make.conf

# These settings were set by the catalyst build script that automatically
# built this stage.
# Please consult /usr/share/portage/config/make.conf.example for a more
# detailed example.
COMMON_FLAGS="-O3 -Wall -Wformat -Wformat=2 -pipe -march=x86-64-v3 -flto=thin -fstack-protector-strong -fstack-clash-protection -fcf-protection=full -D_FORTIFY_SOURCE=3 -fstrict-flex-arrays=3"
RUSTFLAGS="${RUSTFLAGS} -C target-cpu=native"
CFLAGS="${COMMON_FLAGS}"
CXXFLAGS="${COMMON_FLAGS}"
FCFLAGS="${COMMON_FLAGS}"
FFLAGS="${COMMON_FLAGS}"
LDFLAGS="-Wl,-O3,-z,now,-z,noexecstack,--as-needed,--lto-O3,--icf=safe,--gc-sections"
CGO_CFLAGS="${CFLAGS}"
CGO_CXXFLAGS="${CXXFLAGS}"
CGO_FFLAGS="${FFLAGS}"
CGO_LDFLAGS="${LDFLAGS}"

# NOTE: This stage was built with the bindist USE flag enabled

USE=" 
  X wayland
  gtk
  aac
  acpi
  alsa
  zstd compress-zstd ffmpeg fontconfig
  system-ffmpeg system-icu system-libvpx
  bluetooth nftables firewalld
  dbus udev
  libnotify libproxy
  opengl egl sdl gles2 gles2-only vulkan vaapi nvenc
  jpeg svg wbep gif png
  policykit
  pipewire
  hardened lto cet
  verify-sig modules-sign secureboot
  dist-kernel
  cjk
  -kde -gnome
  -cups
  -mysql
  networkmanager
  -debug
"

MAKEOPTS="-j11"
GRUB_PLATFORMS="efi-64"
VIDEO_CARDS="intel nouveau nvidia"
L10N="en zh en-US zh_CN zh-CN"

POLICY_TYPES="strict targeted"

MODULES_SIGN_KEY="/usr/share/efi_keys/kernel_key.pem"
MODULES_SIGN_CERT="/usr/share/efi_keys/kernel_key.pem"
MODULES_SIGN_HASH="sha512"

SECUREBOOT_SIGN_KEY="/usr/share/efi_keys/kernel_key.pem"
SECUREBOOT_SIGN_CERT="/usr/share/efi_keys/kernel_key.pem"

# This sets the language of build output to English.
# Please keep this setting intact when reporting bugs.
LC_MESSAGES=C.utf8