source: chapter10/kernel.xml@ 95105f3

xry111/arm64 xry111/arm64-12.0
Last change on this file since 95105f3 was 98d2923, checked in by Xi Ruoyao <xry111@…>, 14 months ago

arm64: kernel: Enable compressed kernel image and install it

  • Property mode set to 100644
File size: 21.5 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../general.ent">
5 %general-entities;
6]>
7
8<sect1 id="ch-bootable-kernel" role="wrap">
9 <?dbhtml filename="kernel.html"?>
10
11 <sect1info condition="script">
12 <productname>kernel</productname>
13 <productnumber>&linux-version;</productnumber>
14 <address>&linux-url;</address>
15 </sect1info>
16
17 <title>Linux-&linux-version;</title>
18
19 <indexterm zone="ch-bootable-kernel">
20 <primary sortas="a-Linux">Linux</primary>
21 </indexterm>
22
23 <sect2 role="package">
24 <title/>
25
26 <para>The Linux package contains the Linux kernel.</para>
27
28 <segmentedlist>
29 <segtitle>&buildtime;</segtitle>
30 <segtitle>&diskspace;</segtitle>
31
32 <seglistitem>
33 <seg>&linux-knl-sbu;</seg>
34 <seg>&linux-knl-du;</seg>
35 </seglistitem>
36 </segmentedlist>
37
38 </sect2>
39
40 <sect2 role="installation">
41 <title>Installation of the kernel</title>
42
43 <para>Building the kernel involves a few steps&mdash;configuration,
44 compilation, and installation. Read the <filename>README</filename> file
45 in the kernel source tree for alternative methods to the way this book
46 configures the kernel.</para>
47
48 <para>Prepare for compilation by running the following command:</para>
49
50<screen><userinput remap="pre">make mrproper</userinput></screen>
51
52 <para>This ensures that the kernel tree is absolutely clean. The
53 kernel team recommends that this command be issued prior to each
54 kernel compilation. Do not rely on the source tree being clean after
55 un-tarring.</para>
56
57 <para>There are several ways to configure the kernel options. Usually,
58 This is done through a menu-driven interface, for example:</para>
59
60<screen role="nodump"><userinput>make menuconfig</userinput></screen>
61
62 <variablelist>
63 <title>The meaning of optional make environment variables:</title>
64
65 <varlistentry>
66 <term><parameter>LANG=&lt;host_LANG_value&gt; LC_ALL=</parameter></term>
67 <listitem>
68 <para>This establishes the locale setting to the one used on the
69 host. This may be needed for a proper menuconfig ncurses interface
70 line drawing on a UTF-8 linux text console.</para>
71
72 <para>If used, be sure to replace
73 <replaceable>&lt;host_LANG_value&gt;</replaceable> by the value of
74 the <envar>$LANG</envar> variable from your host. You can
75 alternatively use instead the host's value of <envar>$LC_ALL</envar>
76 or <envar>$LC_CTYPE</envar>.</para>
77 </listitem>
78 </varlistentry>
79
80 <varlistentry>
81 <term><command>make menuconfig</command></term>
82 <listitem>
83 <para>This launches an ncurses menu-driven interface. For other
84 (graphical) interfaces, type <command>make help</command>.</para>
85 </listitem>
86 </varlistentry>
87 </variablelist>
88
89 <!-- Support for compiling a keymap into the kernel is deliberately removed -->
90
91 <para>For general information on kernel configuration see <ulink
92 url="&hints-root;kernel-configuration.txt"/>. BLFS has some information
93 regarding particular kernel configuration requirements of packages outside
94 of LFS at <ulink
95 url="&blfs-book;longindex.html#kernel-config-index"/>. Additional
96 information about configuring and building the kernel can be found at
97 <ulink url="http://www.kroah.com/lkn/"/> </para>
98
99 <note>
100 <para>A good starting place for setting up the kernel configuration is to
101 run <command>make defconfig</command>. This will set the base
102 configuration to a good state that takes your current system architecture
103 into account.</para>
104
105 <para>Be sure to enable/disable/set the following features or the system might
106 not work correctly or boot at all:</para>
107
108 <screen role="nodump" revision="sysv">Processor type and features ---&gt;
109 [*] Build a relocatable kernel [CONFIG_RELOCATABLE]
110 [*] Randomize the address of the kernel image (KASLR) [CONFIG_RANDOMIZE_BASE]
111General setup ---&gt;
