blob: 0a97d85568b270e0a99af8f69697e26b1746d76e [file] [log] [blame]
Thomas Gleixnerec8f24b2019-05-19 13:07:45 +01001# SPDX-License-Identifier: GPL-2.0-only
Roman Zippelface4372006-06-08 22:12:45 -07002config DEFCONFIG_LIST
3 string
Paolo 'Blaisorblade' Giarrussob2670eac2006-10-19 23:28:23 -07004 depends on !UML
Roman Zippelface4372006-06-08 22:12:45 -07005 option defconfig_list
Rob Landley47f38ae2018-08-08 13:06:43 +09006 default "/lib/modules/$(shell,uname -r)/.config"
Roman Zippelface4372006-06-08 22:12:45 -07007 default "/etc/kernel-config"
Rob Landley47f38ae2018-08-08 13:06:43 +09008 default "/boot/config-$(shell,uname -r)"
Masahiro Yamada2a86f662020-02-28 12:46:40 +09009 default "arch/$(SRCARCH)/configs/$(KBUILD_DEFCONFIG)"
Roman Zippelface4372006-06-08 22:12:45 -070010
Masahiro Yamada8b59cd82020-04-23 23:23:52 +090011config CC_VERSION_TEXT
12 string
13 default "$(CC_VERSION_TEXT)"
14 help
15 This is used in unclear ways:
16
17 - Re-run Kconfig when the compiler is updated
18 The 'default' property references the environment variable,
19 CC_VERSION_TEXT so it is recorded in include/config/auto.conf.cmd.
20 When the compiler is updated, Kconfig will be invoked.
21
22 - Ensure full rebuild when the compier is updated
23 include/linux/kconfig.h contains this option in the comment line so
24 fixdep adds include/config/cc/version/text.h into the auto-generated
25 dependency. When the compiler is updated, syncconfig will touch it
26 and then every file will be rebuilt.
27
Masahiro Yamadaa4353892018-05-28 18:22:01 +090028config CC_IS_GCC
Masahiro Yamadae33ae3e2020-04-23 23:23:51 +090029 def_bool $(success,echo "$(CC_VERSION_TEXT)" | grep -q gcc)
Masahiro Yamadaa4353892018-05-28 18:22:01 +090030
31config GCC_VERSION
32 int
Masahiro Yamadafa7295a2019-03-01 16:10:22 +090033 default $(shell,$(srctree)/scripts/gcc-version.sh $(CC)) if CC_IS_GCC
Masahiro Yamadaa4353892018-05-28 18:22:01 +090034 default 0
35
Amit Daniel Kachhap9553d162020-03-30 17:11:38 +053036config LD_VERSION
37 int
38 default $(shell,$(LD) --version | $(srctree)/scripts/ld-version.sh)
39
Masahiro Yamada469cb732018-05-28 18:22:02 +090040config CC_IS_CLANG
Masahiro Yamadae33ae3e2020-04-23 23:23:51 +090041 def_bool $(success,echo "$(CC_VERSION_TEXT)" | grep -q clang)
Masahiro Yamada469cb732018-05-28 18:22:02 +090042
Sami Tolvanenb744b432020-04-28 15:14:15 -070043config LD_IS_LLD
44 def_bool $(success,$(LD) -v | head -n 1 | grep -q LLD)
45
Masahiro Yamada469cb732018-05-28 18:22:02 +090046config CLANG_VERSION
47 int
48 default $(shell,$(srctree)/scripts/clang-version.sh $(CC))
49
Masahiro Yamada1a927fd2019-07-01 09:58:39 +090050config CC_CAN_LINK
Masahiro Yamada9371f862020-04-29 12:45:13 +090051 bool
Masahiro Yamadab816b3d2020-07-01 00:06:24 +090052 default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(m64-flag)) if 64BIT
53 default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(m32-flag))
Masahiro Yamada1a927fd2019-07-01 09:58:39 +090054
Masahiro Yamadab1183b62020-05-09 16:39:15 +090055config CC_CAN_LINK_STATIC
56 bool
Masahiro Yamadab816b3d2020-07-01 00:06:24 +090057 default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(m64-flag) -static) if 64BIT
58 default $(success,$(srctree)/scripts/cc-can-link.sh $(CC) $(CLANG_FLAGS) $(m32-flag) -static)
Andy Lutomirskic65eacb2016-09-13 14:29:24 -070059
Masahiro Yamadae9666d12018-12-31 00:14:15 +090060config CC_HAS_ASM_GOTO
61 def_bool $(success,$(srctree)/scripts/gcc-goto.sh $(CC))
62
Nick Desaulniers587f1702020-02-14 14:18:11 -080063config CC_HAS_ASM_GOTO_OUTPUT
64 depends on CC_HAS_ASM_GOTO
65 def_bool $(success,echo 'int foo(int x) { asm goto ("": "=r"(x) ::: bar); return x; bar: return 0; }' | $(CC) -x c - -c -o /dev/null)
66
Peter Collingbourne5cf896f2019-07-31 18:18:42 -070067config TOOLS_SUPPORT_RELR
Will Deacon2d122942019-08-20 10:11:54 +010068 def_bool $(success,env "CC=$(CC)" "LD=$(LD)" "NM=$(NM)" "OBJCOPY=$(OBJCOPY)" $(srctree)/scripts/tools-support-relr.sh)
Peter Collingbourne5cf896f2019-07-31 18:18:42 -070069
Rasmus Villemoeseb111862019-09-13 00:19:25 +020070config CC_HAS_ASM_INLINE
71 def_bool $(success,echo 'void foo(void) { asm inline (""); }' | $(CC) -x c - -c -o /dev/null)
72
Peter Oberparleiterb99b87f2009-06-17 16:28:03 -070073config CONSTRUCTORS
74 bool
Johannes Berg87c93662019-12-04 17:43:46 +010075 depends on !UML
Peter Oberparleiterb99b87f2009-06-17 16:28:03 -070076
Peter Zijlstrae360adb2010-10-14 14:01:34 +080077config IRQ_WORK
78 bool
Peter Zijlstrae360adb2010-10-14 14:01:34 +080079
Shile Zhang10916702019-12-04 08:46:31 +080080config BUILDTIME_TABLE_SORT
David Daney1dbdc6f2012-04-19 14:59:57 -070081 bool
82
Andy Lutomirskic65eacb2016-09-13 14:29:24 -070083config THREAD_INFO_IN_TASK
84 bool
85 help
86 Select this to move thread_info off the stack into task_struct. To
87 make this work, an arch will need to remove all thread_info fields
88 except flags and fix any runtime bugs.
89
Andy Lutomirskic6c314a2016-09-15 22:45:43 -070090 One subtle change that will be needed is to use try_get_task_stack()
91 and put_task_stack() in save_thread_stack_tsk() and get_wchan().
92
Al Boldiff0cfc62007-07-31 00:39:23 -070093menu "General setup"
Linus Torvalds1da177e2005-04-16 15:20:36 -070094
Linus Torvalds1da177e2005-04-16 15:20:36 -070095config BROKEN
96 bool
Linus Torvalds1da177e2005-04-16 15:20:36 -070097
98config BROKEN_ON_SMP
99 bool
100 depends on BROKEN || !SMP
101 default y
102
Linus Torvalds1da177e2005-04-16 15:20:36 -0700103config INIT_ENV_ARG_LIMIT
104 int
Adrian Bunkdd673bc2006-06-30 01:55:51 -0700105 default 32 if !UML
106 default 128 if UML
Linus Torvalds1da177e2005-04-16 15:20:36 -0700107 help
Randy Dunlap34ad92c22005-10-30 15:01:46 -0800108 Maximum of each of the number of arguments and environment
109 variables passed to init from the kernel command line.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700110
Jiri Slaby4bb16672013-05-22 10:56:24 +0200111config COMPILE_TEST
112 bool "Compile also drivers which will not load"
Richard Weinbergerbc083a62016-08-02 14:03:27 -0700113 depends on !UML
Jiri Slaby4bb16672013-05-22 10:56:24 +0200114 default n
115 help
116 Some drivers can be compiled on a different platform than they are
117 intended to be run on. Despite they cannot be loaded there (or even
118 when they load they cannot be used due to missing HW support),
119 developers still, opposing to distributors, might want to build such
120 drivers to compile-test them.
121
122 If you are a developer and want to build everything available, say Y
123 here. If you are a user/distributor, say N here to exclude useless
124 drivers to be distributed.
125
Masahiro Yamadad6fc9fc2019-07-01 09:58:40 +0900126config UAPI_HEADER_TEST
127 bool "Compile test UAPI headers"
Masahiro Yamadafcbb8462019-11-07 16:14:40 +0900128 depends on HEADERS_INSTALL && CC_CAN_LINK
Masahiro Yamadad6fc9fc2019-07-01 09:58:40 +0900129 help
130 Compile test headers exported to user-space to ensure they are
131 self-contained, i.e. compilable as standalone units.
132
133 If you are a developer or tester and want to ensure the exported
134 headers are self-contained, say Y here. Otherwise, choose N.
135
Linus Torvalds1da177e2005-04-16 15:20:36 -0700136config LOCALVERSION
137 string "Local version - append to kernel release"
138 help
139 Append an extra string to the end of your kernel version.
140 This will show up when you type uname, for example.
141 The string you set here will be appended after the contents of
142 any files with a filename matching localversion* in your
143 object and source tree, in that order. Your total string can
144 be a maximum of 64 characters.
145
Ryan Andersonaaebf432005-07-31 04:57:49 -0400146config LOCALVERSION_AUTO
147 bool "Automatically append version information to the version string"
148 default y
Alexey Dobriyanac3339b2016-08-02 14:07:21 -0700149 depends on !COMPILE_TEST
Ryan Andersonaaebf432005-07-31 04:57:49 -0400150 help
151 This will try to automatically determine if the current tree is a
Robert P. J. Day6e5a5422007-05-01 23:08:11 +0200152 release tree by looking for git tags that belong to the current
153 top of tree revision.
Ryan Andersonaaebf432005-07-31 04:57:49 -0400154
155 A string of the format -gxxxxxxxx will be added to the localversion
Robert P. J. Day6e5a5422007-05-01 23:08:11 +0200156 if a git-based tree is found. The string generated by this will be
Ryan Andersonaaebf432005-07-31 04:57:49 -0400157 appended after any matching localversion* files, and after the value
Robert P. J. Day6e5a5422007-05-01 23:08:11 +0200158 set in CONFIG_LOCALVERSION.
Ryan Andersonaaebf432005-07-31 04:57:49 -0400159
Robert P. J. Day6e5a5422007-05-01 23:08:11 +0200160 (The actual string used here is the first eight characters produced
161 by running the command:
162
163 $ git rev-parse --verify HEAD
164
165 which is done within the script "scripts/setlocalversion".)
Ryan Andersonaaebf432005-07-31 04:57:49 -0400166
Laura Abbott9afb7192018-07-05 17:49:37 -0700167config BUILD_SALT
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -0800168 string "Build ID Salt"
169 default ""
170 help
171 The build ID is used to link binaries and their debug info. Setting
172 this option will use the value in the calculation of the build id.
173 This is mostly useful for distributions which want to ensure the
174 build is unique between builds. It's safe to leave the default.
Laura Abbott9afb7192018-07-05 17:49:37 -0700175
H. Peter Anvin2e9f3bd2009-01-04 15:41:25 -0800176config HAVE_KERNEL_GZIP
177 bool
178
179config HAVE_KERNEL_BZIP2
180 bool
181
182config HAVE_KERNEL_LZMA
183 bool
184
Lasse Collin3ebe1242011-01-12 17:01:23 -0800185config HAVE_KERNEL_XZ
186 bool
187
Albin Tonnerre7dd65fe2010-01-08 14:42:42 -0800188config HAVE_KERNEL_LZO
189 bool
190
Kyungsik Leee76e1fd2013-07-08 16:01:46 -0700191config HAVE_KERNEL_LZ4
192 bool
193
Vasily Gorbikf16466a2018-06-12 21:26:35 +0200194config HAVE_KERNEL_UNCOMPRESSED
195 bool
196
Alain Knaff30d65db2009-01-04 22:46:17 +0100197choice
H. Peter Anvin2e9f3bd2009-01-04 15:41:25 -0800198 prompt "Kernel compression mode"
199 default KERNEL_GZIP
Vasily Gorbikf16466a2018-06-12 21:26:35 +0200200 depends on HAVE_KERNEL_GZIP || HAVE_KERNEL_BZIP2 || HAVE_KERNEL_LZMA || HAVE_KERNEL_XZ || HAVE_KERNEL_LZO || HAVE_KERNEL_LZ4 || HAVE_KERNEL_UNCOMPRESSED
H. Peter Anvin2e9f3bd2009-01-04 15:41:25 -0800201 help
Alain Knaff30d65db2009-01-04 22:46:17 +0100202 The linux kernel is a kind of self-extracting executable.
203 Several compression algorithms are available, which differ
204 in efficiency, compression and decompression speed.
205 Compression speed is only relevant when building a kernel.
206 Decompression speed is relevant at each boot.
207
208 If you have any problems with bzip2 or lzma compressed
209 kernels, mail me (Alain Knaff) <alain@knaff.lu>. (An older
210 version of this functionality (bzip2 only), for 2.4, was
211 supplied by Christian Ludwig)
212
213 High compression options are mostly useful for users, who
214 are low on disk space (embedded systems), but for whom ram
215 size matters less.
216
217 If in doubt, select 'gzip'
218
219config KERNEL_GZIP
H. Peter Anvin2e9f3bd2009-01-04 15:41:25 -0800220 bool "Gzip"
221 depends on HAVE_KERNEL_GZIP
222 help
Albin Tonnerre7dd65fe2010-01-08 14:42:42 -0800223 The old and tried gzip compression. It provides a good balance
224 between compression ratio and decompression speed.
Alain Knaff30d65db2009-01-04 22:46:17 +0100225
226config KERNEL_BZIP2
227 bool "Bzip2"
H. Peter Anvin2e9f3bd2009-01-04 15:41:25 -0800228 depends on HAVE_KERNEL_BZIP2
Alain Knaff30d65db2009-01-04 22:46:17 +0100229 help
230 Its compression ratio and speed is intermediate.
Randy Dunlap0a4dd352012-05-31 16:26:46 -0700231 Decompression speed is slowest among the choices. The kernel
H. Peter Anvin2e9f3bd2009-01-04 15:41:25 -0800232 size is about 10% smaller with bzip2, in comparison to gzip.
233 Bzip2 uses a large amount of memory. For modern kernels you
234 will need at least 8MB RAM or more for booting.
Alain Knaff30d65db2009-01-04 22:46:17 +0100235
236config KERNEL_LZMA
H. Peter Anvin2e9f3bd2009-01-04 15:41:25 -0800237 bool "LZMA"
238 depends on HAVE_KERNEL_LZMA
239 help
Randy Dunlap0a4dd352012-05-31 16:26:46 -0700240 This compression algorithm's ratio is best. Decompression speed
241 is between gzip and bzip2. Compression is slowest.
