Compare commits

..
3 Commits
7 changed files with 462 additions and 138 deletions
+23 -16
View File
@@ -1,13 +1,16 @@
pkgbase = linux-kira-lts
pkgdesc = Kira LTS Linux
pkgver = 6.18.43
pkgrel = 1
pkgver = 6.18.46
pkgrel = 2
url = https://www.kernel.org
arch = x86_64
makedepends = bzz-initrd
makedepends = bcachefs-tools
makedepends = bc
makedepends = binutils
makedepends = cpio
makedepends = dosfstools
makedepends = coreutils
makedepends = pax-utils
makedepends = gettext
makedepends = glibc
makedepends = libelf
@@ -30,9 +33,10 @@ pkgbase = linux-kira-lts
makedepends = python-yaml
makedepends = texlive-latexextra
options = !debug
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.43.tar.xz
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.43.tar.sign
source = https://github.com/koverstreet/bcachefs-tools/archive/refs/tags/v1.39.1.tar.gz
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.46.tar.xz
source = https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.46.tar.sign
source = https://github.com/koverstreet/bcachefs-tools/archive/refs/tags/v1.39.2.tar.gz
source = https://dev.kira-linux.org/kira-linux/nyanit/archive/v0.2.1-1.tar.gz
source = 0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch
source = 0002-drm-amdgpu-avoid-memory-allocation-in-the-critical-code-path-v3.patch
source = 0003-drm-amdgpu-use-GFP_ATOMIC-instead-of-NOWAIT-in-the-critical-path.patch
@@ -41,24 +45,26 @@ pkgbase = linux-kira-lts
source = kira_disable_guest_vm.fragment
validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
sha256sums = a1aeb926c7c4a1564368200b1082e45bb958007682d804aff88abbc3a7a47b5d
sha256sums = f5d44b93808b02cc2969c5404ba081d97523719c9fd2ba2de6db318b4141cca0
sha256sums = SKIP
sha256sums = 4c29a25036c5795f9ebe0dbc619c803b73447e8f938bd40e7f7ea223d038a38d
sha256sums = 87e08942d4a94a38c463202cde31b2923e1fb67698e661a61c781f80b95e4997
sha256sums = 9c8e20c3d32174037b26fea4e936467ed9391284bf7ff4675ecf4a83fd820742
sha256sums = e5bda61fa4405571a0267cd8812329bb8a432a37efb50459461628d371849906
sha256sums = c31b8c0ace123f5c1a0012a1254272eea9ac9cdd0d3e5d538ca6b11830dd01b0
sha256sums = 0f482368b62c3cece941e2d3ba497bf322db59315df5c2f72500fc1318e4768e
sha256sums = 60a560c3c4324322dc97b6d4d75dea6182a17f6747b4a42054c053a99b1635df
sha256sums = a1f0001ec03f1f1d75d6f72165dc77b42145b3fc1c8de20afcd512c6c677482b
sha256sums = c6aa9877b0612805690d8abfc13c941530a11a7b56979d814e674c86c42ca0cf
b2sums = 434ba598863ac5ede162d7147a78884c2dc6090e8f0447f6368a681a0e7077143a0753c62f4ad6e1be8b971a46266bf00f3b3fe4218345483360bda86a3f855c
sha256sums = e652e2d7ccb388802684ae5ab4481fb33b78212b8a97d579b9be80060b02df18
sha256sums = 8e3c862d0f6927a01e91f630c794771260cf074993e9f319924098ce22e1c93b
sha256sums = 7427571bf433c71507749e356326bee4308359e15018809b7b7a332c31d2a611
b2sums = 0a378ec56bfc97a2de3403e37bc7a3fe8e3fb876f4afdb5278310362745ec192acd56c9330e42f52019b6c35244f95691efb14afed338347a95f9846fcb386ca
b2sums = SKIP
b2sums = 7aa199260780c3867295a2bbb46badddd9e9ec84a1339c2d26ebc79048181c88cf96246c1025611c7608962f2efe95769850d836aa927803135fe7a0232a0bfb
