aarch64: dereference symlinks in /boot/dtb to fix installation on FAT /boot
set CONFIG_MODULE_SIG_SHA512=y and install signing key
x86_64: set CONFIG_KERNEL_ZSTD=y [release 6.6.67-1mamba;Sat Dec 21 2024]
update CONFIG_LSM from "yama,loadpin,safesetid,integrity" to "landlock,lockdown,yama,loadpin,safesetid,apparmor,bpf" [release 6.6.60-1mamba;Thu Nov 14 2024]