config-6.18 RawHistoryFolder

1# Minimal Linux 6.18 guest configuration for Firecracker micro-VMs running
2# Docker (ermite-runner). This is a configuration *fragment*: scripts/build-kernel.sh
3# merges it over `make tinyconfig` and resolves dependencies with olddefconfig,
4# then fails if an option listed here did not survive. Per-architecture options
5# are in config-6.18.x86_64 and config-6.18.arm64, merged after this file.
6
7# --- Core ---
8CONFIG_64BIT=y
9CONFIG_SMP=y
10CONFIG_NR_CPUS=64
11CONFIG_EXPERT=y
12CONFIG_PRINTK=y
13CONFIG_PRINTK_TIME=y
14CONFIG_KALLSYMS=y
15CONFIG_BUG=y
16CONFIG_TTY=y
17CONFIG_UNIX98_PTYS=y
18CONFIG_MULTIUSER=y
19CONFIG_FUTEX=y
20CONFIG_EPOLL=y
21CONFIG_EVENTFD=y
22CONFIG_SIGNALFD=y
23CONFIG_TIMERFD=y
24CONFIG_AIO=y
25CONFIG_FHANDLE=y
26CONFIG_FILE_LOCKING=y
27CONFIG_ADVISE_SYSCALLS=y
28CONFIG_MEMBARRIER=y
29CONFIG_POSIX_TIMERS=y
30CONFIG_HIGH_RES_TIMERS=y
31CONFIG_NO_HZ_IDLE=y
32CONFIG_BINFMT_ELF=y
33CONFIG_BINFMT_SCRIPT=y
34CONFIG_SYSVIPC=y
35CONFIG_POSIX_MQUEUE=y
36CONFIG_KEYS=y
37CONFIG_SECCOMP=y
38CONFIG_SECCOMP_FILTER=y
39CONFIG_BPF_SYSCALL=y
40CONFIG_BPF_JIT=y
41CONFIG_INOTIFY_USER=y
42CONFIG_FANOTIFY=y
43CONFIG_SHMEM=y
44CONFIG_MODULES=n
45
46# --- Guest basics (x86-64 only options live in config-6.18.x86_64) ---
47CONFIG_SERIAL_8250=y
48CONFIG_SERIAL_8250_CONSOLE=y
49CONFIG_HW_RANDOM=y
50CONFIG_HW_RANDOM_VIRTIO=y
51
52# --- virtio (Firecracker uses virtio-mmio) ---
53CONFIG_VIRTIO_MENU=y
54CONFIG_VIRTIO=y
55CONFIG_VIRTIO_MMIO=y
56CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y
57CONFIG_VIRTIO_BLK=y
58CONFIG_VIRTIO_NET=y
59CONFIG_VSOCKETS=y
60CONFIG_VIRTIO_VSOCKETS=y
61
62# --- Block, filesystems ---
63CONFIG_BLOCK=y
64CONFIG_BLK_DEV=y
65CONFIG_PROC_FS=y
66CONFIG_PROC_SYSCTL=y
67CONFIG_SYSFS=y
68CONFIG_TMPFS=y
69CONFIG_TMPFS_POSIX_ACL=y
70CONFIG_TMPFS_XATTR=y
71CONFIG_DEVTMPFS=y
72CONFIG_DEVTMPFS_MOUNT=y
73CONFIG_SYSCTL=y
74CONFIG_EXT4_FS=y
75CONFIG_EXT4_FS_POSIX_ACL=y
76CONFIG_EXT4_FS_SECURITY=y
77CONFIG_OVERLAY_FS=y
78CONFIG_FUSE_FS=y
79CONFIG_CRYPTO=y
80CONFIG_CRYPTO_CRC32C=y
81
82# --- Namespaces and cgroups v2 (Docker, runc) ---
83CONFIG_NAMESPACES=y
84CONFIG_UTS_NS=y
85CONFIG_IPC_NS=y
86CONFIG_USER_NS=y
87CONFIG_PID_NS=y
88CONFIG_NET_NS=y
89CONFIG_TIME_NS=y
90CONFIG_CGROUPS=y
91CONFIG_CGROUP_PIDS=y
92CONFIG_CGROUP_SCHED=y
93CONFIG_FAIR_GROUP_SCHED=y
94CONFIG_CFS_BANDWIDTH=y
95CONFIG_CPUSETS=y
96CONFIG_MEMCG=y
97CONFIG_BLK_CGROUP=y
98CONFIG_CGROUP_DEVICE=y
99CONFIG_CGROUP_FREEZER=y
100CONFIG_CGROUP_CPUACCT=y
101CONFIG_CGROUP_BPF=y
102CONFIG_HUGETLBFS=y
103CONFIG_HUGETLB_PAGE=y
104CONFIG_CGROUP_HUGETLB=y
105
106# --- Network ---
107CONFIG_NET=y
108CONFIG_NETDEVICES=y
109CONFIG_NET_CORE=y
110CONFIG_INET=y
111CONFIG_IP_PNP=y
112CONFIG_IPV6=y
113CONFIG_UNIX=y
114CONFIG_PACKET=y
115CONFIG_TUN=y
116CONFIG_VETH=y
117CONFIG_BRIDGE=y
118CONFIG_BRIDGE_NETFILTER=y
119CONFIG_VLAN_8021Q=y
120CONFIG_INET_DIAG=y
121CONFIG_INET_UDP_DIAG=y
122CONFIG_UNIX_DIAG=y
123CONFIG_NETLINK_DIAG=y
124CONFIG_SYN_COOKIES=y
125
126# --- netfilter: nftables, iptables compatibility, NAT ---
127CONFIG_NETFILTER=y
128CONFIG_NETFILTER_ADVANCED=y
129CONFIG_NETFILTER_NETLINK=y
130CONFIG_NF_CONNTRACK=y
131CONFIG_NF_NAT=y
132CONFIG_NF_TABLES=y
133CONFIG_NF_TABLES_INET=y
134CONFIG_NF_TABLES_IPV4=y
135CONFIG_NFT_CT=y
136CONFIG_NFT_NAT=y
137CONFIG_NFT_MASQ=y
138CONFIG_NFT_REJECT=y
139CONFIG_NFT_LIMIT=y
140CONFIG_NFT_LOG=y
141CONFIG_NFT_COMPAT=y
142CONFIG_NETFILTER_XTABLES=y
143CONFIG_NETFILTER_XTABLES_LEGACY=y
144CONFIG_NETFILTER_XT_NAT=y
145CONFIG_NETFILTER_XT_MARK=y
146CONFIG_NETFILTER_XT_CONNMARK=y
147CONFIG_NETFILTER_XT_TARGET_MASQUERADE=y
148CONFIG_NETFILTER_XT_TARGET_MARK=y
149CONFIG_NETFILTER_XT_TARGET_CHECKSUM=y
150CONFIG_NETFILTER_XT_TARGET_CONNMARK=y
151CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
152CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
153CONFIG_NETFILTER_XT_MATCH_COMMENT=y
154CONFIG_NETFILTER_XT_MATCH_MARK=y
155CONFIG_NETFILTER_XT_MATCH_MULTIPORT=y
156CONFIG_IP_NF_IPTABLES_LEGACY=y
157CONFIG_IP_NF_IPTABLES=y
158CONFIG_IP_NF_FILTER=y
159CONFIG_IP_NF_MANGLE=y
160CONFIG_IP_NF_RAW=y
161CONFIG_IP_NF_NAT=y
162CONFIG_IP_NF_TARGET_MASQUERADE=y
163CONFIG_IP_NF_TARGET_REJECT=y