242 The kernel size is about 33% smaller with LZMA in comparison to gzip.
Alain Knaff30d65db2009-01-04 22:46:17 +0100243
Lasse Collin3ebe1242011-01-12 17:01:23 -0800244config KERNEL_XZ
245 bool "XZ"
246 depends on HAVE_KERNEL_XZ
247 help
248 XZ uses the LZMA2 algorithm and instruction set specific
249 BCJ filters which can improve compression ratio of executable
250 code. The size of the kernel is about 30% smaller with XZ in
251 comparison to gzip. On architectures for which there is a BCJ
252 filter (i386, x86_64, ARM, IA-64, PowerPC, and SPARC), XZ
253 will create a few percent smaller kernel than plain LZMA.
254
255 The speed is about the same as with LZMA: The decompression
256 speed of XZ is better than that of bzip2 but worse than gzip
257 and LZO. Compression is slow.
258
Albin Tonnerre7dd65fe2010-01-08 14:42:42 -0800259config KERNEL_LZO
260 bool "LZO"
261 depends on HAVE_KERNEL_LZO
262 help
Randy Dunlap0a4dd352012-05-31 16:26:46 -0700263 Its compression ratio is the poorest among the choices. The kernel
Stephan Sperber681b3042010-07-14 11:23:08 +0200264 size is about 10% bigger than gzip; however its speed
Albin Tonnerre7dd65fe2010-01-08 14:42:42 -0800265 (both compression and decompression) is the fastest.
266
Kyungsik Leee76e1fd2013-07-08 16:01:46 -0700267config KERNEL_LZ4
268 bool "LZ4"
269 depends on HAVE_KERNEL_LZ4
270 help
271 LZ4 is an LZ77-type compressor with a fixed, byte-oriented encoding.
272 A preliminary version of LZ4 de/compression tool is available at
273 <https://code.google.com/p/lz4/>.
274
275 Its compression ratio is worse than LZO. The size of the kernel
276 is about 8% bigger than LZO. But the decompression speed is
277 faster than LZO.
278
Vasily Gorbikf16466a2018-06-12 21:26:35 +0200279config KERNEL_UNCOMPRESSED
280 bool "None"
281 depends on HAVE_KERNEL_UNCOMPRESSED
282 help
283 Produce uncompressed kernel image. This option is usually not what
284 you want. It is useful for debugging the kernel in slow simulation
285 environments, where decompressing and moving the kernel is awfully
286 slow. This option allows early boot code to skip the decompressor
287 and jump right at uncompressed kernel image.
288
Alain Knaff30d65db2009-01-04 22:46:17 +0100289endchoice
290
Chris Downada4ab72020-06-04 16:50:53 -0700291config DEFAULT_INIT
292 string "Default init path"
293 default ""
294 help
295 This option determines the default init for the system if no init=
296 option is passed on the kernel command line. If the requested path is
297 not present, we will still then move on to attempting further
298 locations (e.g. /sbin/init, etc). If this is empty, we will just use
299 the fallback list when init= is not passed.
300
Josh Triplettbd5dc172011-06-15 15:08:28 -0700301config DEFAULT_HOSTNAME
302 string "Default hostname"
303 default "(none)"
304 help
305 This option determines the default system hostname before userspace
306 calls sethostname(2). The kernel traditionally uses "(none)" here,
307 but you may wish to use a different default here to make a minimal
308 system more usable with less configuration.
309
Christoph Hellwig17c46a62018-07-31 13:39:29 +0200310#
311# For some reason microblaze and nios2 hard code SWAP=n. Hopefully we can
312# add proper SWAP support to them, in which case this can be remove.
313#
314config ARCH_NO_SWAP
315 bool
316
Linus Torvalds1da177e2005-04-16 15:20:36 -0700317config SWAP
318 bool "Support for paging of anonymous memory (swap)"
Christoph Hellwig17c46a62018-07-31 13:39:29 +0200319 depends on MMU && BLOCK && !ARCH_NO_SWAP
Linus Torvalds1da177e2005-04-16 15:20:36 -0700320 default y
321 help
322 This option allows you to choose whether you want to have support
Jesper Juhl92c35042006-01-15 02:40:08 +0100323 for so called swap devices or swap files in your kernel that are
Linus Torvalds1da177e2005-04-16 15:20:36 -0700324 used to provide more virtual memory than the actual RAM present
325 in your computer. If unsure say Y.
326
327config SYSVIPC
328 bool "System V IPC"
Masahiro Yamadaa7f7f622020-06-14 01:50:22 +0900329 help
Linus Torvalds1da177e2005-04-16 15:20:36 -0700330 Inter Process Communication is a suite of library functions and
331 system calls which let processes (running programs) synchronize and
332 exchange information. It is generally considered to be a good thing,
333 and some programs won't run unless you say Y here. In particular, if
334 you want to run the DOS emulator dosemu under Linux (read the
335 DOSEMU-HOWTO, available from <http://www.tldp.org/docs.html#howto>),
336 you'll need to say Y here.
337
338 You can find documentation about IPC with "info ipc" and also in
339 section 6.4 of the Linux Programmer's Guide, available from
340 <http://www.tldp.org/guides.html>.
341
Eric W. Biedermana5494dc2007-02-14 00:34:06 -0800342config SYSVIPC_SYSCTL
343 bool
344 depends on SYSVIPC
345 depends on SYSCTL
346 default y
347
Linus Torvalds1da177e2005-04-16 15:20:36 -0700348config POSIX_MQUEUE
349 bool "POSIX Message Queues"
Kees Cook19c92392012-10-02 11:19:29 -0700350 depends on NET
Masahiro Yamadaa7f7f622020-06-14 01:50:22 +0900351 help
Linus Torvalds1da177e2005-04-16 15:20:36 -0700352 POSIX variant of message queues is a part of IPC. In POSIX message
353 queues every message has a priority which decides about succession
354 of receiving it by a process. If you want to compile and run
355 programs written e.g. for Solaris with use of its POSIX message
Robert P. J. Dayb0e37652007-05-09 07:25:13 +0200356 queues (functions mq_*) say Y here.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700357
358 POSIX message queues are visible as a filesystem called 'mqueue'
359 and can be mounted somewhere if you want to do filesystem
360 operations on message queues.
361
362 If unsure, say Y.
363
Serge E. Hallynbdc8e5f2009-04-06 19:01:11 -0700364config POSIX_MQUEUE_SYSCTL
365 bool
366 depends on POSIX_MQUEUE
367 depends on SYSCTL
368 default y
369
David Howellsc73be612020-01-14 17:07:11 +0000370config WATCH_QUEUE
371 bool "General notification queue"
372 default n
373 help
374
375 This is a general notification queue for the kernel to pass events to
376 userspace by splicing them into pipes. It can be used in conjunction
377 with watches for key/keyring change notifications and device
378 notifications.
379
380 See Documentation/watch_queue.rst
381
Konstantin Khlebnikov226b4cc2014-06-04 16:10:50 -0700382config CROSS_MEMORY_ATTACH
383 bool "Enable process_vm_readv/writev syscalls"
384 depends on MMU
385 default y
386 help
387 Enabling this option adds the system calls process_vm_readv and
388 process_vm_writev which allow a process with the correct privileges
Geert Uytterhoevena2a368d2014-08-12 13:46:11 -0700389 to directly read from or write to another process' address space.
Konstantin Khlebnikov226b4cc2014-06-04 16:10:50 -0700390 See the man page for more details.
391
Josh Triplett69369a72014-04-03 14:48:27 -0700392config USELIB
393 bool "uselib syscall"
Riku Voipiob2113a42016-01-15 16:58:13 -0800394 def_bool ALPHA || M68K || SPARC || X86_32 || IA32_EMULATION
Josh Triplett69369a72014-04-03 14:48:27 -0700395 help
396 This option enables the uselib syscall, a system call used in the
397 dynamic linker from libc5 and earlier. glibc does not use this
398 system call. If you intend to run programs built on libc5 or
399 earlier, you may need to enable this syscall. Current systems
400 running glibc can safely disable this.
401
Linus Torvalds1da177e2005-04-16 15:20:36 -0700402config AUDIT
403 bool "Auditing support"
Chris Wright804a6a492005-05-11 10:52:45 +0100404 depends on NET
Linus Torvalds1da177e2005-04-16 15:20:36 -0700405 help
406 Enable auditing infrastructure that can be used with another
407 kernel subsystem, such as SELinux (which requires this for
Paul Moorecb74ed22016-01-13 09:18:55 -0500408 logging of avc messages output). System call auditing is included
409 on architectures which support it.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700410
AKASHI Takahiro7a017722014-02-25 18:16:24 +0900411config HAVE_ARCH_AUDITSYSCALL
412 bool
413
Linus Torvalds1da177e2005-04-16 15:20:36 -0700414config AUDITSYSCALL
Paul Moorecb74ed22016-01-13 09:18:55 -0500415 def_bool y
AKASHI Takahiro7a017722014-02-25 18:16:24 +0900416 depends on AUDIT && HAVE_ARCH_AUDITSYSCALL
Eric Paris28a3a7e2009-12-17 20:12:05 -0500417 select FSNOTIFY
Al Viro74c3cbe2007-07-22 08:04:18 -0400418
Thomas Gleixnerd9817eb2010-09-27 12:45:59 +0000419source "kernel/irq/Kconfig"
Thomas Gleixner764e0da2012-05-21 23:16:18 +0200420source "kernel/time/Kconfig"
Christoph Hellwig87a4c372018-07-31 13:39:32 +0200421source "kernel/Kconfig.preempt"
Thomas Gleixnerd9817eb2010-09-27 12:45:59 +0000422
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200423menu "CPU/Task time and stats accounting"
424
Frederic Weisbeckerabf917c2012-07-25 07:56:04 +0200425config VIRT_CPU_ACCOUNTING
426 bool
427
Frederic Weisbeckerfdf9c352012-09-09 14:56:31 +0200428choice
429 prompt "Cputime accounting"
430 default TICK_CPU_ACCOUNTING if !PPC64
Stephen Rothwell02fc8d32013-02-08 14:19:38 +1100431 default VIRT_CPU_ACCOUNTING_NATIVE if PPC64
Frederic Weisbeckerfdf9c352012-09-09 14:56:31 +0200432
433# Kind of a stub config for the pure tick based cputime accounting
434config TICK_CPU_ACCOUNTING
435 bool "Simple tick based cputime accounting"
Frederic Weisbeckerc58b0df2013-04-26 15:16:31 +0200436 depends on !S390 && !NO_HZ_FULL
Frederic Weisbeckerfdf9c352012-09-09 14:56:31 +0200437 help
438 This is the basic tick based cputime accounting that maintains
439 statistics about user, system and idle time spent on per jiffies
440 granularity.
441
442 If unsure, say Y.
443
Frederic Weisbeckerabf917c2012-07-25 07:56:04 +0200444config VIRT_CPU_ACCOUNTING_NATIVE
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200445 bool "Deterministic task and CPU time accounting"
Frederic Weisbeckerc58b0df2013-04-26 15:16:31 +0200446 depends on HAVE_VIRT_CPU_ACCOUNTING && !NO_HZ_FULL
Frederic Weisbeckerabf917c2012-07-25 07:56:04 +0200447 select VIRT_CPU_ACCOUNTING
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200448 help
449 Select this option to enable more accurate task and CPU time
450 accounting. This is done by reading a CPU counter on each
451 kernel entry and exit and on transitions within the kernel
452 between system, softirq and hardirq state, so there is a
453 small performance impact. In the case of s390 or IBM POWER > 5,
454 this also enables accounting of stolen time on logically-partitioned
455 systems.
456
Frederic Weisbeckerabf917c2012-07-25 07:56:04 +0200457config VIRT_CPU_ACCOUNTING_GEN
458 bool "Full dynticks CPU time accounting"
Kevin Hilmanff3fb252013-09-16 15:28:19 -0700459 depends on HAVE_CONTEXT_TRACKING
Kevin Hilman554b0002013-09-16 15:28:21 -0700460 depends on HAVE_VIRT_CPU_ACCOUNTING_GEN
Arnd Bergmann041a1572019-03-04 21:01:31 +0100461 depends on GENERIC_CLOCKEVENTS
Frederic Weisbeckerabf917c2012-07-25 07:56:04 +0200462 select VIRT_CPU_ACCOUNTING
463 select CONTEXT_TRACKING
464 help
465 Select this option to enable task and CPU time accounting on full
466 dynticks systems. This accounting is implemented by watching every
467 kernel-user boundaries using the context tracking subsystem.
468 The accounting is thus performed at the expense of some significant
469 overhead.
470
471 For now this is only useful if you are working on the full
472 dynticks subsystem development.
473
474 If unsure, say N.
475
Rik van Rielb58c3582016-07-13 16:50:02 +0200476endchoice
477
Frederic Weisbeckerfdf9c352012-09-09 14:56:31 +0200478config IRQ_TIME_ACCOUNTING
479 bool "Fine granularity task level IRQ time accounting"
Rik van Rielb58c3582016-07-13 16:50:02 +0200480 depends on HAVE_IRQ_TIME_ACCOUNTING && !VIRT_CPU_ACCOUNTING_NATIVE
Frederic Weisbeckerfdf9c352012-09-09 14:56:31 +0200481 help
482 Select this option to enable fine granularity task irq time
483 accounting. This is done by reading a timestamp on each
484 transitions between softirq and hardirq state, so there can be a
485 small performance impact.
486
487 If in doubt, say N here.
488
Vincent Guittot11d4afd2018-09-25 11:17:42 +0200489config HAVE_SCHED_AVG_IRQ
490 def_bool y
491 depends on IRQ_TIME_ACCOUNTING || PARAVIRT_TIME_ACCOUNTING
492 depends on SMP
493
Thara Gopinath76504792020-02-21 19:52:05 -0500494config SCHED_THERMAL_PRESSURE
Valentin Schneider98eb4012020-07-12 17:59:16 +0100495 bool
Thara Gopinath76504792020-02-21 19:52:05 -0500496 depends on SMP
Valentin Schneider98eb4012020-07-12 17:59:16 +0100497 depends on CPU_FREQ_THERMAL
498 help
499 Select this option to enable thermal pressure accounting in the
500 scheduler. Thermal pressure is the value conveyed to the scheduler
501 that reflects the reduction in CPU compute capacity resulted from
502 thermal throttling. Thermal throttling occurs when the performance of
503 a CPU is capped due to high operating temperatures.
504
505 If selected, the scheduler will be able to balance tasks accordingly,
506 i.e. put less load on throttled CPUs than on non/less throttled ones.
507
508 This requires the architecture to implement
509 arch_set_thermal_pressure() and arch_get_thermal_pressure().
Thara Gopinath76504792020-02-21 19:52:05 -0500510
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200511config BSD_PROCESS_ACCT
512 bool "BSD Process Accounting"
Iulia Manda28138932015-04-15 16:16:41 -0700513 depends on MULTIUSER
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200514 help
515 If you say Y here, a user level program will be able to instruct the
516 kernel (via a special system call) to write process accounting
517 information to a file: whenever a process exits, information about
518 that process will be appended to the file by the kernel. The
519 information includes things such as creation time, owning user,
520 command name, memory usage, controlling terminal etc. (the complete
521 list is in the struct acct in <file:include/linux/acct.h>). It is
522 up to the user level program to do useful things with this
523 information. This is generally a good idea, so say Y.
