Config-kernel.in 44 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498
  1. # SPDX-License-Identifier: GPL-2.0-only
  2. #
  3. # Copyright (C) 2006-2014 OpenWrt.org
  4. config KERNEL_BUILD_USER
  5. string "Custom Kernel Build User Name"
  6. default "builder" if BUILDBOT
  7. default ""
  8. help
  9. Sets the Kernel build user string, which for example will be returned
  10. by 'uname -a' on running systems.
  11. If not set, uses system user at build time.
  12. config KERNEL_BUILD_DOMAIN
  13. string "Custom Kernel Build Domain Name"
  14. default "buildhost" if BUILDBOT
  15. default ""
  16. help
  17. Sets the Kernel build domain string, which for example will be
  18. returned by 'uname -a' on running systems.
  19. If not set, uses system hostname at build time.
  20. config KERNEL_PRINTK
  21. bool "Enable support for printk"
  22. default y
  23. config KERNEL_SWAP
  24. bool "Support for paging of anonymous memory (swap)"
  25. default y if !SMALL_FLASH
  26. config KERNEL_PROC_STRIPPED
  27. bool "Strip non-essential /proc functionality to reduce code size"
  28. default y if SMALL_FLASH
  29. config KERNEL_DEBUG_FS
  30. bool "Compile the kernel with debug filesystem enabled"
  31. default y
  32. help
  33. debugfs is a virtual file system that kernel developers use to put
  34. debugging files into. Enable this option to be able to read and
  35. write to these files. Many common debugging facilities, such as
  36. ftrace, require the existence of debugfs.
  37. config KERNEL_MIPS_FP_SUPPORT
  38. bool
  39. default y if TARGET_pistachio
  40. config KERNEL_ARM_PMU
  41. bool
  42. default y if TARGET_armsr_armv8
  43. depends on (arm || aarch64)
  44. config KERNEL_ARM_PMUV3
  45. bool
  46. default y if TARGET_armsr_armv8
  47. depends on (arm_v7 || aarch64)
  48. config KERNEL_RISCV_PMU
  49. bool
  50. select KERNEL_RISCV_PMU_SBI
  51. depends on riscv64
  52. config KERNEL_RISCV_PMU_SBI
  53. bool
  54. depends on riscv64
  55. config KERNEL_X86_VSYSCALL_EMULATION
  56. bool "Enable vsyscall emulation"
  57. depends on x86_64
  58. help
  59. This enables emulation of the legacy vsyscall page. Disabling
  60. it is roughly equivalent to booting with vsyscall=none, except
  61. that it will also disable the helpful warning if a program
  62. tries to use a vsyscall. With this option set to N, offending
  63. programs will just segfault, citing addresses of the form
  64. 0xffffffffff600?00.
  65. This option is required by many programs built before 2013, and
  66. care should be used even with newer programs if set to N.
  67. Disabling this option saves about 7K of kernel size and
  68. possibly 4K of additional runtime pagetable memory.
  69. config KERNEL_PERF_EVENTS
  70. bool "Compile the kernel with performance events and counters"
  71. select KERNEL_ARM_PMU if (arm || aarch64)
  72. select KERNEL_ARM_PMUV3 if (arm_v7 || aarch64)
  73. select KERNEL_RISCV_PMU if riscv64
  74. config KERNEL_PROFILING
  75. bool "Compile the kernel with profiling enabled"
  76. select KERNEL_PERF_EVENTS
  77. help
  78. Enable the extended profiling support mechanisms used by profilers such
  79. as OProfile.
  80. config KERNEL_RPI_AXIPERF
  81. bool "Compile the kernel with RaspberryPi AXI Performance monitors"
  82. default y
  83. depends on KERNEL_PERF_EVENTS && TARGET_bcm27xx
  84. config KERNEL_UBSAN
  85. bool "Compile the kernel with undefined behaviour sanity checker"
  86. help
  87. This option enables undefined behaviour sanity checker
  88. Compile-time instrumentation is used to detect various undefined
  89. behaviours in runtime. Various types of checks may be enabled
  90. via boot parameter ubsan_handle
  91. (see: Documentation/dev-tools/ubsan.rst).
  92. config KERNEL_UBSAN_SANITIZE_ALL
  93. bool "Enable instrumentation for the entire kernel"
  94. depends on KERNEL_UBSAN
  95. default y
  96. help
  97. This option activates instrumentation for the entire kernel.
  98. If you don't enable this option, you have to explicitly specify
  99. UBSAN_SANITIZE := y for the files/directories you want to check for UB.
  100. Enabling this option will get kernel image size increased
  101. significantly.
  102. config KERNEL_UBSAN_ALIGNMENT
  103. bool "Enable checking of pointers alignment"
  104. depends on KERNEL_UBSAN
  105. help
  106. This option enables detection of unaligned memory accesses.
  107. Enabling this option on architectures that support unaligned
  108. accesses may produce a lot of false positives.
  109. config KERNEL_UBSAN_BOUNDS
  110. bool "Perform array index bounds checking"
  111. depends on KERNEL_UBSAN
  112. help
  113. This option enables detection of directly indexed out of bounds array
  114. accesses, where the array size is known at compile time. Note that
  115. this does not protect array overflows via bad calls to the
  116. {str,mem}*cpy() family of functions (that is addressed by
  117. FORTIFY_SOURCE).
  118. config KERNEL_UBSAN_TRAP
  119. bool "On Sanitizer warnings, abort the running kernel code"
  120. depends on KERNEL_UBSAN
  121. help
  122. Building kernels with Sanitizer features enabled tends to grow the
  123. kernel size by around 5%, due to adding all the debugging text on
  124. failure paths. To avoid this, Sanitizer instrumentation can just
  125. issue a trap. This reduces the kernel size overhead but turns all
  126. warnings (including potentially harmless conditions) into full
  127. exceptions that abort the running kernel code (regardless of context,
  128. locks held, etc), which may destabilize the system. For some system
  129. builders this is an acceptable trade-off.
  130. config KERNEL_KASAN
  131. bool "Compile the kernel with KASan: runtime memory debugger"
  132. select KERNEL_SLUB_DEBUG
  133. depends on (x86_64 || aarch64 || arm || powerpc || riscv64)
  134. help
  135. Enables kernel address sanitizer - runtime memory debugger,
  136. designed to find out-of-bounds accesses and use-after-free bugs.
  137. This is strictly a debugging feature and it requires a gcc version
  138. of 4.9.2 or later. Detection of out of bounds accesses to stack or
  139. global variables requires gcc 5.0 or later.
  140. This feature consumes about 1/8 of available memory and brings about
  141. ~x3 performance slowdown.
  142. For better error detection enable CONFIG_STACKTRACE.
  143. Currently CONFIG_KASAN doesn't work with CONFIG_DEBUG_SLAB
  144. (the resulting kernel does not boot).
  145. config KERNEL_KASAN_VMALLOC
  146. bool "Back mappings in vmalloc space with real shadow memory"
  147. depends on KERNEL_KASAN
  148. help
  149. By default, the shadow region for vmalloc space is the read-only
  150. zero page. This means that KASAN cannot detect errors involving
  151. vmalloc space.
