summaryrefslogtreecommitdiffstats
path: root/fragments/base (follow)
Commit message (Collapse)AuthorAgeLines
* fragments: Use compression/zstd instead of base/compressionWolfgang Müller2024-09-27-1/+0
| | | | | | We don't want to have zstd compression on every machine, so get this particular option out of the base/ directory. For now wee only use this on albatross.
* fragments: Add base/compressionWolfgang Müller2024-09-19-0/+1
| | | | | For now this will only include support for zstd. This is generic enough to keep in a base profile.
* Simplify handling of KVM-based optionsWolfgang Müller2024-09-19-0/+7
| | | | | | Where before we had a profile/vm fragment that was set on nearly every host we administer, now make sure to enable KVM unconditionally and put CPU-specific KVM options into the CPU profiles.
* fragments: Enable CONFIG_RANDSTRUCT_PERFORMANCEWolfgang Müller2022-10-15-0/+1
| | | | | This option is now needed for Kernel Self Protection system to be available.
* fragments: Remove reference to STRUCTLEAK_BYREFWolfgang Müller2022-07-10-1/+0
| | | | This option no longer exists in versions >= 5.18.7.
* fragments: Enable sensors for drive temperaturesWolfgang Müller2022-07-10-0/+2
| | | | | These are useful to show with lm-sensors. No more need to show temperatures using smartctl.
* fragments: Enable core scheduling for SMTWolfgang Müller2022-07-10-0/+2
| | | | | This should be safe to have enabled (but unused) and gives us an extra layer of potential mitigation of SMT side channels.
* fragments: Enable X2APIC supportWolfgang Müller2022-07-10-0/+3
| | | | | This should improve handling of very large core counts and should be safe to enable globally.
* fragments: Add fragments for base ACPI settingsWolfgang Müller2022-07-10-0/+1
| | | | | For now this enables the processor aggregator, which should reduce power consumption when supported by the ACPI device.
* fragments: Add fragment for task accountingWolfgang Müller2022-07-10-0/+4
| | | | | This is needed for application such as htop and doesn't hurt to be included in the base group.
* fragments: Enable CONFIG_BINFMT_MISCWolfgang Müller2022-06-04-0/+2
|
* fragments: Add CONFIG_JUMP_LABEL to base/commonWolfgang Müller2022-06-04-0/+2
| | | | This seems to be a harmless optimization.
* fragments: Remove reference to CONFIG_UNUSED_SYMBOLSWolfgang Müller2022-06-04-2/+0
| | | | This option does no longer exist in the 5.15 branch.
* fragments: Add requisite option for KSPWolfgang Müller2022-06-04-0/+1
|
* fragments: Update to latest KSP recommendationsWolfgang Müller2021-08-13-0/+5
| | | | | | The Gentoo KSP recommendations have changed slightly again, now requiring three different settings instead of just one. Additionally, in order to enable KSP at all, CONFIG_MODIFY_LDT_SYSCALL needs to be unset.
* fragments: Enable CONFIG_SECURITYWolfgang Müller2021-08-13-0/+2
| | | | | | An upcoming commit updates to the latest KSP recommendations and requires this particular setting as a direct dependency for CONFIG_SECURITY_YAMA.
* fragments: Use expert mode by defaultWolfgang Müller2021-08-13-0/+2
| | | | | An upcoming commit which updates to the latest KSP recommendations requires expert mode for one setting. Enable it here.
* fragments: Remove obsoleted KSP switchWolfgang Müller2021-07-20-1/+0
| | | | | | The newer versions of sys-kernel/gentoo-sources do not have this switch anymore, instead relying only on the architecture-specific switches. Remove it.
* fragments: Enable GENTOO_KERNEL_SELF_PROTECTIONWolfgang Müller2021-07-03-0/+3
| | | | | | | | | This setting pulls in a set of recommended settings [1] from the Kernel Self Protection Project. We are pretty sure that we exhaustively set all these manually already, but since Gentoo upstream provides this option, make use of it too. [1] https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings
* fragments: Enable CONFIG_RASWolfgang Müller2021-03-06-0/+1
| | | | This is needed for CONFIG_EDAC* but is not enabled by default upstream.
* fragments: Remove superfluous options for 5.10Wolfgang Müller2021-03-06-1/+0
| | | | | These options have either been merged into others or enabled unconditionally.
* Improve security by disabling vsyscall table for legacy appsWynn Wolf Arbor2020-02-29-0/+3
|
* Remove deprecated kernel optionsWynn Wolf Arbor2020-02-29-11/+0
|
* Allow multiple routing tables for IPv6Wynn Wolf Arbor2020-02-29-0/+2
|
* Initial importWynn Wolf Arbor2020-02-29-0/+114
powered by cgit and git | oriole.systems | how to verify signatures