From f7f224aacde013931e551db637aa14e0090b3dfc Mon Sep 17 00:00:00 2001
From: Denis Chevalier <perso@denischevalier.fr>
Date: Thu, 6 Aug 2026 10:16:18 +0200
Subject: install linux-hardened

---
 all                                    |  7 +++++--
 etc.bash                               |  4 ++++
 etc/mkinitcpio.d/linux-hardened.preset | 18 ++++++++++++++++++
 3 files changed, 27 insertions(+), 2 deletions(-)
 create mode 100644 etc/mkinitcpio.d/linux-hardened.preset

diff --git a/all b/all
index ecb0d23..789135f 100644
--- a/all
+++ b/all
@@ -18,14 +18,17 @@ hdparm
 htop
 iotop
 keyd
-kiwix
+kiwix-desktop
 lazygit
 librewolf-bin
+linux-hardened
+linux-hardened-docs
+linux-hardened-headers
 luarocks
 man-db
 mesa-utils
 mtools
-mupdf
+mupdf-gl
 neovim
 nodejs
 noto-fonts
diff --git a/etc.bash b/etc.bash
index 52a59b3..47c3ab2 100755
--- a/etc.bash
+++ b/etc.bash
@@ -17,3 +17,7 @@ sudo systemctl enable --now ufw
 
 # fs trim
 sudo systemctl enable --now fstrim.timer
+
+# linux-hardened
+sudo cp etc/mkinitcpio.d/linux-hardened.preset /etc/mkinitcpio.d
+sudo mkinitcpio -p linux-hardened
diff --git a/etc/mkinitcpio.d/linux-hardened.preset b/etc/mkinitcpio.d/linux-hardened.preset
new file mode 100644
index 0000000..588980b
--- /dev/null
+++ b/etc/mkinitcpio.d/linux-hardened.preset
@@ -0,0 +1,18 @@
+# mkinitcpio preset file for the 'linux-hardened' package
+
+#ALL_config="/etc/mkinitcpio.conf"
+ALL_kver="/boot/vmlinuz-linux-hardened"
+#ALL_kerneldest="/boot/vmlinuz-linux-hardened"
+
+PRESETS=('default')
+#PRESETS=('default' 'fallback')
+
+#default_config="/etc/mkinitcpio.conf"
+# default_image="/boot/initramfs-linux-hardened.img"
+default_uki="/boot/EFI/Linux/arch-linux-hardened.efi"
+default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp"
+
+#fallback_config="/etc/mkinitcpio.conf"
+#fallback_image="/boot/initramfs-linux-hardened-fallback.img"
+fallback_uki="/boot/EFI/Linux/arch-linux-hardened-fallback.efi"
+#fallback_options="-S autodetect"
-- 
cgit