343 lines
6.3 KiB
Plaintext
343 lines
6.3 KiB
Plaintext
CONFIG_CC_IS_GCC=y
|
|
CONFIG_AS_IS_GNU=y
|
|
CONFIG_RUST_IS_AVAILABLE=y
|
|
CONFIG_TOOLS_SUPPORT_RELR=y
|
|
|
|
CONFIG_RUST=y
|
|
CONFIG_RUST_OVERFLOW_CHECKS=y
|
|
|
|
|
|
# We need to disable CONFIG_WERROR because of stupid bcachefs rust stuff
|
|
#
|
|
# CONFIG_COMPILE_TEST is not set
|
|
# CONFIG_WERROR is not set
|
|
|
|
# Standard default for not get timers interrupts on idle CPUs.
|
|
#
|
|
CONFIG_NO_HZ_COMMON=y
|
|
# CONFIG_HZ_PERIODIC is not set
|
|
CONFIG_NO_HZ_IDLE=y
|
|
# CONFIG_NO_HZ_FULL is not set
|
|
|
|
|
|
# This option reduces kernel latency by adding explicit preemption points throughout the kernel code
|
|
#
|
|
# CONFIG_PREEMPT_NONE is not set
|
|
# CONFIG_PREEMPT_VOLUNTARY is not set
|
|
# CONFIG_PREEMPT is not set
|
|
CONFIG_PREEMPT_LAZY=y
|
|
# CONFIG_PREEMPT_RT is not set
|
|
|
|
|
|
|
|
CONFIG_MODULE_SIG=y
|
|
# CONFIG_MODULE_SIG_FORCE is not set
|
|
CONFIG_MODULE_SIG_ALL=y
|
|
# CONFIG_MODULE_SIG_SHA1 is not set
|
|
# CONFIG_MODULE_SIG_SHA256 is not set
|
|
# CONFIG_MODULE_SIG_SHA384 is not set
|
|
# CONFIG_MODULE_SIG_SHA512 is not set
|
|
# CONFIG_MODULE_SIG_SHA3_256 is not set
|
|
# CONFIG_MODULE_SIG_SHA3_384 is not set
|
|
CONFIG_MODULE_SIG_SHA3_512=y
|
|
CONFIG_MODULE_SIG_HASH="sha3-512"
|
|
|
|
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
|
|
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
|
|
CONFIG_MODULE_SIG_KEY_TYPE_ECDSA=y
|
|
|
|
|
|
# SATA
|
|
#
|
|
CONFIG_SATA_AHCI=y
|
|
|
|
# NVME Support
|
|
#
|
|
CONFIG_NVME_COMMON=y
|
|
CONFIG_NVME_CORE=y
|
|
CONFIG_BLK_DEV_NVME=y
|
|
CONFIG_NVME_MULTIPATH=y
|
|
CONFIG_NVME_VERBOSE_ERRORS=y
|
|
CONFIG_NVME_HWMON=y
|
|
|
|
|
|
CONFIG_IO_URING=y
|
|
CONFIG_IO_URING_ZCRX=y
|
|
|
|
CONFIG_BCACHEFS_FS=y
|
|
# CONFIG_BCACHEFS_DEBUG is not set
|
|
|
|
# CONFIG_DEBUG_KERNEL is not set
|
|
|
|
# New proc acc file format
|
|
#
|
|
CONFIG_BSD_PROCESS_ACCT_V3=y
|
|
|
|
|
|
# ACPI platform devices
|
|
#
|
|
CONFIG_X86_INTEL_LPSS=y
|
|
CONFIG_X86_AMD_PLATFORM_DEVICE=y
|
|
|
|
# Max CPUS - lover a bit to save resources
|
|
#
|
|
CONFIG_NR_CPUS_DEFAULT=64
|
|
CONFIG_NR_CPUS=64
|
|
|
|
# Timer interrupts per second
|
|
# Increase interactivity
|
|
#
|
|
CONFIG_HZ_1000=y
|
|
CONFIG_HZ=1000
|
|
|
|
|
|
# bzz pss
|
|
CONFIG_DRM_PANIC_FOREGROUND_COLOR=0xffbf00
|
|
CONFIG_DRM_PANIC_BACKGROUND_COLOR=0x000000
|
|
|
|
|
|
#
|
|
# Frame buffer Devices
|
|
CONFIG_FB=y
|
|
CONFIG_FB_VESA=y
|
|
