diff --git a/.gitignore b/.gitignore index 672633a..be87846 100644 --- a/.gitignore +++ b/.gitignore @@ -22,3 +22,4 @@ nogit/ *.tar.sign *.tar.xz *.patch.zst* +*.pkg.tar diff --git a/config-6.14.3.patch b/config-6.14.3.patch new file mode 100644 index 0000000..0614bd9 --- /dev/null +++ b/config-6.14.3.patch @@ -0,0 +1,1772 @@ +--- ../config 2025-04-24 19:07:17.509411596 +0000 ++++ .config 2025-04-25 19:33:54.246447345 +0000 +@@ -33,7 +33,7 @@ + # + CONFIG_INIT_ENV_ARG_LIMIT=32 + # CONFIG_COMPILE_TEST is not set +-# CONFIG_WERROR is not set ++CONFIG_WERROR=y + CONFIG_LOCALVERSION="" + CONFIG_LOCALVERSION_AUTO=y + CONFIG_BUILD_SALT="" +@@ -52,13 +52,13 @@ + # CONFIG_KERNEL_LZ4 is not set + CONFIG_KERNEL_ZSTD=y + CONFIG_DEFAULT_INIT="" +-CONFIG_DEFAULT_HOSTNAME="archlinux" ++CONFIG_DEFAULT_HOSTNAME="orange" + CONFIG_SYSVIPC=y + CONFIG_SYSVIPC_SYSCTL=y + CONFIG_SYSVIPC_COMPAT=y + CONFIG_POSIX_MQUEUE=y + CONFIG_POSIX_MQUEUE_SYSCTL=y +-CONFIG_WATCH_QUEUE=y ++# CONFIG_WATCH_QUEUE is not set + CONFIG_CROSS_MEMORY_ATTACH=y + # CONFIG_USELIB is not set + CONFIG_AUDIT=y +@@ -83,7 +83,6 @@ + CONFIG_IRQ_MSI_IOMMU=y + CONFIG_GENERIC_IRQ_MATRIX_ALLOCATOR=y + CONFIG_GENERIC_IRQ_RESERVATION_MODE=y +-CONFIG_GENERIC_IRQ_STAT_SNAPSHOT=y + CONFIG_IRQ_FORCED_THREADING=y + CONFIG_SPARSE_IRQ=y + # CONFIG_GENERIC_IRQ_DEBUGFS is not set +@@ -112,7 +111,7 @@ + CONFIG_NO_HZ_FULL=y + CONFIG_CONTEXT_TRACKING_USER=y + # CONFIG_CONTEXT_TRACKING_USER_FORCE is not set +-CONFIG_NO_HZ=y ++# CONFIG_NO_HZ is not set + CONFIG_HIGH_RES_TIMERS=y + CONFIG_CLOCKSOURCE_WATCHDOG_MAX_SKEW_US=100 + # end of Timers subsystem +@@ -137,21 +136,21 @@ + CONFIG_ARCH_HAS_PREEMPT_LAZY=y + # CONFIG_PREEMPT_NONE is not set + # CONFIG_PREEMPT_VOLUNTARY is not set +-CONFIG_PREEMPT=y +-# CONFIG_PREEMPT_LAZY is not set ++# CONFIG_PREEMPT is not set ++CONFIG_PREEMPT_LAZY=y ++# CONFIG_PREEMPT_RT is not set + CONFIG_PREEMPT_COUNT=y + CONFIG_PREEMPTION=y +-CONFIG_PREEMPT_DYNAMIC=y +-CONFIG_SCHED_CORE=y +-CONFIG_SCHED_CLASS_EXT=y ++# CONFIG_PREEMPT_DYNAMIC is not set ++# CONFIG_SCHED_CORE is not set ++# CONFIG_SCHED_CLASS_EXT is not set + + # + # CPU/Task time and stats accounting + # + CONFIG_VIRT_CPU_ACCOUNTING=y + CONFIG_VIRT_CPU_ACCOUNTING_GEN=y +-CONFIG_IRQ_TIME_ACCOUNTING=y +-CONFIG_HAVE_SCHED_AVG_IRQ=y ++# CONFIG_IRQ_TIME_ACCOUNTING is not set + CONFIG_BSD_PROCESS_ACCT=y + CONFIG_BSD_PROCESS_ACCT_V3=y + CONFIG_TASKSTATS=y +@@ -169,45 +168,32 @@ + # + CONFIG_TREE_RCU=y + CONFIG_PREEMPT_RCU=y +-CONFIG_RCU_EXPERT=y ++# CONFIG_RCU_EXPERT is not set + CONFIG_TREE_SRCU=y + CONFIG_TASKS_RCU_GENERIC=y +-# CONFIG_FORCE_TASKS_RCU is not set + CONFIG_NEED_TASKS_RCU=y + CONFIG_TASKS_RCU=y +-# CONFIG_FORCE_TASKS_RUDE_RCU is not set + CONFIG_TASKS_RUDE_RCU=y +-# CONFIG_FORCE_TASKS_TRACE_RCU is not set + CONFIG_TASKS_TRACE_RCU=y + CONFIG_RCU_STALL_COMMON=y + CONFIG_RCU_NEED_SEGCBLIST=y +-CONFIG_RCU_FANOUT=64 +-CONFIG_RCU_FANOUT_LEAF=16 +-CONFIG_RCU_BOOST=y +-CONFIG_RCU_BOOST_DELAY=500 +-# CONFIG_RCU_EXP_KTHREAD is not set + CONFIG_RCU_NOCB_CPU=y + # CONFIG_RCU_NOCB_CPU_DEFAULT_ALL is not set +-# CONFIG_RCU_NOCB_CPU_CB_BOOST is not set +-# CONFIG_TASKS_TRACE_RCU_READ_MB is not set + CONFIG_RCU_LAZY=y + # CONFIG_RCU_LAZY_DEFAULT_OFF is not set +-CONFIG_RCU_DOUBLE_CHECK_CB_TIME=y + # end of RCU Subsystem + +-CONFIG_IKCONFIG=y +-CONFIG_IKCONFIG_PROC=y +-CONFIG_IKHEADERS=m ++# CONFIG_IKCONFIG is not set ++# CONFIG_IKHEADERS is not set + CONFIG_LOG_BUF_SHIFT=17 + CONFIG_LOG_CPU_MAX_BUF_SHIFT=12 +-CONFIG_PRINTK_INDEX=y ++# CONFIG_PRINTK_INDEX is not set + CONFIG_HAVE_UNSTABLE_SCHED_CLOCK=y + + # + # Scheduler features + # +-CONFIG_UCLAMP_TASK=y +-CONFIG_UCLAMP_BUCKETS_COUNT=5 ++# CONFIG_UCLAMP_TASK is not set + # end of Scheduler features + + CONFIG_ARCH_SUPPORTS_NUMA_BALANCING=y +@@ -219,8 +205,6 @@ + CONFIG_GCC_NO_STRINGOP_OVERFLOW=y + CONFIG_CC_NO_STRINGOP_OVERFLOW=y + CONFIG_ARCH_SUPPORTS_INT128=y +-CONFIG_NUMA_BALANCING=y +-CONFIG_NUMA_BALANCING_DEFAULT_ENABLED=y + CONFIG_SLAB_OBJ_EXT=y + CONFIG_CGROUPS=y + CONFIG_PAGE_COUNTER=y +@@ -234,9 +218,7 @@ + CONFIG_FAIR_GROUP_SCHED=y + CONFIG_CFS_BANDWIDTH=y + # CONFIG_RT_GROUP_SCHED is not set +-CONFIG_EXT_GROUP_SCHED=y + CONFIG_SCHED_MM_CID=y +-CONFIG_UCLAMP_TASK_GROUP=y + CONFIG_CGROUP_PIDS=y + CONFIG_CGROUP_RDMA=y + CONFIG_CGROUP_DMEM=y +@@ -265,12 +247,12 @@ + CONFIG_RELAY=y + CONFIG_BLK_DEV_INITRD=y + CONFIG_INITRAMFS_SOURCE="" +-CONFIG_RD_GZIP=y +-CONFIG_RD_BZIP2=y +-CONFIG_RD_LZMA=y +-CONFIG_RD_XZ=y +-CONFIG_RD_LZO=y +-CONFIG_RD_LZ4=y ++# CONFIG_RD_GZIP is not set ++# CONFIG_RD_BZIP2 is not set ++# CONFIG_RD_LZMA is not set ++# CONFIG_RD_XZ is not set ++# CONFIG_RD_LZO is not set ++# CONFIG_RD_LZ4 is not set + CONFIG_RD_ZSTD=y + CONFIG_BOOT_CONFIG=y + # CONFIG_BOOT_CONFIG_FORCE is not set +@@ -279,22 +261,23 @@ + CONFIG_CC_OPTIMIZE_FOR_PERFORMANCE=y + # CONFIG_CC_OPTIMIZE_FOR_SIZE is not set + CONFIG_LD_ORPHAN_WARN=y +-CONFIG_LD_ORPHAN_WARN_LEVEL="warn" ++CONFIG_LD_ORPHAN_WARN_LEVEL="error" + CONFIG_SYSCTL=y + CONFIG_HAVE_UID16=y + CONFIG_SYSCTL_EXCEPTION_TRACE=y + CONFIG_HAVE_PCSPKR_PLATFORM=y +-# CONFIG_EXPERT is not set ++CONFIG_EXPERT=y + CONFIG_UID16=y + CONFIG_MULTIUSER=y + CONFIG_SGETMASK_SYSCALL=y +-CONFIG_SYSFS_SYSCALL=y ++# CONFIG_SYSFS_SYSCALL is not set + CONFIG_FHANDLE=y + CONFIG_POSIX_TIMERS=y + CONFIG_PRINTK=y + CONFIG_BUG=y + CONFIG_ELF_CORE=y +-CONFIG_PCSPKR_PLATFORM=y ++# CONFIG_PCSPKR_PLATFORM is not set ++# CONFIG_BASE_SMALL is not set + CONFIG_FUTEX=y + CONFIG_FUTEX_PI=y + CONFIG_EPOLL=y +@@ -308,10 +291,12 @@ + CONFIG_MEMBARRIER=y + CONFIG_KCMP=y + CONFIG_RSEQ=y ++# CONFIG_DEBUG_RSEQ is not set + CONFIG_CACHESTAT_SYSCALL=y ++# CONFIG_PC104 is not set + CONFIG_KALLSYMS=y + # CONFIG_KALLSYMS_SELFTEST is not set +-CONFIG_KALLSYMS_ALL=y ++# CONFIG_KALLSYMS_ALL is not set + CONFIG_KALLSYMS_ABSOLUTE_PERCPU=y + CONFIG_ARCH_HAS_MEMBARRIER_SYNC_CORE=y + CONFIG_HAVE_PERF_EVENTS=y +@@ -374,8 +359,7 @@ + CONFIG_X86_64_SMP=y + CONFIG_ARCH_SUPPORTS_UPROBES=y + CONFIG_FIX_EARLYCON_MEM=y +-CONFIG_DYNAMIC_PHYSICAL_MASK=y +-CONFIG_PGTABLE_LEVELS=5 ++CONFIG_PGTABLE_LEVELS=4 + CONFIG_CC_HAS_SANE_STACKPROTECTOR=y + + # +@@ -383,51 +367,28 @@ + # + CONFIG_SMP=y + CONFIG_X86_X2APIC=y +-CONFIG_X86_POSTED_MSI=y +-CONFIG_X86_MPPARSE=y ++# CONFIG_X86_POSTED_MSI is not set ++# CONFIG_X86_MPPARSE is not set + CONFIG_X86_CPU_RESCTRL=y + CONFIG_X86_FRED=y + # CONFIG_X86_EXTENDED_PLATFORM is not set + CONFIG_X86_INTEL_LPSS=y +-CONFIG_X86_AMD_PLATFORM_DEVICE=y ++# CONFIG_X86_AMD_PLATFORM_DEVICE is not set + CONFIG_IOSF_MBI=y + # CONFIG_IOSF_MBI_DEBUG is not set + CONFIG_X86_SUPPORTS_MEMORY_FAILURE=y + CONFIG_SCHED_OMIT_FRAME_POINTER=y +-CONFIG_HYPERVISOR_GUEST=y +-CONFIG_PARAVIRT=y +-CONFIG_PARAVIRT_XXL=y +-# CONFIG_PARAVIRT_DEBUG is not set +-CONFIG_PARAVIRT_SPINLOCKS=y +-CONFIG_X86_HV_CALLBACK_VECTOR=y +-CONFIG_XEN=y +-CONFIG_XEN_PV=y +-CONFIG_XEN_512GB=y +-CONFIG_XEN_PV_SMP=y +-CONFIG_XEN_PV_DOM0=y +-CONFIG_XEN_PVHVM=y +-CONFIG_XEN_PVHVM_SMP=y +-CONFIG_XEN_PVHVM_GUEST=y +-CONFIG_XEN_SAVE_RESTORE=y +-# CONFIG_XEN_DEBUG_FS is not set +-CONFIG_XEN_PVH=y +-CONFIG_XEN_DOM0=y +-CONFIG_XEN_PV_MSR_SAFE=y +-CONFIG_KVM_GUEST=y +-CONFIG_ARCH_CPUIDLE_HALTPOLL=y +-CONFIG_PVH=y +-CONFIG_PARAVIRT_TIME_ACCOUNTING=y +-CONFIG_PARAVIRT_CLOCK=y +-CONFIG_JAILHOUSE_GUEST=y +-CONFIG_ACRN_GUEST=y +-CONFIG_INTEL_TDX_GUEST=y ++# CONFIG_HYPERVISOR_GUEST is not set + # CONFIG_MK8 is not set + # CONFIG_MPSC is not set +-# CONFIG_MCORE2 is not set ++CONFIG_MCORE2=y + # CONFIG_MATOM is not set +-CONFIG_GENERIC_CPU=y ++# CONFIG_GENERIC_CPU is not set + CONFIG_X86_INTERNODE_CACHE_SHIFT=6 + CONFIG_X86_L1_CACHE_SHIFT=6 ++CONFIG_X86_INTEL_USERCOPY=y ++CONFIG_X86_USE_PPRO_CHECKSUM=y ++CONFIG_X86_P6_NOP=y + CONFIG_X86_TSC=y + CONFIG_X86_HAVE_PAE=y + CONFIG_X86_CMPXCHG64=y +@@ -436,73 +397,61 @@ + CONFIG_X86_DEBUGCTLMSR=y + CONFIG_IA32_FEAT_CTL=y + CONFIG_X86_VMX_FEATURE_NAMES=y ++CONFIG_PROCESSOR_SELECT=y + CONFIG_CPU_SUP_INTEL=y +-CONFIG_CPU_SUP_AMD=y +-CONFIG_CPU_SUP_HYGON=y +-CONFIG_CPU_SUP_CENTAUR=y +-CONFIG_CPU_SUP_ZHAOXIN=y ++# CONFIG_CPU_SUP_AMD is not set ++# CONFIG_CPU_SUP_HYGON is not set ++# CONFIG_CPU_SUP_CENTAUR is not set ++# CONFIG_CPU_SUP_ZHAOXIN is not set + CONFIG_HPET_TIMER=y + CONFIG_HPET_EMULATE_RTC=y + CONFIG_DMI=y +-# CONFIG_GART_IOMMU is not set + CONFIG_BOOT_VESA_SUPPORT=y +-CONFIG_MAXSMP=y +-CONFIG_NR_CPUS_RANGE_BEGIN=8192 +-CONFIG_NR_CPUS_RANGE_END=8192 +-CONFIG_NR_CPUS_DEFAULT=8192 +-CONFIG_NR_CPUS=8192 +-CONFIG_SCHED_CLUSTER=y ++# CONFIG_MAXSMP is not set ++CONFIG_NR_CPUS_RANGE_BEGIN=2 ++CONFIG_NR_CPUS_RANGE_END=512 ++CONFIG_NR_CPUS_DEFAULT=64 ++CONFIG_NR_CPUS=8 ++# CONFIG_SCHED_CLUSTER is not set + CONFIG_SCHED_SMT=y + CONFIG_SCHED_MC=y + CONFIG_SCHED_MC_PRIO=y + CONFIG_X86_LOCAL_APIC=y + CONFIG_ACPI_MADT_WAKEUP=y + CONFIG_X86_IO_APIC=y +-CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y ++# CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS is not set + CONFIG_X86_MCE=y + # CONFIG_X86_MCELOG_LEGACY is not set + CONFIG_X86_MCE_INTEL=y + CONFIG_X86_MCE_AMD=y + CONFIG_X86_MCE_THRESHOLD=y +-CONFIG_X86_MCE_INJECT=m ++# CONFIG_X86_MCE_INJECT is not set + + # + # Performance monitoring + # +-CONFIG_PERF_EVENTS_INTEL_UNCORE=m +-CONFIG_PERF_EVENTS_INTEL_RAPL=m +-CONFIG_PERF_EVENTS_INTEL_CSTATE=m +-CONFIG_PERF_EVENTS_AMD_POWER=m +-CONFIG_PERF_EVENTS_AMD_UNCORE=m +-CONFIG_PERF_EVENTS_AMD_BRS=y ++# CONFIG_PERF_EVENTS_INTEL_UNCORE