while read -r line; do
  if [ "$line" = "" ]; then
    continue
  fi
  if [[ "$line" =~ ^# ]]; then
    continue
  fi
  GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX sysctl.${line}"
done < /etc/sysctl.d/30_security-misc.conf

Something like that. Maybe covering all of /etc/sysctl.conf and
/etc/sysctl.d folder to GRUB_CMDLINE_LINUX expansion.

Is this still reuqired since we also have early sysctl loading during initramfs?

https://github.com/Whonix/security-misc/blob/master/etc/initramfs-tools/scripts/init-bottom/sysctl-initramfs

And we also port to dracut which also does early sysctl loading.
Adding tons of sysctl to an already very long kernel command line (do we got the world record already :) seems excessive.
Since nobody is making the argument anymore, rejecting this ticket.

convert /etc/sysctl.d to /etc/default/grub.d kernel Linux boot cmdlineClosed, InvalidPublicActions

Description

Details

Related Objects

Event Timeline

convert /etc/sysctl.d to /etc/default/grub.d kernel Linux boot cmdline
Closed, InvalidPublic
Actions