b2sums = 79d40bbd52345c6c2aa682ad1ddd8bc98b1e32110f34b82c0076cf6cadad9a24ea83e866727b9cbd18e23b46194d1f5a7b5d82e4e2719f3e97dc25f106a81d92
b2sums = 05f25e60c491b7ef558d832addd44784db09170418f643ad341050dddb60a78fb9feb9fb47603cdd4a651eacf1b1cbf515bf37dadf84b8dfc2755c1eeead7c30
b2sums = 5b3597cab8b174ff41b3f17aae6d1376a155356f781542e2e176d66c5a6dee53f7a1db8e2b9540ce8246efac4e27476c882fc8cc8063f0f514ae09230b5aef0a
b2sums = a71f78bea42d158fc9383f2bbb985dafa71274d2032876b67f84602c8085b1c53f3d36965e54e5fdbab5c0d7537c98d917bd7743d3cf373c1dcb6da3bc19f4e7
b2sums = c9d4ec8fac86a9b6f0567c57f6d5be04d56f8efbc9dc1b183981dad38387d750b53c17fcdd295cb68a874bf50f81d117cfe94bd3a8d9e08e1918644ae8daa3e5
b2sums = 58484f0e3123a3a5eac2f00d1a892dd51492ebbfd1dfd01ac9f05deaf733dd9c7993845a905f22c1e655d8fe74d40fb6e11d786626bea89a990616846c561141
b2sums = 7951209de07fd31600d838f34ca00fca94384f71936d81a0d3c0b3bd5069b984be1de31715a43e3badc828e3bc4129bebe090661c57395e80471be0cbc1302c9
b2sums = 2d581d66fe4e4afe0158755f5ea0cd0df9765b63464cb81e2b9115a37230e4489f16526393c47009c4392e5de70d2d37e496f764ad89e214ec7010c5bbfbcfc1
b2sums = 1127262c540b09fc030854db6e6f4c93ab2475956f986d6327c99a0ff87eea635ea7bb0d1cdb246d0a64b938d6be59cf847d359c6f084db2b424a0ceeebcfab7
b2sums = 9d1832cbb846f3e4630dce5cea2f31fdd9f828130caa3f1776ab60f024821bda022c9a0de4dedd9dd2f79c2f40ed9dc110b3885e0d89a65002bc317e32443461
b2sums = bfc657b9bbb0a12f98f5c9ac1d50eb1d74912d775245e1b65f0c171f4f87d664122f595caa5147b60975c0baf4e9a2b1b0be046c4b2a95a0760a666391ff5f06
pkgname = linux-kira-lts
pkgdesc = The Kira LTS Linux kernel and modules
@@ -104,6 +110,7 @@ pkgname = linux-kira-lts
provides = NTSYNC-MODULE
provides = VIRTUALBOX-GUEST-MODULES
provides = WIREGUARD-MODULE
provides = initramfs
replaces = wireguard-lts
replaces = bcachefs-dkms
+43 -16
View File
@@ -1,18 +1,22 @@
# Maintainer: Kira <[@kira](https://dev.kira-linux.org/kira)>
pkgbase=linux-kira-lts
pkgver=6.18.43
pkgrel=1
pkgver=6.18.46
pkgrel=2
pkgdesc='Kira LTS Linux'
url='https://www.kernel.org'
_bcachefs_ver=1.39.1
_bcachefs_ver=1.39.2
_nyanit_ver=0.2.1-1
arch=(x86_64)
makedepends=(
bzz-initrd
bcachefs-tools
bc
binutils
cpio
dosfstools
coreutils
pax-utils
gettext
glibc
libelf
@@ -34,18 +38,20 @@ makedepends=(
python-sphinx
python-yaml
texlive-latexextra
)
options=(
!debug
)
_bcachefs_src_dir=bcachefs-tools-$_bcachefs_ver
_nyanit_src=v${_nyanit_ver}.tar.gz
_nyanit_src_dir=nyanit
_bcachefs_src_dir=bcachefs-tools-$_bcachefs_ver
_srcname=linux-$pkgver
_srctag=v$pkgver
source=(
https://cdn.kernel.org/pub/linux/kernel/v${pkgver%%.*}.x/${_srcname}.tar.{xz,sign}
https://github.com/koverstreet/bcachefs-tools/archive/refs/tags/v${_bcachefs_ver}.tar.gz
https://dev.kira-linux.org/kira-linux/nyanit/archive/${_nyanit_src}
0001-ZEN-Add-sysctl-and-CONFIG-to-disallow-unprivileged-C.patch
0002-drm-amdgpu-avoid-memory-allocation-in-the-critical-code-path-v3.patch
0003-drm-amdgpu-use-GFP_ATOMIC-instead-of-NOWAIT-in-the-critical-path.patch
@@ -59,24 +65,26 @@ validpgpkeys=(
)
