Skip to content

Instantly share code, notes, and snippets.

View ptr1337's full-sized avatar
🐢
Working on CachyOS

Peter Jung ptr1337

🐢
Working on CachyOS
182 followers · 44 following
View GitHub Profile
@ptr1337
ptr1337 / gcc-security.txt
Created July 10, 2021 18:55 — forked from jrelo/gcc-security.txt
GCC security related flags reference.
Source material:
http://security.stackexchange.com/questions/24444/what-is-the-most-hardened-set-of-options-for-gcc-compiling-c-c
https://wiki.gentoo.org/wiki/Hardened_Gentoo
https://wiki.debian.org/Hardening
================================================================================================================>
GCC Security related flags and options:
CFLAGS="-fPIE -fstack-protector-all -D_FORTIFY_SOURCE=2"
LDFLAGS="-Wl,-z,now -Wl,-z,relro"
@ptr1337
ptr1337 / 0003-andikleen-lto-5.12-3-3fb2a4dd-for-5.12.3.patch
Created August 1, 2021 08:18
From 841d090cab781709c26974af8309ac309ec32875 Mon Sep 17 00:00:00 2001
From: mssx86 <mss@tutanota.de>
Date: Thu, 13 May 2021 21:43:18 +0300
Subject: [PATCH] andikleen lto-5.12-3 3fb2a4dd for 5.12.3.
---
Documentation/bpf/btf.rst | 4 ++
Documentation/kbuild/lto-build.rst | 70 ++++++++++++++++++++
Kbuild | 3 +
Makefile | 9 ++-
@ptr1337
ptr1337 / Arch Secure Laptop Install.md
Created December 22, 2021 18:57 — forked from Th3Whit3Wolf/Arch Secure Laptop Install.md
My install instruction for a secure Arch Linux (sway) laptop workstation

What's Cool

  • Encrypted root partition
    • AES-256 bit cipher
    • Argon2id variant for PBKDF
    • Sha3-512 bit hash
  • rEFInd bootloader
    • With dreary theme
    • Optimal Settings (optimized for aesthetics, and boot time)
  • Boot into backups thanks to refind-btrfs
@ptr1337
ptr1337 / Arch Secure Laptop Install.md
Created February 10, 2022 03:04
My install instruction for a secure Arch Linux (sway) laptop workstation

WARNING from TellyO3 WORK IN PROGRESS

I am a novice Linux user, please take all my edits with a grain of salt. I wanted it to work a bit better for a number of reasons. The original guide was written early 2021, it is February 2022 as of now. Some of the utilities, like the original custom kernel are deprecated. Additionally some AUR repos are not up to date, as is the case with auto-cpufreq which was last updated months ago. I also included some troubleshooting tips, based on issues I encountered. Feel free to leave any suggestions or tips, it would be greatly appreciated.

My goal is also to have a more template like setup, give you the utilities you need but not anything else. Especially the first setup had a lot of extra's which were absolutely not necessary and it took me a lot of time to disect some of that from what is actually used in the setup.

  • No GDM, because I don't want its gnome dependencies if I don't use them
  • Many packages were changed or made optional
  • Xanmod-TT