  152. Enabling this option will hook in to vmap/vmalloc and back those
  153. mappings with real shadow memory allocated on demand. This allows
  154. for KASAN to detect more sorts of errors (and to support vmapped
  155. stacks), but at the cost of higher memory usage.
  156. This option depends on HAVE_ARCH_KASAN_VMALLOC, but we can't
  157. depend on that in here, so it is possible that enabling this
  158. will have no effect.
  159. if KERNEL_KASAN
  160. choice
  161. prompt "KASAN mode"
  162. depends on KERNEL_KASAN
  163. default KERNEL_KASAN_GENERIC
  164. help
  165. KASAN has three modes:
  166. 1. Generic KASAN (supported by many architectures, enabled with
  167. CONFIG_KASAN_GENERIC, similar to userspace ASan),
  168. 2. Software Tag-Based KASAN (arm64 only, based on software memory
  169. tagging, enabled with CONFIG_KASAN_SW_TAGS, similar to userspace
  170. HWASan), and
  171. 3. Hardware Tag-Based KASAN (arm64 only, based on hardware memory
  172. tagging, enabled with CONFIG_KASAN_HW_TAGS).
  173. config KERNEL_KASAN_GENERIC
  174. bool "Generic KASAN"
  175. select KERNEL_SLUB_DEBUG
  176. help
  177. Enables Generic KASAN.
  178. Consumes about 1/8th of available memory at kernel start and adds an
  179. overhead of ~50% for dynamic allocations.
  180. The performance slowdown is ~x3.
  181. config KERNEL_KASAN_SW_TAGS
  182. bool "Software Tag-Based KASAN"
  183. depends on aarch64
  184. select KERNEL_SLUB_DEBUG
  185. help
  186. Enables Software Tag-Based KASAN.
  187. Supported only on arm64 CPUs and relies on Top Byte Ignore.
  188. Consumes about 1/16th of available memory at kernel start and
  189. add an overhead of ~20% for dynamic allocations.
  190. May potentially introduce problems related to pointer casting and
  191. comparison, as it embeds a tag into the top byte of each pointer.
  192. config KERNEL_KASAN_HW_TAGS
  193. bool "Hardware Tag-Based KASAN"
  194. depends on aarch64
  195. select KERNEL_SLUB_DEBUG
  196. select KERNEL_ARM64_MTE
  197. help
  198. Enables Hardware Tag-Based KASAN.
  199. Supported only on arm64 CPUs starting from ARMv8.5 and relies on
  200. Memory Tagging Extension and Top Byte Ignore.
  201. Consumes about 1/32nd of available memory.
  202. May potentially introduce problems related to pointer casting and
  203. comparison, as it embeds a tag into the top byte of each pointer.
  204. endchoice
  205. config KERNEL_ARM64_MTE
  206. def_bool n
  207. endif
  208. choice
  209. prompt "Instrumentation type"
  210. depends on KERNEL_KASAN
  211. depends on !KERNEL_KASAN_HW_TAGS
  212. default KERNEL_KASAN_OUTLINE
  213. config KERNEL_KASAN_OUTLINE
  214. bool "Outline instrumentation"
  215. help
  216. Before every memory access compiler insert function call
  217. __asan_load*/__asan_store*. These functions performs check
  218. of shadow memory. This is slower than inline instrumentation,
  219. however it doesn't bloat size of kernel's .text section so
  220. much as inline does.
  221. config KERNEL_KASAN_INLINE
  222. bool "Inline instrumentation"
  223. help
  224. Compiler directly inserts code checking shadow memory before
  225. memory accesses. This is faster than outline (in some workloads
  226. it gives about x2 boost over outline instrumentation), but
  227. make kernel's .text size much bigger.
  228. This requires a gcc version of 5.0 or later.
  229. endchoice
  230. config KERNEL_KCOV
  231. bool "Compile the kernel with code coverage for fuzzing"
  232. select KERNEL_DEBUG_FS
  233. help
  234. KCOV exposes kernel code coverage information in a form suitable
  235. for coverage-guided fuzzing (randomized testing).
  236. If RANDOMIZE_BASE is enabled, PC values will not be stable across
  237. different machines and across reboots. If you need stable PC values,
  238. disable RANDOMIZE_BASE.
  239. For more details, see Documentation/kcov.txt.
  240. config KERNEL_KCOV_ENABLE_COMPARISONS
  241. bool "Enable comparison operands collection by KCOV"
  242. depends on KERNEL_KCOV
  243. help
  244. KCOV also exposes operands of every comparison in the instrumented
  245. code along with operand sizes and PCs of the comparison instructions.
  246. These operands can be used by fuzzing engines to improve the quality
  247. of fuzzing coverage.
  248. config KERNEL_KCOV_INSTRUMENT_ALL
  249. bool "Instrument all code by default"
  250. depends on KERNEL_KCOV
  251. default y if KERNEL_KCOV
  252. help
  253. If you are doing generic system call fuzzing (like e.g. syzkaller),
  254. then you will want to instrument the whole kernel and you should
  255. say y here. If you are doing more targeted fuzzing (like e.g.
  256. filesystem fuzzing with AFL) then you will want to enable coverage
  257. for more specific subsets of files, and should say n here.
  258. config KERNEL_TASKSTATS
  259. bool "Compile the kernel with task resource/io statistics and accounting"
  260. help
  261. Enable the collection and publishing of task/io statistics and
  262. accounting. Enable this option to enable i/o monitoring in system
  263. monitors.
  264. if KERNEL_TASKSTATS
  265. config KERNEL_TASK_DELAY_ACCT
  266. def_bool y
  267. config KERNEL_TASK_IO_ACCOUNTING
  268. def_bool y
  269. config KERNEL_TASK_XACCT
  270. def_bool y
  271. endif
  272. config KERNEL_PSI
  273. bool "Compile the kernel with pressure stall information tracking"
  274. help
  275. Collect metrics that indicate how overcommitted the CPU, memory,
  276. and IO capacity are in the system.
  277. If you say Y here, the kernel will create /proc/pressure/ with the
  278. pressure statistics files cpu, memory, and io. These will indicate
  279. the share of walltime in which some or all tasks in the system are
  280. delayed due to contention of the respective resource.
  281. In kernels with cgroup support, cgroups (cgroup2 only) will
  282. have cpu.pressure, memory.pressure, and io.pressure files,
  283. which aggregate pressure stalls for the grouped tasks only.
