Sanity test. 'make oldconfig' should not modify '.config'."

https://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598/317
Kicksecure · Jan 22, 2020 · 330e67c · 330e67c
1 parent 9871377
commit 330e67c
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/usr/share/hardened-kernel/build b/usr/share/hardened-kernel/build
@@ -56,6 +56,7 @@ MYDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 ## Debugging.
 whoami
 env
+true "CI: $CI"
 
 ## TODO: do not use networking as per https://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598/214
 ## https://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598/267
@@ -110,6 +111,13 @@ if [ "$debug" = "true" ]; then
       fi
    fi
 
+   if [ "$CI" = "true" ]; then
+      true "Sanity test. 'make oldconfig' should not modify '.config'."
+      true "https://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598/317"
+      make oldconfig -C "$extracted_linux_kernel_sources_folder"
+      diff "${MYDIR}/${kernel_config}" "$extracted_linux_kernel_sources_folder/.config"
+   fi
+
    cat "${MYDIR}/debugging-config" >> "$extracted_linux_kernel_sources_folder/.config"
    if [ "${kernel_config}" = "hardened-host-kernel" ]; then
      cat "${MYDIR}/debugging-config-host" >> "$extracted_linux_kernel_sources_folder/.config"

diff --git a/usr/share/hardened-kernel/ci_test b/usr/share/hardened-kernel/ci_test
@@ -12,6 +12,7 @@ true "$0: start"
 MYDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 
 ## travis.debian.net does not pass the CI environment variable to docker.
+## build script reads CI variable.
 CI=true
 export CI