summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rwxr-xr-xetc.bash4
-rw-r--r--etc/mkinitcpio.d/linux-hardened.preset1
-rw-r--r--etc/mkinitcpio.d/linux-lts.preset19
-rw-r--r--etc/mkinitcpio.d/linux.preset19
4 files changed, 42 insertions, 1 deletions
diff --git a/etc.bash b/etc.bash
index fda089f..ebb16fa 100755
--- a/etc.bash
+++ b/etc.bash
@@ -28,8 +28,10 @@ sudo systemctl enable --now ufw
# fail2ban
sudo cp -v ./etc/fail2ban/jail.d/sshd.conf /etc/fail2ban/jail.d/
-# linux-hardened
+# linux presets
sudo cp -v ./etc/mkinitcpio.d/linux-hardened.preset /etc/mkinitcpio.d
+sudo cp -v ./etc/mkinitcpio.d/linux-lts.preset /etc/mkinitcpio.d
+sudo cp -v ./etc/mkinitcpio.d/linux.preset /etc/mkinitcpio.d
# harden systemd services
echo "==> Creating drop-in override directories..."
diff --git a/etc/mkinitcpio.d/linux-hardened.preset b/etc/mkinitcpio.d/linux-hardened.preset
index 588980b..9574be5 100644
--- a/etc/mkinitcpio.d/linux-hardened.preset
+++ b/etc/mkinitcpio.d/linux-hardened.preset
@@ -2,6 +2,7 @@
#ALL_config="/etc/mkinitcpio.conf"
ALL_kver="/boot/vmlinuz-linux-hardened"
+ALL_microcode=(/boot/intel-ucode.img)
#ALL_kerneldest="/boot/vmlinuz-linux-hardened"
PRESETS=('default')
diff --git a/etc/mkinitcpio.d/linux-lts.preset b/etc/mkinitcpio.d/linux-lts.preset
new file mode 100644
index 0000000..f48eb34
--- /dev/null
+++ b/etc/mkinitcpio.d/linux-lts.preset
@@ -0,0 +1,19 @@
+# mkinitcpio preset file for the 'linux-lts' package
+
+#ALL_config="/etc/mkinitcpio.conf"
+ALL_kver="/boot/vmlinuz-linux-lts"
+ALL_microcode=(/boot/intel-ucode.img)
+#ALL_kerneldest="/boot/vmlinuz-linux-lts"
+
+PRESETS=('default')
+#PRESETS=('default' 'fallback')
+
+#default_config="/etc/mkinitcpio.conf"
+#default_image="/boot/initramfs-linux-lts.img"
+default_uki="/boot/EFI/Linux/arch-linux-lts.efi"
+default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp"
+
+#fallback_config="/etc/mkinitcpio.conf"
+##fallback_image="/boot/initramfs-linux-lts-fallback.img"
+fallback_uki="/boot/EFI/Linux/arch-linux-lts-fallback.efi"
+#fallback_options="-S autodetect"
diff --git a/etc/mkinitcpio.d/linux.preset b/etc/mkinitcpio.d/linux.preset
new file mode 100644
index 0000000..abecd7b
--- /dev/null
+++ b/etc/mkinitcpio.d/linux.preset
@@ -0,0 +1,19 @@
+# mkinitcpio preset file for the 'linux' package
+
+#ALL_config="/etc/mkinitcpio.conf"
+ALL_kver="/boot/vmlinuz-linux"
+ALL_microcode=(/boot/intel-ucode.img)
+#ALL_kerneldest="/boot/vmlinuz-linux"
+
+PRESETS=('default')
+#PRESETS=('default' 'fallback')
+
+#default_config="/etc/mkinitcpio.conf"
+#default_image="/boot/initramfs-linux.img"
+default_uki="/boot/EFI/Linux/arch-linux.efi"
+default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp"
+
+#fallback_config="/etc/mkinitcpio.conf"
+##fallback_image="/boot/initramfs-linux-fallback.img"
+fallback_uki="/boot/EFI/Linux/arch-linux-fallback.efi"
+#fallback_options="-S autodetect"