mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-04-27 19:35:32 +00:00
f563f0d3fc
There are lots of configs removed from latest kernel. Update them here for convenience of next kernel upgrade. Remove CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE [1] Remove CONFIG_IP_NF_TARGET_CLUSTERIP [2] Remove CONFIG_NET_SCH_CBQ [3] Remove CONFIG_AUTOFS4_FS [4] Remove CONFIG_EMBEDDED [5] Remove CONFIG_ARCH_RANDOM & CONFIG_RANDOM_TRUST_CPU [6] [1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=a7e4676e8e2cb158a4d24123de778087955e1b36 [2] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=9db5d918e2c07fa09fab18bc7addf3408da0c76f [3] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=051d442098421c28c7951625652f61b1e15c4bd5 [4] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=1f2190d6b7112d22d3f8dfeca16a2f6a2f51444e [5] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.6&id=ef815d2cba782e96b9aad9483523d474ed41c62a [6] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v6.2&id=b9b01a5625b5a9e9d96d14d4a813a54e8a124f4b Apart from the removals, CONFIG_CPU_MITIGATIONS is now a dependency for CONFIG_RETPOLINE (which has been renamed to CONFIG_MITIGATION_RETPOLINE) and CONFIG_PAGE_TABLE_ISOLATION (which has been renamed to CONFIG_MITIGATION_PAGE_TABLE_ISOLATION). I've added that to the whitelist because we still build older versions of the kernel that do not have that dependency. Fixes: #8408 Signed-off-by: Jianyong Wu <jianyong.wu@arm.com> Signed-off-by: Fabiano Fidêncio <fabiano@fidencio.org> Signed-off-by: Hyounggyu Choi <Hyounggyu.Choi@ibm.com>
30 lines
609 B
Plaintext
30 lines
609 B
Plaintext
CONFIG_X86=y
|
|
CONFIG_X86_CPUID=y
|
|
CONFIG_X86_MSR=y
|
|
CONFIG_X86_X2APIC=y
|
|
CONFIG_X86_VERBOSE_BOOTUP=y
|
|
|
|
# Configs around linux guest support and optimizations.
|
|
CONFIG_HYPERVISOR_GUEST=y
|
|
CONFIG_KVM_GUEST=y
|
|
|
|
CONFIG_PARAVIRT=y
|
|
|
|
# Use the maximum number of CPUs supported by KVM (240)
|
|
CONFIG_NR_CPUS=240
|
|
|
|
# For security
|
|
CONFIG_CPU_MITIGATIONS=y
|
|
CONFIG_LEGACY_VSYSCALL_NONE=y
|
|
CONFIG_SPECULATION_MITIGATIONS=y
|
|
CONFIG_RETPOLINE=y
|
|
CONFIG_MITIGATION_RETPOLINE=y
|
|
|
|
# Boot directly into the uncompressed kernel
|
|
# Reduce memory footprint
|
|
CONFIG_PVH=y
|
|
|
|
CONFIG_NO_HZ_FULL=y
|
|
CONFIG_GENERIC_MSI_IRQ_DOMAIN=y
|
|
CONFIG_RANDOMIZE_BASE=y
|