CONFIG_FB_EFI=y
|
|
CONFIG_FB_CORE=y
|
|
CONFIG_FB_NOTIFY=y
|
|
CONFIG_FB_DEVICE=y
|
|
CONFIG_FB_MODE_HELPERS=y
|
|
|
|
# Graphics / GPU (Set to Module)
|
|
#
|
|
CONFIG_DRM=y
|
|
|
|
CONFIG_DRM_SYSFB_HELPER=y
|
|
CONFIG_DRM_SIMPLEDRM=y
|
|
|
|
CONFIG_DRM_RADEON=m
|
|
CONFIG_DRM_RADEON_USERPTR=y
|
|
CONFIG_DRM_AMDGPU=m
|
|
CONFIG_DRM_AMDGPU_SI=y
|
|
CONFIG_DRM_AMDGPU_CIK=y
|
|
CONFIG_DRM_AMDGPU_USERPTR=y
|
|
CONFIG_DRM_AMD_ISP=y
|
|
|
|
|
|
# Compression
|
|
#
|
|
CONFIG_HAVE_KERNEL_LZ4=y
|
|
CONFIG_HAVE_KERNEL_ZSTD=y
|
|
|
|
CONFIG_KERNEL_ZSTD=y
|
|
|
|
|
|
CONFIG_DEFAULT_INIT=""
|
|
CONFIG_DEFAULT_HOSTNAME="kiralinux"
|
|
|
|
# Disabling BPF stuff
|
|
#
|
|
# CONFIG_AF_KCM is not set
|
|
# CONFIG_BPF_SYSCALL is not set
|
|
|
|
|
|
# Scheduler features
|
|
# Increasing CONFIG_UCLAMP_BUCKETS_COUNT for more precise scheduling
|
|
#
|
|
CONFIG_UCLAMP_TASK=y
|
|
CONFIG_UCLAMP_BUCKETS_COUNT=7
|
|
|
|
|
|
# Definetly no need for desktop not involved in kernel development
|
|
#
|
|
# CONFIG_PROFILING is not set
|
|
|
|
|
|
|
|
CONFIG_MODULES=y
|
|
CONFIG_MODULE_UNLOAD=y
|
|
CONFIG_MODPROBE=y
|
|
CONFIG_MODULE_COMPRESS=y
|
|
CONFIG_MODULE_SIG_FORMAT=y
|
|
CONFIG_MODULE_SIG_ALL=y
|
|
CONFIG_MODULE_SIG_SHA3_512=y
|
|
CONFIG_MODULE_SIG_HASH="sha3-512"
|
|
CONFIG_MODULE_COMPRESS_ZSTD=y
|
|
CONFIG_MODULE_COMPRESS_ALL=y
|
|
CONFIG_MODULE_DECOMPRESS=y
|
|
CONFIG_MODPROBE_PATH="/sbin/modprobe"
|
|
|
|
CONFIG_BLK_INLINE_ENCRYPTION=y
|
|
CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
|
|
|
|
|
|
CONFIG_EFI_PARTITION=y
|
|
|
|
CONFIG_BLK_PM=y
|
|
CONFIG_BLK_MQ_STACKING=y
|
|
|
|
|
|
|
|
# Disabling ZSWAP - currently its acts in retarded way.
|
|
# Possibly causing issues not classified as related to it.
|
|
# Users should prefer ZRAM or SWAP+ZRAM combination
|
|
#
|
|
CONFIG_SWAP=y
|
|
# CONFIG_ZSWAP is not set
|
|
CONFIG_ZSMALLOC=y
|
|
|
|
|
|
|
|
# Firmware loader
|
|
#
|
|
CONFIG_FW_LOADER=y
|
|
|
|
|
|
# enables support for parsing and handling UEFI Common Platform Error Records (CPER)
|
|
#
|
|
CONFIG_UEFI_CPER=y
|
|
CONFIG_UEFI_CPER_X86=y
|
|
|
|
|
|
|
|
CONFIG_ZRAM=y
|
|
CONFIG_ZRAM_BACKEND_LZ4=y
|
|
CONFIG_ZRAM_BACKEND_LZ4HC=y
|
|
CONFIG_ZRAM_BACKEND_ZSTD=y
|
|
# CONFIG_ZRAM_BACKEND_DEFLATE is not set
|
|
# CONFIG_ZRAM_BACKEND_842 is not set
|
|
# CONFIG_ZRAM_BACKEND_LZO is not set
|
|
CONFIG_ZRAM_DEF_COMP_LZ4=y
|
|
# CONFIG_ZRAM_DEF_COMP_LZ4HC is not set
|
|
# CONFIG_ZRAM_DEF_COMP_ZSTD is not set
|
|
CONFIG_ZRAM_DEF_COMP="lz4"
