Compare commits
8
Commits
0f39a1f2bf
...
myaster
| Author | SHA256 | Date | |
|---|---|---|---|
 kira
|
4f89fc3506 | ||
|
kira
|
c9d75e2c38 | ||
|
kira
|
a8efdbfd75 | ||
|
kira
|
6aaee0a0d4 | ||
|
kira
|
e01f073939 | ||
|
kira
|
4080c3db3c | ||
|
kira
|
823752f544 | ||
|
kira
|
5826f5f1cd |
@@ -1,13 +1,16 @@
|
||||
pkgbase = linux-kira-lts
|
||||
pkgdesc = Kira LTS Linux
|
||||
pkgver = 6.18.41
|
||||
pkgrel = 5
|
||||
pkgver = 6.18.55
|
||||
pkgrel = 1
|
||||
url = https://www.kernel.org
|
||||
arch = x86_64
|
||||
makedepends = bzz-initrd
|
||||
makedepends = bcachefs-tools
|
||||
makedepends = bc
|
||||
makedepends = binutils
|
||||
makedepends = cpio
|
||||
makedepends = dosfstools
|
||||
makedepends = coreutils
|
||||
makedepends = pax-utils
|
||||
makedepends = gettext
|
||||
makedepends = glibc
|
||||
makedepends = libelf
|
||||
@@ -30,9 +33,10 @@ pkgbase = linux-kira-lts
|
||||
makedepends = python-yaml
|
||||
makedepends = texlive-latexextra
|
||||
options = !debug
|
||||
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.41.tar.xz
|
||||
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.41.tar.sign
|
||||
source = https://github.com/koverstreet/bcachefs-tools/archive/refs/tags/v1.39.0.tar.gz
|
||||
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.55.tar.xz
|
||||
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.55.tar.sign
|
||||
source = https://github.com/koverstreet/bcachefs-tools/archive/refs/tags/v1.39.6.tar.gz
|
||||
source = https://dev.kira-linux.org/kira-linux/nyanit/archive/v0.2.1-1.tar.gz
|
||||
source = 0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch
|
||||
source = 0002-drm-amdgpu-avoid-memory-allocation-in-the-critical-code-path-v3.patch
|
||||
source = 0003-drm-amdgpu-use-GFP_ATOMIC-instead-of-NOWAIT-in-the-critical-path.patch
|
||||
@@ -41,24 +45,26 @@ pkgbase = linux-kira-lts
|
||||
source = kira_disable_guest_vm.fragment
|
||||
validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
|
||||
validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
|
||||
sha256sums = 17fc72f0f8d4a8a8633a5d20085f5d9c5a5ec51ee896a0b7ae1ec25da31273ea
|
||||
sha256sums = f410638061a165c12f42ab871d2f3fcd525515359b5faeee80969cff84524df9
|
||||
sha256sums = SKIP
|
||||
sha256sums = 968a526018383002446a7560a58af0453c408fc21dc93fb2be7c401bc50b9433
|
||||
sha256sums = 102a17a6e163e210a1adca44977481ff6ec537d932556f598f8f72c2cd187163
|
||||
sha256sums = 9c8e20c3d32174037b26fea4e936467ed9391284bf7ff4675ecf4a83fd820742
|
||||
sha256sums = e5bda61fa4405571a0267cd8812329bb8a432a37efb50459461628d371849906
|
||||
sha256sums = c31b8c0ace123f5c1a0012a1254272eea9ac9cdd0d3e5d538ca6b11830dd01b0
|
||||
sha256sums = 0f482368b62c3cece941e2d3ba497bf322db59315df5c2f72500fc1318e4768e
|
||||
sha256sums = a4a871dacc206d70527438272130f1ca04dbe3500e73309d21370ca1864c2e03
|
||||
sha256sums = 3d9965a4126af3ab86a13eef5255511219ee11863151a6e78e08119775f0c002
|
||||
sha256sums = c6aa9877b0612805690d8abfc13c941530a11a7b56979d814e674c86c42ca0cf
|
||||
b2sums = 004e68e62fc813cef33b08c993c5a7164a578e68195ba831c4cd654e8624004049e9486ec96ed7e5dbb9f983a06ba2ec4a624adeb01339ed690d4990c39449bd
|
||||
sha256sums = 189a5399a0959fe898acdaab62e2059cb4996175deebed64783671a4dc44ee4f
|
||||
sha256sums = 0fe2d1da5cc93a4f1fc9cacdb02b4bed59cc0ea0ef1474a42ac2b2ad068f6690
|
||||
sha256sums = 7427571bf433c71507749e356326bee4308359e15018809b7b7a332c31d2a611
|
||||
b2sums = c329021f6ac359c07f3863c5493694330020540632a6b9a15033b3440dbef116d84a652c71cd3dd12fca680f5b49edaf568f841d087eb4a2c34b890a078b9672
|
||||
b2sums = SKIP
|
||||
b2sums = c66e7a7e201c1bbe698a1037426453d3ec23cf8e0043650519cd2b541de037a8f2a92af7aa3555afe10283156097d0c6d94b8833c1d3f06133f05a63bbff8be1
|
||||
b2sums = 6052a721ef9a7aa5887704f23657eab1794f8eb02781b4ddeeb0b7392e3bc1812f958a34d21b724073b5c29e2ed8d81726bb4e63f7fbb420c811e01c161c5296
|
||||
b2sums = 05f25e60c491b7ef558d832addd44784db09170418f643ad341050dddb60a78fb9feb9fb47603cdd4a651eacf1b1cbf515bf37dadf84b8dfc2755c1eeead7c30
|
||||
b2sums = 5b3597cab8b174ff41b3f17aae6d1376a155356f781542e2e176d66c5a6dee53f7a1db8e2b9540ce8246efac4e27476c882fc8cc8063f0f514ae09230b5aef0a
|
||||
b2sums = a71f78bea42d158fc9383f2bbb985dafa71274d2032876b67f84602c8085b1c53f3d36965e54e5fdbab5c0d7537c98d917bd7743d3cf373c1dcb6da3bc19f4e7
|
||||
