CONFIG_CC_IS_GCC=y
CONFIG_AS_IS_GNU=y
CONFIG_RUST_IS_AVAILABLE=y
CONFIG_TOOLS_SUPPORT_RELR=y

CONFIG_RUST=y
CONFIG_RUST_OVERFLOW_CHECKS=y

#
# We need to disable CONFIG_WERROR because of stupid bcachefs rust stuff
#
# CONFIG_COMPILE_TEST is not set
# CONFIG_WERROR is not set

#
# Standard default for not get timers interrupts on idle CPUs.
#
CONFIG_NO_HZ_COMMON=y
# CONFIG_HZ_PERIODIC is not set
CONFIG_NO_HZ_IDLE=y
# CONFIG_NO_HZ_FULL is not set


#
# This option reduces kernel latency by adding explicit preemption points throughout the kernel code
#
# CONFIG_PREEMPT_NONE is not set
# CONFIG_PREEMPT_VOLUNTARY is not set
# CONFIG_PREEMPT is not set
CONFIG_PREEMPT_LAZY=y
# CONFIG_PREEMPT_RT is not set



CONFIG_MODULE_SIG=y
# CONFIG_MODULE_SIG_FORCE is not set
CONFIG_MODULE_SIG_ALL=y
# CONFIG_MODULE_SIG_SHA1 is not set
# CONFIG_MODULE_SIG_SHA256 is not set
# CONFIG_MODULE_SIG_SHA384 is not set
# CONFIG_MODULE_SIG_SHA512 is not set
# CONFIG_MODULE_SIG_SHA3_256 is not set
# CONFIG_MODULE_SIG_SHA3_384 is not set
CONFIG_MODULE_SIG_SHA3_512=y
CONFIG_MODULE_SIG_HASH="sha3-512"

CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y

#
# SATA
#
CONFIG_SATA_AHCI=y

#
# NVME Support
#
CONFIG_NVME_COMMON=y
CONFIG_NVME_CORE=y
CONFIG_BLK_DEV_NVME=y
CONFIG_NVME_MULTIPATH=y
CONFIG_NVME_VERBOSE_ERRORS=y
CONFIG_NVME_HWMON=y


CONFIG_IO_URING=y
CONFIG_IO_URING_ZCRX=y

CONFIG_BCACHEFS_FS=y
# CONFIG_BCACHEFS_DEBUG is not set

# CONFIG_DEBUG_KERNEL is not set

#
# New proc acc file format
#
CONFIG_BSD_PROCESS_ACCT_V3=y

#
# ACPI platform devices
#
CONFIG_X86_INTEL_LPSS=y
CONFIG_X86_AMD_PLATFORM_DEVICE=y
3

# Max CPUS - lover a bit to save resources
#
CONFIG_NR_CPUS_DEFAULT=64
CONFIG_NR_CPUS=64

#
# Timer interrupts per second
# Increase interactivity
#
CONFIG_HZ_1000=y
CONFIG_HZ=1000

#
# bzz pss
#
CONFIG_DRM_PANIC_FOREGROUND_COLOR=0xffbf00
CONFIG_DRM_PANIC_BACKGROUND_COLOR=0x000000


#
# Frame buffer Devices
#
CONFIG_FB=y
CONFIG_FB_VESA=y
CONFIG_FB_EFI=y
CONFIG_FB_CORE=y
CONFIG_FB_NOTIFY=y
CONFIG_FB_DEVICE=y
CONFIG_FB_MODE_HELPERS=y

#
# Graphics / GPU (Set to Module)
#
CONFIG_DRM=y

CONFIG_DRM_SYSFB_HELPER=y
CONFIG_DRM_SIMPLEDRM=y

CONFIG_DRM_RADEON=m
CONFIG_DRM_RADEON_USERPTR=y
CONFIG_DRM_AMDGPU=m
CONFIG_DRM_AMDGPU_SI=y
CONFIG_DRM_AMDGPU_CIK=y
CONFIG_DRM_AMDGPU_USERPTR=y
CONFIG_DRM_AMD_ISP=y

#
# Compression
#
CONFIG_HAVE_KERNEL_LZ4=y
CONFIG_HAVE_KERNEL_ZSTD=y

CONFIG_KERNEL_ZSTD=y


CONFIG_DEFAULT_INIT=""
CONFIG_DEFAULT_HOSTNAME="kiralinux"

#
# Disabling BPF stuff
#
# CONFIG_AF_KCM is not set
# CONFIG_BPF_SYSCALL is not set


#
# Scheduler features
# Increasing CONFIG_UCLAMP_BUCKETS_COUNT for more precise scheduling
#
CONFIG_UCLAMP_TASK=y
CONFIG_UCLAMP_BUCKETS_COUNT=7

#
# Definetly no need for desktop not involved in kernel development
#
# CONFIG_PROFILING is not set



CONFIG_MODULES=y
CONFIG_MODULE_UNLOAD=y
CONFIG_MODPROBE=y
CONFIG_MODULE_COMPRESS=y
CONFIG_MODULE_SIG_FORMAT=y
CONFIG_MODULE_SIG_ALL=y
CONFIG_MODULE_SIG_SHA3_512=y
CONFIG_MODULE_SIG_HASH="sha3-512"
CONFIG_MODULE_COMPRESS_ZSTD=y
CONFIG_MODULE_COMPRESS_ALL=y
CONFIG_MODULE_DECOMPRESS=y
CONFIG_MODPROBE_PATH="/sbin/modprobe"

CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y


CONFIG_EFI_PARTITION=y

CONFIG_BLK_PM=y
CONFIG_BLK_MQ_STACKING=y


#
# Disabling ZSWAP - currently its acts in retarded way.
# Possibly causing issues not classified as related to it.
# Users should prefer ZRAM or SWAP+ZRAM combination
#
CONFIG_SWAP=y
# CONFIG_ZSWAP is not set
CONFIG_ZSMALLOC=y


#
# Firmware loader
#
CONFIG_FW_LOADER=y


#
# enables support for parsing and handling UEFI Common Platform Error Records (CPER)
#
CONFIG_UEFI_CPER=y
CONFIG_UEFI_CPER_X86=y



CONFIG_ZRAM=y
CONFIG_ZRAM_BACKEND_LZ4=y
CONFIG_ZRAM_BACKEND_LZ4HC=y
CONFIG_ZRAM_BACKEND_ZSTD=y
# CONFIG_ZRAM_BACKEND_DEFLATE is not set
# CONFIG_ZRAM_BACKEND_842 is not set
# CONFIG_ZRAM_BACKEND_LZO is not set
CONFIG_ZRAM_DEF_COMP_LZ4=y
# CONFIG_ZRAM_DEF_COMP_LZ4HC is not set
# CONFIG_ZRAM_DEF_COMP_ZSTD is not set
CONFIG_ZRAM_DEF_COMP="lz4"
CONFIG_ZRAM_WRITEBACK=y
CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y
CONFIG_ZRAM_MEMORY_TRACKING=y
CONFIG_ZRAM_MULTI_COMP=y


#
# Allow the SCSI subsystem to probe for devices in parallel with the rest of the system boot process.
#
CONFIG_SCSI_SCAN_ASYNC=y


CONFIG_USB_SUPPORT=y
CONFIG_USB_COMMON=y

#
# USB HID support
#
CONFIG_USB_HID=y
CONFIG_HID_PID=y
CONFIG_USB_HIDDEV=y


CONFIG_INTEGRITY=y
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
CONFIG_LOAD_UEFI_KEYS=y

#
# Bounds checking
#
CONFIG_FORTIFY_SOURCE=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_HARDENED_USERCOPY_DEFAULT_ON=y


#
# Hardening of kernel data structures
#
CONFIG_LIST_HARDENED=y

CONFIG_RANDSTRUCT_NONE=y


CONFIG_XOR_BLOCKS=y
CONFIG_ASYNC_CORE=y
CONFIG_ASYNC_MEMCPY=y
CONFIG_ASYNC_XOR=y
CONFIG_ASYNC_PQ=y
CONFIG_ASYNC_RAID6_RECOV=y
CONFIG_CRYPTO=y


# Length-preserving ciphers and modes
#
CONFIG_CRYPTO_CHACHA20=y
CONFIG_CRYPTO_XTS=y
CONFIG_CRYPTO_NHPOLY1305=y


# AEAD (authenticated encryption with associated data) ciphers
# This is what bcachefs uses
#
CONFIG_CRYPTO_CHACHA20POLY1305=y

CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y


# Hashes, digests, and MACs
#
CONFIG_CRYPTO_BLAKE2B=y
CONFIG_CRYPTO_POLYVAL=y
CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_SHA512=y
CONFIG_CRYPTO_SHA3=y


# CRCs (cyclic redundancy checks)
#
CONFIG_CRYPTO_CRC32C=y
CONFIG_CRYPTO_CRC32=y

# Compression
#
CONFIG_CRYPTO_LZ4=y
CONFIG_CRYPTO_LZ4HC=m
CONFIG_CRYPTO_ZSTD=y


#
# Userspace crypto interface - will be removed from kernel
# Enabling some required by IWG
#
CONFIG_CRYPTO_USER_API=y
CONFIG_CRYPTO_USER_API_HASH=y
CONFIG_CRYPTO_USER_API_SKCIPHER=y
CONFIG_CRYPTO_USER_API_RNG=y
# CONFIG_CRYPTO_USER_API_RNG_CAVP is not set
# CONFIG_CRYPTO_USER_API_AEAD is not set
# CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE is not set


CONFIG_CRYPTO_HW=y


# More fonts
#
CONFIG_FONT_SUPPORT=y
CONFIG_FONTS=y
CONFIG_FONT_8x8=y
CONFIG_FONT_8x16=y
CONFIG_FONT_10x18=y
CONFIG_FONT_TER16x32=y
CONFIG_FONT_SUN12x22=y


# printk and dmesg options
#
CONFIG_PRINTK_TIME=y
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=4
CONFIG_CONSOLE_LOGLEVEL_QUIET=1
CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4
# CONFIG_BOOT_PRINTK_DELAY is not set
CONFIG_SYMBOLIC_ERRNAME=y

# CONFIG_X86_INTEL_TSX_MODE_OFF is not set
CONFIG_X86_INTEL_TSX_MODE_ON=y
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set


# UKI And Secure boot
#
CONFIG_EFI=y
CONFIG_EFI_STUB=y
CONFIG_INITRAMFS_SOURCE="/usr/share/bzz-initrd/initramfs.cpio"
CONFIG_INITRAMFS_COMPRESSION_LZ4=y