Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-12-17 20:04:36 -05:00
Code Issues Packages Projects Releases Wiki Activity

image: move idle and nosmt to aws-only images (#2297)

Browse Source 
We don't want these options on other CSPs. This is temporary until AWS
fixed some background issues.
We need to set the option we want to set differently on each provider
once per provider as we need to keep some of the options we set with
higher priority.
This commit is contained in:
Otto Bittner 2023-09-04 14:02:10 +02:00 committed by GitHub
parent ecfb6d9b1f
commit cb934ed087
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
7 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
image/.csp/aws Normal file
View File

3
image/mkosi.conf.d/mkosi.aws.conf
View File

@ -1,2 +1,5 @@
[Match] [Match]
PathExists=../.csp/aws PathExists=../.csp/aws
[Output]
KernelCommandLine=mitigations=auto idle=poll

3
image/mkosi.conf.d/mkosi.azure.conf
View File

@ -1,2 +1,5 @@
[Match] [Match]
PathExists=../.csp/azure PathExists=../.csp/azure
[Output]
KernelCommandLine=mitigations=auto,nosmt

2
image/mkosi.conf.d/mkosi.conf
View File

@ -6,7 +6,7 @@ Release=38
Format=disk Format=disk
ManifestFormat=json,changelog ManifestFormat=json,changelog
Bootable=yes Bootable=yes
KernelCommandLine=mitigations=auto idle=poll preempt=full rd.shell=0 rd.emergency=reboot loglevel=8 console=ttyS0 KernelCommandLine=preempt=full rd.shell=0 rd.emergency=reboot loglevel=8 console=ttyS0
SplitArtifacts=yes SplitArtifacts=yes
# Enable Secure Boot with own PKI # Enable Secure Boot with own PKI
SecureBoot=yes SecureBoot=yes

3
image/mkosi.conf.d/mkosi.gcp.conf
View File

@ -1,2 +1,5 @@
[Match] [Match]
PathExists=../.csp/gcp PathExists=../.csp/gcp
[Output]
KernelCommandLine=mitigations=auto,nosmt

2
image/mkosi.conf.d/mkosi.openstack.conf
View File

@ -2,7 +2,7 @@
PathExists=../.csp/openstack PathExists=../.csp/openstack
[Output] [Output]
KernelCommandLine=mem_encrypt=on kvm_amd.sev=1 module_blacklist=qemu_fw_cfg console=tty0 console=ttyS0 KernelCommandLine=mem_encrypt=on kvm_amd.sev=1 module_blacklist=qemu_fw_cfg console=tty0 console=ttyS0 mitigations=auto,nosmt
[Content] [Content]
Autologin=yes Autologin=yes

3
image/mkosi.conf.d/mkosi.qemu.conf
View File

@ -4,3 +4,6 @@ PathExists=../.csp/qemu
[Content] [Content]
Autologin=yes Autologin=yes
Environment=CONSOLE_MOTD=true Environment=CONSOLE_MOTD=true
[Output]
KernelCommandLine=mitigations=auto,nosmt