Shahee Mirza shaheemirza

Building a grsec-patched Linux kernel for Debian 8 and DigitalOcean

It's possible to run a custom (instead of hypervisor-managed) kernel for use with Debian 8.x on a DigitalOcean droplet.

We'll build one with grsecurity, "an extensive security enhancement to the Linux kernel that defends against a wide range of security threats through intelligent access control, memory corruption-based exploit prevention, and a host of other system hardening".

Note: The stable patches for Linux 3.14.x and 3.2.x are not publicly available anymore, so we'll be applying the free 4.2.x (test) patch. The URLs and filenames in this document may become outdated, so fetch the latest from grsecurity.net and kernel.org.

Install dependencies:

	#PROLOGUE: all this should be run as root, otherwise stated

	#update && upgrade:
	apt-get update && apt-get upgrade -y

	#create a new user
	adduser user_x

	#create group admin (funny enough, it does not exist, although its accounted in the /etc/sudoers file):
	addgroup --system admin

	#!/bin/bash
	set -e

	# Debian 8 'Jessie' GlusterFS Install
	#########
	#ToDo:
	# * Change guid/suid of mount
	# * Give option for cluster type
	# * Change variables via command line read
	########