| @@ -128,6 +128,8 if [ "$BUILD_KERNEL" = true ] ; then | |||
|
|
128 | 128 | |
|
|
129 | 129 | # enable basic KVM support; see https://www.raspberrypi.org/forums/viewtopic.php?f=63&t=210546&start=25#p1300453 |
|
|
130 | 130 | if [ "$KERNEL_VIRT" = true ] && { [ "$RPI_MODEL" = 2 ] || [ "$RPI_MODEL" = 3 ] || [ "$RPI_MODEL" = 3P ] || [ "$RPI_MODEL" = 4 ]; } ; then |
|
|
131 | set_kernel_config CONFIG_HAVE_KVM y | |
|
|
132 | set_kernel_config CONFIG_HIGH_RES_TIMERS y | |
|
|
131 | 133 | set_kernel_config CONFIG_HAVE_KVM_IRQCHIP y |
|
|
132 | 134 | set_kernel_config CONFIG_HAVE_KVM_ARCH_TLB_FLUSH_ALL y |
|
|
133 | 135 | set_kernel_config CONFIG_HAVE_KVM_CPU_RELAX_INTERCEPT y |
| @@ -142,19 +144,21 if [ "$BUILD_KERNEL" = true ] ; then | |||
|
|
142 | 144 | set_kernel_config CONFIG_KVM_GENERIC_DIRTYLOG_READ_PROTECT y |
|
|
143 | 145 | set_kernel_config CONFIG_KVM_MMIO y |
|
|
144 | 146 | set_kernel_config CONFIG_KVM_VFIO y |
|
|
147 | set_kernel_config CONFIG_KVM_MMU_AUDIT y | |
|
|
145 | 148 | set_kernel_config CONFIG_VHOST m |
|
|
146 | 149 | set_kernel_config CONFIG_VHOST_CROSS_ENDIAN_LEGACY y |
|
|
147 | 150 | set_kernel_config CONFIG_VHOST_NET m |
|
|
148 | 151 | set_kernel_config CONFIG_VIRTUALIZATION y |
|
|
149 | ||
|
|
150 | set_kernel_config CONFIG_MMU_NOTIFIER y | |
|
|
151 | ||
|
|
152 | # erratum | |
|
|
153 | set_kernel_config ARM64_ERRATUM_834220 y | |
|
|
154 | ||
|
|
155 | # https://sourceforge.net/p/kvm/mailman/message/18440797/ | |
|
|
156 | set_kernel_config CONFIG_PREEMPT_NOTIFIERS y | |
|
|
157 | fi | |
|
|
152 | set_kernel_config CONFIG_MMU_NOTIFIER y | |
|
|
153 | ||
|
|
154 | set_kernel_config CONFIG_SLAB_FREELIST_RANDOM=y | |
|
|
155 | set_kernel_config CONFIG_SLAB_FREELIST_HARDENED=y | |
|
|
156 | ||
|
|
157 | # erratum | |
|
|
158 | set_kernel_config ARM64_ERRATUM_834220 y | |
|
|
159 | # https://sourceforge.net/p/kvm/mailman/message/18440797/ | |
|
|
160 | set_kernel_config CONFIG_PREEMPT_NOTIFIERS y | |
|
|
161 | fi | |
|
|
158 | 162 | |
|
|
159 | 163 | # enable apparmor,integrity audit, |
|
|
160 | 164 | if [ "$KERNEL_SECURITY" = true ] ; then |
General Comments 0
Vous devez vous connecter pour laisser un commentaire.
Se connecter maintenant