# https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
sha256sums=('a1aeb926c7c4a1564368200b1082e45bb958007682d804aff88abbc3a7a47b5d'
sha256sums=('f5d44b93808b02cc2969c5404ba081d97523719c9fd2ba2de6db318b4141cca0'
'SKIP'
'4c29a25036c5795f9ebe0dbc619c803b73447e8f938bd40e7f7ea223d038a38d'
'87e08942d4a94a38c463202cde31b2923e1fb67698e661a61c781f80b95e4997'
'9c8e20c3d32174037b26fea4e936467ed9391284bf7ff4675ecf4a83fd820742'
'e5bda61fa4405571a0267cd8812329bb8a432a37efb50459461628d371849906'
'c31b8c0ace123f5c1a0012a1254272eea9ac9cdd0d3e5d538ca6b11830dd01b0'
'0f482368b62c3cece941e2d3ba497bf322db59315df5c2f72500fc1318e4768e'
'60a560c3c4324322dc97b6d4d75dea6182a17f6747b4a42054c053a99b1635df'
'a1f0001ec03f1f1d75d6f72165dc77b42145b3fc1c8de20afcd512c6c677482b'
'c6aa9877b0612805690d8abfc13c941530a11a7b56979d814e674c86c42ca0cf')
b2sums=('434ba598863ac5ede162d7147a78884c2dc6090e8f0447f6368a681a0e7077143a0753c62f4ad6e1be8b971a46266bf00f3b3fe4218345483360bda86a3f855c'
'e652e2d7ccb388802684ae5ab4481fb33b78212b8a97d579b9be80060b02df18'
'8e3c862d0f6927a01e91f630c794771260cf074993e9f319924098ce22e1c93b'
'7427571bf433c71507749e356326bee4308359e15018809b7b7a332c31d2a611')
b2sums=('0a378ec56bfc97a2de3403e37bc7a3fe8e3fb876f4afdb5278310362745ec192acd56c9330e42f52019b6c35244f95691efb14afed338347a95f9846fcb386ca'
'SKIP'
'7aa199260780c3867295a2bbb46badddd9e9ec84a1339c2d26ebc79048181c88cf96246c1025611c7608962f2efe95769850d836aa927803135fe7a0232a0bfb'
'79d40bbd52345c6c2aa682ad1ddd8bc98b1e32110f34b82c0076cf6cadad9a24ea83e866727b9cbd18e23b46194d1f5a7b5d82e4e2719f3e97dc25f106a81d92'
'05f25e60c491b7ef558d832addd44784db09170418f643ad341050dddb60a78fb9feb9fb47603cdd4a651eacf1b1cbf515bf37dadf84b8dfc2755c1eeead7c30'
'5b3597cab8b174ff41b3f17aae6d1376a155356f781542e2e176d66c5a6dee53f7a1db8e2b9540ce8246efac4e27476c882fc8cc8063f0f514ae09230b5aef0a'
'a71f78bea42d158fc9383f2bbb985dafa71274d2032876b67f84602c8085b1c53f3d36965e54e5fdbab5c0d7537c98d917bd7743d3cf373c1dcb6da3bc19f4e7'
'c9d4ec8fac86a9b6f0567c57f6d5be04d56f8efbc9dc1b183981dad38387d750b53c17fcdd295cb68a874bf50f81d117cfe94bd3a8d9e08e1918644ae8daa3e5'
'58484f0e3123a3a5eac2f00d1a892dd51492ebbfd1dfd01ac9f05deaf733dd9c7993845a905f22c1e655d8fe74d40fb6e11d786626bea89a990616846c561141'
'7951209de07fd31600d838f34ca00fca94384f71936d81a0d3c0b3bd5069b984be1de31715a43e3badc828e3bc4129bebe090661c57395e80471be0cbc1302c9'
'2d581d66fe4e4afe0158755f5ea0cd0df9765b63464cb81e2b9115a37230e4489f16526393c47009c4392e5de70d2d37e496f764ad89e214ec7010c5bbfbcfc1')
'1127262c540b09fc030854db6e6f4c93ab2475956f986d6327c99a0ff87eea635ea7bb0d1cdb246d0a64b938d6be59cf847d359c6f084db2b424a0ceeebcfab7'
'9d1832cbb846f3e4630dce5cea2f31fdd9f828130caa3f1776ab60f024821bda022c9a0de4dedd9dd2f79c2f40ed9dc110b3885e0d89a65002bc317e32443461'
'bfc657b9bbb0a12f98f5c9ac1d50eb1d74912d775245e1b65f0c171f4f87d664122f595caa5147b60975c0baf4e9a2b1b0be046c4b2a95a0760a666391ff5f06')
export KBUILD_BUILD_HOST=kiralinux
export KBUILD_BUILD_USER=$pkgbase
@@ -131,8 +139,25 @@ prepare() {
echo "Prepared $pkgbase version $(<version)"
}
build() {
echo "Building NYANIT..."