b2sums = c9d4ec8fac86a9b6f0567c57f6d5be04d56f8efbc9dc1b183981dad38387d750b53c17fcdd295cb68a874bf50f81d117cfe94bd3a8d9e08e1918644ae8daa3e5
|
||||
b2sums = e94543206de5128f97cd6ee38b8165d3463237ceca6e03f87b84fd047c96808d17222a6f8bf2ff601d301730be9e3eeba44183c2bc908a4eb8ad5d7003ca2aff
|
||||
b2sums = f15503d1d297cbdec05932ce19cf606aeb47661d65d02907ae859c1584439c214fae1f1521e87ddcaaf1f11585c7c78b932992c6da00c6f21cbb673cb059f788
|
||||
b2sums = 2d581d66fe4e4afe0158755f5ea0cd0df9765b63464cb81e2b9115a37230e4489f16526393c47009c4392e5de70d2d37e496f764ad89e214ec7010c5bbfbcfc1
|
||||
b2sums = c0a6a394142c86874147fe266fbdde883fe979c638e0110647ee1d4e4fc69b3d14fe389c142e09dd00787855a6248e8a01d5ee4bbce6bc502d3e0c1d69074d6d
|
||||
b2sums = e8a191e7ba62287b338849de458e4a228403b01b930b4068ec4d28989e8691aae8c969551d8661988c7abf4667ef634750d9cdd820c9300596f5f6278660c8ff
|
||||
b2sums = bfc657b9bbb0a12f98f5c9ac1d50eb1d74912d775245e1b65f0c171f4f87d664122f595caa5147b60975c0baf4e9a2b1b0be046c4b2a95a0760a666391ff5f06
|
||||
|
||||
pkgname = linux-kira-lts
|
||||
pkgdesc = The Kira LTS Linux kernel and modules
|
||||
@@ -104,6 +110,7 @@ pkgname = linux-kira-lts
|
||||
provides = NTSYNC-MODULE
|
||||
provides = VIRTUALBOX-GUEST-MODULES
|
||||
provides = WIREGUARD-MODULE
|
||||
provides = initramfs
|
||||
replaces = wireguard-lts
|
||||
replaces = bcachefs-dkms
|
||||
|
||||
|
||||
@@ -1,18 +1,22 @@
|
||||
# Maintainer: Kira <[@kira](https://dev.kira-linux.org/kira)>
|
||||
|
||||
pkgbase=linux-kira-lts
|
||||
pkgver=6.18.41
|
||||
pkgrel=5
|
||||
pkgver=6.18.55
|
||||
pkgrel=1
|
||||
pkgdesc='Kira LTS Linux'
|
||||
url='https://www.kernel.org'
|
||||
_bcachefs_ver=1.39.0
|
||||
_bcachefs_ver=1.39.6
|
||||
_nyanit_ver=0.2.1-1
|
||||
|
||||
arch=(x86_64)
|
||||
makedepends=(
|
||||
bzz-initrd
|
||||
bcachefs-tools
|
||||
bc
|
||||
binutils
|
||||
cpio
|
||||
dosfstools
|
||||
coreutils
|
||||
pax-utils
|
||||
gettext
|
||||
glibc
|
||||
libelf
|
||||
@@ -34,18 +38,20 @@ makedepends=(
|
||||
python-sphinx
|
||||
python-yaml
|
||||
texlive-latexextra
|
||||
|
||||
)
|
||||
options=(
|
||||
!debug
|
||||
)
|
||||
_bcachefs_src_dir=bcachefs-tools-$_bcachefs_ver
|
||||
_nyanit_src=v${_nyanit_ver}.tar.gz
|
||||
_nyanit_src_dir=nyanit
|
||||
_bcachefs_src_dir=bcachefs-tools-$_bcachefs_ver
|
||||
_srcname=linux-$pkgver
|
||||
_srctag=v$pkgver
|
||||
|
||||
source=(
|
||||
https://cdn.kernel.org/pub/linux/kernel/v${pkgver%%.*}.x/${_srcname}.tar.{xz,sign}
|
||||
https://github.com/koverstreet/bcachefs-tools/archive/refs/tags/v${_bcachefs_ver}.tar.gz
|
||||
https://dev.kira-linux.org/kira-linux/nyanit/archive/${_nyanit_src}
|
||||
0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch
|
||||
0002-drm-amdgpu-avoid-memory-allocation-in-the-critical-code-path-v3.patch
|
||||
0003-drm-amdgpu-use-GFP_ATOMIC-instead-of-NOWAIT-in-the-critical-path.patch
|
||||
@@ -59,24 +65,26 @@ validpgpkeys=(
|
||||
)
|
||||
|
||||
# https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
|
||||
sha256sums=('17fc72f0f8d4a8a8633a5d20085f5d9c5a5ec51ee896a0b7ae1ec25da31273ea'
|
||||
sha256sums=('f410638061a165c12f42ab871d2f3fcd525515359b5faeee80969cff84524df9'
|
||||
'SKIP'
|
||||
'968a526018383002446a7560a58af0453c408fc21dc93fb2be7c401bc50b9433'
|
||||
'102a17a6e163e210a1adca44977481ff6ec537d932556f598f8f72c2cd187163'
|
||||
'9c8e20c3d32174037b26fea4e936467ed9391284bf7ff4675ecf4a83fd820742'
|
||||
'e5bda61fa4405571a0267cd8812329bb8a432a37efb50459461628d371849906'
|
||||
'c31b8c0ace123f5c1a0012a1254272eea9ac9cdd0d3e5d538ca6b11830dd01b0'
|
||||
'0f482368b62c3cece941e2d3ba497bf322db59315df5c2f72500fc1318e4768e'
|
||||
'a4a871dacc206d70527438272130f1ca04dbe3500e73309d21370ca1864c2e03'
|
||||
'3d9965a4126af3ab86a13eef5255511219ee11863151a6e78e08119775f0c002'
|
||||
'c6aa9877b0612805690d8abfc13c941530a11a7b56979d814e674c86c42ca0cf')
|
||||
b2sums=('004e68e62fc813cef33b08c993c5a7164a578e68195ba831c4cd654e8624004049e9486ec96ed7e5dbb9f983a06ba2ec4a624adeb01339ed690d4990c39449bd'
|
||||
'189a5399a0959fe898acdaab62e2059cb4996175deebed64783671a4dc44ee4f'
|
||||
'0fe2d1da5cc93a4f1fc9cacdb02b4bed59cc0ea0ef1474a42ac2b2ad068f6690'
|
||||
'7427571bf433c71507749e356326bee4308359e15018809b7b7a332c31d2a611')
|
||||
b2sums=('c329021f6ac359c07f3863c5493694330020540632a6b9a15033b3440dbef116d84a652c71cd3dd12fca680f5b49edaf568f841d087eb4a2c34b890a078b9672'