|
|
CONFIG_ZRAM_WRITEBACK=y
|
|
CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y
|
|
CONFIG_ZRAM_MEMORY_TRACKING=y
|
|
CONFIG_ZRAM_MULTI_COMP=y
|
|
|
|
|
|
# Allow the SCSI subsystem to probe for devices in parallel with the rest of the system boot process.
|
|
#
|
|
CONFIG_SCSI_SCAN_ASYNC=y
|
|
|
|
|
|
CONFIG_USB_SUPPORT=y
|
|
CONFIG_USB_COMMON=y
|
|
|
|
# USB HID support
|
|
#
|
|
CONFIG_USB_HID=y
|
|
CONFIG_HID_PID=y
|
|
CONFIG_USB_HIDDEV=y
|
|
|
|
|
|
CONFIG_INTEGRITY=y
|
|
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
|
|
CONFIG_LOAD_UEFI_KEYS=y
|
|
|
|
# Bounds checking
|
|
#
|
|
CONFIG_FORTIFY_SOURCE=y
|
|
CONFIG_HARDENED_USERCOPY=y
|
|
CONFIG_HARDENED_USERCOPY_DEFAULT_ON=y
|
|
|
|
|
|
# Hardening of kernel data structures
|
|
#
|
|
CONFIG_LIST_HARDENED=y
|
|
|
|
CONFIG_RANDSTRUCT_NONE=y
|
|
|
|
|
|
CONFIG_XOR_BLOCKS=y
|
|
CONFIG_ASYNC_CORE=y
|
|
CONFIG_ASYNC_MEMCPY=y
|
|
CONFIG_ASYNC_XOR=y
|
|
CONFIG_ASYNC_PQ=y
|
|
CONFIG_ASYNC_RAID6_RECOV=y
|
|
CONFIG_CRYPTO=y
|
|
|
|
|
|
# Length-preserving ciphers and modes
|
|
#
|
|
CONFIG_CRYPTO_CHACHA20=y
|
|
CONFIG_CRYPTO_XTS=y
|
|
CONFIG_CRYPTO_NHPOLY1305=y
|
|
|
|
|
|
# AEAD (authenticated encryption with associated data) ciphers
|
|
# This is what bcachefs uses
|
|
#
|
|
CONFIG_CRYPTO_CHACHA20POLY1305=y
|
|
|
|
CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y
|
|
|
|
|
|
# Hashes, digests, and MACs
|
|
#
|
|
CONFIG_CRYPTO_BLAKE2B=y
|
|
CONFIG_CRYPTO_POLYVAL=y
|
|
CONFIG_CRYPTO_SHA256=y
|
|
CONFIG_CRYPTO_SHA512=y
|
|
CONFIG_CRYPTO_SHA3=y
|
|
|
|
|
|
# CRCs (cyclic redundancy checks)
|
|
#
|
|
CONFIG_CRYPTO_CRC32C=y
|
|
CONFIG_CRYPTO_CRC32=y
|
|
|
|
# Compression
|
|
#
|
|
CONFIG_CRYPTO_LZ4=y
|
|
CONFIG_CRYPTO_LZ4HC=m
|
|
CONFIG_CRYPTO_ZSTD=y
|
|
|
|
|
|
#
|
|
# Userspace crypto interface - will be removed from kernel
|
|
# Enabling some required by IWG
|
|
#
|
|
CONFIG_CRYPTO_USER_API=y
|
|
CONFIG_CRYPTO_USER_API_HASH=y
|
|
CONFIG_CRYPTO_USER_API_SKCIPHER=y
|
|
CONFIG_CRYPTO_USER_API_RNG=y
|
|
# CONFIG_CRYPTO_USER_API_RNG_CAVP is not set
|
|
# CONFIG_CRYPTO_USER_API_AEAD is not set
|
|
# CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE is not set
|
|
|
|
|
|
CONFIG_CRYPTO_HW=y
|
|
|
|
|
|
# More fonts
|
|
#
|
|
CONFIG_FONT_SUPPORT=y
|
|
CONFIG_FONTS=y
|
|
CONFIG_FONT_8x8=y
|
|
CONFIG_FONT_8x16=y
|
|
CONFIG_FONT_10x18=y
|
|
CONFIG_FONT_TER16x32=y
|
|
CONFIG_FONT_SUN12x22=y
|
|
|
|
|
|
# printk and dmesg options
|
|
#
|
|
CONFIG_PRINTK_TIME=y
|
|
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=4
|
|
CONFIG_CONSOLE_LOGLEVEL_QUIET=1
|
|
CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4
|
|
# CONFIG_BOOT_PRINTK_DELAY is not set
|
|
CONFIG_SYMBOLIC_ERRNAME=y
|
|
|
|
# CONFIG_X86_INTEL_TSX_MODE_OFF is not set
|
|
CONFIG_X86_INTEL_TSX_MODE_ON=y
|
|
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
|
|
|
|
|
|
# UKI And Secure boot
|
|
#
|
|
CONFIG_EFI=y
|
|
CONFIG_EFI_STUB=y
|
|
CONFIG_INITRAMFS_SOURCE="/usr/share/bzz-initrd/initramfs.cpio"
|
|
CONFIG_INITRAMFS_COMPRESSION_LZ4=y
|