112 [ ] Compile the kernel with warnings as errors [CONFIG_WERROR]
113 &lt; &gt; Enable kernel headers through /sys/kernel/kheaders.tar.xz [CONFIG_IKHEADERS]
114General architecture-dependent options ---&gt;
115 [*] Stack Protector buffer overflow detection [CONFIG_STACKPROTECTOR]
116 [*] Strong Stack Protector [CONFIG_STACKPROTECTOR_STRONG]
117Device Drivers ---&gt;
118 Firmware Drivers ---&gt;
119 EFI (Extensible Firmware Interface) Support ---&gt;
120 [*] Enable the generic EFI decompressor [CONFIG_EFI_ZBOOT]
121 Graphics support ---&gt;
122 Frame buffer Devices ---&gt;
123 &lt;*&gt; Support for frame buffer devices ---&gt;
124 Console display driver support ---&gt;
125 [*] Framebuffer Console support [CONFIG_FRAMEBUFFER_CONSOLE]
126 Generic Driver Options ---&gt;
127 [ ] Support for uevent helper [CONFIG_UEVENT_HELPER]
128 [*] Maintain a devtmpfs filesystem to mount at /dev [CONFIG_DEVTMPFS]
129 [*] Automount devtmpfs at /dev, after the kernel mounted the rootfs [CONFIG_DEVTMPFS_MOUNT]</screen>
130
131 <screen role="nodump" revision="systemd">Processor type and features ---&gt;
132 [*] Build a relocatable kernel [CONFIG_RELOCATABLE]
133 [*] Randomize the address of the kernel image (KASLR) [CONFIG_RANDOMIZE_BASE]
134General setup ---&gt;
135 [ ] Compile the kernel with warnings as errors [CONFIG_WERROR]
136 [ ] Auditing Support [CONFIG_AUDIT]
137 CPU/Task time and stats accounting ---&gt;
138 [*] Pressure stall information tracking [CONFIG_PSI]
139 &lt; &gt; Enable kernel headers through /sys/kernel/kheaders.tar.xz [CONFIG_IKHEADERS]
140 [*] Control Group support [CONFIG_CGROUPS] ---&gt;
141 [*] Memory controller [CONFIG_MEMCG]
142 [ ] Enable deprecated sysfs features to support old userspace tools [CONFIG_SYSFS_DEPRECATED]
143 [*] Configure standard kernel features (expert users) [CONFIG_EXPERT] ---&gt;
144 [*] open by fhandle syscalls [CONFIG_FHANDLE]
145General architecture-dependent options ---&gt;
146 [*] Enable seccomp to safely compute untrusted bytecode [CONFIG_SECCOMP]
147 [*] Stack Protector buffer overflow detection [CONFIG_STACKPROTECTOR]
148 [*] Strong Stack Protector [CONFIG_STACKPROTECTOR_STRONG]
149Networking support ---&gt;
150 Networking options ---&gt;
151 &lt;*&gt; The IPv6 protocol [CONFIG_IPV6]
152Device Drivers ---&gt;
153 Generic Driver Options ---&gt;
154 [ ] Support for uevent helper [CONFIG_UEVENT_HELPER]
155 [*] Maintain a devtmpfs filesystem to mount at /dev [CONFIG_DEVTMPFS]
156 [*] Automount devtmpfs at /dev, after the kernel mounted the rootfs [CONFIG_DEVTMPFS_MOUNT]
157 Firmware Loader ---&gt;
158 [ ] Enable the firmware sysfs fallback mechanism [CONFIG_FW_LOADER_USER_HELPER]
159 Firmware Drivers ---&gt;
160 [*] Export DMI identification via sysfs to userspace [CONFIG_DMIID]
161 EFI (Extensible Firmware Interface) Support ---&gt;
162 [*] Enable the generic EFI decompressor [CONFIG_EFI_ZBOOT]
163 Graphics support ---&gt;
164 Frame buffer Devices ---&gt;
165 &lt;*&gt; Support for frame buffer devices ---&gt;
166 Console display driver support ---&gt;
167 [*] Framebuffer Console support [CONFIG_FRAMEBUFFER_CONSOLE]
168File systems ---&gt;
169 [*] Inotify support for userspace [CONFIG_INOTIFY_USER]
170 Pseudo filesystems ---&gt;
171 [*] Tmpfs POSIX Access Control Lists [CONFIG_TMPFS_POSIX_ACL]</screen>
172 </note>
173
174 <note revision="systemd">
175 <para>While "The IPv6 Protocol" is not strictly
176 required, it is highly recommended by the systemd developers.</para>
177 </note>
178
179 <para revision="sysv">There are several other options that may be desired
180 depending on the requirements for the system. For a list of options needed
181 for BLFS packages, see the <ulink
182 url="&lfs-root;blfs/view/&short-version;/longindex.html#kernel-config-index">BLFS
183 Index of Kernel Settings</ulink>
184 (&lfs-root;blfs/view/&short-version;/longindex.html#kernel-config-index).</para>
185
186 <note>
187 <para>If your host hardware is using UEFI and you wish to boot the
188 LFS system with it, you should adjust some kernel configuration
189 following <ulink url="&blfs-book;postlfs/grub-setup.html#uefi-kernel">
190 the BLFS page</ulink>.</para>
191 </note>
192
193 <variablelist>
