make localmodconfig
Enable different security models (SECURITY) [Y/n/?] y
Enable the securityfs filesystem (SECURITYFS) [Y/?] y
Socket and Networking Security Hooks (SECURITY_NETWORK) [Y/?] y
Security hooks for pathname based access control (SECURITY_PATH) [Y/?] y
Low address space for LSM to protect from user allocation (LSM_MMAP_MIN_ADDR) [65536] 65536
NSA SELinux Support (SECURITY_SELINUX) [Y/n/?] y
  NSA SELinux boot parameter (SECURITY_SELINUX_BOOTPARAM) [N/y/?] n
  NSA SELinux runtime disable (SECURITY_SELINUX_DISABLE) [N/y/?] n
  NSA SELinux Development Support (SECURITY_SELINUX_DEVELOP) [Y/n/?] y
  NSA SELinux AVC Statistics (SECURITY_SELINUX_AVC_STATS) [Y/n/?] y
  NSA SELinux checkreqprot default value (SECURITY_SELINUX_CHECKREQPROT_VALUE) [1] 1
  NSA SELinux maximum supported policy format version (SECURITY_SELINUX_POLICYDB_VERSION_MAX) [Y/n/?] y
    NSA SELinux maximum supported policy format version value (SECURITY_SELINUX_POLICYDB_VERSION_MAX_VALUE) [19] 19
TOMOYO Linux Support (SECURITY_TOMOYO) [Y/n/?] y
  Default maximal count for learning mode (SECURITY_TOMOYO_MAX_ACCEPT_ENTRY) [2048] 2048
  Default maximal count for audit log (SECURITY_TOMOYO_MAX_AUDIT_LOG) [1024] 1024
  Activate without calling userspace policy loader. (SECURITY_TOMOYO_OMIT_USERSPACE_LOADER) [Y/n/?] y
AppArmor support (SECURITY_APPARMOR) [Y/n/?] y
  AppArmor boot parameter default value (SECURITY_APPARMOR_BOOTPARAM_VALUE) [1] 1
Integrity Measurement Architecture(IMA) (IMA) [Y/n/?] y
EVM support (EVM) [N/y/?] (NEW)
Default security module
  1. SELinux (DEFAULT_SECURITY_SELINUX)
  2. TOMOYO (DEFAULT_SECURITY_TOMOYO)
  3. AppArmor (DEFAULT_SECURITY_APPARMOR)
> 4. Unix Discretionary Access Controls (DEFAULT_SECURITY_DAC)
choice[1-4?]: 4
warning: (ACPI_HOTPLUG_CPU) selects ACPI_CONTAINER which has unmet direct dependencies (ACPI && EXPERIMENTAL)
warning: (MEDIA_TUNER) selects MEDIA_TUNER_TEA5761 which has unmet direct dependencies (MEDIA_SUPPORT && VIDEO_MEDIA && I2C && EXPERIMENTAL)
root #
root # configuration written to .config
root #
warning: (GFS2_FS) selects DLM which has unmet direct dependencies (EXPERIMENTAL && INET && SYSFS && CONFIGFS_FS && (IPV6 || IPV6=n))
warning: (IMA) selects TCG_TPM which has unmet direct dependencies (HAS_IOMEM && EXPERIMENTAL)
warning: (MEDIA_TUNER) selects MEDIA_TUNER_TEA5761 which has unmet direct dependencies (MEDIA_SUPPORT && VIDEO_MEDIA && I2C && EXPERIMENTAL)
warning: (ACPI_HOTPLUG_CPU) selects ACPI_CONTAINER which has unmet direct dependencies (ACPI && EXPERIMENTAL)

Now comes the most adventurous part!

Building the Kernel

root # make -j8  bzImage
root # make -j8 modules
root # make modules_install
root # make install

Initramfs

   Warning

Make sure that you have built and installed your kernel sources / modules before building an initramfs.

To get your initramfs up and running, check out the Initramfs page. After following all the directions on the page to get your initramfs set up, continue following the ones here.

Update the grub.cfg with boot update, then reboot and see how it works!

root # boot-update -v
root # reboot