  284. For more details see Documentation/accounting/psi.rst.
  285. Say N if unsure.
  286. config KERNEL_KALLSYMS
  287. bool "Compile the kernel with symbol table information"
  288. default y if !SMALL_FLASH
  289. help
  290. This will give you more information in stack traces from kernel oopses.
  291. config KERNEL_FTRACE
  292. bool "Compile the kernel with tracing support"
  293. depends on !TARGET_uml
  294. config KERNEL_FTRACE_SYSCALLS
  295. bool "Trace system calls"
  296. depends on KERNEL_FTRACE
  297. config KERNEL_ENABLE_DEFAULT_TRACERS
  298. bool "Trace process context switches and events"
  299. depends on KERNEL_FTRACE
  300. config KERNEL_FUNCTION_TRACER
  301. bool "Function tracer"
  302. depends on KERNEL_FTRACE
  303. config KERNEL_FUNCTION_GRAPH_TRACER
  304. bool "Function graph tracer"
  305. depends on KERNEL_FUNCTION_TRACER
  306. config KERNEL_DYNAMIC_FTRACE
  307. bool "Enable/disable function tracing dynamically"
  308. depends on KERNEL_FUNCTION_TRACER
  309. config KERNEL_FUNCTION_PROFILER
  310. bool "Function profiler"
  311. depends on KERNEL_FUNCTION_TRACER
  312. config KERNEL_IRQSOFF_TRACER
  313. bool "Interrupts-off Latency Tracer"
  314. depends on KERNEL_FTRACE
  315. help
  316. This option measures the time spent in irqs-off critical
  317. sections, with microsecond accuracy.
  318. The default measurement method is a maximum search, which is
  319. disabled by default and can be runtime (re-)started
  320. via:
  321. echo 0 > /sys/kernel/debug/tracing/tracing_max_latency
  322. (Note that kernel size and overhead increase with this option
  323. enabled. This option and the preempt-off timing option can be
  324. used together or separately.)
  325. config KERNEL_PREEMPT_TRACER
  326. bool "Preemption-off Latency Tracer"
  327. depends on KERNEL_FTRACE
  328. help
  329. This option measures the time spent in preemption-off critical
  330. sections, with microsecond accuracy.
  331. The default measurement method is a maximum search, which is
  332. disabled by default and can be runtime (re-)started
  333. via:
  334. echo 0 > /sys/kernel/debug/tracing/tracing_max_latency
  335. (Note that kernel size and overhead increase with this option
  336. enabled. This option and the irqs-off timing option can be
  337. used together or separately.)
  338. config KERNEL_HIST_TRIGGERS
  339. bool "Histogram triggers"
  340. depends on KERNEL_FTRACE
  341. help
  342. Hist triggers allow one or more arbitrary trace event fields to be
  343. aggregated into hash tables and dumped to stdout by reading a
  344. debugfs/tracefs file. They're useful for gathering quick and dirty
  345. (though precise) summaries of event activity as an initial guide for
  346. further investigation using more advanced tools.
  347. Inter-event tracing of quantities such as latencies is also
  348. supported using hist triggers under this option.
  349. config KERNEL_DEBUG_KERNEL
  350. bool
  351. config KERNEL_DEBUG_INFO
  352. bool "Compile the kernel with debug information"
  353. default y if !SMALL_FLASH
  354. select KERNEL_DEBUG_KERNEL
  355. help
  356. This will compile your kernel and modules with debug information.
  357. config KERNEL_DEBUG_INFO_BTF
  358. bool "Enable additional BTF type information"
  359. depends on !HOST_OS_MACOS
  360. depends on KERNEL_DEBUG_INFO && !KERNEL_DEBUG_INFO_REDUCED
  361. select DWARVES
  362. help
  363. Generate BPF Type Format (BTF) information from DWARF debug info.
  364. Turning this on expects presence of pahole tool, which will convert
  365. DWARF type info into equivalent deduplicated BTF type info.
  366. Required to run BPF CO-RE applications.
  367. config KERNEL_DEBUG_INFO_BTF_MODULES
  368. def_bool y
  369. depends on KERNEL_DEBUG_INFO_BTF
  370. config KERNEL_MODULE_ALLOW_BTF_MISMATCH
  371. bool "Allow loading modules with non-matching BTF type info"
  372. depends on KERNEL_DEBUG_INFO_BTF_MODULES
  373. help
  374. For modules whose split BTF does not match vmlinux, load without
  375. BTF rather than refusing to load. The default behavior with
  376. module BTF enabled is to reject modules with such mismatches;
  377. this option will still load module BTF where possible but ignore
  378. it when a mismatch is found.
  379. config KERNEL_DEBUG_INFO_REDUCED
  380. bool "Reduce debugging information"
  381. default y
  382. depends on KERNEL_DEBUG_INFO
  383. help
  384. If you say Y here gcc is instructed to generate less debugging
  385. information for structure types. This means that tools that
  386. need full debugging information (like kgdb or systemtap) won't
  387. be happy. But if you merely need debugging information to
  388. resolve line numbers there is no loss. Advantage is that
  389. build directory object sizes shrink dramatically over a full
  390. DEBUG_INFO build and compile times are reduced too.
  391. Only works with newer gcc versions.
  392. config KERNEL_FRAME_WARN
  393. int
  394. range 0 8192
  395. default 1280 if KERNEL_KASAN && !ARCH_64BIT
  396. default 1024 if !ARCH_64BIT
  397. default 2048 if ARCH_64BIT
  398. help
  399. Tell the compiler to warn at build time for stack frames larger than this.
  400. Setting this too low will cause a lot of warnings.
  401. Setting it to 0 disables the warning.
  402. # KERNEL_DEBUG_LL symbols must have the default value set as otherwise
  403. # KConfig wont evaluate them unless KERNEL_EARLY_PRINTK is selected
  404. # which means that buildroot wont override the DEBUG_LL symbols in target
  405. # kernel configurations and lead to devices that dont have working console
  406. config KERNEL_DEBUG_LL
  407. bool
  408. default n
  409. depends on arm
  410. help
  411. ARM low level debugging.
  412. config KERNEL_DEBUG_VIRTUAL
  413. bool "Compile the kernel with VM translations debugging"
  414. select KERNEL_DEBUG_KERNEL
  415. help
  416. Enable checks sanity checks to catch invalid uses of
  417. virt_to_phys()/phys_to_virt() against the non-linear address space.
  418. config KERNEL_DYNAMIC_DEBUG
  419. bool "Compile the kernel with dynamic printk"
  420. select KERNEL_DEBUG_FS
  421. help
  422. Compiles debug level messages into the kernel, which would not
  423. otherwise be available at runtime. These messages can then be
  424. enabled/disabled based on various levels of scope - per source file,
  425. function, module, format string, and line number. This mechanism
  426. implicitly compiles in all pr_debug() and dev_dbg() calls, which
  427. enlarges the kernel text size by about 2%.
  428. config KERNEL_EARLY_PRINTK
  429. bool "Compile the kernel with early printk"
  430. default y if TARGET_bcm53xx
  431. depends on arm
  432. select KERNEL_DEBUG_KERNEL
  433. select KERNEL_DEBUG_LL if arm
  434. help
  435. Compile the kernel with early printk support. This is only useful for
  436. debugging purposes to send messages over the serial console in early boot.
  437. Enable this to debug early boot problems.
  438. config KERNEL_KPROBES
  439. bool "Compile the kernel with kprobes support"
  440. select KERNEL_FTRACE
  441. select KERNEL_PERF_EVENTS
  442. help
  443. Compiles the kernel with KPROBES support, which allows you to trap
  444. at almost any kernel address and execute a callback function.
  445. register_kprobe() establishes a probepoint and specifies the
  446. callback. Kprobes is useful for kernel debugging, non-intrusive
  447. instrumentation and testing.
