diff --git a/tools/packaging/kernel/configs/fragments/s390/base.conf b/tools/packaging/kernel/configs/fragments/s390/base.conf
new file mode 100644
index 0000000000..c0b10ef8a2
--- /dev/null
+++ b/tools/packaging/kernel/configs/fragments/s390/base.conf
@@ -0,0 +1,13 @@
+CONFIG_S390=y
+CONFIG_S390_GUEST=y
+CONFIG_HW_RANDOM_S390=y
+CONFIG_S390_IOMMU=y
+# S/390x widly uses CCW devices
+CONFIG_CCW=y
+# Select default KVM options from arch/s390/kvm/Kconfig
+CONFIG_VIRTUALIZATION=y
+CONFIG_HAVE_KVM=y
+CONFIG_KVM=y
+
+CONFIG_MODULES=y
+CONFIG_MODULE_SIG=y
diff --git a/tools/packaging/kernel/configs/fragments/s390/console.conf b/tools/packaging/kernel/configs/fragments/s390/console.conf
new file mode 100644
index 0000000000..2bc4db09bd
--- /dev/null
+++ b/tools/packaging/kernel/configs/fragments/s390/console.conf
@@ -0,0 +1,8 @@
+# s390 character device drivers
+CONFIG_TN3270=y
+CONFIG_TN3270_TTY=y
+CONFIG_TN3270_FS=y
+CONFIG_TN3270_CONSOLE=y
+CONFIG_CCW_CONSOLE=y
+CONFIG_SCLP_TTY=y
+CONFIG_SCLP_CONSOLE=y
diff --git a/tools/packaging/kernel/configs/fragments/s390/crypto.conf b/tools/packaging/kernel/configs/fragments/s390/crypto.conf
new file mode 100644
index 0000000000..448a5ee7e7
--- /dev/null
+++ b/tools/packaging/kernel/configs/fragments/s390/crypto.conf
@@ -0,0 +1,32 @@
+# Comments and options from https://github.com/torvalds/linux/blob/master/drivers/crypto/Kconfig 
+
+# Enable s390 architectural random number generation API
+CONFIG_ARCH_RANDOM=y
+
+# Fallbacks for s390 specific implementation
+CONFIG_CRYPTO_CBC=y
+CONFIG_CRYPTO_CTR=y
+CONFIG_CRYPTO_ECB=y
+CONFIG_CRYPTO_XTS=y
+
+# Enable HW for crypto
+CONFIG_CRYPTO_HW=y
+# Support for s390 cryptographic adapters
+CONFIG_ZCRYPT=y
+# Kernel API for protected key handling
+CONFIG_PKEY=y
+# s390 hardware accelerated implementation of the SHA-1 secure hash standard
+CONFIG_CRYPTO_SHA1_S390=y
+# s390 hardware accelerated implementation of the SHA256 secure hash standard
+CONFIG_CRYPTO_SHA256_S390=y
+# s390 hardware accelerated implementation of the SHA512 secure hash standard
+CONFIG_CRYPTO_SHA512_S390=y
+# s390 hardware accelerated implementation of the DES cipher algorithm (FIPS 46-2),
+# and Triple DES EDE (FIPS 46-3).
+CONFIG_CRYPTO_DES_S390=y
+# s390 hardware accelerated implementation of the AES cipher algorithms (FIPS-197)
+CONFIG_CRYPTO_AES_S390=y
+# s390 hardware accelerated implementation of the CRC algorithms
+CONFIG_CRYPTO_CRC32_S390=y
+# Pseudo random number generator device driver
+CONFIG_S390_PRNG=y
diff --git a/tools/packaging/kernel/configs/fragments/s390/network.conf b/tools/packaging/kernel/configs/fragments/s390/network.conf
new file mode 100644
index 0000000000..f3f159705d
--- /dev/null
+++ b/tools/packaging/kernel/configs/fragments/s390/network.conf
@@ -0,0 +1,2 @@
+# Options needed by HAVE_EBPF_JIT
+CONFIG_PACK_STACK=y