cd $_nyanit_src_dir
cargo build --release
cp target/release/nyanit $srcdir/init
chmod +x $srcdir/init
echo "##### DONE Building NYANIT #####"
echo ""
echo "Build initramfs image..."
cd $srcdir
$_nyanit_src_dir/build_initcpio.sh $srcdir
mv $srcdir/initramfs.cpio $srcdir/$_srcname/
echo ""
echo "Build Linux..."
cd $srcdir/$_srcname
echo "Building docs..."
@@ -141,6 +166,7 @@ build() {
echo "Building all"
make all
echo ""
# BPF stuff that makes world a worse place
# make -C tools/bpf/bpftool vmlinux.h feature-clang-bpf-co-re=1
@@ -208,6 +234,7 @@ _package() {
NTSYNC-MODULE
VIRTUALBOX-GUEST-MODULES
WIREGUARD-MODULE
'initramfs'
)
replaces=(
wireguard-lts
+1 -1
View File
@@ -237,7 +237,7 @@ CONFIG_NET_NS=y
CONFIG_SCHED_AUTOGROUP=y
CONFIG_RELAY=y
CONFIG_BLK_DEV_INITRD=y
CONFIG_INITRAMFS_SOURCE="/usr/share/bzz-initrd/initramfs.cpio"
CONFIG_INITRAMFS_SOURCE="initramfs.cpio"
CONFIG_INITRAMFS_ROOT_UID=0
CONFIG_INITRAMFS_ROOT_GID=0
CONFIG_RD_GZIP=y
+26 -98
View File
@@ -6,24 +6,19 @@ CONFIG_TOOLS_SUPPORT_RELR=y
CONFIG_RUST=y
CONFIG_RUST_OVERFLOW_CHECKS=y
#
# We need to disable CONFIG_WERROR because of stupid bcachefs rust stuff
#
# CONFIG_COMPILE_TEST is not set
# CONFIG_WERROR is not set
#
# Standard default for not get timers interrupts on idle CPUs.
#
CONFIG_NO_HZ_COMMON=y
# CONFIG_HZ_PERIODIC is not set
CONFIG_NO_HZ_IDLE=y
# CONFIG_NO_HZ_FULL is not set
#
# This option reduces kernel latency by adding explicit preemption points throughout the kernel code
#
# CONFIG_PREEMPT_NONE is not set
# CONFIG_PREEMPT_VOLUNTARY is not set
# CONFIG_PREEMPT is not set
@@ -31,7 +26,6 @@ CONFIG_PREEMPT_LAZY=y
# CONFIG_PREEMPT_RT is not set
CONFIG_MODULE_SIG=y
# CONFIG_MODULE_SIG_FORCE is not set
CONFIG_MODULE_SIG_ALL=y
@@ -48,14 +42,10 @@ CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
#
# SATA
#
CONFIG_SATA_AHCI=y
#
# NVME Support
#
CONFIG_NVME_COMMON=y
CONFIG_NVME_CORE=y
CONFIG_BLK_DEV_NVME=y
@@ -72,40 +62,26 @@ CONFIG_BCACHEFS_FS=y
# CONFIG_DEBUG_KERNEL is not set
#
# New proc acc file format
#
CONFIG_BSD_PROCESS_ACCT_V3=y
#
# ACPI platform devices
#
CONFIG_X86_INTEL_LPSS=y
CONFIG_X86_AMD_PLATFORM_DEVICE=y
3
# Max CPUS - lover a bit to save resources
#
CONFIG_NR_CPUS_DEFAULT=64
CONFIG_NR_CPUS=64
#
# Timer interrupts per second
# Increase interactivity
#
CONFIG_HZ_1000=y
CONFIG_HZ=1000
#
# bzz pss
#
CONFIG_DRM_PANIC_FOREGROUND_COLOR=0xffbf00
CONFIG_DRM_PANIC_BACKGROUND_COLOR=0x000000
#
# Frame buffer Devices
#
CONFIG_FB=y
CONFIG_FB_VESA=y
CONFIG_FB_EFI=y