  448. If in doubt, say "N".
  449. config KERNEL_KPROBE_EVENTS
  450. bool
  451. default y if KERNEL_KPROBES
  452. config KERNEL_BPF_EVENTS
  453. bool "Compile the kernel with BPF event support"
  454. select KERNEL_KPROBES
  455. help
  456. Allows to attach BPF programs to kprobe, uprobe and tracepoint events.
  457. This is required to use BPF maps of type BPF_MAP_TYPE_PERF_EVENT_ARRAY
  458. for sending data from BPF programs to user-space for post-processing
  459. or logging.
  460. config KERNEL_PROBE_EVENTS_BTF_ARGS
  461. bool "Support BTF function arguments for probe events"
  462. depends on KERNEL_DEBUG_INFO_BTF && KERNEL_KPROBE_EVENTS
  463. config KERNEL_BPF_KPROBE_OVERRIDE
  464. bool
  465. depends on KERNEL_KPROBES
  466. default n
  467. config KERNEL_AIO
  468. bool "Compile the kernel with asynchronous IO support"
  469. default y if !SMALL_FLASH
  470. config KERNEL_IO_URING
  471. bool "Compile the kernel with io_uring support"
  472. depends on !SMALL_FLASH
  473. default y if (x86_64 || aarch64)
  474. config KERNEL_FHANDLE
  475. bool "Compile the kernel with support for fhandle syscalls"
  476. default y if !SMALL_FLASH
  477. config KERNEL_FANOTIFY
  478. bool "Compile the kernel with modern file notification support"
  479. default y if !SMALL_FLASH
  480. config KERNEL_BLK_DEV_BSG
  481. bool "Compile the kernel with SCSI generic v4 support for any block device"
  482. config KERNEL_TRANSPARENT_HUGEPAGE
  483. bool
  484. choice
  485. prompt "Transparent Hugepage Support sysfs defaults"
  486. depends on KERNEL_TRANSPARENT_HUGEPAGE
  487. default KERNEL_TRANSPARENT_HUGEPAGE_ALWAYS
  488. config KERNEL_TRANSPARENT_HUGEPAGE_ALWAYS
  489. bool "always"
  490. config KERNEL_TRANSPARENT_HUGEPAGE_MADVISE
  491. bool "madvise"
  492. config KERNEL_TRANSPARENT_HUGEPAGE_NEVER
  493. bool "never"
  494. depends on !LINUX_6_6
  495. endchoice
  496. config KERNEL_ARM64_CONTPTE
  497. bool "Compile the kernel with Contiguous PTE mappings for user memory"
  498. depends on KERNEL_ARM64
  499. depends on KERNEL_TRANSPARENT_HUGEPAGE
  500. depends on !LINUX_6_6
  501. default y
  502. config KERNEL_HUGETLBFS
  503. bool
  504. config KERNEL_HUGETLB_PAGE
  505. bool "Compile the kernel with HugeTLB support"
  506. select KERNEL_TRANSPARENT_HUGEPAGE
  507. select KERNEL_HUGETLBFS
  508. config KERNEL_MAGIC_SYSRQ
  509. bool "Compile the kernel with SysRq support"
  510. default y
  511. config KERNEL_DEBUG_PINCTRL
  512. bool "Compile the kernel with pinctrl debugging"
  513. select KERNEL_DEBUG_KERNEL
  514. config KERNEL_DEBUG_GPIO
  515. bool "Compile the kernel with gpio debugging"
  516. select KERNEL_DEBUG_KERNEL
  517. config KERNEL_COREDUMP
  518. bool
  519. config KERNEL_ELF_CORE
  520. bool "Enable process core dump support"
  521. select KERNEL_COREDUMP
  522. default y if !SMALL_FLASH
  523. config KERNEL_PROVE_LOCKING
  524. bool "Enable kernel lock checking"
  525. select KERNEL_DEBUG_KERNEL
  526. config KERNEL_SOFTLOCKUP_DETECTOR
  527. bool "Compile the kernel with detect Soft Lockups"
  528. depends on KERNEL_DEBUG_KERNEL
  529. help
  530. Say Y here to enable the kernel to act as a watchdog to detect
  531. soft lockups.
  532. Softlockups are bugs that cause the kernel to loop in kernel
  533. mode for more than 20 seconds, without giving other tasks a
  534. chance to run. The current stack trace is displayed upon
  535. detection and the system will stay locked up.
  536. config KERNEL_HARDLOCKUP_DETECTOR
  537. bool "Compile the kernel with detect Hard Lockups"
  538. depends on KERNEL_DEBUG_KERNEL
  539. help
  540. Say Y here to enable the kernel to act as a watchdog to detect
  541. hard lockups.
  542. Hardlockups are bugs that cause the CPU to loop in kernel mode
  543. for more than 10 seconds, without letting other interrupts have a
  544. chance to run. The current stack trace is displayed upon detection
  545. and the system will stay locked up.
  546. config KERNEL_DETECT_HUNG_TASK
  547. bool "Compile the kernel with detect Hung Tasks"
  548. depends on KERNEL_DEBUG_KERNEL
  549. default KERNEL_SOFTLOCKUP_DETECTOR
  550. help
  551. Say Y here to enable the kernel to detect "hung tasks",
  552. which are bugs that cause the task to be stuck in
  553. uninterruptible "D" state indefinitely.
  554. When a hung task is detected, the kernel will print the
  555. current stack trace (which you should report), but the
  556. task will stay in uninterruptible state. If lockdep is
  557. enabled then all held locks will also be reported. This
  558. feature has negligible overhead.
  559. config KERNEL_WQ_WATCHDOG
  560. bool "Compile the kernel with detect Workqueue Stalls"
  561. depends on KERNEL_DEBUG_KERNEL
  562. help
  563. Say Y here to enable stall detection on workqueues. If a
  564. worker pool doesn't make forward progress on a pending work
  565. item for over a given amount of time, 30s by default, a
  566. warning message is printed along with dump of workqueue
  567. state. This can be configured through kernel parameter
  568. "workqueue.watchdog_thresh" and its sysfs counterpart.
  569. config KERNEL_DEBUG_ATOMIC_SLEEP
  570. bool "Compile the kernel with sleep inside atomic section checking"
  571. depends on KERNEL_DEBUG_KERNEL
  572. help
  573. If you say Y here, various routines which may sleep will become very
  574. noisy if they are called inside atomic sections: when a spinlock is
  575. held, inside an rcu read side critical section, inside preempt disabled
  576. sections, inside an interrupt, etc...
  577. config KERNEL_DEBUG_VM
  578. bool "Compile the kernel with debug VM"
  579. depends on KERNEL_DEBUG_KERNEL
  580. help
  581. Enable this to turn on extended checks in the virtual-memory system
  582. that may impact performance.