524
525config BSD_PROCESS_ACCT_V3
526 bool "BSD Process Accounting version 3 file format"
527 depends on BSD_PROCESS_ACCT
528 default n
529 help
530 If you say Y here, the process accounting information is written
531 in a new file format that also logs the process IDs of each
Randy Dunlap3903bf92018-08-21 21:58:34 -0700532 process and its parent. Note that this file format is incompatible
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200533 with previous v0/v1/v2 file formats, so you will need updated tools
534 for processing it. A preliminary version of these tools is available
535 at <http://www.gnu.org/software/acct/>.
536
537config TASKSTATS
Kees Cook19c92392012-10-02 11:19:29 -0700538 bool "Export task/process statistics through netlink"
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200539 depends on NET
Iulia Manda28138932015-04-15 16:16:41 -0700540 depends on MULTIUSER
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200541 default n
542 help
543 Export selected statistics for tasks/processes through the
544 generic netlink interface. Unlike BSD process accounting, the
545 statistics are available during the lifetime of tasks/processes as
546 responses to commands. Like BSD accounting, they are sent to user
547 space on task exit.
548
549 Say N if unsure.
550
551config TASK_DELAY_ACCT
Kees Cook19c92392012-10-02 11:19:29 -0700552 bool "Enable per-task delay accounting"
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200553 depends on TASKSTATS
Naveen N. Raof6db8342015-06-25 23:53:37 +0530554 select SCHED_INFO
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200555 help
556 Collect information on time spent by a task waiting for system
557 resources like cpu, synchronous block I/O completion and swapping
558 in pages. Such statistics can help in setting a task's priorities
559 relative to other tasks for cpu, io, rss limits etc.
560
561 Say N if unsure.
562
563config TASK_XACCT
Kees Cook19c92392012-10-02 11:19:29 -0700564 bool "Enable extended accounting over taskstats"
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200565 depends on TASKSTATS
566 help
567 Collect extended task accounting data and send the data
568 to userland for processing over the taskstats interface.
569
570 Say N if unsure.
571
572config TASK_IO_ACCOUNTING
Kees Cook19c92392012-10-02 11:19:29 -0700573 bool "Enable per-task storage I/O accounting"
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200574 depends on TASK_XACCT
575 help
576 Collect information on the number of bytes of storage I/O which this
577 task has caused.
578
579 Say N if unsure.
580
Johannes Weinereb414682018-10-26 15:06:27 -0700581config PSI
582 bool "Pressure stall information tracking"
583 help
584 Collect metrics that indicate how overcommitted the CPU, memory,
585 and IO capacity are in the system.
586
587 If you say Y here, the kernel will create /proc/pressure/ with the
588 pressure statistics files cpu, memory, and io. These will indicate
589 the share of walltime in which some or all tasks in the system are
590 delayed due to contention of the respective resource.
591
Johannes Weiner2ce71352018-10-26 15:06:31 -0700592 In kernels with cgroup support, cgroups (cgroup2 only) will
593 have cpu.pressure, memory.pressure, and io.pressure files,
594 which aggregate pressure stalls for the grouped tasks only.
595
Mauro Carvalho Chehabc3123552019-04-17 05:46:08 -0300596 For more details see Documentation/accounting/psi.rst.
Johannes Weinereb414682018-10-26 15:06:27 -0700597
598 Say N if unsure.
599
Johannes Weinere0c27442018-11-30 14:09:58 -0800600config PSI_DEFAULT_DISABLED
601 bool "Require boot parameter to enable pressure stall information tracking"
602 default n
603 depends on PSI
604 help
605 If set, pressure stall information tracking will be disabled
Baruch Siach428a1cb2018-12-14 14:17:03 -0800606 per default but can be enabled through passing psi=1 on the
607 kernel commandline during boot.
Johannes Weinere0c27442018-11-30 14:09:58 -0800608
Johannes Weiner7b2489d2019-02-01 14:21:15 -0800609 This feature adds some code to the task wakeup and sleep
610 paths of the scheduler. The overhead is too low to affect
611 common scheduling-intense workloads in practice (such as
612 webservers, memcache), but it does show up in artificial
613 scheduler stress tests, such as hackbench.
614
615 If you are paranoid and not sure what the kernel will be
616 used for, say Y.
617
618 Say N if unsure.
619
Frederic Weisbecker391dc692012-09-09 14:22:07 +0200620endmenu # "CPU/Task time and stats accounting"
621
Frederic Weisbecker5c4991e2017-10-27 04:42:34 +0200622config CPU_ISOLATION
623 bool "CPU isolation"
Geert Uytterhoeven414a2dc2018-01-02 12:13:10 +0100624 depends on SMP || COMPILE_TEST
Frederic Weisbecker2c438382017-12-14 19:18:26 +0100625 default y
Frederic Weisbecker5c4991e2017-10-27 04:42:34 +0200626 help
627 Make sure that CPUs running critical tasks are not disturbed by
628 any source of "noise" such as unbound workqueues, timers, kthreads...
Frederic Weisbecker2c438382017-12-14 19:18:26 +0100629 Unbound jobs get offloaded to housekeeping CPUs. This is driven by
630 the "isolcpus=" boot parameter.
631
632 Say Y if unsure.
Frederic Weisbecker5c4991e2017-10-27 04:42:34 +0200633
Paul E. McKenney0af92d42017-05-17 08:43:40 -0700634source "kernel/rcu/Kconfig"
Mike Travisc903ff82009-01-15 12:28:29 -0800635
Vivek Goyalde5b56b2014-08-08 14:25:41 -0700636config BUILD_BIN2C
637 bool
638 default n
639
Linus Torvalds1da177e2005-04-16 15:20:36 -0700640config IKCONFIG
Ross Birof2443ab2006-09-30 23:27:25 -0700641 tristate "Kernel .config support"
Masahiro Yamadaa7f7f622020-06-14 01:50:22 +0900642 help
Linus Torvalds1da177e2005-04-16 15:20:36 -0700643 This option enables the complete Linux kernel ".config" file
644 contents to be saved in the kernel. It provides documentation
645 of which kernel options are used in a running kernel or in an
646 on-disk kernel. This information can be extracted from the kernel
647 image file with the script scripts/extract-ikconfig and used as
648 input to rebuild the current kernel or to build another kernel.
649 It can also be extracted from a running kernel by reading
650 /proc/config.gz if enabled (below).
651
652config IKCONFIG_PROC
653 bool "Enable access to .config through /proc/config.gz"
654 depends on IKCONFIG && PROC_FS
Masahiro Yamadaa7f7f622020-06-14 01:50:22 +0900655 help
Linus Torvalds1da177e2005-04-16 15:20:36 -0700656 This option enables access to the kernel configuration file
657 through /proc/config.gz.
658
Joel Fernandes (Google)f7b101d2019-05-15 17:35:51 -0400659config IKHEADERS
660 tristate "Enable kernel headers through /sys/kernel/kheaders.tar.xz"
661 depends on SYSFS
Joel Fernandes (Google)43d8ce92019-04-26 15:04:29 -0400662 help
Joel Fernandes (Google)f7b101d2019-05-15 17:35:51 -0400663 This option enables access to the in-kernel headers that are generated during
664 the build process. These can be used to build eBPF tracing programs,
665 or similar programs. If you build the headers as a module, a module called
666 kheaders.ko is built which can be loaded on-demand to get access to headers.
Joel Fernandes (Google)43d8ce92019-04-26 15:04:29 -0400667
Alistair John Strachan794543a2007-05-08 00:31:15 -0700668config LOG_BUF_SHIFT
669 int "Kernel log buffer size (16 => 64KB, 17 => 128KB)"
Ingo Molnarfb39f982015-07-01 10:19:11 +0200670 range 12 25
Adrian Bunkf17a32e2008-04-29 00:58:58 -0700671 default 17
Josh Triplett361e9df2014-10-03 16:00:54 -0700672 depends on PRINTK
Alistair John Strachan794543a2007-05-08 00:31:15 -0700673 help
Luis R. Rodriguez23b28992014-08-06 16:08:56 -0700674 Select the minimal kernel log buffer size as a power of 2.
675 The final size is affected by LOG_CPU_MAX_BUF_SHIFT config
676 parameter, see below. Any higher size also might be forced
677 by "log_buf_len" boot parameter.
678
Adrian Bunkf17a32e2008-04-29 00:58:58 -0700679 Examples:
Luis R. Rodriguez23b28992014-08-06 16:08:56 -0700680 17 => 128 KB
Adrian Bunkf17a32e2008-04-29 00:58:58 -0700681 16 => 64 KB
Luis R. Rodriguez23b28992014-08-06 16:08:56 -0700682 15 => 32 KB
683 14 => 16 KB
Alistair John Strachan794543a2007-05-08 00:31:15 -0700684 13 => 8 KB
685 12 => 4 KB
686
Luis R. Rodriguez23b28992014-08-06 16:08:56 -0700687config LOG_CPU_MAX_BUF_SHIFT
688 int "CPU kernel log buffer size contribution (13 => 8 KB, 17 => 128KB)"
Geert Uytterhoeven2240a312014-10-13 15:51:11 -0700689 depends on SMP
Luis R. Rodriguez23b28992014-08-06 16:08:56 -0700690 range 0 21
691 default 12 if !BASE_SMALL
692 default 0 if BASE_SMALL
Josh Triplett361e9df2014-10-03 16:00:54 -0700693 depends on PRINTK
Luis R. Rodriguez23b28992014-08-06 16:08:56 -0700694 help
695 This option allows to increase the default ring buffer size
696 according to the number of CPUs. The value defines the contribution
697 of each CPU as a power of 2. The used space is typically only few
698 lines however it might be much more when problems are reported,
699 e.g. backtraces.
700
701 The increased size means that a new buffer has to be allocated and
702 the original static one is unused. It makes sense only on systems
703 with more CPUs. Therefore this value is used only when the sum of
704 contributions is greater than the half of the default kernel ring
705 buffer as defined by LOG_BUF_SHIFT. The default values are set
706 so that more than 64 CPUs are needed to trigger the allocation.
707
708 Also this option is ignored when "log_buf_len" kernel parameter is
709 used as it forces an exact (power of two) size of the ring buffer.
710
711 The number of possible CPUs is used for this computation ignoring
Geert Uytterhoeven5e0d8d52016-06-05 10:47:02 +0200712 hotplugging making the computation optimal for the worst case
713 scenario while allowing a simple algorithm to be used from bootup.
Luis R. Rodriguez23b28992014-08-06 16:08:56 -0700714
715 Examples shift values and their meaning:
716 17 => 128 KB for each CPU
717 16 => 64 KB for each CPU
718 15 => 32 KB for each CPU
719 14 => 16 KB for each CPU
720 13 => 8 KB for each CPU
721 12 => 4 KB for each CPU
722
Sergey Senozhatskyf92bac32016-12-27 23:16:05 +0900723config PRINTK_SAFE_LOG_BUF_SHIFT
724 int "Temporary per-CPU printk log buffer size (12 => 4KB, 13 => 8KB)"
Petr Mladek427934b2016-05-20 17:00:39 -0700725 range 10 21
726 default 13
Sergey Senozhatskyf92bac32016-12-27 23:16:05 +0900727 depends on PRINTK
Petr Mladek427934b2016-05-20 17:00:39 -0700728 help
Sergey Senozhatskyf92bac32016-12-27 23:16:05 +0900729 Select the size of an alternate printk per-CPU buffer where messages
730 printed from usafe contexts are temporary stored. One example would
731 be NMI messages, another one - printk recursion. The messages are
732 copied to the main log buffer in a safe context to avoid a deadlock.
733 The value defines the size as a power of 2.
Petr Mladek427934b2016-05-20 17:00:39 -0700734
Sergey Senozhatskyf92bac32016-12-27 23:16:05 +0900735 Those messages are rare and limited. The largest one is when
Petr Mladek427934b2016-05-20 17:00:39 -0700736 a backtrace is printed. It usually fits into 4KB. Select
737 8KB if you want to be on the safe side.
738
739 Examples:
740 17 => 128 KB for each CPU
741 16 => 64 KB for each CPU
742 15 => 32 KB for each CPU
743 14 => 16 KB for each CPU
744 13 => 8 KB for each CPU
745 12 => 4 KB for each CPU
746
KAMEZAWA Hiroyuki5cdc38f2009-01-07 18:07:30 -0800747#
748# Architectures with an unreliable sched_clock() should select this:
749#
750config HAVE_UNSTABLE_SCHED_CLOCK
751 bool
752
Stephen Boyd38ff87f2013-06-01 23:39:40 -0700753config GENERIC_SCHED_CLOCK
754 bool
755
Patrick Bellasi69842cb2019-06-21 09:42:02 +0100756menu "Scheduler features"
757
758config UCLAMP_TASK
759 bool "Enable utilization clamping for RT/FAIR tasks"
760 depends on CPU_FREQ_GOV_SCHEDUTIL
761 help
762 This feature enables the scheduler to track the clamped utilization
763 of each CPU based on RUNNABLE tasks scheduled on that CPU.
764
765 With this option, the user can specify the min and max CPU
766 utilization allowed for RUNNABLE tasks. The max utilization defines
767 the maximum frequency a task should use while the min utilization
768 defines the minimum frequency it should use.
769
770 Both min and max utilization clamp values are hints to the scheduler,
771 aiming at improving its frequency selection policy, but they do not
772 enforce or grant any specific bandwidth for tasks.
773
774 If in doubt, say N.
775
776config UCLAMP_BUCKETS_COUNT
777 int "Number of supported utilization clamp buckets"
778 range 5 20
779 default 5
780 depends on UCLAMP_TASK
781 help
782 Defines the number of clamp buckets to use. The range of each bucket
783 will be SCHED_CAPACITY_SCALE/UCLAMP_BUCKETS_COUNT. The higher the
784 number of clamp buckets the finer their granularity and the higher
785 the precision of clamping aggregation and tracking at run-time.
786
787 For example, with the minimum configuration value we will have 5
788 clamp buckets tracking 20% utilization each. A 25% boosted tasks will
789 be refcounted in the [20..39]% bucket and will set the bucket clamp
790 effective value to 25%.
791 If a second 30% boosted task should be co-scheduled on the same CPU,
792 that task will be refcounted in the same bucket of the first task and
793 it will boost the bucket clamp effective value to 30%.
794 The clamp effective value of a bucket is reset to its nominal value
795 (20% in the example above) when there are no more tasks refcounted in
796 that bucket.
797
798 An additional boost/capping margin can be added to some tasks. In the
799 example above the 25% task will be boosted to 30% until it exits the
800 CPU. If that should be considered not acceptable on certain systems,
801 it's always possible to reduce the margin by increasing the number of
802 clamp buckets to trade off used memory for run-time tracking
803 precision.
