| # |
| # Core OS & General Kernel (Distro Base) |
| # |
| CONFIG_WERROR=y |
| CONFIG_EXPERT=y |
| CONFIG_MULTIUSER=y |
| CONFIG_PRINTK=y |
| CONFIG_PRINTK_TIME=y |
| CONFIG_KALLSYMS=y |
| CONFIG_FUTEX=y |
| CONFIG_EPOLL=y |
| CONFIG_SIGNALFD=y |
| CONFIG_TIMERFD=y |
| CONFIG_EVENTFD=y |
| CONFIG_AIO=y |
| CONFIG_IO_URING=y |
| CONFIG_ADVISE_SYSCALLS=y |
| CONFIG_MEMBARRIER=y |
| CONFIG_RSEQ=y |
| CONFIG_CACHESTAT_SYSCALL=y |
| CONFIG_KCMP=y |
| CONFIG_SYSVIPC=y |
| CONFIG_SYSVIPC_SYSCTL=y |
| CONFIG_POSIX_MQUEUE=y |
| CONFIG_POSIX_MQUEUE_SYSCTL=y |
| CONFIG_POSIX_TIMERS=y |
| CONFIG_HIGH_RES_TIMERS=y |
| CONFIG_SYSCTL=y |
| CONFIG_FHANDLE=y |
| CONFIG_INOTIFY_USER=y |
| CONFIG_WATCH_QUEUE=y |
| CONFIG_TTY=y |
| CONFIG_UNIX98_PTYS=y |
| CONFIG_IKCONFIG=y |
| CONFIG_IKCONFIG_PROC=y |
| CONFIG_KEXEC=y |
| CONFIG_KEXEC_FILE=y |
| CONFIG_DEVTMPFS=y |
| CONFIG_DEVTMPFS_MOUNT=y |
| CONFIG_DEVTMPFS_SAFE=y |
| CONFIG_FW_LOADER=y |
| CONFIG_MODULES=y |
| CONFIG_MODULE_UNLOAD=y |
| CONFIG_MODVERSIONS=y |
| CONFIG_ALLOW_DEV_COREDUMP=y |
| CONFIG_BINFMT_ELF=y |
| CONFIG_BINFMT_SCRIPT=y |
| CONFIG_COREDUMP=y |
| CONFIG_ELF_CORE=y |
| CONFIG_HOTPLUG_CPU=y |
| CONFIG_SCHED_MC=y |
| CONFIG_FAIR_GROUP_SCHED=y |
| CONFIG_CFS_BANDWIDTH=y |
| CONFIG_CPUSETS=y |
| CONFIG_TASKSTATS=y |
| CONFIG_TASK_DELAY_ACCT=y |
| CONFIG_TASK_XACCT=y |
| CONFIG_TASK_IO_ACCOUNTING=y |
| CONFIG_PSI=y |
| CONFIG_PM=y |
| CONFIG_PM_SLEEP=y |
| CONFIG_SUSPEND=y |
| CONFIG_CRC32_ARCH=y |
| CONFIG_CRC_OPTIMIZATIONS=y |
| CONFIG_REGULATOR=y |
| CONFIG_REGULATOR_FIXED_VOLTAGE=y |
| CONFIG_WATCHDOG=y |
| CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y |
| CONFIG_WATCHDOG_SYSFS=y |
| CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT=y |
| |
| # |
| # Namespaces & Cgroups (Containers & Isolation) |
| # |
| CONFIG_NAMESPACES=y |
| CONFIG_UTS_NS=y |
| CONFIG_IPC_NS=y |
| CONFIG_USER_NS=y |
| CONFIG_PID_NS=y |
| CONFIG_NET_NS=y |
| CONFIG_CGROUPS=y |
| CONFIG_CGROUP_BPF=y |
| CONFIG_CGROUP_CPUACCT=y |
| CONFIG_CGROUP_DEVICE=y |
| CONFIG_CGROUP_FREEZER=y |
| CONFIG_CGROUP_PIDS=y |
| CONFIG_CGROUP_SCHED=y |
| CONFIG_MEMCG=y |
| CONFIG_BLK_CGROUP=y |
| |
| # |
