mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-13 11:49:44 +00:00
eb326477fc
Linux CoCo x86 guest is hardened to ensure RDRAND provides enough entropy to initialize Linux RNG. A failure will panic the guest. For confidential guests any other RNG source is untrusted so disable them. Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
24 lines
700 B
Plaintext
24 lines
700 B
Plaintext
# We need virtio for 9p and serial and vsock at least
|
|
|
|
# To get VIRTIO, we need a bus - ours of choice is PCI. We need to enable
|
|
# PCI support to get VIRTIO_PCI support
|
|
CONFIG_PCI=y
|
|
CONFIG_PCI_MSI=y
|
|
# To get to the VIRTIO_PCI, we need the VIRTIO_MENU enabled
|
|
CONFIG_VIRTIO_MENU=y
|
|
CONFIG_VIRTIO_PCI=y
|
|
# Without this nested-VM Kata does not work (we have not worked out exactly why)
|
|
CONFIG_VIRTIO_PCI_LEGACY=y
|
|
|
|
# FIXME - are we moving away from/choosing between SCSI and BLK support?
|
|
# https://github.com/kata-containers/packaging/issues/483
|
|
CONFIG_SCSI=y
|
|
CONFIG_SCSI_LOWLEVEL=y
|
|
CONFIG_SCSI_VIRTIO=y
|
|
CONFIG_VIRTIO_BLK=y
|
|
CONFIG_TTY=y
|
|
CONFIG_VIRTIO_CONSOLE=y
|
|
CONFIG_VIRTIO_NET=y
|
|
|
|
CONFIG_VIRTIO_BALLOON=y
|