@@ -114,9 +90,7 @@ CONFIG_FB_NOTIFY=y
CONFIG_FB_DEVICE=y
CONFIG_FB_MODE_HELPERS=y
#
# Graphics / GPU (Set to Module)
#
CONFIG_DRM=y
CONFIG_DRM_SYSFB_HELPER=y
@@ -130,9 +104,7 @@ CONFIG_DRM_AMDGPU_CIK=y
CONFIG_DRM_AMDGPU_USERPTR=y
CONFIG_DRM_AMD_ISP=y
#
# Compression
#
CONFIG_HAVE_KERNEL_LZ4=y
CONFIG_HAVE_KERNEL_ZSTD=y
@@ -142,23 +114,15 @@ CONFIG_KERNEL_ZSTD=y
CONFIG_DEFAULT_INIT=""
CONFIG_DEFAULT_HOSTNAME="kiralinux"
#
# Disabling BPF stuff
#
# CONFIG_AF_KCM is not set
# CONFIG_BPF_SYSCALL is not set
#
# Scheduler features
# Increasing CONFIG_UCLAMP_BUCKETS_COUNT for more precise scheduling
#
CONFIG_UCLAMP_TASK=y
CONFIG_UCLAMP_BUCKETS_COUNT=7
#
# Definetly no need for desktop not involved in kernel development
#
# CONFIG_PROFILING is not set
@@ -186,30 +150,19 @@ CONFIG_BLK_PM=y
CONFIG_BLK_MQ_STACKING=y
#
# Disabling ZSWAP - currently its acts in retarded way.
# Possibly causing issues not classified as related to it.
# Users should prefer ZRAM or SWAP+ZRAM combination
#
CONFIG_SWAP=y
# CONFIG_ZSWAP is not set
CONFIG_ZSMALLOC=y
#
# Firmware loader
#
CONFIG_FW_LOADER=y
#
# enables support for parsing and handling UEFI Common Platform Error Records (CPER)
#
CONFIG_UEFI_CPER=y
CONFIG_UEFI_CPER_X86=y
CONFIG_ZRAM=y
CONFIG_ZRAM_BACKEND_LZ4=y
CONFIG_ZRAM_BACKEND_LZ4HC=y
@@ -227,18 +180,13 @@ CONFIG_ZRAM_MEMORY_TRACKING=y
CONFIG_ZRAM_MULTI_COMP=y
#
# Allow the SCSI subsystem to probe for devices in parallel with the rest of the system boot process.
#
CONFIG_SCSI_SCAN_ASYNC=y
CONFIG_USB_SUPPORT=y
CONFIG_USB_COMMON=y
#
# USB HID support
#
CONFIG_USB_HID=y
CONFIG_HID_PID=y
CONFIG_USB_HIDDEV=y
@@ -248,17 +196,13 @@ CONFIG_INTEGRITY=y
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
CONFIG_LOAD_UEFI_KEYS=y
#
# Bounds checking
#
CONFIG_FORTIFY_SOURCE=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_HARDENED_USERCOPY_DEFAULT_ON=y
#
# Hardening of kernel data structures
#
CONFIG_LIST_HARDENED=y
CONFIG_RANDSTRUCT_NONE=y
@@ -273,23 +217,16 @@ CONFIG_ASYNC_RAID6_RECOV=y
CONFIG_CRYPTO=y
# Length-preserving ciphers and modes
#
CONFIG_CRYPTO_CHACHA20=y
CONFIG_CRYPTO_XTS=y
CONFIG_CRYPTO_NHPOLY1305=y
# AEAD (authenticated encryption with associated data) ciphers
# This is what bcachefs uses
#
CONFIG_CRYPTO_CHACHA20POLY1305=y
CONFIG_CRYPTO_CHACHA20POLY1305=y
CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y
# Hashes, digests, and MACs
#
CONFIG_CRYPTO_BLAKE2B=y
CONFIG_CRYPTO_POLYVAL=y
CONFIG_CRYPTO_SHA256=y
@@ -297,22 +234,16 @@ CONFIG_CRYPTO_SHA512=y
