From f80eab1144f0a14a03b614dc6789defcfa20ce69 Mon Sep 17 00:00:00 2001 From: Denis Chevalier Date: Thu, 6 Aug 2026 14:25:50 +0200 Subject: update linux presets --- etc.bash | 4 +++- etc/mkinitcpio.d/linux-hardened.preset | 1 + etc/mkinitcpio.d/linux-lts.preset | 19 +++++++++++++++++++ etc/mkinitcpio.d/linux.preset | 19 +++++++++++++++++++ 4 files changed, 42 insertions(+), 1 deletion(-) create mode 100644 etc/mkinitcpio.d/linux-lts.preset create mode 100644 etc/mkinitcpio.d/linux.preset diff --git a/etc.bash b/etc.bash index fda089f..ebb16fa 100755 --- a/etc.bash +++ b/etc.bash @@ -28,8 +28,10 @@ sudo systemctl enable --now ufw # fail2ban sudo cp -v ./etc/fail2ban/jail.d/sshd.conf /etc/fail2ban/jail.d/ -# linux-hardened +# linux presets sudo cp -v ./etc/mkinitcpio.d/linux-hardened.preset /etc/mkinitcpio.d +sudo cp -v ./etc/mkinitcpio.d/linux-lts.preset /etc/mkinitcpio.d +sudo cp -v ./etc/mkinitcpio.d/linux.preset /etc/mkinitcpio.d # harden systemd services echo "==> Creating drop-in override directories..." diff --git a/etc/mkinitcpio.d/linux-hardened.preset b/etc/mkinitcpio.d/linux-hardened.preset index 588980b..9574be5 100644 --- a/etc/mkinitcpio.d/linux-hardened.preset +++ b/etc/mkinitcpio.d/linux-hardened.preset @@ -2,6 +2,7 @@ #ALL_config="/etc/mkinitcpio.conf" ALL_kver="/boot/vmlinuz-linux-hardened" +ALL_microcode=(/boot/intel-ucode.img) #ALL_kerneldest="/boot/vmlinuz-linux-hardened" PRESETS=('default') diff --git a/etc/mkinitcpio.d/linux-lts.preset b/etc/mkinitcpio.d/linux-lts.preset new file mode 100644 index 0000000..f48eb34 --- /dev/null +++ b/etc/mkinitcpio.d/linux-lts.preset @@ -0,0 +1,19 @@ +# mkinitcpio preset file for the 'linux-lts' package + +#ALL_config="/etc/mkinitcpio.conf" +ALL_kver="/boot/vmlinuz-linux-lts" +ALL_microcode=(/boot/intel-ucode.img) +#ALL_kerneldest="/boot/vmlinuz-linux-lts" + +PRESETS=('default') +#PRESETS=('default' 'fallback') + +#default_config="/etc/mkinitcpio.conf" +#default_image="/boot/initramfs-linux-lts.img" +default_uki="/boot/EFI/Linux/arch-linux-lts.efi" +default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp" + +#fallback_config="/etc/mkinitcpio.conf" +##fallback_image="/boot/initramfs-linux-lts-fallback.img" +fallback_uki="/boot/EFI/Linux/arch-linux-lts-fallback.efi" +#fallback_options="-S autodetect" diff --git a/etc/mkinitcpio.d/linux.preset b/etc/mkinitcpio.d/linux.preset new file mode 100644 index 0000000..abecd7b --- /dev/null +++ b/etc/mkinitcpio.d/linux.preset @@ -0,0 +1,19 @@ +# mkinitcpio preset file for the 'linux' package + +#ALL_config="/etc/mkinitcpio.conf" +ALL_kver="/boot/vmlinuz-linux" +ALL_microcode=(/boot/intel-ucode.img) +#ALL_kerneldest="/boot/vmlinuz-linux" + +PRESETS=('default') +#PRESETS=('default' 'fallback') + +#default_config="/etc/mkinitcpio.conf" +#default_image="/boot/initramfs-linux.img" +default_uki="/boot/EFI/Linux/arch-linux.efi" +default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp" + +#fallback_config="/etc/mkinitcpio.conf" +##fallback_image="/boot/initramfs-linux-fallback.img" +fallback_uki="/boot/EFI/Linux/arch-linux-fallback.efi" +#fallback_options="-S autodetect" -- cgit