kernel recompilation for better hardening

[Patrick]

Probably should not break CPU temperature control. Related:

disabling CPU MSRs breaks CPU temperature control

Disabling CPU MSRs is OK in VMs (where it probably does nothing except getting rid of a kernel module) but problematic on the host in context of a host running Kicksecure or Whonix-Host. It breaks CPU temperature control. A high(er) than expected CPU temperature might wear down the CPU more quickly. Also spend more energy than expected (this might be more important in large scale deployments such as servers farms). sudo apt install linux-cpupower sudo cpupower frequency-set --governor powers…