Volt CLI: source-available under AGPSL v5.0
Complete infrastructure platform CLI: - Container runtime (systemd-nspawn) - VoltVisor VMs (Neutron Stardust / QEMU) - Stellarium CAS (content-addressed storage) - ORAS Registry - GitOps integration - Landlock LSM security - Compose orchestration - Mesh networking Copyright (c) Armored Gates LLC. All rights reserved. Licensed under AGPSL v5.0
This commit is contained in:
Karl Clinger
116
configs/kernels/kernel-desktop.config
Normal file
116
configs/kernels/kernel-desktop.config
Normal file
@@ -0,0 +1,116 @@
|
||||
# Volt Kernel: Desktop Profile
|
||||
# Optimized for: Interactive use, display, input, ODE
|
||||
# Size target: ~60MB
|
||||
# Boot target: <400ms
|
||||
|
||||
CONFIG_LOCALVERSION="-volt-desktop"
|
||||
CONFIG_DEFAULT_HOSTNAME="volt"
|
||||
|
||||
#
|
||||
# Preemption Model: Full (responsive UI)
|
||||
#
|
||||
CONFIG_PREEMPT=y
|
||||
# CONFIG_PREEMPT_NONE is not set
|
||||
# CONFIG_PREEMPT_VOLUNTARY is not set
|
||||
|
||||
#
|
||||
# Timer Frequency: High (responsive)
|
||||
#
|
||||
CONFIG_HZ_1000=y
|
||||
CONFIG_NO_HZ_IDLE=y
|
||||
|
||||
#
|
||||
# Include all server configs
|
||||
#
|
||||
CONFIG_SMP=y
|
||||
CONFIG_NR_CPUS=64
|
||||
CONFIG_NUMA=y
|
||||
|
||||
#
|
||||
# Graphics (for ODE capture)
|
||||
#
|
||||
CONFIG_DRM=y
|
||||
CONFIG_DRM_FBDEV_EMULATION=y
|
||||
CONFIG_DRM_VIRTIO_GPU=y
|
||||
CONFIG_DRM_SIMPLEDRM=y
|
||||
CONFIG_FB=y
|
||||
CONFIG_FB_SIMPLE=y
|
||||
CONFIG_FRAMEBUFFER_CONSOLE=y
|
||||
CONFIG_VGA_CONSOLE=y
|
||||
|
||||
#
|
||||
# Input Devices
|
||||
#
|
||||
CONFIG_INPUT=y
|
||||
CONFIG_INPUT_KEYBOARD=y
|
||||
CONFIG_INPUT_MOUSE=y
|
||||
CONFIG_INPUT_EVDEV=y
|
||||
CONFIG_KEYBOARD_ATKBD=y
|
||||
CONFIG_MOUSE_PS2=y
|
||||
CONFIG_INPUT_UINPUT=y
|
||||
|
||||
#
|
||||
# Audio (for ODE)
|
||||
#
|
||||
CONFIG_SOUND=y
|
||||
CONFIG_SND=y
|
||||
CONFIG_SND_TIMER=y
|
||||
CONFIG_SND_PCM=y
|
||||
CONFIG_SND_VIRTIO=y
|
||||
CONFIG_SND_HDA_INTEL=y
|
||||
|
||||
#
|
||||
# USB (for input forwarding)
|
||||
#
|
||||
CONFIG_USB_SUPPORT=y
|
||||
CONFIG_USB=y
|
||||
CONFIG_USB_HID=y
|
||||
CONFIG_USB_HIDDEV=y
|
||||
|
||||
#
|
||||
# Security (same as server)
|
||||
#
|
||||
CONFIG_SECURITY=y
|
||||
CONFIG_SECURITY_LANDLOCK=y
|
||||
CONFIG_SECCOMP=y
