Skip to content

Commit 4fe56b5

Browse files
bad-anticsbad-antics
committed
feat: Add custom kernel 6.17.13 build infrastructure
- kernel/build-kernel.sh: Full rebuild script (deps, download, rebrand, compile) - kernel/configs/config-6.17.13-nullsec: Production kernel config - kernel/test-kernel-vm.sh: VM testing automation - kernel/SHA256SUMS: Package integrity checksums - kernel/README.md: Comprehensive kernel documentation - Updated README.md: Custom kernel 6.17.13 section, version references All Parrot/Debian branding removed. uname, /proc/version, and build identity strings are NullSec-native ([email protected]).
1 parent b0f4665 commit 4fe56b5

6 files changed

Lines changed: 12566 additions & 2 deletions

File tree

‎README.md‎

Lines changed: 17 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
- **Cloud Pentesting Edition** — AWS/GCP/Azure/Kubernetes tools
3636
- **Hardware Hacking Edition** — SDR, RFID, embedded systems
3737
- **Automotive Security** — CAN bus, OBD-II, vehicle pentesting
38-
- **Kernel 6.8 LTS** — Latest security patches
38+
- **Custom Kernel 6.17.13** — Built from source with NullSec identity, zero upstream branding
3939
- **Wayland + Hyprland** — Modern compositor option
4040
- **ARM64 Native** — Full Apple Silicon & Raspberry Pi 5 support
4141

@@ -145,6 +145,21 @@ gpg --verify SHA256SUMS.sig SHA256SUMS
145145
- io_uring restrictions
146146
- BPF hardening
147147

148+
### Custom Kernel Build
149+
NullSec Linux ships with a **custom-compiled kernel** built from upstream kernel.org sources.
150+
No Parrot, Debian, or Ubuntu branding remains — `uname`, `/proc/version`, and all build
151+
identity strings are NullSec-native.
152+
153+
| Property | Value |
154+
|:---------|:------|
155+
| Version | `6.17.13+2-amd64` |
156+
| Source | kernel.org vanilla |
157+
| Build ID | `[email protected]` |
158+
| `/proc/version` | `NullSec 6.17.13-1nullsec1` |
159+
160+
See [`kernel/`](kernel/) for build scripts, configs, and documentation.
161+
Download pre-built `.deb` packages from [Releases](https://github.com/bad-antics/nullsec-linux/releases).
162+
148163
### Binary Protection
149164
- PIE, Full RELRO, Stack canaries
150165
- FORTIFY_SOURCE=3
@@ -396,7 +411,7 @@ nullkia --gui
396411
- AI/ML security suite (LLM red teaming)
397412
- Hardware hacking edition (SDR/RFID/IoT)
398413
- Automotive security tools (CAN bus)
399-
- Kernel 6.8 LTS
414+
- Custom Kernel 6.17.13 (built from source, NullSec-branded)
400415
- Wayland + Hyprland compositor
401416
- Full ARM64/Apple Silicon support
402417
- Enhanced isolation (Landlock, CFI)