CONFIG_CRYPTO_SHA3=y
# CRCs (cyclic redundancy checks)
#
CONFIG_CRYPTO_CRC32C=y
CONFIG_CRYPTO_CRC32=y
# Compression
#
CONFIG_CRYPTO_LZ4=y
CONFIG_CRYPTO_LZ4HC=m
CONFIG_CRYPTO_ZSTD=y
#
# Userspace crypto interface - will be removed from kernel
# Enabling some required by IWG
#
CONFIG_CRYPTO_USER_API=y
CONFIG_CRYPTO_USER_API_HASH=y
CONFIG_CRYPTO_USER_API_SKCIPHER=y
@@ -325,8 +256,7 @@ CONFIG_CRYPTO_USER_API_RNG=y
CONFIG_CRYPTO_HW=y
# More fonts
#
CONFIG_FONT_SUPPORT=y
CONFIG_FONTS=y
CONFIG_FONT_8x8=y
@@ -336,8 +266,7 @@ CONFIG_FONT_TER16x32=y
CONFIG_FONT_SUN12x22=y
# printk and dmesg options
#
CONFIG_PRINTK_TIME=y
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=4
CONFIG_CONSOLE_LOGLEVEL_QUIET=1
@@ -350,9 +279,8 @@ CONFIG_X86_INTEL_TSX_MODE_ON=y
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
# UKI And Secure boot
#
CONFIG_EFI=y
CONFIG_EFI_STUB=y
CONFIG_INITRAMFS_SOURCE="/usr/share/bzz-initrd/initramfs.cpio"
CONFIG_INITRAMFS_SOURCE="initramfs.cpio"
CONFIG_INITRAMFS_COMPRESSION_LZ4=y
+358
View File
@@ -0,0 +1,358 @@
CONFIG_CC_IS_GCC=y
CONFIG_AS_IS_GNU=y
CONFIG_RUST_IS_AVAILABLE=y
CONFIG_TOOLS_SUPPORT_RELR=y
CONFIG_RUST=y
CONFIG_RUST_OVERFLOW_CHECKS=y
#
# We need to disable CONFIG_WERROR because of stupid bcachefs rust stuff
#
# CONFIG_COMPILE_TEST is not set
# CONFIG_WERROR is not set
#
# Standard default for not get timers interrupts on idle CPUs.
#
CONFIG_NO_HZ_COMMON=y
# CONFIG_HZ_PERIODIC is not set
CONFIG_NO_HZ_IDLE=y
# CONFIG_NO_HZ_FULL is not set
#
# This option reduces kernel latency by adding explicit preemption points throughout the kernel code
#
# CONFIG_PREEMPT_NONE is not set
# CONFIG_PREEMPT_VOLUNTARY is not set
# CONFIG_PREEMPT is not set
CONFIG_PREEMPT_LAZY=y
# CONFIG_PREEMPT_RT is not set
CONFIG_MODULE_SIG=y
# CONFIG_MODULE_SIG_FORCE is not set
CONFIG_MODULE_SIG_ALL=y
# CONFIG_MODULE_SIG_SHA1 is not set
# CONFIG_MODULE_SIG_SHA256 is not set
# CONFIG_MODULE_SIG_SHA384 is not set
# CONFIG_MODULE_SIG_SHA512 is not set
# CONFIG_MODULE_SIG_SHA3_256 is not set
# CONFIG_MODULE_SIG_SHA3_384 is not set
CONFIG_MODULE_SIG_SHA3_512=y
CONFIG_MODULE_SIG_HASH="sha3-512"
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
#
# SATA
#
CONFIG_SATA_AHCI=y
#
# NVME Support
#
CONFIG_NVME_COMMON=y
CONFIG_NVME_CORE=y
CONFIG_BLK_DEV_NVME=y
CONFIG_NVME_MULTIPATH=y
CONFIG_NVME_VERBOSE_ERRORS=y
CONFIG_NVME_HWMON=y
CONFIG_IO_URING=y
CONFIG_IO_URING_ZCRX=y
CONFIG_BCACHEFS_FS=y
# CONFIG_BCACHEFS_DEBUG is not set
# CONFIG_DEBUG_KERNEL is not set
#
# New proc acc file format
#
CONFIG_BSD_PROCESS_ACCT_V3=y
