image: enable smt

Disabling SMT inside the image creates problems on AWS. If we need
nosmt there is a cpu option available on AWS.
SMT should not affect AMD CPUs. Enabling SMT could be a problem if we
assume trusted and untrusted code inside the same CVM. But this is not
our threat model.
This commit is contained in:
Otto Bittner 2023-08-28 14:56:51 +02:00
parent 3f824b4ace
commit 8df0b5fee1

View File

@ -6,7 +6,7 @@ Release=38
Format=disk
ManifestFormat=json,changelog
Bootable=yes
KernelCommandLine=mitigations=auto,nosmt preempt=full rd.shell=0 rd.emergency=reboot loglevel=8 console=ttyS0
KernelCommandLine=mitigations=auto preempt=full rd.shell=0 rd.emergency=reboot loglevel=8 console=ttyS0
SplitArtifacts=yes
# Enable Secure Boot with own PKI
SecureBoot=yes