Build Configuration

From Kicksecure
Revision as of 20:46, 29 November 2024 by Nurmagoz (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Kicksecure Build Configuration. APT Repository, Onion Sources, APT Cache, VM Settings, Skip Steps, Source Code Changes

Note: All of the following build configuration steps are optional.

Introduction[edit]

Usually the build configuration does not need to be changed. Kicksecure built from source code comes with safe defaults. Whonix's APT Repository will not be used.

The most interesting build configurations (Terminal-Only, NoDefaultApps etc.) are documented in the following chapters.

If you are interested, click on Expand on the right.

Platforms Choice[edit]

Advanced users can create 32-bit instead of 64-bit builds.

If you are interested, click on Expand on the right.

Kicksecure APT Repository[edit]

Kicksecure:
Kicksecure APT Repository is disabled by default [6] for builds from source code for reasons of Trust. Users can decide to update Kicksecure Debian packages by building them from source code (greater security). Alternatively, Kicksecure APT repository can be enabled right after building or after booting the build for the first time (greater convenience) using Kicksecure repository tool. To use the latter method which sacrifices security for convenience, click on Expand on the right side.

APT Onion Build Sources[edit]

For better build security, you can also use onions apt sources for building Kicksecure.

If you are interested, click on Expand on the right.

1) Also chapter below has to be considered.

2) See also: https://forums.whonix.org/t/derivative-maker-fails-with-onion-sources/20200archive.org iconarchive.today icon

Torified or Host APT Cache[edit]

Using an apt cache will greatly improve build speed when building several times in a row (e.g. when debugging, during development). Kicksecure build script sets up an apt cache by default.

If you are interested in a torified apt-cacher-ng or host apt-cacher-ng, click on Expand on the right.

VM Settings[edit]

If building VMs, settings such as image size, RAM, filesystem, hostname and password can be customized.

If you are interested, press on expand on the right side.

Build Variables Changes[edit]

It is possible to add build configuration files snippets which can change build variables.

Skip Steps[edit]

Developers users can speed up the build and skip sanity tests.

If you are interested, click on Expand on the right.

Source Code Changes[edit]

This is only required if changes were made to the derivative-maker source folder! In that case click on Expand on the right.

This is not required if only a customized build configuration was added to the /etc/buildconfig-dist.d.d folder.


Footnotes[edit]

  1. ↑ State of official 64-bit buildsarchive.org iconarchive.today icon.
  2. ↑ Don't get confused by the term amd64. It runs on both, Intel and AMD. amd64 is only how Debian names the kernel. It works equally well on Intel and AMD.
  3. ↑ kFreeBSD (32-bit). 
    --arch kfreebsd-i386 --kernel kfreebsd-image --headers kfreebsd-headers

    kFreeBSD (64-bit). 

    --arch kfreebsd-amd64 --kernel kfreebsd-image --headers kfreebsd-headers
  4. ↑ https://github.com/grml/grml-debootstrap/pull/13archive.org iconarchive.today icon
  5. ↑ In this case, try installing the packages linux-image-amd64 and linux-headers-amd64 on your host, then boot the amd64 kernel by choosing it in the boot menu. The whole system does not require re-installation; just be sure to boot with an amd64 kernel. Alternatively, consider to re-install your host using amd64.
  6. ↑ Since Kicksecure 7.3.3
  7. ↑
    • The first Click = Copy Copied to clipboard! ExecStart= is to disable the default ExecStart in /lib/systemd/system/apt-cacher-ng.service.
    • This is based on Click = Copy Copied to clipboard! /lib/systemd/system/apt-cacher-ng.service .
    • Only Click = Copy Copied to clipboard! torsocks is prepended in front of Click = Copy Copied to clipboard! /usr/sbin/apt-cacher-ng
    • No other changes.
  8. ↑ The dist-base-filesarchive.org iconarchive.today icon package will change this later on.
  9. ↑ Since you would have to either:
    • A) git commit your build config files, OR,
    • B) See chapter source code changes below.
  10. ↑ This is because .. means "one level below this folder".
Your support makes
all the difference!

We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 12 year success story and maybe DONATE!

Retrieved from "https://www.kicksecure.com/w/index.php?title=Build_Configuration&oldid=88951"