is not set ++# CONFIG_PERF_EVENTS_INTEL_RAPL is not set ++# CONFIG_PERF_EVENTS_INTEL_CSTATE is not set + # end of Performance monitoring + +-CONFIG_X86_16BIT=y +-CONFIG_X86_ESPFIX64=y +-CONFIG_X86_VSYSCALL_EMULATION=y ++# CONFIG_X86_VSYSCALL_EMULATION is not set + CONFIG_X86_IOPL_IOPERM=y + CONFIG_MICROCODE=y + # CONFIG_MICROCODE_LATE_LOADING is not set + CONFIG_X86_MSR=y + CONFIG_X86_CPUID=y +-CONFIG_X86_5LEVEL=y ++# CONFIG_X86_5LEVEL is not set + CONFIG_X86_DIRECT_GBPAGES=y +-CONFIG_X86_CPA_STATISTICS=y +-CONFIG_X86_MEM_ENCRYPT=y +-CONFIG_AMD_MEM_ENCRYPT=y +-CONFIG_NUMA=y +-CONFIG_AMD_NUMA=y +-CONFIG_X86_64_ACPI_NUMA=y +-CONFIG_NODES_SHIFT=10 ++# CONFIG_X86_CPA_STATISTICS is not set ++# CONFIG_NUMA is not set + CONFIG_ARCH_SPARSEMEM_ENABLE=y + CONFIG_ARCH_SPARSEMEM_DEFAULT=y + # CONFIG_ARCH_MEMORY_PROBE is not set + CONFIG_ARCH_PROC_KCORE_TEXT=y + CONFIG_ILLEGAL_POINTER_VALUE=0xdead000000000000 +-CONFIG_X86_PMEM_LEGACY_DEVICE=y +-CONFIG_X86_PMEM_LEGACY=m +-CONFIG_X86_CHECK_BIOS_CORRUPTION=y +-CONFIG_X86_BOOTPARAM_MEMORY_CORRUPTION_CHECK=y ++# CONFIG_X86_PMEM_LEGACY is not set ++# CONFIG_X86_CHECK_BIOS_CORRUPTION is not set + CONFIG_MTRR=y + CONFIG_MTRR_SANITIZER=y + CONFIG_MTRR_SANITIZER_ENABLE_DEFAULT=1 +@@ -511,24 +460,24 @@ + CONFIG_X86_UMIP=y + CONFIG_CC_HAS_IBT=y + CONFIG_X86_CET=y +-CONFIG_X86_KERNEL_IBT=y ++# CONFIG_X86_KERNEL_IBT is not set + CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y + CONFIG_ARCH_PKEY_BITS=4 + # CONFIG_X86_INTEL_TSX_MODE_OFF is not set + # CONFIG_X86_INTEL_TSX_MODE_ON is not set + CONFIG_X86_INTEL_TSX_MODE_AUTO=y +-CONFIG_X86_SGX=y ++# CONFIG_X86_SGX is not set + CONFIG_X86_USER_SHADOW_STACK=y + CONFIG_EFI=y + CONFIG_EFI_STUB=y +-CONFIG_EFI_HANDOVER_PROTOCOL=y +-CONFIG_EFI_MIXED=y ++# CONFIG_EFI_HANDOVER_PROTOCOL is not set ++# CONFIG_EFI_MIXED is not set + CONFIG_EFI_RUNTIME_MAP=y + # CONFIG_HZ_100 is not set + # CONFIG_HZ_250 is not set +-# CONFIG_HZ_300 is not set +-CONFIG_HZ_1000=y +-CONFIG_HZ=1000 ++CONFIG_HZ_300=y ++# CONFIG_HZ_1000 is not set ++CONFIG_HZ=300 + CONFIG_SCHED_HRTICK=y + CONFIG_ARCH_SUPPORTS_KEXEC=y + CONFIG_ARCH_SUPPORTS_KEXEC_FILE=y +@@ -555,11 +504,10 @@ + CONFIG_LEGACY_VSYSCALL_XONLY=y + # CONFIG_LEGACY_VSYSCALL_NONE is not set + # CONFIG_CMDLINE_BOOL is not set +-CONFIG_MODIFY_LDT_SYSCALL=y ++# CONFIG_MODIFY_LDT_SYSCALL is not set + # CONFIG_STRICT_SIGALTSTACK_SIZE is not set + CONFIG_HAVE_LIVEPATCH=y +-# CONFIG_LIVEPATCH is not set +-CONFIG_X86_BUS_LOCK_DETECT=y ++# CONFIG_X86_BUS_LOCK_DETECT is not set + # end of Processor type and features + + CONFIG_CC_HAS_NAMED_AS=y +@@ -578,12 +526,9 @@ + CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y + CONFIG_MITIGATION_RETPOLINE=y + CONFIG_MITIGATION_RETHUNK=y +-CONFIG_MITIGATION_UNRET_ENTRY=y + CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y + # CONFIG_CALL_THUNKS_DEBUG is not set +-CONFIG_MITIGATION_IBPB_ENTRY=y + CONFIG_MITIGATION_IBRS_ENTRY=y +-CONFIG_MITIGATION_SRSO=y + CONFIG_MITIGATION_SLS=y + CONFIG_MITIGATION_GDS=y + CONFIG_MITIGATION_RFDS=y +@@ -605,6 +550,7 @@ + CONFIG_ARCH_HIBERNATION_HEADER=y + CONFIG_SUSPEND=y + CONFIG_SUSPEND_FREEZER=y ++# CONFIG_SUSPEND_SKIP_SYNC is not set + CONFIG_HIBERNATE_CALLBACKS=y + CONFIG_HIBERNATION=y + CONFIG_HIBERNATION_SNAPSHOT_DEV=y +@@ -622,6 +568,7 @@ + # CONFIG_PM_ADVANCED_DEBUG is not set + # CONFIG_PM_TEST_SUSPEND is not set + CONFIG_PM_SLEEP_DEBUG=y ++# CONFIG_DPM_WATCHDOG is not set + CONFIG_PM_TRACE=y + CONFIG_PM_TRACE_RTC=y + CONFIG_PM_CLK=y +@@ -634,7 +581,6 @@ + CONFIG_ACPI_LEGACY_TABLES_LOOKUP=y + CONFIG_ARCH_MIGHT_HAVE_ACPI_PDC=y + CONFIG_ACPI_SYSTEM_POWER_STATES_SUPPORT=y +-CONFIG_ACPI_TABLE_LIB=y + CONFIG_ACPI_THERMAL_LIB=y + # CONFIG_ACPI_DEBUGGER is not set + CONFIG_ACPI_SPCR_TABLE=y +@@ -671,11 +617,10 @@ + CONFIG_ACPI_SBS=m + CONFIG_ACPI_HED=y + CONFIG_ACPI_BGRT=y ++# CONFIG_ACPI_REDUCED_HARDWARE_ONLY is not set + CONFIG_ACPI_NHLT=y + CONFIG_ACPI_NFIT=m + # CONFIG_NFIT_SECURITY_DEBUG is not set +-CONFIG_ACPI_NUMA=y +-CONFIG_ACPI_HMAT=y + CONFIG_HAVE_ACPI_APEI=y + CONFIG_HAVE_ACPI_APEI_NMI=y + CONFIG_ACPI_APEI=y +@@ -734,9 +679,7 @@ + CONFIG_X86_AMD_PSTATE_DEFAULT_MODE=3 + CONFIG_X86_AMD_PSTATE_UT=m + CONFIG_X86_ACPI_CPUFREQ=m +-CONFIG_X86_ACPI_CPUFREQ_CPB=y + CONFIG_X86_POWERNOW_K8=m +-CONFIG_X86_AMD_FREQ_SENSITIVITY=m + # CONFIG_X86_SPEEDSTEP_CENTRINO is not set + CONFIG_X86_P4_CLOCKMOD=m + +@@ -753,8 +696,6 @@ + CONFIG_CPU_IDLE_GOV_LADDER=y + CONFIG_CPU_IDLE_GOV_MENU=y + CONFIG_CPU_IDLE_GOV_TEO=y +-CONFIG_CPU_IDLE_GOV_HALTPOLL=y +-CONFIG_HALTPOLL_CPUIDLE=m + # end of CPU Idle + + CONFIG_INTEL_IDLE=y +@@ -765,11 +706,10 @@ + # + CONFIG_PCI_DIRECT=y + CONFIG_PCI_MMCONFIG=y +-CONFIG_PCI_XEN=y + CONFIG_MMCONF_FAM10H=y ++# CONFIG_PCI_CNB20LE_QUIRK is not set ++# CONFIG_ISA_BUS is not set + CONFIG_ISA_DMA_API=y +-CONFIG_AMD_NB=y +-CONFIG_AMD_NODE=y + # end of Bus options (PCI etc.) + + # +@@ -806,21 +746,17 @@ + CONFIG_KVM_GENERIC_HARDWARE_ENABLING=y + CONFIG_KVM_GENERIC_MMU_NOTIFIER=y + CONFIG_KVM_ELIDE_TLB_FLUSH_IF_YOUNG=y +-CONFIG_KVM_GENERIC_MEMORY_ATTRIBUTES=y +-CONFIG_KVM_PRIVATE_MEM=y +-CONFIG_KVM_GENERIC_PRIVATE_MEM=y +-CONFIG_HAVE_KVM_ARCH_GMEM_PREPARE=y +-CONFIG_HAVE_KVM_ARCH_GMEM_INVALIDATE=y + CONFIG_VIRTUALIZATION=y + CONFIG_KVM_X86=m + CONFIG_KVM=m ++CONFIG_KVM_WERROR=y ++# CONFIG_KVM_SW_PROTECTED_VM is not set + CONFIG_KVM_INTEL=m +-CONFIG_X86_SGX_KVM=y +-CONFIG_KVM_AMD=m +-CONFIG_KVM_AMD_SEV=y ++# CONFIG_KVM_INTEL_PROVE_VE is not set + CONFIG_KVM_SMM=y + CONFIG_KVM_HYPERV=y + CONFIG_KVM_XEN=y ++# CONFIG_KVM_PROVE_MMU is not set + CONFIG_KVM_EXTERNAL_WRITE_TRACKING=y + CONFIG_KVM_MAX_NR_VCPUS=1024 + CONFIG_AS_AVX512=y +@@ -832,7 +768,6 @@ + CONFIG_AS_VPCLMULQDQ=y + CONFIG_AS_WRUSS=y + CONFIG_ARCH_CONFIGURES_CPU_MITIGATIONS=y +-CONFIG_ARCH_HAS_DMA_OPS=y + + # + # General architecture-dependent options +@@ -974,7 +909,6 @@ + CONFIG_ARCH_USE_MEMREMAP_PROT=y + CONFIG_LOCK_EVENT_COUNTS=y + CONFIG_ARCH_HAS_MEM_ENCRYPT=y +-CONFIG_ARCH_HAS_CC_PLATFORM=y + CONFIG_HAVE_STATIC_CALL=y + CONFIG_HAVE_STATIC_CALL_INLINE=y + CONFIG_HAVE_PREEMPT_DYNAMIC=y +@@ -985,7 +919,6 @@ + CONFIG_ARCH_HAS_ELFCORE_COMPAT=y + CONFIG_ARCH_HAS_PARANOID_L1D_FLUSH=y + CONFIG_DYNAMIC_SIGFRAME=y +-CONFIG_HAVE_ARCH_NODE_DEV_GROUP=y + CONFIG_ARCH_HAS_HW_PTE_YOUNG=y + CONFIG_ARCH_HAS_NONLEAF_PMD_YOUNG=y + CONFIG_ARCH_HAS_KERNEL_FPU_SUPPORT=y +@@ -1161,6 +1094,7 @@ + # Slab allocator options + # + CONFIG_SLUB=y ++# CONFIG_SLUB_TINY is not set + CONFIG_SLAB_MERGE_DEFAULT=y + CONFIG_SLAB_FREELIST_RANDOM=y + CONFIG_SLAB_FREELIST_HARDENED=y +@@ -1179,7 +1113,6 @@ + CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=y + CONFIG_ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP=y + CONFIG_HAVE_GUP_FAST=y +-CONFIG_NUMA_KEEP_MEMINFO=y + CONFIG_MEMORY_ISOLATION=y + CONFIG_EXCLUSIVE_SYSTEM_RAM=y + CONFIG_HAVE_BOOTMEM_INFO_NODE=y +@@ -1228,7 +1161,6 @@ + CONFIG_ARCH_SUPPORTS_PUD_PFNMAP=y + CONFIG_NEED_PER_CPU_EMBED_FIRST_CHUNK=y + CONFIG_NEED_PER_CPU_PAGE_FIRST_CHUNK=y +-CONFIG_USE_PERCPU_NUMA_NODE_ID=y + CONFIG_HAVE_SETUP_PER_CPU_AREA=y + CONFIG_CMA=y + CONFIG_CMA_DEBUGFS=y +@@ -1242,6 +1174,7 @@ + CONFIG_ARCH_HAS_CACHE_LINE_SIZE=y + CONFIG_ARCH_HAS_CURRENT_STACK_POINTER=y + CONFIG_ARCH_HAS_PTE_DEVMAP=y ++CONFIG_ARCH_HAS_ZONE_DMA_SET=y + CONFIG_ZONE_DMA=y + CONFIG_ZONE_DMA32=y + CONFIG_ZONE_DEVICE=y +@@ -1257,7 +1190,6 @@ + # CONFIG_GUP_TEST is not set + # CONFIG_DMAPOOL_TEST is not set + CONFIG_ARCH_HAS_PTE_SPECIAL=y +-CONFIG_MAPPING_DIRTY_HELPERS=y + CONFIG_MEMFD_CREATE=y + CONFIG_SECRETMEM=y + CONFIG_ANON_VMA_NAME=y +@@ -1274,8 +1206,6 @@ + CONFIG_LOCK_MM_AND_FIND_VMA=y + CONFIG_IOMMU_MM_DATA=y + CONFIG_EXECMEM=y +-CONFIG_NUMA_MEMBLKS=y +-# CONFIG_NUMA_EMU is not set + CONFIG_ARCH_HAS_USER_SHADOW_STACK=y + CONFIG_ARCH_SUPPORTS_PT_RECLAIM=y + CONFIG_PT_RECLAIM=y +@@ -2001,7 +1931,6 @@ + CONFIG_VMWARE_VMCI_VSOCKETS=m + CONFIG_VIRTIO_VSOCKETS=m + CONFIG_VIRTIO_VSOCKETS_COMMON=m +-CONFIG_HYPERV_VSOCKETS=m + CONFIG_NETLINK_DIAG=m + CONFIG_MPLS=y + CONFIG_NET_MPLS_GSO=m +@@ -2154,6 +2083,7 @@ + CONFIG_CFG80211=m + # CONFIG_NL80211_TESTMODE is not set + # CONFIG_CFG80211_DEVELOPER_WARNINGS is not set ++# CONFIG_CFG80211_CERTIFICATION_ONUS is not set + CONFIG_CFG80211_REQUIRE_SIGNED_REGDB=y + CONFIG_CFG80211_USE_KERNEL_REGDB_KEYS=y + CONFIG_CFG80211_DEFAULT_PS=y +@@ -2178,7 +2108,6 @@ + CONFIG_NET_9P=m + CONFIG_NET_9P_FD=m + CONFIG_NET_9P_VIRTIO=m +-CONFIG_NET_9P_XEN=m + CONFIG_NET_9P_USBG=m + CONFIG_NET_9P_RDMA=m + # CONFIG_NET_9P_DEBUG is not set +@@ -2276,7 +2205,6 @@ + # CONFIG_PCI_REALLOC_ENABLE_AUTO is not set + CONFIG_PCI_STUB=y + CONFIG_PCI_PF_STUB=m +-CONFIG_XEN_PCIDEV_FRONTEND=m + CONFIG_PCI_ATS=y + CONFIG_PCI_DOE=y + CONFIG_PCI_LOCKLESS_CONFIG=y +@@ -2287,7 +2215,11 @@ + CONFIG_PCIE_TPH=y + CONFIG_PCI_P2PDMA=y + CONFIG_PCI_LABEL=y +-CONFIG_PCI_HYPERV=m ++# CONFIG_PCIE_BUS_TUNE_OFF is not set ++CONFIG_PCIE_BUS_DEFAULT=y ++# CONFIG_PCIE_BUS_SAFE is not set ++# CONFIG_PCIE_BUS_PERFORMANCE is not set ++# CONFIG_PCIE_BUS_PEER2PEER is not set + CONFIG_VGA_ARB=y + CONFIG_VGA_ARB_MAX_GPUS=10 + CONFIG_HOTPLUG_PCI=y +@@ -2303,7 +2235,6 @@ + # PCI controller drivers + # + CONFIG_VMD=m +-CONFIG_PCI_HYPERV_INTERFACE=m + + # + # Cadence-based PCIe controllers +@@ -2346,7 +2277,6 @@ + CONFIG_CXL_BUS=m + CONFIG_CXL_PCI=m + # CONFIG_CXL_MEM_RAW_COMMANDS is not set +-CONFIG_CXL_ACPI=m + CONFIG_CXL_PMEM=m + CONFIG_CXL_MEM=m + CONFIG_CXL_PORT=m +@@ -2388,7 +2318,7 @@ + # + CONFIG_FW_LOADER=y + CONFIG_FW_LOADER_DEBUG=y +-CONFIG_RUST_FW_LOADER_ABSTRACTIONS=y ++# CONFIG_RUST_FW_LOADER_ABSTRACTIONS is not set + CONFIG_FW_LOADER_PAGED_BUF=y + CONFIG_FW_LOADER_SYSFS=y + CONFIG_EXTRA_FIRMWARE="" +@@ -2406,9 +2336,7 @@ + # CONFIG_DEBUG_DRIVER is not set + # CONFIG_DEBUG_DEVRES is not set + # CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set +-CONFIG_HMEM_REPORTING=y + # CONFIG_TEST_ASYNC_DRIVER_PROBE is not set +-CONFIG_SYS_HYPERVISOR=y + CONFIG_GENERIC_CPU_DEVICES=y + CONFIG_GENERIC_CPU_AUTOPROBE=y + CONFIG_GENERIC_CPU_VULNERABILITIES=y +@@ -2484,7 +2412,6 @@ + CONFIG_EFI_ESRT=y + CONFIG_EFI_VARS_PSTORE=y + CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE=y +-CONFIG_EFI_SOFT_RESERVE=y + CONFIG_EFI_DXE_MEM_ATTRIBUTES=y + CONFIG_EFI_RUNTIME_WRAPPERS=y + CONFIG_EFI_BOOTLOADER_CONTROL=m +@@ -2499,7 +2426,6 @@ + CONFIG_EFI_CUSTOM_SSDT_OVERLAYS=y + # CONFIG_EFI_DISABLE_RUNTIME is not set + CONFIG_EFI_COCO_SECRET=y +-CONFIG_UNACCEPTED_MEMORY=y + CONFIG_EFI_EMBEDDED_FIRMWARE=y + # end of EFI (Extensible Firmware Interface) Support + +@@ -2707,8 +2633,6 @@ + CONFIG_CDROM_PKTCDVD_BUFFERS=8 + # CONFIG_CDROM_PKTCDVD_WCACHE is not set + CONFIG_ATA_OVER_ETH=m +-CONFIG_XEN_BLKDEV_FRONTEND=m +-CONFIG_XEN_BLKDEV_BACKEND=m + CONFIG_VIRTIO_BLK=y + # CONFIG_BLK_DEV_RUST_NULL is not set + CONFIG_BLK_DEV_RBD=m +@@ -2772,7 +2696,6 @@ + CONFIG_SENSORS_APDS990X=m + CONFIG_HMC6352=m + CONFIG_DS1682=m +-CONFIG_VMWARE_BALLOON=m + CONFIG_LATTICE_ECP3_CONFIG=m + # CONFIG_SRAM is not set + CONFIG_DW_XDATA_PCIE=m +@@ -2920,8 +2843,6 @@ + CONFIG_SCSI_MYRB=m + CONFIG_SCSI_MYRS=m + CONFIG_VMWARE_PVSCSI=m +-CONFIG_XEN_SCSI_FRONTEND=m +-CONFIG_HYPERV_STORAGE=m + CONFIG_LIBFC=m + CONFIG_LIBFCOE=m + CONFIG_FCOE=m +@@ -3527,7 +3448,6 @@ + CONFIG_NET_VENDOR_MICROSEMI=y + CONFIG_MSCC_OCELOT_SWITCH_LIB=m + CONFIG_NET_VENDOR_MICROSOFT=y +-CONFIG_MICROSOFT_MANA=m + CONFIG_NET_VENDOR_MYRI=y + CONFIG_MYRI10GE=m + CONFIG_MYRI10GE_DCA=y +@@ -4284,12 +4204,9 @@ + CONFIG_MTK_T7XX=m + # end of Wireless WAN + +-CONFIG_XEN_NETDEV_FRONTEND=m +-CONFIG_XEN_NETDEV_BACKEND=m + CONFIG_VMXNET3=m + CONFIG_FUJITSU_ES=m + CONFIG_USB4_NET=m +-CONFIG_HYPERV_NET=m + CONFIG_NETDEVSIM=m + CONFIG_NET_FAILOVER=m + CONFIG_ISDN=y +@@ -4385,7 +4302,6 @@ + CONFIG_MOUSE_PS2_SENTELIC=y + CONFIG_MOUSE_PS2_TOUCHKIT=y + CONFIG_MOUSE_PS2_FOCALTECH=y +-CONFIG_MOUSE_PS2_VMMOUSE=y + CONFIG_MOUSE_PS2_SMBUS=y + CONFIG_MOUSE_SERIAL=m + CONFIG_MOUSE_APPLETOUCH=m +@@ -4563,7 +4479,6 @@ + CONFIG_INPUT_BMA150=m + # CONFIG_INPUT_CS40L50_VIBRA is not set + CONFIG_INPUT_E3X0_BUTTON=m +-CONFIG_INPUT_PCSPKR=m + CONFIG_INPUT_MAX77693_HAPTIC=m + CONFIG_INPUT_MAX8925_ONKEY=m + CONFIG_INPUT_MAX8997_HAPTIC=m +@@ -4609,7 +4524,6 @@ + CONFIG_INPUT_IQS7222=m + CONFIG_INPUT_CMA3000=m + CONFIG_INPUT_CMA3000_I2C=m +-CONFIG_INPUT_XEN_KBDDEV_FRONTEND=m + CONFIG_INPUT_IDEAPAD_SLIDEBAR=m + CONFIG_INPUT_SOC_BUTTON_ARRAY=m + CONFIG_INPUT_DRV260X_HAPTICS=m +@@ -4648,7 +4562,6 @@ + CONFIG_SERIO_ALTERA_PS2=m + CONFIG_SERIO_PS2MULT=m + CONFIG_SERIO_ARC_PS2=m +-CONFIG_HYPERV_KEYBOARD=m + CONFIG_SERIO_GPIO_PS2=m + CONFIG_USERIO=m + CONFIG_GAMEPORT=m +@@ -4742,12 +4655,10 @@ + CONFIG_NOZOMI=m + CONFIG_NULL_TTY=m + CONFIG_HVC_DRIVER=y +-CONFIG_HVC_IRQ=y +-CONFIG_HVC_XEN=y +-CONFIG_HVC_XEN_FRONTEND=y + CONFIG_RPMSG_TTY=m + CONFIG_SERIAL_DEV_BUS=y + CONFIG_SERIAL_DEV_CTRL_TTYPORT=y ++# CONFIG_TTY_PRINTK is not set + CONFIG_PRINTER=m + CONFIG_LP_CONSOLE=y + CONFIG_PPDEV=m +@@ -4795,7 +4706,6 @@ + CONFIG_TCG_NSC=m + CONFIG_TCG_ATMEL=m + CONFIG_TCG_INFINEON=m +-CONFIG_TCG_XEN=m + CONFIG_TCG_CRB=y + CONFIG_TCG_VTPM_PROXY=m + CONFIG_TCG_TIS_ST33ZP24=m +@@ -5001,13 +4911,11 @@ + CONFIG_PTP_1588_CLOCK_OPTIONAL=m + CONFIG_DP83640_PHY=m + CONFIG_PTP_1588_CLOCK_INES=m +-CONFIG_PTP_1588_CLOCK_KVM=m + CONFIG_PTP_1588_CLOCK_VMCLOCK=m + CONFIG_PTP_1588_CLOCK_IDT82P33=m + CONFIG_PTP_1588_CLOCK_IDTCM=m + CONFIG_PTP_1588_CLOCK_FC3W=m + CONFIG_PTP_1588_CLOCK_MOCK=m +-CONFIG_PTP_1588_CLOCK_VMW=m + CONFIG_PTP_1588_CLOCK_OCP=m + CONFIG_PTP_DFL_TOD=m + # end of PTP clock support +@@ -5068,6 +4976,7 @@ + CONFIG_GPIO_ACPI=y + CONFIG_GPIOLIB_IRQCHIP=y + # CONFIG_DEBUG_GPIO is not set ++# CONFIG_GPIO_SYSFS is not set + CONFIG_GPIO_CDEV=y + CONFIG_GPIO_CDEV_V1=y + CONFIG_GPIO_GENERIC=m +@@ -5196,6 +5105,7 @@ + # + # GPIO Debugging utilities + # ++# CONFIG_GPIO_SLOPPY_LOGIC_ANALYZER is not set + # CONFIG_GPIO_VIRTUSER is not set + # end of GPIO Debugging utilities + +@@ -5364,8 +5274,6 @@ + CONFIG_SENSORS_ASUS_ROG_RYUJIN=m + CONFIG_SENSORS_AXI_FAN_CONTROL=m + CONFIG_SENSORS_K8TEMP=m +-CONFIG_SENSORS_K10TEMP=m +-CONFIG_SENSORS_FAM15H_POWER=m + CONFIG_SENSORS_APPLESMC=m + CONFIG_SENSORS_ASB100=m + CONFIG_SENSORS_ATXP1=m +@@ -5752,7 +5660,6 @@ + CONFIG_NIC7018_WDT=m + CONFIG_SIEMENS_SIMATIC_IPC_WDT=m + CONFIG_MEN_A21_WDT=m +-CONFIG_XEN_WDT=m + + # + # PCI-based Watchdog Cards +@@ -6083,17 +5990,15 @@ + CONFIG_RC_XBOX_DVD=m + CONFIG_CEC_CORE=m + CONFIG_CEC_NOTIFIER=y +-CONFIG_CEC_PIN=y + + # + # CEC support + # + CONFIG_MEDIA_CEC_RC=y +-# CONFIG_CEC_PIN_ERROR_INJ is not set + CONFIG_MEDIA_CEC_SUPPORT=y + CONFIG_CEC_CH7322=m + CONFIG_CEC_CROS_EC=m +-CONFIG_CEC_GPIO=m ++# CONFIG_CEC_GPIO is not set + CONFIG_CEC_SECO=m + CONFIG_CEC_SECO_RC=y + CONFIG_USB_EXTRON_DA_HD_4K_PLUS_CEC=m +@@ -6565,8 +6470,6 @@ + CONFIG_VIDEOBUF2_DVB=m + # end of Media drivers + +-CONFIG_MEDIA_HIDE_ANCILLARY_SUBDRV=y +- + # + # Media ancillary drivers + # +@@ -6674,48 +6577,110 @@ + # end of Flash devices + + # +-# audio, video and radio I2C drivers auto-selected by 'Autoselect ancillary drivers' ++# Audio decoders, processors and mixers + # + CONFIG_VIDEO_CS3308=m + CONFIG_VIDEO_CS5345=m + CONFIG_VIDEO_CS53L32A=m + CONFIG_VIDEO_MSP3400=m + CONFIG_VIDEO_SONY_BTF_MPX=m ++# CONFIG_VIDEO_TDA1997X is not set + CONFIG_VIDEO_TDA7432=m + CONFIG_VIDEO_TDA9840=m + CONFIG_VIDEO_TEA6415C=m + CONFIG_VIDEO_TEA6420=m ++# CONFIG_VIDEO_TLV320AIC23B is not set + CONFIG_VIDEO_TVAUDIO=m + CONFIG_VIDEO_UDA1342=m + CONFIG_VIDEO_VP27SMPX=m + CONFIG_VIDEO_WM8739=m + CONFIG_VIDEO_WM8775=m ++# end of Audio decoders, processors and mixers ++ ++# ++# RDS decoders ++# + CONFIG_VIDEO_SAA6588=m ++# end of RDS decoders ++ ++# ++# Video decoders ++# ++# CONFIG_VIDEO_ADV7180 is not set ++# CONFIG_VIDEO_ADV7183 is not set ++# CONFIG_VIDEO_ADV7604 is not set ++# CONFIG_VIDEO_ADV7842 is not set ++# CONFIG_VIDEO_BT819 is not set ++# CONFIG_VIDEO_BT856 is not set ++# CONFIG_VIDEO_BT866 is not set ++# CONFIG_VIDEO_KS0127 is not set ++# CONFIG_VIDEO_ML86V7667 is not set ++# CONFIG_VIDEO_SAA7110 is not set + CONFIG_VIDEO_SAA711X=m ++# CONFIG_VIDEO_TC358743 is not set ++# CONFIG_VIDEO_TC358746 is not set ++# CONFIG_VIDEO_TVP514X is not set + CONFIG_VIDEO_TVP5150=m ++# CONFIG_VIDEO_TVP7002 is not set + CONFIG_VIDEO_TW2804=m ++# CONFIG_VIDEO_TW9900 is not set + CONFIG_VIDEO_TW9903=m + CONFIG_VIDEO_TW9906=m ++# CONFIG_VIDEO_TW9910 is not set ++# CONFIG_VIDEO_VPX3220 is not set + + # + # Video and audio decoders + # + CONFIG_VIDEO_SAA717X=m + CONFIG_VIDEO_CX25840=m ++# end of Video decoders ++ ++# ++# Video encoders ++# ++# CONFIG_VIDEO_ADV7170 is not set ++# CONFIG_VIDEO_ADV7175 is not set ++# CONFIG_VIDEO_ADV7343 is not set ++# CONFIG_VIDEO_ADV7393 is not set ++# CONFIG_VIDEO_ADV7511 is not set ++# CONFIG_VIDEO_AK881X is not set + CONFIG_VIDEO_SAA7127=m ++# CONFIG_VIDEO_SAA7185 is not set ++# CONFIG_VIDEO_THS8200 is not set ++# end of Video encoders ++ ++# ++# Video improvement chips ++# + CONFIG_VIDEO_UPD64031A=m + CONFIG_VIDEO_UPD64083=m ++# end of Video improvement chips ++ ++# ++# Audio/Video compression chips ++# + CONFIG_VIDEO_SAA6752HS=m +-CONFIG_VIDEO_M52790=m ++# end of Audio/Video compression chips + + # +-# Video serializers and deserializers ++# SDR tuner chips + # +-# end of Video serializers and deserializers ++# end of SDR tuner chips + + # +-# SPI I2C drivers auto-selected by 'Autoselect ancillary drivers' ++# Miscellaneous helper chips + # ++# CONFIG_VIDEO_I2C is not set ++CONFIG_VIDEO_M52790=m ++# CONFIG_VIDEO_ST_MIPID02 is not set ++# CONFIG_VIDEO_THS7303 is not set ++# end of Miscellaneous helper chips ++ ++# ++# Video serializers and deserializers ++# ++# end of Video serializers and deserializers + + # + # Media SPI Adapters +@@ -6727,7 +6692,7 @@ + CONFIG_MEDIA_TUNER=m + + # +-# Tuner drivers auto-selected by 'Autoselect ancillary drivers' ++# Customize TV tuners + # + CONFIG_MEDIA_TUNER_E4000=m + CONFIG_MEDIA_TUNER_FC0011=m +@@ -6738,6 +6703,7 @@ + CONFIG_MEDIA_TUNER_M88RS6000T=m + CONFIG_MEDIA_TUNER_MAX2165=m + CONFIG_MEDIA_TUNER_MC44S803=m ++# CONFIG_MEDIA_TUNER_MSI001 is not set + CONFIG_MEDIA_TUNER_MT2060=m + CONFIG_MEDIA_TUNER_MT2063=m + CONFIG_MEDIA_TUNER_MT20XX=m +@@ -6765,9 +6731,10 @@ + CONFIG_MEDIA_TUNER_XC2028=m + CONFIG_MEDIA_TUNER_XC4000=m + CONFIG_MEDIA_TUNER_XC5000=m ++# end of Customize TV tuners + + # +-# DVB Frontend drivers auto-selected by 'Autoselect ancillary drivers' ++# Customise DVB Frontends + # + + # +@@ -6835,6 +6802,7 @@ + CONFIG_DVB_DIB3000MC=m + CONFIG_DVB_DIB7000M=m + CONFIG_DVB_DIB7000P=m ++# CONFIG_DVB_DIB9000 is not set + CONFIG_DVB_DRXD=m + CONFIG_DVB_EC100=m + CONFIG_DVB_GP8PSK_FE=m +@@ -6843,6 +6811,7 @@ + CONFIG_DVB_NXT6000=m + CONFIG_DVB_RTL2830=m + CONFIG_DVB_RTL2832=m ++# CONFIG_DVB_S5H1432 is not set + CONFIG_DVB_SI2168=m + CONFIG_DVB_SP887X=m + CONFIG_DVB_STV0367=m +@@ -6850,6 +6819,7 @@ + CONFIG_DVB_TDA1004X=m + CONFIG_DVB_ZD1301_DEMOD=m + CONFIG_DVB_ZL10353=m ++# CONFIG_DVB_CXD2880 is not set + + # + # DVB-C (cable) frontends +@@ -6887,6 +6857,7 @@ + # + # ISDB-S (satellite) & ISDB-T (terrestrial) frontends + # ++# CONFIG_DVB_MN88443X is not set + CONFIG_DVB_TC90522=m + + # +@@ -6909,8 +6880,10 @@ + CONFIG_DVB_ISL6421=m + CONFIG_DVB_ISL6423=m + CONFIG_DVB_IX2505V=m ++# CONFIG_DVB_LGS8GL5 is not set + CONFIG_DVB_LGS8GXX=m + CONFIG_DVB_LNBH25=m ++# CONFIG_DVB_LNBH29 is not set + CONFIG_DVB_LNBP21=m + CONFIG_DVB_LNBP22=m + CONFIG_DVB_M88RS2000=m +@@ -6922,6 +6895,7 @@ + # + CONFIG_DVB_CXD2099=m + CONFIG_DVB_SP2=m ++# end of Customise DVB Frontends + + # + # Tools to develop new frontends +@@ -6938,7 +6912,6 @@ + # CONFIG_AUXDISPLAY is not set + # CONFIG_PANEL is not set + CONFIG_AGP=y +-CONFIG_AGP_AMD64=m + CONFIG_AGP_INTEL=m + CONFIG_AGP_SIS=m + CONFIG_AGP_VIA=m +@@ -6955,9 +6928,9 @@ + CONFIG_DRM_PANIC_BACKGROUND_COLOR=0x0000aa + # CONFIG_DRM_PANIC_DEBUG is not set + CONFIG_DRM_PANIC_SCREEN="qr_code" +-CONFIG_DRM_PANIC_SCREEN_QR_CODE=y +-CONFIG_DRM_PANIC_SCREEN_QR_CODE_URL="https://panic.archlinux.org/panic_report#" +-CONFIG_DRM_PANIC_SCREEN_QR_VERSION=40 ++# CONFIG_DRM_PANIC_SCREEN_QR_CODE is not set ++# CONFIG_DRM_DEBUG_DP_MST_TOPOLOGY_REFS is not set ++# CONFIG_DRM_DEBUG_MODESET_LOCK is not set + CONFIG_DRM_CLIENT=y + CONFIG_DRM_CLIENT_LIB=y + CONFIG_DRM_CLIENT_SELECTION=y +@@ -6968,6 +6941,7 @@ + # + CONFIG_DRM_FBDEV_EMULATION=y + CONFIG_DRM_FBDEV_OVERALLOC=100 ++# CONFIG_DRM_FBDEV_LEAK_PHYS_SMEM is not set + CONFIG_DRM_CLIENT_LOG=y + CONFIG_DRM_CLIENT_DEFAULT_FBDEV=y + # CONFIG_DRM_CLIENT_DEFAULT_LOG is not set +@@ -7015,6 +6989,7 @@ + CONFIG_DRM_AMDGPU_CIK=y + CONFIG_DRM_AMDGPU_USERPTR=y + CONFIG_DRM_AMD_ISP=y ++# CONFIG_DRM_AMDGPU_WERROR is not set + + # + # ACP (Audio CoProcessor) Configuration +@@ -7049,6 +7024,27 @@ + CONFIG_DRM_I915_GVT_KVMGT=m + CONFIG_DRM_I915_PXP=y + CONFIG_DRM_I915_DP_TUNNEL=y ++ ++# ++# drm/i915 Debugging ++# ++# CONFIG_DRM_I915_WERROR is not set ++# CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set ++# CONFIG_DRM_I915_DEBUG is not set ++# CONFIG_DRM_I915_DEBUG_MMIO is not set ++# CONFIG_DRM_I915_SW_FENCE_DEBUG_OBJECTS is not set ++# CONFIG_DRM_I915_SW_FENCE_CHECK_DAG is not set ++# CONFIG_DRM_I915_DEBUG_GUC is not set ++# CONFIG_DRM_I915_SELFTEST is not set ++# CONFIG_DRM_I915_LOW_LEVEL_TRACEPOINTS is not set ++# CONFIG_DRM_I915_DEBUG_VBLANK_EVADE is not set ++# CONFIG_DRM_I915_DEBUG_RUNTIME_PM is not set ++# CONFIG_DRM_I915_DEBUG_WAKEREF is not set ++# end of drm/i915 Debugging ++ ++# ++# drm/i915 Profile Guided Optimisation ++# + CONFIG_DRM_I915_REQUEST_TIMEOUT=20000 + CONFIG_DRM_I915_FENCE_TIMEOUT=10000 + CONFIG_DRM_I915_USERFAULT_AUTOSUSPEND=250 +@@ -7058,10 +7054,29 @@ + CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000 + CONFIG_DRM_I915_STOP_TIMEOUT=100 + CONFIG_DRM_I915_TIMESLICE_DURATION=1 ++# end of drm/i915 Profile Guided Optimisation ++ + CONFIG_DRM_I915_GVT=y + CONFIG_DRM_XE=m + CONFIG_DRM_XE_DISPLAY=y + CONFIG_DRM_XE_FORCE_PROBE="" ++ ++# ++# drm/Xe Debugging ++# ++# CONFIG_DRM_XE_WERROR is not set ++# CONFIG_DRM_XE_DEBUG is not set ++# CONFIG_DRM_XE_DEBUG_VM is not set ++# CONFIG_DRM_XE_DEBUG_MEMIRQ is not set ++# CONFIG_DRM_XE_DEBUG_SRIOV is not set ++# CONFIG_DRM_XE_DEBUG_MEM is not set ++# CONFIG_DRM_XE_LARGE_GUC_BUFFER is not set ++# CONFIG_DRM_XE_USERPTR_INVAL_INJECT is not set ++# end of drm/Xe Debugging ++ ++# ++# drm/xe Profile Guided Optimisation ++# + CONFIG_DRM_XE_JOB_TIMEOUT_MAX=10000 + CONFIG_DRM_XE_JOB_TIMEOUT_MIN=1 + CONFIG_DRM_XE_TIMESLICE_MAX=10000000 +@@ -7070,10 +7085,10 @@ + CONFIG_DRM_XE_PREEMPT_TIMEOUT_MAX=10000000 + CONFIG_DRM_XE_PREEMPT_TIMEOUT_MIN=1 + CONFIG_DRM_XE_ENABLE_SCHEDTIMEOUT_LIMIT=y ++# end of drm/xe Profile Guided Optimisation ++ + CONFIG_DRM_VGEM=m + CONFIG_DRM_VKMS=m +-CONFIG_DRM_VMWGFX=m +-CONFIG_DRM_VMWGFX_MKSSTATS=y + CONFIG_DRM_GMA500=m + CONFIG_DRM_UDL=m + CONFIG_DRM_AST=m +@@ -7120,14 +7135,11 @@ + CONFIG_TINYDRM_SHARP_MEMORY=m + CONFIG_TINYDRM_ST7586=m + CONFIG_TINYDRM_ST7735R=m +-CONFIG_DRM_XEN=y +-CONFIG_DRM_XEN_FRONTEND=m + CONFIG_DRM_VBOXVIDEO=m + CONFIG_DRM_GUD=m + CONFIG_DRM_SSD130X=m + CONFIG_DRM_SSD130X_I2C=m + CONFIG_DRM_SSD130X_SPI=m +-CONFIG_DRM_HYPERV=m + CONFIG_DRM_PANEL_BACKLIGHT_QUIRKS=m + CONFIG_DRM_PRIVACY_SCREEN=y + CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y +@@ -7175,10 +7187,8 @@ + # CONFIG_FB_UDL is not set + # CONFIG_FB_IBM_GXT4500 is not set + # CONFIG_FB_VIRTUAL is not set +-CONFIG_XEN_FBDEV_FRONTEND=m + # CONFIG_FB_METRONOME is not set + # CONFIG_FB_MB862XX is not set +-# CONFIG_FB_HYPERV is not set + # CONFIG_FB_SSD1307 is not set + # CONFIG_FB_SM712 is not set + CONFIG_FB_CORE=y +@@ -7338,7 +7348,6 @@ + CONFIG_SND_VX_LIB=m + CONFIG_SND_AC97_CODEC=m + CONFIG_SND_DRIVERS=y +-# CONFIG_SND_PCSP is not set + CONFIG_SND_DUMMY=m + CONFIG_SND_ALOOP=m + CONFIG_SND_PCMTEST=m +@@ -7677,6 +7686,7 @@ + CONFIG_SND_SOC_SOF_ACPI_DEV=m + CONFIG_SND_SOC_SOF_DEBUG_PROBES=m + CONFIG_SND_SOC_SOF_CLIENT=m ++# CONFIG_SND_SOC_SOF_DEVELOPER_SUPPORT is not set + CONFIG_SND_SOC_SOF=m + CONFIG_SND_SOC_SOF_PROBE_WORK_QUEUE=y + CONFIG_SND_SOC_SOF_IPC3=y +@@ -8061,7 +8071,6 @@ + CONFIG_SND_X86=y + CONFIG_HDMI_LPE_AUDIO=m + CONFIG_SND_SYNTH_EMUX=m +-CONFIG_SND_XEN_FRONTEND=m + CONFIG_SND_VIRTIO=m + CONFIG_AC97_BUS=m + CONFIG_HID_SUPPORT=y +@@ -8187,7 +8196,6 @@ + CONFIG_HID_RMI=m + CONFIG_HID_GREENASIA=m + CONFIG_GREENASIA_FF=y +-CONFIG_HID_HYPERV_MOUSE=m + CONFIG_HID_SMARTJOYPLUS=m + CONFIG_SMARTJOYPLUS_FF=y + CONFIG_HID_TIVO=m +@@ -8198,7 +8206,7 @@ + CONFIG_THRUSTMASTER_FF=y + CONFIG_HID_UDRAW_PS3=m + CONFIG_HID_U2FZERO=m +-CONFIG_HID_UNIVERSAL_PIDFF=m ++# CONFIG_HID_UNIVERSAL_PIDFF is not set + CONFIG_HID_WACOM=m + CONFIG_HID_WIIMOTE=m + CONFIG_HID_WINWING=m +@@ -8260,6 +8268,13 @@ + CONFIG_USB_HID=m + CONFIG_HID_PID=y + CONFIG_USB_HIDDEV=y ++ ++# ++# USB HID Boot Protocol drivers ++# ++# CONFIG_USB_KBD is not set ++# CONFIG_USB_MOUSE is not set ++# end of USB HID Boot Protocol drivers + # end of USB HID support + + CONFIG_USB_OHCI_LITTLE_ENDIAN=y +@@ -8282,6 +8297,7 @@ + # CONFIG_USB_DYNAMIC_MINORS is not set + # CONFIG_USB_OTG is not set + # CONFIG_USB_OTG_PRODUCTLIST is not set ++# CONFIG_USB_OTG_DISABLE_EXTERNAL_HUB is not set + CONFIG_USB_LEDS_TRIGGER_USBPORT=m + CONFIG_USB_AUTOSUSPEND_DELAY=2 + CONFIG_USB_DEFAULT_AUTHORIZATION_MODE=1 +@@ -8316,7 +8332,6 @@ + CONFIG_USB_HCD_BCMA=m + CONFIG_USB_HCD_SSB=m + # CONFIG_USB_HCD_TEST_MODE is not set +-CONFIG_USB_XEN_HCD=m + + # + # USB Device Class drivers +@@ -8899,7 +8914,6 @@ + # CONFIG_HFI1_DEBUG_SDMA_ORDER is not set + # CONFIG_SDMA_VERBOSITY is not set + CONFIG_INFINIBAND_IRDMA=m +-CONFIG_MANA_INFINIBAND=m + CONFIG_MLX4_INFINIBAND=m + CONFIG_MLX5_INFINIBAND=m + CONFIG_INFINIBAND_MTHCA=m +@@ -8930,9 +8944,7 @@ + CONFIG_EDAC=y + CONFIG_EDAC_LEGACY_SYSFS=y + # CONFIG_EDAC_DEBUG is not set +-CONFIG_EDAC_DECODE_MCE=y + CONFIG_EDAC_GHES=y +-CONFIG_EDAC_AMD64=m + CONFIG_EDAC_E752X=m + CONFIG_EDAC_I82975X=m + CONFIG_EDAC_I3000=m +@@ -9155,7 +9167,6 @@ + CONFIG_UIO_PCI_GENERIC=m + CONFIG_UIO_NETX=m + CONFIG_UIO_MF624=m +-CONFIG_UIO_HV_GENERIC=m + CONFIG_UIO_DFL=m + CONFIG_VFIO=m + CONFIG_VFIO_DEVICE_CDEV=y +@@ -9188,11 +9199,7 @@ + CONFIG_VMGENID=y + CONFIG_VBOXGUEST=m + CONFIG_NITRO_ENCLAVES=m +-CONFIG_ACRN_HSM=m +-CONFIG_TSM_REPORTS=m + CONFIG_EFI_SECRET=m +-CONFIG_SEV_GUEST=m +-CONFIG_TDX_GUEST_DRIVER=m + CONFIG_VIRTIO_ANCHOR=y + CONFIG_VIRTIO=y + CONFIG_VIRTIO_PCI_LIB=y +@@ -9214,7 +9221,6 @@ + CONFIG_VDPA_SIM=m + CONFIG_VDPA_SIM_NET=m + CONFIG_VDPA_SIM_BLOCK=m +-CONFIG_VDPA_USER=m + CONFIG_IFCVF=m + CONFIG_MLX5_VDPA=y + CONFIG_MLX5_VDPA_NET=m +@@ -9238,53 +9244,8 @@ + # + # Microsoft Hyper-V guest support + # +-CONFIG_HYPERV=m +-# CONFIG_HYPERV_VTL_MODE is not set +-CONFIG_HYPERV_TIMER=y +-CONFIG_HYPERV_UTILS=m +-CONFIG_HYPERV_BALLOON=m + # end of Microsoft Hyper-V guest support + +-# +-# Xen driver support +-# +-CONFIG_XEN_BALLOON=y +-CONFIG_XEN_BALLOON_MEMORY_HOTPLUG=y +-CONFIG_XEN_MEMORY_HOTPLUG_LIMIT=512 +-CONFIG_XEN_SCRUB_PAGES_DEFAULT=y +-CONFIG_XEN_DEV_EVTCHN=m +-CONFIG_XEN_BACKEND=y +-CONFIG_XENFS=m +-CONFIG_XEN_COMPAT_XENFS=y +-CONFIG_XEN_SYS_HYPERVISOR=y +-CONFIG_XEN_XENBUS_FRONTEND=y +-CONFIG_XEN_GNTDEV=m +-CONFIG_XEN_GNTDEV_DMABUF=y +-CONFIG_XEN_GRANT_DEV_ALLOC=m +-CONFIG_XEN_GRANT_DMA_ALLOC=y +-CONFIG_SWIOTLB_XEN=y +-CONFIG_XEN_PCI_STUB=y +-CONFIG_XEN_PCIDEV_BACKEND=m +-CONFIG_XEN_PVCALLS_FRONTEND=m +-CONFIG_XEN_PVCALLS_BACKEND=m +-CONFIG_XEN_SCSI_BACKEND=m +-CONFIG_XEN_PRIVCMD=m +-CONFIG_XEN_PRIVCMD_EVENTFD=y +-CONFIG_XEN_ACPI_PROCESSOR=m +-CONFIG_XEN_MCE_LOG=y +-CONFIG_XEN_HAVE_PVMMU=y +-CONFIG_XEN_EFI=y +-CONFIG_XEN_AUTO_XLATE=y +-CONFIG_XEN_ACPI=y +-CONFIG_XEN_SYMS=y +-CONFIG_XEN_HAVE_VPMU=y +-CONFIG_XEN_FRONT_PGDIR_SHBUF=m +-CONFIG_XEN_UNPOPULATED_ALLOC=y +-CONFIG_XEN_GRANT_DMA_OPS=y +-CONFIG_XEN_VIRTIO=y +-# CONFIG_XEN_VIRTIO_FORCE_GRANT is not set +-# end of Xen driver support +- + # CONFIG_GREYBUS is not set + # CONFIG_COMEDI is not set + CONFIG_STAGING=y +@@ -9425,19 +9386,6 @@ + CONFIG_ACERHDF=m + CONFIG_ACER_WIRELESS=m + CONFIG_ACER_WMI=m +-CONFIG_AMD_HSMP=m +- +-# +-# AMD HSMP Driver +-# +-CONFIG_AMD_HSMP_ACPI=m +-CONFIG_AMD_HSMP_PLAT=m +-# end of AMD HSMP Driver +- +-CONFIG_AMD_PMF=m +-# CONFIG_AMD_PMF_DEBUG is not set +-CONFIG_AMD_PMC=m +-CONFIG_AMD_MP2_STB=y + CONFIG_AMD_3D_VCACHE=m + CONFIG_AMD_WBRF=y + CONFIG_ADV_SWBUTTON=m +@@ -9606,7 +9554,6 @@ + # Clock Source drivers + # + CONFIG_CLKEVT_I8253=y +-CONFIG_I8253_LOCK=y + CONFIG_CLKBLD_I8253=y + # end of Clock Source drivers + +@@ -9642,7 +9589,6 @@ + CONFIG_IOMMUFD_DRIVER_CORE=y + CONFIG_IOMMUFD=m + CONFIG_IRQ_REMAP=y +-CONFIG_HYPERV_IOMMU=y + CONFIG_VIRTIO_IOMMU=m + + # +@@ -10541,6 +10487,7 @@ + CONFIG_SERIAL_IPOCTAL=m + CONFIG_RESET_CONTROLLER=y + CONFIG_RESET_GPIO=m ++# CONFIG_RESET_SIMPLE is not set + CONFIG_RESET_TI_SYSCON=m + CONFIG_RESET_TI_TPS380X=m + +@@ -10587,9 +10534,6 @@ + CONFIG_RAS=y + CONFIG_RAS_CEC=y + # CONFIG_RAS_CEC_DEBUG is not set +-CONFIG_AMD_ATL=m +-CONFIG_AMD_ATL_PRM=y +-CONFIG_RAS_FMPM=m + CONFIG_USB4=m + # CONFIG_USB4_DEBUGFS_WRITE is not set + # CONFIG_USB4_DMA_TEST is not set +@@ -10616,9 +10560,7 @@ + CONFIG_DAX=y + CONFIG_DEV_DAX=m + CONFIG_DEV_DAX_PMEM=m +-CONFIG_DEV_DAX_HMEM=m + CONFIG_DEV_DAX_CXL=m +-CONFIG_DEV_DAX_HMEM_DEVICES=y + CONFIG_DEV_DAX_KMEM=m + CONFIG_NVMEM=y + CONFIG_NVMEM_SYSFS=y +@@ -10670,8 +10612,6 @@ + CONFIG_FPGA_MGR_MICROCHIP_SPI=m + CONFIG_FPGA_MGR_LATTICE_SYSCONFIG=m + CONFIG_FPGA_MGR_LATTICE_SYSCONFIG_SPI=m +-CONFIG_TEE=m +-CONFIG_AMDTEE=m + CONFIG_MULTIPLEXER=m + + # +@@ -10719,34 +10659,10 @@ + CONFIG_JBD2=y + # CONFIG_JBD2_DEBUG is not set + CONFIG_FS_MBCACHE=y +-CONFIG_JFS_FS=m +-CONFIG_JFS_POSIX_ACL=y +-CONFIG_JFS_SECURITY=y +-# CONFIG_JFS_DEBUG is not set +-CONFIG_JFS_STATISTICS=y +-CONFIG_XFS_FS=m +-CONFIG_XFS_SUPPORT_V4=y +-CONFIG_XFS_SUPPORT_ASCII_CI=y +-CONFIG_XFS_QUOTA=y +-CONFIG_XFS_POSIX_ACL=y +-CONFIG_XFS_RT=y +-CONFIG_XFS_DRAIN_INTENTS=y +-CONFIG_XFS_LIVE_HOOKS=y +-CONFIG_XFS_MEMORY_BUFS=y +-CONFIG_XFS_BTREE_IN_MEM=y +-CONFIG_XFS_ONLINE_SCRUB=y +-# CONFIG_XFS_ONLINE_SCRUB_STATS is not set +-CONFIG_XFS_ONLINE_REPAIR=y +-# CONFIG_XFS_WARN is not set +-# CONFIG_XFS_DEBUG is not set +-CONFIG_GFS2_FS=m +-CONFIG_GFS2_FS_LOCKING_DLM=y +-CONFIG_OCFS2_FS=m +-CONFIG_OCFS2_FS_O2CB=m +-CONFIG_OCFS2_FS_USERSPACE_CLUSTER=m +-CONFIG_OCFS2_FS_STATS=y +-CONFIG_OCFS2_DEBUG_MASKLOG=y +-# CONFIG_OCFS2_DEBUG_FS is not set ++# CONFIG_JFS_FS is not set ++# CONFIG_XFS_FS is not set ++# CONFIG_GFS2_FS is not set ++# CONFIG_OCFS2_FS is not set + CONFIG_BTRFS_FS=y + CONFIG_BTRFS_FS_POSIX_ACL=y + # CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set +@@ -10754,22 +10670,8 @@ + # CONFIG_BTRFS_ASSERT is not set + # CONFIG_BTRFS_EXPERIMENTAL is not set + # CONFIG_BTRFS_FS_REF_VERIFY is not set +-CONFIG_NILFS2_FS=m +-CONFIG_F2FS_FS=m +-CONFIG_F2FS_STAT_FS=y +-CONFIG_F2FS_FS_XATTR=y +-CONFIG_F2FS_FS_POSIX_ACL=y +-CONFIG_F2FS_FS_SECURITY=y +-CONFIG_F2FS_CHECK_FS=y +-# CONFIG_F2FS_FAULT_INJECTION is not set +-CONFIG_F2FS_FS_COMPRESSION=y +-CONFIG_F2FS_FS_LZO=y +-CONFIG_F2FS_FS_LZORLE=y +-CONFIG_F2FS_FS_LZ4=y +-CONFIG_F2FS_FS_LZ4HC=y +-CONFIG_F2FS_FS_ZSTD=y +-CONFIG_F2FS_IOSTAT=y +-CONFIG_F2FS_UNFAIR_RWSEM=y ++# CONFIG_NILFS2_FS is not set ++# CONFIG_F2FS_FS is not set + CONFIG_BCACHEFS_FS=m + CONFIG_BCACHEFS_QUOTA=y + # CONFIG_BCACHEFS_ERASURE_CODING is not set +@@ -10780,9 +10682,8 @@ + # CONFIG_BCACHEFS_NO_LATENCY_ACCT is not set + CONFIG_BCACHEFS_SIX_OPTIMISTIC_SPIN=y + # CONFIG_BCACHEFS_PATH_TRACEPOINTS is not set +-CONFIG_ZONEFS_FS=m +-CONFIG_FS_DAX=y +-CONFIG_FS_DAX_PMD=y ++# CONFIG_ZONEFS_FS is not set ++# CONFIG_FS_DAX is not set + CONFIG_FS_POSIX_ACL=y + CONFIG_EXPORTFS=y + CONFIG_EXPORTFS_BLOCK_OPS=y +@@ -10807,10 +10708,9 @@ + CONFIG_AUTOFS_FS=y + CONFIG_FUSE_FS=y + CONFIG_CUSE=m +-CONFIG_VIRTIO_FS=y +-CONFIG_FUSE_DAX=y +-CONFIG_FUSE_PASSTHROUGH=y +-CONFIG_FUSE_IO_URING=y ++# CONFIG_VIRTIO_FS is not set ++# CONFIG_FUSE_PASSTHROUGH is not set ++# CONFIG_FUSE_IO_URING is not set + CONFIG_OVERLAY_FS=m + CONFIG_OVERLAY_FS_REDIRECT_DIR=y + # CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW is not set +@@ -10890,68 +10790,26 @@ + # end of Pseudo filesystems + + CONFIG_MISC_FILESYSTEMS=y +-CONFIG_ORANGEFS_FS=m ++# CONFIG_ORANGEFS_FS is not set + # CONFIG_ADFS_FS is not set +-CONFIG_AFFS_FS=m +-CONFIG_ECRYPT_FS=m +-# CONFIG_ECRYPT_FS_MESSAGING is not set +-CONFIG_HFS_FS=m +-CONFIG_HFSPLUS_FS=m +-CONFIG_BEFS_FS=m +-# CONFIG_BEFS_DEBUG is not set ++# CONFIG_AFFS_FS is not set ++# CONFIG_ECRYPT_FS is not set ++# CONFIG_HFS_FS is not set ++# CONFIG_HFSPLUS_FS is not set ++# CONFIG_BEFS_FS is not set + # CONFIG_BFS_FS is not set + # CONFIG_EFS_FS is not set +-CONFIG_JFFS2_FS=m +-CONFIG_JFFS2_FS_DEBUG=0 +-CONFIG_JFFS2_FS_WRITEBUFFER=y +-# CONFIG_JFFS2_FS_WBUF_VERIFY is not set +-CONFIG_JFFS2_SUMMARY=y +-CONFIG_JFFS2_FS_XATTR=y +-CONFIG_JFFS2_FS_POSIX_ACL=y +-CONFIG_JFFS2_FS_SECURITY=y +-# CONFIG_JFFS2_COMPRESSION_OPTIONS is not set +-CONFIG_JFFS2_ZLIB=y +-CONFIG_JFFS2_RTIME=y +-CONFIG_UBIFS_FS=m +-# CONFIG_UBIFS_FS_ADVANCED_COMPR is not set +-CONFIG_UBIFS_FS_LZO=y +-CONFIG_UBIFS_FS_ZLIB=y +-CONFIG_UBIFS_FS_ZSTD=y +-CONFIG_UBIFS_ATIME_SUPPORT=y +-CONFIG_UBIFS_FS_XATTR=y +-CONFIG_UBIFS_FS_SECURITY=y +-CONFIG_UBIFS_FS_AUTHENTICATION=y +-CONFIG_CRAMFS=m +-CONFIG_CRAMFS_BLOCKDEV=y +-CONFIG_CRAMFS_MTD=y +-CONFIG_SQUASHFS=m +-# CONFIG_SQUASHFS_FILE_CACHE is not set +-CONFIG_SQUASHFS_FILE_DIRECT=y +-CONFIG_SQUASHFS_DECOMP_SINGLE=y +-CONFIG_SQUASHFS_DECOMP_MULTI=y +-CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU=y +-CONFIG_SQUASHFS_CHOICE_DECOMP_BY_MOUNT=y +-CONFIG_SQUASHFS_MOUNT_DECOMP_THREADS=y +-CONFIG_SQUASHFS_XATTR=y +-CONFIG_SQUASHFS_ZLIB=y +-CONFIG_SQUASHFS_LZ4=y +-CONFIG_SQUASHFS_LZO=y +-CONFIG_SQUASHFS_XZ=y +-CONFIG_SQUASHFS_ZSTD=y +-# CONFIG_SQUASHFS_4K_DEVBLK_SIZE is not set +-# CONFIG_SQUASHFS_EMBEDDED is not set +-CONFIG_SQUASHFS_FRAGMENT_CACHE_SIZE=3 ++# CONFIG_JFFS2_FS is not set ++# CONFIG_UBIFS_FS is not set ++# CONFIG_CRAMFS is not set ++# CONFIG_SQUASHFS is not set + # CONFIG_VXFS_FS is not set +-CONFIG_MINIX_FS=m +-CONFIG_OMFS_FS=m ++# CONFIG_MINIX_FS is not set ++# CONFIG_OMFS_FS is not set + # CONFIG_HPFS_FS is not set + # CONFIG_QNX4FS_FS is not set + # CONFIG_QNX6FS_FS is not set +-CONFIG_ROMFS_FS=m +-CONFIG_ROMFS_BACKED_BY_BLOCK=y +-# CONFIG_ROMFS_BACKED_BY_MTD is not set +-# CONFIG_ROMFS_BACKED_BY_BOTH is not set +-CONFIG_ROMFS_ON_BLOCK=y ++# CONFIG_ROMFS_FS is not set + CONFIG_PSTORE=y + CONFIG_PSTORE_DEFAULT_KMSG_BYTES=10240 + CONFIG_PSTORE_COMPRESS=y +@@ -10965,22 +10823,8 @@ + CONFIG_PSTORE_BLK_KMSG_SIZE=64 + CONFIG_PSTORE_BLK_MAX_REASON=2 + # CONFIG_SYSV_FS is not set +-CONFIG_UFS_FS=m +-# CONFIG_UFS_FS_WRITE is not set +-# CONFIG_UFS_DEBUG is not set +-CONFIG_EROFS_FS=m +-# CONFIG_EROFS_FS_DEBUG is not set +-CONFIG_EROFS_FS_XATTR=y +-CONFIG_EROFS_FS_POSIX_ACL=y +-CONFIG_EROFS_FS_SECURITY=y +-CONFIG_EROFS_FS_BACKED_BY_FILE=y +-CONFIG_EROFS_FS_ZIP=y +-CONFIG_EROFS_FS_ZIP_LZMA=y +-CONFIG_EROFS_FS_ZIP_DEFLATE=y +-CONFIG_EROFS_FS_ZIP_ZSTD=y +-CONFIG_EROFS_FS_ONDEMAND=y +-CONFIG_EROFS_FS_PCPU_KTHREAD=y +-CONFIG_EROFS_FS_PCPU_KTHREAD_HIPRI=y ++# CONFIG_UFS_FS is not set ++# CONFIG_EROFS_FS is not set + CONFIG_VBOXSF_FS=m + CONFIG_NETWORK_FILESYSTEMS=y + CONFIG_NFS_FS=m +@@ -11133,11 +10977,9 @@ + CONFIG_TRUSTED_KEYS=m + CONFIG_HAVE_TRUSTED_KEYS=y + CONFIG_TRUSTED_KEYS_TPM=y +-CONFIG_TRUSTED_KEYS_TEE=y + CONFIG_ENCRYPTED_KEYS=m + # CONFIG_USER_DECRYPTED_DATA is not set + CONFIG_KEY_DH_OPERATIONS=y +-CONFIG_KEY_NOTIFICATIONS=y + CONFIG_SECURITY_DMESG_RESTRICT=y + CONFIG_PROC_MEM_ALWAYS_FORCE=y + # CONFIG_PROC_MEM_FORCE_PTRACE is not set +@@ -11479,11 +11321,6 @@ + CONFIG_CRYPTO_DEV_ATMEL_ECC=m + CONFIG_CRYPTO_DEV_ATMEL_SHA204A=m + CONFIG_CRYPTO_DEV_CCP=y +-CONFIG_CRYPTO_DEV_CCP_DD=m +-CONFIG_CRYPTO_DEV_SP_CCP=y +-CONFIG_CRYPTO_DEV_CCP_CRYPTO=m +-CONFIG_CRYPTO_DEV_SP_PSP=y +-CONFIG_CRYPTO_DEV_CCP_DEBUGFS=y + CONFIG_CRYPTO_DEV_NITROX=m + CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m + CONFIG_CRYPTO_DEV_QAT=m +@@ -11557,9 +11394,8 @@ + CONFIG_CRYPTO_LIB_UTILS=y + CONFIG_CRYPTO_LIB_AES=y + CONFIG_CRYPTO_LIB_AESCFB=y +-CONFIG_CRYPTO_LIB_AESGCM=y + CONFIG_CRYPTO_LIB_ARC4=m +-CONFIG_CRYPTO_LIB_GF128MUL=y ++CONFIG_CRYPTO_LIB_GF128MUL=m + CONFIG_CRYPTO_ARCH_HAVE_LIB_BLAKE2S=y + CONFIG_CRYPTO_LIB_BLAKE2S_GENERIC=y + CONFIG_CRYPTO_ARCH_HAVE_LIB_CHACHA=m +@@ -11604,7 +11440,7 @@ + CONFIG_LZO_DECOMPRESS=y + CONFIG_LZ4_COMPRESS=m + CONFIG_LZ4HC_COMPRESS=m +-CONFIG_LZ4_DECOMPRESS=y ++CONFIG_LZ4_DECOMPRESS=m + CONFIG_ZSTD_COMMON=y + CONFIG_ZSTD_COMPRESS=y + CONFIG_ZSTD_DECOMPRESS=y +@@ -11619,12 +11455,6 @@ + CONFIG_XZ_DEC_MICROLZMA=y + CONFIG_XZ_DEC_BCJ=y + # CONFIG_XZ_DEC_TEST is not set +-CONFIG_DECOMPRESS_GZIP=y +-CONFIG_DECOMPRESS_BZIP2=y +-CONFIG_DECOMPRESS_LZMA=y +-CONFIG_DECOMPRESS_XZ=y +-CONFIG_DECOMPRESS_LZO=y +-CONFIG_DECOMPRESS_LZ4=y + CONFIG_DECOMPRESS_ZSTD=y + CONFIG_GENERIC_ALLOCATOR=y + CONFIG_REED_SOLOMON=m +@@ -11650,13 +11480,10 @@ + CONFIG_NEED_SG_DMA_LENGTH=y + CONFIG_NEED_DMA_MAP_STATE=y + CONFIG_ARCH_DMA_ADDR_T_64BIT=y +-CONFIG_ARCH_HAS_FORCE_DMA_UNENCRYPTED=y + CONFIG_SWIOTLB=y + # CONFIG_SWIOTLB_DYNAMIC is not set + CONFIG_DMA_NEED_SYNC=y +-CONFIG_DMA_COHERENT_POOL=y + CONFIG_DMA_CMA=y +-# CONFIG_DMA_NUMA_CMA is not set + + # + # Default contiguous memory area size: +@@ -11671,7 +11498,6 @@ + # CONFIG_DMA_MAP_BENCHMARK is not set + CONFIG_SGL_ALLOC=y + CONFIG_CHECK_SIGNATURE=y +-CONFIG_CPUMASK_OFFSTACK=y + CONFIG_CPU_RMAP=y + CONFIG_DQL=y + CONFIG_GLOB=y +@@ -11776,7 +11602,9 @@ + # CONFIG_HEADERS_INSTALL is not set + # CONFIG_DEBUG_SECTION_MISMATCH is not set + CONFIG_SECTION_MISMATCH_WARN_ONLY=y ++# CONFIG_DEBUG_FORCE_FUNCTION_ALIGN_64B