-
Notifications
You must be signed in to change notification settings - Fork 0
/
configs-patch-5.15.y.patch
201 lines (201 loc) · 5.51 KB
/
configs-patch-5.15.y.patch
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
diff --git a/kernel/configs/snappy/containers.config b/kernel/configs/snappy/containers.config
new file mode 100644
index 0000000..19a4744
--- /dev/null
+++ b/kernel/configs/snappy/containers.config
@@ -0,0 +1,54 @@
+# https://github.com/docker/docker/blob/master/contrib/check-config.sh
+CONFIG_NAMESPACES=y
+CONFIG_NET_NS=y
+CONFIG_PID_NS=y
+CONFIG_IPC_NS=y
+CONFIG_UTS_NS=y
+CONFIG_DEVPTS_MULTIPLE_INSTANCES=y
+CONFIG_CGROUPS=y
+CONFIG_CGROUP_CPUACCT=y
+CONFIG_CGROUP_DEVICE=y
+CONFIG_CGROUP_FREEZER=y
+CONFIG_CGROUP_SCHED=y
+CONFIG_CPUSETS=y
+CONFIG_MEMCG=y
+CONFIG_KEYS=y
+CONFIG_MACVLAN=m
+CONFIG_VETH=m
+CONFIG_BRIDGE=m
+CONFIG_BRIDGE_NETFILTER=m
+CONFIG_NF_NAT_IPV4=m
+CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_TARGET_MASQUERADE=m
+CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
+CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
+CONFIG_NF_NAT=m
+CONFIG_NF_NAT_NEEDED=y
+CONFIG_POSIX_MQUEUE=y
+# optional features
+CONFIG_USER_NS=y
+CONFIG_SECCOMP=y
+CONFIG_CGROUP_PIDS=y
+CONFIG_MEMCG_KMEM=y
+CONFIG_MEMCG_SWAP=y
+CONFIG_BLK_CGROUP=y
+CONFIG_BLK_DEV_THROTTLING=y
+CONFIG_IOSCHED_CFQ=y
+CONFIG_CFQ_GROUP_IOSCHED=y
+CONFIG_CGROUP_PERF=y
+CONFIG_CGROUP_HUGETLB=y
+CONFIG_NET_CLS_CGROUP=m
+CONFIG_CGROUP_NET_PRIO=y
+CONFIG_CFS_BANDWIDTH=y
+CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_RT_GROUP_SCHED=m
+CONFIG_EXT4_FS=y
+CONFIG_EXT4_FS_POSIX_ACL=y
+CONFIG_EXT4_FS_SECURITY=y
+CONFIG_VXLAN=m
+CONFIG_AUFS_FS=m
+CONFIG_BTRFS_FS=m
+CONFIG_BLK_DEV_DM=y
+CONFIG_DM_THIN_PROVISIONING=m
+CONFIG_OVERLAY_FS=m
+CONFIG_OVERLAY_FS_V1=y
diff --git a/kernel/configs/snappy/generic.config b/kernel/configs/snappy/generic.config
new file mode 100644
index 0000000..70cfbdd
--- /dev/null
+++ b/kernel/configs/snappy/generic.config
@@ -0,0 +1,37 @@
+#LP#1105230 and LP#1385510
+# CONFIG_SOUND_OSS_CORE_PRECLAIM is not set
+# upstart requires DEVTMPFS be enabled and mounted by default.
+CONFIG_DEVTMPFS=y
+CONFIG_DEVTMPFS_MOUNT=y
+# some /dev nodes require POSIX ACLs, like /dev/dsp
+CONFIG_TMPFS_POSIX_ACL=y
+# Ramdisk size should be a minimum of 64M
+CONFIG_BLK_DEV_RAM=y
+CONFIG_BLK_DEV_RAM_SIZE=65536
+# LVM requires dm_mod built in to activate correctly (LP: #560717)
+CONFIG_MD=y
+CONFIG_BLK_DEV_DM=y
+# sysfs: ensure all DEPRECATED items are off
+# CONFIG_SYSFS_DEPRECATED is not set
+# automatically add local version will cause packaging failure
+CONFIG_LOCALVERSION=""
+# Ensure IPV6 is y, if this is a module we get a module load for
+# every ipv6 packet, bad.
+CONFIG_IPV6=y
+# Ensure ECRYPT_FS is y as it cannot be autoloaded and it has complex
+# dependancies which can pull it =m at a whim.
+CONFIG_ECRYPT_FS=y
+# Required if /init is a shell script.
+CONFIG_BINFMT_SCRIPT=y
+# Newer udevs don't handle firmware loading, and having the userspace
+# fallback enabled in the kernel just results in big delays if we do
+# fall back.