804
805 If in doubt, use the default value.
806
807endmenu
808
Andrea Arcangelibe3a7282012-10-04 01:50:47 +0200809#
810# For architectures that want to enable the support for NUMA-affine scheduler
811# balancing logic:
812#
813config ARCH_SUPPORTS_NUMA_BALANCING
814 bool
815
Peter Zijlstrabe5e6102013-11-18 18:27:06 +0100816#
Mel Gorman72b252a2015-09-04 15:47:32 -0700817# For architectures that prefer to flush all TLBs after a number of pages
818# are unmapped instead of sending one IPI per page to flush. The architecture
819# must provide guarantees on what happens if a clean TLB cache entry is
820# written after the unmap. Details are in mm/rmap.c near the check for
821# should_defer_flush. The architecture should also consider if the full flush
822# and the refill costs are offset by the savings of sending fewer IPIs.
823config ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH
824 bool
825
Ard Biesheuvelc12d3362019-11-08 13:22:27 +0100826config CC_HAS_INT128
Masahiro Yamada3a7c7332020-03-10 19:12:50 +0900827 def_bool !$(cc-option,$(m64-flag) -D__SIZEOF_INT128__=0) && 64BIT
Ard Biesheuvelc12d3362019-11-08 13:22:27 +0100828
Mel Gorman72b252a2015-09-04 15:47:32 -0700829#
Peter Zijlstrabe5e6102013-11-18 18:27:06 +0100830# For architectures that know their GCC __int128 support is sound
831#
832config ARCH_SUPPORTS_INT128
833 bool
834
Andrea Arcangelibe3a7282012-10-04 01:50:47 +0200835# For architectures that (ab)use NUMA to represent different memory regions
836# all cpu-local but of different latencies, such as SuperH.
837#
838config ARCH_WANT_NUMA_VARIABLE_LOCALITY
839 bool
840
Andrea Arcangelibe3a7282012-10-04 01:50:47 +0200841config NUMA_BALANCING
842 bool "Memory placement aware NUMA scheduler"
Andrea Arcangelibe3a7282012-10-04 01:50:47 +0200843 depends on ARCH_SUPPORTS_NUMA_BALANCING
844 depends on !ARCH_WANT_NUMA_VARIABLE_LOCALITY
845 depends on SMP && NUMA && MIGRATION
846 help
847 This option adds support for automatic NUMA aware memory/task placement.
848 The mechanism is quite primitive and is based on migrating memory when
Paul Gortmaker6d56a412013-08-13 11:06:50 -0400849 it has references to the node the task is running on.
Andrea Arcangelibe3a7282012-10-04 01:50:47 +0200850
851 This system will be inactive on UMA systems.
852
Aneesh Kumar K.V6f7c97e2014-12-10 15:43:37 -0800853config NUMA_BALANCING_DEFAULT_ENABLED
854 bool "Automatically enable NUMA aware memory/task placement"
855 default y
856 depends on NUMA_BALANCING
857 help
858 If set, automatic NUMA balancing will be enabled if running on a NUMA
859 machine.
860
Li Zefan23964d22009-01-15 13:50:58 -0800861menuconfig CGROUPS
Christoph Jaeger6341e622014-12-20 15:41:11 -0500862 bool "Control Group support"
Tejun Heo2bd59d42014-02-11 11:52:49 -0500863 select KERNFS
Paul Menageddbcc7e2007-10-18 23:39:30 -0700864 help
Li Zefan23964d22009-01-15 13:50:58 -0800865 This option adds support for grouping sets of processes together, for
KAMEZAWA Hiroyuki5cdc38f2009-01-07 18:07:30 -0800866 use with process control subsystems such as Cpusets, CFS, memory
867 controls or device isolation.
868 See
Mauro Carvalho Chehabd6a3b242019-06-12 14:53:03 -0300869 - Documentation/scheduler/sched-design-CFS.rst (CFS)
Mauro Carvalho Chehabda82c922019-06-27 13:08:35 -0300870 - Documentation/admin-guide/cgroup-v1/ (features for grouping, isolation
Li Zefan45ce80f2009-01-15 13:50:59 -0800871 and resource control)
Paul Menageddbcc7e2007-10-18 23:39:30 -0700872
873 Say N if unsure.
874
Li Zefan23964d22009-01-15 13:50:58 -0800875if CGROUPS
876
Johannes Weiner3e32cb22014-12-10 15:42:31 -0800877config PAGE_COUNTER
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -0800878 bool
Johannes Weiner3e32cb22014-12-10 15:42:31 -0800879
Andrew Mortonc255a452012-07-31 16:43:02 -0700880config MEMCG
Johannes Weinera0166ec2015-12-17 17:19:56 -0500881 bool "Memory controller"
Johannes Weiner3e32cb22014-12-10 15:42:31 -0800882 select PAGE_COUNTER
Tejun Heo79bd9812013-11-22 18:20:42 -0500883 select EVENTFD
Balbir Singh00f0b822008-03-04 14:28:39 -0800884 help
Johannes Weinera0166ec2015-12-17 17:19:56 -0500885 Provides control over the memory footprint of tasks in a cgroup.
Balbir Singh00f0b822008-03-04 14:28:39 -0800886
Andrew Mortonc255a452012-07-31 16:43:02 -0700887config MEMCG_SWAP
Johannes Weiner2d1c4982020-06-03 16:02:14 -0700888 bool
Andrew Mortonc255a452012-07-31 16:43:02 -0700889 depends on MEMCG && SWAP
Michal Hockoa42c3902010-11-24 12:57:08 -0800890 default y
KAMEZAWA Hiroyukic0777192009-01-07 18:07:57 -0800891
Kirill Tkhai84c07d12018-08-17 15:47:25 -0700892config MEMCG_KMEM
893 bool
894 depends on MEMCG && !SLOB
895 default y
896
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500897config BLK_CGROUP
898 bool "IO controller"
899 depends on BLOCK
Aneesh Kumar K.V2bc64a22012-07-31 16:42:12 -0700900 default n
Masahiro Yamadaa7f7f622020-06-14 01:50:22 +0900901 help
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500902 Generic block IO controller cgroup interface. This is the common
903 cgroup interface which should be used by various IO controlling
904 policies.
Aneesh Kumar K.V2bc64a22012-07-31 16:42:12 -0700905
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500906 Currently, CFQ IO scheduler uses it to recognize task groups and
907 control disk bandwidth allocation (proportional time slice allocation)
908 to such task groups. It is also used by bio throttling logic in
909 block layer to implement upper limit in IO rates on a device.
Stephane Eraniane5d13672011-02-14 11:20:01 +0200910
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500911 This option only enables generic Block IO controller infrastructure.
912 One needs to also enable actual IO controlling logic/policy. For
913 enabling proportional weight division of disk bandwidth in CFQ, set
Krzysztof Kozlowski7baf2192020-04-06 20:12:02 -0700914 CONFIG_BFQ_GROUP_IOSCHED=y; for enabling throttling policy, set
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500915 CONFIG_BLK_DEV_THROTTLING=y.
916
Mauro Carvalho Chehabda82c922019-06-27 13:08:35 -0300917 See Documentation/admin-guide/cgroup-v1/blkio-controller.rst for more information.
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500918
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500919config CGROUP_WRITEBACK
920 bool
921 depends on MEMCG && BLK_CGROUP
922 default y
Stephane Eraniane5d13672011-02-14 11:20:01 +0200923
Dhaval Giani7c941432010-01-20 13:26:18 +0100924menuconfig CGROUP_SCHED
Johannes Weinera0166ec2015-12-17 17:19:56 -0500925 bool "CPU controller"
Dhaval Giani7c941432010-01-20 13:26:18 +0100926 default n
927 help
928 This feature lets CPU scheduler recognize task groups and control CPU
929 bandwidth allocation to such task groups. It uses cgroups to group
930 tasks.
931
932if CGROUP_SCHED
933config FAIR_GROUP_SCHED
934 bool "Group scheduling for SCHED_OTHER"
935 depends on CGROUP_SCHED
936 default CGROUP_SCHED
937
Paul Turnerab84d312011-07-21 09:43:28 -0700938config CFS_BANDWIDTH
939 bool "CPU bandwidth provisioning for FAIR_GROUP_SCHED"
Paul Turnerab84d312011-07-21 09:43:28 -0700940 depends on FAIR_GROUP_SCHED
941 default n
942 help
943 This option allows users to define CPU bandwidth rates (limits) for
944 tasks running within the fair group scheduler. Groups with no limit
945 set are considered to be unconstrained and will run with no
946 restriction.
Mauro Carvalho Chehabd6a3b242019-06-12 14:53:03 -0300947 See Documentation/scheduler/sched-bwc.rst for more information.
Paul Turnerab84d312011-07-21 09:43:28 -0700948
Dhaval Giani7c941432010-01-20 13:26:18 +0100949config RT_GROUP_SCHED
950 bool "Group scheduling for SCHED_RR/FIFO"
Dhaval Giani7c941432010-01-20 13:26:18 +0100951 depends on CGROUP_SCHED
952 default n
953 help
954 This feature lets you explicitly allocate real CPU bandwidth
Li Zefan32bd7eb2010-03-24 13:17:19 +0800955 to task groups. If enabled, it will also make it impossible to
Dhaval Giani7c941432010-01-20 13:26:18 +0100956 schedule realtime tasks for non-root users until you allocate
957 realtime bandwidth for them.
Mauro Carvalho Chehabd6a3b242019-06-12 14:53:03 -0300958 See Documentation/scheduler/sched-rt-group.rst for more information.
Dhaval Giani7c941432010-01-20 13:26:18 +0100959
960endif #CGROUP_SCHED
961
Patrick Bellasi2480c092019-08-22 14:28:06 +0100962config UCLAMP_TASK_GROUP
963 bool "Utilization clamping per group of tasks"
964 depends on CGROUP_SCHED
965 depends on UCLAMP_TASK
966 default n
967 help
968 This feature enables the scheduler to track the clamped utilization
969 of each CPU based on RUNNABLE tasks currently scheduled on that CPU.
970
971 When this option is enabled, the user can specify a min and max
972 CPU bandwidth which is allowed for each single task in a group.
973 The max bandwidth allows to clamp the maximum frequency a task
974 can use, while the min bandwidth allows to define a minimum
975 frequency a task will always use.
976
977 When task group based utilization clamping is enabled, an eventually
978 specified task-specific clamp value is constrained by the cgroup
979 specified clamp value. Both minimum and maximum task clamping cannot
980 be bigger than the corresponding clamping defined at task group level.
981
982 If in doubt, say N.
983
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500984config CGROUP_PIDS
985 bool "PIDs controller"
986 help
987 Provides enforcement of process number limits in the scope of a
988 cgroup. Any attempt to fork more processes than is allowed in the
989 cgroup will fail. PIDs are fundamentally a global resource because it
990 is fairly trivial to reach PID exhaustion before you reach even a
991 conservative kmemcg limit. As a result, it is possible to grind a
992 system to halt without being limited by other cgroup policies. The
Parav Pandit6cc578d2016-03-05 11:30:56 +0530993 PIDs controller is designed to stop this from happening.
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500994
995 It should be noted that organisational operations (such as attaching
Jonathan Neuschäfer98076832019-02-01 14:21:01 -0800996 to a cgroup hierarchy) will *not* be blocked by the PIDs controller,
Johannes Weiner6bf024e2015-12-17 17:19:57 -0500997 since the PIDs limit only affects a process's ability to fork, not to
998 attach to a cgroup.
999
Parav Pandit39d3e752017-01-10 00:02:13 +00001000config CGROUP_RDMA
1001 bool "RDMA controller"
1002 help
1003 Provides enforcement of RDMA resources defined by IB stack.
1004 It is fairly easy for consumers to exhaust RDMA resources, which
1005 can result into resource unavailability to other consumers.
1006 RDMA controller is designed to stop this from happening.
1007 Attaching processes with active RDMA resources to the cgroup
1008 hierarchy is allowed even if can cross the hierarchy's limit.
1009
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001010config CGROUP_FREEZER
1011 bool "Freezer controller"
1012 help
1013 Provides a way to freeze and unfreeze all tasks in a
1014 cgroup.
1015
Johannes Weiner489c2a22016-01-20 15:02:41 -08001016 This option affects the ORIGINAL cgroup interface. The cgroup2 memory
1017 controller includes important in-kernel memory consumers per default.
1018
1019 If you're using cgroup2, say N.
1020
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001021config CGROUP_HUGETLB
1022 bool "HugeTLB controller"
1023 depends on HUGETLB_PAGE
1024 select PAGE_COUNTER
Vivek Goyalafc24d42010-04-26 19:27:56 +02001025 default n
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001026 help
1027 Provides a cgroup controller for HugeTLB pages.
1028 When you enable this, you can put a per cgroup limit on HugeTLB usage.
1029 The limit is enforced during page fault. Since HugeTLB doesn't
1030 support page reclaim, enforcing the limit at page fault time implies
1031 that, the application will get SIGBUS signal if it tries to access
1032 HugeTLB pages beyond its limit. This requires the application to know
1033 beforehand how much HugeTLB pages it would require for its use. The
1034 control group is tracked in the third page lru pointer. This means
1035 that we cannot use the controller with huge page less than 3 pages.
Vivek Goyalafc24d42010-04-26 19:27:56 +02001036
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001037config CPUSETS
1038 bool "Cpuset controller"
Nicolas Pitree1d4eee2017-06-14 13:19:23 -04001039 depends on SMP
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001040 help
1041 This option will let you create and manage CPUSETs which
1042 allow dynamically partitioning a system into sets of CPUs and
1043 Memory Nodes and assigning tasks to run only within those sets.
1044 This is primarily useful on large SMP or NUMA systems.
Vivek Goyalafc24d42010-04-26 19:27:56 +02001045
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001046 Say N if unsure.
Vivek Goyalafc24d42010-04-26 19:27:56 +02001047
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001048config PROC_PID_CPUSET
1049 bool "Include legacy /proc/<pid>/cpuset file"
1050 depends on CPUSETS
Tejun Heo89e9b9e2015-05-22 17:13:36 -04001051 default y
1052
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001053config CGROUP_DEVICE
1054 bool "Device controller"
1055 help
1056 Provides a cgroup controller implementing whitelists for
1057 devices which a process in the cgroup can mknod or open.
1058
1059config CGROUP_CPUACCT
1060 bool "Simple CPU accounting controller"
1061 help
1062 Provides a simple controller for monitoring the
1063 total CPU consumed by the tasks in a cgroup.
1064
1065config CGROUP_PERF
1066 bool "Perf controller"
1067 depends on PERF_EVENTS
1068 help
1069 This option extends the perf per-cpu mode to restrict monitoring
1070 to threads which belong to the cgroup specified and run on the
Namhyung Kim6546b192020-03-25 21:45:29 +09001071 designated cpu. Or this can be used to have cgroup ID in samples
1072 so that it can monitor performance events among cgroups.
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001073
1074 Say N if unsure.
1075
Daniel Mack30070982016-11-23 16:52:26 +01001076config CGROUP_BPF
1077 bool "Support for eBPF programs attached to cgroups"
Andy Lutomirski483c4932016-12-16 08:33:45 -08001078 depends on BPF_SYSCALL
1079 select SOCK_CGROUP_DATA
Daniel Mack30070982016-11-23 16:52:26 +01001080 help
1081 Allow attaching eBPF programs to a cgroup using the bpf(2)
1082 syscall command BPF_PROG_ATTACH.