|
||||
CONFIG_SECCOMP_FILTER=y
|
||||
CONFIG_SECURITY_YAMA=y
|
||||
CONFIG_HARDENED_USERCOPY=y
|
||||
CONFIG_FORTIFY_SOURCE=y
|
||||
CONFIG_STACKPROTECTOR_STRONG=y
|
||||
|
||||
#
|
||||
# Cgroups, Namespaces (same as server)
|
||||
#
|
||||
CONFIG_CGROUPS=y
|
||||
CONFIG_MEMCG=y
|
||||
CONFIG_NAMESPACES=y
|
||||
CONFIG_USER_NS=y
|
||||
CONFIG_PID_NS=y
|
||||
CONFIG_NET_NS=y
|
||||
|
||||
#
|
||||
# Networking
|
||||
#
|
||||
CONFIG_NET=y
|
||||
CONFIG_INET=y
|
||||
CONFIG_IPV6=y
|
||||
CONFIG_NETFILTER=y
|
||||
CONFIG_BRIDGE=y
|
||||
CONFIG_TUN=y
|
||||
|
||||
#
|
||||
# File Systems
|
||||
#
|
||||
CONFIG_EXT4_FS=y
|
||||
CONFIG_OVERLAY_FS=y
|
||||
CONFIG_FUSE_FS=y
|
||||
CONFIG_PROC_FS=y
|
||||
CONFIG_TMPFS=y
|
||||
CONFIG_DEVTMPFS=y
|
||||
CONFIG_DEVTMPFS_MOUNT=y
|
||||
|
||||
#
|
||||
# Compression
|
||||
#
|
||||
CONFIG_KERNEL_GZIP=y
|
||||
103
configs/kernels/kernel-minimal.config
Normal file
103
configs/kernels/kernel-minimal.config
Normal file
@@ -0,0 +1,103 @@
|
||||
# Volt Kernel: Minimal Profile
|
||||
# Optimized for: Appliances, edge, maximum density
|
||||
# Size target: ~15MB
|
||||
# Boot target: <100ms
|
||||
|
||||
CONFIG_LOCALVERSION="-volt-minimal"
|
||||
CONFIG_DEFAULT_HOSTNAME="volt"
|
||||
|
||||
#
|
||||
# Embedded Optimizations
|
||||
#
|
||||
CONFIG_EMBEDDED=y
|
||||
CONFIG_EXPERT=y
|
||||
|
||||
#
|
||||
# Preemption: None
|
||||
#
|
||||
CONFIG_PREEMPT_NONE=y
|
||||
CONFIG_HZ_100=y
|
||||
CONFIG_NO_HZ_FULL=y
|
||||
|
||||
#
|
||||
# Size Optimizations
|
||||
#
|
||||
CONFIG_CC_OPTIMIZE_FOR_SIZE=y
|
||||
CONFIG_SLOB=y
|
||||
# CONFIG_MODULES is not set
|
||||
# CONFIG_PRINTK is not set
|
||||
# CONFIG_BUG is not set
|
||||
# CONFIG_DEBUG_INFO is not set
|
||||
# CONFIG_KALLSYMS is not set
|
||||
# CONFIG_FUTEX is not set
|
||||
# CONFIG_EPOLL is not set
|
||||
# CONFIG_SIGNALFD is not set
|
||||
# CONFIG_TIMERFD is not set
|
||||
# CONFIG_EVENTFD is not set
|
||||
# CONFIG_SHMEM is not set
|
||||
# CONFIG_AIO is not set
|
||||
|
||||
#
|
||||
# Processor (minimal)
|
||||
#
|
||||
CONFIG_SMP=n
|
||||
CONFIG_NR_CPUS=1
|
||||
|
||||
#
|
||||
# Networking (minimal)
|
||||
#
|
||||
CONFIG_NET=y
|
||||
CONFIG_PACKET=y
|
||||
CONFIG_UNIX=y
|
||||
CONFIG_INET=y
|
||||
CONFIG_IPV6=y
|
||||
