@@ -128,6 +128,8 if [ "$BUILD_KERNEL" = true ] ; then | |||||
128 |
|
128 | |||
129 | # enable basic KVM support; see https://www.raspberrypi.org/forums/viewtopic.php?f=63&t=210546&start=25#p1300453 |
|
129 | # enable basic KVM support; see https://www.raspberrypi.org/forums/viewtopic.php?f=63&t=210546&start=25#p1300453 | |
130 | if [ "$KERNEL_VIRT" = true ] && { [ "$RPI_MODEL" = 2 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] || [ "$RPI_MODEL" = 4 ]; } ; then |
|
130 | if [ "$KERNEL_VIRT" = true ] && { [ "$RPI_MODEL" = 2 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] || [ "$RPI_MODEL" = 4 ]; } ; then | |
|
131 | set_kernel_config CONFIG_HAVE_KVM y | |||
|
132 | set_kernel_config CONFIG_HIGH_RES_TIMERS y | |||
131 | set_kernel_config CONFIG_HAVE_KVM_IRQCHIP y |
|
133 | set_kernel_config CONFIG_HAVE_KVM_IRQCHIP y | |
132 | set_kernel_config CONFIG_HAVE_KVM_ARCH_TLB_FLUSH_ALL y |
|
134 | set_kernel_config CONFIG_HAVE_KVM_ARCH_TLB_FLUSH_ALL y | |
133 | set_kernel_config CONFIG_HAVE_KVM_CPU_RELAX_INTERCEPT y |
|
135 | set_kernel_config CONFIG_HAVE_KVM_CPU_RELAX_INTERCEPT y | |
@@ -142,19 +144,21 if [ "$BUILD_KERNEL" = true ] ; then | |||||
142 | set_kernel_config CONFIG_KVM_GENERIC_DIRTYLOG_READ_PROTECT y |
|
144 | set_kernel_config CONFIG_KVM_GENERIC_DIRTYLOG_READ_PROTECT y | |
143 | set_kernel_config CONFIG_KVM_MMIO y |
|
145 | set_kernel_config CONFIG_KVM_MMIO y | |
144 | set_kernel_config CONFIG_KVM_VFIO y |
|
146 | set_kernel_config CONFIG_KVM_VFIO y | |
|
147 | set_kernel_config CONFIG_KVM_MMU_AUDIT y | |||
145 | set_kernel_config CONFIG_VHOST m |
|
148 | set_kernel_config CONFIG_VHOST m | |
146 | set_kernel_config CONFIG_VHOST_CROSS_ENDIAN_LEGACY y |
|
149 | set_kernel_config CONFIG_VHOST_CROSS_ENDIAN_LEGACY y | |
147 | set_kernel_config CONFIG_VHOST_NET m |
|
150 | set_kernel_config CONFIG_VHOST_NET m | |
148 | set_kernel_config CONFIG_VIRTUALIZATION y |
|
151 | set_kernel_config CONFIG_VIRTUALIZATION y | |
149 |
|
152 | set_kernel_config CONFIG_MMU_NOTIFIER y | ||
150 | set_kernel_config CONFIG_MMU_NOTIFIER y |
|
153 | ||
151 |
|
154 | set_kernel_config CONFIG_SLAB_FREELIST_RANDOM=y | ||
152 | # erratum |
|
155 | set_kernel_config CONFIG_SLAB_FREELIST_HARDENED=y | |
153 | set_kernel_config ARM64_ERRATUM_834220 y |
|
156 | ||
154 |
|
157 | # erratum | ||
155 | # https://sourceforge.net/p/kvm/mailman/message/18440797/ |
|
158 | set_kernel_config ARM64_ERRATUM_834220 y | |
156 | set_kernel_config CONFIG_PREEMPT_NOTIFIERS y |
|
159 | # https://sourceforge.net/p/kvm/mailman/message/18440797/ | |
157 | fi |
|
160 | set_kernel_config CONFIG_PREEMPT_NOTIFIERS y | |
|
161 | fi | |||
158 |
|
162 | |||
159 | # enable apparmor,integrity audit, |
|
163 | # enable apparmor,integrity audit, | |
160 | if [ "$KERNEL_SECURITY" = true ] ; then |
|
164 | if [ "$KERNEL_SECURITY" = true ] ; then |
General Comments 0
Vous devez vous connecter pour laisser un commentaire.
Se connecter maintenant