├── .gitignore ├── Makefile ├── emacs └── init.el ├── firecracker-guests.nix ├── firecracker ├── .gitignore ├── build-kernel ├── build-rootfs ├── config.json ├── kernel.config ├── start ├── system.nix └── user.nix ├── flake.lock ├── flake.nix ├── hetzner-hardware.nix ├── hetzner-system.nix ├── keys.nix ├── mbrock.nix ├── network-setup-nat ├── network-setup-tap0 └── rig ├── .formatter.exs ├── .gitignore ├── README.md ├── lib ├── rig.ex └── rig │ └── application.ex ├── mix.exs ├── mix.lock └── test ├── rig_test.exs └── test_helper.exs /.gitignore: -------------------------------------------------------------------------------- 1 | build 2 | *.log 3 | -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- 1 | rebuild:; nixos-rebuild switch --flake .#hetzner 2 | -------------------------------------------------------------------------------- /emacs/init.el: -------------------------------------------------------------------------------- 1 | (column-number-mode) 2 | (when (fboundp 'tool-bar-mode) 3 | (tool-bar-mode -1) 4 | (menu-bar-mode -1) 5 | (scroll-bar-mode -1)) 6 | 7 | (setq tab-always-indent 'complete) 8 | 9 | (progn 10 | (setq gc-cons-threshold 20000) 11 | (setq kill-ring-max 1000) 12 | (setq enable-recursive-minibuffers t) 13 | 14 | (add-hook 'after-save-hook 'executable-make-buffer-file-executable-if-script-p) 15 | 16 | (progn 17 | (setq backup-by-copying t 18 | backup-directory-alist '(("." . "~/.saves/")) 19 | delete-old-versions t 20 | kept-new-versions 6 21 | kept-old-versions 2 22 | version-control t) 23 | (setq auto-save-file-name-transforms `((".*" ,temporary-file-directory t))) 24 | (setq backup-directory-alist `((".*" . ,temporary-file-directory)))) 25 | 26 | (setq fill-nobreak-predicate '(fill-single-word-nobreak-p)) 27 | (setq kill-whole-line t) 28 | (setq whitespace-style '(face trailing lines-tail empty)) 29 | (setq uniquify-buffer-name-style 'post-forward-angle-brackets) 30 | 31 | (eval-after-load 'tramp 32 | '(add-to-list 'tramp-remote-path "/run/current-system/sw/bin")) 33 | 34 | (progn 35 | (put 'downcase-region 'disabled nil) 36 | (put 'upcase-region 'disabled nil))) 37 | 38 | ;; Configure indentation. 39 | (progn 40 | (setq-default indent-tabs-mode nil) 41 | (electric-indent-mode -1) 42 | 43 | (setq c-basic-offset 2) 44 | (setq css-indent-offset 2) 45 | (setq js-indent-level 2) 46 | (setq sh-basic-offset 2)) 47 | 48 | ;; Builtin global modes. 49 | (progn 50 | (global-auto-revert-mode)) 51 | 52 | (defmacro save-column (&rest body) 53 | `(let ((column (current-column))) 54 | (unwind-protect 55 | (progn ,@body) 56 | (move-to-column column)))) 57 | (put 'save-column 'lisp-indent-function 0) 58 | 59 | (defun move-line-up () 60 | (interactive) 61 | (save-column 62 | (transpose-lines 1) 63 | (forward-line -2))) 64 | 65 | (defun move-line-down () 66 | (interactive) 67 | (save-column 68 | (forward-line 1) 69 | (transpose-lines 1) 70 | (forward-line -1))) 71 | 72 | (defun sort-lines-dwim () 73 | "Sort the lines in the buffer (or the region, if active)." 74 | (interactive) 75 | (if (region-active-p) 76 | (call-interactively 'sort-lines) 77 | (sort-lines nil (point-min) (point-max)))) 78 | 79 | ;; Unset prefixes 80 | (progn 81 | (global-unset-key (kbd "C-c c")) 82 | (global-unset-key (kbd "C-M-o")) 83 | (global-unset-key (kbd "C-M-h"))) 84 | 85 | (progn 86 | (global-set-key (kbd "C-c f") 'projectile-find-file) 87 | (global-set-key (kbd "C-c s") 'magit-status) 88 | (global-set-key (kbd "C-c g") 'deadgrep) 89 | (global-set-key (kbd "M-n") 'move-line-down) 90 | (global-set-key (kbd "M-p") 'move-line-up)) 91 | 92 | (progn 93 | (global-set-key (kbd "C-M-h f") 'describe-function) 94 | (global-set-key (kbd "C-M-h v") 'describe-variable) 95 | (global-set-key (kbd "C-M-h k") 'describe-key) 96 | (global-set-key (kbd "C-M-x") 'eval-defun) 97 | (global-set-key (kbd "C-c a") 'align-regexp) 98 | (global-set-key (kbd "C-c a") 'align-regexp) 99 | (global-set-key (kbd "C-c b") 'shell) 100 | (global-set-key (kbd "C-c d c") 'describe-char) 101 | (global-set-key (kbd "C-c d f") 'describe-function) 102 | (global-set-key (kbd "C-c d m") 'describe-mode) 103 | (global-set-key (kbd "C-c f") 'projectile-find-file) 104 | (global-set-key (kbd "C-c g") 'deadgrep) 105 | (global-set-key (kbd "C-c j") 'join-line) 106 | (global-set-key (kbd "C-c k") 'fundamental-mode) 107 | (global-set-key (kbd "C-c m") 'make-directory) 108 | (global-set-key (kbd "C-c n") 'normal-mode) 109 | (global-set-key (kbd "C-c o") 'occur) 110 | (global-set-key (kbd "C-c w") 'browse-url) 111 | (global-set-key (kbd "C-c y") 'browse-kill-ring) 112 | (global-set-key (kbd "C-c z") 'sort-lines-dwim) 113 | (global-set-key (kbd "C-h") 'backward-delete-char) 114 | (global-set-key (kbd "C-x C-b") 'ibuffer) 115 | (global-set-key (kbd "C-x C-o") 'other-window) 116 | (global-set-key (kbd "C-x t") 'string-rectangle) 117 | (global-set-key (kbd "M-/") 'hippie-expand) 118 | (global-set-key (kbd "M-h") 'backward-kill-word) 119 | (global-set-key (kbd "RET") 'newline) 120 | ) 121 | 122 | (progn 123 | (add-hook 'emacs-lisp-mode-hook 'enable-paredit-mode) 124 | (add-hook 'clojure-mode-hook 'enable-paredit-mode) 125 | (add-hook 'lisp-mode-hook 'enable-paredit-mode)) 126 | 127 | (progn 128 | (require 'dired) 129 | (require 'dired-x) 130 | (define-key dired-mode-map (kbd "r") 'wdired-change-to-wdired-mode) 131 | ) 132 | 133 | (global-whitespace-cleanup-mode) 134 | 135 | (setq magit-completing-read-function 'magit-ido-completing-read) 136 | (setq magit-last-seen-setup-instructions "1.4.0") 137 | (setq magit-stage-all-confirm nil) 138 | (setq magit-status-buffer-switch-function 'switch-to-buffer) 139 | (setq magit-unstage-all-confirm nil) 140 | 141 | (add-hook 'cider-mode-hook #'eldoc-mode) 142 | (add-hook 'cider-repl-mode-hook #'eldoc-mode) 143 | 144 | (eval-after-load 'clojure-mode 145 | '(progn 146 | (define-clojure-indent (match 1)) 147 | (define-clojure-indent (filter 1)) 148 | (define-clojure-indent (sort-by 1)) 149 | (define-clojure-indent 150 | (defroutes 'defun) 151 | (GET 2) 152 | (POST 2) 153 | (PUT 2) 154 | (DELETE 2) 155 | (HEAD 2) 156 | (ANY 2) 157 | (OPTIONS 2) 158 | (PATCH 2) 159 | (rfn 2) 160 | (let-routes 1) 161 | (context 2)) 162 | ) 163 | ) 164 | 165 | (eval-after-load 'cider-mode 166 | '(define-key cider-mode-map (kbd "C-c C-p") 'cider-test-run-project-tests) 167 | ) 168 | 169 | (defun restless-rebuild () 170 | (interactive) 171 | (compile "sudo time make -C /restless")) 172 | 173 | (global-set-key (kbd "C-c R") #'restless-rebuild) 174 | 175 | (selectrum-mode 1) 176 | (selectrum-prescient-mode 1) 177 | (prescient-persist-mode 1) 178 | 179 | (load-theme 'deeper-blue t) 180 | 181 | (add-hook 'elixir-mode-hook 'lsp) 182 | -------------------------------------------------------------------------------- /firecracker-guests.nix: -------------------------------------------------------------------------------- 1 | { self }: 2 | { config, pkgs, lib, ... }: 3 | 4 | let 5 | mkKernelOpts = opts: 6 | lib.concatStringsSep " " 7 | (lib.mapAttrsToList 8 | (k: v: if v == true then k else "${k}=${toString v}") opts); 9 | 10 | rig-start = 11 | pkgs.writeShellScriptBin "rig-start" ( 12 | let 13 | initPath = "/nix/var/nix/profiles/system/init"; 14 | image = 15 | self.firecracker-rootfs; 16 | imagePath = "${image}/nixos.img"; 17 | kernel = 18 | "${self.firecracker-vmlinux}/vmlinux"; 19 | kernelOpts = mkKernelOpts { 20 | init = initPath; 21 | console = "ttyS0"; 22 | reboot = "k"; 23 | panic = 1; 24 | pci = "off"; 25 | quiet = true; 26 | loglevel = 1; 27 | }; 28 | in '' 29 | mkdir -p $1 30 | SOCKET=$1/socket 31 | ROOT=$1/root.ext4 32 | rm -f $SOCKET $ROOT 33 | 34 | ${pkgs.coreutils}/bin/cp ${imagePath} "$ROOT" 35 | ${pkgs.coreutils}/bin/chmod 700 "$ROOT" 36 | 37 | mac=$(( 0xAAFC00000000 + $1 )) 38 | mac_hex=$(printf "%012x" $mac | sed 's/../&:/g;s/:$//') 39 | 40 | exec ${pkgs.firectl}/bin/firectl \ 41 | --firecracker-binary=${pkgs.firecracker}/bin/firecracker \ 42 | --root-drive="$ROOT" \ 43 | --kernel="${kernel}" \ 44 | --kernel-opts="${kernelOpts}" \ 45 | --socket-path="$SOCKET" \ 46 | --memory=4096 \ 47 | --tap-device=tap$1/"$mac_hex" 48 | '' 49 | ); 50 | 51 | # firecrackerService = i: 52 | # { 53 | # wantedBy = ["multi-user.target"]; 54 | # after = ["network.target"]; 55 | # description = "Firecracker Guest ${toString i}"; 56 | # serviceConfig = { 57 | # Type = "simple"; 58 | # User = "mbrock"; 59 | # RuntimeDirectory = "firecracker/${toString i}"; 60 | # ExecStart = "${script} ${toString i}"; 61 | # }; 62 | # }; 63 | 64 | instances = 65 | lib.forEach 66 | (lib.range 1 config.restless.firecracker.networkSize) 67 | (i: { 68 | number = i; 69 | tapName = "tap${toString i}"; 70 | hostname = "vm${toString i}"; 71 | localHostname = "vm${toString i}.local"; 72 | ip = "172.16.${toString i}.2"; 73 | }); 74 | 75 | in { 76 | # options.restless.firecracker.instances = 77 | # lib.mkOption { 78 | # type = lib.types.listOf lib.types.attrs; 79 | # default = []; 80 | # example = [{ hostName = "foo"; } { hostName = "bar"; }]; 81 | # }; 82 | 83 | options.restless.firecracker.networkSize = 84 | lib.mkOption { 85 | type = lib.types.ints.between 0 254; 86 | default = 0; 87 | }; 88 | 89 | options.restless.firecracker.hostnameFunction = 90 | lib.mkOption { 91 | type = lib.types.functionTo lib.types.string; 92 | default = { hostname, ... }: hostname; 93 | }; 94 | 95 | config = { 96 | # systemd.services = builtins.listToAttrs ( 97 | # lib.imap1 (i: _: { 98 | # name = "firecracker-${toString i}"; 99 | # value = firecrackerService i; 100 | # }) instances 101 | # ); 102 | 103 | environment.systemPackages = [rig-start]; 104 | 105 | networking.interfaces = builtins.listToAttrs ( 106 | builtins.map (instance: 107 | let i = toString instance.number; 108 | in { 109 | name = instance.tapName; 110 | value = { 111 | virtual = true; 112 | virtualOwner = "mbrock"; 113 | ipv4.addresses = [{ 114 | address = "172.16.${toString i}.1"; 115 | prefixLength = 24; 116 | }]; 117 | }; 118 | } 119 | ) instances 120 | ); 121 | 122 | networking.nat.internalInterfaces = 123 | builtins.map (x: "tap${toString x.number}") instances; 124 | 125 | networking.extraHosts = lib.concatMapStrings (x: '' 126 | ${x.ip} ${x.localHostname} 127 | '') instances; 128 | 129 | services.nginx = { 130 | recommendedOptimisation = true; 131 | recommendedTlsSettings = true; 132 | recommendedGzipSettings = true; 133 | recommendedProxySettings = true; 134 | }; 135 | 136 | services.nginx.virtualHosts = 137 | builtins.listToAttrs ( 138 | builtins.map (instance: { 139 | name = "${instance.hostname}.node.town"; 140 | value = { 141 | serverAliases = [ 142 | "${instance.hostname}.node.town" 143 | "${instance.hostname}.tty.node.town" 144 | ]; 145 | forceSSL = true; 146 | useACMEHost = "node.town"; 147 | locations = { 148 | "/" = { 149 | proxyPass = "http://${instance.ip}:80"; 150 | proxyWebsockets = true; 151 | }; 152 | }; 153 | }; 154 | }) instances 155 | ); 156 | 157 | services.dhcpd4 = { 158 | enable = 159 | true; 160 | interfaces = 161 | lib.forEach instances ({ tapName, ... }: tapName); 162 | extraConfig = let 163 | instanceConfig = instance: 164 | let i = toString instance.number; 165 | in '' 166 | subnet 172.16.${i}.0 netmask 255.255.255.0 { 167 | range 172.16.${i}.2 172.16.${i}.254; 168 | option routers 172.16.${i}.1; 169 | } 170 | 171 | host guest-${i} { 172 | hardware ethernet aa:fc:00:00:00:0${i}; 173 | option host-name "${ 174 | config.restless.firecracker.hostnameFunction instance 175 | }"; 176 | } 177 | ''; 178 | 179 | in '' 180 | option domain-name-servers 1.1.1.1, 8.8.8.8; 181 | option subnet-mask 255.255.0.0; 182 | 183 | ${lib.concatMapStrings instanceConfig instances} 184 | ''; 185 | }; 186 | }; 187 | } 188 | -------------------------------------------------------------------------------- /firecracker/.gitignore: -------------------------------------------------------------------------------- 1 | build 2 | -------------------------------------------------------------------------------- /firecracker/build-kernel: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | set -ex 3 | nix build --cores 16 .#firecracker-vmlinux -o build/vmlinux 4 | cp build/vmlinux-dev/vmlinux firecracker/build/vmlinux 5 | chmod u+w firecracker/build/vmlinux 6 | -------------------------------------------------------------------------------- /firecracker/build-rootfs: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | set -ex 3 | MOUNTPOINT=/mnt/firecracker-rootfs 4 | IMAGE=build/nixos.ext4 5 | 6 | mkdir -p $MOUNTPOINT 7 | umount $MOUNTPOINT || true 8 | mount $IMAGE $MOUNTPOINT 9 | nixos-install \ 10 | --impure --no-bootloader --no-root-passwd \ 11 | --root $MOUNTPOINT --flake ../.#firecracker 12 | mkdir -p $MOUNTPOINT/sbin 13 | rm -f $MOUNTPOINT/sbin/init 14 | ln -sf /nix/var/nix/profiles/system/init $MOUNTPOINT/sbin/init 15 | umount $IMAGE 16 | -------------------------------------------------------------------------------- /firecracker/config.json: -------------------------------------------------------------------------------- 1 | { 2 | "boot-source": { 3 | "kernel_image_path": "build/firecracker.vmlinux", 4 | "boot_args": "console=ttyS0 reboot=k panic=1 pci=off" 5 | }, 6 | 7 | "drives": [ 8 | { 9 | "drive_id": "rootfs", 10 | "path_on_host": "build/x.ext4", 11 | "is_root_device": true, 12 | "is_read_only": false 13 | } 14 | ], 15 | 16 | "machine-config": { 17 | "vcpu_count": 2, 18 | "mem_size_mib": 1024, 19 | "ht_enabled": false 20 | }, 21 | 22 | "network-interfaces": [{ 23 | "iface_id": "eth0", 24 | "guest_mac": "AA:FC:00:00:00:01", 25 | "host_dev_name": "tap0" 26 | }] 27 | } 28 | -------------------------------------------------------------------------------- /firecracker/kernel.config: -------------------------------------------------------------------------------- 1 | # 2 | # Automatically generated file; DO NOT EDIT. 3 | # Linux/x86 4.14.174 Kernel Configuration 4 | # 5 | CONFIG_64BIT=y 6 | CONFIG_X86_64=y 7 | CONFIG_X86=y 8 | CONFIG_INSTRUCTION_DECODER=y 9 | CONFIG_OUTPUT_FORMAT="elf64-x86-64" 10 | CONFIG_ARCH_DEFCONFIG="arch/x86/configs/x86_64_defconfig" 11 | CONFIG_LOCKDEP_SUPPORT=y 12 | CONFIG_STACKTRACE_SUPPORT=y 13 | CONFIG_MMU=y 14 | CONFIG_ARCH_MMAP_RND_BITS_MIN=28 15 | CONFIG_ARCH_MMAP_RND_BITS_MAX=32 16 | CONFIG_ARCH_MMAP_RND_COMPAT_BITS_MIN=8 17 | CONFIG_ARCH_MMAP_RND_COMPAT_BITS_MAX=16 18 | CONFIG_NEED_DMA_MAP_STATE=y 19 | CONFIG_NEED_SG_DMA_LENGTH=y 20 | CONFIG_GENERIC_ISA_DMA=y 21 | CONFIG_GENERIC_BUG=y 22 | CONFIG_GENERIC_BUG_RELATIVE_POINTERS=y 23 | CONFIG_GENERIC_HWEIGHT=y 24 | CONFIG_ARCH_MAY_HAVE_PC_FDC=y 25 | CONFIG_RWSEM_XCHGADD_ALGORITHM=y 26 | CONFIG_GENERIC_CALIBRATE_DELAY=y 27 | CONFIG_ARCH_HAS_CPU_RELAX=y 28 | CONFIG_ARCH_HAS_CACHE_LINE_SIZE=y 29 | CONFIG_HAVE_SETUP_PER_CPU_AREA=y 30 | CONFIG_NEED_PER_CPU_EMBED_FIRST_CHUNK=y 31 | CONFIG_NEED_PER_CPU_PAGE_FIRST_CHUNK=y 32 | CONFIG_ARCH_HIBERNATION_POSSIBLE=y 33 | CONFIG_ARCH_SUSPEND_POSSIBLE=y 34 | CONFIG_ARCH_WANT_HUGE_PMD_SHARE=y 35 | CONFIG_ARCH_WANT_GENERAL_HUGETLB=y 36 | CONFIG_ZONE_DMA32=y 37 | CONFIG_AUDIT_ARCH=y 38 | CONFIG_ARCH_SUPPORTS_OPTIMIZED_INLINING=y 39 | CONFIG_ARCH_SUPPORTS_DEBUG_PAGEALLOC=y 40 | CONFIG_X86_64_SMP=y 41 | CONFIG_ARCH_SUPPORTS_UPROBES=y 42 | CONFIG_FIX_EARLYCON_MEM=y 43 | CONFIG_PGTABLE_LEVELS=4 44 | CONFIG_DEFCONFIG_LIST="/lib/modules/$UNAME_RELEASE/.config" 45 | CONFIG_IRQ_WORK=y 46 | CONFIG_BUILDTIME_EXTABLE_SORT=y 47 | CONFIG_THREAD_INFO_IN_TASK=y 48 | 49 | # 50 | # General setup 51 | # 52 | CONFIG_INIT_ENV_ARG_LIMIT=32 53 | CONFIG_CROSS_COMPILE="" 54 | # CONFIG_COMPILE_TEST is not set 55 | CONFIG_LOCALVERSION="" 56 | # CONFIG_LOCALVERSION_AUTO is not set 57 | CONFIG_HAVE_KERNEL_GZIP=y 58 | CONFIG_HAVE_KERNEL_BZIP2=y 59 | CONFIG_HAVE_KERNEL_LZMA=y 60 | CONFIG_HAVE_KERNEL_XZ=y 61 | CONFIG_HAVE_KERNEL_LZO=y 62 | CONFIG_HAVE_KERNEL_LZ4=y 63 | CONFIG_KERNEL_GZIP=y 64 | # CONFIG_KERNEL_BZIP2 is not set 65 | # CONFIG_KERNEL_LZMA is not set 66 | # CONFIG_KERNEL_XZ is not set 67 | # CONFIG_KERNEL_LZO is not set 68 | # CONFIG_KERNEL_LZ4 is not set 69 | CONFIG_DEFAULT_HOSTNAME="(none)" 70 | CONFIG_SWAP=y 71 | CONFIG_SYSVIPC=y 72 | CONFIG_SYSVIPC_SYSCTL=y 73 | CONFIG_POSIX_MQUEUE=y 74 | CONFIG_POSIX_MQUEUE_SYSCTL=y 75 | CONFIG_CROSS_MEMORY_ATTACH=y 76 | CONFIG_FHANDLE=y 77 | # CONFIG_USELIB is not set 78 | CONFIG_AUDIT=y 79 | CONFIG_HAVE_ARCH_AUDITSYSCALL=y 80 | CONFIG_AUDITSYSCALL=y 81 | CONFIG_AUDIT_WATCH=y 82 | CONFIG_AUDIT_TREE=y 83 | 84 | # 85 | # IRQ subsystem 86 | # 87 | CONFIG_GENERIC_IRQ_PROBE=y 88 | CONFIG_GENERIC_IRQ_SHOW=y 89 | CONFIG_GENERIC_IRQ_EFFECTIVE_AFF_MASK=y 90 | CONFIG_GENERIC_PENDING_IRQ=y 91 | CONFIG_GENERIC_IRQ_MIGRATION=y 92 | CONFIG_IRQ_DOMAIN=y 93 | CONFIG_IRQ_DOMAIN_HIERARCHY=y 94 | # CONFIG_IRQ_DOMAIN_DEBUG is not set 95 | CONFIG_IRQ_FORCED_THREADING=y 96 | CONFIG_SPARSE_IRQ=y 97 | # CONFIG_GENERIC_IRQ_DEBUGFS is not set 98 | CONFIG_CLOCKSOURCE_WATCHDOG=y 99 | CONFIG_ARCH_CLOCKSOURCE_DATA=y 100 | CONFIG_CLOCKSOURCE_VALIDATE_LAST_CYCLE=y 101 | CONFIG_GENERIC_TIME_VSYSCALL=y 102 | CONFIG_GENERIC_CLOCKEVENTS=y 103 | CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y 104 | CONFIG_GENERIC_CLOCKEVENTS_MIN_ADJUST=y 105 | CONFIG_GENERIC_CMOS_UPDATE=y 106 | 107 | # 108 | # Timers subsystem 109 | # 110 | CONFIG_TICK_ONESHOT=y 111 | CONFIG_NO_HZ_COMMON=y 112 | # CONFIG_HZ_PERIODIC is not set 113 | CONFIG_NO_HZ_IDLE=y 114 | # CONFIG_NO_HZ_FULL is not set 115 | CONFIG_NO_HZ=y 116 | CONFIG_HIGH_RES_TIMERS=y 117 | 118 | # 119 | # CPU/Task time and stats accounting 120 | # 121 | CONFIG_TICK_CPU_ACCOUNTING=y 122 | # CONFIG_VIRT_CPU_ACCOUNTING_GEN is not set 123 | # CONFIG_IRQ_TIME_ACCOUNTING is not set 124 | CONFIG_BSD_PROCESS_ACCT=y 125 | CONFIG_BSD_PROCESS_ACCT_V3=y 126 | CONFIG_TASKSTATS=y 127 | CONFIG_TASK_DELAY_ACCT=y 128 | CONFIG_TASK_XACCT=y 129 | CONFIG_TASK_IO_ACCOUNTING=y 130 | 131 | # 132 | # RCU Subsystem 133 | # 134 | CONFIG_TREE_RCU=y 135 | # CONFIG_RCU_EXPERT is not set 136 | CONFIG_SRCU=y 137 | CONFIG_TREE_SRCU=y 138 | # CONFIG_TASKS_RCU is not set 139 | CONFIG_RCU_STALL_COMMON=y 140 | CONFIG_RCU_NEED_SEGCBLIST=y 141 | CONFIG_BUILD_BIN2C=y 142 | # CONFIG_IKCONFIG is not set 143 | CONFIG_LOG_BUF_SHIFT=21 144 | CONFIG_LOG_CPU_MAX_BUF_SHIFT=12 145 | CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 146 | CONFIG_HAVE_UNSTABLE_SCHED_CLOCK=y 147 | CONFIG_ARCH_SUPPORTS_NUMA_BALANCING=y 148 | CONFIG_ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH=y 149 | CONFIG_ARCH_SUPPORTS_INT128=y 150 | CONFIG_NUMA_BALANCING=y 151 | # CONFIG_NUMA_BALANCING_DEFAULT_ENABLED is not set 152 | CONFIG_CGROUPS=y 153 | CONFIG_PAGE_COUNTER=y 154 | CONFIG_MEMCG=y 155 | CONFIG_MEMCG_SWAP=y 156 | CONFIG_MEMCG_SWAP_ENABLED=y 157 | CONFIG_BLK_CGROUP=y 158 | # CONFIG_DEBUG_BLK_CGROUP is not set 159 | CONFIG_CGROUP_WRITEBACK=y 160 | CONFIG_CGROUP_SCHED=y 161 | CONFIG_FAIR_GROUP_SCHED=y 162 | CONFIG_CFS_BANDWIDTH=y 163 | CONFIG_RT_GROUP_SCHED=y 164 | CONFIG_CGROUP_PIDS=y 165 | # CONFIG_CGROUP_RDMA is not set 166 | CONFIG_CGROUP_FREEZER=y 167 | CONFIG_CGROUP_HUGETLB=y 168 | CONFIG_CPUSETS=y 169 | CONFIG_PROC_PID_CPUSET=y 170 | CONFIG_CGROUP_DEVICE=y 171 | CONFIG_CGROUP_CPUACCT=y 172 | CONFIG_CGROUP_PERF=y 173 | CONFIG_CGROUP_BPF=y 174 | # CONFIG_CGROUP_DEBUG is not set 175 | CONFIG_SOCK_CGROUP_DATA=y 176 | # CONFIG_CHECKPOINT_RESTORE is not set 177 | CONFIG_NAMESPACES=y 178 | CONFIG_UTS_NS=y 179 | CONFIG_IPC_NS=y 180 | CONFIG_USER_NS=y 181 | CONFIG_PID_NS=y 182 | CONFIG_NET_NS=y 183 | CONFIG_SCHED_AUTOGROUP=y 184 | # CONFIG_SYSFS_DEPRECATED is not set 185 | CONFIG_RELAY=y 186 | CONFIG_BLK_DEV_INITRD=y 187 | CONFIG_INITRAMFS_SOURCE="" 188 | CONFIG_RD_GZIP=y 189 | CONFIG_RD_BZIP2=y 190 | CONFIG_RD_LZMA=y 191 | CONFIG_RD_XZ=y 192 | CONFIG_RD_LZO=y 193 | CONFIG_RD_LZ4=y 194 | CONFIG_CC_OPTIMIZE_FOR_PERFORMANCE=y 195 | # CONFIG_CC_OPTIMIZE_FOR_SIZE is not set 196 | CONFIG_SYSCTL=y 197 | CONFIG_ANON_INODES=y 198 | CONFIG_HAVE_UID16=y 199 | CONFIG_SYSCTL_EXCEPTION_TRACE=y 200 | CONFIG_HAVE_PCSPKR_PLATFORM=y 201 | CONFIG_BPF=y 202 | # CONFIG_EXPERT is not set 203 | CONFIG_UID16=y 204 | CONFIG_MULTIUSER=y 205 | CONFIG_SGETMASK_SYSCALL=y 206 | CONFIG_SYSFS_SYSCALL=y 207 | # CONFIG_SYSCTL_SYSCALL is not set 208 | CONFIG_POSIX_TIMERS=y 209 | CONFIG_KALLSYMS=y 210 | # CONFIG_KALLSYMS_ALL is not set 211 | CONFIG_KALLSYMS_ABSOLUTE_PERCPU=y 212 | CONFIG_KALLSYMS_BASE_RELATIVE=y 213 | CONFIG_PRINTK=y 214 | CONFIG_PRINTK_NMI=y 215 | CONFIG_BUG=y 216 | CONFIG_ELF_CORE=y 217 | CONFIG_PCSPKR_PLATFORM=y 218 | CONFIG_BASE_FULL=y 219 | CONFIG_FUTEX=y 220 | CONFIG_FUTEX_PI=y 221 | CONFIG_EPOLL=y 222 | CONFIG_SIGNALFD=y 223 | CONFIG_TIMERFD=y 224 | CONFIG_EVENTFD=y 225 | CONFIG_BPF_SYSCALL=y 226 | CONFIG_BPF_JIT_ALWAYS_ON=y 227 | CONFIG_SHMEM=y 228 | CONFIG_AIO=y 229 | CONFIG_ADVISE_SYSCALLS=y 230 | CONFIG_USERFAULTFD=y 231 | CONFIG_MEMBARRIER=y 232 | # CONFIG_EMBEDDED is not set 233 | CONFIG_HAVE_PERF_EVENTS=y 234 | # CONFIG_PC104 is not set 235 | 236 | # 237 | # Kernel Performance Events And Counters 238 | # 239 | CONFIG_PERF_EVENTS=y 240 | # CONFIG_DEBUG_PERF_USE_VMALLOC is not set 241 | CONFIG_VM_EVENT_COUNTERS=y 242 | CONFIG_SLUB_DEBUG=y 243 | # CONFIG_SLUB_MEMCG_SYSFS_ON is not set 244 | # CONFIG_COMPAT_BRK is not set 245 | # CONFIG_SLAB is not set 246 | CONFIG_SLUB=y 247 | CONFIG_SLAB_MERGE_DEFAULT=y 248 | # CONFIG_SLAB_FREELIST_RANDOM is not set 249 | CONFIG_SLAB_FREELIST_HARDENED=y 250 | CONFIG_SLUB_CPU_PARTIAL=y 251 | CONFIG_SYSTEM_DATA_VERIFICATION=y 252 | CONFIG_PROFILING=y 253 | CONFIG_CRASH_CORE=y 254 | CONFIG_KEXEC_CORE=y 255 | CONFIG_HOTPLUG_SMT=y 256 | # CONFIG_OPROFILE is not set 257 | CONFIG_HAVE_OPROFILE=y 258 | CONFIG_OPROFILE_NMI_TIMER=y 259 | CONFIG_KPROBES=y 260 | CONFIG_JUMP_LABEL=y 261 | # CONFIG_STATIC_KEYS_SELFTEST is not set 262 | CONFIG_OPTPROBES=y 263 | # CONFIG_UPROBES is not set 264 | # CONFIG_HAVE_64BIT_ALIGNED_ACCESS is not set 265 | CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS=y 266 | CONFIG_ARCH_USE_BUILTIN_BSWAP=y 267 | CONFIG_KRETPROBES=y 268 | CONFIG_HAVE_IOREMAP_PROT=y 269 | CONFIG_HAVE_KPROBES=y 270 | CONFIG_HAVE_KRETPROBES=y 271 | CONFIG_HAVE_OPTPROBES=y 272 | CONFIG_HAVE_KPROBES_ON_FTRACE=y 273 | CONFIG_HAVE_NMI=y 274 | CONFIG_HAVE_ARCH_TRACEHOOK=y 275 | CONFIG_HAVE_DMA_CONTIGUOUS=y 276 | CONFIG_GENERIC_SMP_IDLE_THREAD=y 277 | CONFIG_ARCH_HAS_FORTIFY_SOURCE=y 278 | CONFIG_ARCH_HAS_SET_MEMORY=y 279 | CONFIG_ARCH_WANTS_DYNAMIC_TASK_STRUCT=y 280 | CONFIG_HAVE_REGS_AND_STACK_ACCESS_API=y 281 | CONFIG_HAVE_DMA_API_DEBUG=y 282 | CONFIG_HAVE_HW_BREAKPOINT=y 283 | CONFIG_HAVE_MIXED_BREAKPOINTS_REGS=y 284 | CONFIG_HAVE_USER_RETURN_NOTIFIER=y 285 | CONFIG_HAVE_PERF_EVENTS_NMI=y 286 | CONFIG_HAVE_HARDLOCKUP_DETECTOR_PERF=y 287 | CONFIG_HAVE_PERF_REGS=y 288 | CONFIG_HAVE_PERF_USER_STACK_DUMP=y 289 | CONFIG_HAVE_ARCH_JUMP_LABEL=y 290 | CONFIG_HAVE_RCU_TABLE_FREE=y 291 | CONFIG_HAVE_RCU_TABLE_INVALIDATE=y 292 | CONFIG_ARCH_HAVE_NMI_SAFE_CMPXCHG=y 293 | CONFIG_HAVE_ALIGNED_STRUCT_PAGE=y 294 | CONFIG_HAVE_CMPXCHG_LOCAL=y 295 | CONFIG_HAVE_CMPXCHG_DOUBLE=y 296 | CONFIG_ARCH_WANT_COMPAT_IPC_PARSE_VERSION=y 297 | CONFIG_ARCH_WANT_OLD_COMPAT_IPC=y 298 | CONFIG_HAVE_ARCH_SECCOMP_FILTER=y 299 | CONFIG_SECCOMP_FILTER=y 300 | CONFIG_HAVE_GCC_PLUGINS=y 301 | # CONFIG_GCC_PLUGINS is not set 302 | CONFIG_HAVE_CC_STACKPROTECTOR=y 303 | CONFIG_CC_STACKPROTECTOR=y 304 | # CONFIG_CC_STACKPROTECTOR_NONE is not set 305 | # CONFIG_CC_STACKPROTECTOR_REGULAR is not set 306 | CONFIG_CC_STACKPROTECTOR_STRONG=y 307 | CONFIG_THIN_ARCHIVES=y 308 | CONFIG_HAVE_ARCH_WITHIN_STACK_FRAMES=y 309 | CONFIG_HAVE_CONTEXT_TRACKING=y 310 | CONFIG_HAVE_VIRT_CPU_ACCOUNTING_GEN=y 311 | CONFIG_HAVE_IRQ_TIME_ACCOUNTING=y 312 | CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE=y 313 | CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD=y 314 | CONFIG_HAVE_ARCH_HUGE_VMAP=y 315 | CONFIG_HAVE_ARCH_SOFT_DIRTY=y 316 | CONFIG_HAVE_MOD_ARCH_SPECIFIC=y 317 | CONFIG_MODULES_USE_ELF_RELA=y 318 | CONFIG_HAVE_IRQ_EXIT_ON_IRQ_STACK=y 319 | CONFIG_ARCH_HAS_ELF_RANDOMIZE=y 320 | CONFIG_HAVE_ARCH_MMAP_RND_BITS=y 321 | CONFIG_HAVE_EXIT_THREAD=y 322 | CONFIG_ARCH_MMAP_RND_BITS=28 323 | CONFIG_HAVE_ARCH_MMAP_RND_COMPAT_BITS=y 324 | CONFIG_ARCH_MMAP_RND_COMPAT_BITS=8 325 | CONFIG_HAVE_ARCH_COMPAT_MMAP_BASES=y 326 | CONFIG_HAVE_COPY_THREAD_TLS=y 327 | CONFIG_HAVE_STACK_VALIDATION=y 328 | CONFIG_HAVE_RELIABLE_STACKTRACE=y 329 | # CONFIG_HAVE_ARCH_HASH is not set 330 | # CONFIG_ISA_BUS_API is not set 331 | CONFIG_OLD_SIGSUSPEND3=y 332 | CONFIG_COMPAT_OLD_SIGACTION=y 333 | # CONFIG_CPU_NO_EFFICIENT_FFS is not set 334 | CONFIG_HAVE_ARCH_VMAP_STACK=y 335 | CONFIG_VMAP_STACK=y 336 | # CONFIG_ARCH_OPTIONAL_KERNEL_RWX is not set 337 | # CONFIG_ARCH_OPTIONAL_KERNEL_RWX_DEFAULT is not set 338 | CONFIG_ARCH_HAS_STRICT_KERNEL_RWX=y 339 | CONFIG_STRICT_KERNEL_RWX=y 340 | CONFIG_ARCH_HAS_STRICT_MODULE_RWX=y 341 | CONFIG_STRICT_MODULE_RWX=y 342 | CONFIG_ARCH_HAS_REFCOUNT=y 343 | # CONFIG_REFCOUNT_FULL is not set 344 | 345 | # 346 | # GCOV-based kernel profiling 347 | # 348 | # CONFIG_GCOV_KERNEL is not set 349 | CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y 350 | # CONFIG_HAVE_GENERIC_DMA_COHERENT is not set 351 | CONFIG_SLABINFO=y 352 | CONFIG_RT_MUTEXES=y 353 | CONFIG_BASE_SMALL=0 354 | CONFIG_MODULES=y 355 | CONFIG_MODULE_FORCE_LOAD=y 356 | CONFIG_MODULE_UNLOAD=y 357 | # CONFIG_MODULE_FORCE_UNLOAD is not set 358 | CONFIG_MODVERSIONS=y 359 | CONFIG_MODULE_SRCVERSION_ALL=y 360 | CONFIG_MODULE_SIG=y 361 | # CONFIG_MODULE_SIG_FORCE is not set 362 | CONFIG_MODULE_SIG_ALL=y 363 | # CONFIG_MODULE_SIG_SHA1 is not set 364 | # CONFIG_MODULE_SIG_SHA224 is not set 365 | # CONFIG_MODULE_SIG_SHA256 is not set 366 | # CONFIG_MODULE_SIG_SHA384 is not set 367 | CONFIG_MODULE_SIG_SHA512=y 368 | CONFIG_MODULE_SIG_HASH="sha512" 369 | # CONFIG_MODULE_COMPRESS is not set 370 | CONFIG_MODULES_TREE_LOOKUP=y 371 | CONFIG_BLOCK=y 372 | CONFIG_BLK_SCSI_REQUEST=y 373 | CONFIG_BLK_DEV_BSG=y 374 | CONFIG_BLK_DEV_BSGLIB=y 375 | CONFIG_BLK_DEV_INTEGRITY=y 376 | # CONFIG_BLK_DEV_ZONED is not set 377 | CONFIG_BLK_DEV_THROTTLING=y 378 | # CONFIG_BLK_DEV_THROTTLING_LOW is not set 379 | CONFIG_BLK_CMDLINE_PARSER=y 380 | CONFIG_BLK_WBT=y 381 | # CONFIG_BLK_WBT_SQ is not set 382 | CONFIG_BLK_WBT_MQ=y 383 | CONFIG_BLK_DEBUG_FS=y 384 | # CONFIG_BLK_SED_OPAL is not set 385 | 386 | # 387 | # Partition Types 388 | # 389 | CONFIG_PARTITION_ADVANCED=y 390 | # CONFIG_ACORN_PARTITION is not set 391 | # CONFIG_AIX_PARTITION is not set 392 | # CONFIG_OSF_PARTITION is not set 393 | # CONFIG_AMIGA_PARTITION is not set 394 | # CONFIG_ATARI_PARTITION is not set 395 | # CONFIG_MAC_PARTITION is not set 396 | # CONFIG_MSDOS_PARTITION is not set 397 | # CONFIG_LDM_PARTITION is not set 398 | # CONFIG_SGI_PARTITION is not set 399 | # CONFIG_ULTRIX_PARTITION is not set 400 | # CONFIG_SUN_PARTITION is not set 401 | # CONFIG_KARMA_PARTITION is not set 402 | # CONFIG_EFI_PARTITION is not set 403 | # CONFIG_SYSV68_PARTITION is not set 404 | # CONFIG_CMDLINE_PARTITION is not set 405 | CONFIG_BLOCK_COMPAT=y 406 | CONFIG_BLK_MQ_VIRTIO=y 407 | 408 | # 409 | # IO Schedulers 410 | # 411 | CONFIG_IOSCHED_NOOP=y 412 | # CONFIG_IOSCHED_DEADLINE is not set 413 | CONFIG_IOSCHED_CFQ=y 414 | CONFIG_CFQ_GROUP_IOSCHED=y 415 | # CONFIG_DEFAULT_CFQ is not set 416 | CONFIG_DEFAULT_NOOP=y 417 | CONFIG_DEFAULT_IOSCHED="noop" 418 | # CONFIG_MQ_IOSCHED_DEADLINE is not set 419 | # CONFIG_MQ_IOSCHED_KYBER is not set 420 | # CONFIG_IOSCHED_BFQ is not set 421 | CONFIG_ASN1=y 422 | CONFIG_INLINE_SPIN_UNLOCK_IRQ=y 423 | CONFIG_INLINE_READ_UNLOCK=y 424 | CONFIG_INLINE_READ_UNLOCK_IRQ=y 425 | CONFIG_INLINE_WRITE_UNLOCK=y 426 | CONFIG_INLINE_WRITE_UNLOCK_IRQ=y 427 | CONFIG_ARCH_SUPPORTS_ATOMIC_RMW=y 428 | CONFIG_MUTEX_SPIN_ON_OWNER=y 429 | CONFIG_RWSEM_SPIN_ON_OWNER=y 430 | CONFIG_LOCK_SPIN_ON_OWNER=y 431 | CONFIG_ARCH_USE_QUEUED_SPINLOCKS=y 432 | CONFIG_QUEUED_SPINLOCKS=y 433 | CONFIG_ARCH_USE_QUEUED_RWLOCKS=y 434 | CONFIG_QUEUED_RWLOCKS=y 435 | CONFIG_FREEZER=y 436 | 437 | # 438 | # Processor type and features 439 | # 440 | CONFIG_ZONE_DMA=y 441 | CONFIG_SMP=y 442 | CONFIG_X86_FEATURE_NAMES=y 443 | CONFIG_X86_FAST_FEATURE_TESTS=y 444 | CONFIG_X86_X2APIC=y 445 | CONFIG_X86_MPPARSE=y 446 | # CONFIG_GOLDFISH is not set 447 | CONFIG_RETPOLINE=y 448 | # CONFIG_INTEL_RDT is not set 449 | # CONFIG_X86_EXTENDED_PLATFORM is not set 450 | CONFIG_SCHED_OMIT_FRAME_POINTER=y 451 | CONFIG_HYPERVISOR_GUEST=y 452 | CONFIG_PARAVIRT=y 453 | # CONFIG_PARAVIRT_DEBUG is not set 454 | CONFIG_PARAVIRT_SPINLOCKS=y 455 | # CONFIG_QUEUED_LOCK_STAT is not set 456 | # CONFIG_XEN is not set 457 | CONFIG_KVM_GUEST=y 458 | CONFIG_KVM_DEBUG_FS=y 459 | CONFIG_PARAVIRT_TIME_ACCOUNTING=y 460 | CONFIG_PARAVIRT_CLOCK=y 461 | CONFIG_NO_BOOTMEM=y 462 | # CONFIG_MK8 is not set 463 | # CONFIG_MPSC is not set 464 | # CONFIG_MCORE2 is not set 465 | # CONFIG_MATOM is not set 466 | CONFIG_GENERIC_CPU=y 467 | CONFIG_X86_INTERNODE_CACHE_SHIFT=6 468 | CONFIG_X86_L1_CACHE_SHIFT=6 469 | CONFIG_X86_TSC=y 470 | CONFIG_X86_CMPXCHG64=y 471 | CONFIG_X86_CMOV=y 472 | CONFIG_X86_MINIMUM_CPU_FAMILY=64 473 | CONFIG_X86_DEBUGCTLMSR=y 474 | CONFIG_CPU_SUP_INTEL=y 475 | CONFIG_CPU_SUP_AMD=y 476 | CONFIG_CPU_SUP_CENTAUR=y 477 | CONFIG_HPET_TIMER=y 478 | CONFIG_DMI=y 479 | CONFIG_SWIOTLB=y 480 | CONFIG_IOMMU_HELPER=y 481 | # CONFIG_MAXSMP is not set 482 | CONFIG_NR_CPUS=128 483 | CONFIG_SCHED_SMT=y 484 | CONFIG_SCHED_MC=y 485 | CONFIG_SCHED_MC_PRIO=y 486 | CONFIG_PREEMPT_NONE=y 487 | # CONFIG_PREEMPT_VOLUNTARY is not set 488 | # CONFIG_PREEMPT is not set 489 | CONFIG_X86_LOCAL_APIC=y 490 | CONFIG_X86_IO_APIC=y 491 | CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y 492 | # CONFIG_X86_MCE is not set 493 | 494 | # 495 | # Performance monitoring 496 | # 497 | # CONFIG_PERF_EVENTS_AMD_POWER is not set 498 | # CONFIG_VM86 is not set 499 | CONFIG_X86_16BIT=y 500 | CONFIG_X86_ESPFIX64=y 501 | CONFIG_X86_VSYSCALL_EMULATION=y 502 | # CONFIG_I8K is not set 503 | # CONFIG_MICROCODE is not set 504 | CONFIG_X86_MSR=y 505 | CONFIG_X86_CPUID=y 506 | # CONFIG_X86_5LEVEL is not set 507 | CONFIG_ARCH_PHYS_ADDR_T_64BIT=y 508 | CONFIG_ARCH_DMA_ADDR_T_64BIT=y 509 | CONFIG_X86_DIRECT_GBPAGES=y 510 | CONFIG_ARCH_HAS_MEM_ENCRYPT=y 511 | CONFIG_AMD_MEM_ENCRYPT=y 512 | # CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT is not set 513 | CONFIG_ARCH_USE_MEMREMAP_PROT=y 514 | CONFIG_NUMA=y 515 | # CONFIG_NUMA_EMU is not set 516 | CONFIG_NODES_SHIFT=10 517 | CONFIG_ARCH_SPARSEMEM_ENABLE=y 518 | CONFIG_ARCH_SPARSEMEM_DEFAULT=y 519 | CONFIG_ARCH_SELECT_MEMORY_MODEL=y 520 | CONFIG_ARCH_MEMORY_PROBE=y 521 | CONFIG_ARCH_PROC_KCORE_TEXT=y 522 | CONFIG_ILLEGAL_POINTER_VALUE=0xdead000000000000 523 | CONFIG_SELECT_MEMORY_MODEL=y 524 | CONFIG_SPARSEMEM_MANUAL=y 525 | CONFIG_SPARSEMEM=y 526 | CONFIG_NEED_MULTIPLE_NODES=y 527 | CONFIG_HAVE_MEMORY_PRESENT=y 528 | CONFIG_SPARSEMEM_EXTREME=y 529 | CONFIG_SPARSEMEM_VMEMMAP_ENABLE=y 530 | CONFIG_SPARSEMEM_ALLOC_MEM_MAP_TOGETHER=y 531 | CONFIG_SPARSEMEM_VMEMMAP=y 532 | CONFIG_HAVE_MEMBLOCK=y 533 | CONFIG_HAVE_MEMBLOCK_NODE_MAP=y 534 | CONFIG_HAVE_GENERIC_GUP=y 535 | CONFIG_ARCH_DISCARD_MEMBLOCK=y 536 | CONFIG_MEMORY_ISOLATION=y 537 | CONFIG_HAVE_BOOTMEM_INFO_NODE=y 538 | CONFIG_MEMORY_HOTPLUG=y 539 | CONFIG_MEMORY_HOTPLUG_SPARSE=y 540 | # CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE is not set 541 | CONFIG_MEMORY_HOTREMOVE=y 542 | CONFIG_SPLIT_PTLOCK_CPUS=4 543 | CONFIG_ARCH_ENABLE_SPLIT_PMD_PTLOCK=y 544 | CONFIG_MEMORY_BALLOON=y 545 | CONFIG_BALLOON_COMPACTION=y 546 | CONFIG_COMPACTION=y 547 | CONFIG_MIGRATION=y 548 | CONFIG_ARCH_ENABLE_HUGEPAGE_MIGRATION=y 549 | CONFIG_ARCH_ENABLE_THP_MIGRATION=y 550 | CONFIG_PHYS_ADDR_T_64BIT=y 