I’m test driving Manjaro Linux and I like it a lot when it comes to ease of use and design, and the fact that Pamac has Flatpak and Snap support. What I don’t like so much is that security has kinda low priority.
I read a forum post in the Manjaro forums about someone wanting to install the hardened kernel from Arch, but it became a discussion without a clear answer. turns out Manjaro maintains various kernels already build by one person.
My question is whether I can add Arch Linux repository to have the hardened kernel installed, without giving trouble for other software installed.
Is there some kind of equivalent of apt-pinning for Debian in Manjaro ?
Manjaro is a GNU/Linux distribution based on Arch. It is a rolling release distro which includes a user-friendly installer, tested updates that try very hard to not break your system and a community of friendly users for support. Official releases include Xfce, KDE, Gnome, and the minimal CLI-Installer Architect. Community releases include Awesome, bspwm, Budgie, Cinnamon, Deepin, i3, LXDE, LXQT, Mate, OpenBox and builds for ARM devices like Raspberry Pi, Odroid etc.
I’ve just tested this. In /etc/pacman.conf added : [extra] Include = /etc/pacman.d/mirrorlist-arch-extra
Commented out the Manjaro [extra] section for the moment.
And in /etc/pacman.d/mirrorlist-arch-extra I’ve copied part of a mirrorlist from an Arch Linux install.
Then ran pacman -Syy and installed extra/linux-hardened extra/linux-hardened-docs extra/linux-hardened-headers After that commented out the Arch section, and uncommented the [extra] section for Manjaro, and ran pacman -Syy again.
A bit of a hassle, but it boots fine. For reference : https://www.archlinux.org/packages/?sort=&q=hardened&maintainer=&flagged= I’ve skipped the package regarding usb as I’m not sure it will conflict.
I guess this could be turned into a script, and then figure out how to get notifications for a new version of the hardened kernel from Arch Linux.
This is the forum post I referred to : https://forum.manjaro.org/t/why-is-linux-hardened-not-available/35191/6
deleted by creator