194 <title>The rationale for the above configuration items:</title>
195
196 <varlistentry>
197 <term><parameter>Randomize the address of the kernel image (KASLR)</parameter></term>
198 <listitem>
199 <para>Enable ASLR for kernel image, to mitigate some attacks based
200 on fixed addresses of sensitive data or code in the kernel.</para>
201 </listitem>
202 </varlistentry>
203
204 <varlistentry>
205 <term>
206 <parameter>
207 Compile the kernel with warnings as errors
208 </parameter>
209 </term>
210 <listitem>
211 <para>This may cause building failure if the compiler and/or
212 configuration are different from those of the kernel
213 developers.</para>
214 </listitem>
215 </varlistentry>
216
217 <varlistentry>
218 <term>
219 <parameter>
220 Enable kernel headers through /sys/kernel/kheaders.tar.xz
221 </parameter>
222 </term>
223 <listitem>
224 <para>This will require <command>cpio</command> building the kernel.
225 <command>cpio</command> is not installed by LFS.</para>
226 </listitem>
227 </varlistentry>
228
229 <varlistentry>
230 <term><parameter>Strong Stack Protector</parameter></term>
231 <listitem>
232 <para>Enable SSP for the kernel. We've enabled it for the entire
233 userspace with <parameter>--enable-default-ssp</parameter>
234 configuring GCC, but the kernel does not use GCC default setting
235 for SSP. We enable it explicitly here.</para>
236 </listitem>
237 </varlistentry>
238
239 <varlistentry>
240 <term><parameter>Support for uevent helper</parameter></term>
241 <listitem>
242 <para>Having this option set may interfere with device
243 management when using Udev/Eudev. </para>
244 </listitem>
245 </varlistentry>
246
247 <varlistentry>
248 <term><parameter>Maintain a devtmpfs</parameter></term>
249 <listitem>
250 <para>This will create automated device nodes which are populated by the
251 kernel, even without Udev running. Udev then runs on top of this,
252 managing permissions and adding symlinks. This configuration
253 item is required for all users of Udev/Eudev.</para>
254 </listitem>
255 </varlistentry>
256
257 <varlistentry>
258 <term><parameter>Automount devtmpfs at /dev</parameter></term>
259 <listitem>
260 <para>This will mount the kernel view of the devices on /dev
261 upon switching to root filesystem just before starting
262 init.</para>
263 </listitem>
264 </varlistentry>
265
266 <varlistentry>
267 <term><parameter>Enable the generic EFI decompressor</parameter></term>
268 <listitem>
269 <para>Create the bootable image as an EFI application that carries
270 the actual kernel image in compressed form. It can make the
271 bootable image 50% smaller.</para>
272 </listitem>
273 </varlistentry>
274
275 <varlistentry>
276 <term><parameter>Framebuffer Console support</parameter></term>
277 <listitem>
278 <para>This is needed to display the Linux console on a frame
279 buffer device. To allow the kernel to print debug messages at an
280 early boot stage, it shouldn't be built as a kernel module
281 unless an initramfs will be used. And, if
282 <option>CONFIG_DRM</option> (Direct Rendering Manager) is enabled,
283 it's likely <option>CONFIG_DRM_FBDEV_EMULATION</option> (Enable
284 legacy fbdev support for your modesetting driver) should be
285 enabled as well.</para>
286 </listitem>
287 </varlistentry>
288
289 </variablelist>
290
291 <para>Alternatively, <command>make oldconfig</command> may be more
292 appropriate in some situations. See the <filename>README</filename>
293 file for more information.</para>
294
295 <para>If desired, skip kernel configuration by copying the kernel
296 config file, <filename>.config</filename>, from the host system
297 (assuming it is available) to the unpacked <filename
298 class="directory">linux-&linux-version;</filename> directory. However,
299 we do not recommend this option. It is often better to explore all the
300 configuration menus and create the kernel configuration from
301 scratch.</para>
302
303 <para>Compile the kernel image and modules:</para>
304
305<screen><userinput remap="make">make</userinput></screen>
306
307 <para>If using kernel modules, module configuration in <filename
308 class="directory">/etc/modprobe.d</filename> may be required.