|
||||
'SKIP'
|
||||
'c66e7a7e201c1bbe698a1037426453d3ec23cf8e0043650519cd2b541de037a8f2a92af7aa3555afe10283156097d0c6d94b8833c1d3f06133f05a63bbff8be1'
|
||||
'6052a721ef9a7aa5887704f23657eab1794f8eb02781b4ddeeb0b7392e3bc1812f958a34d21b724073b5c29e2ed8d81726bb4e63f7fbb420c811e01c161c5296'
|
||||
'05f25e60c491b7ef558d832addd44784db09170418f643ad341050dddb60a78fb9feb9fb47603cdd4a651eacf1b1cbf515bf37dadf84b8dfc2755c1eeead7c30'
|
||||
'5b3597cab8b174ff41b3f17aae6d1376a155356f781542e2e176d66c5a6dee53f7a1db8e2b9540ce8246efac4e27476c882fc8cc8063f0f514ae09230b5aef0a'
|
||||
'a71f78bea42d158fc9383f2bbb985dafa71274d2032876b67f84602c8085b1c53f3d36965e54e5fdbab5c0d7537c98d917bd7743d3cf373c1dcb6da3bc19f4e7'
|
||||
'c9d4ec8fac86a9b6f0567c57f6d5be04d56f8efbc9dc1b183981dad38387d750b53c17fcdd295cb68a874bf50f81d117cfe94bd3a8d9e08e1918644ae8daa3e5'
|
||||
'e94543206de5128f97cd6ee38b8165d3463237ceca6e03f87b84fd047c96808d17222a6f8bf2ff601d301730be9e3eeba44183c2bc908a4eb8ad5d7003ca2aff'
|
||||
'f15503d1d297cbdec05932ce19cf606aeb47661d65d02907ae859c1584439c214fae1f1521e87ddcaaf1f11585c7c78b932992c6da00c6f21cbb673cb059f788'
|
||||
'2d581d66fe4e4afe0158755f5ea0cd0df9765b63464cb81e2b9115a37230e4489f16526393c47009c4392e5de70d2d37e496f764ad89e214ec7010c5bbfbcfc1')
|
||||
'c0a6a394142c86874147fe266fbdde883fe979c638e0110647ee1d4e4fc69b3d14fe389c142e09dd00787855a6248e8a01d5ee4bbce6bc502d3e0c1d69074d6d'
|
||||
'e8a191e7ba62287b338849de458e4a228403b01b930b4068ec4d28989e8691aae8c969551d8661988c7abf4667ef634750d9cdd820c9300596f5f6278660c8ff'
|
||||
'bfc657b9bbb0a12f98f5c9ac1d50eb1d74912d775245e1b65f0c171f4f87d664122f595caa5147b60975c0baf4e9a2b1b0be046c4b2a95a0760a666391ff5f06')
|
||||
|
||||
export KBUILD_BUILD_HOST=kiralinux
|
||||
export KBUILD_BUILD_USER=$pkgbase
|
||||
@@ -117,22 +125,39 @@ prepare() {
|
||||
|
||||
#No need to apply this unless something changes
|
||||
|
||||
echo "################## Apply kira_config_x86_64_smol.fragment ################## "
|
||||
./scripts/kconfig/merge_config.sh .config "$srcdir/kira_config_x86_64_smol.fragment"
|
||||
echo "################## DONE Apply kira_config_x86_64_smol.fragment #####################"
|
||||
echo ""
|
||||
|
||||
echo "################## Apply kira_disable_guest_vm.fragment ##################"
|
||||
./scripts/kconfig/merge_config.sh .config "$srcdir/kira_disable_guest_vm.fragment"
|
||||
echo "################## DONE Apply kira_disable_guest_vm.fragment #####################"
|
||||
echo ""
|
||||
# echo "################## Apply kira_config_x86_64_smol.fragment ################## "
|
||||
# ./scripts/kconfig/merge_config.sh .config "$srcdir/kira_config_x86_64_smol.fragment"
|
||||
# echo "################## DONE Apply kira_config_x86_64_smol.fragment #####################"
|
||||
# echo ""
|
||||
#
|
||||
# echo "################## Apply kira_disable_guest_vm.fragment ##################"
|
||||
# ./scripts/kconfig/merge_config.sh .config "$srcdir/kira_disable_guest_vm.fragment"
|
||||
# echo "################## DONE Apply kira_disable_guest_vm.fragment #####################"
|
||||
# echo ""
|
||||
|
||||
make -s kernelrelease > version
|
||||
echo "Prepared $pkgbase version $(<version)"
|
||||
}
|
||||
|
||||
|
||||
build() {
|
||||
|
||||
echo "Building NYANIT..."
|
||||
cd $_nyanit_src_dir
|
||||
cargo build --release
|
||||
cp target/release/nyanit $srcdir/init
|
||||
chmod +x $srcdir/init
|
||||
echo "##### DONE Building NYANIT #####"
|
||||
echo ""
|
||||
|
||||
echo "Build initramfs image..."
|
||||
cd $srcdir
|
||||
$_nyanit_src_dir/build_initcpio.sh $srcdir
|
||||
mv $srcdir/initramfs.cpio $srcdir/$_srcname/
|
||||
echo ""
|
||||
|
||||
echo "Build Linux..."
|
||||
|
||||
cd $srcdir/$_srcname
|
||||
|
||||
echo "Building docs..."
|
||||
@@ -141,6 +166,7 @@ build() {
|
||||
|
||||
echo "Building all"
|
||||
make all
|
||||
echo ""
|
||||
|
||||
# BPF stuff that makes world a worse place
|
||||
# make -C tools/bpf/bpftool vmlinux.h feature-clang-bpf-co-re=1
|
||||
@@ -208,6 +234,7 @@ _package() {
|
||||
NTSYNC-MODULE
|
||||
VIRTUALBOX-GUEST-MODULES
|
||||
WIREGUARD-MODULE
|
||||
'initramfs'
|
||||
)
|
||||
replaces=(
|
||||
wireguard-lts
|
||||
@@ -226,8 +253,8 @@ _package() {
|
||||
echo "$pkgbase" | install -Dm644 /dev/stdin "$modulesdir/pkgbase"
|
||||
|
||||
echo "Installing modules..."