  583. If unsure, say N.
  584. config KERNEL_PRINTK_TIME
  585. bool "Enable printk timestamps"
  586. default y
  587. config KERNEL_SLUB_DEBUG
  588. bool "Enable SLUB debugging support"
  589. help
  590. This enables various debugging features:
  591. - Accepts "slub_debug" kernel parameter
  592. - Provides caches debugging options (e.g. tracing, validating)
  593. - Adds /sys/kernel/slab/ attrs for reading amounts of *objects*
  594. - Enables /proc/slabinfo support
  595. - Prints info when running out of memory
  596. Enabling this can result in a significant increase of code size.
  597. config KERNEL_SLUB_DEBUG_ON
  598. depends on KERNEL_SLUB_DEBUG
  599. bool "Boot kernel with basic caches debugging enabled"
  600. help
  601. This enables by default sanity_checks, red_zone, poison and store_user
  602. debugging options for all caches.
  603. config KERNEL_STACKDEPOT_MAX_FRAMES
  604. int
  605. default 64
  606. depends on KERNEL_SLUB_DEBUG
  607. config KERNEL_PROC_PAGE_MONITOR
  608. bool "Enable /proc page monitoring"
  609. config KERNEL_RELAY
  610. bool
  611. config KERNEL_KEXEC
  612. bool "Enable kexec support"
  613. config KERNEL_PROC_VMCORE
  614. bool
  615. config KERNEL_PROC_KCORE
  616. bool
  617. config KERNEL_CRASH_DUMP
  618. depends on i386 || x86_64 || arm || armeb
  619. select KERNEL_KEXEC
  620. select KERNEL_PROC_VMCORE
  621. select KERNEL_PROC_KCORE
  622. bool "Enable support for kexec crashdump"
  623. default y
  624. config USE_RFKILL
  625. bool "Enable rfkill support"
  626. default RFKILL_SUPPORT
  627. config USE_SPARSE
  628. bool "Enable sparse check during kernel build"
  629. config KERNEL_DEVTMPFS
  630. bool "Compile the kernel with device tmpfs enabled"
  631. help
  632. devtmpfs is a simple, kernel-managed /dev filesystem. The kernel creates
  633. devices nodes for all registered devices to simplify boot, but leaves more
  634. complex tasks to userspace (e.g. udev).
  635. if KERNEL_DEVTMPFS
  636. config KERNEL_DEVTMPFS_MOUNT
  637. bool "Automatically mount devtmpfs after root filesystem is mounted"
  638. endif
  639. config KERNEL_KEYS
  640. bool "Enable kernel access key retention support"
  641. default !SMALL_FLASH
  642. config KERNEL_PERSISTENT_KEYRINGS
  643. bool "Enable kernel persistent keyrings"
  644. depends on KERNEL_KEYS
  645. config KERNEL_KEYS_REQUEST_CACHE
  646. bool "Enable temporary caching of the last request_key() result"
  647. depends on KERNEL_KEYS
  648. config KERNEL_BIG_KEYS
  649. bool "Enable large payload keys on kernel keyrings"
  650. depends on KERNEL_KEYS
  651. #
  652. # CGROUP support symbols
  653. #
  654. config KERNEL_CGROUPS
  655. bool "Enable kernel cgroups"
  656. default y if !SMALL_FLASH
  657. if KERNEL_CGROUPS
  658. config KERNEL_CGROUP_DEBUG
  659. bool "Example debug cgroup subsystem"
  660. help
  661. This option enables a simple cgroup subsystem that
  662. exports useful debugging information about the cgroups
  663. framework.
  664. config KERNEL_FREEZER
  665. bool
  666. config KERNEL_CGROUP_FREEZER
  667. bool "legacy Freezer cgroup subsystem"
  668. select KERNEL_FREEZER
  669. help
  670. Provides a way to freeze and unfreeze all tasks in a
  671. cgroup.
  672. (legacy cgroup1-only controller, in cgroup2 freezer
  673. is integrated in the Memory controller)
  674. config KERNEL_CGROUP_DEVICE
  675. bool "legacy Device controller for cgroups"
  676. help
  677. Provides a cgroup implementing whitelists for devices which
  678. a process in the cgroup can mknod or open.
  679. (legacy cgroup1-only controller)
  680. config KERNEL_CGROUP_HUGETLB
  681. bool "HugeTLB controller"
  682. select KERNEL_HUGETLB_PAGE
  683. config KERNEL_CGROUP_PIDS
  684. bool "PIDs cgroup subsystem"
  685. default y
  686. help
  687. Provides enforcement of process number limits in the scope of a
  688. cgroup.
  689. config KERNEL_CGROUP_RDMA
  690. bool "RDMA controller for cgroups"
  691. default y
  692. config KERNEL_CGROUP_BPF
  693. bool "Support for eBPF programs attached to cgroups"
  694. default y
  695. config KERNEL_CPUSETS
  696. bool "Cpuset support"
  697. default y
  698. help
  699. This option will let you create and manage CPUSETs which
  700. allow dynamically partitioning a system into sets of CPUs and
  701. Memory Nodes and assigning tasks to run only within those sets.
  702. This is primarily useful on large SMP or NUMA systems.
  703. config KERNEL_CPUSETS_V1
  704. bool "Legacy cgroup v1 cpusets controller"
  705. depends on KERNEL_CPUSETS
  706. depends on !LINUX_6_6
  707. default n
  708. help
  709. Legacy cgroup v1 cpusets controller which has been deprecated by
  710. cgroup v2 implementation. The v1 is there for legacy applications
  711. which haven't migrated to the new cgroup v2 interface yet. If you
  712. do not have any such application then you are completely fine leaving
  713. this option disabled.
  714. config KERNEL_PROC_PID_CPUSET
  715. bool "Include legacy /proc/<pid>/cpuset file"
  716. depends on KERNEL_CPUSETS
  717. config KERNEL_CGROUP_CPUACCT
  718. bool "Simple CPU accounting cgroup subsystem"
  719. default y
  720. help
  721. Provides a simple Resource Controller for monitoring the
  722. total CPU consumed by the tasks in a cgroup.
  723. config KERNEL_MEMCG
  724. bool "Memory Resource Controller for Control Groups"
  725. default y
  726. select KERNEL_FREEZER
  727. help
  728. Provides a memory resource controller that manages both anonymous
  729. memory and page cache. (See Documentation/cgroups/memory.txt)
  730. Note that setting this option increases fixed memory overhead
  731. associated with each page of memory in the system. By this,
  732. 20(40)bytes/PAGE_SIZE on 32(64)bit system will be occupied by memory
  733. usage tracking struct at boot. Total amount of this is printed out
  734. at boot.
  735. Only enable when you're ok with these tradeoffs and really
  736. sure you need the memory resource controller. Even when you enable
  737. this, you can set "cgroup_disable=memory" at your boot option to
  738. disable memory resource controller and you can avoid overheads
  739. (but lose benefits of memory resource controller).
  740. This config option also selects MM_OWNER config option, which
  741. could in turn add some fork/exit overhead.
  742. config KERNEL_MEMCG_KMEM
  743. bool "Memory Resource Controller Kernel Memory accounting (EXPERIMENTAL)"
  744. default y
  745. depends on KERNEL_MEMCG
  746. help
  747. The Kernel Memory extension for Memory Resource Controller can limit
  748. the amount of memory used by kernel objects in the system. Those are
  749. fundamentally different from the entities handled by the standard
  750. Memory Controller, which are page-based, and can be swapped. Users of
  751. the kmem extension can use it to guarantee that no group of processes
  752. will ever exhaust kernel resources alone.