309 Information pertaining to modules and kernel configuration is
310 located in <xref linkend="ch-config-udev"/> and in the kernel
311 documentation in the <filename
312 class="directory">linux-&linux-version;/Documentation</filename> directory.
313 Also, <filename>modprobe.d(5)</filename> may be of interest.</para>
314
315 <para>Unless module support has been disabled in the kernel configuration,
316 install the modules with:</para>
317
318<screen><userinput remap="install">make modules_install</userinput></screen>
319
320 <para>After kernel compilation is complete, additional steps are
321 required to complete the installation. Some files need to be copied to
322 the <filename class="directory">/boot</filename> directory.</para>
323
324 <caution>
325 <para>If you've decided to use a separate &boot-dir; partition for the
326 LFS system (maybe sharing a &boot-dir; partition with the host
327 distro) , the files copied below should go there. The easiest way to
328 do that is to create the entry for &boot-dir; in &fstab; first (read
329 the previous section for details), then issue the following command
330 as the &root; user in the
331 <emphasis>chroot environment</emphasis>:</para>
332
333<screen role="nodump"><userinput>mount /boot</userinput></screen>
334
335 <para>The path to the device node is omitted in the command because
336 <command>mount</command> can read it from &fstab;.</para>
337 </caution>
338
339 <para>The path to the kernel image may vary depending on the platform being
340 used. The filename below can be changed to suit your taste, but the stem of
341 the filename should be <emphasis>vmlinuz</emphasis> to be compatible with
342 the automatic setup of the boot process described in the next section. The
343 following command assumes an ARM64 architecture with an EFI boot loader
344 (for example, GRUB built in &ch-final;):</para>
345
346<screen><userinput remap="install">cp -iv arch/arm64/boot/vmlinuz.efi /boot/vmlinuz-&linux-version;-lfs-&version;</userinput></screen>
347
348 <para><filename>System.map</filename> is a symbol file for the kernel.
349 It maps the function entry points of every function in the kernel API,
350 as well as the addresses of the kernel data structures for the running
351 kernel. It is used as a resource when investigating kernel problems.
352 Issue the following command to install the map file:</para>
353
354<screen><userinput remap="install">cp -iv System.map /boot/System.map-&linux-version;</userinput></screen>
355
356 <para>The kernel configuration file <filename>.config</filename>
357 produced by the <command>make menuconfig</command> step
358 above contains all the configuration selections for the kernel
359 that was just compiled. It is a good idea to keep this file for future
360 reference:</para>
361
362<screen><userinput remap="install">cp -iv .config /boot/config-&linux-version;</userinput></screen>
363
364 <para>Install the documentation for the Linux kernel:</para>
365
366<screen><userinput remap="install">install -d /usr/share/doc/linux-&linux-version;
367cp -r Documentation/* /usr/share/doc/linux-&linux-version;</userinput></screen>
368
369 <para>It is important to note that the files in the kernel source
370 directory are not owned by <emphasis>root</emphasis>. Whenever a
371 package is unpacked as user <emphasis>root</emphasis> (like we did
372 inside chroot), the files have the user and group IDs of whatever
373 they were on the packager's computer. This is usually not a problem
374 for any other package to be installed because the source tree is
375 removed after the installation. However, the Linux source tree is
376 often retained for a long time. Because of this, there is a chance
377 that whatever user ID the packager used will be assigned to somebody
378 on the machine. That person would then have write access to the kernel
379 source.</para>
380
381 <note>
382 <para>In many cases, the configuration of the kernel will need to be
383 updated for packages that will be installed later in BLFS. Unlike
384 other packages, it is not necessary to remove the kernel source tree
385 after the newly built kernel is installed.</para>
386
387 <para>If the kernel source tree is going to be retained, run
388 <command>chown -R 0:0</command> on the <filename
389 class="directory">linux-&linux-version;</filename> directory to ensure
390 all files are owned by user <emphasis>root</emphasis>.</para>
391 </note>
392
393 <warning>
394 <para>Some kernel documentation recommends creating a symlink from