1083
1084 In which context these programs are accessed depends on the type
1085 of attachment. For instance, programs that are attached using
1086 BPF_CGROUP_INET_INGRESS will be executed on the ingress path of
1087 inet sockets.
1088
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001089config CGROUP_DEBUG
Waiman Long23b0be42017-06-13 17:18:03 -04001090 bool "Debug controller"
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001091 default n
Waiman Long23b0be42017-06-13 17:18:03 -04001092 depends on DEBUG_KERNEL
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001093 help
1094 This option enables a simple controller that exports
Waiman Long23b0be42017-06-13 17:18:03 -04001095 debugging information about the cgroups framework. This
1096 controller is for control cgroup debugging only. Its
1097 interfaces are not stable.
Johannes Weiner6bf024e2015-12-17 17:19:57 -05001098
1099 Say N.
1100
Arnd Bergmann73b35142017-01-10 13:08:06 +01001101config SOCK_CGROUP_DATA
1102 bool
1103 default n
1104
Li Zefan23964d22009-01-15 13:50:58 -08001105endif # CGROUPS
KAMEZAWA Hiroyukic0777192009-01-07 18:07:57 -08001106
Daniel Lezcano8dd2a822010-10-27 15:34:38 -07001107menuconfig NAMESPACES
David Rientjes6a108a12011-01-20 14:44:16 -08001108 bool "Namespaces support" if EXPERT
Iulia Manda28138932015-04-15 16:16:41 -07001109 depends on MULTIUSER
David Rientjes6a108a12011-01-20 14:44:16 -08001110 default !EXPERT
Pavel Emelyanovc5289a62008-02-08 04:18:19 -08001111 help
1112 Provides the way to make tasks work with different objects using
1113 the same id. For example same IPC id may refer to different objects
1114 or same user id or pid may refer to different tasks when used in
1115 different namespaces.
1116
Daniel Lezcano8dd2a822010-10-27 15:34:38 -07001117if NAMESPACES
1118
Pavel Emelyanov58bfdd6d2008-02-08 04:18:21 -08001119config UTS_NS
1120 bool "UTS namespace"
Daniel Lezcano17a6d442010-10-27 15:34:37 -07001121 default y
Pavel Emelyanov58bfdd6d2008-02-08 04:18:21 -08001122 help
1123 In this namespace tasks see different info provided with the
1124 uname() system call
1125
Andrei Vagin769071a2019-11-12 01:26:52 +00001126config TIME_NS
1127 bool "TIME namespace"
Thomas Gleixner660fd042019-11-12 01:27:09 +00001128 depends on GENERIC_VDSO_TIME_NS
Andrei Vagin769071a2019-11-12 01:26:52 +00001129 default y
1130 help
1131 In this namespace boottime and monotonic clocks can be set.
1132 The time will keep going with the same pace.
1133
Pavel Emelyanovae5e1b22008-02-08 04:18:22 -08001134config IPC_NS
1135 bool "IPC namespace"
Daniel Lezcano8dd2a822010-10-27 15:34:38 -07001136 depends on (SYSVIPC || POSIX_MQUEUE)
Daniel Lezcano17a6d442010-10-27 15:34:37 -07001137 default y
Pavel Emelyanovae5e1b22008-02-08 04:18:22 -08001138 help
1139 In this namespace tasks work with IPC ids which correspond to
Serge E. Hallyn614b84c2009-04-06 19:01:08 -07001140 different IPC objects in different namespaces.
Pavel Emelyanovae5e1b22008-02-08 04:18:22 -08001141
Pavel Emelyanovaee16ce2008-02-08 04:18:23 -08001142config USER_NS
Kees Cook19c92392012-10-02 11:19:29 -07001143 bool "User namespace"
Eric W. Biederman5673a942011-11-17 10:23:55 -08001144 default n
Pavel Emelyanovaee16ce2008-02-08 04:18:23 -08001145 help
1146 This allows containers, i.e. vservers, to use user namespaces
1147 to provide different user info for different servers.
Eric W. Biedermane11f0ae2013-01-25 16:48:31 -08001148
1149 When user namespaces are enabled in the kernel it is
Johannes Weinerd886f4e2016-01-20 15:02:47 -08001150 recommended that the MEMCG option also be enabled and that
1151 user-space use the memory control groups to limit the amount
1152 of memory a memory unprivileged users can use.
Eric W. Biedermane11f0ae2013-01-25 16:48:31 -08001153
Pavel Emelyanovaee16ce2008-02-08 04:18:23 -08001154 If unsure, say N.
1155
Pavel Emelyanov74bd59b2008-02-08 04:18:24 -08001156config PID_NS
Daniel Lezcano9bd38c22010-10-27 15:34:37 -07001157 bool "PID Namespaces"
Daniel Lezcano17a6d442010-10-27 15:34:37 -07001158 default y
Pavel Emelyanov74bd59b2008-02-08 04:18:24 -08001159 help
Heikki Orsila12d2b8f2008-07-06 15:48:02 +03001160 Support process id namespaces. This allows having multiple
Matt LaPlante692105b2009-01-26 11:12:25 +01001161 processes with the same pid as long as they are in different
Pavel Emelyanov74bd59b2008-02-08 04:18:24 -08001162 pid namespaces. This is a building block of containers.
1163
Matt Helsleyd6eb6332009-01-26 12:25:55 -08001164config NET_NS
1165 bool "Network namespace"
Daniel Lezcano8dd2a822010-10-27 15:34:38 -07001166 depends on NET
Daniel Lezcano17a6d442010-10-27 15:34:37 -07001167 default y
Matt Helsleyd6eb6332009-01-26 12:25:55 -08001168 help
1169 Allow user space to create what appear to be multiple instances
1170 of the network stack.
1171
Daniel Lezcano8dd2a822010-10-27 15:34:38 -07001172endif # NAMESPACES
1173
Adrian Reber5cb366b2018-08-21 22:01:17 -07001174config CHECKPOINT_RESTORE
1175 bool "Checkpoint/restore support"
1176 select PROC_CHILDREN
1177 default n
1178 help
1179 Enables additional kernel features in a sake of checkpoint/restore.
1180 In particular it adds auxiliary prctl codes to setup process text,
1181 data and heap segment sizes, and a few additional /proc filesystem
1182 entries.
1183
1184 If unsure, say N here.
1185
Mike Galbraith5091faa2010-11-30 14:18:03 +01001186config SCHED_AUTOGROUP
1187 bool "Automatic process group scheduling"
Mike Galbraith5091faa2010-11-30 14:18:03 +01001188 select CGROUPS
1189 select CGROUP_SCHED
1190 select FAIR_GROUP_SCHED
1191 help
1192 This option optimizes the scheduler for common desktop workloads by
1193 automatically creating and populating task groups. This separation
1194 of workloads isolates aggressive CPU burners (like build jobs) from
1195 desktop applications. Task group autogeneration is currently based
1196 upon task session.
1197
Daniel Lezcano7af37be2010-10-27 15:34:41 -07001198config SYSFS_DEPRECATED
Ferenc Wagner5d6a4ea2011-01-10 19:04:22 +01001199 bool "Enable deprecated sysfs features to support old userspace tools"
Daniel Lezcano7af37be2010-10-27 15:34:41 -07001200 depends on SYSFS
1201 default n
1202 help
1203 This option adds code that switches the layout of the "block" class
1204 devices, to not show up in /sys/class/block/, but only in
1205 /sys/block/.
1206
1207 This switch is only active when the sysfs.deprecated=1 boot option is
1208 passed or the SYSFS_DEPRECATED_V2 option is set.
1209
1210 This option allows new kernels to run on old distributions and tools,
1211 which might get confused by /sys/class/block/. Since 2007/2008 all
1212 major distributions and tools handle this just fine.
1213
1214 Recent distributions and userspace tools after 2009/2010 depend on
1215 the existence of /sys/class/block/, and will not work with this
1216 option enabled.
1217
1218 Only if you are using a new kernel on an old distribution, you might
1219 need to say Y here.
1220
1221config SYSFS_DEPRECATED_V2
Ferenc Wagner5d6a4ea2011-01-10 19:04:22 +01001222 bool "Enable deprecated sysfs features by default"
Daniel Lezcano7af37be2010-10-27 15:34:41 -07001223 default n
1224 depends on SYSFS
1225 depends on SYSFS_DEPRECATED
1226 help
1227 Enable deprecated sysfs by default.
1228
1229 See the CONFIG_SYSFS_DEPRECATED option for more details about this
1230 option.
1231
1232 Only if you are using a new kernel on an old distribution, you might
1233 need to say Y here. Even then, odds are you would not need it
1234 enabled, you can always pass the boot option if absolutely necessary.
1235
1236config RELAY
1237 bool "Kernel->user space relay support (formerly relayfs)"
Peter Zijlstra26b56792016-10-11 13:54:33 -07001238 select IRQ_WORK
Daniel Lezcano7af37be2010-10-27 15:34:41 -07001239 help
1240 This option enables support for relay interface support in
1241 certain file systems (such as debugfs).
1242 It is designed to provide an efficient mechanism for tools and
1243 facilities to relay large amounts of data from kernel space to
1244 user space.
1245
1246 If unsure, say N.
1247
Dimitri Gorokhovikf9916332007-03-06 01:42:17 -08001248config BLK_DEV_INITRD
1249 bool "Initial RAM filesystem and RAM disk (initramfs/initrd) support"
Dimitri Gorokhovikf9916332007-03-06 01:42:17 -08001250 help
1251 The initial RAM filesystem is a ramfs which is loaded by the
1252 boot loader (loadlin or lilo) and that is mounted as root
1253 before the normal boot procedure. It is typically used to
1254 load modules needed to mount the "real" root file system,
Mauro Carvalho Chehab8c27ceff32016-10-18 10:12:27 -02001255 etc. See <file:Documentation/admin-guide/initrd.rst> for details.
Dimitri Gorokhovikf9916332007-03-06 01:42:17 -08001256
1257 If RAM disk support (BLK_DEV_RAM) is also included, this
1258 also enables initial RAM disk (initrd) support and adds
1259 15 Kbytes (more on some other architectures) to the kernel size.
1260
1261 If unsure say Y.
1262
Jean-Paul Samanc33df4e2007-02-10 01:44:43 -08001263if BLK_DEV_INITRD
1264
Sam Ravnborgdbec4862005-08-10 20:44:50 +02001265source "usr/Kconfig"
1266
Jean-Paul Samanc33df4e2007-02-10 01:44:43 -08001267endif
1268
Masami Hiramatsu76db5a22020-01-11 01:03:32 +09001269config BOOT_CONFIG
1270 bool "Boot config support"
Masami Hiramatsu2910b5a2020-02-25 23:36:41 +09001271 select BLK_DEV_INITRD
Masami Hiramatsu76db5a22020-01-11 01:03:32 +09001272 help
1273 Extra boot config allows system admin to pass a config file as
1274 complemental extension of kernel cmdline when booting.
Masami Hiramatsu0947db02020-01-20 12:23:00 +09001275 The boot config file must be attached at the end of initramfs
Masami Hiramatsu85c46b72020-02-20 21:18:42 +09001276 with checksum, size and magic word.
Masami Hiramatsu0947db02020-01-20 12:23:00 +09001277 See <file:Documentation/admin-guide/bootconfig.rst> for details.
Masami Hiramatsu76db5a22020-01-11 01:03:32 +09001278
1279 If unsure, say Y.
1280
Arnd Bergmann877417e2016-04-25 17:35:27 +02001281choice
1282 prompt "Compiler optimization level"
Ulf Magnusson2cc3ce22017-10-04 01:53:26 +02001283 default CC_OPTIMIZE_FOR_PERFORMANCE
Arnd Bergmann877417e2016-04-25 17:35:27 +02001284
1285config CC_OPTIMIZE_FOR_PERFORMANCE
Masahiro Yamada15f5db62019-08-21 02:09:40 +09001286 bool "Optimize for performance (-O2)"
Arnd Bergmann877417e2016-04-25 17:35:27 +02001287 help
1288 This is the default optimization level for the kernel, building
1289 with the "-O2" compiler flag for best performance and most
1290 helpful compile-time warnings.
1291
Masahiro Yamada15f5db62019-08-21 02:09:40 +09001292config CC_OPTIMIZE_FOR_PERFORMANCE_O3
1293 bool "Optimize more for performance (-O3)"
1294 depends on ARC
Linus Torvaldsc45b4f12005-12-14 18:52:21 -08001295 help
Masahiro Yamada15f5db62019-08-21 02:09:40 +09001296 Choosing this option will pass "-O3" to your compiler to optimize
1297 the kernel yet more for performance.
Linus Torvaldsc45b4f12005-12-14 18:52:21 -08001298
Nicholas Piggin5d20ee32018-05-09 23:00:00 +10001299config CC_OPTIMIZE_FOR_SIZE
Masahiro Yamada15f5db62019-08-21 02:09:40 +09001300 bool "Optimize for size (-Os)"
Linus Torvaldsc45b4f12005-12-14 18:52:21 -08001301 help
Masahiro Yamadace3b4872019-08-21 02:09:39 +09001302 Choosing this option will pass "-Os" to your compiler resulting
1303 in a smaller kernel.
Linus Torvaldsc45b4f12005-12-14 18:52:21 -08001304
Arnd Bergmann877417e2016-04-25 17:35:27 +02001305endchoice
1306
Nicholas Piggin5d20ee32018-05-09 23:00:00 +10001307config HAVE_LD_DEAD_CODE_DATA_ELIMINATION
1308 bool
1309 help
1310 This requires that the arch annotates or otherwise protects
1311 its external entry points from being discarded. Linker scripts
1312 must also merge .text.*, .data.*, and .bss.* correctly into
1313 output sections. Care must be taken not to pull in unrelated
1314 sections (e.g., '.text.init'). Typically '.' in section names
1315 is used to distinguish them from label names / C identifiers.
1316
1317config LD_DEAD_CODE_DATA_ELIMINATION
1318 bool "Dead code and data elimination (EXPERIMENTAL)"
1319 depends on HAVE_LD_DEAD_CODE_DATA_ELIMINATION
1320 depends on EXPERT
Masahiro Yamadae85d1d62018-08-22 22:51:09 +09001321 depends on $(cc-option,-ffunction-sections -fdata-sections)
1322 depends on $(ld-option,--gc-sections)
Nicholas Piggin5d20ee32018-05-09 23:00:00 +10001323 help
Masahiro Yamada8b9d2712018-06-24 01:41:51 +09001324 Enable this if you want to do dead code and data elimination with
1325 the linker by compiling with -ffunction-sections -fdata-sections,
1326 and linking with --gc-sections.
Nicholas Piggin5d20ee32018-05-09 23:00:00 +10001327
1328 This can reduce on disk and in-memory size of the kernel
1329 code and static data, particularly for small configs and
1330 on small systems. This has the possibility of introducing
1331 silently broken kernel if the required annotations are not
1332 present. This option is not well tested yet, so use at your
1333 own risk.