is not set + CONFIG_OBJTOOL=y ++# CONFIG_VMLINUX_MAP is not set + # CONFIG_DEBUG_FORCE_WEAK_PER_CPU is not set + # end of Compile-time checks and compiler options + +@@ -11840,6 +11668,8 @@ + # CONFIG_DEBUG_VIRTUAL is not set + CONFIG_DEBUG_MEMORY_INIT=y + # CONFIG_DEBUG_PER_CPU_MAPS is not set ++CONFIG_ARCH_SUPPORTS_KMAP_LOCAL_FORCE_MAP=y ++# CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP is not set + # CONFIG_MEM_ALLOC_PROFILING is not set + CONFIG_HAVE_ARCH_KASAN=y + CONFIG_HAVE_ARCH_KASAN_VMALLOC=y +@@ -11852,6 +11682,7 @@ + CONFIG_KFENCE_SAMPLE_INTERVAL=100 + CONFIG_KFENCE_NUM_OBJECTS=255 + CONFIG_KFENCE_DEFERRABLE=y ++# CONFIG_KFENCE_STATIC_KEYS is not set + CONFIG_KFENCE_STRESS_TEST_FAULTS=0 + CONFIG_HAVE_ARCH_KMSAN=y + # end of Memory Debugging +@@ -11866,7 +11697,6 @@ + CONFIG_PANIC_TIMEOUT=0 + CONFIG_LOCKUP_DETECTOR=y + CONFIG_SOFTLOCKUP_DETECTOR=y +-CONFIG_SOFTLOCKUP_DETECTOR_INTR_STORM=y + # CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC is not set + CONFIG_HAVE_HARDLOCKUP_DETECTOR_BUDDY=y + CONFIG_HARDLOCKUP_DETECTOR=y +@@ -11941,7 +11771,6 @@ + CONFIG_RCU_CPU_STALL_TIMEOUT=60 + CONFIG_RCU_EXP_CPU_STALL_TIMEOUT=0 + # CONFIG_RCU_CPU_STALL_CPUTIME is not set +-# CONFIG_RCU_CPU_STALL_NOTIFIER is not set + # CONFIG_RCU_TRACE is not set + # CONFIG_RCU_EQS_DEBUG is not set + # end of RCU Debugging +@@ -12129,7 +11958,6 @@ + # CONFIG_TEST_OBJPOOL is not set + CONFIG_ARCH_USE_MEMTEST=y + CONFIG_MEMTEST=y +-# CONFIG_HYPERV_TESTING is not set + # end of Kernel Testing and Coverage + + # diff --git a/documentation/linux_configuration.pdf b/documentation/linux_configuration.pdf index ed13cbe..c9e5ea5 100644 Binary files a/documentation/linux_configuration.pdf and b/documentation/linux_configuration.pdf differ diff --git a/documentation/linux_configuration_13_memory_management_options.tex b/documentation/linux_configuration_13_memory_management_options.tex index 0587629..95f66a3 100644 --- a/documentation/linux_configuration_13_memory_management_options.tex +++ b/documentation/linux_configuration_13_memory_management_options.tex @@ -240,8 +240,9 @@ This security feature reduces the predictability of the kernel slab allocator ag CONFIG\_SLAB\_FREELIST\_HARDENED [=y] \textbf{[Y]}\\ Viele Kernel-Heap-Angriffe zielen auf Slab-Cache-Metadaten und andere Infrastrukturen ab. Diese Optionen bringen geringfügige Leistungseinbußen mit sich, um den Kernel-Slab-Allokator gegen gängige -Freelist-Angriffsmethoden zu härten. Einige Slab-Implementierungen haben mehr Sanity-Checking als andere. -Diese Option ist am effektivsten mit CONFIG\_SLUB. +Freelist-Angriffsmethoden zu härten. +{\color{gray}Einige Slab-Implementierungen haben mehr Sanity-Checking als andere. +Diese Option ist am effektivsten mit CONFIG\_SLUB.} \english{Many kernel heap attacks try to target slab cache metadata and other infrastructure. This options makes minor performance sacrifices to harden the kernel slab allocator against common freelist exploit methods.} @@ -843,4 +844,4 @@ Damit wird das DAMON-basierte LRU-Listensortier-Subsystem aufgebaut. Es versucht zugegriffene (heiße) Seiten zu schützen, während selten zugegriffene (kalte) Seiten unter Speicherdruck zuerst zurückgefordert werden. \english{This builds the DAMON-based LRU-lists sorting subsystem. -It tries to protect frequently accessed (hot) pages while rarely accessed (cold) pages reclaimed first under memory pressure.} \ No newline at end of file +It tries to protect frequently accessed (hot) pages while rarely accessed (cold) pages reclaimed first under memory pressure.} diff --git a/documentation/linux_configuration_14_networking_support.tex b/documentation/linux_configuration_14_networking_support.tex index 121ea4b..cfefcba 100644 --- a/documentation/linux_configuration_14_networking_support.tex +++ b/documentation/linux_configuration_14_networking_support.tex @@ -1,3 +1,7 @@ +% since Linux 6.14 +% linux_configuration_14_networking_support.tex + +% 14. \section{Networking support \texorpdfstring{$\rightarrow$}{->}} CONFIG\_NET [=y] \textbf{[Y]}\\ Wenn Sie nicht wirklich wissen, was Sie tun, sollten Sie hier Y sagen. Der Grund dafür ist, @@ -10,6 +14,15 @@ $<$file:Documentation/Changes$>$ angegeben sind.\\ Für eine allgemeine Einführung in Linux-Netzwerke ist es sehr empfehlenswert, das NET-HOWTO zu lesen, das unter \url{http://www.tldp.org/docs.html#howto} verfügbar ist. +\english{Unless you really know what you are doing, you should say Y here. +The reason is that some programs need kernel networking support even when running on a stand-alone machine that +isn't connected to any other computer.\\ +If you are upgrading from an older kernel, you should consider updating your networking tools too because changes +in the kernel and the tools often go hand in hand. +The tools are contained in the package net-tools, the location and version number of which are given in +$<$file:Documentation/Changes$>$.\\ +For a general introduction to Linux networking, it is highly recommended to read the NET-HOWTO, +available from \url{http://www.tldp.org/docs.html\#howto}.} \subsection{Networking options \texorpdfstring{$\rightarrow$}{->}} (Vernetzungsoptionen) @@ -21,11 +34,17 @@ ohne dass ein dazwischenliegendes Netzwerkprotokoll im Kernel implementiert ist, Wenn Sie wollen, dass diese Anwendungen funktionieren, wählen Sie Y. Um diesen Treiber als Modul zu kompilieren, wählen Sie hier M: Das Modul wird \texttt{af\_packet} heißen.\\ Wenn Sie unsicher sind, wählen Sie Y. +\english{The Packet protocol is used by applications which communicate directly with network devices +without an intermediate network protocol implemented in the kernel, e.g. tcpdump. +If you want them to work, choose Y.\\ +To compile this driver as a module, choose M here: the module will be called \texttt{af\_packet}.\\ +If unsure, say Y.} \paragraph{Packet: sockets monitoring interface}$~$\\ CONFIG\_PACKET\_DIAG [=m] \textbf{[M]}\\ Unterstützung für die PF\_PACKET-Sockel-Überwachungsschnittstelle, die vom Werkzeug \texttt{ss} verwendet wird. Wenn Sie unsicher sind, sagen Sie Y. +\english{Support for PF\_PACKET sockets monitoring interface used by the \texttt{ss} tool. If unsure, say Y.} \subsubsection{Unix domain sockets} CONFIG\_UNIX [=y] \textbf{[Y]}\\ @@ -35,42 +54,68 @@ Netzwerkverbindungen. Viele häufig verwendete Programme wie das X-Window-System verwenden diese Sockets, auch wenn Ihr Rechner nicht an ein Netzwerk angeschlossen ist. Wenn Sie nicht gerade an einem eingebetteten System oder etwas Ähnlichem arbeiten, sollten Sie hier also unbedingt Y sagen. Sagen Sie Y, wenn Sie nicht genau wissen, was Sie tun. +\english{If you say Y here, you will include support for Unix domain sockets; +sockets are the standard Unix mechanism for establishing and accessing network connections. +Many commonly used programs such as the X Window system and syslog use these sockets even if your machine +is not connected to any network. +Unless you are working on an embedded system or something similar, you therefore definitely want to say Y here.\\ +Say Y unless you know what you are doing.} + +\paragraph{UNIX: out-of-bound messages \tiny{seit 6.14}}\mbox{}\\ +CONFIG\_AF\_UNIX\_OOB [=y] \textbf{[Y]}\\ +Unterstützung für MSG\_OOB in UNIX-Domain-Sockets. Wenn Sie unsicher sind, sagen Sie Y. +\english{Support for MSG\_OOB in UNIX domain sockets. If unsure, say Y.} \paragraph{UNIX: socket monitoring interface}$~$\\ CONFIG\_UNIX\_DIAG [=m] \textbf{[M]}\\ Unterstützung für die vom Tool \texttt{ss} verwendete UNIX-Socket-Überwachungsschnittstelle. Wenn Sie unsicher sind, sagen Sie Y. +\english{Support for UNIX socket monitoring interface used by the \texttt{ss} tool. +If unsure, say Y.} \subsubsection{Transport Layer Security support} CONFIG\_TLS [=m] \textbf{[M]}\\ Aktivierung der Kernel-Unterstützung für das TLS-Protokoll. Dadurch kann die symmetrische Verschlüsselung des TLS-Protokolls im Kernel durchgeführt werden. Wenn Sie unsicher sind, sagen Sie N. +\english{Enable kernel support for TLS protocol. +This allows symmetric encryption handling of the TLS protocol to be done in-kernel.\\ +If unsure, say N.} \paragraph{Transport Layer Security HW offload}$~$\\ CONFIG\_TLS\_DEVICE [=y] \textbf{[Y]}\\ Aktivierung der Kernel-Unterstützung für die HW-Auslagerung des TLS-Protokolls. Wenn Sie unsicher sind, sagen Sie N. +\english{Enable kernel support for HW offload of the TLS protocol.\\ +If unsure, say N.} \paragraph{Transport Layer Security TCP stack bypass}$~$\\ CONFIG\_TLS\_TOE [=n] \textbf{[N]}\\ Aktivierung der Kernel-Unterstützung für das Legacy-HW-Offload des TLS-Protokolls, das mit der Semantik des Linux-Netzwerkstacks inkompatibel ist. Wenn Sie unsicher sind, sagen Sie N. +\english{Enable kernel support for legacy HW offload of the TLS protocol, +which is incompatible with the Linux networking stack semantics.} \subsubsection{Transformation user configuration interface} -CONFIG\_XFRM\_USER [=y] \textbf{[Y]}\\ +CONFIG\_XFRM\_USER [=m] \textbf{[M]}\\ Unterstützung für Transformation(XFRM)-Benutzerkonfigurationsschnittstelle wie IPsec, die von nativen Linux-Tools verwendet wird. Wenn Sie unsicher sind, sagen Sie Y. +\english{Support for Transformation(XFRM) user configuration interface like IPsec used by native Linux tools.\\ +If unsure, say Y.