Did you seen similar script on mempo?

[rfree]

Hello, your script reminds me of my script, that we we written over year ago (more like 2 afair).

We had such script and then upgraded it by adding

• GPG checking of downloaded files
• checking of expected checksums
• edited the .conf files to use grsec, and given 4 configuration/security levels
• checking prerequested libraries
• deterministic build - each time you should get identical .deb
• scripts to automatically update the release (get new config, write it's hash, edit changelog, edit config version number etc)

https://github.com/mempo/deterministic-kernel/tree/master
https://github.com/mempo/deterministic-kernel/blob/master/kernel-build/linux-mempo/build.sh
and more scripts

We distribute resulting kernels at deb repo on http://deb.mempo.org/

Since you are also interested in the Grsecurity for Debian, why not join forces, there are many things to improve together :)

Contact us, see contact section on http://mempo.org and join IRC chat #mempo on server irc.oftc.net or freenode (or irc2p from geti2p.net)

[adrelanos]

Joint forces would make sense. I am also interested in that.

[rfree]

Cool :) Could you contact me on rfree@dukgo.com (JABBER, not email)? Usually I am also on domain mempo.org but currently this is not working.
Also our irc #mempo on freenode, oftc and i2p.

If you set up the environment as described in
https://wiki.debian.org/SameKernel/#build

then you can repeat our builds.

Do it please at least once to know ow it works.

Then next we could

• develop better deb packages
• use the reproducible build tools in current version

[rickard2]

Sorry for the late reply, but I haven't been working on this project lately.

Your project seems really interesting but unfortunately this is not a focus of mine at the moment and I haven't been using grsec myself in a long time.

I'll keep the issue open for others to see and maybe we could collaborate if I find the time to work on this again.

[rfree]

Allright @rickard2 . Perhaps using http://deb.pl.mempo.org/ would allow you to get using grsec on your Debian again?

It supports only Wheezy now, but I hope we will get it really fully working and ready for mass use in next month.

Is there any problem stopping you from using grsec kernels? maybe I can help.

[rickard2]

I used to run grsec on some internal machines at work but I discovered that the clock will get way out of sync when you're not running virtualbox kernel drivers. I haven't had the time to research how to compile grsec kernel with virtualbox kernel drivers so that the host can manage time in the guest.

[rickard2]

Btw what's up with your domain? deb.mempo.org takes me to some polish website and www. doesn't work at all.

[BertrandBataille]

The only place you can get mempo now appears to be freenet. I just gave up (which sucks, because I'd love to try it).

[rfree]

@BertrandBataille @rickard2 all works on http://deb.pl.mempo.org/ (around 98% uptime since months)

no one had time yet to work again on the site itself, but there is 100% support for everyone using the Mempo system now, I run it on all computers, servers and desktops, and personally know few other users.

Indeed the Freenet mirror will work always since it's not dependant on any server at all, but the fast www download from normal HTTP mirror with DEB repository works all the time there on deb.pl.mempo.org :)

Thanks to a nice donation to our bitcoin
https://blockchain.info/address/152fnfBqRjVMDvRa5LQ2upx9tJAeHnyqHC
there should be more work time available to take care of mempo.org itself I bet.

[rfree]

also the newest 135 version is uploaded right now, will be ready in few minutes :)