| # BPF Subsystem |
| # |
| CONFIG_BPF_SYSCALL=y |
| CONFIG_BPF_JIT=y |
| CONFIG_BPF_JIT_ALWAYS_ON=y |
| |
| # |
| # Security & Kernel Hardening |
| # |
| CONFIG_SECCOMP=y |
| CONFIG_SECCOMP_FILTER=y |
| CONFIG_STACKPROTECTOR=y |
| CONFIG_STACKPROTECTOR_STRONG=y |
| CONFIG_RANDOMIZE_BASE=y |
| CONFIG_RANDOMIZE_KSTACK_OFFSET=y |
| CONFIG_RELR=y |
| #CONFIG_CFI=y # Keep this off until we fix kexec b/557361731 |
| CONFIG_SHADOW_CALL_STACK=y |
| CONFIG_LTO_NONE=y |
| CONFIG_SECRETMEM=y |
| CONFIG_UNMAP_KERNEL_AT_EL0=y |
| CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY=y |
| CONFIG_SLAB_FREELIST_HARDENED=y |
| CONFIG_SLAB_FREELIST_RANDOM=y |
| CONFIG_SLAB_BUCKETS=y |
| CONFIG_MSEAL_SYSTEM_MAPPINGS=y |
| CONFIG_FORTIFY_SOURCE=y |
| CONFIG_HARDENED_USERCOPY=y |
| CONFIG_HARDENED_USERCOPY_DEFAULT_ON=y |
| CONFIG_LIST_HARDENED=y |
| CONFIG_INIT_STACK_ALL_ZERO=y |
| |
| # |
| # Bug Detection / Prevention |
| # |
| CONFIG_BUG=y |
| CONFIG_DEBUG_BUGVERBOSE=y |
| CONFIG_STACKTRACE_BUILD_ID=y |
| CONFIG_SYMBOLIC_ERRNAME=y |
| CONFIG_DEBUG_WX=y |
| CONFIG_DEBUG_RODATA_TEST=y |
| CONFIG_DEBUG_MEMORY_INIT=y |
| CONFIG_KFENCE=y |
| CONFIG_SCHED_STACK_END_CHECK=y |
| CONFIG_PANIC_ON_OOPS=y |
| CONFIG_PANIC_TIMEOUT=5 |
| CONFIG_SOFTLOCKUP_DETECTOR=y |
| CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC=y |
| CONFIG_HARDLOCKUP_DETECTOR=y |
| CONFIG_BOOTPARAM_HARDLOCKUP_PANIC=y |
| CONFIG_DETECT_HUNG_TASK=y |
| CONFIG_DETECT_HUNG_TASK_BLOCKER=y |
| CONFIG_BOOTPARAM_HUNG_TASK_PANIC=y |
| CONFIG_WQ_WATCHDOG=y |
| CONFIG_WQ_CPU_INTENSIVE_REPORT=y |
| CONFIG_RCU_CPU_STALL_CPUTIME=y |
| |
| # |
| # Debugging / Profiling |
| # |
| CONFIG_PROFILING=y |
| CONFIG_PERF_EVENTS=y |
| CONFIG_ARM_PMU=y |
| CONFIG_ARM_SPE_PMU=y |
| CONFIG_ARM_DSU_PMU=y |
| CONFIG_ARM_SMMU_V3_PMU=y |
| CONFIG_MARVELL_CN10K_TAD_PMU=y |
| CONFIG_MARVELL_CN10K_DDR_PMU=y |
| CONFIG_MAGIC_SYSRQ=y |
| CONFIG_KPROBES=y |
| CONFIG_KPROBE_EVENTS=y |
| CONFIG_UPROBE_EVENTS=y |
| CONFIG_EPROBE_EVENTS=y |
| CONFIG_USER_EVENTS=y |
| CONFIG_FTRACE=y |
| CONFIG_BOOTTIME_TRACING=y |
| CONFIG_FUNCTION_TRACER=y |
| CONFIG_FUNCTION_GRAPH_TRACER=y |
| CONFIG_FUNCTION_GRAPH_RETVAL=y |
