mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-01-15 01:17:13 -05:00
75ce11af14
Disabling SMT dynamically inside the image creates problems on AWS. The problem should be fixed by disabling smt through the VMM. By recommendation from AWS: add idle=poll. This should improve our launch success rate while they investigate some upstream issues.
33 lines
1.2 KiB
Plaintext
33 lines
1.2 KiB
Plaintext
[Distribution]
|
|
Distribution=fedora
|
|
Release=38
|
|
|
|
[Output]
|
|
Format=disk
|
|
ManifestFormat=json,changelog
|
|
Bootable=yes
|
|
KernelCommandLine=mitigations=auto idle=poll preempt=full rd.shell=0 rd.emergency=reboot loglevel=8 console=ttyS0
|
|
SplitArtifacts=yes
|
|
# Enable Secure Boot with own PKI
|
|
SecureBoot=yes
|
|
SecureBootKey=pki/db.key
|
|
SecureBootCertificate=pki/db.crt
|
|
# TODO(malt3): Wait for systemd 252 to bring systemd-measure
|
|
# Measure=yes
|
|
ImageId=constellation
|
|
Output=image.raw
|
|
|
|
[Content]
|
|
Packages=prebuilt/rpms/kernel/kernel-6.1.45-100.constellation.fc38.x86_64.rpm
|
|
prebuilt/rpms/kernel/kernel-core-6.1.45-100.constellation.fc38.x86_64.rpm
|
|
prebuilt/rpms/kernel/kernel-modules-6.1.45-100.constellation.fc38.x86_64.rpm
|
|
prebuilt/rpms/kernel/kernel-modules-core-6.1.45-100.constellation.fc38.x86_64.rpm
|
|
prebuilt/rpms/systemd/systemd-251.11-2.fc37.x86_64.rpm
|
|
prebuilt/rpms/systemd/systemd-libs-251.11-2.fc37.x86_64.rpm
|
|
prebuilt/rpms/systemd/systemd-networkd-251.11-2.fc37.x86_64.rpm
|
|
prebuilt/rpms/systemd/systemd-pam-251.11-2.fc37.x86_64.rpm
|
|
prebuilt/rpms/systemd/systemd-resolved-251.11-2.fc37.x86_64.rpm
|
|
prebuilt/rpms/systemd/systemd-udev-251.11-2.fc37.x86_64.rpm
|
|
dracut
|
|
util-linux
|