+# See LP:1398458
+# CONFIG_FW_LOADER_USER_HELPER_FALLBACK is not set
+CONFIG_CRASH_DUMP=y
+CONFIG_RTC_DRV_CMOS=m
+CONFIG_NVRAM=m
+CONFIG_INPUT_UINPUT=y
+# needed by dbus
+CONFIG_SYSVIPC=y
+CONFIG_SYSVIPC_SYSCTL=y
diff --git a/kernel/configs/snappy/security.config b/kernel/configs/snappy/security.config
new file mode 100644
index 0000000..4f0452f
--- /dev/null
+++ b/kernel/configs/snappy/security.config
@@ -0,0 +1,20 @@
+# CONFIG_COMPAT_BRK is not set
+# CONFIG_DEVKMEM is not set
+CONFIG_LSM_MMAP_MIN_ADDR=0
+CONFIG_SECURITY=y
+CONFIG_SECURITY_APPARMOR=y
+CONFIG_SECURITY_SELINUX=y
+CONFIG_SECURITY_SMACK=y
+CONFIG_SECURITY_YAMA=y
+CONFIG_SYN_COOKIES=y
+CONFIG_DEFAULT_SECURITY_APPARMOR=y
+CONFIG_SECCOMP=y
+CONFIG_SECCOMP_FILTER=y
+CONFIG_CC_STACKPROTECTOR=y
+CONFIG_CC_STACKPROTECTOR_REGULAR=y
+CONFIG_DEBUG_RODATA=y
+CONFIG_DEBUG_SET_MODULE_RONX=y
+CONFIG_STRICT_DEVMEM=y
+# CONFIG_COMPAT_VDSO is not set
+# CONFIG_ACPI_CUSTOM_METHOD is not set
+CONFIG_DEFAULT_MMAP_MIN_ADDR=32768
diff --git a/kernel/configs/snappy/snappy.config b/kernel/configs/snappy/snappy.config
new file mode 100644
index 0000000..6978397
--- /dev/null
+++ b/kernel/configs/snappy/snappy.config
@@ -0,0 +1,28 @@
+CONFIG_RD_BZIP2=y
+CONFIG_RD_LZMA=y
+CONFIG_RD_XZ=y
+CONFIG_REGULATOR=y
+CONFIG_RFKILL=y
+CONFIG_RFKILL_INPUT=y
+CONFIG_RFKILL_REGULATOR=m
+CONFIG_RFKILL_GPIO=m
+CONFIG_RAW_DRIVER=m
+CONFIG_FANOTIFY=y
+CONFIG_AUTOFS4_FS=y
+# CONFIG_USB_FUNCTIONFS is not set
+# CONFIG_USB_ZERO is not set
+# CONFIG_USB_MASS_STORAGE is not set
+# CONFIG_USB_G_MULTI_CDC is not set
+CONFIG_CONFIGFS_FS=y
+CONFIG_KEYS=y
+CONFIG_ENCRYPTED_KEYS=y
+CONFIG_BLK_DEV_LOOP=y
+CONFIG_BLK_DEV_LOOP_MIN_COUNT=256
+CONFIG_SQUASHFS=y
+CONFIG_SQUASHFS_FILE_DIRECT=y
+CONFIG_SQUASHFS_DECOMP_SINGLE=y
+CONFIG_SQUASHFS_XATTR=y
+CONFIG_SQUASHFS_ZLIB=y
+CONFIG_SQUASHFS_LZ4=y
+CONFIG_SQUASHFS_LZO=y
+CONFIG_SQUASHFS_XZ=y
diff --git a/kernel/configs/snappy/systemd.config b/kernel/configs/snappy/systemd.config
new file mode 100644
index 0000000..0e642ba
--- /dev/null
+++ b/kernel/configs/snappy/systemd.config
@@ -0,0 +1,32 @@
+# for more info, see REQUIREMENTS in systemd/README:
+CONFIG_DEVTMPFS=y
+CONFIG_CGROUPS=y
+CONFIG_INOTIFY_USER=y
+CONFIG_SIGNALFD=y
+CONFIG_TIMERFD=y
+CONFIG_EPOLL=y
+CONFIG_NET=y
+CONFIG_SYSFS=y
+CONFIG_PROC_FS=y
+CONFIG_FHANDLE=y
+# CONFIG_SYSFS_DEPRECATED is not set
+CONFIG_UEVENT_HELPER_PATH=""
+# CONFIG_FW_LOADER_USER_HELPER is not set
+CONFIG_DMIID=y
+CONFIG_BLK_DEV_BSG=y
+CONFIG_NET_NS=y
+CONFIG_DEVPTS_MULTIPLE_INSTANCES=y
+# Optional but strongly recommended:
+CONFIG_IPV6=y
+CONFIG_AUTOFS4_FS=y
+CONFIG_TMPFS_POSIX_ACL=y
+CONFIG_TMPFS_XATTR=y
+CONFIG_SECCOMP=y
+CONFIG_CGROUP_SCHED=y
+CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_CFS_BANDWIDTH=y
+CONFIG_SCHEDSTATS=y
+CONFIG_SCHED_DEBUG=y
+CONFIG_EFIVAR_FS=y
+CONFIG_EFI_PARTITION=y
+# CONFIG_AUDIT is not set