551 | CONFIG_BOUNCE=y 552 | CONFIG_VIRT_TO_BUS=y 553 | CONFIG_KSM=y 554 | CONFIG_DEFAULT_MMAP_MIN_ADDR=4096 555 | CONFIG_TRANSPARENT_HUGEPAGE=y 556 | # CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS is not set 557 | CONFIG_TRANSPARENT_HUGEPAGE_MADVISE=y 558 | CONFIG_ARCH_WANTS_THP_SWAP=y 559 | CONFIG_THP_SWAP=y 560 | CONFIG_TRANSPARENT_HUGE_PAGECACHE=y 561 | CONFIG_CLEANCACHE=y 562 | CONFIG_FRONTSWAP=y 563 | # CONFIG_CMA is not set 564 | # CONFIG_ZSWAP is not set 565 | CONFIG_ZPOOL=y 566 | # CONFIG_ZBUD is not set 567 | # CONFIG_Z3FOLD is not set 568 | # CONFIG_ZSMALLOC is not set 569 | CONFIG_GENERIC_EARLY_IOREMAP=y 570 | CONFIG_ARCH_SUPPORTS_DEFERRED_STRUCT_PAGE_INIT=y 571 | # CONFIG_DEFERRED_STRUCT_PAGE_INIT is not set 572 | # CONFIG_IDLE_PAGE_TRACKING is not set 573 | CONFIG_ARCH_HAS_ZONE_DEVICE=y 574 | # CONFIG_ZONE_DEVICE is not set 575 | CONFIG_ARCH_USES_HIGH_VMA_FLAGS=y 576 | CONFIG_ARCH_HAS_PKEYS=y 577 | CONFIG_PERCPU_STATS=y 578 | # CONFIG_X86_PMEM_LEGACY is not set 579 | CONFIG_X86_CHECK_BIOS_CORRUPTION=y 580 | CONFIG_X86_BOOTPARAM_MEMORY_CORRUPTION_CHECK=y 581 | CONFIG_X86_RESERVE_LOW=64 582 | CONFIG_MTRR=y 583 | CONFIG_MTRR_SANITIZER=y 584 | CONFIG_MTRR_SANITIZER_ENABLE_DEFAULT=0 585 | CONFIG_MTRR_SANITIZER_SPARE_REG_NR_DEFAULT=1 586 | CONFIG_X86_PAT=y 587 | CONFIG_ARCH_USES_PG_UNCACHED=y 588 | CONFIG_ARCH_RANDOM=y 589 | CONFIG_X86_SMAP=y 590 | # CONFIG_X86_INTEL_MPX is not set 591 | CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y 592 | CONFIG_X86_INTEL_TSX_MODE_OFF=y 593 | # CONFIG_X86_INTEL_TSX_MODE_ON is not set 594 | # CONFIG_X86_INTEL_TSX_MODE_AUTO is not set 595 | CONFIG_SECCOMP=y 596 | # CONFIG_HZ_100 is not set 597 | CONFIG_HZ_250=y 598 | # CONFIG_HZ_300 is not set 599 | # CONFIG_HZ_1000 is not set 600 | CONFIG_HZ=250 601 | CONFIG_SCHED_HRTICK=y 602 | # CONFIG_KEXEC is not set 603 | CONFIG_KEXEC_FILE=y 604 | CONFIG_KEXEC_VERIFY_SIG=y 605 | CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y 606 | # CONFIG_CRASH_DUMP is not set 607 | CONFIG_PHYSICAL_START=0x1000000 608 | CONFIG_RELOCATABLE=y 609 | # CONFIG_RANDOMIZE_BASE is not set 610 | CONFIG_PHYSICAL_ALIGN=0x1000000 611 | CONFIG_HOTPLUG_CPU=y 612 | # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set 613 | # CONFIG_DEBUG_HOTPLUG_CPU0 is not set 614 | # CONFIG_COMPAT_VDSO is not set 615 | # CONFIG_LEGACY_VSYSCALL_NATIVE is not set 616 | CONFIG_LEGACY_VSYSCALL_EMULATE=y 617 | # CONFIG_LEGACY_VSYSCALL_NONE is not set 618 | # CONFIG_CMDLINE_BOOL is not set 619 | CONFIG_MODIFY_LDT_SYSCALL=y 620 | CONFIG_HAVE_LIVEPATCH=y 621 | CONFIG_ARCH_HAS_ADD_PAGES=y 622 | CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y 623 | CONFIG_ARCH_ENABLE_MEMORY_HOTREMOVE=y 624 | CONFIG_USE_PERCPU_NUMA_NODE_ID=y 625 | 626 | # 627 | # Power management and ACPI options 628 | # 629 | CONFIG_ARCH_HIBERNATION_HEADER=y 630 | # CONFIG_SUSPEND is not set 631 | CONFIG_HIBERNATE_CALLBACKS=y 632 | CONFIG_HIBERNATION=y 633 | CONFIG_PM_STD_PARTITION="" 634 | CONFIG_PM_SLEEP=y 635 | CONFIG_PM_SLEEP_SMP=y 636 | # CONFIG_PM_AUTOSLEEP is not set 637 | # CONFIG_PM_WAKELOCKS is not set 638 | CONFIG_PM=y 639 | # CONFIG_PM_DEBUG is not set 640 | # CONFIG_WQ_POWER_EFFICIENT_DEFAULT is not set 641 | # CONFIG_SFI is not set 642 | 643 | # 644 | # CPU Frequency scaling 645 | # 646 | CONFIG_CPU_FREQ=y 647 | CONFIG_CPU_FREQ_STAT=y 648 | CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y 649 | # CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE is not set 650 | # CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE is not set 651 | # CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND is not set 652 | # CONFIG_CPU_FREQ_DEFAULT_GOV_CONSERVATIVE is not set 653 | # CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL is not set 654 | CONFIG_CPU_FREQ_GOV_PERFORMANCE=y 655 | # CONFIG_CPU_FREQ_GOV_POWERSAVE is not set 656 | # CONFIG_CPU_FREQ_GOV_USERSPACE is not set 657 | # CONFIG_CPU_FREQ_GOV_ONDEMAND is not set 658 | # CONFIG_CPU_FREQ_GOV_CONSERVATIVE is not set 659 | # CONFIG_CPU_FREQ_GOV_SCHEDUTIL is not set 660 | 661 | # 662 | # CPU frequency scaling drivers 663 | # 664 | CONFIG_X86_INTEL_PSTATE=y 665 | # CONFIG_X86_P4_CLOCKMOD is not set 666 | 667 | # 668 | # shared options 669 | # 670 | # CONFIG_X86_SPEEDSTEP_LIB is not set 671 | 672 | # 673 | # CPU Idle 674 | # 675 | CONFIG_CPU_IDLE=y 676 | CONFIG_CPU_IDLE_GOV_LADDER=y 677 | CONFIG_CPU_IDLE_GOV_MENU=y 678 | # CONFIG_ARCH_NEEDS_CPU_IDLE_COUPLED is not set 679 | CONFIG_INTEL_IDLE=y 680 | 681 | # 682 | # Bus options (PCI etc.) 683 | # 684 | # CONFIG_PCI is not set 685 | CONFIG_PCI_LOCKLESS_CONFIG=y 686 | CONFIG_PCI_LABEL=y 687 | 688 | # 689 | # DesignWare PCI Core Support 690 | # 691 | 692 | # 693 | # PCI Endpoint 694 | # 695 | # CONFIG_PCI_ENDPOINT is not set 696 | CONFIG_ISA_DMA_API=y 697 | # CONFIG_PCCARD is not set 698 | # CONFIG_X86_SYSFB is not set 699 | 700 | # 701 | # Executable file formats / Emulations 702 | # 703 | CONFIG_BINFMT_ELF=y 704 | CONFIG_COMPAT_BINFMT_ELF=y 705 | CONFIG_ELFCORE=y 706 | CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS=y 707 | CONFIG_BINFMT_SCRIPT=y 708 | # CONFIG_HAVE_AOUT is not set 709 | CONFIG_BINFMT_MISC=y 710 | CONFIG_COREDUMP=y 711 | CONFIG_IA32_EMULATION=y 712 | # CONFIG_IA32_AOUT is not set 713 | # CONFIG_X86_X32 is not set 714 | CONFIG_COMPAT_32=y 715 | CONFIG_COMPAT=y 716 | CONFIG_COMPAT_FOR_U64_ALIGNMENT=y 717 | CONFIG_SYSVIPC_COMPAT=y 718 | CONFIG_X86_DEV_DMA_OPS=y 719 | CONFIG_NET=y 720 | CONFIG_NET_INGRESS=y 721 | 722 | # 723 | # Networking options 724 | # 725 | CONFIG_PACKET=y 726 | # CONFIG_PACKET_DIAG is not set 727 | CONFIG_UNIX=y 728 | # CONFIG_UNIX_DIAG is not set 729 | # CONFIG_TLS is not set 730 | CONFIG_XFRM=y 731 | CONFIG_XFRM_ALGO=y 732 | CONFIG_XFRM_USER=y 733 | CONFIG_XFRM_SUB_POLICY=y 734 | CONFIG_XFRM_MIGRATE=y 735 | CONFIG_XFRM_STATISTICS=y 736 | # CONFIG_NET_KEY is not set 737 | CONFIG_INET=y 738 | CONFIG_IP_MULTICAST=y 739 | CONFIG_IP_ADVANCED_ROUTER=y 740 | # CONFIG_IP_FIB_TRIE_STATS is not set 741 | CONFIG_IP_MULTIPLE_TABLES=y 742 | CONFIG_IP_ROUTE_MULTIPATH=y 743 | CONFIG_IP_ROUTE_VERBOSE=y 744 | CONFIG_IP_PNP=y 745 | CONFIG_IP_PNP_DHCP=y 746 | CONFIG_IP_PNP_BOOTP=y 747 | CONFIG_IP_PNP_RARP=y 748 | # CONFIG_NET_IPIP is not set 749 | # CONFIG_NET_IPGRE_DEMUX is not set 750 | # CONFIG_NET_IP_TUNNEL is not set 751 | CONFIG_IP_MROUTE=y 752 | CONFIG_IP_MROUTE_MULTIPLE_TABLES=y 753 | CONFIG_IP_PIMSM_V1=y 754 | CONFIG_IP_PIMSM_V2=y 755 | CONFIG_SYN_COOKIES=y 756 | # CONFIG_NET_UDP_TUNNEL is not set 757 | # CONFIG_NET_FOU is not set 758 | # CONFIG_INET_AH is not set 759 | # CONFIG_INET_ESP is not set 760 | # CONFIG_INET_IPCOMP is not set 761 | # CONFIG_INET_XFRM_TUNNEL is not set 762 | # CONFIG_INET_TUNNEL is not set 763 | # CONFIG_INET_XFRM_MODE_TRANSPORT is not set 764 | # CONFIG_INET_XFRM_MODE_TUNNEL is not set 765 | # CONFIG_INET_XFRM_MODE_BEET is not set 766 | # CONFIG_INET_DIAG is not set 767 | CONFIG_TCP_CONG_ADVANCED=y 768 | # CONFIG_TCP_CONG_BIC is not set 769 | CONFIG_TCP_CONG_CUBIC=y 770 | # CONFIG_TCP_CONG_WESTWOOD is not set 771 | # CONFIG_TCP_CONG_HTCP is not set 772 | # CONFIG_TCP_CONG_HSTCP is not set 773 | # CONFIG_TCP_CONG_HYBLA is not set 774 | # CONFIG_TCP_CONG_VEGAS is not set 775 | # CONFIG_TCP_CONG_NV is not set 776 | # CONFIG_TCP_CONG_SCALABLE is not set 777 | # CONFIG_TCP_CONG_LP is not set 778 | # CONFIG_TCP_CONG_VENO is not set 779 | # CONFIG_TCP_CONG_YEAH is not set 780 | # CONFIG_TCP_CONG_ILLINOIS is not set 781 | # CONFIG_TCP_CONG_DCTCP is not set 782 | # CONFIG_TCP_CONG_CDG is not set 783 | # CONFIG_TCP_CONG_BBR is not set 784 | CONFIG_DEFAULT_CUBIC=y 785 | # CONFIG_DEFAULT_RENO is not set 786 | CONFIG_DEFAULT_TCP_CONG="cubic" 787 | CONFIG_TCP_MD5SIG=y 788 | CONFIG_IPV6=y 789 | CONFIG_IPV6_ROUTER_PREF=y 790 | CONFIG_IPV6_ROUTE_INFO=y 791 | CONFIG_IPV6_OPTIMISTIC_DAD=y 792 | # CONFIG_INET6_AH is not set 793 | # CONFIG_INET6_ESP is not set 794 | # CONFIG_INET6_IPCOMP is not set 795 | # CONFIG_IPV6_MIP6 is not set 796 | # CONFIG_IPV6_ILA is not set 797 | # CONFIG_INET6_XFRM_TUNNEL is not set 798 | # CONFIG_INET6_TUNNEL is not set 799 | # CONFIG_INET6_XFRM_MODE_TRANSPORT is not set 800 | # CONFIG_INET6_XFRM_MODE_TUNNEL is not set 801 | # CONFIG_INET6_XFRM_MODE_BEET is not set 802 | # CONFIG_INET6_XFRM_MODE_ROUTEOPTIMIZATION is not set 803 | # CONFIG_IPV6_SIT is not set 804 | # CONFIG_IPV6_TUNNEL is not set 805 | # CONFIG_IPV6_FOU is not set 806 | # CONFIG_IPV6_FOU_TUNNEL is not set 807 | CONFIG_IPV6_MULTIPLE_TABLES=y 808 | CONFIG_IPV6_SUBTREES=y 809 | CONFIG_IPV6_MROUTE=y 810 | CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y 811 | CONFIG_IPV6_PIMSM_V2=y 812 | CONFIG_IPV6_SEG6_LWTUNNEL=y 813 | CONFIG_IPV6_SEG6_HMAC=y 814 | CONFIG_NETLABEL=y 815 | CONFIG_NETWORK_SECMARK=y 816 | CONFIG_NET_PTP_CLASSIFY=y 817 | CONFIG_NETWORK_PHY_TIMESTAMPING=y 818 | CONFIG_NETFILTER=y 819 | CONFIG_NETFILTER_ADVANCED=y 820 | CONFIG_BRIDGE_NETFILTER=y 821 | 822 | # 823 | # Core Netfilter Configuration 824 | # 825 | CONFIG_NETFILTER_INGRESS=y 826 | # CONFIG_NETFILTER_NETLINK_ACCT is not set 827 | # CONFIG_NETFILTER_NETLINK_QUEUE is not set 828 | # CONFIG_NETFILTER_NETLINK_LOG is not set 829 | CONFIG_NF_CONNTRACK=y 830 | CONFIG_NF_LOG_COMMON=y 831 | # CONFIG_NF_LOG_NETDEV is not set 832 | CONFIG_NF_CONNTRACK_MARK=y 833 | CONFIG_NF_CONNTRACK_SECMARK=y 834 | CONFIG_NF_CONNTRACK_PROCFS=y 835 | CONFIG_NF_CONNTRACK_EVENTS=y 836 | CONFIG_NF_CONNTRACK_TIMEOUT=y 837 | CONFIG_NF_CONNTRACK_TIMESTAMP=y 838 | CONFIG_NF_CT_PROTO_DCCP=y 839 | CONFIG_NF_CT_PROTO_SCTP=y 840 | CONFIG_NF_CT_PROTO_UDPLITE=y 841 | # CONFIG_NF_CONNTRACK_AMANDA is not set 842 | # CONFIG_NF_CONNTRACK_FTP is not set 843 | # CONFIG_NF_CONNTRACK_H323 is not set 844 | # CONFIG_NF_CONNTRACK_IRC is not set 845 | # CONFIG_NF_CONNTRACK_NETBIOS_NS is not set 846 | # CONFIG_NF_CONNTRACK_SNMP is not set 847 | # CONFIG_NF_CONNTRACK_PPTP is not set 848 | # CONFIG_NF_CONNTRACK_SANE is not set 849 | # CONFIG_NF_CONNTRACK_SIP is not set 850 | # CONFIG_NF_CONNTRACK_TFTP is not set 851 | # CONFIG_NF_CT_NETLINK is not set 852 | # CONFIG_NF_CT_NETLINK_TIMEOUT is not set 853 | CONFIG_NF_NAT=y 854 | CONFIG_NF_NAT_NEEDED=y 855 | CONFIG_NF_NAT_PROTO_DCCP=y 856 | CONFIG_NF_NAT_PROTO_UDPLITE=y 857 | CONFIG_NF_NAT_PROTO_SCTP=y 858 | # CONFIG_NF_NAT_AMANDA is not set 859 | # CONFIG_NF_NAT_FTP is not set 860 | # CONFIG_NF_NAT_IRC is not set 861 | # CONFIG_NF_NAT_SIP is not set 862 | # CONFIG_NF_NAT_TFTP is not set 863 | CONFIG_NF_NAT_REDIRECT=y 864 | CONFIG_NETFILTER_SYNPROXY=y 865 | # CONFIG_NF_TABLES is not set 866 | CONFIG_NETFILTER_XTABLES=y 867 | 868 | # 869 | # Xtables combined modules 870 | # 871 | # CONFIG_NETFILTER_XT_MARK is not set 872 | # CONFIG_NETFILTER_XT_CONNMARK is not set 873 | 874 | # 875 | # Xtables targets 876 | # 877 | # CONFIG_NETFILTER_XT_TARGET_AUDIT is not set 878 | # CONFIG_NETFILTER_XT_TARGET_CHECKSUM is not set 879 | # CONFIG_NETFILTER_XT_TARGET_CLASSIFY is not set 880 | # CONFIG_NETFILTER_XT_TARGET_CONNMARK is not set 881 | # CONFIG_NETFILTER_XT_TARGET_CONNSECMARK is not set 882 | # CONFIG_NETFILTER_XT_TARGET_DSCP is not set 883 | # CONFIG_NETFILTER_XT_TARGET_HL is not set 884 | # CONFIG_NETFILTER_XT_TARGET_HMARK is not set 885 | # CONFIG_NETFILTER_XT_TARGET_IDLETIMER is not set 886 | CONFIG_NETFILTER_XT_TARGET_LOG=y 887 | # CONFIG_NETFILTER_XT_TARGET_MARK is not set 888 | CONFIG_NETFILTER_XT_NAT=y 889 | CONFIG_NETFILTER_XT_TARGET_NETMAP=y 890 | # CONFIG_NETFILTER_XT_TARGET_NFLOG is not set 891 | # CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set 892 | # CONFIG_NETFILTER_XT_TARGET_RATEEST is not set 893 | CONFIG_NETFILTER_XT_TARGET_REDIRECT=y 894 | # CONFIG_NETFILTER_XT_TARGET_TEE is not set 895 | # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set 896 | # CONFIG_NETFILTER_XT_TARGET_SECMARK is not set 897 | # CONFIG_NETFILTER_XT_TARGET_TCPMSS is not set 898 | # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set 899 | 900 | # 901 | # Xtables matches 902 | # 903 | CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y 904 | # CONFIG_NETFILTER_XT_MATCH_BPF is not set 905 | # CONFIG_NETFILTER_XT_MATCH_CGROUP is not set 906 | # CONFIG_NETFILTER_XT_MATCH_CLUSTER is not set 907 | # CONFIG_NETFILTER_XT_MATCH_COMMENT is not set 908 | # CONFIG_NETFILTER_XT_MATCH_CONNBYTES is not set 909 | # CONFIG_NETFILTER_XT_MATCH_CONNLABEL is not set 910 | # CONFIG_NETFILTER_XT_MATCH_CONNLIMIT is not set 911 | # CONFIG_NETFILTER_XT_MATCH_CONNMARK is not set 912 | CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y 913 | # CONFIG_NETFILTER_XT_MATCH_CPU is not set 914 | # CONFIG_NETFILTER_XT_MATCH_DCCP is not set 915 | # CONFIG_NETFILTER_XT_MATCH_DEVGROUP is not set 916 | # CONFIG_NETFILTER_XT_MATCH_DSCP is not set 917 | # CONFIG_NETFILTER_XT_MATCH_ECN is not set 918 | # CONFIG_NETFILTER_XT_MATCH_ESP is not set 919 | # CONFIG_NETFILTER_XT_MATCH_HASHLIMIT is not set 920 | # CONFIG_NETFILTER_XT_MATCH_HELPER is not set 921 | # CONFIG_NETFILTER_XT_MATCH_HL is not set 922 | # CONFIG_NETFILTER_XT_MATCH_IPCOMP is not set 923 | # CONFIG_NETFILTER_XT_MATCH_IPRANGE is not set 924 | # CONFIG_NETFILTER_XT_MATCH_L2TP is not set 925 | # CONFIG_NETFILTER_XT_MATCH_LENGTH is not set 926 | CONFIG_NETFILTER_XT_MATCH_LIMIT=y 927 | # CONFIG_NETFILTER_XT_MATCH_MAC is not set 928 | # CONFIG_NETFILTER_XT_MATCH_MARK is not set 929 | # CONFIG_NETFILTER_XT_MATCH_MULTIPORT is not set 930 | # CONFIG_NETFILTER_XT_MATCH_NFACCT is not set 931 | # CONFIG_NETFILTER_XT_MATCH_OWNER is not set 932 | # CONFIG_NETFILTER_XT_MATCH_POLICY is not set 933 | # CONFIG_NETFILTER_XT_MATCH_PHYSDEV is not set 934 | CONFIG_NETFILTER_XT_MATCH_PKTTYPE=y 935 | # CONFIG_NETFILTER_XT_MATCH_QUOTA is not set 936 | # CONFIG_NETFILTER_XT_MATCH_RATEEST is not set 937 | # CONFIG_NETFILTER_XT_MATCH_REALM is not set 938 | # CONFIG_NETFILTER_XT_MATCH_RECENT is not set 939 | # CONFIG_NETFILTER_XT_MATCH_SCTP is not set 940 | # CONFIG_NETFILTER_XT_MATCH_STATE is not set 941 | # CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set 942 | # CONFIG_NETFILTER_XT_MATCH_STRING is not set 943 | # CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set 944 | # CONFIG_NETFILTER_XT_MATCH_TIME is not set 945 | # CONFIG_NETFILTER_XT_MATCH_U32 is not set 946 | # CONFIG_IP_SET is not set 947 | # CONFIG_IP_VS is not set 948 | 949 | # 950 | # IP: Netfilter Configuration 951 | # 952 | CONFIG_NF_DEFRAG_IPV4=y 953 | CONFIG_NF_CONNTRACK_IPV4=y 954 | # CONFIG_NF_SOCKET_IPV4 is not set 955 | # CONFIG_NF_DUP_IPV4 is not set 956 | CONFIG_NF_LOG_ARP=y 957 | CONFIG_NF_LOG_IPV4=y 958 | CONFIG_NF_REJECT_IPV4=y 959 | CONFIG_NF_NAT_IPV4=y 960 | CONFIG_NF_NAT_MASQUERADE_IPV4=y 961 | # CONFIG_NF_NAT_PPTP is not set 962 | # CONFIG_NF_NAT_H323 is not set 963 | CONFIG_IP_NF_IPTABLES=y 964 | # CONFIG_IP_NF_MATCH_AH is not set 965 | # CONFIG_IP_NF_MATCH_ECN is not set 966 | CONFIG_IP_NF_MATCH_RPFILTER=y 967 | # CONFIG_IP_NF_MATCH_TTL is not set 968 | CONFIG_IP_NF_FILTER=y 969 | CONFIG_IP_NF_TARGET_REJECT=y 970 | CONFIG_IP_NF_TARGET_SYNPROXY=y 971 | CONFIG_IP_NF_NAT=y 972 | CONFIG_IP_NF_TARGET_MASQUERADE=y 973 | CONFIG_IP_NF_TARGET_NETMAP=y 974 | CONFIG_IP_NF_TARGET_REDIRECT=y 975 | CONFIG_IP_NF_MANGLE=y 976 | # CONFIG_IP_NF_TARGET_CLUSTERIP is not set 977 | # CONFIG_IP_NF_TARGET_ECN is not set 978 | # CONFIG_IP_NF_TARGET_TTL is not set 979 | CONFIG_IP_NF_RAW=y 980 | # CONFIG_IP_NF_SECURITY is not set 981 | # CONFIG_IP_NF_ARPTABLES is not set 982 | 983 | # 984 | # IPv6: Netfilter Configuration 985 | # 986 | # CONFIG_NF_DEFRAG_IPV6 is not set 987 | # CONFIG_NF_CONNTRACK_IPV6 is not set 988 | # CONFIG_NF_SOCKET_IPV6 is not set 989 | # CONFIG_NF_DUP_IPV6 is not set 990 | # CONFIG_NF_REJECT_IPV6 is not set 991 | # CONFIG_NF_LOG_IPV6 is not set 992 | # CONFIG_IP6_NF_IPTABLES is not set 993 | # CONFIG_BRIDGE_NF_EBTABLES is not set 994 | # CONFIG_IP_DCCP is not set 995 | # CONFIG_IP_SCTP is not set 996 | # CONFIG_RDS is not set 997 | # CONFIG_TIPC is not set 998 | # CONFIG_ATM is not set 999 | # CONFIG_L2TP is not set 1000 | CONFIG_STP=y 1001 | CONFIG_BRIDGE=y 1002 | CONFIG_BRIDGE_IGMP_SNOOPING=y 1003 | CONFIG_HAVE_NET_DSA=y 1004 | # CONFIG_NET_DSA is not set 1005 | # CONFIG_VLAN_8021Q is not set 1006 | # CONFIG_DECNET is not set 1007 | CONFIG_LLC=y 1008 | # CONFIG_LLC2 is not set 1009 | # CONFIG_IPX is not set 1010 | # CONFIG_ATALK is not set 1011 | # CONFIG_X25 is not set 1012 | # CONFIG_LAPB is not set 1013 | # CONFIG_PHONET is not set 1014 | # CONFIG_6LOWPAN is not set 1015 | # CONFIG_IEEE802154 is not set 1016 | CONFIG_NET_SCHED=y 1017 | 1018 | # 1019 | # Queueing/Scheduling 1020 | # 1021 | # CONFIG_NET_SCH_CBQ is not set 1022 | # CONFIG_NET_SCH_HTB is not set 1023 | # CONFIG_NET_SCH_HFSC is not set 1024 | # CONFIG_NET_SCH_PRIO is not set 1025 | # CONFIG_NET_SCH_MULTIQ is not set 1026 | # CONFIG_NET_SCH_RED is not set 1027 | # CONFIG_NET_SCH_SFB is not set 1028 | # CONFIG_NET_SCH_SFQ is not set 1029 | # CONFIG_NET_SCH_TEQL is not set 1030 | # CONFIG_NET_SCH_TBF is not set 1031 | # CONFIG_NET_SCH_GRED is not set 1032 | # CONFIG_NET_SCH_DSMARK is not set 1033 | # CONFIG_NET_SCH_NETEM is not set 1034 | # CONFIG_NET_SCH_DRR is not set 1035 | # CONFIG_NET_SCH_MQPRIO is not set 1036 | # CONFIG_NET_SCH_CHOKE is not set 1037 | # CONFIG_NET_SCH_QFQ is not set 1038 | # CONFIG_NET_SCH_CODEL is not set 1039 | # CONFIG_NET_SCH_FQ_CODEL is not set 1040 | # CONFIG_NET_SCH_FQ is not set 1041 | # CONFIG_NET_SCH_HHF is not set 1042 | # CONFIG_NET_SCH_PIE is not set 1043 | # CONFIG_NET_SCH_INGRESS is not set 1044 | # CONFIG_NET_SCH_PLUG is not set 1045 | # CONFIG_NET_SCH_DEFAULT is not set 1046 | 1047 | # 1048 | # Classification 1049 | # 1050 | CONFIG_NET_CLS=y 1051 | # CONFIG_NET_CLS_BASIC is not set 1052 | # CONFIG_NET_CLS_TCINDEX is not set 1053 | # CONFIG_NET_CLS_ROUTE4 is not set 1054 | # CONFIG_NET_CLS_FW is not set 1055 | # CONFIG_NET_CLS_U32 is not set 1056 | # CONFIG_NET_CLS_RSVP is not set 1057 | # CONFIG_NET_CLS_RSVP6 is not set 1058 | # CONFIG_NET_CLS_FLOW is not set 1059 | # CONFIG_NET_CLS_CGROUP is not set 1060 | # CONFIG_NET_CLS_BPF is not set 1061 | # CONFIG_NET_CLS_FLOWER is not set 1062 | # CONFIG_NET_CLS_MATCHALL is not set 1063 | CONFIG_NET_EMATCH=y 1064 | CONFIG_NET_EMATCH_STACK=32 1065 | # CONFIG_NET_EMATCH_CMP is not set 1066 | # CONFIG_NET_EMATCH_NBYTE is not set 1067 | # CONFIG_NET_EMATCH_U32 is not set 1068 | # CONFIG_NET_EMATCH_META is not set 1069 | # CONFIG_NET_EMATCH_TEXT is not set 1070 | CONFIG_NET_CLS_ACT=y 1071 | # CONFIG_NET_ACT_POLICE is not set 1072 | # CONFIG_NET_ACT_GACT is not set 1073 | # CONFIG_NET_ACT_MIRRED is not set 1074 | # CONFIG_NET_ACT_SAMPLE is not set 1075 | # CONFIG_NET_ACT_IPT is not set 1076 | # CONFIG_NET_ACT_NAT is not set 1077 | # CONFIG_NET_ACT_PEDIT is not set 1078 | # CONFIG_NET_ACT_SIMP is not set 1079 | # CONFIG_NET_ACT_SKBEDIT is not set 1080 | # CONFIG_NET_ACT_CSUM is not set 1081 | # CONFIG_NET_ACT_VLAN is not set 1082 | # CONFIG_NET_ACT_BPF is not set 1083 | # CONFIG_NET_ACT_CONNMARK is not set 1084 | # CONFIG_NET_ACT_SKBMOD is not set 1085 | # CONFIG_NET_ACT_IFE is not set 1086 | # CONFIG_NET_ACT_TUNNEL_KEY is not set 1087 | CONFIG_NET_SCH_FIFO=y 1088 | CONFIG_DCB=y 1089 | # CONFIG_DNS_RESOLVER is not set 1090 | # CONFIG_BATMAN_ADV is not set 1091 | # CONFIG_OPENVSWITCH is not set 1092 | CONFIG_VSOCKETS=y 1093 | CONFIG_VIRTIO_VSOCKETS=y 1094 | CONFIG_VIRTIO_VSOCKETS_COMMON=y 1095 | # CONFIG_NETLINK_DIAG is not set 1096 | CONFIG_MPLS=y 1097 | # CONFIG_NET_MPLS_GSO is not set 1098 | # CONFIG_MPLS_ROUTING is not set 1099 | # CONFIG_NET_NSH is not set 1100 | # CONFIG_HSR is not set 1101 | # CONFIG_NET_SWITCHDEV is not set 1102 | # CONFIG_NET_L3_MASTER_DEV is not set 1103 | # CONFIG_NET_NCSI is not set 1104 | CONFIG_RPS=y 1105 | CONFIG_RFS_ACCEL=y 1106 | CONFIG_XPS=y 1107 | CONFIG_CGROUP_NET_PRIO=y 1108 | CONFIG_CGROUP_NET_CLASSID=y 1109 | CONFIG_NET_RX_BUSY_POLL=y 1110 | CONFIG_BQL=y 1111 | CONFIG_BPF_JIT=y 1112 | CONFIG_BPF_STREAM_PARSER=y 1113 | CONFIG_NET_FLOW_LIMIT=y 1114 | 1115 | # 1116 | # Network testing 1117 | # 1118 | # CONFIG_NET_PKTGEN is not set 1119 | # CONFIG_NET_TCPPROBE is not set 1120 | # CONFIG_HAMRADIO is not set 1121 | # CONFIG_CAN is not set 1122 | # CONFIG_BT is not set 1123 | # CONFIG_AF_RXRPC is not set 1124 | # CONFIG_AF_KCM is not set 1125 | CONFIG_STREAM_PARSER=y 1126 | CONFIG_FIB_RULES=y 1127 | # CONFIG_WIRELESS is not set 1128 | # CONFIG_WIMAX is not set 1129 | # CONFIG_RFKILL is not set 1130 | # CONFIG_NET_9P is not set 1131 | # CONFIG_CAIF is not set 1132 | # CONFIG_CEPH_LIB is not set 1133 | # CONFIG_NFC is not set 1134 | # CONFIG_PSAMPLE is not set 1135 | # CONFIG_NET_IFE is not set 1136 | CONFIG_LWTUNNEL=y 1137 | CONFIG_LWTUNNEL_BPF=y 1138 | CONFIG_DST_CACHE=y 1139 | CONFIG_GRO_CELLS=y 1140 | # CONFIG_NET_DEVLINK is not set 1141 | CONFIG_MAY_USE_DEVLINK=y 1142 | CONFIG_HAVE_EBPF_JIT=y 1143 | 1144 | # 1145 | # Device Drivers 1146 | # 1147 | 1148 | # 1149 | # Generic Driver Options 1150 | # 1151 | CONFIG_UEVENT_HELPER=y 1152 | CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug" 1153 | CONFIG_DEVTMPFS=y 1154 | CONFIG_DEVTMPFS_MOUNT=y 1155 | CONFIG_STANDALONE=y 1156 | CONFIG_PREVENT_FIRMWARE_BUILD=y 1157 | CONFIG_FW_LOADER=y 1158 | # CONFIG_FIRMWARE_IN_KERNEL is not set 1159 | CONFIG_EXTRA_FIRMWARE="" 1160 | # CONFIG_FW_LOADER_USER_HELPER_FALLBACK is not set 1161 | CONFIG_ALLOW_DEV_COREDUMP=y 1162 | # CONFIG_DEBUG_DRIVER is not set 1163 | # CONFIG_DEBUG_DEVRES is not set 1164 | # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set 1165 | # CONFIG_TEST_ASYNC_DRIVER_PROBE is not set 1166 | # CONFIG_SYS_HYPERVISOR is not set 1167 | # CONFIG_GENERIC_CPU_DEVICES is not set 1168 | CONFIG_GENERIC_CPU_AUTOPROBE=y 1169 | CONFIG_GENERIC_CPU_VULNERABILITIES=y 1170 | CONFIG_DMA_SHARED_BUFFER=y 1171 | # CONFIG_DMA_FENCE_TRACE is not set 1172 | 1173 | # 1174 | # Bus devices 1175 | # 1176 | CONFIG_CONNECTOR=y 1177 | CONFIG_PROC_EVENTS=y 1178 | # CONFIG_MTD is not set 1179 | # CONFIG_OF is not set 1180 | CONFIG_ARCH_MIGHT_HAVE_PC_PARPORT=y 1181 | # CONFIG_PARPORT is not set 1182 | CONFIG_BLK_DEV=y 1183 | # CONFIG_BLK_DEV_NULL_BLK is not set 1184 | # CONFIG_BLK_DEV_FD is not set 1185 | # CONFIG_BLK_DEV_COW_COMMON is not set 1186 | CONFIG_BLK_DEV_LOOP=y 1187 | CONFIG_BLK_DEV_LOOP_MIN_COUNT=8 1188 | # CONFIG_BLK_DEV_CRYPTOLOOP is not set 1189 | # CONFIG_BLK_DEV_DRBD is not set 1190 | # CONFIG_BLK_DEV_NBD is not set 1191 | # CONFIG_BLK_DEV_RAM is not set 1192 | # CONFIG_CDROM_PKTCDVD is not set 1193 | # CONFIG_ATA_OVER_ETH is not set 1194 | CONFIG_VIRTIO_BLK=y 1195 | # CONFIG_VIRTIO_BLK_SCSI is not set 1196 | # CONFIG_BLK_DEV_RBD is not set 1197 | # CONFIG_NVME_FC is not set 1198 | 1199 | # 1200 | # Misc devices 1201 | # 1202 | # CONFIG_SENSORS_LIS3LV02D is not set 1203 | # CONFIG_DUMMY_IRQ is not set 1204 | # CONFIG_ENCLOSURE_SERVICES is not set 1205 | # CONFIG_SRAM is not set 1206 | # CONFIG_C2PORT is not set 1207 | 1208 | # 1209 | # EEPROM support 1210 | # 1211 | # CONFIG_EEPROM_93CX6 is not set 1212 | 1213 | # 1214 | # Texas Instruments shared transport line discipline 1215 | # 1216 | 1217 | # 1218 | # Altera FPGA firmware download module 1219 | # 1220 | 1221 | # 1222 | # Intel MIC Bus Driver 1223 | # 1224 | 1225 | # 1226 | # SCIF Bus Driver 1227 | # 1228 | 1229 | # 1230 | # VOP Bus Driver 1231 | # 1232 | 1233 | # 1234 | # Intel MIC Host Driver 1235 | # 1236 | 1237 | # 1238 | # Intel MIC Card Driver 1239 | # 1240 | 1241 | # 1242 | # SCIF Driver 1243 | # 1244 | 1245 | # 1246 | # Intel MIC Coprocessor State Management (COSM) Drivers 1247 | # 1248 | 1249 | # 1250 | # VOP Driver 1251 | # 1252 | # CONFIG_ECHO is not set 1253 | # CONFIG_CXL_BASE is not set 1254 | # CONFIG_CXL_AFU_DRIVER_OPS is not set 1255 | # CONFIG_CXL_LIB is not set 1256 | CONFIG_HAVE_IDE=y 1257 | # CONFIG_IDE is not set 1258 | 1259 | # 1260 | # SCSI device support 1261 | # 1262 | CONFIG_SCSI_MOD=y 1263 | # CONFIG_RAID_ATTRS is not set 1264 | CONFIG_SCSI=y 1265 | CONFIG_SCSI_DMA=y 1266 | # CONFIG_SCSI_NETLINK is not set 1267 | CONFIG_SCSI_MQ_DEFAULT=y 1268 | CONFIG_SCSI_PROC_FS=y 1269 | 1270 | # 1271 | # SCSI support type (disk, tape, CD-ROM) 1272 | # 1273 | # CONFIG_BLK_DEV_SD is not set 1274 | # CONFIG_CHR_DEV_ST is not set 1275 | # CONFIG_CHR_DEV_OSST is not set 1276 | # CONFIG_BLK_DEV_SR is not set 1277 | # CONFIG_CHR_DEV_SG is not set 1278 | # CONFIG_CHR_DEV_SCH is not set 1279 | CONFIG_SCSI_CONSTANTS=y 1280 | CONFIG_SCSI_LOGGING=y 1281 | CONFIG_SCSI_SCAN_ASYNC=y 1282 | 1283 | # 1284 | # SCSI Transports 1285 | # 1286 | # CONFIG_SCSI_SPI_ATTRS is not set 1287 | # CONFIG_SCSI_FC_ATTRS is not set 1288 | CONFIG_SCSI_ISCSI_ATTRS=y 1289 | # CONFIG_SCSI_SAS_ATTRS is not set 1290 | # CONFIG_SCSI_SAS_LIBSAS is not set 1291 | # CONFIG_SCSI_SRP_ATTRS is not set 1292 | CONFIG_SCSI_LOWLEVEL=y 1293 | CONFIG_ISCSI_TCP=y 1294 | # CONFIG_ISCSI_BOOT_SYSFS is not set 1295 | # CONFIG_SCSI_UFSHCD is not set 1296 | # CONFIG_SCSI_DEBUG is not set 1297 | # CONFIG_SCSI_VIRTIO is not set 1298 | # CONFIG_SCSI_DH is not set 1299 | # CONFIG_SCSI_OSD_INITIATOR is not set 1300 | # CONFIG_ATA is not set 1301 | # CONFIG_MD is not set 1302 | # CONFIG_TARGET_CORE is not set 1303 | # CONFIG_MACINTOSH_DRIVERS is not set 1304 | CONFIG_NETDEVICES=y 1305 | CONFIG_NET_CORE=y 1306 | # CONFIG_BONDING is not set 1307 | # CONFIG_DUMMY is not set 1308 | # CONFIG_EQUALIZER is not set 1309 | # CONFIG_IFB is not set 1310 | # CONFIG_NET_TEAM is not set 1311 | # CONFIG_MACVLAN is not set 1312 | # CONFIG_VXLAN is not set 1313 | # CONFIG_GTP is not set 1314 | # CONFIG_MACSEC is not set 1315 | # CONFIG_NETCONSOLE is not set 1316 | # CONFIG_NETPOLL is not set 1317 | # CONFIG_NET_POLL_CONTROLLER is not set 1318 | CONFIG_TUN=y 1319 | # CONFIG_TUN_VNET_CROSS_LE is not set 1320 | CONFIG_VETH=y 1321 | CONFIG_VIRTIO_NET=y 1322 | # CONFIG_NLMON is not set 1323 | 1324 | # 1325 | # CAIF transport drivers 1326 | # 1327 | 1328 | # 1329 | # Distributed Switch Architecture drivers 1330 | # 1331 | # CONFIG_ETHERNET is not set 1332 | # CONFIG_MDIO_DEVICE is not set 1333 | # CONFIG_MDIO_BUS is not set 1334 | # CONFIG_PHYLIB is not set 1335 | # CONFIG_PPP is not set 1336 | # CONFIG_SLIP is not set 1337 | 1338 | # 1339 | # Host-side USB support is needed for USB Network Adapter support 1340 | # 1341 | # CONFIG_WLAN is not set 1342 | 1343 | # 1344 | # Enable WiMAX (Networking options) to see the WiMAX drivers 1345 | # 1346 | # CONFIG_WAN is not set 1347 | # CONFIG_ISDN is not set 1348 | # CONFIG_NVM is not set 1349 | 1350 | # 1351 | # Input device support 1352 | # 1353 | CONFIG_INPUT=y 1354 | CONFIG_INPUT_FF_MEMLESS=y 1355 | # CONFIG_INPUT_POLLDEV is not set 1356 | # CONFIG_INPUT_SPARSEKMAP is not set 1357 | # CONFIG_INPUT_MATRIXKMAP is not set 1358 | 1359 | # 1360 | # Userland interfaces 1361 | # 1362 | # CONFIG_INPUT_MOUSEDEV is not set 1363 | # CONFIG_INPUT_JOYDEV is not set 1364 | # CONFIG_INPUT_EVDEV is not set 1365 | # CONFIG_INPUT_EVBUG is not set 1366 | 1367 | # 1368 | # Input Device Drivers 1369 | # 1370 | CONFIG_INPUT_KEYBOARD=y 1371 | CONFIG_KEYBOARD_ATKBD=y 1372 | # CONFIG_KEYBOARD_LKKBD is not set 1373 | # CONFIG_KEYBOARD_NEWTON is not set 1374 | # CONFIG_KEYBOARD_OPENCORES is not set 1375 | # CONFIG_KEYBOARD_STOWAWAY is not set 1376 | # CONFIG_KEYBOARD_SUNKBD is not set 1377 | # CONFIG_KEYBOARD_XTKBD is not set 1378 | # CONFIG_INPUT_MOUSE is not set 1379 | # CONFIG_INPUT_JOYSTICK is not set 1380 | # CONFIG_INPUT_TABLET is not set 1381 | # CONFIG_INPUT_TOUCHSCREEN is not set 1382 | CONFIG_INPUT_MISC=y 1383 | # CONFIG_INPUT_AD714X is not set 1384 | # CONFIG_INPUT_E3X0_BUTTON is not set 1385 | # CONFIG_INPUT_PCSPKR is not set 1386 | # CONFIG_INPUT_UINPUT is not set 1387 | # CONFIG_INPUT_ADXL34X is not set 1388 | # CONFIG_INPUT_CMA3000 is not set 1389 | # CONFIG_INPUT_IDEAPAD_SLIDEBAR is not set 1390 | # CONFIG_RMI4_CORE is not set 1391 | 1392 | # 1393 | # Hardware I/O ports 1394 | # 1395 | CONFIG_SERIO=y 1396 | CONFIG_ARCH_MIGHT_HAVE_PC_SERIO=y 1397 | CONFIG_SERIO_I8042=y 1398 | CONFIG_SERIO_SERPORT=y 1399 | # CONFIG_SERIO_CT82C710 is not set 1400 | CONFIG_SERIO_LIBPS2=y 1401 | # CONFIG_SERIO_RAW is not set 1402 | # CONFIG_SERIO_ALTERA_PS2 is not set 1403 | # CONFIG_SERIO_PS2MULT is not set 1404 | # CONFIG_SERIO_ARC_PS2 is not set 1405 | # CONFIG_USERIO is not set 1406 | # CONFIG_GAMEPORT is not set 1407 | 1408 | # 1409 | # Character devices 1410 | # 1411 | CONFIG_TTY=y 1412 | CONFIG_VT=y 1413 | CONFIG_CONSOLE_TRANSLATIONS=y 1414 | CONFIG_VT_CONSOLE=y 1415 | CONFIG_VT_CONSOLE_SLEEP=y 1416 | CONFIG_HW_CONSOLE=y 1417 | CONFIG_VT_HW_CONSOLE_BINDING=y 1418 | CONFIG_UNIX98_PTYS=y 1419 | # CONFIG_LEGACY_PTYS is not set 1420 | # CONFIG_SERIAL_NONSTANDARD is not set 1421 | # CONFIG_N_GSM is not set 1422 | # CONFIG_TRACE_SINK is not set 1423 | CONFIG_LDISC_AUTOLOAD=y 1424 | CONFIG_DEVMEM=y 1425 | # CONFIG_DEVKMEM is not set 1426 | 1427 | # 1428 | # Serial drivers 1429 | # 1430 | CONFIG_SERIAL_EARLYCON=y 1431 | CONFIG_SERIAL_8250=y 1432 | # CONFIG_SERIAL_8250_DEPRECATED_OPTIONS is not set 1433 | # CONFIG_SERIAL_8250_FINTEK is not set 1434 | CONFIG_SERIAL_8250_CONSOLE=y 1435 | CONFIG_SERIAL_8250_DMA=y 1436 | CONFIG_SERIAL_8250_NR_UARTS=1 1437 | CONFIG_SERIAL_8250_RUNTIME_UARTS=1 1438 | # CONFIG_SERIAL_8250_EXTENDED is not set 1439 | # CONFIG_SERIAL_8250_FSL is not set 1440 | # CONFIG_SERIAL_8250_DW is not set 1441 | # CONFIG_SERIAL_8250_RT288X is not set 1442 | 1443 | # 1444 | # Non-8250 serial port support 1445 | # 1446 | # CONFIG_SERIAL_UARTLITE is not set 1447 | CONFIG_SERIAL_CORE=y 1448 | CONFIG_SERIAL_CORE_CONSOLE=y 1449 | # CONFIG_SERIAL_SCCNXP is not set 1450 | # CONFIG_SERIAL_ALTERA_JTAGUART is not set 1451 | # CONFIG_SERIAL_ALTERA_UART is not set 1452 | # CONFIG_SERIAL_ARC is not set 1453 | # CONFIG_SERIAL_FSL_LPUART is not set 1454 | CONFIG_SERIAL_DEV_BUS=y 1455 | CONFIG_SERIAL_DEV_CTRL_TTYPORT=y 1456 | CONFIG_HVC_DRIVER=y 1457 | CONFIG_VIRTIO_CONSOLE=y 1458 | # CONFIG_IPMI_HANDLER is not set 1459 | # CONFIG_HW_RANDOM is not set 1460 | # CONFIG_NVRAM is not set 1461 | # CONFIG_MWAVE is not set 1462 | # CONFIG_RAW_DRIVER is not set 1463 | # CONFIG_HANGCHECK_TIMER is not set 1464 | # CONFIG_TCG_TPM is not set 1465 | # CONFIG_TELCLOCK is not set 1466 | 1467 | # 1468 | # I2C support 1469 | # 1470 | # CONFIG_I2C is not set 1471 | # CONFIG_SPI is not set 1472 | # CONFIG_SPMI is not set 1473 | # CONFIG_HSI is not set 1474 | CONFIG_PPS=y 1475 | # CONFIG_PPS_DEBUG is not set 1476 | 1477 | # 1478 | # PPS clients support 1479 | # 1480 | # CONFIG_PPS_CLIENT_KTIMER is not set 1481 | # CONFIG_PPS_CLIENT_LDISC is not set 1482 | # CONFIG_PPS_CLIENT_GPIO is not set 1483 | 1484 | # 1485 | # PPS generators support 1486 | # 1487 | 1488 | # 1489 | # PTP clock support 1490 | # 1491 | CONFIG_PTP_1588_CLOCK=y 1492 | 1493 | # 1494 | # Enable PHYLIB and NETWORK_PHY_TIMESTAMPING to see the additional clocks. 