‎kernel/README.md‎

Lines changed: 136 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,136 @@
1+
# 🐧 NullSec Linux — Custom Kernel
2+
3+
## Overview
4+
5+
NullSec Linux ships with a **custom-built kernel** compiled from upstream kernel.org sources with all upstream distro branding removed and replaced with NullSec identity. This is not a patched derivative — it's a clean rebuild with NullSec-specific build identity.
6+
7+
**Current Version:** `6.17.13+2-amd64`
8+
**Base Source:** [kernel.org v6.17.13](https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.17.13.tar.xz)
9+
**Architecture:** `x86_64 (amd64)`
10+
11+
## What Makes It "NullSec"
12+
13+
The kernel is rebuilt from vanilla source with the following customizations:
14+
15+
| Component | Value |
16+
|:----------|:------|
17+
| `uname -r` | `6.17.13+2-amd64` |
18+
| `EXTRAVERSION` | *(cleared — no upstream distro tag)* |
19+
| `CONFIG_LOCALVERSION` | `+2-amd64` |
20+
| `KBUILD_BUILD_USER` | `nullsec` |
21+
| `KBUILD_BUILD_HOST` | `nullsec.sh` |
22+
| `KBUILD_BUILD_TIMESTAMP` | `NullSec 6.17.13-1nullsec1 (2026-02-12)` |
23+
| `KDEB_PKGVERSION` | `6.17.13-1` |
24+
| `/proc/version` | `Linux version 6.17.13+2-amd64 ([email protected]) #1 SMP PREEMPT_DYNAMIC NullSec 6.17.13-1nullsec1 ...` |
25+
26+
**No Parrot, Debian, or Ubuntu strings appear anywhere in the running kernel.**
27+
28+
## Packages
29+
30+
The kernel build produces these `.deb` packages:
31+
32+
| Package | Size | Purpose |
33+
|:--------|:-----|:--------|
34+
| `linux-image-6.17.13+2-amd64_6.17.13-1_amd64.deb` | ~164 MB | Kernel image, modules, initramfs |
35+
| `linux-headers-6.17.13+2-amd64_6.17.13-1_amd64.deb` | ~9.2 MB | Headers for DKMS/module builds |
36+
| `linux-libc-dev_6.17.13-1_amd64.deb` | ~1.4 MB | Userspace development headers |
37+
38+
Download from [Releases](https://github.com/bad-antics/nullsec-linux/releases).
39+
40+
## Install
41+
42+
```bash
43+
# Download packages from the latest release, then:
44+
sudo dpkg -i linux-image-6.17.13+2-amd64_6.17.13-1_amd64.deb
45+
sudo dpkg -i linux-headers-6.17.13+2-amd64_6.17.13-1_amd64.deb
46+
sudo update-grub
47+
sudo reboot
48+
```
49+
50+
After reboot, verify:
51+
52+
```bash
53+
uname -r
54+
# Expected: 6.17.13+2-amd64
55+
56+
uname -a
57+
# Expected: Linux <hostname> 6.17.13+2-amd64 #1 SMP PREEMPT_DYNAMIC NullSec 6.17.13-1nullsec1 ...
58+
59+
cat /proc/version
60+
# Should contain "[email protected]" — no Parrot/Debian references
61+
```
62+
63+
## Build from Source
64+
65+
To rebuild the kernel yourself:
66+
67+
```bash
68+
# Install dependencies
69+
sudo apt-get install -y build-essential flex bison bc dwarves \
70+
libssl-dev libncurses-dev libelf-dev cpio
71+
72+
# Run the build script
73+
cd kernel/
74+
chmod +x build-kernel.sh
75+
./build-kernel.sh all
76+
77+
# Packages will be in kernel-build/
78+
ls -lh kernel-build/*.deb
79+
```
80+
81+
The build takes approximately 15–45 minutes depending on your hardware. The script:
82+
83+
1. Downloads the kernel source from kernel.org
84+
2. Applies your running kernel's `.config`
85+
3. Removes all upstream distro branding
86+
4. Sets NullSec build identity strings
87+
5. Compiles with `make bindeb-pkg`
88+
6. Outputs `.deb` packages ready for install
89+
90+
### Build Options
91+
92+
```bash
93+
./build-kernel.sh deps # Install dependencies only
94+
./build-kernel.sh download # Download kernel source only
95+
./build-kernel.sh config # Download + apply config
96+
./build-kernel.sh rebrand # Apply NullSec branding (source must exist)
97+
./build-kernel.sh build # Rebrand + compile
98+
./build-kernel.sh all # Full pipeline (default)
99+
```
100+
101+
## Kernel Config
102+
103+
The kernel config used for the build is in `configs/config-6.17.13-nullsec`. Key settings:
104+
105+
- **Preemption:** `PREEMPT_DYNAMIC` (balanced latency)
106+
- **Security:** SELinux, AppArmor, YAMA LSM enabled
107+
- **Networking:** Full netfilter/iptables/nftables stack
108+
- **Filesystems:** ext4, btrfs, xfs, ntfs3, squashfs, overlayfs
109+
- **Virtualization:** KVM, VirtIO drivers
110+
- **Hardware:** Broad hardware support (same as base distro)
111+
- **DKMS:** Headers package supports out-of-tree module compilation
112+
113+
## Verify Integrity
114+
115+
```bash
116+
# After downloading .deb packages, verify checksums:
117+
sha256sum -c SHA256SUMS
118+
```
119+
120+
## Directory Structure
121+
122+
```
123+
kernel/
124+
├── build-kernel.sh # Main build script
125+
├── test-kernel-vm.sh # VM testing script
126+
├── configs/
127+
│ └── config-6.17.13-nullsec # Kernel .config
128+
├── patches/ # Custom patches (if any)
129+
├── SHA256SUMS # Package checksums
130+
└── README.md # This file
131+
```
132+
133+
## License
134+
135+
The Linux kernel is licensed under [GPL-2.0](https://www.gnu.org/licenses/old-licenses/gpl-2.0.html).
136+
NullSec build scripts are licensed under MIT.

‎kernel/SHA256SUMS‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
2ae3946c671bc3ebb44eb25de65a496a4607d280065019b2c4628d9ce222d78b linux-image-6.17.13+2-amd64_6.17.13-1_amd64.deb
2+
efac441e4eab97b3479266f63de7236a064dd053eae2c7cfb102902a99b080af linux-headers-6.17.13+2-amd64_6.17.13-1_amd64.deb
3+
90067f7fc3ad9e4a949bce6e0771a09b6d08a84ada5a34de194328d645dfbfa5 linux-libc-dev_6.17.13-1_amd64.deb

0 commit comments

Comments
 (0)