1334
Randy Dunlap08470622006-09-30 23:28:13 -07001335config SYSCTL
1336 bool
1337
Mike Frysinger657a5202013-04-30 15:28:45 -07001338config HAVE_UID16
1339 bool
1340
1341config SYSCTL_EXCEPTION_TRACE
1342 bool
1343 help
1344 Enable support for /proc/sys/debug/exception-trace.
1345
1346config SYSCTL_ARCH_UNALIGN_NO_WARN
1347 bool
1348 help
1349 Enable support for /proc/sys/kernel/ignore-unaligned-usertrap
1350 Allows arch to define/use @no_unaligned_warning to possibly warn
1351 about unaligned access emulation going on under the hood.
1352
1353config SYSCTL_ARCH_UNALIGN_ALLOW
1354 bool
1355 help
1356 Enable support for /proc/sys/kernel/unaligned-trap
1357 Allows arches to define/use @unaligned_enabled to runtime toggle
1358 the unaligned access emulation.
1359 see arch/parisc/kernel/unaligned.c for reference
1360
Mike Frysinger657a5202013-04-30 15:28:45 -07001361config HAVE_PCSPKR_PLATFORM
1362 bool
1363
Alexei Starovoitovf89b7752014-10-23 18:41:08 -07001364# interpreter that classic socket filters depend on
1365config BPF
1366 bool
1367
David Rientjes6a108a12011-01-20 14:44:16 -08001368menuconfig EXPERT
1369 bool "Configure standard kernel features (expert users)"
Josh Triplettf505c552011-06-05 18:23:58 -07001370 # Unhide debug options, to make the on-by-default options visible
1371 select DEBUG_KERNEL
Linus Torvalds1da177e2005-04-16 15:20:36 -07001372 help
1373 This option allows certain base kernel options and settings
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001374 to be disabled or tweaked. This is for specialized
1375 environments which can tolerate a "non-standard" kernel.
1376 Only use this if you really know what you are doing.
Linus Torvalds1da177e2005-04-16 15:20:36 -07001377
Chuck Ebbertae81f9e2006-09-16 12:15:53 -07001378config UID16
David Rientjes6a108a12011-01-20 14:44:16 -08001379 bool "Enable 16-bit UID system calls" if EXPERT
Iulia Manda28138932015-04-15 16:16:41 -07001380 depends on HAVE_UID16 && MULTIUSER
Chuck Ebbertae81f9e2006-09-16 12:15:53 -07001381 default y
1382 help
1383 This enables the legacy 16-bit UID syscall wrappers.
1384
Iulia Manda28138932015-04-15 16:16:41 -07001385config MULTIUSER
1386 bool "Multiple users, groups and capabilities support" if EXPERT
1387 default y
1388 help
1389 This option enables support for non-root users, groups and
1390 capabilities.
1391
1392 If you say N here, all processes will run with UID 0, GID 0, and all
1393 possible capabilities. Saying N here also compiles out support for
1394 system calls related to UIDs, GIDs, and capabilities, such as setuid,
1395 setgid, and capset.
1396
1397 If unsure, say Y here.
1398
Fabian Frederickf6187762014-06-04 16:11:12 -07001399config SGETMASK_SYSCALL
1400 bool "sgetmask/ssetmask syscalls support" if EXPERT
Arnd Bergmanna687a532018-03-07 23:30:54 +01001401 def_bool PARISC || M68K || PPC || MIPS || X86 || SPARC || MICROBLAZE || SUPERH
Masahiro Yamadaa7f7f622020-06-14 01:50:22 +09001402 help
Fabian Frederickf6187762014-06-04 16:11:12 -07001403 sys_sgetmask and sys_ssetmask are obsolete system calls
1404 no longer supported in libc but still enabled by default in some
1405 architectures.
1406
1407 If unsure, leave the default option here.
1408
Fabian Frederick6af9f7b2014-04-03 14:48:25 -07001409config SYSFS_SYSCALL
1410 bool "Sysfs syscall support" if EXPERT
1411 default y
Masahiro Yamadaa7f7f622020-06-14 01:50:22 +09001412 help
Fabian Frederick6af9f7b2014-04-03 14:48:25 -07001413 sys_sysfs is an obsolete system call no longer supported in libc.
1414 Note that disabling this option is more secure but might break
1415 compatibility with some systems.
1416
1417 If unsure say Y here.
1418
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001419config FHANDLE
1420 bool "open by fhandle syscalls" if EXPERT
1421 select EXPORTFS
1422 default y
1423 help
1424 If you say Y here, a user level program will be able to map
1425 file names to handle and then later use the handle for
1426 different file system operations. This is useful in implementing
1427 userspace file servers, which now track files using handles instead
1428 of names. The handle would remain the same even if file names
1429 get renamed. Enables open_by_handle_at(2) and name_to_handle_at(2)
1430 syscalls.
1431
Nicolas Pitrebaa73d92016-11-11 00:10:10 -05001432config POSIX_TIMERS
1433 bool "Posix Clocks & timers" if EXPERT
1434 default y
1435 help
1436 This includes native support for POSIX timers to the kernel.
1437 Some embedded systems have no use for them and therefore they
1438 can be configured out to reduce the size of the kernel image.
1439
1440 When this option is disabled, the following syscalls won't be
1441 available: timer_create, timer_gettime: timer_getoverrun,
1442 timer_settime, timer_delete, clock_adjtime, getitimer,
1443 setitimer, alarm. Furthermore, the clock_settime, clock_gettime,
1444 clock_getres and clock_nanosleep syscalls will be limited to
1445 CLOCK_REALTIME, CLOCK_MONOTONIC and CLOCK_BOOTTIME only.
1446
1447 If unsure say y.
1448
Matt Mackalld59745c2005-05-01 08:59:02 -07001449config PRINTK
1450 default y
David Rientjes6a108a12011-01-20 14:44:16 -08001451 bool "Enable support for printk" if EXPERT
Frederic Weisbecker74876a92012-10-12 18:00:23 +02001452 select IRQ_WORK
Matt Mackalld59745c2005-05-01 08:59:02 -07001453 help
1454 This option enables normal printk support. Removing it
1455 eliminates most of the message strings from the kernel image
1456 and makes the kernel more or less silent. As this makes it
1457 very difficult to diagnose system problems, saying N here is
1458 strongly discouraged.
1459
Petr Mladek42a0bb32016-05-20 17:00:33 -07001460config PRINTK_NMI
1461 def_bool y
1462 depends on PRINTK
1463 depends on HAVE_NMI
1464
Matt Mackallc8538a72005-05-01 08:59:01 -07001465config BUG
David Rientjes6a108a12011-01-20 14:44:16 -08001466 bool "BUG() support" if EXPERT
Matt Mackallc8538a72005-05-01 08:59:01 -07001467 default y
1468 help
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001469 Disabling this option eliminates support for BUG and WARN, reducing
1470 the size of your kernel image and potentially quietly ignoring
1471 numerous fatal conditions. You should only consider disabling this
1472 option for embedded systems with no facilities for reporting errors.
1473 Just say Y.
Matt Mackallc8538a72005-05-01 08:59:01 -07001474
Matt Mackall708e9a72006-01-08 01:05:25 -08001475config ELF_CORE
Alex Kelly046d6622012-10-04 17:15:23 -07001476 depends on COREDUMP
Matt Mackall708e9a72006-01-08 01:05:25 -08001477 default y
David Rientjes6a108a12011-01-20 14:44:16 -08001478 bool "Enable ELF core dumps" if EXPERT
Matt Mackall708e9a72006-01-08 01:05:25 -08001479 help
1480 Enable support for generating core dumps. Disabling saves about 4k.
1481
Ralf Baechle8761f1a2011-06-01 19:05:09 +01001482
Stas Sergeeve5e1d3c2008-05-07 12:39:56 +02001483config PCSPKR_PLATFORM
David Rientjes6a108a12011-01-20 14:44:16 -08001484 bool "Enable PC-Speaker support" if EXPERT
Ralf Baechle8761f1a2011-06-01 19:05:09 +01001485 depends on HAVE_PCSPKR_PLATFORM
Ralf Baechle15f304b2011-06-01 19:04:59 +01001486 select I8253_LOCK
Stas Sergeeve5e1d3c2008-05-07 12:39:56 +02001487 default y
1488 help
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001489 This option allows to disable the internal PC-Speaker
1490 support, saving some memory.
Stas Sergeeve5e1d3c2008-05-07 12:39:56 +02001491
Linus Torvalds1da177e2005-04-16 15:20:36 -07001492config BASE_FULL
1493 default y
David Rientjes6a108a12011-01-20 14:44:16 -08001494 bool "Enable full-sized data structures for core" if EXPERT
Linus Torvalds1da177e2005-04-16 15:20:36 -07001495 help
1496 Disabling this option reduces the size of miscellaneous core
1497 kernel data structures. This saves memory on small machines,
1498 but may reduce performance.
1499
1500config FUTEX
David Rientjes6a108a12011-01-20 14:44:16 -08001501 bool "Enable futex support" if EXPERT
Linus Torvalds1da177e2005-04-16 15:20:36 -07001502 default y
Nicolas Pitrebc2eecd2017-08-01 00:31:32 -04001503 imply RT_MUTEXES
Linus Torvalds1da177e2005-04-16 15:20:36 -07001504 help
1505 Disabling this option will cause the kernel to be built without
1506 support for "fast userspace mutexes". The resulting kernel may not
1507 run glibc-based applications correctly.
1508
Nicolas Pitrebc2eecd2017-08-01 00:31:32 -04001509config FUTEX_PI
1510 bool
1511 depends on FUTEX && RT_MUTEXES
1512 default y
1513
Heiko Carstens03b8c7b2014-03-02 13:09:47 +01001514config HAVE_FUTEX_CMPXCHG
1515 bool
Josh Triplett62b4d202014-10-03 16:19:24 -07001516 depends on FUTEX
Heiko Carstens03b8c7b2014-03-02 13:09:47 +01001517 help
1518 Architectures should select this if futex_atomic_cmpxchg_inatomic()
1519 is implemented and always working. This removes a couple of runtime
1520 checks.
1521
Linus Torvalds1da177e2005-04-16 15:20:36 -07001522config EPOLL
David Rientjes6a108a12011-01-20 14:44:16 -08001523 bool "Enable eventpoll support" if EXPERT
Linus Torvalds1da177e2005-04-16 15:20:36 -07001524 default y
1525 help
1526 Disabling this option will cause the kernel to be built without
1527 support for epoll family of system calls.
1528
Davide Libenzifba2afa2007-05-10 22:23:13 -07001529config SIGNALFD
David Rientjes6a108a12011-01-20 14:44:16 -08001530 bool "Enable signalfd() system call" if EXPERT
Davide Libenzifba2afa2007-05-10 22:23:13 -07001531 default y
1532 help
1533 Enable the signalfd() system call that allows to receive signals
1534 on a file descriptor.
1535
1536 If unsure, say Y.
1537
Davide Libenzib215e282007-05-10 22:23:16 -07001538config TIMERFD
David Rientjes6a108a12011-01-20 14:44:16 -08001539 bool "Enable timerfd() system call" if EXPERT
Davide Libenzib215e282007-05-10 22:23:16 -07001540 default y
1541 help
1542 Enable the timerfd() system call that allows to receive timer
1543 events on a file descriptor.
1544
1545 If unsure, say Y.
1546
Davide Libenzie1ad7462007-05-10 22:23:19 -07001547config EVENTFD
David Rientjes6a108a12011-01-20 14:44:16 -08001548 bool "Enable eventfd() system call" if EXPERT
Davide Libenzie1ad7462007-05-10 22:23:19 -07001549 default y
1550 help
1551 Enable the eventfd() system call that allows to receive both
1552 kernel notification (ie. KAIO) or userspace notifications.
1553
1554 If unsure, say Y.
1555
Linus Torvalds1da177e2005-04-16 15:20:36 -07001556config SHMEM
David Rientjes6a108a12011-01-20 14:44:16 -08001557 bool "Use full shmem filesystem" if EXPERT
Linus Torvalds1da177e2005-04-16 15:20:36 -07001558 default y
1559 depends on MMU
1560 help
1561 The shmem is an internal filesystem used to manage shared memory.
1562 It is backed by swap and manages resource limits. It is also exported
1563 to userspace as tmpfs if TMPFS is enabled. Disabling this
1564 option replaces shmem and tmpfs with the much simpler ramfs code,
1565 which may be appropriate on small systems without swap.
1566
Thomas Petazzoniebf3f092008-10-15 22:05:12 -07001567config AIO
David Rientjes6a108a12011-01-20 14:44:16 -08001568 bool "Enable AIO support" if EXPERT
Thomas Petazzoniebf3f092008-10-15 22:05:12 -07001569 default y
1570 help
1571 This option enables POSIX asynchronous I/O which may by used
Mike Frysinger657a5202013-04-30 15:28:45 -07001572 by some high performance threaded applications. Disabling
1573 this option saves about 7k.
1574
Jens Axboe2b188cc2019-01-07 10:46:33 -07001575config IO_URING
1576 bool "Enable IO uring support" if EXPERT
Jens Axboe561fb042019-10-24 07:25:42 -06001577 select IO_WQ
Jens Axboe2b188cc2019-01-07 10:46:33 -07001578 default y
1579 help
1580 This option enables support for the io_uring interface, enabling
1581 applications to submit and complete IO through submission and
1582 completion rings that are shared between the kernel and application.
1583
Josh Triplettd3ac21c2014-08-17 19:41:09 -05001584config ADVISE_SYSCALLS
1585 bool "Enable madvise/fadvise syscalls" if EXPERT
1586 default y
1587 help
1588 This option enables the madvise and fadvise syscalls, used by
1589 applications to advise the kernel about their future memory or file
1590 usage, improving performance. If building an embedded system where no
1591 applications use these syscalls, you can disable this option to save
1592 space.
1593
Andrea Arcangeli5a281062020-04-06 20:05:33 -07001594config HAVE_ARCH_USERFAULTFD_WP
1595 bool
1596 help
1597 Arch has userfaultfd write protection support
1598
Mathieu Desnoyers5b25b132015-09-11 13:07:39 -07001599config MEMBARRIER
1600 bool "Enable membarrier() system call" if EXPERT
1601 default y
1602 help
1603 Enable the membarrier() system call that allows issuing memory
1604 barriers across all running threads, which can be used to distribute
1605 the cost of user-space memory barriers asymmetrically by transforming
1606 pairs of memory barriers into pairs consisting of membarrier() and a
1607 compiler barrier.
1608
1609 If unsure, say Y.
1610
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001611config KALLSYMS
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001612 bool "Load all symbols for debugging/ksymoops" if EXPERT
1613 default y
1614 help
1615 Say Y here to let the kernel print out symbolic crash information and
1616 symbolic stack backtraces. This increases the size of the kernel
1617 somewhat, as all symbols have to be loaded into the kernel image.
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001618
1619config KALLSYMS_ALL
1620 bool "Include all symbols in kallsyms"
1621 depends on DEBUG_KERNEL && KALLSYMS
1622 help
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001623 Normally kallsyms only contains the symbols of functions for nicer
1624 OOPS messages and backtraces (i.e., symbols from the text and inittext
1625 sections). This is sufficient for most cases. And only in very rare
1626 cases (e.g., when a debugger is used) all symbols are required (e.g.,
1627 names of variables from the data sections, etc).
