This repository tracks the hardened Linux kernel from the Arch Linux repositories (link). This is performed using GitHub's continuous integration, where the ci-kernel-hardened.py script is ran every 3 hours to check for new updates. If there are any, then the kernel-hardened.spec file is automatically updated, triggering the Hard Hat COPR repository (link) to automatically start the build process for the latest version of Fedora Linux.
N.B: This repo exists as the original maintainer doesn't want to continue the project. This COPR exists because the original packages are outdated.
All commands will need to be entered with high privileges (sudo -i).
-
Enable the Hard Hat Copr repository:
dnf copr enable samsepi0l/HardHatOS -
Update the cache:
dnf update -
Install the package:
dnf install kernel-hardened
- If you boot into the hardened kernel at least once then the next time you boot into the vanilla Fedora kernel you will have to wait for SELinux to perform a full system relabel. Once the relabel is complete the system will reboot one last time, so make sure you choose the vanilla kernel again to avoid having to go through this process.