Skip to content

[CIQ 6.12] Rebase to v6.12.29 #272

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 16 commits into from
May 20, 2025
Merged

[CIQ 6.12] Rebase to v6.12.29 #272

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
a72f847
Add CIQ configs
PlaidCat Mar 25, 2025
66cecb7
github actions: Make Builds on Merge Request Work
PlaidCat Jan 16, 2025
5b3d7a6
arm64: add kernel config option to lock down when in Secure Boot mode
Aug 30, 2016
d2de767
efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
dhowells Feb 18, 2019
923d8ab
efi: Lock down the kernel if booted in secure boot mode
bwhacks Sep 10, 2019
9f5255f
mtd: phram,slram: Disable when the kernel is locked down
bwhacks Aug 30, 2019
57f4a5d
Add efi_status_to_str() and rework efi_status_to_err().
vathpela Oct 2, 2017
f39f958
[CIQ] Arm Lockdown Config Enablement
PlaidCat Apr 1, 2025
4561c47
[CIQ] Refresh Configs after making modifications
PlaidCat Apr 2, 2025
9b1bf29
[CIQ] v6.12.17 config updates
PlaidCat Apr 3, 2025
ddd1b1b
[CIQ] v6.12.19 - rebased configs
PlaidCat Apr 4, 2025
6774f25
[CIQ] v6.12.23 - rebased configs
bmastbergen Apr 15, 2025
5328229
[CIQ] v6.12.24 - rebased configs
bmastbergen Apr 22, 2025
1e884e2
[CIQ] v6.12.25 - rebased configs
bmastbergen Apr 28, 2025
18b0adf
[CIQ] v6.12.27 - rebased configs
PlaidCat May 5, 2025
5fbdf66
[CIQ] v6.12.29 - rebased configs
bmastbergen May 19, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
Add CIQ configs 
Adding configs based of Fedora-ARK default config from 6.12.15.

We are modifying these with the following configs where available
CONFIG_MODIFY_LDT_SYSCALL=n
CONFIG_LEGACY_VSYSCALL_NONE=n
These options are for old software support which adds performance
overhead and potential attack surfaces with go against the CIQ LT
kernels priority of performance and security.

CONFIG_LIVEPATCH=n
We do not have Live patching on for any road-map, is not even supported
as a config for ARM.

CONFIG_WQ_POWER_EFFICIENT_DEFAULT=y
This should be enabled, it often improves performance funnily enough

CONFIG_PREEMPT_VOLUNTARY=y
CONFIG_HZ=100
These are set to increase throughput CONFIG_PREEMPT_VOLUNTARY=y (default
Fedora config) but CONFIG_HZ=100 for higher throughput over the x86_64
default of CONFIG_HZ=1000 which provides lower latency.
  • Loading branch information
@PlaidCat @bmastbergen
PlaidCat authored and bmastbergen committed May 19, 2025
commit a72f847bc2545cbdd6ea63009945b42cdb409f61
Loading