mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-04-20 15:35:55 -04:00
image: enable smt
Disabling SMT inside the image creates problems on AWS. If we need nosmt there is a cpu option available on AWS. SMT should not affect AMD CPUs. Enabling SMT could be a problem if we assume trusted and untrusted code inside the same CVM. But this is not our threat model.
This commit is contained in:
parent
3f824b4ace
commit
8df0b5fee1
@ -6,7 +6,7 @@ Release=38
|
||||
Format=disk
|
||||
ManifestFormat=json,changelog
|
||||
Bootable=yes
|
||||
KernelCommandLine=mitigations=auto,nosmt preempt=full rd.shell=0 rd.emergency=reboot loglevel=8 console=ttyS0
|
||||
KernelCommandLine=mitigations=auto preempt=full rd.shell=0 rd.emergency=reboot loglevel=8 console=ttyS0
|
||||
SplitArtifacts=yes
|
||||
# Enable Secure Boot with own PKI
|
||||
SecureBoot=yes
|
||||
|
Loading…
x
Reference in New Issue
Block a user