#
# ACPI platform devices
#
CONFIG_X86_INTEL_LPSS=y
CONFIG_X86_AMD_PLATFORM_DEVICE=y
3
# Max CPUS - lover a bit to save resources
#
CONFIG_NR_CPUS_DEFAULT=64
CONFIG_NR_CPUS=64
#
# Timer interrupts per second
# Increase interactivity
#
CONFIG_HZ_1000=y
CONFIG_HZ=1000
#
# bzz pss
#
CONFIG_DRM_PANIC_FOREGROUND_COLOR=0xffbf00
CONFIG_DRM_PANIC_BACKGROUND_COLOR=0x000000
#
# Frame buffer Devices
#
CONFIG_FB=y
CONFIG_FB_VESA=y
CONFIG_FB_EFI=y
CONFIG_FB_CORE=y
CONFIG_FB_NOTIFY=y
CONFIG_FB_DEVICE=y
CONFIG_FB_MODE_HELPERS=y
#
# Graphics / GPU (Set to Module)
#
CONFIG_DRM=y
CONFIG_DRM_SYSFB_HELPER=y
CONFIG_DRM_SIMPLEDRM=y
CONFIG_DRM_RADEON=m
CONFIG_DRM_RADEON_USERPTR=y
CONFIG_DRM_AMDGPU=m
CONFIG_DRM_AMDGPU_SI=y
CONFIG_DRM_AMDGPU_CIK=y
CONFIG_DRM_AMDGPU_USERPTR=y
CONFIG_DRM_AMD_ISP=y
#
# Compression
#
CONFIG_HAVE_KERNEL_LZ4=y
CONFIG_HAVE_KERNEL_ZSTD=y
CONFIG_KERNEL_ZSTD=y
CONFIG_DEFAULT_INIT=""
CONFIG_DEFAULT_HOSTNAME="kiralinux"
#
# Disabling BPF stuff
#
# CONFIG_AF_KCM is not set
# CONFIG_BPF_SYSCALL is not set
#
# Scheduler features
# Increasing CONFIG_UCLAMP_BUCKETS_COUNT for more precise scheduling
#
CONFIG_UCLAMP_TASK=y
CONFIG_UCLAMP_BUCKETS_COUNT=7
#
# Definetly no need for desktop not involved in kernel development
#
# CONFIG_PROFILING is not set
CONFIG_MODULES=y
CONFIG_MODULE_UNLOAD=y
CONFIG_MODPROBE=y
CONFIG_MODULE_COMPRESS=y
CONFIG_MODULE_SIG_FORMAT=y
CONFIG_MODULE_SIG_ALL=y
CONFIG_MODULE_SIG_SHA3_512=y
CONFIG_MODULE_SIG_HASH="sha3-512"
CONFIG_MODULE_COMPRESS_ZSTD=y
CONFIG_MODULE_COMPRESS_ALL=y
CONFIG_MODULE_DECOMPRESS=y
CONFIG_MODPROBE_PATH="/sbin/modprobe"
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_EFI_PARTITION=y
CONFIG_BLK_PM=y
CONFIG_BLK_MQ_STACKING=y
#
# Disabling ZSWAP - currently its acts in retarded way.
# Possibly causing issues not classified as related to it.
# Users should prefer ZRAM or SWAP+ZRAM combination
#
CONFIG_SWAP=y
# CONFIG_ZSWAP is not set
CONFIG_ZSMALLOC=y
#
# Firmware loader
#
CONFIG_FW_LOADER=y
#
# enables support for parsing and handling UEFI Common Platform Error Records (CPER)
#
CONFIG_UEFI_CPER=y
CONFIG_UEFI_CPER_X86=y
CONFIG_ZRAM=y
CONFIG_ZRAM_BACKEND_LZ4=y
CONFIG_ZRAM_BACKEND_LZ4HC=y
CONFIG_ZRAM_BACKEND_ZSTD=y
# CONFIG_ZRAM_BACKEND_DEFLATE is not set
# CONFIG_ZRAM_BACKEND_842 is not set
# CONFIG_ZRAM_BACKEND_LZO is not set
CONFIG_ZRAM_DEF_COMP_LZ4=y
# CONFIG_ZRAM_DEF_COMP_LZ4HC is not set
# CONFIG_ZRAM_DEF_COMP_ZSTD is not set
CONFIG_ZRAM_DEF_COMP="lz4"