1495 | # 1496 | CONFIG_PTP_1588_CLOCK_KVM=y 1497 | # CONFIG_GPIOLIB is not set 1498 | # CONFIG_W1 is not set 1499 | # CONFIG_POWER_AVS is not set 1500 | CONFIG_POWER_RESET=y 1501 | # CONFIG_POWER_RESET_RESTART is not set 1502 | CONFIG_POWER_SUPPLY=y 1503 | # CONFIG_POWER_SUPPLY_DEBUG is not set 1504 | # CONFIG_PDA_POWER is not set 1505 | # CONFIG_TEST_POWER is not set 1506 | # CONFIG_BATTERY_DS2780 is not set 1507 | # CONFIG_BATTERY_DS2781 is not set 1508 | # CONFIG_BATTERY_BQ27XXX is not set 1509 | # CONFIG_CHARGER_MAX8903 is not set 1510 | # CONFIG_HWMON is not set 1511 | CONFIG_THERMAL=y 1512 | CONFIG_THERMAL_EMERGENCY_POWEROFF_DELAY_MS=0 1513 | CONFIG_THERMAL_WRITABLE_TRIPS=y 1514 | CONFIG_THERMAL_DEFAULT_GOV_STEP_WISE=y 1515 | # CONFIG_THERMAL_DEFAULT_GOV_FAIR_SHARE is not set 1516 | # CONFIG_THERMAL_DEFAULT_GOV_USER_SPACE is not set 1517 | # CONFIG_THERMAL_DEFAULT_GOV_POWER_ALLOCATOR is not set 1518 | CONFIG_THERMAL_GOV_FAIR_SHARE=y 1519 | CONFIG_THERMAL_GOV_STEP_WISE=y 1520 | # CONFIG_THERMAL_GOV_BANG_BANG is not set 1521 | CONFIG_THERMAL_GOV_USER_SPACE=y 1522 | # CONFIG_THERMAL_GOV_POWER_ALLOCATOR is not set 1523 | # CONFIG_THERMAL_EMULATION is not set 1524 | # CONFIG_INTEL_POWERCLAMP is not set 1525 | 1526 | # 1527 | # ACPI INT340X thermal drivers 1528 | # 1529 | # CONFIG_WATCHDOG is not set 1530 | CONFIG_SSB_POSSIBLE=y 1531 | 1532 | # 1533 | # Sonics Silicon Backplane 1534 | # 1535 | # CONFIG_SSB is not set 1536 | CONFIG_BCMA_POSSIBLE=y 1537 | # CONFIG_BCMA is not set 1538 | 1539 | # 1540 | # Multifunction device drivers 1541 | # 1542 | # CONFIG_MFD_CORE is not set 1543 | # CONFIG_MFD_CROS_EC is not set 1544 | # CONFIG_HTC_PASIC3 is not set 1545 | # CONFIG_MFD_KEMPLD is not set 1546 | # CONFIG_MFD_MT6397 is not set 1547 | # CONFIG_MFD_SM501 is not set 1548 | # CONFIG_ABX500_CORE is not set 1549 | # CONFIG_MFD_SYSCON is not set 1550 | # CONFIG_MFD_TI_AM335X_TSCADC is not set 1551 | # CONFIG_MFD_TMIO is not set 1552 | # CONFIG_REGULATOR is not set 1553 | # CONFIG_RC_CORE is not set 1554 | # CONFIG_MEDIA_SUPPORT is not set 1555 | 1556 | # 1557 | # Graphics support 1558 | # 1559 | # CONFIG_DRM is not set 1560 | 1561 | # 1562 | # ACP (Audio CoProcessor) Configuration 1563 | # 1564 | # CONFIG_DRM_LIB_RANDOM is not set 1565 | 1566 | # 1567 | # Frame buffer Devices 1568 | # 1569 | # CONFIG_FB is not set 1570 | CONFIG_BACKLIGHT_LCD_SUPPORT=y 1571 | # CONFIG_LCD_CLASS_DEVICE is not set 1572 | # CONFIG_BACKLIGHT_CLASS_DEVICE is not set 1573 | # CONFIG_VGASTATE is not set 1574 | 1575 | # 1576 | # Console display driver support 1577 | # 1578 | CONFIG_VGA_CONSOLE=y 1579 | # CONFIG_VGACON_SOFT_SCROLLBACK is not set 1580 | CONFIG_DUMMY_CONSOLE=y 1581 | CONFIG_DUMMY_CONSOLE_COLUMNS=80 1582 | CONFIG_DUMMY_CONSOLE_ROWS=25 1583 | # CONFIG_SOUND is not set 1584 | 1585 | # 1586 | # HID support 1587 | # 1588 | CONFIG_HID=y 1589 | # CONFIG_HID_BATTERY_STRENGTH is not set 1590 | CONFIG_HIDRAW=y 1591 | # CONFIG_UHID is not set 1592 | # CONFIG_HID_GENERIC is not set 1593 | 1594 | # 1595 | # Special HID drivers 1596 | # 1597 | # CONFIG_HID_A4TECH is not set 1598 | # CONFIG_HID_ACRUX is not set 1599 | # CONFIG_HID_APPLE is not set 1600 | # CONFIG_HID_AUREAL is not set 1601 | # CONFIG_HID_BELKIN is not set 1602 | # CONFIG_HID_CHERRY is not set 1603 | # CONFIG_HID_CHICONY is not set 1604 | # CONFIG_HID_CMEDIA is not set 1605 | # CONFIG_HID_CYPRESS is not set 1606 | # CONFIG_HID_DRAGONRISE is not set 1607 | # CONFIG_HID_EMS_FF is not set 1608 | # CONFIG_HID_ELECOM is not set 1609 | # CONFIG_HID_EZKEY is not set 1610 | # CONFIG_HID_GEMBIRD is not set 1611 | # CONFIG_HID_GFRM is not set 1612 | # CONFIG_HID_KEYTOUCH is not set 1613 | # CONFIG_HID_KYE is not set 1614 | # CONFIG_HID_WALTOP is not set 1615 | # CONFIG_HID_GYRATION is not set 1616 | # CONFIG_HID_ICADE is not set 1617 | # CONFIG_HID_ITE is not set 1618 | # CONFIG_HID_TWINHAN is not set 1619 | # CONFIG_HID_KENSINGTON is not set 1620 | # CONFIG_HID_LCPOWER is not set 1621 | # CONFIG_HID_LENOVO is not set 1622 | # CONFIG_HID_LOGITECH is not set 1623 | # CONFIG_HID_MAGICMOUSE is not set 1624 | # CONFIG_HID_MAYFLASH is not set 1625 | # CONFIG_HID_MICROSOFT is not set 1626 | # CONFIG_HID_MONTEREY is not set 1627 | # CONFIG_HID_MULTITOUCH is not set 1628 | # CONFIG_HID_NTI is not set 1629 | # CONFIG_HID_ORTEK is not set 1630 | # CONFIG_HID_PANTHERLORD is not set 1631 | # CONFIG_HID_PETALYNX is not set 1632 | # CONFIG_HID_PICOLCD is not set 1633 | # CONFIG_HID_PLANTRONICS is not set 1634 | # CONFIG_HID_PRIMAX is not set 1635 | # CONFIG_HID_SAITEK is not set 1636 | # CONFIG_HID_SAMSUNG is not set 1637 | # CONFIG_HID_SPEEDLINK is not set 1638 | # CONFIG_HID_STEELSERIES is not set 1639 | # CONFIG_HID_SUNPLUS is not set 1640 | # CONFIG_HID_RMI is not set 1641 | # CONFIG_HID_GREENASIA is not set 1642 | # CONFIG_HID_SMARTJOYPLUS is not set 1643 | # CONFIG_HID_TIVO is not set 1644 | # CONFIG_HID_TOPSEED is not set 1645 | # CONFIG_HID_THRUSTMASTER is not set 1646 | # CONFIG_HID_UDRAW_PS3 is not set 1647 | # CONFIG_HID_XINMO is not set 1648 | # CONFIG_HID_ZEROPLUS is not set 1649 | # CONFIG_HID_ZYDACRON is not set 1650 | # CONFIG_HID_SENSOR_HUB is not set 1651 | # CONFIG_HID_ALPS is not set 1652 | CONFIG_USB_OHCI_LITTLE_ENDIAN=y 1653 | # CONFIG_USB_SUPPORT is not set 1654 | # CONFIG_UWB is not set 1655 | # CONFIG_MMC is not set 1656 | # CONFIG_MEMSTICK is not set 1657 | # CONFIG_NEW_LEDS is not set 1658 | # CONFIG_ACCESSIBILITY is not set 1659 | CONFIG_EDAC_ATOMIC_SCRUB=y 1660 | CONFIG_EDAC_SUPPORT=y 1661 | # CONFIG_EDAC is not set 1662 | CONFIG_RTC_LIB=y 1663 | CONFIG_RTC_MC146818_LIB=y 1664 | # CONFIG_RTC_CLASS is not set 1665 | CONFIG_DMADEVICES=y 1666 | # CONFIG_DMADEVICES_DEBUG is not set 1667 | 1668 | # 1669 | # DMA Devices 1670 | # 1671 | # CONFIG_ALTERA_MSGDMA is not set 1672 | # CONFIG_INTEL_IDMA64 is not set 1673 | # CONFIG_QCOM_HIDMA_MGMT is not set 1674 | # CONFIG_QCOM_HIDMA is not set 1675 | # CONFIG_DW_DMAC is not set 1676 | 1677 | # 1678 | # DMABUF options 1679 | # 1680 | CONFIG_SYNC_FILE=y 1681 | # CONFIG_SW_SYNC is not set 1682 | CONFIG_AUXDISPLAY=y 1683 | # CONFIG_IMG_ASCII_LCD is not set 1684 | # CONFIG_UIO is not set 1685 | CONFIG_VIRT_DRIVERS=y 1686 | CONFIG_VIRTIO=y 1687 | 1688 | # 1689 | # Virtio drivers 1690 | # 1691 | CONFIG_VIRTIO_BALLOON=y 1692 | # CONFIG_VIRTIO_INPUT is not set 1693 | CONFIG_VIRTIO_MMIO=y 1694 | CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y 1695 | 1696 | # 1697 | # Microsoft Hyper-V guest support 1698 | # 1699 | # CONFIG_HYPERV_TSCPAGE is not set 1700 | CONFIG_STAGING=y 1701 | # CONFIG_IRDA is not set 1702 | # CONFIG_COMEDI is not set 1703 | 1704 | # 1705 | # Speakup console speech 1706 | # 1707 | # CONFIG_SPEAKUP is not set 1708 | # CONFIG_STAGING_MEDIA is not set 1709 | 1710 | # 1711 | # Android 1712 | # 1713 | # CONFIG_LNET is not set 1714 | # CONFIG_GS_FPGABOOT is not set 1715 | # CONFIG_CRYPTO_SKEIN is not set 1716 | # CONFIG_UNISYSSPAR is not set 1717 | # CONFIG_MOST is not set 1718 | # CONFIG_GREYBUS is not set 1719 | 1720 | # 1721 | # USB Power Delivery and Type-C drivers 1722 | # 1723 | CONFIG_X86_PLATFORM_DEVICES=y 1724 | # CONFIG_SENSORS_HDAPS is not set 1725 | # CONFIG_INTEL_PUNIT_IPC is not set 1726 | # CONFIG_MLX_PLATFORM is not set 1727 | # CONFIG_MLX_CPLD_PLATFORM is not set 1728 | CONFIG_INTEL_TURBO_MAX_3=y 1729 | # CONFIG_CHROME_PLATFORMS is not set 1730 | # CONFIG_HWSPINLOCK is not set 1731 | 1732 | # 1733 | # Clock Source drivers 1734 | # 1735 | CONFIG_CLKEVT_I8253=y 1736 | CONFIG_I8253_LOCK=y 1737 | CONFIG_CLKBLD_I8253=y 1738 | # CONFIG_ATMEL_PIT is not set 1739 | # CONFIG_SH_TIMER_CMT is not set 1740 | # CONFIG_SH_TIMER_MTU2 is not set 1741 | # CONFIG_SH_TIMER_TMU is not set 1742 | # CONFIG_EM_TIMER_STI is not set 1743 | CONFIG_MAILBOX=y 1744 | # CONFIG_ALTERA_MBOX is not set 1745 | CONFIG_IOMMU_SUPPORT=y 1746 | 1747 | # 1748 | # Generic IOMMU Pagetable Support 1749 | # 1750 | 1751 | # 1752 | # Remoteproc drivers 1753 | # 1754 | # CONFIG_REMOTEPROC is not set 1755 | 1756 | # 1757 | # Rpmsg drivers 1758 | # 1759 | # CONFIG_RPMSG_QCOM_GLINK_RPM is not set 1760 | 1761 | # 1762 | # SOC (System On Chip) specific Drivers 1763 | # 1764 | 1765 | # 1766 | # Amlogic SoC drivers 1767 | # 1768 | 1769 | # 1770 | # Broadcom SoC drivers 1771 | # 1772 | 1773 | # 1774 | # i.MX SoC drivers 1775 | # 1776 | 1777 | # 1778 | # Qualcomm SoC drivers 1779 | # 1780 | # CONFIG_SUNXI_SRAM is not set 1781 | # CONFIG_SOC_TI is not set 1782 | # CONFIG_PM_DEVFREQ is not set 1783 | # CONFIG_EXTCON is not set 1784 | # CONFIG_MEMORY is not set 1785 | # CONFIG_IIO is not set 1786 | # CONFIG_PWM is not set 1787 | CONFIG_ARM_GIC_MAX_NR=1 1788 | # CONFIG_IPACK_BUS is not set 1789 | # CONFIG_RESET_CONTROLLER is not set 1790 | # CONFIG_FMC is not set 1791 | 1792 | # 1793 | # PHY Subsystem 1794 | # 1795 | # CONFIG_GENERIC_PHY is not set 1796 | # CONFIG_BCM_KONA_USB2_PHY is not set 1797 | # CONFIG_PHY_PXA_28NM_HSIC is not set 1798 | # CONFIG_PHY_PXA_28NM_USB2 is not set 1799 | # CONFIG_POWERCAP is not set 1800 | # CONFIG_MCB is not set 1801 | 1802 | # 1803 | # Performance monitor support 1804 | # 1805 | CONFIG_RAS=y 1806 | 1807 | # 1808 | # Android 1809 | # 1810 | # CONFIG_ANDROID is not set 1811 | # CONFIG_LIBNVDIMM is not set 1812 | # CONFIG_DAX is not set 1813 | # CONFIG_NVMEM is not set 1814 | # CONFIG_STM is not set 1815 | # CONFIG_INTEL_TH is not set 1816 | # CONFIG_FPGA is not set 1817 | 1818 | # 1819 | # FSI support 1820 | # 1821 | # CONFIG_FSI is not set 1822 | 1823 | # 1824 | # Firmware Drivers 1825 | # 1826 | # CONFIG_EDD is not set 1827 | CONFIG_FIRMWARE_MEMMAP=y 1828 | # CONFIG_DELL_RBU is not set 1829 | # CONFIG_DCDBAS is not set 1830 | CONFIG_DMIID=y 1831 | # CONFIG_DMI_SYSFS is not set 1832 | CONFIG_DMI_SCAN_MACHINE_NON_EFI_FALLBACK=y 1833 | # CONFIG_FW_CFG_SYSFS is not set 1834 | # CONFIG_GOOGLE_FIRMWARE is not set 1835 | 1836 | # 1837 | # Tegra firmware driver 1838 | # 1839 | 1840 | # 1841 | # File systems 1842 | # 1843 | CONFIG_DCACHE_WORD_ACCESS=y 1844 | # CONFIG_EXT2_FS is not set 1845 | # CONFIG_EXT3_FS is not set 1846 | CONFIG_EXT4_FS=y 1847 | CONFIG_EXT4_USE_FOR_EXT2=y 1848 | CONFIG_EXT4_FS_POSIX_ACL=y 1849 | CONFIG_EXT4_FS_SECURITY=y 1850 | CONFIG_EXT4_ENCRYPTION=y 1851 | CONFIG_EXT4_FS_ENCRYPTION=y 1852 | CONFIG_EXT4_DEBUG=y 1853 | CONFIG_JBD2=y 1854 | CONFIG_JBD2_DEBUG=y 1855 | CONFIG_FS_MBCACHE=y 1856 | # CONFIG_REISERFS_FS is not set 1857 | # CONFIG_JFS_FS is not set 1858 | # CONFIG_XFS_FS is not set 1859 | # CONFIG_GFS2_FS is not set 1860 | # CONFIG_BTRFS_FS is not set 1861 | # CONFIG_NILFS2_FS is not set 1862 | # CONFIG_F2FS_FS is not set 1863 | # CONFIG_FS_DAX is not set 1864 | CONFIG_FS_POSIX_ACL=y 1865 | CONFIG_EXPORTFS=y 1866 | # CONFIG_EXPORTFS_BLOCK_OPS is not set 1867 | CONFIG_FILE_LOCKING=y 1868 | CONFIG_MANDATORY_FILE_LOCKING=y 1869 | CONFIG_FS_ENCRYPTION=y 1870 | CONFIG_FSNOTIFY=y 1871 | CONFIG_DNOTIFY=y 1872 | CONFIG_INOTIFY_USER=y 1873 | CONFIG_FANOTIFY=y 1874 | CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y 1875 | CONFIG_QUOTA=y 1876 | CONFIG_QUOTA_NETLINK_INTERFACE=y 1877 | # CONFIG_PRINT_QUOTA_WARNING is not set 1878 | # CONFIG_QUOTA_DEBUG is not set 1879 | # CONFIG_QFMT_V1 is not set 1880 | # CONFIG_QFMT_V2 is not set 1881 | CONFIG_QUOTACTL=y 1882 | CONFIG_QUOTACTL_COMPAT=y 1883 | # CONFIG_AUTOFS4_FS is not set 1884 | # CONFIG_FUSE_FS is not set 1885 | CONFIG_OVERLAY_FS=y 1886 | # CONFIG_OVERLAY_FS_REDIRECT_DIR is not set 1887 | # CONFIG_OVERLAY_FS_INDEX is not set 1888 | 1889 | # 1890 | # Caches 1891 | # 1892 | # CONFIG_FSCACHE is not set 1893 | 1894 | # 1895 | # CD-ROM/DVD Filesystems 1896 | # 1897 | # CONFIG_ISO9660_FS is not set 1898 | # CONFIG_UDF_FS is not set 1899 | 1900 | # 1901 | # DOS/FAT/NT Filesystems 1902 | # 1903 | # CONFIG_MSDOS_FS is not set 1904 | # CONFIG_VFAT_FS is not set 1905 | # CONFIG_NTFS_FS is not set 1906 | 1907 | # 1908 | # Pseudo filesystems 1909 | # 1910 | CONFIG_PROC_FS=y 1911 | CONFIG_PROC_KCORE=y 1912 | CONFIG_PROC_SYSCTL=y 1913 | CONFIG_PROC_PAGE_MONITOR=y 1914 | CONFIG_PROC_CHILDREN=y 1915 | CONFIG_KERNFS=y 1916 | CONFIG_SYSFS=y 1917 | CONFIG_TMPFS=y 1918 | CONFIG_TMPFS_POSIX_ACL=y 1919 | CONFIG_TMPFS_XATTR=y 1920 | CONFIG_HUGETLBFS=y 1921 | CONFIG_HUGETLB_PAGE=y 1922 | CONFIG_ARCH_HAS_GIGANTIC_PAGE=y 1923 | # CONFIG_CONFIGFS_FS is not set 1924 | CONFIG_MISC_FILESYSTEMS=y 1925 | # CONFIG_ORANGEFS_FS is not set 1926 | # CONFIG_ADFS_FS is not set 1927 | # CONFIG_AFFS_FS is not set 1928 | # CONFIG_ECRYPT_FS is not set 1929 | # CONFIG_HFS_FS is not set 1930 | # CONFIG_HFSPLUS_FS is not set 1931 | # CONFIG_BEFS_FS is not set 1932 | # CONFIG_BFS_FS is not set 1933 | # CONFIG_EFS_FS is not set 1934 | # CONFIG_CRAMFS is not set 1935 | CONFIG_SQUASHFS=y 1936 | CONFIG_SQUASHFS_FILE_CACHE=y 1937 | # CONFIG_SQUASHFS_FILE_DIRECT is not set 1938 | CONFIG_SQUASHFS_DECOMP_SINGLE=y 1939 | # CONFIG_SQUASHFS_DECOMP_MULTI is not set 1940 | # CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU is not set 1941 | CONFIG_SQUASHFS_XATTR=y 1942 | CONFIG_SQUASHFS_ZLIB=y 1943 | CONFIG_SQUASHFS_LZ4=y 1944 | CONFIG_SQUASHFS_LZO=y 1945 | CONFIG_SQUASHFS_XZ=y 1946 | CONFIG_SQUASHFS_ZSTD=y 1947 | # CONFIG_SQUASHFS_4K_DEVBLK_SIZE is not set 1948 | # CONFIG_SQUASHFS_EMBEDDED is not set 1949 | CONFIG_SQUASHFS_FRAGMENT_CACHE_SIZE=3 1950 | # CONFIG_VXFS_FS is not set 1951 | # CONFIG_MINIX_FS is not set 1952 | # CONFIG_OMFS_FS is not set 1953 | # CONFIG_HPFS_FS is not set 1954 | # CONFIG_QNX4FS_FS is not set 1955 | # CONFIG_QNX6FS_FS is not set 1956 | # CONFIG_ROMFS_FS is not set 1957 | CONFIG_PSTORE=y 1958 | CONFIG_PSTORE_ZLIB_COMPRESS=y 1959 | # CONFIG_PSTORE_LZO_COMPRESS is not set 1960 | # CONFIG_PSTORE_LZ4_COMPRESS is not set 1961 | # CONFIG_PSTORE_CONSOLE is not set 1962 | # CONFIG_PSTORE_PMSG is not set 1963 | # CONFIG_PSTORE_RAM is not set 1964 | # CONFIG_SYSV_FS is not set 1965 | # CONFIG_UFS_FS is not set 1966 | CONFIG_NETWORK_FILESYSTEMS=y 1967 | # CONFIG_NFS_FS is not set 1968 | # CONFIG_NFSD is not set 1969 | # CONFIG_CEPH_FS is not set 1970 | # CONFIG_CIFS is not set 1971 | # CONFIG_NCP_FS is not set 1972 | # CONFIG_CODA_FS is not set 1973 | # CONFIG_AFS_FS is not set 1974 | CONFIG_NLS=y 1975 | CONFIG_NLS_DEFAULT="utf8" 1976 | # CONFIG_NLS_CODEPAGE_437 is not set 1977 | # CONFIG_NLS_CODEPAGE_737 is not set 1978 | # CONFIG_NLS_CODEPAGE_775 is not set 1979 | # CONFIG_NLS_CODEPAGE_850 is not set 1980 | # CONFIG_NLS_CODEPAGE_852 is not set 1981 | # CONFIG_NLS_CODEPAGE_855 is not set 1982 | # CONFIG_NLS_CODEPAGE_857 is not set 1983 | # CONFIG_NLS_CODEPAGE_860 is not set 1984 | # CONFIG_NLS_CODEPAGE_861 is not set 1985 | # CONFIG_NLS_CODEPAGE_862 is not set 1986 | # CONFIG_NLS_CODEPAGE_863 is not set 1987 | # CONFIG_NLS_CODEPAGE_864 is not set 1988 | # CONFIG_NLS_CODEPAGE_865 is not set 1989 | # CONFIG_NLS_CODEPAGE_866 is not set 1990 | # CONFIG_NLS_CODEPAGE_869 is not set 1991 | # CONFIG_NLS_CODEPAGE_936 is not set 1992 | # CONFIG_NLS_CODEPAGE_950 is not set 1993 | # CONFIG_NLS_CODEPAGE_932 is not set 1994 | # CONFIG_NLS_CODEPAGE_949 is not set 1995 | # CONFIG_NLS_CODEPAGE_874 is not set 1996 | # CONFIG_NLS_ISO8859_8 is not set 1997 | # CONFIG_NLS_CODEPAGE_1250 is not set 1998 | # CONFIG_NLS_CODEPAGE_1251 is not set 1999 | # CONFIG_NLS_ASCII is not set 2000 | # CONFIG_NLS_ISO8859_1 is not set 2001 | # CONFIG_NLS_ISO8859_2 is not set 2002 | # CONFIG_NLS_ISO8859_3 is not set 2003 | # CONFIG_NLS_ISO8859_4 is not set 2004 | # CONFIG_NLS_ISO8859_5 is not set 2005 | # CONFIG_NLS_ISO8859_6 is not set 2006 | # CONFIG_NLS_ISO8859_7 is not set 2007 | # CONFIG_NLS_ISO8859_9 is not set 2008 | # CONFIG_NLS_ISO8859_13 is not set 2009 | # CONFIG_NLS_ISO8859_14 is not set 2010 | # CONFIG_NLS_ISO8859_15 is not set 2011 | # CONFIG_NLS_KOI8_R is not set 2012 | # CONFIG_NLS_KOI8_U is not set 2013 | # CONFIG_NLS_MAC_ROMAN is not set 2014 | # CONFIG_NLS_MAC_CELTIC is not set 2015 | # CONFIG_NLS_MAC_CENTEURO is not set 2016 | # CONFIG_NLS_MAC_CROATIAN is not set 2017 | # CONFIG_NLS_MAC_CYRILLIC is not set 2018 | # CONFIG_NLS_MAC_GAELIC is not set 2019 | # CONFIG_NLS_MAC_GREEK is not set 2020 | # CONFIG_NLS_MAC_ICELAND is not set 2021 | # CONFIG_NLS_MAC_INUIT is not set 2022 | # CONFIG_NLS_MAC_ROMANIAN is not set 2023 | # CONFIG_NLS_MAC_TURKISH is not set 2024 | # CONFIG_NLS_UTF8 is not set 2025 | 2026 | # 2027 | # Kernel hacking 2028 | # 2029 | CONFIG_TRACE_IRQFLAGS_SUPPORT=y 2030 | 2031 | # 2032 | # printk and dmesg options 2033 | # 2034 | CONFIG_PRINTK_TIME=y 2035 | CONFIG_CONSOLE_LOGLEVEL_DEFAULT=7 2036 | CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4 2037 | # CONFIG_BOOT_PRINTK_DELAY