} \paragraph{Compatible ABI support}$~$\\ CONFIG\_XFRM\_USER\_COMPAT [=n] \textbf{[N]}\\ Transformation(XFRM)-Benutzerkonfigurationsschnittstelle wie IPsec, die von kompatiblen Linux"=Anwendungen verwendet wird. Wenn Sie unsicher sind, sagen Sie N. +\english{Transformation(XFRM) user configuration interface like IPsec used by compatible Linux applications.\\ +If unsure, say N.} \subsubsection{Transformation virtual interface} CONFIG\_XFRM\_Interface [=m] \textbf{[M]}\\ Damit wird eine virtuelle Schnittstelle zum Routen des IPsec-Verkehrs bereitgestellt. Wenn Sie unsicher sind, sagen Sie N. +\english{This provides a virtual interface to route IPsec traffic.\\ +If unsure, say N.} \subsubsection{Transformation sub policy support} CONFIG\_XFRM\_SUB\_POLICY [=y] \textbf{[Y]}\\ @@ -78,6 +123,10 @@ Unterstützung von Unterrichtsrichtlinien für Entwickler. Durch die Verwendung Unterrichtlinie mit der Hauptrichtlinie können zwei Richtlinien gleichzeitig auf dasselbe Paket angewendet werden. Eine Richtlinie, die kürzer im Kernel lebt, sollte eine Unterrichtlinie sein. Wenn Sie unsicher sind, sagen Sie N. +\english{Support sub policy for developers. +By using sub policy with main one, two policies can be applied to the same packet at once. +Policy which lives shorter time in kernel should be a sub.\\ +If unsure, say N.} \subsubsection{Transformation migrate database} CONFIG\_XFRM\_MIGRATE [=y] \textbf{[Y]}\\ @@ -85,17 +134,27 @@ Eine Funktion zur dynamischen Aktualisierung von Locator(s) einer bestimmten IPsec"=Sicherheitsassoziation. Diese Funktion ist z.\,B. in einer mobilen IPv6-Umgebung mit IPsec-Konfiguration erforderlich, in der mobile Knoten ihren Verbindungspunkt zum Internet ändern. Wenn Sie unsicher sind, sagen Sie N. +\english{A feature to update locator(s) of a given IPsec security association dynamically. +This feature is required, for instance, in a Mobile IPv6 environment with IPsec configuration +where mobile nodes change their attachment point to the Internet.\\ +If unsure, say N.} \subsubsection{Transformation statistics} CONFIG\_XFRM\_STATISTICS [=y] \textbf{[Y]}\\ Diese Statistik ist keine SNMP/MIB-Spezifikation, sondern zeigt Statistiken über Transformationsfehler (oder Fast-Fehler) bei der Paketverarbeitung für Entwickler. Wenn Sie unsicher sind, sagen Sie N. +\english{This statistics is not a SNMP/MIB specification but shows statistics about transformation error +(or almost error) factor at packet processing for developer.\\ +If unsure, say N.} \subsubsection{PF\_KEY sockets} CONFIG\_NET\_KEY [=m] \textbf{[M]}\\ PF\_KEYv2-Buchsenfamilie, kompatibel zu KAME-Buchsen. Sie sind erforderlich, wenn Sie die von KAME portierten IPsec-Tools verwenden wollen. Sagen Sie Y, wenn Sie nicht wissen, was Sie tun. +\english{PF\_KEYv2 socket family, compatible to KAME ones. +They are required if you are going to use IPsec tools ported from KAME.\\ +Say Y unless you know what you are doing.} \paragraph{PF\_KEY MIGRATE}$~$\\ CONFIG\_NET\_KEY\_MIGRATE [=y] \textbf{[Y]}\\ @@ -105,9 +164,15 @@ IPsec"=Sicherheitsassoziation verwendet. Diese Funktion ist z.\,B. in einer mobi IPv6"=Umgebung mit IPsec-Konfiguration erforderlich, in der mobile Knoten ihren Verbindungspunkt zum Internet ändern. Detaillierte Informationen sind im Internet-Entwurf $<$draft-sugimoto-mip6-pfkey-migrate$>$ zu finden. Wenn Sie unsicher sind, sagen Sie N. +\english{Add a PF\_KEY MIGRATE message to PF\_KEYv2 socket family. +The PF\_KEY MIGRATE message is used to dynamically update locator(s) of a given IPsec security association. +This feature is required, for instance, in a Mobile IPv6 environment with IPsec configuration where mobile nodes +change their attachment point to the Internet. +Detail information can be found in the internet-draft $<$draft-sugimoto-mip6-pfkey-migrate$>$.\\ +If unsure, say N.} \subsubsection{IPsec IP-TFS/AGGFRAG (RFC~9347) encapsulation support} -CONFIG\_XFRM\_IPTFS [=n] \textbf{[N]}\\ +CONFIG\_XFRM\_IPTFS [=m] \textbf{[M]}\\ Informationen über die IP-TFS/AGGFRAG-Kapselung finden sich in RFC~9347. Diese Funktion unterstützt bedarfsgesteuertes IP-TFS (d.\,h. nicht konstante Senderate), um die Vorteile der AGGFRAG-ESP-Nutzlastkapselung zu nutzen. @@ -128,25 +193,44 @@ SMC-R bietet eine \glqq Sockets over RDMA\grqq{}-Lösung, die die RDMA over Conv (RoCE)-Technologie nutzt, um AF\_INET-TCP-Verbindungen transparent zu aktualisieren. Die Linux"=Implementierung der SMC-R-Lösung ist als separate Socket-Familie SMC konzipiert. Wählen Sie diese Option, wenn Sie SMC-Socket-Anwendungen ausführen möchten. +\english{SMC-R provides a ``sockets over RDMA'' solution making use of RDMA over Converged Ethernet (RoCE) +technology to upgrade AF\_INET TCP connections transparently. +The Linux implementation of the SMC-R solution is designed as a separate socket family SMC.\\ +Select this option if you want to run SMC socket applications} -\paragraph{SMC socket protocol family}$~$\\ +\paragraph{SMC: socket monitoring interface}$~$\\ CONFIG\_SMC\_DIAG [=m]] \textbf{[M]}\\ Unterstützung für die SMC-Socket-Überwachungsschnittstelle, die von Tools wie \texttt{smcss} verwendet wird. Wenn Sie unsicher sind, sagen Sie Y. +\english{Support for SMC socket monitoring interface used by tools such \texttt{smcss}.\\ +if unsure, say Y.} + +\paragraph{SMC intra-OS shortcut with loopback-ism \tiny{seit 6.10}}\mbox{}\\ +CONFIG\_SMC\_LO [=y] \textbf{[Y]}\\ +SMC\_LO ermöglicht die Erstellung eines Emulations-ISM-Geräts namens Loopback-ism in SMC und nutzt es +für die Übertragung von Daten, wenn die Kommunikation innerhalb desselben Betriebssystems stattfindet. +Dies hilft beim bequemen Testen von SMC-D, da Loopback-ism unabhängig von der Architektur oder Hardware ist.\\ +Wenn Sie unsicher sind, sagen Sie N. +\english{SMC\_LO enables the creation of an Emulated-ISM device named loopback-ism in SMC and makes use of it +for transferring data when communication occurs within the same OS. +This helps in convenient testing of SMC-D since loopback-ism is independent of architecture or hardware.\\ +if unsure, say N.} \subsubsection{XDP sockets} CONFIG\_XDP\_SOCKETS [=y]] \textbf{[Y]}\\ XDP-Sockets ermöglichen einen Kanal zwischen XDP-Programmen und Userspace-Anwendungen. +\english{XDP sockets allows a channel between XDP programs and userspace applications.} \paragraph{XDP sockets: monitoring interface}$~$\\ CONFIG\_XDP\_SOCKETS\_DIAG [=m]] \textbf{[M]}\\ Unterstützung für die vom \texttt{ss}-Tool verwendete PF\_XDP-Socket-Überwachungsschnittstelle. Wenn Sie unsicher sind, sagen Sie Y. +\english{Support for PF\_XDP sockets monitoring interface used by the ss tool. If unsure, say Y.} \subsubsection{TCP/IP networking} CONFIG\_INET [=y]] \textbf{[Y]}\\ Dies sind die Protokolle, die im Internet und in den meisten lokalen Ethernets verwendet werden. -Es wird dringend empfohlen hier Y anzugeben (dadurch wird Ihr Kernel um etwa 400~KB vergrößert), +Es wird dringend empfohlen hier Y anzugeben (dadurch wird Ihr Kernel um etwa \qty{400}{\kilo\byte} vergrößert), da einige Programme (z.\,B. das X-Window-System) TCP/IP verwenden, auch wenn Ihr Rechner nicht mit einem anderen Computer verbunden ist. Sie erhalten das sogenannte Loopback-Gerät, mit dem Sie sich selbst anpingen können (was ein großer Spaß ist!). Eine ausgezeichnete Einführung in @@ -157,15 +241,30 @@ können Sie verschiedene Aspekte des Verhaltens des TCP/IP-Codes ändern, indem (virtuellen) Dateien in /proc/sys/net/ipv4/* schreiben; die Optionen werden in der Datei $<$file:Documentation/networking/ip-sysctl.rst$>$ erläutert. Kurze Antwort: Sagen Sie Y. +\english{These are the protocols used on the Internet and on most local Ethernets. +It is highly recommended to say Y here (this will enlarge your kernel by about 400~KB), +since some programs (e.g. the X window system) use TCP/IP even if your machine is not connected to any other computer. +You will get the so-called loopback device which allows you to ping yourself (great fun, that!).\\ +For an excellent introduction to Linux networking, please read the Linux Networking HOWTO, available from +\url{http://www.tldp.org/docs.html\#howto}.\\ +If you say Y here and also to ``proc file system support'' and ``Sysctl support'' below, you can change various aspects of the +behavior of the TCP/IP code by writing to the (virtual) files in /proc/sys/net/ipv4/*; +the options are explained in the file $<$file:Documentation/networking/ip-sysctl.rst$>$.\\ +Short answer: say Y.} \paragraph{IP: multicasting}$~$\\ CONFIG\_IP\_MULTICAST [=y] \textbf{[Y]}\\ Dabei handelt es sich um einen Code zur gleichzeitigen Adressierung mehrerer vernetzter Computer, -der Ihren Kernel um etwa 2~KB vergrößert. Sie brauchen Multicasting, wenn Sie am MBONE teilnehmen +der Ihren Kernel um etwa \qty{2}{\kilo\byte} vergrößert. Sie brauchen Multicasting, wenn Sie am MBONE teilnehmen wollen, einem Netz mit hoher Bandbreite über dem Internet, das Audio- und Videoübertragungen überträgt. Weitere Informationen über MBONE finden Sie im WWW unter \url{https://www.savetz.com/mbone/}. Für die meisten Leute ist es sicher, N zu sagen. +\english{This is code for addressing several networked computers at once, enlarging your kernel by about 2~KB. +You need multicasting if you intend to participate in the MBONE, a high bandwidth network on top of the Internet +which carries audio and video broadcasts. +More information about the MBONE is on the WWW at \url{https://www.savetz.com/mbone/}. +For most people, it's safe to say N.