|
||||
ZSTD_CLEVEL=19 make INSTALL_MOD_PATH="$pkgdir/usr" INSTALL_MOD_STRIP=1 \
|
||||
DEPMOD=/doesnt/exist modules_install # Suppress depmod
|
||||
ZSTD_CLEVEL=9 make INSTALL_MOD_PATH="$pkgdir/usr" INSTALL_MOD_STRIP=1 \
|
||||
DEPMOD=/doesnt/exist modules_install # Suppress depmod
|
||||
|
||||
# remove build link
|
||||
rm "$modulesdir"/build
|
||||
|
||||
+23
-11
@@ -1,19 +1,19 @@
|
||||
#
|
||||
# Automatically generated file; DO NOT EDIT.
|
||||
# Linux/x86 6.18.41 Kernel Configuration
|
||||
# Linux/x86 6.18.46 Kernel Configuration
|
||||
#
|
||||
CONFIG_CC_VERSION_TEXT="gcc (GCC) 16.1.1 20260625"
|
||||
CONFIG_CC_VERSION_TEXT="gcc (GCC) 16.2.1 20260810"
|
||||
CONFIG_CC_IS_GCC=y
|
||||
CONFIG_GCC_VERSION=160101
|
||||
CONFIG_GCC_VERSION=160201
|
||||
CONFIG_CLANG_VERSION=0
|
||||
CONFIG_AS_IS_GNU=y
|
||||
CONFIG_AS_VERSION=24601
|
||||
CONFIG_AS_VERSION=24700
|
||||
CONFIG_LD_IS_BFD=y
|
||||
CONFIG_LD_VERSION=24601
|
||||
CONFIG_LD_VERSION=24700
|
||||
CONFIG_LLD_VERSION=0
|
||||
CONFIG_RUSTC_VERSION=109600
|
||||
CONFIG_RUSTC_VERSION=109701
|
||||
CONFIG_RUST_IS_AVAILABLE=y
|
||||
CONFIG_RUSTC_LLVM_VERSION=220102
|
||||
CONFIG_RUSTC_LLVM_VERSION=220108
|
||||
CONFIG_CC_CAN_LINK=y
|
||||
CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
|
||||
CONFIG_CC_HAS_ASM_GOTO_TIED_OUTPUT=y
|
||||
@@ -237,7 +237,7 @@ CONFIG_NET_NS=y
|
||||
CONFIG_SCHED_AUTOGROUP=y
|
||||
CONFIG_RELAY=y
|
||||
CONFIG_BLK_DEV_INITRD=y
|
||||
CONFIG_INITRAMFS_SOURCE="/usr/share/bzz-initrd/initramfs.cpio"
|
||||
CONFIG_INITRAMFS_SOURCE="initramfs.cpio"
|
||||
CONFIG_INITRAMFS_ROOT_UID=0
|
||||
CONFIG_INITRAMFS_ROOT_GID=0
|
||||
CONFIG_RD_GZIP=y
|
||||
@@ -310,7 +310,7 @@ CONFIG_PERF_EVENTS=y
|
||||
CONFIG_SYSTEM_DATA_VERIFICATION=y
|
||||
# CONFIG_PROFILING is not set
|
||||
CONFIG_RUST=y
|
||||
CONFIG_RUSTC_VERSION_TEXT="rustc 1.96.0 (ac68faa20 2026-05-25)"
|
||||
CONFIG_RUSTC_VERSION_TEXT="rustc 1.97.1 (8bab26f4f 2026-07-14) (Artix Linux rust 1:1.97.1-1)"
|
||||
CONFIG_BINDGEN_VERSION_TEXT="bindgen 0.72.1"
