diff options
| author |  sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-29 11:18:12 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-29 11:18:12 +0100 |
| commit | 8ebe3f106e53dc4032428a2e3435c4feea969087 (patch) | |
| tree | 4c77d0260a02383ed2ab73ad3ea1189bc0951c4d /dot_lldbinit | |
| parent | 0ccd0743ef845084a1b410fa1f0a36946dbb9e8d (diff) | |
| download | dotfiles-8ebe3f106e53dc4032428a2e3435c4feea969087.tar.gz dotfiles-8ebe3f106e53dc4032428a2e3435c4feea969087.tar.bz2 dotfiles-8ebe3f106e53dc4032428a2e3435c4feea969087.zip | |
feat(boot): add linux-hardened as parallel UKI
Installs linux-hardened + linux-hardened-headers alongside the stock
linux kernel. Stock kernel remains the default; linux-hardened is opt-in
via efibootmgr --bootnext after the EFI entry is registered (one-time
host-side step, documented in the preset).
After first 'just pkg-apply', mkinitcpio auto-builds
/boot/EFI/Linux/arch-linux-hardened.efi from the new preset (sharing
etc/kernel/cmdline.tmpl with the stock UKI — same LUKS root, no
kernel-specific cmdline knobs).
Host-side EFI entry registration:
sudo efibootmgr --create --disk /dev/nvme0n1 --part 1 \
--label 'Arch Hardened' --loader '\\EFI\\Linux\\arch-linux-hardened.efi'
Roll back any time by removing both packages and the preset file; the
stock kernel and its UKI are untouched.
Diffstat (limited to 'dot_lldbinit')
0 files changed, 0 insertions, 0 deletions