  753. config KERNEL_MEMCG_V1
  754. bool "Legacy cgroup v1 memory controller"
  755. default n
  756. depends on KERNEL_MEMCG
  757. depends on !LINUX_6_6
  758. help
  759. Legacy cgroup v1 memory controller which has been deprecated by
  760. cgroup v2 implementation. The v1 is there for legacy applications
  761. which haven't migrated to the new cgroup v2 interface yet. If you
  762. do not have any such application then you are completely fine leaving
  763. this option disabled.
  764. Please note that feature set of the legacy memory controller is likely
  765. going to shrink due to deprecation process. New deployments with v1
  766. controller are highly discouraged.
  767. config KERNEL_CGROUP_PERF
  768. bool "Enable perf_event per-cpu per-container group (cgroup) monitoring"
  769. select KERNEL_PERF_EVENTS
  770. help
  771. This option extends the per-cpu mode to restrict monitoring to
  772. threads which belong to the cgroup specified and run on the
  773. designated cpu.
  774. menuconfig KERNEL_CGROUP_SCHED
  775. bool "Group CPU scheduler"
  776. default y
  777. help
  778. This feature lets CPU scheduler recognize task groups and control CPU
  779. bandwidth allocation to such task groups. It uses cgroups to group
  780. tasks.
  781. if KERNEL_CGROUP_SCHED
  782. config KERNEL_FAIR_GROUP_SCHED
  783. bool "Group scheduling for SCHED_OTHER"
  784. default y
  785. config KERNEL_CFS_BANDWIDTH
  786. bool "CPU bandwidth provisioning for FAIR_GROUP_SCHED"
  787. default y
  788. depends on KERNEL_FAIR_GROUP_SCHED
  789. help
  790. This option allows users to define CPU bandwidth rates (limits) for
  791. tasks running within the fair group scheduler. Groups with no limit
  792. set are considered to be unconstrained and will run with no
  793. restriction.
  794. See tip/Documentation/scheduler/sched-bwc.txt for more information.
  795. config KERNEL_RT_GROUP_SCHED
  796. bool "Group scheduling for SCHED_RR/FIFO"
  797. default y
  798. help
  799. This feature lets you explicitly allocate real CPU bandwidth
  800. to task groups. If enabled, it will also make it impossible to
  801. schedule realtime tasks for non-root users until you allocate
  802. realtime bandwidth for them.
  803. endif
  804. config KERNEL_BLK_CGROUP
  805. bool "Block IO controller"
  806. default y
  807. help
  808. Generic block IO controller cgroup interface. This is the common
  809. cgroup interface which should be used by various IO controlling
  810. policies.
  811. Currently, CFQ IO scheduler uses it to recognize task groups and
  812. control disk bandwidth allocation (proportional time slice allocation)
  813. to such task groups. It is also used by bio throttling logic in
  814. block layer to implement upper limit in IO rates on a device.
  815. This option only enables generic Block IO controller infrastructure.
  816. One needs to also enable actual IO controlling logic/policy. For
  817. enabling proportional weight division of disk bandwidth in CFQ, set
  818. CONFIG_CFQ_GROUP_IOSCHED=y; for enabling throttling policy, set
  819. CONFIG_BLK_DEV_THROTTLING=y.
  820. if KERNEL_BLK_CGROUP
  821. config KERNEL_CFQ_GROUP_IOSCHED
  822. bool "Proportional weight of disk bandwidth in CFQ"
  823. config KERNEL_BLK_DEV_THROTTLING
  824. bool "Enable throttling policy"
  825. default y
  826. config KERNEL_BLK_DEV_THROTTLING_LOW
  827. bool "Block throttling .low limit interface support (EXPERIMENTAL)"
  828. depends on KERNEL_BLK_DEV_THROTTLING
  829. endif
  830. config KERNEL_DEBUG_BLK_CGROUP
  831. bool "Enable Block IO controller debugging"
  832. depends on KERNEL_BLK_CGROUP
  833. help
  834. Enable some debugging help. Currently it exports additional stat
  835. files in a cgroup which can be useful for debugging.
  836. config KERNEL_NET_CLS_CGROUP
  837. bool "legacy Control Group Classifier"
  838. config KERNEL_CGROUP_NET_CLASSID
  839. bool "legacy Network classid cgroup"
  840. config KERNEL_CGROUP_NET_PRIO
  841. bool "legacy Network priority cgroup"
  842. endif
  843. #
  844. # Namespace support symbols
  845. #
  846. config KERNEL_NAMESPACES
  847. bool "Enable kernel namespaces"
  848. default y if !SMALL_FLASH
  849. if KERNEL_NAMESPACES
  850. config KERNEL_UTS_NS
  851. bool "UTS namespace"
  852. default y
  853. help
  854. In this namespace, tasks see different info provided
  855. with the uname() system call.
  856. config KERNEL_IPC_NS
  857. bool "IPC namespace"
  858. default y
  859. help
  860. In this namespace, tasks work with IPC ids which correspond to
  861. different IPC objects in different namespaces.
  862. config KERNEL_USER_NS
  863. bool "User namespace (EXPERIMENTAL)"
  864. default y
  865. help
  866. This allows containers, i.e. vservers, to use user namespaces
  867. to provide different user info for different servers.
  868. config KERNEL_PID_NS
  869. bool "PID Namespaces"
  870. default y
  871. help
  872. Support process id namespaces. This allows having multiple
  873. processes with the same pid as long as they are in different
  874. pid namespaces. This is a building block of containers.
  875. config KERNEL_NET_NS
  876. bool "Network namespace"
  877. default y
  878. help
  879. Allow user space to create what appear to be multiple instances
  880. of the network stack.
  881. endif
  882. config KERNEL_POSIX_MQUEUE
  883. bool "POSIX Message Queues"
  884. default y if !SMALL_FLASH
  885. help
  886. POSIX variant of message queues is a part of IPC. In POSIX message
  887. queues every message has a priority which decides about succession
  888. of receiving it by a process. If you want to compile and run
  889. programs written e.g. for Solaris with use of its POSIX message
  890. queues (functions mq_*) say Y here.
  891. POSIX message queues are visible as a filesystem called 'mqueue'
  892. and can be mounted somewhere if you want to do filesystem
  893. operations on message queues.
  894. config KERNEL_SECCOMP_FILTER
  895. bool
  896. default y if !SMALL_FLASH
  897. config KERNEL_SECCOMP
  898. bool "Enable seccomp support"
  899. depends on !(TARGET_uml)
  900. select KERNEL_SECCOMP_FILTER
  901. default y if !SMALL_FLASH
  902. help
  903. Build kernel with support for seccomp.
  904. #
  905. # IPv4 configuration
  906. #
  907. config KERNEL_IP_MROUTE
  908. bool "Enable IPv4 multicast routing"
  909. default y
  910. help
  911. Multicast routing requires a multicast routing daemon in
  912. addition to kernel support.
