hardenend malloc. json config. networking + default firewalling.

still working on kernel options for proper networking.

.gitignore

@@ -1,9 +0,0 @@
-# artifacts
-outputs/
-artifacts/
-dependencies/
-
-# Compiled Python bytecode
-*.py[cod]
-
-

scripts/build_everything.sh

@@ -3,13 +3,11 @@ set -e
 dir=$(dirname "$0")
 echo $dir
 cd $dir
-#./install_dependencies.sh
+./install_dependencies.sh
-#./build_kernel.sh
+./build_kernel.sh
-#./build_initramfs.sh
+./build_initramfs.sh
-#./bootstrap_filesystem.sh
-#./build_initramfs.sh
 ./build_filesystem.sh
 ./build_image.sh
-./boot_image.sh
+
 
 

scripts/build_filesystem.sh

@@ -2,6 +2,15 @@
 set -e
 set -x
 
+#downloading graphene malloc
+if [ ! -f  ./dependencies/hardened_malloc/Makefile ]; then
+   cd "$(dirname "$0")"
+   DIR="$(dirname "$0")"
+   cd ..
+   cd ./dependencies/
+   git clone https://github.com/GrapheneOS/hardened_malloc.git
+fi
+
 #switching to root to perform chroot
 if [ "$(id -u)" -ne 0 ]; then
 	echo "switching from $(id -un) to root"

scripts/download_malloc.sh

@@ -1,16 +0,0 @@
-#!/bin/bash
-set -e
-set -x
-
-cd "$(dirname "$0")"
-DIR="$(dirname "$0")"
-cd ..
-echo $PWD
-
-#downloading graphene malloc
-if [ ! -f ./dependencies/hardened_malloc/Makefile ]; then
-   cd ./dependencies/
-   git clone https://github.com/GrapheneOS/hardened_malloc.git
-fi
-
-echo 'graphene malloc downloaded.'