|
||||
CONFIG_TRACEPOINTS=y
|
||||
|
||||
@@ -2323,6 +2323,7 @@ CONFIG_CXL_SUSPEND=y
|
||||
CONFIG_CXL_REGION=y
|
||||
# CONFIG_CXL_REGION_INVALIDATION_TEST is not set
|
||||
CONFIG_CXL_MCE=y
|
||||
CONFIG_CXL_RAS=y
|
||||
CONFIG_PCCARD=m
|
||||
CONFIG_PCMCIA=m
|
||||
CONFIG_PCMCIA_LOAD_CIS=y
|
||||
@@ -6960,6 +6961,7 @@ CONFIG_PANEL=m
|
||||
# CONFIG_AGP is not set
|
||||
CONFIG_INTEL_GTT=m
|
||||
CONFIG_VGA_SWITCHEROO=y
|
||||
CONFIG_GPU_BUDDY=y
|
||||
# CONFIG_NOVA_CORE is not set
|
||||
CONFIG_DRM=y
|
||||
|
||||
@@ -9285,7 +9287,6 @@ CONFIG_UIO_SERCOS3=m
|
||||
CONFIG_UIO_PCI_GENERIC=m
|
||||
CONFIG_UIO_NETX=m
|
||||
CONFIG_UIO_MF624=m
|
||||
CONFIG_UIO_HV_GENERIC=m
|
||||
CONFIG_UIO_DFL=m
|
||||
CONFIG_VFIO=m
|
||||
CONFIG_VFIO_DEVICE_CDEV=y
|
||||
@@ -11145,12 +11146,23 @@ CONFIG_NFS_V4=m
|
||||
# CONFIG_NFS_USE_LEGACY_DNS is not set
|
||||
CONFIG_NFS_USE_KERNEL_DNS=y
|
||||
# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
|
||||
# CONFIG_NFSD is not set
|
||||
CONFIG_NFSD=m
|
||||
# CONFIG_NFSD_V2 is not set
|
||||
CONFIG_NFSD_V3_ACL=y
|
||||
CONFIG_NFSD_V4=y
|
||||
CONFIG_NFSD_PNFS=y
|
||||
CONFIG_NFSD_BLOCKLAYOUT=y
|
||||
CONFIG_NFSD_SCSILAYOUT=y
|
||||
# CONFIG_NFSD_FLEXFILELAYOUT is not set
|
||||
CONFIG_NFSD_V4_SECURITY_LABEL=y
|
||||
# CONFIG_NFSD_LEGACY_CLIENT_TRACKING is not set
|
||||
# CONFIG_NFSD_V4_DELEG_TIMESTAMPS is not set
|
||||
CONFIG_GRACE_PERIOD=m
|
||||
CONFIG_LOCKD=m
|
||||
CONFIG_LOCKD_V4=y
|
||||
CONFIG_NFS_ACL_SUPPORT=m
|
||||
CONFIG_NFS_COMMON=y
|
||||
# CONFIG_NFS_LOCALIO is not set
|
||||
CONFIG_SUNRPC=m
|
||||
CONFIG_SUNRPC_GSS=m
|
||||
CONFIG_RPCSEC_GSS_KRB5=m
|
||||
|
||||
@@ -6,24 +6,19 @@ CONFIG_TOOLS_SUPPORT_RELR=y
|
||||
CONFIG_RUST=y
|
||||
CONFIG_RUST_OVERFLOW_CHECKS=y
|
||||
|
||||
#
|
||||
# We need to disable CONFIG_WERROR because of stupid bcachefs rust stuff
|
||||
#
|
||||
|
||||
# CONFIG_COMPILE_TEST is not set
|
||||
# CONFIG_WERROR is not set
|
||||
|
||||
#
|
||||
# Standard default for not get timers interrupts on idle CPUs.
|
||||
#
|
||||
|
||||
|
||||
CONFIG_NO_HZ_COMMON=y
|
||||
# CONFIG_HZ_PERIODIC is not set
|
||||
CONFIG_NO_HZ_IDLE=y
|
||||
# CONFIG_NO_HZ_FULL is not set
|
||||
|
||||
|
||||
#
|
||||
# This option reduces kernel latency by adding explicit preemption points throughout the kernel code
|
||||
#
|
||||
|
||||
# CONFIG_PREEMPT_NONE is not set
|
||||
# CONFIG_PREEMPT_VOLUNTARY is not set
|
||||
# CONFIG_PREEMPT is not set
|
||||
@@ -32,9 +27,14 @@ CONFIG_PREEMPT_LAZY=y
|
||||
|
||||
|
||||
|
||||
CONFIG_MODULES=y
|
||||
CONFIG_MODULE_UNLOAD=y
|
||||
CONFIG_MODPROBE=y
|
||||
CONFIG_MODULE_COMPRESS=y
|
||||
CONFIG_MODULE_SIG=y
|
||||
# CONFIG_MODULE_SIG_FORCE is not set
|
||||
CONFIG_MODULE_SIG_ALL=y
|
||||
CONFIG_MODULE_SIG_FORMAT=y
|
||||
# CONFIG_MODULE_SIG_SHA1 is not set
|
||||
# CONFIG_MODULE_SIG_SHA256 is not set
|
||||
# CONFIG_MODULE_SIG_SHA384 is not set
|
||||
@@ -43,19 +43,18 @@ CONFIG_MODULE_SIG_ALL=y
|
||||
# CONFIG_MODULE_SIG_SHA3_384 is not set
|
||||
CONFIG_MODULE_SIG_SHA3_512=y
|
||||
CONFIG_MODULE_SIG_HASH="sha3-512"
|
||||
|
||||
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
|
||||
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
|
||||
CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
|
||||
CONFIG_MODULE_COMPRESS_ZSTD=y
|
||||
CONFIG_MODULE_COMPRESS_ALL=y
|
||||
CONFIG_MODULE_DECOMPRESS=y
|
||||
CONFIG_MODPROBE_PATH="/sbin/modprobe"
|
||||
|
||||
|
||||
#
|
||||
# SATA
|
||||
#
|
||||
CONFIG_SATA_AHCI=y
|
||||
|
||||
#
|
||||
# NVME Support
|
||||
#
|
||||
|
||||
CONFIG_NVME_COMMON=y
|
||||
CONFIG_NVME_CORE=y
|
||||
CONFIG_BLK_DEV_NVME=y
|
||||
@@ -72,40 +71,26 @@ CONFIG_BCACHEFS_FS=y
|
||||
|
||||
# CONFIG_DEBUG_KERNEL is not set
|
||||
|
||||
#
|
||||
# New proc acc file format
|
||||
#
|
||||
|
||||
CONFIG_BSD_PROCESS_ACCT_V3=y
|
||||
|
||||
#
|
||||
# ACPI platform devices
|
||||
#
|
||||
|
||||
CONFIG_X86_INTEL_LPSS=y
|
||||
CONFIG_X86_AMD_PLATFORM_DEVICE=y
|
||||
3
|
||||
|
||||
# Max CPUS - lover a bit to save resources
|
||||
#
|
||||
|
||||
CONFIG_NR_CPUS_DEFAULT=64
|
||||
CONFIG_NR_CPUS=64
|
||||
|
||||
#
|
||||
# Timer interrupts per second
|
||||
# Increase interactivity
|
||||
#
|
||||
|
||||
CONFIG_HZ_1000=y
|
||||
CONFIG_HZ=1000
|
||||
|
||||
#
|
||||
# bzz pss
|
||||
#
|
||||
|
||||
CONFIG_DRM_PANIC_FOREGROUND_COLOR=0xffbf00
|
||||
CONFIG_DRM_PANIC_BACKGROUND_COLOR=0x000000
|
||||
|
||||
|
||||
#
|
||||
# Frame buffer Devices
|
||||
#
|
||||
CONFIG_FB=y
|
||||
CONFIG_FB_VESA=y
|
||||
CONFIG_FB_EFI=y
|
||||
@@ -114,9 +99,7 @@ CONFIG_FB_NOTIFY=y
|
||||
CONFIG_FB_DEVICE=y
|
||||
CONFIG_FB_MODE_HELPERS=y
|
||||
|
||||
#
|
||||
# Graphics / GPU (Set to Module)
|
||||
#
|
||||
|
||||
CONFIG_DRM=y
|
||||
|
||||
CONFIG_DRM_SYSFB_HELPER=y
|
||||
@@ -130,9 +113,7 @@ CONFIG_DRM_AMDGPU_CIK=y
|
||||
CONFIG_DRM_AMDGPU_USERPTR=y
|
||||
CONFIG_DRM_AMD_ISP=y
|
||||
|
||||
#
|
||||
# Compression
|
||||
#
|
||||
|
||||
CONFIG_HAVE_KERNEL_LZ4=y
|
||||
CONFIG_HAVE_KERNEL_ZSTD=y
|
||||
|
||||
@@ -142,40 +123,19 @@ CONFIG_KERNEL_ZSTD=y
|
||||
CONFIG_DEFAULT_INIT=""
|
||||
CONFIG_DEFAULT_HOSTNAME="kiralinux"
|
||||
|
||||
#
|
||||
# Disabling BPF stuff
|
||||
#
|
||||
|
||||
# CONFIG_AF_KCM is not set
|
||||
# CONFIG_BPF_SYSCALL is not set
|
||||
|
||||
|
||||
#
|
||||
# Scheduler features
|
||||
# Increasing CONFIG_UCLAMP_BUCKETS_COUNT for more precise scheduling
|
||||
#
|
||||
CONFIG_UCLAMP_TASK=y
|
||||
CONFIG_UCLAMP_BUCKETS_COUNT=7
|
||||
|
||||
#
|
||||
# Definetly no need for desktop not involved in kernel development
|
||||
#
|
||||
|
||||
# CONFIG_PROFILING is not set
|
||||
|
||||
|
||||
|
||||
CONFIG_MODULES=y
|
||||
CONFIG_MODULE_UNLOAD=y
|
||||
CONFIG_MODPROBE=y
|
||||
CONFIG_MODULE_COMPRESS=y
|
||||
CONFIG_MODULE_SIG_FORMAT=y
|
||||
CONFIG_MODULE_SIG_ALL=y
|
||||
CONFIG_MODULE_SIG_SHA3_512=y
|
||||
CONFIG_MODULE_SIG_HASH="sha3-512"
|
||||
CONFIG_MODULE_COMPRESS_ZSTD=y
|
||||
CONFIG_MODULE_COMPRESS_ALL=y
|
||||
CONFIG_MODULE_DECOMPRESS=y
|
||||
CONFIG_MODPROBE_PATH="/sbin/modprobe"