# CONFIG_NETFILTER is not set
|
||||
# CONFIG_BRIDGE is not set
|
||||
|
||||
#
|
||||
# Security (critical)
|
||||
#
|
||||
CONFIG_SECURITY=y
|
||||
CONFIG_SECURITY_LANDLOCK=y
|
||||
CONFIG_SECCOMP=y
|
||||
CONFIG_SECCOMP_FILTER=y
|
||||
CONFIG_HARDENED_USERCOPY=y
|
||||
CONFIG_STACKPROTECTOR_STRONG=y
|
||||
|
||||
#
|
||||
# Cgroups (minimal)
|
||||
#
|
||||
CONFIG_CGROUPS=y
|
||||
CONFIG_MEMCG=y
|
||||
|
||||
#
|
||||
# Namespaces (for isolation)
|
||||
#
|
||||
CONFIG_NAMESPACES=y
|
||||
CONFIG_USER_NS=y
|
||||
CONFIG_PID_NS=y
|
||||
CONFIG_NET_NS=y
|
||||
|
||||
#
|
||||
# File Systems (minimal)
|
||||
#
|
||||
CONFIG_EXT4_FS=y
|
||||
CONFIG_PROC_FS=y
|
||||
CONFIG_SYSFS=y
|
||||
CONFIG_DEVTMPFS=y
|
||||
CONFIG_DEVTMPFS_MOUNT=y
|
||||
|
||||
#
|
||||
# DISABLED (not needed)
|
||||
#
|
||||
# CONFIG_DRM is not set
|
||||
# CONFIG_SOUND is not set
|
||||
# CONFIG_USB is not set
|
||||
# CONFIG_INPUT is not set
|
||||
# CONFIG_VT is not set
|
||||
# CONFIG_HID is not set
|
||||
|
||||
#
|
||||
# Compression (maximum)
|
||||
#
|
||||
CONFIG_KERNEL_XZ=y
|
||||
136
configs/kernels/kernel-server.config
Normal file
136
configs/kernels/kernel-server.config
Normal file
@@ -0,0 +1,136 @@
|
||||
# Volt Kernel: Server Profile
|
||||
# Optimized for: Headless workloads, maximum density
|
||||
# Size target: ~30MB
|
||||
# Boot target: <200ms
|
||||
|
||||
#
|
||||
# General Setup
|
||||
#
|
||||
CONFIG_LOCALVERSION="-volt-server"
|
||||
CONFIG_DEFAULT_HOSTNAME="volt"
|
||||
CONFIG_SYSVIPC=y
|
||||
CONFIG_POSIX_MQUEUE=y
|
||||
CONFIG_USELIB=n
|
||||
CONFIG_AUDIT=y
|
||||
|
||||
#
|
||||
# Preemption Model: None (server workload)
|
||||
#
|
||||
CONFIG_PREEMPT_NONE=y
|
||||
# CONFIG_PREEMPT_VOLUNTARY is not set
|
||||
# CONFIG_PREEMPT is not set
|
||||
|
||||
#
|
||||
# Timer Frequency: Low (reduce overhead)
|
||||
#
|
||||
CONFIG_HZ_100=y
|
||||
CONFIG_NO_HZ_IDLE=y
|
||||
CONFIG_NO_HZ_FULL=y
|
||||
|
||||
#
|
||||
# Processor Features
|
||||
#
|
||||
CONFIG_SMP=y
|
||||
CONFIG_NR_CPUS=256
|
||||
CONFIG_SCHED_SMT=y
|
||||
CONFIG_NUMA=y
|
||||
|
||||
#
|
||||
# Memory Management
|
||||
#
|
||||
CONFIG_TRANSPARENT_HUGEPAGE=y
|
||||
CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS=y
|
||||
CONFIG_ZSWAP=y
|
||||
CONFIG_ZSMALLOC=y
|
||||
