Skip to content

Commit

Permalink
Merge pull request #575 from jengelh/master
Browse files Browse the repository at this point in the history
Use shorter kernel flag for mitigations
  • Loading branch information
adrianschroeter committed Jun 25, 2020
2 parents ac8d2e4 + 23b13e4 commit 6dad6fd
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion build-vm
Expand Up @@ -36,7 +36,7 @@ vm_img_mkfs_xfs='mkfs.xfs -f'
# ignore not backward compatible ext fs options like metadata_csum
# Only protecting nonroot from root inside guest -> but anyone can be root inside guest
# so disabling spectre/meltdown mitigations doesn't hurt security and gains performance
vm_linux_kernel_parameter="ext4.allow_unsupported=1 kpti=off pti=off spectre_v2=off"
vm_linux_kernel_parameter="ext4.allow_unsupported=1 mitigations=off"

# guest visible devices
VM_ROOTDEV=/dev/hda1
Expand Down

0 comments on commit 6dad6fd

Please sign in to comment.