|
||||
|
||||
CONFIG_BLK_INLINE_ENCRYPTION=y
|
||||
CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
|
||||
|
||||
@@ -186,30 +146,19 @@ CONFIG_BLK_PM=y
|
||||
CONFIG_BLK_MQ_STACKING=y
|
||||
|
||||
|
||||
#
|
||||
# Disabling ZSWAP - currently its acts in retarded way.
|
||||
# Possibly causing issues not classified as related to it.
|
||||
# Users should prefer ZRAM or SWAP+ZRAM combination
|
||||
#
|
||||
CONFIG_SWAP=y
|
||||
# CONFIG_ZSWAP is not set
|
||||
CONFIG_ZSMALLOC=y
|
||||
|
||||
|
||||
#
|
||||
# Firmware loader
|
||||
#
|
||||
CONFIG_FW_LOADER=y
|
||||
|
||||
|
||||
#
|
||||
# enables support for parsing and handling UEFI Common Platform Error Records (CPER)
|
||||
#
|
||||
|
||||
CONFIG_UEFI_CPER=y
|
||||
CONFIG_UEFI_CPER_X86=y
|
||||
|
||||
|
||||
|
||||
CONFIG_ZRAM=y
|
||||
CONFIG_ZRAM_BACKEND_LZ4=y
|
||||
CONFIG_ZRAM_BACKEND_LZ4HC=y
|
||||
@@ -227,18 +176,13 @@ CONFIG_ZRAM_MEMORY_TRACKING=y
|
||||
CONFIG_ZRAM_MULTI_COMP=y
|
||||
|
||||
|
||||
#
|
||||
# Allow the SCSI subsystem to probe for devices in parallel with the rest of the system boot process.
|
||||
#
|
||||
CONFIG_SCSI_SCAN_ASYNC=y
|
||||
|
||||
|
||||
CONFIG_USB_SUPPORT=y
|
||||
CONFIG_USB_COMMON=y
|
||||
|
||||
#
|
||||
# USB HID support
|
||||
#
|
||||
|
||||
CONFIG_USB_HID=y
|
||||
CONFIG_HID_PID=y
|
||||
CONFIG_USB_HIDDEV=y
|
||||
@@ -248,17 +192,13 @@ CONFIG_INTEGRITY=y
|
||||
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
|
||||
CONFIG_LOAD_UEFI_KEYS=y
|
||||
|
||||
#
|
||||
# Bounds checking
|
||||
#
|
||||
|
||||
CONFIG_FORTIFY_SOURCE=y
|
||||
CONFIG_HARDENED_USERCOPY=y
|
||||
CONFIG_HARDENED_USERCOPY_DEFAULT_ON=y
|
||||
|
||||
|
||||
#
|
||||
# Hardening of kernel data structures
|
||||
#
|
||||
|
||||
CONFIG_LIST_HARDENED=y
|
||||
|
||||
CONFIG_RANDSTRUCT_NONE=y
|
||||
@@ -273,23 +213,16 @@ CONFIG_ASYNC_RAID6_RECOV=y
|
||||
CONFIG_CRYPTO=y
|
||||
|
||||
|
||||
# Length-preserving ciphers and modes
|
||||
#
|
||||
CONFIG_CRYPTO_CHACHA20=y
|
||||
CONFIG_CRYPTO_XTS=y
|
||||
CONFIG_CRYPTO_NHPOLY1305=y
|
||||
|
||||
|
||||
# AEAD (authenticated encryption with associated data) ciphers
|
||||
# This is what bcachefs uses
|
||||
#
|
||||
CONFIG_CRYPTO_CHACHA20POLY1305=y
|
||||
|
||||
CONFIG_CRYPTO_CHACHA20POLY1305=y
|
||||
CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y
|
||||
|
||||
|
||||
# Hashes, digests, and MACs
|
||||
#
|
||||
CONFIG_CRYPTO_BLAKE2B=y
|
||||
CONFIG_CRYPTO_POLYVAL=y
|
||||
CONFIG_CRYPTO_SHA256=y
|
||||
@@ -297,22 +230,16 @@ CONFIG_CRYPTO_SHA512=y
|
||||
CONFIG_CRYPTO_SHA3=y
|
||||
|
||||
|
||||
# CRCs (cyclic redundancy checks)
|
||||
#
|
||||
CONFIG_CRYPTO_CRC32C=y
|
||||
CONFIG_CRYPTO_CRC32=y
|
||||
|
||||
# Compression
|
||||
#
|
||||
|
||||
CONFIG_CRYPTO_LZ4=y
|
||||
CONFIG_CRYPTO_LZ4HC=m
|
||||
CONFIG_CRYPTO_ZSTD=y
|
||||
|
||||
|
||||
#
|
||||
# Userspace crypto interface - will be removed from kernel
|
||||
# Enabling some required by IWG
|
||||
#
|
||||
|
||||
CONFIG_CRYPTO_USER_API=y
|
||||
CONFIG_CRYPTO_USER_API_HASH=y
|
||||
CONFIG_CRYPTO_USER_API_SKCIPHER=y
|
||||
@@ -325,8 +252,7 @@ CONFIG_CRYPTO_USER_API_RNG=y
|
||||
CONFIG_CRYPTO_HW=y
|
||||
|
||||
|
||||
# More fonts
|
||||
#
|
||||
|
||||
CONFIG_FONT_SUPPORT=y
|
||||
CONFIG_FONTS=y
|
||||
CONFIG_FONT_8x8=y
|
||||
@@ -336,8 +262,7 @@ CONFIG_FONT_TER16x32=y
|
||||
CONFIG_FONT_SUN12x22=y
|
||||
|
||||
|
||||
# printk and dmesg options
|
||||
#
|
||||
|
||||
CONFIG_PRINTK_TIME=y
|
||||
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=4
|
||||
CONFIG_CONSOLE_LOGLEVEL_QUIET=1
|
||||
@@ -350,9 +275,8 @@ CONFIG_X86_INTEL_TSX_MODE_ON=y
|
||||
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
|
||||
|
||||
|
||||
# UKI And Secure boot
|
||||
#
|
||||
|
||||
CONFIG_EFI=y
|
||||
CONFIG_EFI_STUB=y
|
||||
CONFIG_INITRAMFS_SOURCE="/usr/share/bzz-initrd/initramfs.cpio"
|
||||
CONFIG_INITRAMFS_SOURCE="initramfs.cpio"
