Ryan Malloy
3b505644b2
Rebuilt with KBUILD_BUILD_USER/HOST/TIMESTAMP pinned. Without them the kernel bakes the builder's user@hostname and wall-clock build time into /proc/version, which publishes operator identity in a public artifact and makes the build unreproducible. Pinned, anyone can rebuild and diff the bytes — the only trust story available for an unsigned community kernel. The installer refuses to run on anything but a Pi 4, refuses a mismatched image/modules pair (vermagic failure means no /dev/pps0 on a kernel that otherwise boots fine — silent and miserable to debug), verifies SHA256SUMS, never touches kernel8.img, and leaves rollback as deleting one config.txt line. Boot-tested on the Pi: Stratum 1, 273 ns offset, PPS handler confirmed NOT threaded. Binaries ship as release assets, not in git.
12 lines
264 B
Plaintext
12 lines
264 B
Plaintext
.env
|
|
.venv/
|
|
__pycache__/
|
|
dist/
|
|
*.egg-info/
|
|
node_modules/
|
|
|
|
# Kernel release binaries — 32 MB. These are published as Gitea release assets,
|
|
# not committed. Rebuild them with kernel/build.sh; verify with SHA256SUMS.
|
|
kernel/release/*.img.gz
|
|
kernel/release/*.tar.gz
|