Enclaves image require a kernel. This project builds Amazon Linux kernels using aws-nitro-enclaves-sdk-bootstrap and includes patches adding/removing kernel features to serve different use cases.
The vanilla kernel is built without any real modifications. It is used in the Salmon family of images.
- build.patch: allow cross platform builds using
--system
Reproducible builds can be done using Nix. The monorepo provides a Nix flake which includes this project and can be used to trigger builds:
nix build -v .#<flavor>.kernels.vanilla.<output>Supported flavors:
gnumusl
Supported outputs (derivation):
default
Supported outputs (path only):
kernelkernelConfiginitnsmKo
The tuna kernel enables kernel support for nfqueue and ipset. It is used in the Tuna family of images.
- build.patch: allow cross platform builds using
--system - tuna.patch: enable kernel flags for nfqueue and ipset
Reproducible builds can be done using Nix. The monorepo provides a Nix flake which includes this project and can be used to trigger builds:
nix build -v .#<flavor>.kernels.tuna.<output>Supported flavors:
gnumusl
Supported outputs (derivation):
default
Supported outputs (path only):
kernelkernelConfiginitnsmKo
The serverless kernel disables cgroups setup in the init binary so it can be done later during the boot process. It is used by the serverless executors.
- build.patch: allow cross platform builds using
--system - serverless.patch: disable cgroups setup in init
Reproducible builds can be done using Nix. The monorepo provides a Nix flake which includes this project and can be used to trigger builds:
nix build -v .#<flavor>.kernels.serverless.<output>Supported flavors:
gnumusl
Supported outputs (derivation):
default
Supported outputs (path only):
kernelkernelConfiginitnsmKo
This project is licensed under the GNU GPLv2 or any later version. See LICENSE.txt.