58 Commits

Author SHA1 Message Date
8fe5296f48
Add "/usr/local/src/compile/" filesystem 2024-02-13 04:26:16 +00:00
6ff0f06cc1
Sort "/var/tmp/portage/" mount options alphabetically 2024-02-13 04:24:13 +00:00
8aafa9f082
Set "/var/tmp/portage/" to automatically mount on boot 2024-02-13 04:22:56 +00:00
32b21b30b2
Explicitly disable sticky bits for "/var/tmp/portage/" 2024-02-13 04:21:12 +00:00
6d05455834
Increase "/var/tmp/portage/" capacity from 16 GiB to 32 GiB 2024-02-13 04:20:25 +00:00
a93e1d3071
Move "/var/tmp/portage/" to more logical position 2024-02-13 04:19:04 +00:00
443ef430f0
Add "/tmp/" filesystem 2024-02-13 04:17:06 +00:00
bcb34c2b6b
Add "/run/" filesystem 2024-02-13 04:15:11 +00:00
df9faddd17
Set "/" pass count to 0
Bcachefs does not require boot-time fsck by design, due to its
self-contained filesystem checking during mounting and usage.
2024-02-13 04:12:53 +00:00
2d670ddee8
Add rw mount option to "/"
Make sure the root device is mounted as read-write.
2024-02-13 03:06:24 +00:00
447787d902
Add degraded mount option to "/"
Bcachefs does not permit mounting degraded filesystems by default. This
is not desirable since at least 1 working device of a filesystem can
still be used and should not prevent mounting of the filesystem.
2024-02-13 03:04:57 +00:00
19bc218738
Switch "/" filesystem from Btrfs to Bcachefs
System aa000-0's root device has switched from Btrfs to Bcachefs.
2024-02-13 03:03:51 +00:00
ab6ffe04e4
Add nosuid to "swap"
Prevent setting setuid bit on files within the swap device since it
holds no userspace executables.
2024-02-13 03:02:07 +00:00
4381e9860e
Add noexec to "swap"
Swap holds nothing executable.
2024-02-13 03:00:56 +00:00
59ad636009
Add noatime to "swap"
Access times are not required for swap; increase performance by
disabling access time functionality.
2024-02-13 02:59:03 +00:00
88a712570f
Set "swap" to automatically mount on boot 2024-02-13 02:58:27 +00:00
c7fe3a07bd
Move "swap" to bottom of local filesystems section 2024-02-13 02:57:35 +00:00
7ff2644343
Disable boot-time fsck on "/boot/" 2024-02-13 02:55:20 +00:00
d47ee10a87
Add nosuid to "/boot/"
Prevent setting setuid bit on files within the boot device since it
holds no userspace executables.
2024-02-13 02:53:22 +00:00
e4ecfa03e1
Add noexec to "/boot/"
Prevent execution on boot device since it holds no userspace
executables.
2024-02-13 02:51:45 +00:00
daf362fa21
Switch "/boot/" from partition UUID to filesystem UUID 2024-02-13 02:50:20 +00:00
ba9ac7f451
Switch to actual mount point names 2024-02-13 02:40:58 +00:00
4992fb2673
Add empty line to improve readability 2024-02-13 02:38:35 +00:00
b63bf70e4f
Improve pass count comment structure 2024-02-13 02:38:06 +00:00
72f8c1025d
Use full name for file title 2024-02-13 02:34:02 +00:00
f71039e860
Move version string above copyright and licensing information 2024-02-13 02:33:03 +00:00
d63c6e6cf8
Add device offset
Adding an offset allows using a pinned UUID for the device via the
pre-offset location on-device. The encryption occurs at the point of the
offset, preventing erasure of the UUID, allowing partition UUID to be
used as the target.
2024-02-13 02:24:12 +00:00
f1a6e2589a
Fix key size argument
`--size` is used for 512-byte sector count, limiting the usable space of
the encrypted device. Key size is controlled via `--key-size`.
2024-02-13 02:17:06 +00:00
2522dcdb59
Switch from device name to partition UUID
Using partition UUID is safer than device name as it prevents accidental
erasure of incorrect devices should the device names change.
2024-02-13 02:14:52 +00:00
0a462c791f
Wrap values in quotation marks 2024-02-13 02:13:38 +00:00
a59365241d
Move version string above copyright and licensing information 2024-02-13 02:11:03 +00:00
49746dfc34
Update package list 2023-10-15 11:15:26 +01:00
7fe2406b52
Switch to Semantic Versioning 2023-10-15 09:37:35 +01:00
56f1704f19
Remove duplicate C_SEC flags 2023-10-15 09:27:53 +01:00
33483a5138
Remove duplicate LD_SEC flags 2023-10-15 09:23:07 +01:00
8a34c3db5a
Add control-flow protection 2023-10-15 09:20:16 +01:00
0a4d330123
Switch from long-form optimise argument to short-form
Long-form optimise argument breaks optimisation in build systems,
causing build failures and possibly undefined behaviour.
2023-10-15 09:15:41 +01:00
56fc1d6711
Remove LibreWolf env
LibreWolf now builds using system flags due to using Clang 16+ flags
which removes the need for its own env using different flags.
2023-10-14 20:50:50 +01:00
e32c702a11
Remove IPv4 comment 2023-10-14 20:00:50 +01:00
dda7a9252c
Force Ruby 32 target 2023-10-14 19:58:05 +01:00
8ab369f1b9
Force Python 3.12 target 2023-10-14 19:57:09 +01:00
03fefa2ef4
Remove USE flag "kmod" 2023-10-14 19:54:39 +01:00
725d2fb55c
Add Video Acceleration API 2023-10-14 19:51:44 +01:00
68fbcff36d
Increase LTO jobs from 4 to 12 2023-10-14 19:49:40 +01:00
8742612391
Remove Rust embed bitcode argument
Forcing embedding bitcode on Rust compilation causes build failures for
some packages.
2023-10-14 19:46:18 +01:00
c55607bc44
Remove Rust LTO argument
Forcing LTO on Rust compilation causes build failures with some
packages.
2023-10-14 19:42:41 +01:00
04f34e209c
Switch from long-form optimise argument to short-form
Long-form optimise argument breaks optimisation in build systems,
causing build failures and possibly undefined behaviour.
2023-10-14 19:34:44 +01:00
9390ec1621
Increase make jobs from 4 to 12 2023-10-14 19:33:24 +01:00
305761d4b9
Switch from signed integer overflow wrapping to trapping 2023-10-14 19:11:34 +01:00
3e1d8116d1
Add control-flow protection 2023-10-14 19:07:06 +01:00