  913. if KERNEL_IP_MROUTE
  914. config KERNEL_IP_MROUTE_MULTIPLE_TABLES
  915. def_bool y
  916. config KERNEL_IP_PIMSM_V1
  917. def_bool y
  918. config KERNEL_IP_PIMSM_V2
  919. def_bool y
  920. endif
  921. #
  922. # IPv6 configuration
  923. #
  924. config KERNEL_IPV6
  925. def_bool IPV6
  926. if KERNEL_IPV6
  927. config KERNEL_IPV6_MULTIPLE_TABLES
  928. def_bool y
  929. config KERNEL_IPV6_SUBTREES
  930. def_bool y
  931. config KERNEL_IPV6_MROUTE
  932. bool "Enable IPv6 multicast routing"
  933. default y
  934. help
  935. Multicast routing requires a multicast routing daemon in
  936. addition to kernel support.
  937. if KERNEL_IPV6_MROUTE
  938. config KERNEL_IPV6_MROUTE_MULTIPLE_TABLES
  939. def_bool y
  940. config KERNEL_IPV6_PIMSM_V2
  941. def_bool y
  942. endif
  943. config KERNEL_IPV6_SEG6_LWTUNNEL
  944. bool "Enable support for lightweight tunnels"
  945. default y if !SMALL_FLASH
  946. help
  947. Using lwtunnel (needed for IPv6 segment routing) requires ip-full package.
  948. config KERNEL_LWTUNNEL_BPF
  949. def_bool n
  950. endif
  951. #
  952. # Miscellaneous network configuration
  953. #
  954. config KERNEL_NET_L3_MASTER_DEV
  955. bool "L3 Master device support"
  956. default y if !SMALL_FLASH
  957. help
  958. This module provides glue between core networking code and device
  959. drivers to support L3 master devices like VRF.
  960. Increases the compressed kernel size by ~4kB (as of Linux 6.6).
  961. config KERNEL_DCB
  962. bool "Data Center Bridging support"
  963. default y if TARGET_armsr_armv8
  964. default y if TARGET_x86_64
  965. help
  966. This enables support for configuring Data Center Bridging (DCB)
  967. features on DCB capable Ethernet adapters via rtnetlink. Say 'Y'
  968. if you have a DCB capable Ethernet adapter which supports this
  969. interface and you are connected to a DCB capable switch.
  970. DCB is a collection of Ethernet enhancements which allow DCB capable
  971. NICs and switches to support network traffic with differing
  972. requirements (highly reliable, no drops vs. best effort vs. low
  973. latency) to co-exist on Ethernet.
  974. DCB features include:
  975. Enhanced Transmission Selection (aka Priority Grouping) - provides a
  976. framework for assigning bandwidth guarantees to traffic classes.
  977. Priority-based Flow Control (PFC) - a MAC control pause frame which
  978. works at the granularity of the 802.1p priority instead of the
  979. link (802.3x).
  980. config KERNEL_XDP_SOCKETS
  981. bool "XDP sockets support"
  982. help
  983. XDP sockets allows a channel between XDP programs and
  984. userspace applications.
  985. config KERNEL_PAGE_POOL
  986. def_bool n
  987. config KERNEL_PAGE_POOL_STATS
  988. bool "Page pool stats support"
  989. depends on KERNEL_PAGE_POOL
  990. config KERNEL_MPTCP
  991. bool "Multi-Path TCP support"
  992. default y if !SMALL_FLASH
  993. help
  994. Select this option to enable support for Multi-Path TCP.
  995. Increases the compressed kernel size by ~214kB (as of Linux 6.6).
  996. if KERNEL_IPV6
  997. config KERNEL_MPTCP_IPV6
  998. bool "IPv6 support for Multipath TCP"
  999. depends on KERNEL_MPTCP
  1000. default KERNEL_MPTCP
  1001. endif
  1002. config KERNEL_NF_CONNTRACK_TIMEOUT
  1003. bool "Per-connection connection tracking timeout"
  1004. default y if !SMALL_FLASH
  1005. help
  1006. Select this option to enable support for per-connection conntrack timeouts.
  1007. Increases the (uncompressed) size of nf_conntrack.ko by ~8kB.
  1008. #
  1009. # NFS related symbols
  1010. #
  1011. config KERNEL_IP_PNP
  1012. bool "Compile the kernel with rootfs on NFS"
  1013. help
  1014. If you want to make your kernel boot off a NFS server as root
  1015. filesystem, select Y here.
  1016. if KERNEL_IP_PNP
  1017. config KERNEL_IP_PNP_DHCP
  1018. def_bool y
  1019. config KERNEL_IP_PNP_BOOTP
  1020. def_bool n
  1021. config KERNEL_IP_PNP_RARP
  1022. def_bool n
  1023. config KERNEL_NFS_FS
  1024. def_bool y
  1025. config KERNEL_NFS_V2
  1026. def_bool y
  1027. config KERNEL_NFS_V3
  1028. def_bool y
  1029. config KERNEL_ROOT_NFS
  1030. def_bool y
  1031. endif
  1032. config KERNEL_BTRFS_FS
  1033. bool "Compile the kernel with built-in BTRFS support"
  1034. help
  1035. Say Y here if you want to make the kernel to be able to boot off a
  1036. BTRFS partition.
  1037. config KERNEL_EROFS_FS
  1038. bool "Compile the kernel with built-in EROFS support"
  1039. help
  1040. Say Y here if you want to make the kernel to be able to boot off a
  1041. EROFS partition.
  1042. config KERNEL_EROFS_FS_XATTR
  1043. bool "EROFS XATTR support"
  1044. config KERNEL_EROFS_FS_ZIP
  1045. bool
  1046. default y if KERNEL_EROFS_FS
  1047. config KERNEL_EROFS_FS_ZIP_LZMA
  1048. bool
  1049. default y if KERNEL_EROFS_FS
  1050. menu "Filesystem ACL and attr support options"
  1051. config USE_FS_ACL_ATTR
  1052. bool "Use filesystem ACL and attr support by default"
  1053. default y if !SMALL_FLASH
  1054. help
  1055. Make using ACLs (e.g. POSIX ACL, NFSv4 ACL) the default
  1056. for kernel and packages, except old NFS.
  1057. Also enable userspace extended attribute support
  1058. by default. (OpenWrt already has an expection it will be
  1059. present in the kernel).
