A hardened Gentoo kernel build (placeholder)
This is an illustrative placeholder rather than a tested kernel configuration or build guide. A real build starts from a version-controlled configuration and records the toolchain and target explicitly:
make olddefconfig
make -j"$(nproc)" bzImage modules
The appropriate hardening options depend on the hardware, kernel version, threat model, and deployment process; no security outcome is claimed here.