is not set 2038 | CONFIG_DYNAMIC_DEBUG=y 2039 | 2040 | # 2041 | # Compile-time checks and compiler options 2042 | # 2043 | # CONFIG_DEBUG_INFO is not set 2044 | CONFIG_ENABLE_WARN_DEPRECATED=y 2045 | # CONFIG_ENABLE_MUST_CHECK is not set 2046 | CONFIG_FRAME_WARN=2048 2047 | CONFIG_STRIP_ASM_SYMS=y 2048 | # CONFIG_READABLE_ASM is not set 2049 | CONFIG_UNUSED_SYMBOLS=y 2050 | # CONFIG_PAGE_OWNER is not set 2051 | CONFIG_DEBUG_FS=y 2052 | # CONFIG_HEADERS_CHECK is not set 2053 | CONFIG_DEBUG_SECTION_MISMATCH=y 2054 | CONFIG_SECTION_MISMATCH_WARN_ONLY=y 2055 | CONFIG_FRAME_POINTER=y 2056 | CONFIG_STACK_VALIDATION=y 2057 | # CONFIG_DEBUG_FORCE_WEAK_PER_CPU is not set 2058 | CONFIG_MAGIC_SYSRQ=y 2059 | CONFIG_MAGIC_SYSRQ_DEFAULT_ENABLE=0x1 2060 | CONFIG_MAGIC_SYSRQ_SERIAL=y 2061 | CONFIG_DEBUG_KERNEL=y 2062 | 2063 | # 2064 | # Memory Debugging 2065 | # 2066 | # CONFIG_PAGE_EXTENSION is not set 2067 | # CONFIG_DEBUG_PAGEALLOC is not set 2068 | # CONFIG_PAGE_POISONING is not set 2069 | # CONFIG_DEBUG_RODATA_TEST is not set 2070 | # CONFIG_DEBUG_OBJECTS is not set 2071 | # CONFIG_SLUB_DEBUG_ON is not set 2072 | # CONFIG_SLUB_STATS is not set 2073 | CONFIG_HAVE_DEBUG_KMEMLEAK=y 2074 | # CONFIG_DEBUG_KMEMLEAK is not set 2075 | # CONFIG_DEBUG_STACK_USAGE is not set 2076 | # CONFIG_DEBUG_VM is not set 2077 | CONFIG_ARCH_HAS_DEBUG_VIRTUAL=y 2078 | # CONFIG_DEBUG_VIRTUAL is not set 2079 | CONFIG_DEBUG_MEMORY_INIT=y 2080 | # CONFIG_DEBUG_PER_CPU_MAPS is not set 2081 | CONFIG_HAVE_DEBUG_STACKOVERFLOW=y 2082 | CONFIG_DEBUG_STACKOVERFLOW=y 2083 | CONFIG_HAVE_ARCH_KASAN=y 2084 | # CONFIG_KASAN is not set 2085 | CONFIG_ARCH_HAS_KCOV=y 2086 | # CONFIG_KCOV is not set 2087 | # CONFIG_DEBUG_SHIRQ is not set 2088 | 2089 | # 2090 | # Debug Lockups and Hangs 2091 | # 2092 | # CONFIG_SOFTLOCKUP_DETECTOR is not set 2093 | CONFIG_HARDLOCKUP_CHECK_TIMESTAMP=y 2094 | # CONFIG_HARDLOCKUP_DETECTOR is not set 2095 | # CONFIG_DETECT_HUNG_TASK is not set 2096 | # CONFIG_WQ_WATCHDOG is not set 2097 | # CONFIG_PANIC_ON_OOPS is not set 2098 | CONFIG_PANIC_ON_OOPS_VALUE=0 2099 | CONFIG_PANIC_TIMEOUT=0 2100 | # CONFIG_SCHED_DEBUG is not set 2101 | CONFIG_SCHED_INFO=y 2102 | # CONFIG_SCHEDSTATS is not set 2103 | # CONFIG_SCHED_STACK_END_CHECK is not set 2104 | # CONFIG_DEBUG_TIMEKEEPING is not set 2105 | 2106 | # 2107 | # Lock Debugging (spinlocks, mutexes, etc...) 2108 | # 2109 | # CONFIG_DEBUG_RT_MUTEXES is not set 2110 | # CONFIG_DEBUG_SPINLOCK is not set 2111 | # CONFIG_DEBUG_MUTEXES is not set 2112 | # CONFIG_DEBUG_WW_MUTEX_SLOWPATH is not set 2113 | # CONFIG_DEBUG_LOCK_ALLOC is not set 2114 | # CONFIG_PROVE_LOCKING is not set 2115 | # CONFIG_LOCK_STAT is not set 2116 | # CONFIG_DEBUG_ATOMIC_SLEEP is not set 2117 | # CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set 2118 | # CONFIG_LOCK_TORTURE_TEST is not set 2119 | # CONFIG_WW_MUTEX_SELFTEST is not set 2120 | CONFIG_STACKTRACE=y 2121 | # CONFIG_WARN_ALL_UNSEEDED_RANDOM is not set 2122 | # CONFIG_DEBUG_KOBJECT is not set 2123 | CONFIG_DEBUG_BUGVERBOSE=y 2124 | CONFIG_DEBUG_LIST=y 2125 | # CONFIG_DEBUG_PI_LIST is not set 2126 | # CONFIG_DEBUG_SG is not set 2127 | # CONFIG_DEBUG_NOTIFIERS is not set 2128 | # CONFIG_DEBUG_CREDENTIALS is not set 2129 | 2130 | # 2131 | # RCU Debugging 2132 | # 2133 | # CONFIG_PROVE_RCU is not set 2134 | # CONFIG_TORTURE_TEST is not set 2135 | # CONFIG_RCU_PERF_TEST is not set 2136 | # CONFIG_RCU_TORTURE_TEST is not set 2137 | CONFIG_RCU_CPU_STALL_TIMEOUT=59 2138 | # CONFIG_RCU_TRACE is not set 2139 | # CONFIG_RCU_EQS_DEBUG is not set 2140 | # CONFIG_DEBUG_WQ_FORCE_RR_CPU is not set 2141 | # CONFIG_DEBUG_BLOCK_EXT_DEVT is not set 2142 | # CONFIG_CPU_HOTPLUG_STATE_CONTROL is not set 2143 | # CONFIG_NOTIFIER_ERROR_INJECTION is not set 2144 | # CONFIG_FAULT_INJECTION is not set 2145 | # CONFIG_LATENCYTOP is not set 2146 | CONFIG_USER_STACKTRACE_SUPPORT=y 2147 | CONFIG_HAVE_FUNCTION_TRACER=y 2148 | CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y 2149 | CONFIG_HAVE_DYNAMIC_FTRACE=y 2150 | CONFIG_HAVE_DYNAMIC_FTRACE_WITH_REGS=y 2151 | CONFIG_HAVE_FTRACE_MCOUNT_RECORD=y 2152 | CONFIG_HAVE_SYSCALL_TRACEPOINTS=y 2153 | CONFIG_HAVE_FENTRY=y 2154 | CONFIG_HAVE_C_RECORDMCOUNT=y 2155 | CONFIG_TRACING_SUPPORT=y 2156 | # CONFIG_FTRACE is not set 2157 | # CONFIG_DMA_API_DEBUG is not set 2158 | 2159 | # 2160 | # Runtime Testing 2161 | # 2162 | # CONFIG_LKDTM is not set 2163 | # CONFIG_TEST_LIST_SORT is not set 2164 | # CONFIG_TEST_SORT is not set 2165 | # CONFIG_KPROBES_SANITY_TEST is not set 2166 | # CONFIG_BACKTRACE_SELF_TEST is not set 2167 | # CONFIG_RBTREE_TEST is not set 2168 | # CONFIG_INTERVAL_TREE_TEST is not set 2169 | # CONFIG_PERCPU_TEST is not set 2170 | # CONFIG_ATOMIC64_SELFTEST is not set 2171 | # CONFIG_TEST_HEXDUMP is not set 2172 | # CONFIG_TEST_STRING_HELPERS is not set 2173 | # CONFIG_TEST_KSTRTOX is not set 2174 | # CONFIG_TEST_PRINTF is not set 2175 | # CONFIG_TEST_BITMAP is not set 2176 | # CONFIG_TEST_UUID is not set 2177 | # CONFIG_TEST_RHASHTABLE is not set 2178 | # CONFIG_TEST_HASH is not set 2179 | # CONFIG_TEST_LKM is not set 2180 | # CONFIG_TEST_USER_COPY is not set 2181 | # CONFIG_TEST_BPF is not set 2182 | # CONFIG_TEST_FIRMWARE is not set 2183 | # CONFIG_TEST_SYSCTL is not set 2184 | # CONFIG_TEST_UDELAY is not set 2185 | # CONFIG_TEST_STATIC_KEYS is not set 2186 | # CONFIG_TEST_KMOD is not set 2187 | # CONFIG_MEMTEST is not set 2188 | CONFIG_BUG_ON_DATA_CORRUPTION=y 2189 | # CONFIG_SAMPLES is not set 2190 | CONFIG_HAVE_ARCH_KGDB=y 2191 | # CONFIG_KGDB is not set 2192 | CONFIG_ARCH_HAS_UBSAN_SANITIZE_ALL=y 2193 | # CONFIG_ARCH_WANTS_UBSAN_NO_NULL is not set 2194 | # CONFIG_UBSAN is not set 2195 | CONFIG_ARCH_HAS_DEVMEM_IS_ALLOWED=y 2196 | CONFIG_STRICT_DEVMEM=y 2197 | # CONFIG_IO_STRICT_DEVMEM is not set 2198 | CONFIG_X86_VERBOSE_BOOTUP=y 2199 | CONFIG_EARLY_PRINTK=y 2200 | # CONFIG_X86_PTDUMP_CORE is not set 2201 | # CONFIG_X86_PTDUMP is not set 2202 | # CONFIG_DEBUG_WX is not set 2203 | CONFIG_DOUBLEFAULT=y 2204 | # CONFIG_DEBUG_TLBFLUSH is not set 2205 | # CONFIG_IOMMU_STRESS is not set 2206 | CONFIG_HAVE_MMIOTRACE_SUPPORT=y 2207 | # CONFIG_X86_DECODER_SELFTEST is not set 2208 | CONFIG_IO_DELAY_TYPE_0X80=0 2209 | CONFIG_IO_DELAY_TYPE_0XED=1 2210 | CONFIG_IO_DELAY_TYPE_UDELAY=2 2211 | CONFIG_IO_DELAY_TYPE_NONE=3 2212 | CONFIG_IO_DELAY_0X80=y 2213 | # CONFIG_IO_DELAY_0XED is not set 2214 | # CONFIG_IO_DELAY_UDELAY is not set 2215 | # CONFIG_IO_DELAY_NONE is not set 2216 | CONFIG_DEFAULT_IO_DELAY_TYPE=0 2217 | # CONFIG_DEBUG_BOOT_PARAMS is not set 2218 | # CONFIG_CPA_DEBUG is not set 2219 | CONFIG_OPTIMIZE_INLINING=y 2220 | # CONFIG_DEBUG_ENTRY is not set 2221 | # CONFIG_DEBUG_NMI_SELFTEST is not set 2222 | # CONFIG_X86_DEBUG_FPU is not set 2223 | # CONFIG_UNWINDER_ORC is not set 2224 | CONFIG_UNWINDER_FRAME_POINTER=y 2225 | 2226 | # 2227 | # Security options 2228 | # 2229 | CONFIG_KEYS=y 2230 | CONFIG_KEYS_COMPAT=y 2231 | CONFIG_PERSISTENT_KEYRINGS=y 2232 | # CONFIG_BIG_KEYS is not set 2233 | CONFIG_ENCRYPTED_KEYS=y 2234 | # CONFIG_KEY_DH_OPERATIONS is not set 2235 | # CONFIG_SECURITY_DMESG_RESTRICT is not set 2236 | CONFIG_SECURITY=y 2237 | CONFIG_SECURITY_WRITABLE_HOOKS=y 2238 | CONFIG_SECURITYFS=y 2239 | CONFIG_SECURITY_NETWORK=y 2240 | CONFIG_PAGE_TABLE_ISOLATION=y 2241 | CONFIG_SECURITY_NETWORK_XFRM=y 2242 | # CONFIG_SECURITY_PATH is not set 2243 | CONFIG_LSM_MMAP_MIN_ADDR=65536 2244 | CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y 2245 | # CONFIG_HARDENED_USERCOPY is not set 2246 | CONFIG_FORTIFY_SOURCE=y 2247 | # CONFIG_STATIC_USERMODEHELPER is not set 2248 | CONFIG_SECURITY_SELINUX=y 2249 | CONFIG_SECURITY_SELINUX_BOOTPARAM=y 2250 | CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1 2251 | CONFIG_SECURITY_SELINUX_DISABLE=y 2252 | CONFIG_SECURITY_SELINUX_DEVELOP=y 2253 | CONFIG_SECURITY_SELINUX_AVC_STATS=y 2254 | CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1 2255 | # CONFIG_SECURITY_SMACK is not set 2256 | # CONFIG_SECURITY_TOMOYO is not set 2257 | # CONFIG_SECURITY_APPARMOR is not set 2258 | # CONFIG_SECURITY_LOADPIN is not set 2259 | # CONFIG_SECURITY_YAMA is not set 2260 | CONFIG_INTEGRITY=y 2261 | # CONFIG_INTEGRITY_SIGNATURE is not set 2262 | CONFIG_INTEGRITY_AUDIT=y 2263 | # CONFIG_IMA is not set 2264 | # CONFIG_EVM is not set 2265 | CONFIG_DEFAULT_SECURITY_SELINUX=y 2266 | # CONFIG_DEFAULT_SECURITY_DAC is not set 2267 | CONFIG_DEFAULT_SECURITY="selinux" 2268 | CONFIG_CRYPTO=y 2269 | 2270 | # 2271 | # Crypto core or helper 2272 | # 2273 | CONFIG_CRYPTO_ALGAPI=y 2274 | CONFIG_CRYPTO_ALGAPI2=y 2275 | CONFIG_CRYPTO_AEAD=y 2276 | CONFIG_CRYPTO_AEAD2=y 2277 | CONFIG_CRYPTO_BLKCIPHER=y 2278 | CONFIG_CRYPTO_BLKCIPHER2=y 2279 | CONFIG_CRYPTO_HASH=y 2280 | CONFIG_CRYPTO_HASH2=y 2281 | CONFIG_CRYPTO_RNG=y 2282 | CONFIG_CRYPTO_RNG2=y 2283 | CONFIG_CRYPTO_RNG_DEFAULT=y 2284 | CONFIG_CRYPTO_AKCIPHER2=y 2285 | CONFIG_CRYPTO_AKCIPHER=y 2286 | CONFIG_CRYPTO_KPP2=y 2287 | CONFIG_CRYPTO_KPP=y 2288 | CONFIG_CRYPTO_ACOMP2=y 2289 | CONFIG_CRYPTO_RSA=y 2290 | CONFIG_CRYPTO_DH=y 2291 | CONFIG_CRYPTO_ECDH=y 2292 | CONFIG_CRYPTO_MANAGER=y 2293 | CONFIG_CRYPTO_MANAGER2=y 2294 | # CONFIG_CRYPTO_USER is not set 2295 | CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y 2296 | # CONFIG_CRYPTO_GF128MUL is not set 2297 | CONFIG_CRYPTO_NULL=y 2298 | CONFIG_CRYPTO_NULL2=y 2299 | # CONFIG_CRYPTO_PCRYPT is not set 2300 | CONFIG_CRYPTO_WORKQUEUE=y 2301 | # CONFIG_CRYPTO_CRYPTD is not set 2302 | # CONFIG_CRYPTO_MCRYPTD is not set 2303 | # CONFIG_CRYPTO_AUTHENC is not set 2304 | # CONFIG_CRYPTO_TEST is not set 2305 | 2306 | # 2307 | # Authenticated Encryption with Associated Data 2308 | # 2309 | # CONFIG_CRYPTO_CCM is not set 2310 | # CONFIG_CRYPTO_GCM is not set 2311 | # CONFIG_CRYPTO_CHACHA20POLY1305 is not set 2312 | CONFIG_CRYPTO_SEQIV=y 2313 | # CONFIG_CRYPTO_ECHAINIV is not set 2314 | 2315 | # 2316 | # Block modes 2317 | # 2318 | CONFIG_CRYPTO_CBC=y 2319 | CONFIG_CRYPTO_CTR=y 2320 | CONFIG_CRYPTO_CTS=y 2321 | CONFIG_CRYPTO_ECB=y 2322 | # CONFIG_CRYPTO_LRW is not set 2323 | # CONFIG_CRYPTO_PCBC is not set 2324 | CONFIG_CRYPTO_XTS=y 2325 | # CONFIG_CRYPTO_KEYWRAP is not set 2326 | 2327 | # 2328 | # Hash modes 2329 | # 2330 | # CONFIG_CRYPTO_CMAC is not set 2331 | CONFIG_CRYPTO_HMAC=y 2332 | # CONFIG_CRYPTO_XCBC is not set 2333 | # CONFIG_CRYPTO_VMAC is not set 2334 | 2335 | # 2336 | # Digest 2337 | # 2338 | CONFIG_CRYPTO_CRC32C=y 2339 | # CONFIG_CRYPTO_CRC32C_INTEL is not set 2340 | # CONFIG_CRYPTO_CRC32 is not set 2341 | # CONFIG_CRYPTO_CRC32_PCLMUL is not set 2342 | CONFIG_CRYPTO_CRCT10DIF=y 2343 | CONFIG_CRYPTO_CRCT10DIF_PCLMUL=y 2344 | # CONFIG_CRYPTO_GHASH is not set 2345 | # CONFIG_CRYPTO_POLY1305 is not set 2346 | # CONFIG_CRYPTO_POLY1305_X86_64 is not set 2347 | # CONFIG_CRYPTO_MD4 is not set 2348 | CONFIG_CRYPTO_MD5=y 2349 | # CONFIG_CRYPTO_MICHAEL_MIC is not set 2350 | # CONFIG_CRYPTO_RMD128 is not set 2351 | # CONFIG_CRYPTO_RMD160 is not set 2352 | # CONFIG_CRYPTO_RMD256 is not set 2353 | # CONFIG_CRYPTO_RMD320 is not set 2354 | CONFIG_CRYPTO_SHA1=y 2355 | # CONFIG_CRYPTO_SHA1_SSSE3 is not set 2356 | # CONFIG_CRYPTO_SHA256_SSSE3 is not set 2357 | # CONFIG_CRYPTO_SHA512_SSSE3 is not set 2358 | # CONFIG_CRYPTO_SHA1_MB is not set 2359 | # CONFIG_CRYPTO_SHA256_MB is not set 2360 | # CONFIG_CRYPTO_SHA512_MB is not set 2361 | CONFIG_CRYPTO_SHA256=y 2362 | CONFIG_CRYPTO_SHA512=y 2363 | # CONFIG_CRYPTO_SHA3 is not set 2364 | # CONFIG_CRYPTO_TGR192 is not set 2365 | # CONFIG_CRYPTO_WP512 is not set 2366 | # CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL is not set 2367 | 2368 | # 2369 | # Ciphers 2370 | # 2371 | CONFIG_CRYPTO_AES=y 2372 | CONFIG_CRYPTO_AES_TI=y 2373 | # CONFIG_CRYPTO_AES_X86_64 is not set 2374 | # CONFIG_CRYPTO_AES_NI_INTEL is not set 2375 | # CONFIG_CRYPTO_ANUBIS is not set 2376 | # CONFIG_CRYPTO_ARC4 is not set 2377 | # CONFIG_CRYPTO_BLOWFISH is not set 2378 | # CONFIG_CRYPTO_BLOWFISH_X86_64 is not set 2379 | # CONFIG_CRYPTO_CAMELLIA is not set 2380 | # CONFIG_CRYPTO_CAMELLIA_X86_64 is not set 2381 | # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64 is not set 2382 | # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 is not set 2383 | # CONFIG_CRYPTO_CAST5 is not set 2384 | # CONFIG_CRYPTO_CAST5_AVX_X86_64 is not set 2385 | # CONFIG_CRYPTO_CAST6 is not set 2386 | # CONFIG_CRYPTO_CAST6_AVX_X86_64 is not set 2387 | # CONFIG_CRYPTO_DES is not set 2388 | # CONFIG_CRYPTO_DES3_EDE_X86_64 is not set 2389 | # CONFIG_CRYPTO_FCRYPT is not set 2390 | # CONFIG_CRYPTO_KHAZAD is not set 2391 | # CONFIG_CRYPTO_SALSA20 is not set 2392 | # CONFIG_CRYPTO_CHACHA20 is not set 2393 | # CONFIG_CRYPTO_CHACHA20_X86_64 is not set 2394 | # CONFIG_CRYPTO_SEED is not set 2395 | # CONFIG_CRYPTO_SERPENT is not set 2396 | # CONFIG_CRYPTO_SERPENT_SSE2_X86_64 is not set 2397 | # CONFIG_CRYPTO_SERPENT_AVX_X86_64 is not set 2398 | # CONFIG_CRYPTO_SERPENT_AVX2_X86_64 is not set 2399 | # CONFIG_CRYPTO_TEA is not set 2400 | # CONFIG_CRYPTO_TWOFISH is not set 2401 | # CONFIG_CRYPTO_TWOFISH_X86_64 is not set 2402 | # CONFIG_CRYPTO_TWOFISH_X86_64_3WAY is not set 2403 | # CONFIG_CRYPTO_TWOFISH_AVX_X86_64 is not set 2404 | 2405 | # 2406 | # Compression 2407 | # 2408 | # CONFIG_CRYPTO_DEFLATE is not set 2409 | CONFIG_CRYPTO_LZO=y 2410 | # CONFIG_CRYPTO_842 is not set 2411 | # CONFIG_CRYPTO_LZ4 is not set 2412 | # CONFIG_CRYPTO_LZ4HC is not set 2413 | 2414 | # 2415 | # Random Number Generation 2416 | # 2417 | # CONFIG_CRYPTO_ANSI_CPRNG is not set 2418 | CONFIG_CRYPTO_DRBG_MENU=y 2419 | CONFIG_CRYPTO_DRBG_HMAC=y 2420 | CONFIG_CRYPTO_DRBG_HASH=y 2421 | CONFIG_CRYPTO_DRBG_CTR=y 2422 | CONFIG_CRYPTO_DRBG=y 2423 | CONFIG_CRYPTO_JITTERENTROPY=y 2424 | # CONFIG_CRYPTO_USER_API_HASH is not set 2425 | # CONFIG_CRYPTO_USER_API_SKCIPHER is not set 2426 | # CONFIG_CRYPTO_USER_API_RNG is not set 2427 | # CONFIG_CRYPTO_USER_API_AEAD is not set 2428 | CONFIG_CRYPTO_HASH_INFO=y 2429 | # CONFIG_CRYPTO_HW is not set 2430 | CONFIG_ASYMMETRIC_KEY_TYPE=y 2431 | CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y 2432 | CONFIG_X509_CERTIFICATE_PARSER=y 2433 | CONFIG_PKCS7_MESSAGE_PARSER=y 2434 | # CONFIG_PKCS7_TEST_KEY is not set 2435 | CONFIG_SIGNED_PE_FILE_VERIFICATION=y 2436 | 2437 | # 2438 | # Certificates for signature checking 2439 | # 2440 | CONFIG_MODULE_SIG_KEY="certs/signing_key.pem" 2441 | CONFIG_SYSTEM_TRUSTED_KEYRING=y 2442 | CONFIG_SYSTEM_TRUSTED_KEYS="" 2443 | # CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set 2444 | # CONFIG_SECONDARY_TRUSTED_KEYRING is not set 2445 | CONFIG_SYSTEM_BLACKLIST_KEYRING=y 2446 | CONFIG_SYSTEM_BLACKLIST_HASH_LIST="" 2447 | CONFIG_HAVE_KVM=y 2448 | # CONFIG_VIRTUALIZATION is not set 2449 | # CONFIG_BINARY_PRINTF is not set 2450 | 2451 | # 2452 | # Library routines 2453 | # 2454 | CONFIG_BITREVERSE=y 2455 | # CONFIG_HAVE_ARCH_BITREVERSE is not set 2456 | CONFIG_GENERIC_STRNCPY_FROM_USER=y 2457 | CONFIG_GENERIC_STRNLEN_USER=y 2458 | CONFIG_GENERIC_NET_UTILS=y 2459 | CONFIG_GENERIC_FIND_FIRST_BIT=y 2460 | CONFIG_GENERIC_PCI_IOMAP=y 2461 | CONFIG_GENERIC_IOMAP=y 2462 | CONFIG_GENERIC_IO=y 2463 | CONFIG_ARCH_USE_CMPXCHG_LOCKREF=y 2464 | CONFIG_ARCH_HAS_FAST_MULTIPLIER=y 2465 | CONFIG_CRC_CCITT=y 2466 | CONFIG_CRC16=y 2467 | CONFIG_CRC_T10DIF=y 2468 | # CONFIG_CRC_ITU_T is not set 2469 | CONFIG_CRC32=y 2470 | # CONFIG_CRC32_SELFTEST is not set 2471 | CONFIG_CRC32_SLICEBY8=y 2472 | # CONFIG_CRC32_SLICEBY4 is not set 2473 | # CONFIG_CRC32_SARWATE is not set 2474 | # CONFIG_CRC32_BIT is not set 2475 | # CONFIG_CRC4 is not set 2476 | # CONFIG_CRC7 is not set 2477 | CONFIG_LIBCRC32C=y 2478 | # CONFIG_CRC8 is not set 2479 | CONFIG_XXHASH=y 2480 | # CONFIG_AUDIT_ARCH_COMPAT_GENERIC is not set 2481 | # CONFIG_RANDOM32_SELFTEST is not set 2482 | CONFIG_ZLIB_INFLATE=y 2483 | CONFIG_ZLIB_DEFLATE=y 