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001628
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001629 This option makes sure that all symbols are loaded into the kernel
1630 image (i.e., symbols from all sections) in cost of increased kernel
1631 size (depending on the kernel configuration, it may be 300KiB or
1632 something like this).
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001633
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001634 Say N unless you really need all symbols.
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001635
1636config KALLSYMS_ABSOLUTE_PERCPU
1637 bool
1638 depends on KALLSYMS
1639 default X86_64 && SMP
1640
1641config KALLSYMS_BASE_RELATIVE
1642 bool
1643 depends on KALLSYMS
Arnd Bergmanna687a532018-03-07 23:30:54 +01001644 default !IA64
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001645 help
1646 Instead of emitting them as absolute values in the native word size,
1647 emit the symbol references in the kallsyms table as 32-bit entries,
1648 each containing a relative value in the range [base, base + U32_MAX]
1649 or, when KALLSYMS_ABSOLUTE_PERCPU is in effect, each containing either
1650 an absolute value in the range [0, S32_MAX] or a relative value in the
1651 range [base, base + S32_MAX], where base is the lowest relative symbol
1652 address encountered in the image.
1653
1654 On 64-bit builds, this reduces the size of the address table by 50%,
1655 but more importantly, it results in entries whose values are build
1656 time constants, and no relocation pass is required at runtime to fix
1657 up the entries based on the runtime load address of the kernel.
1658
1659# end of the "standard kernel features (expert users)" menu
1660
1661# syscall, maps, verifier
KP Singhfc611f42020-03-29 01:43:49 +01001662
1663config BPF_LSM
1664 bool "LSM Instrumentation with BPF"
KP Singh4edf16b2020-03-30 22:40:59 +02001665 depends on BPF_EVENTS
KP Singhfc611f42020-03-29 01:43:49 +01001666 depends on BPF_SYSCALL
1667 depends on SECURITY
1668 depends on BPF_JIT
1669 help
1670 Enables instrumentation of the security hooks with eBPF programs for
1671 implementing dynamic MAC and Audit Policies.
1672
1673 If you are unsure how to answer this question, answer N.
1674
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001675config BPF_SYSCALL
1676 bool "Enable bpf() system call"
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001677 select BPF
Song Liubae77c52018-05-07 10:50:48 -07001678 select IRQ_WORK
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001679 default n
1680 help
1681 Enable the bpf() system call that allows to manipulate eBPF
1682 programs and maps via file descriptors.
1683
Daniel Borkmann81c22042019-12-09 16:08:03 +01001684config ARCH_WANT_DEFAULT_BPF_JIT
1685 bool
1686
Alexei Starovoitov290af862018-01-09 10:04:29 -08001687config BPF_JIT_ALWAYS_ON
1688 bool "Permanently enable BPF JIT and remove BPF interpreter"
1689 depends on BPF_SYSCALL && HAVE_EBPF_JIT && BPF_JIT
1690 help
1691 Enables BPF JIT and removes BPF interpreter to avoid
1692 speculative execution of BPF instructions by the interpreter
1693
Daniel Borkmann81c22042019-12-09 16:08:03 +01001694config BPF_JIT_DEFAULT_ON
1695 def_bool ARCH_WANT_DEFAULT_BPF_JIT || BPF_JIT_ALWAYS_ON
1696 depends on HAVE_EBPF_JIT && BPF_JIT
1697
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001698config USERFAULTFD
1699 bool "Enable userfaultfd() system call"
Randy Dunlapd1b069f2017-11-17 15:31:47 -08001700 depends on MMU
1701 help
1702 Enable the userfaultfd() system call that allows to intercept and
1703 handle page faults in userland.
1704
Mathieu Desnoyers3ccfebe2018-01-29 15:20:11 -05001705config ARCH_HAS_MEMBARRIER_CALLBACKS
1706 bool
1707
Mathieu Desnoyers70216e12018-01-29 15:20:17 -05001708config ARCH_HAS_MEMBARRIER_SYNC_CORE
1709 bool
1710
Mathieu Desnoyersd7822b12018-06-02 08:43:54 -04001711config RSEQ
1712 bool "Enable rseq() system call" if EXPERT
1713 default y
1714 depends on HAVE_RSEQ
1715 select MEMBARRIER
1716 help
1717 Enable the restartable sequences system call. It provides a
1718 user-space cache for the current CPU number value, which
1719 speeds up getting the current CPU number from user-space,
1720 as well as an ABI to speed up user-space operations on
1721 per-CPU data.
1722
1723 If unsure, say Y.
1724
1725config DEBUG_RSEQ
1726 default n
1727 bool "Enabled debugging of rseq() system call" if EXPERT
1728 depends on RSEQ && DEBUG_KERNEL
1729 help
1730 Enable extra debugging checks for the rseq system call.
1731
1732 If unsure, say N.
1733
Randy Dunlap6befe5f2011-04-26 12:33:21 -07001734config EMBEDDED
1735 bool "Embedded system"
Josh Triplett5d2acfc2014-04-07 15:39:09 -07001736 option allnoconfig_y
Randy Dunlap6befe5f2011-04-26 12:33:21 -07001737 select EXPERT
1738 help
1739 This option should be enabled if compiling the kernel for
1740 an embedded system so certain expert options are available
1741 for configuration.
1742
Ingo Molnarcdd6c482009-09-21 12:02:48 +02001743config HAVE_PERF_EVENTS
Thomas Gleixner0793a612008-12-04 20:12:29 +01001744 bool
Mike Frysinger018df722009-06-12 13:17:43 -04001745 help
1746 See tools/perf/design.txt for details.
Thomas Gleixner0793a612008-12-04 20:12:29 +01001747
Peter Zijlstra906010b2009-09-21 16:08:49 +02001748config PERF_USE_VMALLOC
1749 bool
1750 help
1751 See tools/perf/design.txt for details
1752
William Breathitt Grayad90a3d2017-01-10 13:50:54 -05001753config PC104
William Breathitt Gray424529f2017-12-29 15:14:59 -05001754 bool "PC/104 support" if EXPERT
William Breathitt Grayad90a3d2017-01-10 13:50:54 -05001755 help
1756 Expose PC/104 form factor device drivers and options available for
1757 selection and configuration. Enable this option if your target
1758 machine has a PC/104 bus.
1759
Ingo Molnar57c0c152009-09-21 12:20:38 +02001760menu "Kernel Performance Events And Counters"
Thomas Gleixner0793a612008-12-04 20:12:29 +01001761
Ingo Molnarcdd6c482009-09-21 12:02:48 +02001762config PERF_EVENTS
Ingo Molnar57c0c152009-09-21 12:20:38 +02001763 bool "Kernel performance events and counters"
Robert Richter392d65a2012-04-05 18:24:44 +02001764 default y if PROFILING
Ingo Molnarcdd6c482009-09-21 12:02:48 +02001765 depends on HAVE_PERF_EVENTS
Peter Zijlstrae360adb2010-10-14 14:01:34 +08001766 select IRQ_WORK
Pranith Kumar83fe27e2014-12-05 11:24:45 -05001767 select SRCU
Thomas Gleixner0793a612008-12-04 20:12:29 +01001768 help
Ingo Molnar57c0c152009-09-21 12:20:38 +02001769 Enable kernel support for various performance events provided
1770 by software and hardware.
Thomas Gleixner0793a612008-12-04 20:12:29 +01001771
Thadeu Lima de Souza Cascardodd770382009-10-30 19:32:25 -02001772 Software events are supported either built-in or via the
Ingo Molnar57c0c152009-09-21 12:20:38 +02001773 use of generic tracepoints.
1774
1775 Most modern CPUs support performance events via performance
1776 counter registers. These registers count the number of certain
Thomas Gleixner0793a612008-12-04 20:12:29 +01001777 types of hw events: such as instructions executed, cachemisses
1778 suffered, or branches mis-predicted - without slowing down the
1779 kernel or applications. These registers can also trigger interrupts
1780 when a threshold number of events have passed - and can thus be
1781 used to profile the code that runs on that CPU.
1782
Ingo Molnar57c0c152009-09-21 12:20:38 +02001783 The Linux Performance Event subsystem provides an abstraction of
Thadeu Lima de Souza Cascardodd770382009-10-30 19:32:25 -02001784 these software and hardware event capabilities, available via a
Ingo Molnar57c0c152009-09-21 12:20:38 +02001785 system call and used by the "perf" utility in tools/perf/. It
Thomas Gleixner0793a612008-12-04 20:12:29 +01001786 provides per task and per CPU counters, and it provides event
1787 capabilities on top of those.
1788
1789 Say Y if unsure.
1790
Peter Zijlstra906010b2009-09-21 16:08:49 +02001791config DEBUG_PERF_USE_VMALLOC
1792 default n
1793 bool "Debug: use vmalloc to back perf mmap() buffers"
Michael Ellermancb3071132015-05-04 16:26:39 +10001794 depends on PERF_EVENTS && DEBUG_KERNEL && !PPC
Peter Zijlstra906010b2009-09-21 16:08:49 +02001795 select PERF_USE_VMALLOC
1796 help
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001797 Use vmalloc memory to back perf mmap() buffers.
Peter Zijlstra906010b2009-09-21 16:08:49 +02001798
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001799 Mostly useful for debugging the vmalloc code on platforms
1800 that don't require it.
Peter Zijlstra906010b2009-09-21 16:08:49 +02001801
Krzysztof Kozlowskie8cf4e92019-12-04 16:52:28 -08001802 Say N if unsure.
Peter Zijlstra906010b2009-09-21 16:08:49 +02001803
Thomas Gleixner0793a612008-12-04 20:12:29 +01001804endmenu
1805
Christoph Lameterf8891e52006-06-30 01:55:45 -07001806config VM_EVENT_COUNTERS
1807 default y
David Rientjes6a108a12011-01-20 14:44:16 -08001808 bool "Enable VM event counters for /proc/vmstat" if EXPERT
Christoph Lameterf8891e52006-06-30 01:55:45 -07001809 help
Paul Jackson2aea4fb2006-12-22 01:06:10 -08001810 VM event counters are needed for event counts to be shown.
1811 This option allows the disabling of the VM event counters
David Rientjes6a108a12011-01-20 14:44:16 -08001812 on EXPERT systems. /proc/vmstat will only show page counts
Paul Jackson2aea4fb2006-12-22 01:06:10 -08001813 if VM event counters are disabled.
Christoph Lameterf8891e52006-06-30 01:55:45 -07001814
Christoph Lameter41ecc552007-05-09 02:32:44 -07001815config SLUB_DEBUG
1816 default y
David Rientjes6a108a12011-01-20 14:44:16 -08001817 bool "Enable SLUB debugging support" if EXPERT
Christoph Lameterf6acb632008-04-29 16:16:06 -07001818 depends on SLUB && SYSFS
Christoph Lameter41ecc552007-05-09 02:32:44 -07001819 help
1820 SLUB has extensive debug support features. Disabling these can
1821 result in significant savings in code size. This also disables
1822 SLUB sysfs support. /sys/slab will not exist and there will be
1823 no support for cache validation etc.
1824
Tejun Heo1663f262017-02-22 15:41:39 -08001825config SLUB_MEMCG_SYSFS_ON
1826 default n
1827 bool "Enable memcg SLUB sysfs support by default" if EXPERT
1828 depends on SLUB && SYSFS && MEMCG
1829 help
1830 SLUB creates a directory under /sys/kernel/slab for each
1831 allocation cache to host info and debug files. If memory
1832 cgroup is enabled, each cache can have per memory cgroup
1833 caches. SLUB can create the same sysfs directories for these
1834 caches under /sys/kernel/slab/CACHE/cgroup but it can lead
1835 to a very high number of debug files being created. This is
1836 controlled by slub_memcg_sysfs boot parameter and this
1837 config option determines the parameter's default value.
1838
Randy Dunlapb943c462009-03-10 12:55:46 -07001839config COMPAT_BRK
1840 bool "Disable heap randomization"
1841 default y
1842 help
1843 Randomizing heap placement makes heap exploits harder, but it
1844 also breaks ancient binaries (including anything libc5 based).
1845 This option changes the bootup default to heap randomization
Matt LaPlante692105b2009-01-26 11:12:25 +01001846 disabled, and can be overridden at runtime by setting
Randy Dunlapb943c462009-03-10 12:55:46 -07001847 /proc/sys/kernel/randomize_va_space to 2.
1848
1849 On non-ancient distros (post-2000 ones) N is usually a safe choice.
1850
Christoph Lameter81819f02007-05-06 14:49:36 -07001851choice
1852 prompt "Choose SLAB allocator"
Christoph Lametera0acd822007-07-17 04:03:32 -07001853 default SLUB
Christoph Lameter81819f02007-05-06 14:49:36 -07001854 help
1855 This option allows to select a slab allocator.
1856
1857config SLAB
1858 bool "SLAB"
Kees Cook04385fc2016-06-23 15:20:59 -07001859 select HAVE_HARDENED_USERCOPY_ALLOCATOR
Christoph Lameter81819f02007-05-06 14:49:36 -07001860 help
1861 The regular slab allocator that is established and known to work
Christoph Lameter34013882007-05-09 02:32:47 -07001862 well in all environments. It organizes cache hot objects in
Simon Arlott02f56212008-11-05 22:18:19 +00001863 per cpu and per node queues.
Christoph Lameter81819f02007-05-06 14:49:36 -07001864
1865config SLUB
Christoph Lameter81819f02007-05-06 14:49:36 -07001866 bool "SLUB (Unqueued Allocator)"
Kees Cooked18adc2016-06-23 15:24:05 -07001867 select HAVE_HARDENED_USERCOPY_ALLOCATOR
Christoph Lameter81819f02007-05-06 14:49:36 -07001868 help
1869 SLUB is a slab allocator that minimizes cache line usage
1870 instead of managing queues of cached objects (SLAB approach).
1871 Per cpu caching is realized using slabs of objects instead
1872 of queues of objects. SLUB can use memory efficiently
Simon Arlott02f56212008-11-05 22:18:19 +00001873 and has enhanced diagnostics. SLUB is the default choice for
1874 a slab allocator.
Christoph Lameter81819f02007-05-06 14:49:36 -07001875
1876config SLOB
David Rientjes6a108a12011-01-20 14:44:16 -08001877 depends on EXPERT
Christoph Lameter81819f02007-05-06 14:49:36 -07001878 bool "SLOB (Simple Allocator)"
1879 help
Matt Mackall37291452008-02-04 22:29:38 -08001880 SLOB replaces the stock allocator with a drastically simpler
1881 allocator. SLOB is generally more space efficient but
1882 does not perform as well on large systems.
Christoph Lameter81819f02007-05-06 14:49:36 -07001883
1884endchoice
1885
Kees Cook7660a6f2017-07-06 15:36:40 -07001886config SLAB_MERGE_DEFAULT
1887 bool "Allow slab caches to be merged"
1888 default y
1889 help
1890 For reduced kernel memory fragmentation, slab caches can be
1891 merged when they share the same size and other characteristics.