|
||||
CONFIG_INITRAMFS_COMPRESSION_LZ4=y
|
||||
|
||||
@@ -0,0 +1,358 @@
|
||||
CONFIG_CC_IS_GCC=y
|
||||
CONFIG_AS_IS_GNU=y
|
||||
CONFIG_RUST_IS_AVAILABLE=y
|
||||
CONFIG_TOOLS_SUPPORT_RELR=y
|
||||
|
||||
CONFIG_RUST=y
|
||||
CONFIG_RUST_OVERFLOW_CHECKS=y
|
||||
|
||||
#
|
||||
# We need to disable CONFIG_WERROR because of stupid bcachefs rust stuff
|
||||
#
|
||||
# CONFIG_COMPILE_TEST is not set
|
||||
# CONFIG_WERROR is not set
|
||||
|
||||
#
|
||||
# Standard default for not get timers interrupts on idle CPUs.
|
||||
#
|
||||
CONFIG_NO_HZ_COMMON=y
|
||||
# CONFIG_HZ_PERIODIC is not set
|
||||
CONFIG_NO_HZ_IDLE=y
|
||||
# CONFIG_NO_HZ_FULL is not set
|
||||
|
||||
|
||||
#
|
||||
# This option reduces kernel latency by adding explicit preemption points throughout the kernel code
|
||||
#
|
||||
# CONFIG_PREEMPT_NONE is not set
|
||||
# CONFIG_PREEMPT_VOLUNTARY is not set
|
||||
# CONFIG_PREEMPT is not set
|
||||
CONFIG_PREEMPT_LAZY=y
|
||||
# CONFIG_PREEMPT_RT is not set
|
||||
|
||||
|
||||
|
||||
CONFIG_MODULE_SIG=y
|
||||
# CONFIG_MODULE_SIG_FORCE is not set
|
||||
CONFIG_MODULE_SIG_ALL=y
|
||||
# CONFIG_MODULE_SIG_SHA1 is not set
|
||||
# CONFIG_MODULE_SIG_SHA256 is not set
|
||||
# CONFIG_MODULE_SIG_SHA384 is not set
|
||||
# CONFIG_MODULE_SIG_SHA512 is not set
|
||||
# CONFIG_MODULE_SIG_SHA3_256 is not set
|
||||
# CONFIG_MODULE_SIG_SHA3_384 is not set
|
||||
CONFIG_MODULE_SIG_SHA3_512=y
|
||||
CONFIG_MODULE_SIG_HASH="sha3-512"
|
||||
|
||||
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
|
||||
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
|
||||
CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
|
||||
|
||||
#
|
||||
# SATA
|
||||
#
|
||||
CONFIG_SATA_AHCI=y
|
||||
|
||||
#
|
||||
# NVME Support
|
||||
#
|
||||
CONFIG_NVME_COMMON=y
|
||||
CONFIG_NVME_CORE=y
|
||||
CONFIG_BLK_DEV_NVME=y
|
||||
CONFIG_NVME_MULTIPATH=y
|
||||
CONFIG_NVME_VERBOSE_ERRORS=y
|
||||
CONFIG_NVME_HWMON=y
|
||||
|
||||
|
||||
CONFIG_IO_URING=y
|
||||
CONFIG_IO_URING_ZCRX=y
|
||||
|
||||
CONFIG_BCACHEFS_FS=y
|
||||
# CONFIG_BCACHEFS_DEBUG is not set
|
||||
|
||||
# CONFIG_DEBUG_KERNEL is not set
|
||||
|
||||
#
|
||||
# New proc acc file format
|
||||
#
|
||||
CONFIG_BSD_PROCESS_ACCT_V3=y
|
||||
|
||||
#
|
||||
# ACPI platform devices
|
||||
#
|
||||
CONFIG_X86_INTEL_LPSS=y
|
||||
CONFIG_X86_AMD_PLATFORM_DEVICE=y
|
||||
3
|
||||
|
||||
# Max CPUS - lover a bit to save resources
|
||||
#
|
||||
CONFIG_NR_CPUS_DEFAULT=64
|
||||
CONFIG_NR_CPUS=64
|
||||
|
||||
#
|
||||
# Timer interrupts per second
|
||||
# Increase interactivity
|
||||
#
|
||||
CONFIG_HZ_1000=y
|
||||
CONFIG_HZ=1000
|
||||
|
||||
#
|
||||
# bzz pss
|
||||
#
|
||||
CONFIG_DRM_PANIC_FOREGROUND_COLOR=0xffbf00
|
||||
CONFIG_DRM_PANIC_BACKGROUND_COLOR=0x000000
|
||||
|
||||
|
||||
#
|
||||
# Frame buffer Devices
|
||||
#
|
||||
CONFIG_FB=y
|
||||
CONFIG_FB_VESA=y
|
||||
CONFIG_FB_EFI=y
|
||||
CONFIG_FB_CORE=y
|
||||
CONFIG_FB_NOTIFY=y
|
||||
CONFIG_FB_DEVICE=y
|
||||
CONFIG_FB_MODE_HELPERS=y
|
||||
|
||||
#
|
||||
# Graphics / GPU (Set to Module)
|
||||
#
|
||||
CONFIG_DRM=y
|
||||
|
||||
CONFIG_DRM_SYSFB_HELPER=y
|
||||
CONFIG_DRM_SIMPLEDRM=y
|
||||
|
||||
CONFIG_DRM_RADEON=m
|
||||
CONFIG_DRM_RADEON_USERPTR=y
|
||||
CONFIG_DRM_AMDGPU=m
|
||||
CONFIG_DRM_AMDGPU_SI=y
|
||||
CONFIG_DRM_AMDGPU_CIK=y
|
||||
CONFIG_DRM_AMDGPU_USERPTR=y
|
||||
CONFIG_DRM_AMD_ISP=y
|
||||
|
||||
#
|
||||
# Compression
|
||||
#
|
||||
CONFIG_HAVE_KERNEL_LZ4=y
|
||||
CONFIG_HAVE_KERNEL_ZSTD=y
|
||||
|
||||
CONFIG_KERNEL_ZSTD=y
|
||||
|
||||
|
||||
CONFIG_DEFAULT_INIT=""
|
||||
CONFIG_DEFAULT_HOSTNAME="kiralinux"
|
||||
|
||||
#
|
||||
# Disabling BPF stuff
|
||||
#
|
||||
# CONFIG_AF_KCM is not set
|
||||
# CONFIG_BPF_SYSCALL is not set
|
||||
|
||||
|
||||
#
|
||||
# Scheduler features
|
||||
# Increasing CONFIG_UCLAMP_BUCKETS_COUNT for more precise scheduling
|
||||
#
|
||||
CONFIG_UCLAMP_TASK=y
|
||||
CONFIG_UCLAMP_BUCKETS_COUNT=7
|
||||
|
||||
#
|
||||
# Definetly no need for desktop not involved in kernel development
|
||||
#
|
||||
# CONFIG_PROFILING is not set
|
||||
|
||||
|
||||
|
||||
CONFIG_MODULES=y
|
||||
CONFIG_MODULE_UNLOAD=y
|
||||
CONFIG_MODPROBE=y
|
||||
CONFIG_MODULE_COMPRESS=y
|
||||
CONFIG_MODULE_SIG_FORMAT=y
|
||||
CONFIG_MODULE_SIG_ALL=y
|
||||
CONFIG_MODULE_SIG_SHA3_512=y
|
||||
CONFIG_MODULE_SIG_HASH="sha3-512"
|
||||
CONFIG_MODULE_COMPRESS_ZSTD=y
|
||||
CONFIG_MODULE_COMPRESS_ALL=y
|
||||
CONFIG_MODULE_DECOMPRESS=y
|
||||
CONFIG_MODPROBE_PATH="/sbin/modprobe"