2484 | CONFIG_LZO_COMPRESS=y 2485 | CONFIG_LZO_DECOMPRESS=y 2486 | CONFIG_LZ4_DECOMPRESS=y 2487 | CONFIG_ZSTD_DECOMPRESS=y 2488 | CONFIG_XZ_DEC=y 2489 | CONFIG_XZ_DEC_X86=y 2490 | CONFIG_XZ_DEC_POWERPC=y 2491 | CONFIG_XZ_DEC_IA64=y 2492 | CONFIG_XZ_DEC_ARM=y 2493 | CONFIG_XZ_DEC_ARMTHUMB=y 2494 | CONFIG_XZ_DEC_SPARC=y 2495 | CONFIG_XZ_DEC_BCJ=y 2496 | # CONFIG_XZ_DEC_TEST is not set 2497 | CONFIG_DECOMPRESS_GZIP=y 2498 | CONFIG_DECOMPRESS_BZIP2=y 2499 | CONFIG_DECOMPRESS_LZMA=y 2500 | CONFIG_DECOMPRESS_XZ=y 2501 | CONFIG_DECOMPRESS_LZO=y 2502 | CONFIG_DECOMPRESS_LZ4=y 2503 | CONFIG_RADIX_TREE_MULTIORDER=y 2504 | CONFIG_ASSOCIATIVE_ARRAY=y 2505 | CONFIG_HAS_IOMEM=y 2506 | CONFIG_HAS_IOPORT_MAP=y 2507 | CONFIG_HAS_DMA=y 2508 | # CONFIG_SGL_ALLOC is not set 2509 | # CONFIG_DMA_NOOP_OPS is not set 2510 | # CONFIG_DMA_VIRT_OPS is not set 2511 | CONFIG_CPU_RMAP=y 2512 | CONFIG_DQL=y 2513 | CONFIG_NLATTR=y 2514 | CONFIG_CLZ_TAB=y 2515 | # CONFIG_CORDIC is not set 2516 | # CONFIG_DDR is not set 2517 | CONFIG_IRQ_POLL=y 2518 | CONFIG_MPILIB=y 2519 | CONFIG_OID_REGISTRY=y 2520 | # CONFIG_SG_SPLIT is not set 2521 | CONFIG_SG_POOL=y 2522 | CONFIG_ARCH_HAS_SG_CHAIN=y 2523 | CONFIG_ARCH_HAS_PMEM_API=y 2524 | CONFIG_ARCH_HAS_UACCESS_FLUSHCACHE=y 2525 | CONFIG_SBITMAP=y 2526 | # CONFIG_STRING_SELFTEST is not set 2527 | 2528 | ### NixOS 2529 | CONFIG_CRYPTO_USER_API_HASH=y 2530 | CONFIG_AUTOFS4_FS=y 2531 | -------------------------------------------------------------------------------- /firecracker/start: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | firectl \ 3 | --kernel=build/vmlinux \ 4 | --root-drive=build/nixos.ext4 \ 5 | --kernel-opts="console=ttyS0 reboot=k panic=1 pci=off" \ 6 | --tap-device=tap2/AA:FC:00:00:00:02 7 | -------------------------------------------------------------------------------- /firecracker/system.nix: -------------------------------------------------------------------------------- 1 | { nixpkgs, isContainer, figlet-fonts } : 2 | { pkgs, config, lib, ... }: 3 | 4 | let 5 | kernel = pkgs.linux_5_12; 6 | keys = import ../keys.nix; 7 | ports = { 8 | ttyd = 7681; 9 | }; 10 | 11 | in { 12 | systemd.services.ttyd = { 13 | description = "ttyd Web Server Daemon"; 14 | 15 | wantedBy = [ "multi-user.target" ]; 16 | 17 | serviceConfig = { 18 | User = "root"; 19 | }; 20 | 21 | script = let 22 | in '' 23 | PASSWORD=$(cat /password) 24 | ${pkgs.ttyd}/bin/ttyd \ 25 | --credential user:"$PASSWORD" \ 26 | --port ${toString ports.ttyd} \ 27 | ${pkgs.shadow}/bin/login -f user 28 | ''; 29 | }; 30 | 31 | services = { 32 | getty.autologinUser = "root"; 33 | openssh.enable = true; 34 | tailscale.enable = true; 35 | 36 | # ttyd = { 37 | # enable = true; 38 | # port = ports.ttyd; 39 | # username = "user"; 40 | # passwordFile = "/password"; 41 | # clientOptions = { 42 | # fontSize = "16"; 43 | # }; 44 | # }; 45 | 46 | nginx = { 47 | enable = true; 48 | virtualHosts = { 49 | tty = { 50 | serverName = "*.tty.node.town"; 51 | locations = { 52 | "/" = { 53 | proxyPass = "http://127.0.0.1:${toString ports.ttyd}/"; 54 | proxyWebsockets = true; 55 | }; 56 | }; 57 | }; 58 | 59 | dev = { 60 | serverName = "dev.*"; 61 | root = (pkgs.linkFarmFromDrvs "webroot" [ 62 | (pkgs.writeTextFile { 63 | name = "index.html"; 64 | text = '' 65 | 66 | Hello. 67 | ''; 68 | }) 69 | ]); 70 | }; 71 | }; 72 | }; 73 | }; 74 | 75 | programs.bash.promptInit = '' 76 | if [ "$TERM" != "dumb" -o -n "$INSIDE_EMACS" ]; then 77 | PS1=$'\[\e[1m\]\h\[\e[0m\]:\w\[\e[1m\]`eval "$PS1GIT"`\[\e[0m\]\$ ' 78 | PS1GIT='[[ `git status --short 2>/dev/null` ]] && echo \*' 79 | [[ $TERM = xterm* ]] && PS1='\[\033]2;\h:\w\007\]'"$PS1" 80 | fi 81 | ''; 82 | 83 | environment.interactiveShellInit = '' 84 | ${pkgs.figlet}/bin/figlet -f ${figlet-fonts}/Jazmine.flf node.town \ 85 | | ${pkgs.lolcat}/bin/lolcat 86 | echo 87 | ''; 88 | 89 | users.users = { 90 | root = { 91 | initialHashedPassword = ""; 92 | openssh.authorizedKeys.keys = [keys.mbrock-ssh]; 93 | }; 94 | 95 | mbrock = { 96 | isNormalUser = true; 97 | extraGroups = ["wheel"]; 98 | openssh.authorizedKeys.keys = [keys.mbrock-ssh]; 99 | }; 100 | 101 | user = { 102 | isNormalUser = true; 103 | initialHashedPassword = ""; 104 | extraGroups = ["wheel"]; 105 | openssh.authorizedKeys.keys = [keys.mbrock-ssh]; 106 | }; 107 | }; 108 | 109 | security.sudo.wheelNeedsPassword = false; 110 | 111 | home-manager = { 112 | useGlobalPkgs = true; 113 | useUserPackages = true; 114 | users.mbrock = import ../mbrock.nix; 115 | users.user = import ./user.nix; 116 | }; 117 | 118 | networking = { 119 | hostName = ""; # set from dhcp 120 | dhcpcd.enable = true; 121 | firewall.allowPing = true; 122 | useHostResolvConf = false; 123 | usePredictableInterfaceNames = false; 124 | enableIPv6 = false; 125 | interfaces.eth0.useDHCP = true; 126 | }; 127 | 128 | system.activationScripts = { 129 | makePassword = '' 130 | if [ ! -f /password ]; then 131 | ${pkgs.apg}/bin/apg -M L -n 1 -m 9 -x 9 > /password 132 | fi 133 | echo "Rig password: $(cat /password)" 134 | ''; 135 | 136 | makeWebroot = '' 137 | mkdir -p /www 138 | chown user /www 139 | ''; 140 | 141 | installInitScript = '' 142 | mkdir -p /sbin 143 | ln -fs $systemConfig/init /sbin/init 144 | ''; 145 | }; 146 | 147 | environment.systemPackages = with pkgs; [ 148 | clojure 149 | ruby 150 | nethack 151 | figlet 152 | lolcat 153 | ]; 154 | 155 | boot.isContainer = isContainer; 156 | 157 | boot.loader.grub.enable = false; 158 | fileSystems."/" = { device = "/dev/vda"; }; 159 | 160 | system.build.rootfs = nixpkgs.lib.makeDiskImage { 161 | inherit pkgs config lib; 162 | name = "firecracker-rootfs"; 163 | partitionTableType = "none"; 164 | }; 165 | 166 | nix = { 167 | package = pkgs.nixUnstable; 168 | extraOptions = '' 169 | experimental-features = nix-command flakes 170 | ''; 171 | }; 172 | 173 | nix.registry.nixpkgs.flake = nixpkgs; 174 | 175 | boot.kernelPackages = pkgs.linuxPackages_custom { 176 | inherit (kernel) src version; 177 | configfile = ./kernel.config; 178 | }; 179 | 180 | environment.variables.NIX_REMOTE = lib.mkForce ""; 181 | 182 | boot.postBootCommands = 183 | '' 184 | # After booting, register the contents of the Nix store in the Nix 185 | # database. 186 | if [ -f /nix-path-registration ]; then 187 | ${config.nix.package.out}/bin/nix-store --load-db \ 188 | < /nix-path-registration && 189 | rm /nix-path-registration 190 | fi 191 | # nixos-rebuild also requires a "system" profile 192 | ${config.nix.package.out}/bin/nix-env -p /nix/var/nix/profiles/system \ 193 | --set /run/current-system 194 | ''; 195 | 196 | } 197 | -------------------------------------------------------------------------------- /firecracker/user.nix: -------------------------------------------------------------------------------- 1 | { 2 | programs.git = { 3 | enable = true; 4 | }; 5 | 6 | programs.emacs = { 7 | enable = true; 8 | extraPackages = epkgs: with epkgs; [ 9 | elixir-mode 10 | lsp-mode 11 | cider 12 | company 13 | company-nixos-options 14 | deadgrep 15 | humanoid-themes 16 | magit 17 | nix-mode 18 | paredit 19 | projectile 20 | rainbow-delimiters 21 | selectrum 22 | selectrum-prescient 23 | whitespace-cleanup-mode 24 | ]; 25 | }; 26 | 27 | home.file = { 28 | ".emacs.d" = { 29 | source = ../emacs; 30 | recursive = true; 31 | }; 32 | }; 33 | 34 | services.gpg-agent = { 35 | enable = true; 36 | enableSshSupport = true; 37 | }; 38 | } 39 | -------------------------------------------------------------------------------- /flake.lock: -------------------------------------------------------------------------------- 1 | { 2 | "nodes": { 3 | "deploy-rs": { 4 | "inputs": { 5 | "flake-compat": "flake-compat", 6 | "naersk": "naersk", 7 | "nixpkgs": "nixpkgs", 8 | "utils": "utils" 9 | }, 10 | "locked": { 11 | "lastModified": 1623011836, 12 | "narHash": "sha256-02M4P3eqUdV+ouZb8n1KDR1CXeZQm17cKpjKZKi0c10=", 13 | "owner": "serokell", 14 | "repo": "deploy-rs", 15 | "rev": "70d71b3027b1793b780f1e2435bdbbe1b0cb9ac6", 16 | "type": "github" 17 | }, 18 | "original": { 19 | "owner": "serokell", 20 | "repo": "deploy-rs", 21 | "type": "github" 22 | } 23 | }, 24 | "emacs-overlay": { 25 | "locked": { 26 | "lastModified": 1623752470, 27 | "narHash": "sha256-oO8+G2L82fE5dz59YGWm/CsRUH0kIDaGqgkDYa8oo0A=", 28 | "owner": "nix-community", 29 | "repo": "emacs-overlay", 30 | "rev": "5410442051ac5008a44efda7f19e9cb663da95be", 31 | "type": "github" 32 | }, 33 | "original": { 34 | "owner": "nix-community", 35 | "repo": "emacs-overlay", 36 | "type": "github" 37 | } 38 | }, 39 | "figlet-fonts": { 40 | "flake": false, 41 | "locked": { 42 | "lastModified": 1589823137, 43 | "narHash": "sha256-2KRQ/ar9CtTPIOMBrZXcbQzOUdvsI7VjbjHMU6FSekg=", 44 | "owner": "xero", 45 | "repo": "figlet-fonts", 46 | "rev": "2f821cf9b4d20ab5f392f8b7627adbb4e8531831", 47 | "type": "github" 48 | }, 49 | "original": { 50 | "owner": "xero", 51 | "repo": "figlet-fonts", 52 | "type": "github" 53 | } 54 | }, 55 | "flake-compat": { 56 | "flake": false, 57 | "locked": { 58 | "lastModified": 1606424373, 59 | "narHash": "sha256-oq8d4//CJOrVj+EcOaSXvMebvuTkmBJuT5tzlfewUnQ=", 60 | "owner": "edolstra", 61 | "repo": "flake-compat", 62 | "rev": "99f1c2157fba4bfe6211a321fd0ee43199025dbf", 63 | "type": "github" 64 | }, 65 | "original": { 66 | "owner": "edolstra", 67 | "repo": "flake-compat", 68 | "type": "github" 69 | } 70 | }, 71 | "home-manager": { 72 | "inputs": { 73 | "nixpkgs": "nixpkgs_2" 74 | }, 75 | "locked": { 76 | "lastModified": 1623705021, 77 | "narHash": "sha256-/GZUHILpflqCINtlY1seepsiUbkx89b2PoGWIKV1+Io=", 78 | "owner": "nix-community", 79 | "repo": "home-manager", 80 | "rev": "1375fd4a030c27e6c6208b31b8189ca41da01fb0", 81 | "type": "github" 82 | }, 83 | "original": { 84 | "owner": "nix-community", 85 | "repo": "home-manager", 86 | "type": "github" 87 | } 88 | }, 89 | "naersk": { 90 | "inputs": { 91 | "nixpkgs": [ 92 | "nixpkgs" 93 | ] 94 | }, 95 | "locked": { 96 | "lastModified": 1622810282, 97 | "narHash": "sha256-4wmvM3/xfD0hCdNDIXVzRMfL4yB1J+DjH6Zte2xbAxk=", 98 | "owner": "nmattia", 99 | "repo": "naersk", 100 | "rev": "e8061169e1495871b56be97c5c51d310fae01374", 101 | "type": "github" 102 | }, 103 | "original": { 104 | "owner": "nmattia", 105 | "ref": "master", 106 | "repo": "naersk", 107 | "type": "github" 108 | } 109 | }, 110 | "nixpkgs": { 111 | "locked": { 112 | "lastModified": 1622972307, 113 | "narHash": "sha256-ENOu0FPCf95iLLoq2txhJtnA2ZpOFhIVBqQVbKM8ra0=", 114 | "owner": "NixOS", 115 | "repo": "nixpkgs", 116 | "rev": "d8eb97e3801bde96491535f40483d550b57605b9", 117 | "type": "github" 118 | }, 119 | "original": { 120 | "owner": "NixOS", 121 | "ref": "nixpkgs-unstable", 122 | "repo": "nixpkgs", 123 | "type": "github" 124 | } 125 | }, 126 | "nixpkgs_2": { 127 | "locked": { 128 | "lastModified": 1623324058, 129 | "narHash": "sha256-Jm9GUTXdjXz56gWDKy++EpFfjrBaxqXlLvTLfgEi8lo=", 130 | "path": "/nix/store/v13yb14bkddyc1rxlrna5j3441pyh0r8-source", 131 | "rev": "432fc2d9a67f92e05438dff5fdc2b39d33f77997", 132 | "type": "path" 133 | }, 134 | "original": { 135 | "id": "nixpkgs", 136 | "type": "indirect" 137 | } 138 | }, 139 | "nixpkgs_3": { 140 | "locked": { 141 | "narHash": "sha256-y1JvRUdk7XEjMyBmDyEo6lMvi3OKTTGVttEvopG0eP8=", 142 | "path": "/home/mbrock/nixpkgs", 143 | "type": "path" 144 | }, 145 | "original": { 146 | "path": "/home/mbrock/nixpkgs", 147 | "type": "path" 148 | } 149 | }, 150 | "root": { 151 | "inputs": { 152 | "deploy-rs": "deploy-rs", 153 | "emacs-overlay": "emacs-overlay", 154 | "figlet-fonts": "figlet-fonts", 155 | "home-manager": "home-manager", 156 | "nixpkgs": "nixpkgs_3" 157 | } 158 | }, 159 | "utils": { 160 | "locked": { 161 | "lastModified": 1622445595, 162 | "narHash": "sha256-m+JRe6Wc5OZ/mKw2bB3+Tl0ZbtyxxxfnAWln8Q5qs+Y=", 163 | "owner": "numtide", 164 | "repo": "flake-utils", 165 | "rev": "7d706970d94bc5559077eb1a6600afddcd25a7c8", 166 | "type": "github" 167 | }, 168 | "original": { 169 | "owner": "numtide", 170 | "repo": "flake-utils", 171 | "type": "github" 172 | } 173 | } 174 | }, 175 | "root": "root", 176 | "version": 7 177 | } 178 | -------------------------------------------------------------------------------- /flake.nix: -------------------------------------------------------------------------------- 1 | { 2 | inputs = { 3 | nixpkgs.url = path:/home/mbrock/nixpkgs; 4 | home-manager.url = github:nix-community/home-manager; 5 | emacs-overlay.url = github:nix-community/emacs-overlay; 6 | deploy-rs.url = github:serokell/deploy-rs; 7 | 8 | # nc-vsock = { 9 | # url = github:stefanha/nc-vsock; 10 | # flake = false; 11 | # }; 12 | 13 | figlet-fonts = { 14 | flake = false; 15 | url = github:xero/figlet-fonts; 16 | }; 17 | }; 18 | 19 | outputs = { self, nixpkgs, home-manager, emacs-overlay, deploy-rs, figlet-fonts }: 20 | let 21 | systemKernel = system: system.config.system.build.kernel.dev; 22 | 23 | firecrackerSystem = { isContainer }: 24 | nixpkgs.lib.nixosSystem { 25 | system = "x86_64-linux"; 26 | modules = [ 27 | (import ./firecracker/system.nix { 28 | inherit nixpkgs figlet-fonts; 29 | isContainer = isContainer; 30 | }) 31 | 32 | home-manager.nixosModules.home-manager 33 | { 34 | nixpkgs.overlays = [emacs-overlay.overlay]; 35 | } 36 | ]; 37 | }; 38 | 39 | in { 40 | nixosConfigurations.hetzner = nixpkgs.lib.nixosSystem { 41 | system = "x86_64-linux"; 42 | modules = [ 43 | home-manager.nixosModules.home-manager 44 | 45 | (import ./hetzner-system.nix { 46 | inherit self nixpkgs; 47 | }) 48 | 49 | (import ./firecracker-guests.nix { 50 | inherit self; 51 | }) 52 | 53 | { 54 | restless.firecracker.networkSize = 5; 55 | 56 | home-manager.useGlobalPkgs = true; 57 | home-manager.useUserPackages = true; 58 | home-manager.users.mbrock = import ./mbrock.nix; 59 | 60 | nixpkgs.overlays = [emacs-overlay.overlay]; 61 | 62 | environment.systemPackages = [ 63 | deploy-rs.packages.x86_64-linux.deploy-rs 64 | ]; 65 | } 66 | ]; 67 | }; 68 | 69 | nixosConfigurations.firecracker-container = 70 | firecrackerSystem { isContainer = true; }; 71 | 72 | nixosConfigurations.firecracker = 73 | firecrackerSystem { isContainer = false; }; 74 | 75 | firecracker-vmlinux = 76 | let system = self.nixosConfigurations.firecracker; 77 | in system.config.system.build.kernel.dev; 78 | 79 | firecracker-rootfs = 80 | let system = self.nixosConfigurations.firecracker-container; 81 | in system.config.system.build.rootfs; 82 | 83 | deploy.nodes.guest-1 = { 84 | hostname = "tap1.local"; 85 | profiles.system = { 86 | fastConnection = true; 87 | sshUser = "mbrock"; 88 | user = "root"; 89 | path = 90 | deploy-rs.lib.x86_64-linux.activate.nixos 91 | self.nixosConfigurations.firecracker-container; 92 | }; 93 | }; 94 | }; 95 | } 96 | -------------------------------------------------------------------------------- /hetzner-hardware.nix: -------------------------------------------------------------------------------- 1 | # Do not modify this file! It was generated by ‘nixos-generate-config’ 2 | # and may be overwritten by future invocations. Please make changes 3 | # to /etc/nixos/configuration.nix instead. 4 | { config, lib, pkgs, modulesPath, ... }: 5 | 6 | { 7 | imports = 8 | [ (modulesPath + "/installer/scan/not-detected.nix") 9 | ]; 10 | 11 | boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" ]; 12 | boot.initrd.kernelModules = [ ]; 13 | boot.kernelModules = [ "kvm-intel" ]; 14 | boot.extraModulePackages = [ ]; 15 | 16 | fileSystems."/" = 17 | { device = "/dev/nvme0n1p2"; 18 | fsType = "btrfs"; 19 | }; 20 | 21 | fileSystems."