mirror of
https://github.com/aljazceru/kata-containers.git
synced 2026-02-14 19:14:26 +01:00
There are lots of configs removed from latest kernel. Update them here for convenience of next kernel upgrade. Remove CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE [1] Remove CONFIG_IP_NF_TARGET_CLUSTERIP [2] Remove CONFIG_NET_SCH_CBQ [3] Remove CONFIG_AUTOFS4_FS [4] Remove CONFIG_EMBEDDED [5] [1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=a7e4676e8e2cb158a4d24123de778087955e1b36 [2] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=9db5d918e2c07fa09fab18bc7addf3408da0c76f [3] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=051d442098421c28c7951625652f61b1e15c4bd5 [4] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=1f2190d6b7112d22d3f8dfeca16a2f6a2f51444e [5] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=ef815d2cba782e96b9aad9483523d474ed41c62a Fixes: #8408 Signed-off-by: Jianyong Wu <jianyong.wu@arm.com>
51 lines
1.5 KiB
Plaintext
51 lines
1.5 KiB
Plaintext
# Basic necessary items!
|
|
|
|
CONFIG_SECTION_MISMATCH_WARN_ONLY=y
|
|
CONFIG_SMP=y
|
|
# Note, no nested VM support enabled here
|
|
|
|
# Note, no virt enabled baloon yet
|
|
CONFIG_INPUT=y
|
|
CONFIG_PRINTK=y
|
|
# We use this for metrics!
|
|
CONFIG_PRINTK_TIME=y
|
|
CONFIG_UNIX98_PTYS=y
|
|
CONFIG_FUTEX=y
|
|
CONFIG_HIGH_RES_TIMERS=y
|
|
CONFIG_GENERIC_MSI_IRQ=y
|
|
CONFIG_GENERIC_CLOCKEVENTS=y
|
|
CONFIG_NO_HZ=y
|
|
CONFIG_POSIX_MQUEUE=y
|
|
CONFIG_POSIX_TIMERS=y
|
|
CONFIG_PROC_SYSCTL=y
|
|
|
|
CONFIG_SHMEM=y
|
|
|
|
# For security...
|
|
CONFIG_RELOCATABLE=y
|
|
# FIXME - check if we should be setting this
|
|
# https://github.com/kata-containers/packaging/issues/483
|
|
# I have a feeling it effects our memory hotplug maybe?
|
|
# PHYSICAL_ALIGN=0x1000000
|
|
|
|
# This would only affect two drivers, neither of which we have enabled.
|
|
# The recommendation is to have it on, and you will see if in a diff if you
|
|
# look for differences against the frag generated config - so, add it here as
|
|
# a comment to make it clear in the future why we have not set it - as it would
|
|
# only add noise to our frags and config.
|
|
# PREVENT_FIRMWARE_BUILD=y
|
|
|
|
# Trust the hardware vendor to initialise the RNG - which can speed up boot.
|
|
# This can still be dynamically disabled on the kernel command line/kata config if needed.
|
|
# Disable for now, as it upsets the entropy test, and we need to improve those: FIXME: see:
|
|
# https://github.com/kata-containers/tests/issues/1543
|
|
# RANDOM_TRUST_CPU=y
|
|
|
|
# CONFIG_CGROUP_PERF needs
|
|
CONFIG_HAVE_PERF_EVENTS=y
|
|
CONFIG_PERF_EVENTS=y
|
|
|
|
# CONFIG_BLK_DEV_LOOP needs
|
|
CONFIG_BLOCK=y
|
|
CONFIG_BLK_DEV=y
|