0ebe75b2ca
Complete infrastructure platform CLI: - Container runtime (systemd-nspawn) - VoltVisor VMs (Neutron Stardust / QEMU) - Stellarium CAS (content-addressed storage) - ORAS Registry - GitOps integration - Landlock LSM security - Compose orchestration - Mesh networking Copyright (c) Armored Gates LLC. All rights reserved. Licensed under AGPSL v5.0
104 lines
1.6 KiB
Plaintext
104 lines
1.6 KiB
Plaintext
# Volt Kernel: Minimal Profile
|
|
# Optimized for: Appliances, edge, maximum density
|
|
# Size target: ~15MB
|
|
# Boot target: <100ms
|
|
|
|
CONFIG_LOCALVERSION="-volt-minimal"
|
|
CONFIG_DEFAULT_HOSTNAME="volt"
|
|
|
|
#
|
|
# Embedded Optimizations
|
|
#
|
|
CONFIG_EMBEDDED=y
|
|
CONFIG_EXPERT=y
|
|
|
|
#
|
|
# Preemption: None
|
|
#
|
|
CONFIG_PREEMPT_NONE=y
|
|
CONFIG_HZ_100=y
|
|
CONFIG_NO_HZ_FULL=y
|
|
|
|
#
|
|
# Size Optimizations
|
|
#
|
|
CONFIG_CC_OPTIMIZE_FOR_SIZE=y
|
|
CONFIG_SLOB=y
|
|
# CONFIG_MODULES is not set
|
|
# CONFIG_PRINTK is not set
|
|
# CONFIG_BUG is not set
|
|
# CONFIG_DEBUG_INFO is not set
|
|
# CONFIG_KALLSYMS is not set
|
|
# CONFIG_FUTEX is not set
|
|
# CONFIG_EPOLL is not set
|
|
# CONFIG_SIGNALFD is not set
|
|
# CONFIG_TIMERFD is not set
|
|
# CONFIG_EVENTFD is not set
|
|
# CONFIG_SHMEM is not set
|
|
# CONFIG_AIO is not set
|
|
|
|
#
|
|
# Processor (minimal)
|
|
#
|
|
CONFIG_SMP=n
|
|
CONFIG_NR_CPUS=1
|
|
|
|
#
|
|
# Networking (minimal)
|
|
#
|
|
CONFIG_NET=y
|
|
CONFIG_PACKET=y
|
|
CONFIG_UNIX=y
|
|
CONFIG_INET=y
|
|
CONFIG_IPV6=y
|
|
# CONFIG_NETFILTER is not set
|
|
# CONFIG_BRIDGE is not set
|
|
|
|
#
|
|
# Security (critical)
|
|
#
|
|
CONFIG_SECURITY=y
|
|
CONFIG_SECURITY_LANDLOCK=y
|
|
CONFIG_SECCOMP=y
|
|
CONFIG_SECCOMP_FILTER=y
|
|
CONFIG_HARDENED_USERCOPY=y
|
|
CONFIG_STACKPROTECTOR_STRONG=y
|
|
|
|
#
|
|
# Cgroups (minimal)
|
|
#
|
|
CONFIG_CGROUPS=y
|
|
CONFIG_MEMCG=y
|
|
|
|
#
|
|
# Namespaces (for isolation)
|
|
#
|
|
CONFIG_NAMESPACES=y
|
|
CONFIG_USER_NS=y
|
|
CONFIG_PID_NS=y
|
|
CONFIG_NET_NS=y
|
|
|
|
#
|
|
# File Systems (minimal)
|
|
#
|
|
CONFIG_EXT4_FS=y
|
|
CONFIG_PROC_FS=y
|
|
CONFIG_SYSFS=y
|
|
CONFIG_DEVTMPFS=y
|
|
CONFIG_DEVTMPFS_MOUNT=y
|
|
|
|
#
|
|
# DISABLED (not needed)
|
|
#
|
|
# CONFIG_DRM is not set
|
|
# CONFIG_SOUND is not set
|
|
# CONFIG_USB is not set
|
|
# CONFIG_INPUT is not set
|
|
# CONFIG_VT is not set
|
|
# CONFIG_HID is not set
|
|
|
|
#
|
|
# Compression (maximum)
|
|
#
|
|
CONFIG_KERNEL_XZ=y
|