|
||||
|
||||
CONFIG_BLK_INLINE_ENCRYPTION=y
|
||||
CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
|
||||
|
||||
|
||||
CONFIG_EFI_PARTITION=y
|
||||
|
||||
CONFIG_BLK_PM=y
|
||||
CONFIG_BLK_MQ_STACKING=y
|
||||
|
||||
|
||||
#
|
||||
# Disabling ZSWAP - currently its acts in retarded way.
|
||||
# Possibly causing issues not classified as related to it.
|
||||
# Users should prefer ZRAM or SWAP+ZRAM combination
|
||||
#
|
||||
CONFIG_SWAP=y
|
||||
# CONFIG_ZSWAP is not set
|
||||
CONFIG_ZSMALLOC=y
|
||||
|
||||
|
||||
#
|
||||
# Firmware loader
|
||||
#
|
||||
CONFIG_FW_LOADER=y
|
||||
|
||||
|
||||
#
|
||||
# enables support for parsing and handling UEFI Common Platform Error Records (CPER)
|
||||
#
|
||||
CONFIG_UEFI_CPER=y
|
||||
CONFIG_UEFI_CPER_X86=y
|
||||
|
||||
|
||||
|
||||
CONFIG_ZRAM=y
|
||||
CONFIG_ZRAM_BACKEND_LZ4=y
|
||||
CONFIG_ZRAM_BACKEND_LZ4HC=y
|
||||
CONFIG_ZRAM_BACKEND_ZSTD=y
|
||||
# CONFIG_ZRAM_BACKEND_DEFLATE is not set
|
||||
# CONFIG_ZRAM_BACKEND_842 is not set
|
||||
# CONFIG_ZRAM_BACKEND_LZO is not set
|
||||
CONFIG_ZRAM_DEF_COMP_LZ4=y
|
||||
# CONFIG_ZRAM_DEF_COMP_LZ4HC is not set
|
||||
# CONFIG_ZRAM_DEF_COMP_ZSTD is not set
|
||||
CONFIG_ZRAM_DEF_COMP="lz4"
|
||||
CONFIG_ZRAM_WRITEBACK=y
|
||||
CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y
|
||||
CONFIG_ZRAM_MEMORY_TRACKING=y
|
||||
CONFIG_ZRAM_MULTI_COMP=y
|
||||
|
||||
|
||||
#
|
||||
# Allow the SCSI subsystem to probe for devices in parallel with the rest of the system boot process.
|
||||
#
|
||||
CONFIG_SCSI_SCAN_ASYNC=y
|
||||
|
||||
|
||||
CONFIG_USB_SUPPORT=y
|
||||
CONFIG_USB_COMMON=y
|
||||
|
||||
#
|
||||
# USB HID support
|
||||
#
|
||||
CONFIG_USB_HID=y
|
||||
CONFIG_HID_PID=y
|
||||
CONFIG_USB_HIDDEV=y
|
||||
|
||||
|
||||
CONFIG_INTEGRITY=y
|
||||
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
|
||||
CONFIG_LOAD_UEFI_KEYS=y
|
||||
|
||||
#
|
||||
# Bounds checking
|
||||
#
|
||||
CONFIG_FORTIFY_SOURCE=y
|
||||
CONFIG_HARDENED_USERCOPY=y
|
||||
CONFIG_HARDENED_USERCOPY_DEFAULT_ON=y
|
||||
|
||||
|
||||
#
|
||||
# Hardening of kernel data structures
|
||||
#
|
||||
CONFIG_LIST_HARDENED=y
|
||||
|
||||
CONFIG_RANDSTRUCT_NONE=y
|
||||
|
||||
|
||||
CONFIG_XOR_BLOCKS=y
|
||||
CONFIG_ASYNC_CORE=y
|
||||
CONFIG_ASYNC_MEMCPY=y
|
||||
CONFIG_ASYNC_XOR=y
|
||||
CONFIG_ASYNC_PQ=y
|
||||
CONFIG_ASYNC_RAID6_RECOV=y
|
||||
CONFIG_CRYPTO=y
|
||||
|
||||
|
||||
# Length-preserving ciphers and modes
|
||||
#
|
||||
CONFIG_CRYPTO_CHACHA20=y
|
||||
CONFIG_CRYPTO_XTS=y
|
||||
CONFIG_CRYPTO_NHPOLY1305=y
|
||||
|
||||
|
||||
# AEAD (authenticated encryption with associated data) ciphers
|
||||
# This is what bcachefs uses
|
||||
#
|
||||
CONFIG_CRYPTO_CHACHA20POLY1305=y
|
||||
|
||||
CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y
|
||||
|
||||
|
||||
# Hashes, digests, and MACs
|
||||
#
|
||||
CONFIG_CRYPTO_BLAKE2B=y
|
||||
CONFIG_CRYPTO_POLYVAL=y
|
||||
CONFIG_CRYPTO_SHA256=y
|
||||
CONFIG_CRYPTO_SHA512=y
|
||||
CONFIG_CRYPTO_SHA3=y
|
||||
|
||||
|
||||
# CRCs (cyclic redundancy checks)
|
||||
#
|
||||
CONFIG_CRYPTO_CRC32C=y
|
||||
CONFIG_CRYPTO_CRC32=y
|
||||
|
||||
# Compression
|
||||
#
|
||||
CONFIG_CRYPTO_LZ4=y
|
||||
CONFIG_CRYPTO_LZ4HC=m
|
||||
CONFIG_CRYPTO_ZSTD=y
|
||||
|
||||
|
||||
#
|
||||
# Userspace crypto interface - will be removed from kernel
|
||||
# Enabling some required by IWG
|
||||
#
|
||||
CONFIG_CRYPTO_USER_API=y
|
||||
CONFIG_CRYPTO_USER_API_HASH=y
|
||||
CONFIG_CRYPTO_USER_API_SKCIPHER=y
|
||||
CONFIG_CRYPTO_USER_API_RNG=y
|
||||
# CONFIG_CRYPTO_USER_API_RNG_CAVP is not set
|
||||
# CONFIG_CRYPTO_USER_API_AEAD is not set
|
||||
# CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE is not set
|
||||
|
||||
|
||||
CONFIG_CRYPTO_HW=y
|
||||
|
||||
|
||||
# More fonts
|
||||
#
|
||||
CONFIG_FONT_SUPPORT=y
|
||||
CONFIG_FONTS=y
|
||||
CONFIG_FONT_8x8=y
|
||||
CONFIG_FONT_8x16=y
|
||||
CONFIG_FONT_10x18=y
|
||||
CONFIG_FONT_TER16x32=y
|
||||
CONFIG_FONT_SUN12x22=y
|
||||
|
||||
|
||||
# printk and dmesg options
|
||||
#
|
||||
CONFIG_PRINTK_TIME=y
|
||||
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=4
|
||||
CONFIG_CONSOLE_LOGLEVEL_QUIET=1
|
||||
CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4
|
||||
# CONFIG_BOOT_PRINTK_DELAY is not set
|
||||
CONFIG_SYMBOLIC_ERRNAME=y
|
||||
|
||||
# CONFIG_X86_INTEL_TSX_MODE_OFF is not set
|
||||
CONFIG_X86_INTEL_TSX_MODE_ON=y
|
||||
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
|
||||
|
||||
|
||||
# UKI And Secure boot
|
||||
#
|
||||
CONFIG_EFI=y
|
||||
CONFIG_EFI_STUB=y
|
||||
CONFIG_INITRAMFS_SOURCE="initramfs.cpio"
|
||||
CONFIG_INITRAMFS_COMPRESSION_LZ4=y
|
||||
@@ -1,11 +1,4 @@
|
||||
|
||||
#
|
||||
# We generally want to remove any not common for desktop virtualization features
|
||||
#
|
||||
# CONFIG_PCI_XEN is not set
|
||||
|
||||
#
|
||||
# Microsoft Hyper-V guest support
|
||||
#
|
||||
# CONFIG_HYPERV is not set
|
||||
|
||||
|
||||
@@ -0,0 +1,11 @@
|
||||
|
||||
#
|
||||
# We generally want to remove any not common for desktop virtualization features
|
||||
#
|
||||
# CONFIG_PCI_XEN is not set
|
||||
|
||||
#
|
||||
# Microsoft Hyper-V guest support
|
||||
#
|
||||
# CONFIG_HYPERV is not set
|
||||
|
||||
Reference in New Issue
Block a user