} \paragraph{IP: advanced router}$~$\\ CONFIG\_IP\_ADVANCED\_ROUTER [=y] \textbf{[Y]}\\ @@ -196,11 +295,33 @@ oder Beachten Sie, dass einige Distributionen dies in Startskripten aktivieren. Für Details über rp\_filter strict und loose mode lesen Sie $<$file:Documentation/networking/ip-sysctl.rst$>$. Wenn Sie unsicher sind, geben Sie hier N an. +\english{If you intend to run your Linux box mostly as a router, i.e. as a computer that forwards and redistributes +network packets, say Y; you will then be presented with several options that allow more precise control about the routing process.\\ +The answer to this question won't directly affect the kernel: answering N will just cause the configurator to skip all the +questions about advanced routing.\\ +Note that your box can only act as a router if you enable IP forwarding in your kernel; +you can do that by saying Y to ``/proc file system support'' and ``Sysctl support'' below and executing the line\\ +\texttt{echo "1" > /proc/sys/net/ipv4/ip\_forward}\\ +at boot time after the /proc file system has been mounted.\\ +If you turn on IP forwarding, you should consider the rp\_filter, which automatically rejects incoming packets if the routing table +entry for their source address doesn't match the network interface they're arriving on. +This has security advantages because it prevents the so-called IP spoofing, however it can pose problems if you use asymmetric routing +(packets from you to a host take a different path than packets from that host to you) or if you operate a non-routing +host which has several IP addresses on different interfaces. +To turn rp\_filter on use:\\ +\texttt{echo 1 $>$ /proc/sys/net/ipv4/conf/$<$device$>$/rp\_filter}\\ +or +\texttt{echo 1 $>$ /proc/sys/net/ipv4/conf/all/rp\_filter}\\ +Note that some distributions enable it in startup scripts. +For details about rp\_filter strict and loose mode read $<$file:Documentation/networking/ip-sysctl.rst$>$.\\ +If unsure, say N here.} \subparagraph{FIB TRIE statistics}$~$\\ CONFIG\_IP\_FIB\_TRIE\_STATS [=y] \textbf{[Y]}\\ Behalten Sie die Statistiken über die Struktur der FIB TRIE-Tabelle im Auge. Nützlich zum Testen und Messen der TRIE-Leistung. +\english{Keep track of statistics on structure of FIB TRIE table. +Useful for testing and measuring TRIE performance.} \subparagraph{IP: policy routing}$~$\\ CONFIG\_IP\_MULTIPLE\_TABLES [=y] \textbf{[Y]}\\ @@ -211,6 +332,12 @@ das TOS-Feld (Type-Of-Service) des Pakets für Routing-Entscheidungen verwendet Weitere Informationen finden Sie in der Linux-Dokumentation Advanced Routing and Traffic Control unter \url{https://lartc.org/howto/lartc.rpdb.html}. Wenn Sie unsicher sind, sagen Sie N. +\english{Normally, a router decides what to do with a received packet based solely on the packet's final destination address. +If you say Y here, the Linux router will also be able to take the packet's source address into account. +Furthermore, the TOS (Type-Of-Service) field of the packet can be used for routing decisions as well.\\ +If you need more information, see the Linux Advanced Routing and Traffic Control documentation at\\ +\url{https://lartc.org/howto/lartc.rpdb.html}\\ +If unsure, say N.} \subparagraph{IP: equal cost multipath}$~$\\ CONFIG\_IP\_ROUTE\_MULTIPATH [=y] \textbf{[Y]}\\ @@ -219,22 +346,34 @@ deterministische Weise durchgeführt wird. Wenn Sie hier jedoch Y sagen, ist es Aktionen an ein Paketmuster zu knüpfen und damit mehrere alternative Wege für diese Pakete festzulegen. Der Router betrachtet alle diese Pfade als gleich teuer und wählt einen von ihnen auf nicht-deterministische Weise aus, wenn ein passendes Paket eintrifft. +\english{Normally, the routing tables specify a single action to be taken in a deterministic manner for a given packet. +If you say Y here however, it becomes possible to attach several actions to a packet pattern, in effect specifying +several alternative paths to travel for those packets. +The router considers all these paths to be of equal ``cost'' and chooses one of them in a non-deterministic +fashion if a matching packet arrives.} \subparagraph{IP: verbose route monitoring}$~$\\ CONFIG\_IP\_ROUTE\_VERBOSE [=y] \textbf{[Y]}\\ Wenn Sie hier Y angeben, was empfohlen wird, gibt der Kernel ausführliche Meldungen über das Routing aus, zum Beispiel Warnungen über empfangene Pakete, die seltsam aussehen und auf einen Angriff oder ein falsch konfiguriertes System hindeuten könnten. Die Informationen werden vom -klogd-Daemon verarbeitet, der für die Kernelmeldungen zuständig ist (\glqq man klogd\grqq{}). +klogd-Daemon verarbeitet, der für die Kernelmeldungen zuständig ist (\texttt{man klogd}). +\english{If you say Y here, which is recommended, then the kernel will print verbose messages regarding the routing, +for example warnings about received packets which look strange and could be evidence of an attack or a misconfigured system somewhere. +The information is handled by the klogd daemon which is responsible for kernel messages (``man klogd'').} \paragraph{IP: kernel level autoconfiguration}$~$\\ -CONFIG\_IP\_ADVANCED\_ROUTER [=n] \textbf{[N]}\\ +CONFIG\_IP\_PNP [=n] \textbf{[N]}\\ Dies ermöglicht die automatische Konfiguration der IP-Adressen von Geräten und der Routing-Tabelle beim Booten des Kernels auf der Grundlage von Informationen, die entweder über die Kernel-Befehlszeile oder über BOOTP- oder RARP-Protokolle bereitgestellt werden. Sie müssen Y nur für plattenlose Maschinen angeben, die zum Booten Netzwerkzugriff benötigen (in diesem Fall sollten Sie auch Y für \glqq Root file system on NFS\grqq{} angeben), da alle anderen Maschinen das Netzwerk in ihren Startskripten konfigurieren. +\english{This enables automatic configuration of IP addresses of devices and of the routing table during kernel boot, +based on either information supplied on the kernel command line or by BOOTP or RARP protocols. +You need to say Y only for diskless machines requiring network access to boot (in which case you want to say Y to +``Root file system on NFS'' as well), because all other machines configure the network in their startup scripts.} \paragraph{IP: tunneling}$~$\\ CONFIG\_NET\_IPIP [=m] \textbf{[M]}\\ @@ -247,11 +386,19 @@ wollen, als er tatsächlich ist, oder wenn Sie die Möglichkeiten von Mobile-IP diese Option mit Y bestätigen, werden zwei Module ( = Code, der in den laufenden Kernel eingefügt und aus ihm entfernt werden kann, wann immer Sie wollen) erzeugt. Die meisten Leute werden das nicht brauchen und können N sagen. +\english{Tunneling means encapsulating data of one protocol type within another protocol and sending it over a channel +that understands the encapsulating protocol. +This particular tunneling driver implements encapsulation of IP within IP, which sounds kind of pointless, but can +be useful if you want to make your (or some other) machine appear on a different network than it physically is, +or to use mobile-IP facilities (allowing laptops to seamlessly move between networks without changing their IP addresses).\\ +Saying Y to this option will produce two modules ( = code which can be inserted in and removed from the running kernel whenever you want). +Most people won't need this and can say N.} \paragraph{IP: GRE demultiplexer}$~$\\ CONFIG\_NET\_IPGRE\_DEMUX [=m] \textbf{[M]}\\ Dies ist ein Hilfsmodul zum Demultiplexen von GRE-Paketen anhand von GRE-Versionsfeldkriterien. Erforderlich für die Module \texttt{ip\_gre} und \texttt{pptp}. +\english{This is helper module to demultiplex GRE packets on GRE version field criteria. Required by ip\_gre and pptp modules.} \paragraph{IP: GRE tunnels over IP}$~$\\ CONFIG\_NET\_IPGRE [=m] \textbf{[M]}\\ @@ -262,6 +409,13 @@ Verkapselung von IPv4 oder IPv6 über eine bestehende IPv4-Infrastruktur. Dieser nützlich, wenn der andere Endpunkt ein Cisco-Router ist: Cisco mag GRE viel lieber als den anderen Linux-Tunneltreiber (\glqq IP-Tunneling\grqq{} oben). Außerdem erlaubt GRE die Weiterverteilung von Multicast durch den Tunnel. +\english{Tunneling means encapsulating data of one protocol type within another protocol and sending +it over a channel that understands the encapsulating protocol. +This particular tunneling driver implements GRE (Generic Routing Encapsulation) and at this time allows +encapsulating of IPv4 or IPv6 over existing IPv4 infrastructure. +This driver is useful if the other endpoint is a Cisco router: Cisco likes GRE much better than the other Linux tunneling driver +("IP tunneling" above). +In addition, GRE allows multicast redistribution through the tunnel.} \subparagraph{IP: broadcast GRE over IP}$~$\\ CONFIG\_NET\_IPGRE\_BROADCAST [=y] \textbf{[Y]}\\ @@ -269,6 +423,9 @@ Eine Anwendung von GRE/IP ist der Aufbau eines Broadcast-WAN (Wide Area Network) ein normales Ethernet-LAN (Local Area Network) aussieht, aber über das gesamte Internet verteilt werden kann. Wenn Sie das tun wollen, sagen Sie hier und bei \glqq IP-Multicast-Routing\grqq{} unten Y. +\english{One application of GRE/IP is to construct a broadcast WAN (Wide Area Network), +which looks like a normal Ethernet LAN (Local Area Network), but can be distributed all over the Internet. +If you want to do that, say Y here and to ``IP multicast routing'' below.} \paragraph{IP: multicast routing}$~$\\ CONFIG\_IP\_MROUTE [=y] \textbf{[Y]}\\