| CONFIG_FUNCTION_GRAPH_RETADDR=y |
| CONFIG_DYNAMIC_FTRACE=y |
| CONFIG_FPROBE=y |
| CONFIG_FUNCTION_PROFILER=y |
| CONFIG_STACK_TRACER=y |
| CONFIG_FTRACE_SYSCALLS=y |
| CONFIG_TRACER_SNAPSHOT=y |
| CONFIG_HIST_TRIGGERS=y |
| CONFIG_TRACE_EVAL_MAP_FILE=y |
| |
| # |
| # Memory Management |
| # |
| CONFIG_ZONE_DMA=y |
| CONFIG_ZONE_DMA32=y |
| CONFIG_SLUB_CPU_PARTIAL=y |
| CONFIG_COMPACTION=y |
| CONFIG_MIGRATION=y |
| CONFIG_MEMORY_FAILURE=y |
| CONFIG_TRANSPARENT_HUGEPAGE=y |
| CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS=y |
| CONFIG_LRU_GEN=y |
| CONFIG_LRU_GEN_ENABLED=y |
| CONFIG_MEMFD_CREATE=y |
| CONFIG_SHMEM=y |
| |
| # |
| # General Networking & Protocols |
| # |
| CONFIG_NET=y |
| CONFIG_NET_CORE=y |
| CONFIG_NETDEVICES=y |
| CONFIG_PACKET=y |
| CONFIG_PACKET_DIAG=y |
| CONFIG_UNIX=y |
| CONFIG_UNIX_DIAG=y |
| CONFIG_AF_UNIX_OOB=y |
| CONFIG_NETLINK_DIAG=y |
| CONFIG_INET=y |
| CONFIG_IP_MULTICAST=y |
| CONFIG_IP_ADVANCED_ROUTER=y |
| CONFIG_IP_MULTIPLE_TABLES=y |
| CONFIG_IP_ROUTE_MULTIPATH=y |
| CONFIG_IP_ROUTE_VERBOSE=y |
| CONFIG_SYN_COOKIES=y |
| CONFIG_TCP_CONG_ADVANCED=y |
| CONFIG_TCP_CONG_BBR=y |
| CONFIG_DEFAULT_BBR=y |
| CONFIG_INET_DIAG=y |
| CONFIG_INET_UDP_DIAG=y |
| CONFIG_INET_RAW_DIAG=y |
| CONFIG_INET_DIAG_DESTROY=y |
| CONFIG_IPV6=y |
| CONFIG_IPV6_MULTIPLE_TABLES=y |
| CONFIG_IPV6_SUBTREES=y |
| CONFIG_IPV6_ROUTER_PREF=y |
| CONFIG_IPV6_ROUTE_INFO=y |
| CONFIG_IPV6_OPTIMISTIC_DAD=y |
| CONFIG_PCPU_DEV_REFCNT=y |
| CONFIG_RPS=y |
| CONFIG_XPS=y |
| CONFIG_BQL=y |
| CONFIG_NET_SCHED=y |
| CONFIG_NET_SCH_CAKE=y |
| CONFIG_ETHTOOL_NETLINK=y |
| CONFIG_ETHERNET=y |
| CONFIG_PHYLIB=y |
| |
| # |
| # Block Layer, Storage & Filesystems |
| # |
| CONFIG_BLOCK=y |
| CONFIG_BLK_DEV=y |
| CONFIG_BLK_DEV_INITRD=y |
| CONFIG_BLK_DEV_LOOP=y |
| CONFIG_BLK_DEV_THROTTLING=y |
| CONFIG_BLK_DEV_WRITE_MOUNTED=y |
| CONFIG_MQ_IOSCHED_DEADLINE=y |
| CONFIG_MSDOS_PARTITION=y |
| CONFIG_EFI_PARTITION=y |
| CONFIG_BLK_DEV_NVME=y |
| CONFIG_NVME_VERBOSE_ERRORS=y |
| CONFIG_NVME_HWMON=y |
| CONFIG_MD=y |
| CONFIG_BLK_DEV_DM=y |
| CONFIG_DM_CRYPT=y |
| CONFIG_DM_UEVENT=y |
| CONFIG_PROC_FS=y |
| CONFIG_PROC_SYSCTL=y |