/boot" = 22 | { device = "/dev/disk/by-uuid/2c7054f3-6cdb-478e-b25a-bb5b1db41174"; 23 | fsType = "ext2"; 24 | }; 25 | 26 | swapDevices = [ ]; 27 | 28 | powerManagement.cpuFreqGovernor = lib.mkDefault "powersave"; 29 | } 30 | -------------------------------------------------------------------------------- /hetzner-system.nix: -------------------------------------------------------------------------------- 1 | { self, nixpkgs }: 2 | 3 | { config, pkgs, ... }: 4 | 5 | let 6 | keys = import ./keys.nix; 7 | 8 | # buildFirecrackerImage = _: 9 | # pkgs.stdenv.mkDerivation { 10 | # pname = "firecracker-image"; 11 | # version = "1"; 12 | # src = /dev/null; 13 | # buildInputs = with pkgs; [ 14 | # firecracker 15 | # firectl 16 | # e2fsprogs 17 | # ]; 18 | 19 | # buildPhase = '' 20 | # dd of=disk.img if=/dev/zero bs=1M count=4096 21 | # mkfs.ext4 disk.img 22 | # ''; 23 | # }; 24 | 25 | in { 26 | imports = [./hetzner-hardware.nix]; 27 | 28 | environment.systemPackages = with pkgs; [ 29 | gcc 30 | tmux 31 | elixir_1_12 32 | erlangR24 33 | beamPackages.elixir_ls 34 | file 35 | firecracker 36 | firectl 37 | git 38 | gnumake 39 | ripgrep 40 | tailscale 41 | vim 42 | lsof 43 | 44 | nodejs-16_x 45 | yarn 46 | ]; 47 | 48 | nix = { 49 | package = pkgs.nixUnstable; 50 | extraOptions = '' 51 | experimental-features = nix-command flakes 52 | secret-key-files = /run/node.town.pem 53 | ''; 54 | }; 55 | 56 | nix.registry.nixpkgs.flake = nixpkgs; 57 | 58 | services.openssh.enable = true; 59 | security.sudo.wheelNeedsPassword = false; 60 | 61 | programs.mosh.enable = true; 62 | 63 | networking.hostName = "hamlet"; 64 | time.timeZone = "Europe/Riga"; 65 | 66 | programs.bash.promptInit = '' 67 | if [ "$TERM" != "dumb" -o -n "$INSIDE_EMACS" ]; then 68 | PS1=$'\[\e[1m\]\h\[\e[0m\]:\w\[\e[1m\]`eval "$PS1GIT"`\[\e[0m\]\$ ' 69 | PS1GIT='[[ `git status --short 2>/dev/null` ]] && echo \*' 70 | [[ $TERM = xterm ]] && PS1='\[\033]2;\h:\w\007\]'"$PS1" 71 | fi 72 | ''; 73 | 74 | users.users.root.openssh.authorizedKeys.keys = [keys.mbrock-ssh]; 75 | users.users.mbrock = { 76 | isNormalUser = true; 77 | extraGroups = ["wheel"]; 78 | openssh.authorizedKeys.keys = [keys.mbrock-ssh]; 79 | }; 80 | 81 | users.users.firecracker = { 82 | isSystemUser = true; 83 | }; 84 | 85 | services.gitDaemon = { 86 | enable = true; 87 | basePath = "/srv/git"; 88 | repositories = ["/srv/git"]; 89 | }; 90 | 91 | system.activationScripts = { 92 | setupGitRoot = '' 93 | mkdir -p /srv/git 94 | chown git /srv/git 95 | chgrp wheel /srv/git 96 | chmod 775 /srv/git 97 | ''; 98 | }; 99 | 100 | boot.loader.grub.enable = true; 101 | boot.loader.grub.version = 2; 102 | boot.loader.grub.device = "/dev/nvme0n1"; 103 | 104 | networking.useDHCP = false; 105 | networking.interfaces.eno1.useDHCP = true; 106 | 107 | system.stateVersion = "21.11"; 108 | 109 | networking = { 110 | networkmanager.enable = true; 111 | nat.enable = true; 112 | 113 | firewall = { 114 | enable = true; 115 | trustedInterfaces = ["tailscale0"]; 116 | allowedUDPPorts = [config.services.tailscale.port]; 117 | allowedTCPPorts = [80 443 9418]; 118 | allowPing = true; 119 | }; 120 | }; 121 | 122 | services.tailscale.enable = true; 123 | 124 | systemd.services.tailscale-autoconnect = { 125 | description = "Automatic connection to Tailscale"; 126 | after = ["network-pre.target" "tailscale.service"]; 127 | wants = ["network-pre.target" "tailscale.service"]; 128 | wantedBy = ["multi-user.target"]; 129 | serviceConfig.Type = "oneshot"; 130 | script = '' 131 | sleep 2 132 | PATH=${pkgs.tailscale}/bin:${pkgs.jq}/bin:$PATH 133 | status="$(tailscale status -json | jq -r .BackendState)" 134 | if [ $status = "Running" ]; then 135 | exit 0 136 | fi 137 | 138 | authkey=$(cat /run/keys/tailscale-connect) 139 | 140 | tailscale up -authkey "$authkey" 141 | ''; 142 | }; 143 | 144 | security.acme.acceptTerms = true; 145 | security.acme.email = "mikael@brockman.se"; 146 | security.acme.certs."node.town" = { 147 | group = "nginx"; 148 | credentialsFile = "/secrets/acme.env"; 149 | dnsProvider = "dnsimple"; 150 | domain = "node.town"; 151 | extraDomainNames = [ 152 | "*.node.town" 153 | "*.tty.node.town" 154 | ]; 155 | }; 156 | 157 | services.nginx = { 158 | enable = true; 159 | virtualHosts = { 160 | "node.town" = { 161 | forceSSL = true; 162 | useACMEHost = "node.town"; 163 | locations."/" = { 164 | root = "/restless/www"; 165 | }; 166 | }; 167 | 168 | "root.node.town" = { 169 | forceSSL = true; 170 | useACMEHost = "node.town"; 171 | locations."/" = { 172 | root = "/restless/www/root"; 173 | }; 174 | }; 175 | }; 176 | }; 177 | 178 | services.nix-serve = { 179 | enable = true; 180 | secretKeyFile = "/run/node.town.pem"; 181 | }; 182 | } 183 | -------------------------------------------------------------------------------- /keys.nix: -------------------------------------------------------------------------------- 1 | { 2 | mbrock-ssh = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzUOiIf7ohFtwfnvemmxKItX1zzpvVNZ6miAg4n5p91Az9EQFyRrH7Cylm0Vc9QX62entlFcMx3VS6j+/KWUrM7wPmtiN/+wXT7pVC5i/JP3vvUWMyq2ftq47j2Vl289qDdVgNsO6YaBNEquMvfBvSPwIOSulpLqtow9K2MQ9pliRJl8CL7C1KmT9tWpkWrdyscrbWSFNvYrXXiG6S+YOkSLoluDPn+iyXXPnzCJ2Nhtw2445dHLmbEoCwIImHVf+WrWk/GZDcSjmQMKLVixdO2wfINYd02KmKmYZ+1nc4YnLpr0/wf+5TDkkIIrcUYLkFhjdtKqEz/Oce2Ho9IDJT mikael.brockman@gmail.com"; 3 | } 4 | -------------------------------------------------------------------------------- /mbrock.nix: -------------------------------------------------------------------------------- 1 | { 2 | programs.git = { 3 | enable = true; 4 | userName = "Mikael Brockman"; 5 | userEmail = "mikael@brockman.se"; 6 | }; 7 | 8 | programs.emacs = { 9 | enable = true; 10 | extraPackages = epkgs: with epkgs; [ 11 | elixir-mode 12 | lsp-mode 13 | cider 14 | company 15 | company-nixos-options 16 | deadgrep 17 | humanoid-themes 18 | magit 19 | nix-mode 20 | paredit 21 | projectile 22 | rainbow-delimiters 23 | selectrum 24 | selectrum-prescient 25 | whitespace-cleanup-mode 26 | ]; 27 | }; 28 | 29 | home.file = { 30 | ".emacs.d" = { 31 | source = ./emacs; 32 | recursive = true; 33 | }; 34 | }; 35 | 36 | services.gpg-agent = { 37 | enable = true; 38 | enableSshSupport = true; 39 | }; 40 | } 41 | -------------------------------------------------------------------------------- /network-setup-nat: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | echo 1 > /proc/sys/net/ipv4/ip_forward 3 | iptables -t nat -A POSTROUTING -o eno1 -j MASQUERADE 4 | iptables -A FORWARD -m conntrack \ 5 | --ctstate RELATED,ESTABLISH -j ACCEPT 6 | -------------------------------------------------------------------------------- /network-setup-tap0: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env bash 2 | set -ex 3 | ip link del tap0 4 | ip tuntap add tap0 mode tap 5 | ip addr add 172.16.0.1/24 dev tap0 6 | ip link set tap0 up 7 | iptables -A FORWARD -i tap0 -o eth0 -j ACCEPT 8 | -------------------------------------------------------------------------------- /rig/.formatter.exs: -------------------------------------------------------------------------------- 1 | # Used by "mix format" 2 | [ 3 | inputs: ["{mix,.formatter}.exs", "{config,lib,test}/**/*.{ex,exs}"] 4 | ] 5 | -------------------------------------------------------------------------------- /rig/.gitignore: -------------------------------------------------------------------------------- 1 | # The directory Mix will write compiled artifacts to. 2 | /_build/ 3 | 4 | # If you run "mix test --cover", coverage assets end up here. 5 | /cover/ 6 | 7 | # The directory Mix downloads your dependencies sources to. 8 | /deps/ 9 | 10 | # Where third-party dependencies like ExDoc output generated docs. 11 | /doc/ 12 | 13 | # Ignore .fetch files in case you like to edit your project deps locally. 14 | /.fetch 15 | 16 | # If the VM crashes, it generates a dump, let's ignore it too. 17 | erl_crash.dump 18 | 19 | # Also ignore archive artifacts (built via "mix archive.build"). 20 | *.ez 21 | 22 | # Ignore package tarball (built via "mix hex.build"). 23 | rig-*.tar 24 | 25 | # Temporary files, for example, from tests. 26 | /tmp/ 27 | -------------------------------------------------------------------------------- /rig/README.md: -------------------------------------------------------------------------------- 1 | # Rig 2 | 3 | **TODO: Add description** 4 | 5 | ## Installation 6 | 7 | If [available in Hex](https://hex.pm/docs/publish), the package can be installed 8 | by adding `rig` to your list of dependencies in `mix.exs`: 9 | 10 | ```elixir 11 | def deps do 12 | [ 13 | {:rig, "~> 0.1.0"} 14 | ] 15 | end 16 | ``` 17 | 18 | Documentation can be generated with [ExDoc](https://github.com/elixir-lang/ex_doc) 19 | and published on [HexDocs](https://hexdocs.pm). Once published, the docs can 20 | be found at [https://hexdocs.pm/rig](https://hexdocs.pm/rig). 21 | 22 | -------------------------------------------------------------------------------- /rig/lib/rig.ex: -------------------------------------------------------------------------------- 1 | defmodule Rig do 2 | def start(number) do 3 | DynamicSupervisor.start_child( 4 | Rig.Firecracker.Supervisor, 5 | {Rig.Firecracker.Instance, number} 6 | ) 7 | end 8 | 9 | def stop(number) do 10 | GenServer.call({:via, Registry, {Rig.Registry, {:rig, number}}}, :stop) 11 | end 12 | end 13 | -------------------------------------------------------------------------------- /rig/lib/rig/application.ex: -------------------------------------------------------------------------------- 1 | defmodule Rig.Application do 2 | # See https://hexdocs.pm/elixir/Application.html 3 | # for more information on OTP Applications 4 | @moduledoc false 5 | 6 | use Application 7 | 8 | @impl true 9 | def start(_type, _args) do 10 | children = [ 11 | {Cluster.Supervisor, [ 12 | [local: [strategy: Cluster.Strategy.LocalEpmd], 13 | gossip: [strategy: Cluster.Strategy.Gossip]], 14 | [name: Rig.ClusterSupervisor]]}, 15 | {Phoenix.PubSub, name: Hyp.PubSub}, 16 | {Registry, keys: :unique, name: Rig.Registry}, 17 | Rig.Firecracker.Supervisor 18 | ] 19 | 20 | opts = [strategy: :one_for_one, name: Rig.Supervisor] 21 | Supervisor.start_link(children, opts) 22 | end 23 | end 24 | 25 | defmodule Rig.Firecracker.Supervisor do 26 | use DynamicSupervisor 27 | 28 | def start_link(init_arg) do 29 | DynamicSupervisor.start_link(__MODULE__, init_arg, name: __MODULE__) 30 | end 31 | 32 | @impl true 33 | def init(_) do 34 | DynamicSupervisor.init(strategy: :one_for_one) 35 | end 36 | end 37 | 38 | defmodule Rig.Firecracker.Instance do 39 | use GenServer, restart: :temporary 40 | require Logger 41 | 42 | def start_link(state) do 43 | GenServer.start_link(__MODULE__, state, 44 | name: {:via, Registry, {Rig.Registry, {:rig, state}}}) 45 | end 46 | 47 | @impl true 48 | def init(number) do 49 | Logger.info("rig #{number}: starting") 50 | 51 | {:ok, pid, os_pid} = 52 | Exexec.run_link( 53 | "rig-start #{number}", 54 | stdout: self(), 55 | stderr: self(), 56 | kill_command: "kill ${CHILD_PID}" 57 | ) 58 | 59 | Logger.info("rig #{number}: started with pid #{os_pid} #{inspect(pid)}") 60 | 61 | {:ok, %{ 62 | pid: pid, 63 | os_pid: os_pid, 64 | hostname: "tap#{number}.local", 65 | number: number, 66 | stdout: %{lines: [], buffer: ""}, 67 | stderr: "", 68 | password: nil, 69 | ready: false 70 | }} 71 | end 72 | 73 | @impl true 74 | def handle_call(:stop, _, %{os_pid: pid} = state) do 75 | :ok = Exexec.stop(pid) 76 | {:stop, :normal, :ok, state} 77 | end 78 | 79 | @impl true 80 | def handle_info({:stdout, _pid, data}, state) do 81 | stdout = 82 | case String.split(String.replace(data, "\r", ""), "\n") do 83 | [x] -> 84 | %{ 85 | lines: state.stdout.lines, 86 | buffer: state.stdout.buffer <> x 87 | } 88 | 89 | xs -> 90 | {buffer, [line | lines]} = List.pop_at(xs, -1) 91 | %{ 92 | lines: state.stdout.lines ++ [(state.stdout.buffer <> line) | lines], 93 | buffer: buffer 94 | } 95 | end 96 | 97 | password = 98 | state.password || 99 | Enum.find_value(stdout.lines, fn line -> 100 | case Regex.run(~r/^Rig password: (.*)$/, line) do 101 | [_, password] -> 102 | Logger.info("rig #{state.number} password: #{password}") 103 | Phoenix.PubSub.broadcast!( 104 | Hyp.PubSub, 105 | "rig", 106 | {:rig, state.number, :password, password} 107 | ) 108 | password 109 | 110 | nil -> nil 111 | end 112 | end) 113 | 114 | ready = Enum.any?(stdout.lines, fn line -> 115 | String.contains?(line, "<<< Welcome to NixOS") 116 | end) 117 | 118 | if ready and !state.ready do 119 | Logger.info("rig #{state.number} boot complete") 120 | Phoenix.PubSub.broadcast!( 121 | Hyp.PubSub, "rig", {:rig, state.number, :ready} 122 | ) 123 | end 124 | 125 | {:noreply, %{state | stdout: stdout, password: password, ready: ready}} 126 | end 127 | 128 | @impl true 129 | def handle_info({:stderr, _pid, data}, state) do 130 | Logger.debug("rig #{state.number} err: #{data}") 131 | {:noreply, %{state | stderr: state.stderr <> data}} 132 | end 133 | 134 | @impl true 135 | def terminate(reason, state) do 136 | case reason do 137 | :normal -> 138 | nil 139 | _ -> 140 | Exexec.stop_and_wait(state.pid) 141 | end 142 | Logger.info("rig #{state.number} terminating: #{inspect(reason)}") 143 | :ok 144 | end 145 | end 146 | -------------------------------------------------------------------------------- /rig/mix.exs: -------------------------------------------------------------------------------- 1 | defmodule Rig.MixProject do 2 | use Mix.Project 3 | 4 | def project do 5 | [ 6 | app: :rig, 7 | version: "0.1.0", 8 | elixir: "~> 1.12", 9 | start_permanent: Mix.env() == :prod, 10 | deps: deps() 11 | ] 12 | end 13 | 14 | # Run "mix help compile.app" to learn about applications. 15 | def application do 16 | [ 17 | extra_applications: [:logger], 18 | mod: {Rig.Application, []} 19 | ] 20 | end 21 | 22 | # Run "mix help deps" to learn about dependencies. 23 | defp deps do 24 | [ 25 | {:exexec, "~> 0.2.0"}, 26 | {:libcluster, "~> 3.3"}, 27 | {:phoenix_pubsub, "~> 2.0.0"} 28 | # {:dep_from_hexpm, "~> 0.3.0"}, 29 | # {:dep_from_git, git: "https://github.com/elixir-lang/my_dep.git", tag: "0.1.0"} 30 | ] 31 | end 32 | end 33 | -------------------------------------------------------------------------------- /rig/mix.lock: -------------------------------------------------------------------------------- 1 | %{ 2 | "erlexec": {:hex, :erlexec, "1.18.11", "46cc6aa4ac94f0ff39611f28400b48fa794bbbdec8722202155374981da25682", [:rebar3], [], "hexpm", "2ba928f1bdf74e098c413465f109c10b5d1e1359568eb7bf4c99f91ac983b8ff"}, 3 | "exexec": {:hex, :exexec, "0.2.0", "a6ffc48cba3ac9420891b847e4dc7120692fb8c08c9e82220ebddc0bb8d96103", [:mix], [{:erlexec, "~> 1.10", [hex: :erlexec, repo: "hexpm", optional: false]}], "hexpm", "312cd1c9befba9e078e57f3541e4f4257eabda6eb9c348154fe899d6ac633299"}, 4 | "jason": {:hex, :jason, "1.2.2", "ba43e3f2709fd1aa1dce90aaabfd039d000469c05c56f0b8e31978e03fa39052", [:mix], [{:decimal, "~> 1.0 or ~> 2.0", [hex: :decimal, repo: "hexpm", optional: true]}], "hexpm", "18a228f5f0058ee183f29f9eae0805c6e59d61c3b006760668d8d18ff0d12179"}, 5 | "libcluster": {:hex, :libcluster, "3.3.0", "f7d45ff56d88e9fb4c30aee662480cbab69ebc0e7f7da4ad8d01b1e4f7492da8", [:mix], [{:jason, "~> 1.1", [hex: :jason, repo: "hexpm", optional: false]}], "hexpm", "ecdcdc88334ec8eb18b10a13a1d5f22a3319a970b5b1e66cfe71c7719a4ab6cc"}, 6 | "phoenix_pubsub": {:hex, :phoenix_pubsub, "2.0.0", "a1ae76717bb168cdeb10ec9d92d1480fec99e3080f011402c0a2d68d47395ffb", [:mix], [], "hexpm", "c52d948c4f261577b9c6fa804be91884b381a7f8f18450c5045975435350f771"}, 7 | } 8 | -------------------------------------------------------------------------------- /rig/test/rig_test.exs: -------------------------------------------------------------------------------- 1 | defmodule RigTest do 2 | use ExUnit.Case 3 | doctest Rig 4 | 5 | test "greets the world" do 6 | assert Rig.hello() == :world 7 | end 8 | end 9 | -------------------------------------------------------------------------------- /rig/test/test_helper.exs: -------------------------------------------------------------------------------- 1 | ExUnit.start() 2 | --------------------------------------------------------------------------------