config-6.18 RawHistoryFolder

1# Minimal Linux 6.18 guest configuration for Firecracker micro-VMs running
2# Docker (ermite-runner). This is a configuration *fragment*: scripts/build-kernel.sh
3# merges it over `make tinyconfig` and resolves dependencies with olddefconfig,
4# then fails if an option listed here did not survive. Per-architecture options
5# are in config-6.18.x86_64 and config-6.18.arm64, merged after this file.
6
7# --- Core ---
8CONFIG_64BIT=y
9CONFIG_SMP=y
10CONFIG_NR_CPUS=64
11CONFIG_EXPERT=y
12CONFIG_PRINTK=y
13CONFIG_PRINTK_TIME=y
14CONFIG_KALLSYMS=y
15CONFIG_BUG=y
16CONFIG_TTY=y
17CONFIG_UNIX98_PTYS=y
18CONFIG_MULTIUSER=y
19CONFIG_FUTEX=y
20CONFIG_EPOLL=y
21CONFIG_EVENTFD=y
22CONFIG_SIGNALFD=y
23CONFIG_TIMERFD=y
24CONFIG_AIO=y
25CONFIG_FHANDLE=y
26CONFIG_FILE_LOCKING=y
27CONFIG_ADVISE_SYSCALLS=y
28CONFIG_MEMBARRIER=y
29CONFIG_POSIX_TIMERS=y
30CONFIG_HIGH_RES_TIMERS=y
31CONFIG_NO_HZ_IDLE=y
32CONFIG_BINFMT_ELF=y
33CONFIG_BINFMT_SCRIPT=y
34CONFIG_BINFMT_MISC=y
35CONFIG_SYSVIPC=y
36CONFIG_POSIX_MQUEUE=y
37CONFIG_KEYS=y
38CONFIG_SECCOMP=y
39CONFIG_SECCOMP_FILTER=y
40CONFIG_BPF_SYSCALL=y
41CONFIG_BPF_JIT=y
42CONFIG_INOTIFY_USER=y
43CONFIG_FANOTIFY=y
44CONFIG_SHMEM=y
45CONFIG_MODULES=n
46
47# --- Guest basics (x86-64 only options live in config-6.18.x86_64) ---
48CONFIG_SERIAL_8250=y
49CONFIG_SERIAL_8250_CONSOLE=y
50CONFIG_HW_RANDOM=y
51CONFIG_HW_RANDOM_VIRTIO=y
52
53# --- virtio (Firecracker uses virtio-mmio) ---
54CONFIG_VIRTIO_MENU=y
55CONFIG_VIRTIO=y
56CONFIG_VIRTIO_MMIO=y
57CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y
58CONFIG_VIRTIO_BLK=y
59CONFIG_VIRTIO_NET=y
60CONFIG_VSOCKETS=y
61CONFIG_VIRTIO_VSOCKETS=y
62
63# --- Block, filesystems ---
64CONFIG_BLOCK=y
65CONFIG_BLK_DEV=y
66CONFIG_PROC_FS=y
67CONFIG_PROC_SYSCTL=y
68CONFIG_SYSFS=y
69CONFIG_TMPFS=y
70CONFIG_TMPFS_POSIX_ACL=y
71CONFIG_TMPFS_XATTR=y
72CONFIG_DEVTMPFS=y
73CONFIG_DEVTMPFS_MOUNT=y
74CONFIG_SYSCTL=y
75CONFIG_EXT4_FS=y
76CONFIG_EXT4_FS_POSIX_ACL=y
77CONFIG_EXT4_FS_SECURITY=y
78CONFIG_OVERLAY_FS=y
79CONFIG_FUSE_FS=y
80CONFIG_CRYPTO=y
81CONFIG_CRYPTO_CRC32C=y
82
83# --- Namespaces and cgroups v2 (Docker, runc) ---
84CONFIG_NAMESPACES=y
85CONFIG_UTS_NS=y
86CONFIG_IPC_NS=y
87CONFIG_USER_NS=y
88CONFIG_PID_NS=y
89CONFIG_NET_NS=y
90CONFIG_TIME_NS=y
91CONFIG_CGROUPS=y
92CONFIG_CGROUP_PIDS=y
93CONFIG_CGROUP_SCHED=y
94CONFIG_FAIR_GROUP_SCHED=y
95CONFIG_CFS_BANDWIDTH=y
96CONFIG_CPUSETS=y
97CONFIG_MEMCG=y
98CONFIG_BLK_CGROUP=y
99CONFIG_CGROUP_DEVICE=y
100CONFIG_CGROUP_FREEZER=y
101CONFIG_CGROUP_CPUACCT=y
102CONFIG_CGROUP_BPF=y
103CONFIG_HUGETLBFS=y
104CONFIG_HUGETLB_PAGE=y
105CONFIG_CGROUP_HUGETLB=y
106
107# --- Network ---
108CONFIG_NET=y
109CONFIG_NETDEVICES=y
110CONFIG_NET_CORE=y
111CONFIG_INET=y
112CONFIG_IP_PNP=y
113CONFIG_IPV6=y
114CONFIG_UNIX=y
115CONFIG_PACKET=y
116CONFIG_TUN=y
117CONFIG_VETH=y
118CONFIG_BRIDGE=y
119CONFIG_BRIDGE_NETFILTER=y
120CONFIG_VLAN_8021Q=y
121CONFIG_INET_DIAG=y
122CONFIG_INET_UDP_DIAG=y
123CONFIG_UNIX_DIAG=y
124CONFIG_NETLINK_DIAG=y
125CONFIG_SYN_COOKIES=y
126
127# --- netfilter: nftables, iptables compatibility, NAT ---
128CONFIG_NETFILTER=y
129CONFIG_NETFILTER_ADVANCED=y
130CONFIG_NETFILTER_NETLINK=y
131CONFIG_NF_CONNTRACK=y
132CONFIG_NF_NAT=y
133CONFIG_NF_TABLES=y
134CONFIG_NF_TABLES_INET=y
135CONFIG_NF_TABLES_IPV4=y
136CONFIG_NFT_CT=y
137CONFIG_NFT_NAT=y
138CONFIG_NFT_MASQ=y
139CONFIG_NFT_REJECT=y
140CONFIG_NFT_LIMIT=y
141CONFIG_NFT_LOG=y
142CONFIG_NFT_COMPAT=y
143CONFIG_NETFILTER_XTABLES=y
144CONFIG_NETFILTER_XTABLES_LEGACY=y
145CONFIG_NETFILTER_XT_NAT=y
146CONFIG_NETFILTER_XT_MARK=y
147CONFIG_NETFILTER_XT_CONNMARK=y
148CONFIG_NETFILTER_XT_TARGET_MASQUERADE=y
149CONFIG_NETFILTER_XT_TARGET_MARK=y
150CONFIG_NETFILTER_XT_TARGET_CHECKSUM=y
151CONFIG_NETFILTER_XT_TARGET_CONNMARK=y
152CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
153CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
154CONFIG_NETFILTER_XT_MATCH_COMMENT=y
155CONFIG_NETFILTER_XT_MATCH_MARK=y
156CONFIG_NETFILTER_XT_MATCH_MULTIPORT=y
157CONFIG_IP_NF_IPTABLES_LEGACY=y
158CONFIG_IP_NF_IPTABLES=y
159CONFIG_IP_NF_FILTER=y
160CONFIG_IP_NF_MANGLE=y
161CONFIG_IP_NF_RAW=y
162CONFIG_IP_NF_NAT=y
163CONFIG_IP_NF_TARGET_MASQUERADE=y
164CONFIG_IP_NF_TARGET_REJECT=y