CONFIG_ZRAM_WRITEBACK=y
CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y
CONFIG_ZRAM_MEMORY_TRACKING=y
CONFIG_ZRAM_MULTI_COMP=y
#
# Allow the SCSI subsystem to probe for devices in parallel with the rest of the system boot process.
#
CONFIG_SCSI_SCAN_ASYNC=y
CONFIG_USB_SUPPORT=y
CONFIG_USB_COMMON=y
#
# USB HID support
#
CONFIG_USB_HID=y
CONFIG_HID_PID=y
CONFIG_USB_HIDDEV=y
CONFIG_INTEGRITY=y
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
CONFIG_LOAD_UEFI_KEYS=y
#
# Bounds checking
#
CONFIG_FORTIFY_SOURCE=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_HARDENED_USERCOPY_DEFAULT_ON=y
#
# Hardening of kernel data structures
#
CONFIG_LIST_HARDENED=y
CONFIG_RANDSTRUCT_NONE=y
CONFIG_XOR_BLOCKS=y
CONFIG_ASYNC_CORE=y
CONFIG_ASYNC_MEMCPY=y
CONFIG_ASYNC_XOR=y
CONFIG_ASYNC_PQ=y
CONFIG_ASYNC_RAID6_RECOV=y
CONFIG_CRYPTO=y
# Length-preserving ciphers and modes
#
CONFIG_CRYPTO_CHACHA20=y
CONFIG_CRYPTO_XTS=y
CONFIG_CRYPTO_NHPOLY1305=y
# AEAD (authenticated encryption with associated data) ciphers
# This is what bcachefs uses
#
CONFIG_CRYPTO_CHACHA20POLY1305=y
CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y
# Hashes, digests, and MACs
#
CONFIG_CRYPTO_BLAKE2B=y
CONFIG_CRYPTO_POLYVAL=y
CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_SHA512=y
CONFIG_CRYPTO_SHA3=y
# CRCs (cyclic redundancy checks)
#
CONFIG_CRYPTO_CRC32C=y
CONFIG_CRYPTO_CRC32=y
# Compression
#
CONFIG_CRYPTO_LZ4=y
CONFIG_CRYPTO_LZ4HC=m
CONFIG_CRYPTO_ZSTD=y
#
# Userspace crypto interface - will be removed from kernel
# Enabling some required by IWG
#
CONFIG_CRYPTO_USER_API=y
CONFIG_CRYPTO_USER_API_HASH=y
CONFIG_CRYPTO_USER_API_SKCIPHER=y
CONFIG_CRYPTO_USER_API_RNG=y
# CONFIG_CRYPTO_USER_API_RNG_CAVP is not set
# CONFIG_CRYPTO_USER_API_AEAD is not set
# CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE is not set
CONFIG_CRYPTO_HW=y
# More fonts
#
CONFIG_FONT_SUPPORT=y
CONFIG_FONTS=y
CONFIG_FONT_8x8=y
CONFIG_FONT_8x16=y
CONFIG_FONT_10x18=y
CONFIG_FONT_TER16x32=y
CONFIG_FONT_SUN12x22=y
# printk and dmesg options
#
CONFIG_PRINTK_TIME=y
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=4
CONFIG_CONSOLE_LOGLEVEL_QUIET=1
CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4
# CONFIG_BOOT_PRINTK_DELAY is not set
CONFIG_SYMBOLIC_ERRNAME=y
# CONFIG_X86_INTEL_TSX_MODE_OFF is not set
CONFIG_X86_INTEL_TSX_MODE_ON=y
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
# UKI And Secure boot
#
CONFIG_EFI=y
CONFIG_EFI_STUB=y
CONFIG_INITRAMFS_SOURCE="initramfs.cpio"
CONFIG_INITRAMFS_COMPRESSION_LZ4=y
-7
View File
@@ -1,11 +1,4 @@
#
# We generally want to remove any not common for desktop virtualization features
#
# CONFIG_PCI_XEN is not set
#
# Microsoft Hyper-V guest support
#
# CONFIG_HYPERV is not set
+11
View File
@@ -0,0 +1,11 @@
#
# We generally want to remove any not common for desktop virtualization features
#
# CONFIG_PCI_XEN is not set
#
# Microsoft Hyper-V guest support
#
# CONFIG_HYPERV is not set