  1060. config KERNEL_FS_POSIX_ACL
  1061. bool "Enable POSIX ACL support"
  1062. default y if USE_FS_ACL_ATTR
  1063. config KERNEL_BTRFS_FS_POSIX_ACL
  1064. bool "Enable POSIX ACL for BtrFS Filesystems"
  1065. select KERNEL_FS_POSIX_ACL
  1066. default y if USE_FS_ACL_ATTR
  1067. config KERNEL_EROFS_FS_POSIX_ACL
  1068. bool "Enable POSIX ACL for EROFS Filesystems"
  1069. select KERNEL_FS_POSIX_ACL
  1070. default y if USE_FS_ACL_ATTR
  1071. config KERNEL_EXT4_FS_POSIX_ACL
  1072. bool "Enable POSIX ACL for Ext4 Filesystems"
  1073. select KERNEL_FS_POSIX_ACL
  1074. default y if USE_FS_ACL_ATTR
  1075. config KERNEL_F2FS_FS_POSIX_ACL
  1076. bool "Enable POSIX ACL for F2FS Filesystems"
  1077. select KERNEL_FS_POSIX_ACL
  1078. default y if USE_FS_ACL_ATTR
  1079. config KERNEL_JFFS2_FS_POSIX_ACL
  1080. bool "Enable POSIX ACL for JFFS2 Filesystems"
  1081. select KERNEL_FS_POSIX_ACL
  1082. default y if USE_FS_ACL_ATTR
  1083. config KERNEL_TMPFS_POSIX_ACL
  1084. bool "Enable POSIX ACL for TMPFS Filesystems"
  1085. select KERNEL_FS_POSIX_ACL
  1086. default y if USE_FS_ACL_ATTR
  1087. config KERNEL_CIFS_ACL
  1088. bool "Enable CIFS ACLs"
  1089. select KERNEL_FS_POSIX_ACL
  1090. default y if USE_FS_ACL_ATTR
  1091. config KERNEL_HFS_FS_POSIX_ACL
  1092. bool "Enable POSIX ACL for HFS Filesystems"
  1093. select KERNEL_FS_POSIX_ACL
  1094. default y if USE_FS_ACL_ATTR
  1095. config KERNEL_HFSPLUS_FS_POSIX_ACL
  1096. bool "Enable POSIX ACL for HFS+ Filesystems"
  1097. select KERNEL_FS_POSIX_ACL
  1098. default y if USE_FS_ACL_ATTR
  1099. config KERNEL_NFS_ACL_SUPPORT
  1100. bool "Enable ACLs for NFS"
  1101. default y if USE_FS_ACL_ATTR
  1102. config KERNEL_NFS_V3_ACL_SUPPORT
  1103. bool "Enable ACLs for NFSv3"
  1104. config KERNEL_NFSD_V2_ACL_SUPPORT
  1105. bool "Enable ACLs for NFSDv2"
  1106. config KERNEL_NFSD_V3_ACL_SUPPORT
  1107. bool "Enable ACLs for NFSDv3"
  1108. config KERNEL_REISER_FS_POSIX_ACL
  1109. bool "Enable POSIX ACLs for ReiserFS"
  1110. select KERNEL_FS_POSIX_ACL
  1111. default y if USE_FS_ACL_ATTR
  1112. config KERNEL_XFS_POSIX_ACL
  1113. bool "Enable POSIX ACLs for XFS"
  1114. select KERNEL_FS_POSIX_ACL
  1115. default y if USE_FS_ACL_ATTR
  1116. config KERNEL_JFS_POSIX_ACL
  1117. bool "Enable POSIX ACLs for JFS"
  1118. select KERNEL_FS_POSIX_ACL
  1119. default y if USE_FS_ACL_ATTR
  1120. endmenu
  1121. config KERNEL_DEVMEM
  1122. bool "/dev/mem virtual device support"
  1123. help
  1124. Say Y here if you want to support the /dev/mem device.
  1125. The /dev/mem device is used to access areas of physical
  1126. memory.
  1127. config KERNEL_SQUASHFS_FRAGMENT_CACHE_SIZE
  1128. int "Number of squashfs fragments cached"
  1129. default 2 if (SMALL_FLASH && !LOW_MEMORY_FOOTPRINT)
  1130. default 3
  1131. config KERNEL_SQUASHFS_XATTR
  1132. bool "Squashfs XATTR support"
  1133. #
  1134. # compile optimization setting
  1135. #
  1136. choice
  1137. prompt "Compiler optimization level"
  1138. default KERNEL_CC_OPTIMIZE_FOR_SIZE if SMALL_FLASH
  1139. config KERNEL_CC_OPTIMIZE_FOR_PERFORMANCE
  1140. bool "Optimize for performance"
  1141. help
  1142. This is the default optimization level for the kernel, building
  1143. with the "-O2" compiler flag for best performance and most
  1144. helpful compile-time warnings.
  1145. config KERNEL_CC_OPTIMIZE_FOR_SIZE
  1146. bool "Optimize for size"
  1147. help
  1148. Enabling this option will pass "-Os" instead of "-O2" to
  1149. your compiler resulting in a smaller kernel.
  1150. endchoice
  1151. config KERNEL_AUDIT
  1152. bool "Auditing support"
  1153. config KERNEL_SECURITY
  1154. bool "Enable different security models"
  1155. config KERNEL_SECURITY_NETWORK
  1156. bool "Socket and Networking Security Hooks"
  1157. select KERNEL_SECURITY
  1158. config KERNEL_SECURITY_SELINUX
  1159. bool "NSA SELinux Support"
  1160. select KERNEL_SECURITY_NETWORK
  1161. select KERNEL_AUDIT
  1162. config KERNEL_SECURITY_SELINUX_BOOTPARAM
  1163. bool "NSA SELinux boot parameter"
  1164. depends on KERNEL_SECURITY_SELINUX
  1165. default y
  1166. config KERNEL_SECURITY_SELINUX_DEVELOP
  1167. bool "NSA SELinux Development Support"
  1168. depends on KERNEL_SECURITY_SELINUX
  1169. default y
  1170. config KERNEL_SECURITY_SELINUX_SIDTAB_HASH_BITS
  1171. int
  1172. depends on KERNEL_SECURITY_SELINUX
  1173. default 9
  1174. config KERNEL_SECURITY_SELINUX_SID2STR_CACHE_SIZE
  1175. int
  1176. depends on KERNEL_SECURITY_SELINUX
  1177. default 256
  1178. config KERNEL_LSM
  1179. string
  1180. default "lockdown,yama,loadpin,safesetid,integrity,selinux"
  1181. depends on KERNEL_SECURITY_SELINUX
  1182. config KERNEL_EROFS_FS_SECURITY
  1183. bool "EROFS Security Labels"
  1184. default y if !SMALL_FLASH
  1185. select KERNEL_EROFS_FS_XATTR
  1186. config KERNEL_EXT4_FS_SECURITY
  1187. bool "Ext4 Security Labels"
  1188. default y if !SMALL_FLASH
  1189. config KERNEL_F2FS_FS_SECURITY
  1190. bool "F2FS Security Labels"
  1191. default y if !SMALL_FLASH
  1192. config KERNEL_UBIFS_FS_SECURITY
  1193. bool "UBIFS Security Labels"
  1194. default y if !SMALL_FLASH
  1195. config KERNEL_JFFS2_FS_SECURITY
  1196. bool "JFFS2 Security Labels"
  1197. default y if !SMALL_FLASH
  1198. config KERNEL_WERROR
  1199. bool "Compile the kernel with warnings as errors"
  1200. help
  1201. A kernel build should not cause any compiler warnings, and this
  1202. enables the '-Werror' (for C) and '-Dwarnings' (for Rust) flags
  1203. to enforce that rule by default. Certain warnings from other tools
  1204. such as the linker may be upgraded to errors with this option as
  1205. well.
  1206. However, if you have a new (or very old) compiler or linker with odd
  1207. and unusual warnings, or you have some architecture with problems,
  1208. you may need to disable this config option in order to
  1209. successfully build the kernel.