This repository tracks the hardened Linux kernel from the Arch Linux repositories (link). This is performed using GitHub's continuous integration, where the ci-kernel-hardened.py script is ran every 3 hours to check for new updates. If there are any, then the kernel-hardened.spec file is automatically updated, triggering the Hard Hat Copr repository (link) to automatically start the build process for the latest version of Fedora Linux.
All commands will need to be entered as the root user.
-
Enable the Hard Hat Copr repository:
dnf copr enable hardhatos/release -
Update the cache:
dnf update -
Install the package:
dnf install kernel-hardened
- If you boot into the hardened kernel at least once then the next time you boot into the vanilla Fedora kernel you will have to wait for SELinux to perform a full system relabel. Once the relabel is complete the system will reboot one last time, so make sure you choose the vanilla kernel again to avoid having to go through this process.