CONFIG_MEMORY_HOTPLUG=y
|
||||
|
||||
#
|
||||
# Networking (Minimal Server)
|
||||
#
|
||||
CONFIG_NET=y
|
||||
CONFIG_PACKET=y
|
||||
CONFIG_UNIX=y
|
||||
CONFIG_INET=y
|
||||
CONFIG_IP_MULTICAST=y
|
||||
CONFIG_IP_ADVANCED_ROUTER=y
|
||||
CONFIG_IP_MULTIPLE_TABLES=y
|
||||
CONFIG_IP_ROUTE_MULTIPATH=y
|
||||
CONFIG_IPV6=y
|
||||
CONFIG_NETFILTER=y
|
||||
CONFIG_NF_CONNTRACK=y
|
||||
CONFIG_NETFILTER_XTABLES=y
|
||||
CONFIG_BRIDGE=y
|
||||
CONFIG_VLAN_8021Q=y
|
||||
CONFIG_VETH=y
|
||||
CONFIG_TUN=y
|
||||
|
||||
#
|
||||
# Security
|
||||
#
|
||||
CONFIG_SECURITY=y
|
||||
CONFIG_SECURITY_NETWORK=y
|
||||
CONFIG_SECURITY_LANDLOCK=y
|
||||
CONFIG_SECCOMP=y
|
||||
CONFIG_SECCOMP_FILTER=y
|
||||
CONFIG_SECURITY_YAMA=y
|
||||
CONFIG_HARDENED_USERCOPY=y
|
||||
CONFIG_FORTIFY_SOURCE=y
|
||||
CONFIG_STACKPROTECTOR_STRONG=y
|
||||
CONFIG_RANDOMIZE_BASE=y
|
||||
CONFIG_RANDOMIZE_MEMORY=y
|
||||
|
||||
#
|
||||
# Cgroups v2
|
||||
#
|
||||
CONFIG_CGROUPS=y
|
||||
CONFIG_CGROUP_SCHED=y
|
||||
CONFIG_CGROUP_PIDS=y
|
||||
CONFIG_CGROUP_CPUACCT=y
|
||||
CONFIG_MEMCG=y
|
||||
CONFIG_BLK_CGROUP=y
|
||||
CONFIG_CGROUP_DEVICE=y
|
||||
CONFIG_CGROUP_FREEZER=y
|
||||
|
||||
#
|
||||
# Namespaces
|
||||
#
|
||||
CONFIG_NAMESPACES=y
|
||||
CONFIG_UTS_NS=y
|
||||
CONFIG_IPC_NS=y
|
||||
CONFIG_USER_NS=y
|
||||
CONFIG_PID_NS=y
|
||||
CONFIG_NET_NS=y
|
||||
|
||||
#
|
||||
# File Systems (Minimal)
|
||||
#
|
||||
CONFIG_EXT4_FS=y
|
||||
CONFIG_XFS_FS=y
|
||||
CONFIG_BTRFS_FS=y
|
||||
CONFIG_OVERLAY_FS=y
|
||||
CONFIG_FUSE_FS=y
|
||||
CONFIG_PROC_FS=y
|
||||
CONFIG_SYSFS=y
|
||||
CONFIG_TMPFS=y
|
||||
CONFIG_DEVTMPFS=y
|
||||
CONFIG_DEVTMPFS_MOUNT=y
|
||||
|
||||
#
|
||||
# DISABLED: Not needed for servers
|
||||
#
|
||||
# CONFIG_DRM is not set
|
||||
# CONFIG_SOUND is not set
|
||||
# CONFIG_USB is not set
|
||||
# CONFIG_BLUETOOTH is not set
|
||||
# CONFIG_WIRELESS is not set
|
||||
# CONFIG_INPUT_JOYSTICK is not set
|
||||
# CONFIG_INPUT_TABLET is not set
|
||||
# CONFIG_INPUT_TOUCHSCREEN is not set
|
||||
|
||||
#
|
||||
# Compression/Size Optimization
|
||||
#
|
||||
CONFIG_KERNEL_GZIP=y
|
||||
CONFIG_CC_OPTIMIZE_FOR_SIZE=y
|
||||
# CONFIG_DEBUG_INFO is not set
|
||||
# CONFIG_KALLSYMS_ALL is not set
|
||||
Reference in New Issue
Block a user