| CONFIG_PROC_PAGE_MONITOR=y |
| CONFIG_SYSFS=y |
| CONFIG_FILE_LOCKING=y |
| CONFIG_BUFFER_HEAD=y |
| CONFIG_LEGACY_DIRECT_IO=y |
| CONFIG_EXT4_FS=y |
| CONFIG_EXT4_FS_POSIX_ACL=y |
| CONFIG_MISC_FILESYSTEMS=y |
| CONFIG_EROFS_FS=y |
| CONFIG_EROFS_FS_ZIP=y |
| CONFIG_EROFS_FS_ZIP_ZSTD=y |
| CONFIG_EROFS_FS_POSIX_ACL=y |
| CONFIG_EROFS_FS_XATTR=y |
| CONFIG_EROFS_FS_BACKED_BY_FILE=y |
| CONFIG_OVERLAY_FS=y |
| CONFIG_TMPFS=y |
| CONFIG_TMPFS_POSIX_ACL=y |
| CONFIG_TMPFS_XATTR=y |
| CONFIG_VFAT_FS=y |
| CONFIG_NLS_CODEPAGE_437=y |
| CONFIG_NLS_ISO8859_1=y |
| CONFIG_NLS_UTF8=y |
| CONFIG_KERNEL_ZSTD=y |
| CONFIG_RD_ZSTD=y |
| CONFIG_DECOMPRESS_ZSTD=y |
| |
| # |
| # General Hardware Buses (PCI, USB, I2C, SPI, MMC, MTD) |
| # |
| CONFIG_PCI=y |
| CONFIG_PCIEPORTBUS=y |
| CONFIG_HOTPLUG_PCI=y |
| CONFIG_HOTPLUG_PCI_PCIE=y |
| CONFIG_PCIEAER=y |
| CONFIG_PCIE_ECRC=y |
| CONFIG_PCIE_DPC=y |
| CONFIG_PCIEASPM=y |
| CONFIG_PCIE_PTM=y |
| CONFIG_PCIE_TPH=y |
| CONFIG_PCI_QUIRKS=y |
| CONFIG_PCI_HOST_GENERIC=y |
| CONFIG_IOMMU_SUPPORT=y |
| CONFIG_USB_SUPPORT=y |
| CONFIG_USB=y |
| CONFIG_USB_PCI=y |
| CONFIG_USB_ANNOUNCE_NEW_DEVICES=y |
| CONFIG_USB_XHCI_HCD=y |
| CONFIG_USB_XHCI_PCI=y |
| CONFIG_USB_SERIAL=y |
| CONFIG_I2C=y |
| CONFIG_I2C_CHARDEV=y |
| CONFIG_SPI=y |
| CONFIG_MMC=y |
| CONFIG_MMC_BLOCK=y |
| CONFIG_MMC_SDHCI=y |
| CONFIG_MMC_SDHCI_PLTFM=y |
| CONFIG_MTD=y |
| CONFIG_MTD_BLOCK=y |
| CONFIG_MTD_SPI_NOR=y |
| CONFIG_HW_RANDOM=y |
| CONFIG_RTC_CLASS=y |
| CONFIG_RTC_HCTOSYS=y |
| CONFIG_RTC_SYSTOHC=y |
| CONFIG_RTC_INTF_SYSFS=y |
| CONFIG_RTC_INTF_PROC=y |
| CONFIG_RTC_INTF_DEV=y |
| |
| # |
| # Firmware & Platform Standards (EFI / SCMI / SDEI / SBSA) |
| # |
| CONFIG_DMI=y |
| CONFIG_DMIID=y |
| CONFIG_EFI=y |
| CONFIG_EFIVAR_FS=y |
| CONFIG_EFI_ZBOOT=y |
| CONFIG_RTC_DRV_EFI=y |
| CONFIG_MAILBOX=y |
| CONFIG_ARM_SCMI_PROTOCOL=y |
| CONFIG_ARM_SCMI_POWER_CONTROL=y |
| CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y |
| CONFIG_CPU_FREQ=y |
| CONFIG_CPU_FREQ_STAT=y |
| CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL=y |
| CONFIG_ARM_SCMI_CPUFREQ=y |
| CONFIG_HWMON=y |
| CONFIG_THERMAL=y |
| CONFIG_SENSORS_ARM_SCMI=y |
