Does your compiler not do that? Maybe you should breakup with it and get rustc compiler.

Cashew is another great, and even my favourite, finance/money/budget managment app.

I don’t have IPv6, but I can still reach IPv6 only sites if I use MullvadVPN (and probably also with other VPN providers).

Thanks but I’ll be running postmarketOS and make sms forwarder myself.

That’s exactly what I’m planning to do, a phone that forwards all sms messages through ntfy (or other service like signal) to me.

Nice

I used geekbench 5. My CPU is AMD Ryzen 5 5500U. I tested a few prebuild kernels and custom compiled the fastest one.

prebuild linux kernel:

• singlethread: 1170
• multithread score: 4604

prebuild linux-zen kernel:

• singlethread: 1156
• multithread score: 4593

prebuild linux-xanmod kernel:

• singlethread: 1164
• multithread score: 4594

prebuild linux-hardened kernel:

• singlethread: 1156
• multithread score: 4841

custom linux-hardened kernel:

• singlethread: 1160
• multithread score: 4977

I’m running a custom kernel on my Arch laptop. It’s a little faster, a little smaller and a little quite more secure. I’m also running custom kernel which enables adiantum encryption on old phone with postmarketOS.

Thank you very much for this detailed explanation! Looks like kptr and kexec are already disabled and enabled randomized virtual memory address in the hardened kernel. I will check for ebpf. Security certs seem interesting, I will defenetly look into them.

I have -j12

Imagine how many download buttons would be if Github had ads.

That could be your browser saving html instead of showing it.

I’m running self compiled hardened kernel and I enabled kernel lockdown mode. Before that it was disabled. Maybe Arch team disabled it.

Now I’ve installed it and Librewolf works nornally. Is that normal or is malloc not working or is Librewolf compiled with hardened malloc?

I’ve heard about googerteller and I never thought someone will use it (except to try it)

Thank you for the list! Do you maybe know where can I find explanations what does each option do? I know only half of them and I already use some of them.

Actually it’s not (but it was) a fork of OpenBSD’s allocator, but rewrite of a fork. They wanted too much changes so they decided to rewrite it from scratch.

That would be too big performance hit

I will try hardened_malloc, I already use it on my phone. I have GrapheneOS.

On laptop with Ryzen 5 5500U (12 threads) it takes 50 minutes and on desktop with Ryzen 7 3700X (16 threads) it takes 20 minutes. I use all threads to compile the kernel.

It compiles way waster with Gentoo, because it has minimal config. I used the default config from Arch repos and modified it. It’s full of unneeded drivers, but I’m scared of disabling them. I already disabled wrong drivers a few times and had to use different kernel to boot.

I will try it out, thank you :)