linux-archsec

ArchSec's versions of the Linux kernel combine changes from the linux-hardened project with the graysky2 patch enabling gcc optimizations for additional CPUs.

Linux-hardened is a distribution-agnostic security layer for the Linux kernel that draws on the Kernel Self Protection Project. More information about linux-hardened can be found in their extensive documention and the Arch Wiki section on kernel hardening in general.

The graysky2 patch adds additional CPU options to the kernel which provide demonstrable speed increases for supported processors.

The ArchSec kernel will support the following 17 CPUs as separate packages:

CPU Family GCC Optimization
Native optimizations autodetected by GCC -march=native
AMD Improved K8-family -march=k8-sse3
AMD K10-family -march=amdfam10
AMD Family 10h (Barcelona) -march=barcelona
AMD Family 14h (Bobcat) -march=btver1
AMD Family 16h (Jaguar) -march=btver2
AMD Family 15h (Bulldozer) -march=bdver1
AMD Family 15h (Piledriver) -march=bdver2
AMD Family 15h (Steamroller) -march=bdver3
AMD Family 15h (Excavator) -march=bdver4
AMD Family 17h (Zen) -march=znver1
Intel Bonnell family of low-power Atom processors (Bonnell) -march=bonnell
Intel Silvermont family of low-power Atom processors (Silvermont) -march=silvermont
Intel 1st Gen Core i3/i5/i7-family (Nehalem) -march=nehalem
Intel 1.5 Gen Core i3/i5/i7-family (Westmere) -march=westmere
Intel 2nd Gen Core i3/i5/i7-family (Sandybridge) -march=sandybridge
Intel 3rd Gen Core i3/i5/i7-family (Ivybridge) -march=ivybridge
Intel 4th Gen Core i3/i5/i7-family (Haswell) -march=haswell
Intel 5th Gen Core i3/i5/i7-family (Broadwell) -march=broadwell
Intel 6th Gen Core i3/i5/i7-family (Skylake) -march=skylake