| CONFIG_ARM_SDE_INTERFACE=y |
| CONFIG_ARM_SBSA_WATCHDOG=y |
| CONFIG_HW_RANDOM_ARM_SMCCC_TRNG=y |
| |
| # |
| # ARM64 Architecture & Neoverse-N2 CPU Features |
| # |
| CONFIG_ARM64_VA_BITS_48=y |
| CONFIG_ARM64_CONTPTE=y |
| CONFIG_ARM64_HW_AFDBM=y |
| CONFIG_ARM64_PAN=y |
| CONFIG_ARM64_EPAN=y |
| CONFIG_ARM64_PTR_AUTH=y |
| CONFIG_ARM64_PTR_AUTH_KERNEL=y |
| CONFIG_ARM64_BTI=y |
| CONFIG_ARM64_BTI_KERNEL=y |
| CONFIG_ARM64_SVE=y |
| CONFIG_ARM64_AMU_EXTN=y |
| CONFIG_ARM64_CNP=y |
| CONFIG_ARM64_E0PD=y |
| CONFIG_ARM64_RAS_EXTN=y |
| CONFIG_ARM64_TAGGED_ADDR_ABI=y |
| CONFIG_ARM64_TLB_RANGE=y |
| CONFIG_ARM64_USE_LSE_ATOMICS=y |
| CONFIG_ARM_SMMU_V3=y |
| CONFIG_SERIAL_AMBA_PL011=y |
| CONFIG_SERIAL_AMBA_PL011_CONSOLE=y |
| CONFIG_ARM64_ERRATUM_2054223=y |
| CONFIG_ARM64_ERRATUM_2067961=y |
| CONFIG_ARM64_ERRATUM_3194386=y |
| CONFIG_ARM64_ERRATUM_4118414=y |
| |
| # |
| # General Cryptographic Algorithms |
| # |
| CONFIG_CRYPTO=y |
| CONFIG_CRYPTO_AES=y |
| CONFIG_CRYPTO_XTS=y |
| CONFIG_CRYPTO_SHA256=y |
| CONFIG_CRYPTO_AES_ARM64_CE_BLK=y |
| |
| # |
| # Marvell Octeon 10 (CN10K / CN103) SoC Hardware |
| # |
| CONFIG_NR_CPUS=8 |
| CONFIG_ARCH_THUNDER=y |
| CONFIG_ARCH_THUNDER2=y |
| CONFIG_PCI_HOST_THUNDER_PEM=y |
| CONFIG_PCI_HOST_THUNDER_ECAM=y |
| CONFIG_HOTPLUG_PCI_OCTEONEP=y |
| CONFIG_NET_VENDOR_MARVELL=y |
| CONFIG_OCTEONTX2_AF=y |
| CONFIG_OCTEONTX2_PF=y |
| CONFIG_PTP_1588_CLOCK=y |
| CONFIG_MDIO_THUNDER=y |
| CONFIG_I2C_THUNDERX=y |
| CONFIG_GPIO_THUNDERX=y |
| CONFIG_MMC_CAVIUM_THUNDERX=y |
| CONFIG_HW_RANDOM_CN10K=y |
| CONFIG_MARVELL_GTI_WDT=y |
| CONFIG_MMC_SDHCI_CADENCE=y |
| CONFIG_SPI_CADENCE_XSPI=y |
| |
| # |
| # Marvell CN10K Evaluation Board (cn10k-evb) Hardware |
| # |
| CONFIG_I2C_MUX=y |
| CONFIG_I2C_MUX_PCA9541=y |
| CONFIG_I2C_MUX_PCA954x=y |
| CONFIG_EEPROM_AT24=y |
| CONFIG_RTC_DRV_DS1307=y |
| |
| # |
| # MC2 Addon Devices |
| # |
| CONFIG_USB_XHCI_PCI_RENESAS=m |
| CONFIG_USB_SERIAL_CP210X=m |
| CONFIG_USB_SERIAL_FTDI_SIO=m |
| |
| # |
| # MC2 IOX Devices (OBMF-ICP Framework) |
| # |
| CONFIG_OBMF_ICP_CORE=y |
| CONFIG_USB_OBMF_ICP=y |
| CONFIG_I2C_OBMF_ICP=y |
| CONFIG_GPIO_OBMF_ICP=y |