395 <filename class="symlink">/usr/src/linux</filename> pointing to the kernel
396 source directory. This is specific to kernels prior to the 2.6 series and
397 <emphasis>must not</emphasis> be created on an LFS system as it can cause
398 problems for packages you may wish to build once your base LFS system is
399 complete.</para>
400 </warning>
401
402 <warning>
403 <para>The headers in the system's <filename
404 class="directory">include</filename> directory (<filename
405 class="directory">/usr/include</filename>) should
406 <emphasis>always</emphasis> be the ones against which Glibc was compiled,
407 that is, the sanitised headers installed in <xref
408 linkend="ch-tools-linux-headers"/>. Therefore, they should
409 <emphasis>never</emphasis> be replaced by either the raw kernel headers
410 or any other kernel sanitized headers.</para>
411 </warning>
412
413 </sect2>
414
415 <sect2 id="conf-modprobe" role="configuration">
416 <title>Configuring Linux Module Load Order</title>
417
418 <indexterm zone="conf-modprobe">
419 <primary sortas="e-/etc/modprobe.d/usb.conf">/etc/modprobe.d/usb.conf</primary>
420 </indexterm>
421
422 <para>Most of the time Linux modules are loaded automatically, but
423 sometimes it needs some specific direction. The program that loads
424 modules, <command>modprobe</command> or <command>insmod</command>, uses
425 <filename>/etc/modprobe.d/usb.conf</filename> for this purpose. This file
426 needs to be created so that if the USB drivers (ehci_hcd, ohci_hcd and
427 uhci_hcd) have been built as modules, they will be loaded in the correct
428 order; ehci_hcd needs to be loaded prior to ohci_hcd and uhci_hcd in order
429 to avoid a warning being output at boot time.</para>
430
431 <para>Create a new file <filename>/etc/modprobe.d/usb.conf</filename> by running
432 the following:</para>
433
434<screen><userinput>install -v -m755 -d /etc/modprobe.d
435cat &gt; /etc/modprobe.d/usb.conf &lt;&lt; "EOF"
436<literal># Begin /etc/modprobe.d/usb.conf
437
438install ohci_hcd /sbin/modprobe ehci_hcd ; /sbin/modprobe -i ohci_hcd ; true
439install uhci_hcd /sbin/modprobe ehci_hcd ; /sbin/modprobe -i uhci_hcd ; true
440
441# End /etc/modprobe.d/usb.conf</literal>
442EOF</userinput></screen>
443
444 </sect2>
445
446 <sect2 id="contents-kernel" role="content">
447 <title>Contents of Linux</title>
448
449 <segmentedlist>
450 <segtitle>Installed files</segtitle>
451 <segtitle>Installed directories</segtitle>
452
453 <seglistitem>
454 <seg>config-&linux-version;,
455 vmlinuz-&linux-version;-lfs-&version;,
456 and System.map-&linux-version;</seg>
457 <seg>/lib/modules, /usr/share/doc/linux-&linux-version;</seg>
458 </seglistitem>
459 </segmentedlist>
460
461 <variablelist>
462 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
463 <?dbfo list-presentation="list"?>
464 <?dbhtml list-presentation="table"?>
465
466 <varlistentry id="config">
467 <term><filename>config-&linux-version;</filename></term>
468 <listitem>
469 <para>Contains all the configuration selections for the kernel</para>
470 <indexterm zone="ch-bootable-kernel config">
471 <primary sortas="e-/boot/config">/boot/config-&linux-version;</primary>
472 </indexterm>
473 </listitem>
474 </varlistentry>
475
476 <varlistentry id="lfskernel">
477 <term><filename>vmlinuz-&linux-version;-lfs-&version;</filename></term>
478 <listitem>
479 <para>The engine of the Linux system. When turning on the computer,
480 the kernel is the first part of the operating system that gets loaded.
481 It detects and initializes all components of the computer's hardware,
482 then makes these components available as a tree of files to the
483 software and turns a single CPU into a multitasking machine capable
484 of running scores of programs seemingly at the same time</para>
485 <indexterm zone="ch-bootable-kernel lfskernel">
486 <primary sortas="b-lfskernel">lfskernel-&linux-version;</primary>
487 </indexterm>
488 </listitem>
489 </varlistentry>
490
491 <varlistentry id="System.map">
492 <term><filename>System.map-&linux-version;</filename></term>
493 <listitem>
494 <para>A list of addresses and symbols; it maps the entry points and
495 addresses of all the functions and data structures in the
496 kernel</para>
497 <indexterm zone="ch-bootable-kernel System.map">
498 <primary sortas="e-/boot/System.map">/boot/System.map-&linux-version;</primary>
499 </indexterm>
500 </listitem>
501 </varlistentry>
502
503 </variablelist>
504
505 </sect2>
506
507</sect1>
Note: See TracBrowser for help on using the repository browser.