1892 This carries a risk of kernel heap overflows being able to
1893 overwrite objects from merged caches (and more easily control
1894 cache layout), which makes such heap attacks easier to exploit
1895 by attackers. By keeping caches unmerged, these kinds of exploits
1896 can usually only damage objects in the same cache. To disable
1897 merging at runtime, "slab_nomerge" can be passed on the kernel
1898 command line.
1899
Thomas Garnierc7ce4f602016-05-19 17:10:37 -07001900config SLAB_FREELIST_RANDOM
1901 default n
Thomas Garnier210e7a42016-07-26 15:21:59 -07001902 depends on SLAB || SLUB
Thomas Garnierc7ce4f602016-05-19 17:10:37 -07001903 bool "SLAB freelist randomization"
1904 help
Thomas Garnier210e7a42016-07-26 15:21:59 -07001905 Randomizes the freelist order used on creating new pages. This
Thomas Garnierc7ce4f602016-05-19 17:10:37 -07001906 security feature reduces the predictability of the kernel slab
1907 allocator against heap overflows.
1908
Kees Cook2482ddec2017-09-06 16:19:18 -07001909config SLAB_FREELIST_HARDENED
1910 bool "Harden slab freelist metadata"
1911 depends on SLUB
1912 help
1913 Many kernel heap attacks try to target slab cache metadata and
1914 other infrastructure. This options makes minor performance
Kees Cook92bae782019-07-16 16:27:57 -07001915 sacrifices to harden the kernel slab allocator against common
Kees Cook2482ddec2017-09-06 16:19:18 -07001916 freelist exploit methods.
1917
Dan Williamse900a912019-05-14 15:41:28 -07001918config SHUFFLE_PAGE_ALLOCATOR
1919 bool "Page allocator randomization"
1920 default SLAB_FREELIST_RANDOM && ACPI_NUMA
1921 help
1922 Randomization of the page allocator improves the average
1923 utilization of a direct-mapped memory-side-cache. See section
1924 5.2.27 Heterogeneous Memory Attribute Table (HMAT) in the ACPI
1925 6.2a specification for an example of how a platform advertises
1926 the presence of a memory-side-cache. There are also incidental
1927 security benefits as it reduces the predictability of page
1928 allocations to compliment SLAB_FREELIST_RANDOM, but the
1929 default granularity of shuffling on the "MAX_ORDER - 1" i.e,
1930 10th order of pages is selected based on cache utilization
1931 benefits on x86.
1932
1933 While the randomization improves cache utilization it may
1934 negatively impact workloads on platforms without a cache. For
1935 this reason, by default, the randomization is enabled only
1936 after runtime detection of a direct-mapped memory-side-cache.
1937 Otherwise, the randomization may be force enabled with the
1938 'page_alloc.shuffle' kernel command line parameter.
1939
1940 Say Y if unsure.
1941
Joonsoo Kim345c9052013-06-19 14:05:52 +09001942config SLUB_CPU_PARTIAL
1943 default y
Uwe Kleine-Königb39ffbf2013-07-17 16:54:59 +02001944 depends on SLUB && SMP
Joonsoo Kim345c9052013-06-19 14:05:52 +09001945 bool "SLUB per cpu partial cache"
1946 help
Kees Cook92bae782019-07-16 16:27:57 -07001947 Per cpu partial caches accelerate objects allocation and freeing
Joonsoo Kim345c9052013-06-19 14:05:52 +09001948 that is local to a processor at the price of more indeterminism
1949 in the latency of the free. On overflow these caches will be cleared
1950 which requires the taking of locks that may cause latency spikes.
1951 Typically one would choose no for a realtime system.
1952
Jie Zhangea637632009-12-14 18:00:02 -08001953config MMAP_ALLOW_UNINITIALIZED
1954 bool "Allow mmapped anonymous memory to be uninitialized"
David Rientjes6a108a12011-01-20 14:44:16 -08001955 depends on EXPERT && !MMU
Jie Zhangea637632009-12-14 18:00:02 -08001956 default n
1957 help
1958 Normally, and according to the Linux spec, anonymous memory obtained
Randy Dunlap3903bf92018-08-21 21:58:34 -07001959 from mmap() has its contents cleared before it is passed to
Jie Zhangea637632009-12-14 18:00:02 -08001960 userspace. Enabling this config option allows you to request that
1961 mmap() skip that if it is given an MAP_UNINITIALIZED flag, thus
1962 providing a huge performance boost. If this option is not enabled,
1963 then the flag will be ignored.
1964
1965 This is taken advantage of by uClibc's malloc(), and also by
1966 ELF-FDPIC binfmt's brk and stack allocator.
1967
1968 Because of the obvious security issues, this option should only be
1969 enabled on embedded devices where you control what is run in
1970 userspace. Since that isn't generally a problem on no-MMU systems,
1971 it is normally safe to say Y here.
1972
1973 See Documentation/nommu-mmap.txt for more information.
1974
David Howells091f6e22015-07-20 21:16:28 +01001975config SYSTEM_DATA_VERIFICATION
1976 def_bool n
1977 select SYSTEM_TRUSTED_KEYRING
1978 select KEYS
1979 select CRYPTO
David Howellsd43de6c2016-03-03 21:49:27 +00001980 select CRYPTO_RSA
David Howells091f6e22015-07-20 21:16:28 +01001981 select ASYMMETRIC_KEY_TYPE
1982 select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
David Howells091f6e22015-07-20 21:16:28 +01001983 select ASN1
1984 select OID_REGISTRY
1985 select X509_CERTIFICATE_PARSER
1986 select PKCS7_MESSAGE_PARSER
Peter Foley82c04ff2014-04-18 15:07:11 -07001987 help
David Howells091f6e22015-07-20 21:16:28 +01001988 Provide PKCS#7 message verification using the contents of the system
1989 trusted keyring to provide public keys. This then can be used for
1990 module verification, kexec image verification and firmware blob
1991 verification.
Peter Foley82c04ff2014-04-18 15:07:11 -07001992
Mathieu Desnoyers125e5642008-02-02 15:10:36 -05001993config PROFILING
Robert Richterb309a292010-02-26 15:01:23 +01001994 bool "Profiling support"
Mathieu Desnoyers125e5642008-02-02 15:10:36 -05001995 help
1996 Say Y here to enable the extended profiling support mechanisms used
1997 by profilers such as OProfile.
1998
Ingo Molnar5f87f112008-07-23 14:15:22 +02001999#
2000# Place an empty function call at each tracepoint site. Can be
2001# dynamically changed for a probe function.
2002#
Mathieu Desnoyers97e1c182008-07-18 12:16:16 -04002003config TRACEPOINTS
Ingo Molnar5f87f112008-07-23 14:15:22 +02002004 bool
Mathieu Desnoyers97e1c182008-07-18 12:16:16 -04002005
Linus Torvalds1da177e2005-04-16 15:20:36 -07002006endmenu # General setup
2007
Christoph Hellwig15724972018-07-31 13:39:30 +02002008source "arch/Kconfig"
2009
Chuck Ebbertae81f9e2006-09-16 12:15:53 -07002010config RT_MUTEXES
Christoph Jaeger6341e622014-12-20 15:41:11 -05002011 bool
Chuck Ebbertae81f9e2006-09-16 12:15:53 -07002012
Linus Torvalds1da177e2005-04-16 15:20:36 -07002013config BASE_SMALL
2014 int
2015 default 0 if BASE_FULL
2016 default 1 if !BASE_FULL
2017
Thiago Jung Bauermannc8424e72019-07-04 15:57:34 -03002018config MODULE_SIG_FORMAT
2019 def_bool n
2020 select SYSTEM_DATA_VERIFICATION
2021
Jan Engelhardt66da5732007-07-15 23:39:29 -07002022menuconfig MODULES
Linus Torvalds1da177e2005-04-16 15:20:36 -07002023 bool "Enable loadable module support"
Yann E. MORIN11097a02013-08-11 16:07:50 +02002024 option modules
Linus Torvalds1da177e2005-04-16 15:20:36 -07002025 help
2026 Kernel modules are small pieces of compiled code which can
2027 be inserted in the running kernel, rather than being
2028 permanently built into the kernel. You use the "modprobe"
2029 tool to add (and sometimes remove) them. If you say Y here,
2030 many parts of the kernel can be built as modules (by
2031 answering M instead of Y where indicated): this is most
2032 useful for infrequently used options which are not required
2033 for booting. For more information, see the man pages for
2034 modprobe, lsmod, modinfo, insmod and rmmod.
2035
2036 If you say Y here, you will need to run "make
2037 modules_install" to put the modules under /lib/modules/
2038 where modprobe can find them (you may need to be root to do
2039 this).
2040
2041 If unsure, say Y.
2042
Robert P. J. Day0b0de142008-08-04 13:31:32 -04002043if MODULES
2044
Linus Torvalds826e4502008-05-04 17:04:16 -07002045config MODULE_FORCE_LOAD
2046 bool "Forced module loading"
Linus Torvalds826e4502008-05-04 17:04:16 -07002047 default n
2048 help
Rusty Russell91e37a72008-05-09 16:25:28 +10002049 Allow loading of modules without version information (ie. modprobe
2050 --force). Forced module loading sets the 'F' (forced) taint flag and
2051 is usually a really bad idea.
Linus Torvalds826e4502008-05-04 17:04:16 -07002052
Linus Torvalds1da177e2005-04-16 15:20:36 -07002053config MODULE_UNLOAD
2054 bool "Module unloading"
Linus Torvalds1da177e2005-04-16 15:20:36 -07002055 help
2056 Without this option you will not be able to unload any
2057 modules (note that some modules may not be unloadable
Denys Vlasenkof7f5b672008-07-22 19:24:26 -05002058 anyway), which makes your kernel smaller, faster
2059 and simpler. If unsure, say Y.
Linus Torvalds1da177e2005-04-16 15:20:36 -07002060
2061config MODULE_FORCE_UNLOAD
2062 bool "Forced module unloading"
Kees Cook19c92392012-10-02 11:19:29 -07002063 depends on MODULE_UNLOAD
Linus Torvalds1da177e2005-04-16 15:20:36 -07002064 help
2065 This option allows you to force a module to unload, even if the
2066 kernel believes it is unsafe: the kernel will remove the module
2067 without waiting for anyone to stop using it (using the -f option to
2068 rmmod). This is mainly for kernel developers and desperate users.
2069 If unsure, say N.
2070
Linus Torvalds1da177e2005-04-16 15:20:36 -07002071config MODVERSIONS
Sam Ravnborg0d541642005-12-26 23:04:02 +01002072 bool "Module versioning support"
Linus Torvalds1da177e2005-04-16 15:20:36 -07002073 help
2074 Usually, you have to use modules compiled with your kernel.
2075 Saying Y here makes it sometimes possible to use modules
2076 compiled for different kernels, by adding enough information
2077 to the modules to (hopefully) spot any changes which would
2078 make them incompatible with the kernel you are running. If
2079 unsure, say N.
2080
Masahiro Yamada2ff2b7e2019-08-19 14:54:20 +09002081config ASM_MODVERSIONS
2082 bool
2083 default HAVE_ASM_MODVERSIONS && MODVERSIONS
2084 help
2085 This enables module versioning for exported symbols also from
2086 assembly. This can be enabled only when the target architecture
2087 supports it.
2088
Ard Biesheuvel56067812017-02-03 09:54:05 +00002089config MODULE_REL_CRCS
2090 bool
2091 depends on MODVERSIONS
2092
Linus Torvalds1da177e2005-04-16 15:20:36 -07002093config MODULE_SRCVERSION_ALL
2094 bool "Source checksum for all modules"
Linus Torvalds1da177e2005-04-16 15:20:36 -07002095 help
2096 Modules which contain a MODULE_VERSION get an extra "srcversion"
2097 field inserted into their modinfo section, which contains a
2098 sum of the source files which made it. This helps maintainers
2099 see exactly which source was used to build a module (since
2100 others sometimes change the module source without updating
2101 the version). With this option, such a "srcversion" field
2102 will be created for all modules. If unsure, say N.
2103
Rusty Russell106a4ee2012-09-26 10:09:40 +01002104config MODULE_SIG
2105 bool "Module signature verification"
Thiago Jung Bauermannc8424e72019-07-04 15:57:34 -03002106 select MODULE_SIG_FORMAT
Rusty Russell106a4ee2012-09-26 10:09:40 +01002107 help
2108 Check modules for valid signatures upon load: the signature
2109 is simply appended to the module. For more information see
Nathan Chancellorcbdc8212017-09-10 02:48:29 -07002110 <file:Documentation/admin-guide/module-signing.rst>.
Rusty Russell106a4ee2012-09-26 10:09:40 +01002111
David Howells228c37f2015-08-11 12:38:54 +01002112 Note that this option adds the OpenSSL development packages as a
2113 kernel build dependency so that the signing tool can use its crypto
2114 library.
2115
David Howells49fcf732019-08-19 17:17:40 -07002116 You should enable this option if you wish to use either
2117 CONFIG_SECURITY_LOCKDOWN_LSM or lockdown functionality imposed via
2118 another LSM - otherwise unsigned modules will be loadable regardless
2119 of the lockdown policy.
2120
David Howellsea0b6dc2012-09-26 10:09:50 +01002121 !!!WARNING!!! If you enable this option, you MUST make sure that the
2122 module DOES NOT get stripped after being signed. This includes the
2123 debuginfo strip done by some packagers (such as rpmbuild) and
2124 inclusion into an initramfs that wants the module size reduced.
2125
Rusty Russell106a4ee2012-09-26 10:09:40 +01002126config MODULE_SIG_FORCE
2127 bool "Require modules to be validly signed"
2128 depends on MODULE_SIG
2129 help
2130 Reject unsigned modules or signed modules for which we don't have a
2131 key. Without this, such modules will simply taint the kernel.
David Howellsea0b6dc2012-09-26 10:09:50 +01002132
Michal Marekd9d8d7e2013-01-25 13:41:31 +10302133config MODULE_SIG_ALL
2134 bool "Automatically sign all modules"
2135 default y
2136 depends on MODULE_SIG
2137 help
2138 Sign all modules during make modules_install. Without this option,
2139 modules must be signed manually, using the scripts/sign-file tool.
2140
2141comment "Do not forget to sign required modules with scripts/sign-file"
2142 depends on MODULE_SIG_FORCE && !MODULE_SIG_ALL
2143
David Howellsea0b6dc2012-09-26 10:09:50 +01002144choice
2145 prompt "Which hash algorithm should modules be signed with?"
2146 depends on MODULE_SIG
2147 help
2148 This determines which sort of hashing algorithm will be used during
2149 signature generation. This algorithm _must_ be built into the kernel
2150 directly so that signature verification can take place. It is not
2151 possible to load a signed module containing the algorithm to check
2152 the signature on that module.
2153
2154config MODULE_SIG_SHA1
2155 bool "Sign modules with SHA-1"
2156 select CRYPTO_SHA1
2157
2158config MODULE_SIG_SHA224
2159 bool "Sign modules with SHA-224"
2160 select CRYPTO_SHA256
2161
2162config MODULE_SIG_SHA256
2163 bool "Sign modules with SHA-256"
2164 select CRYPTO_SHA256
2165
2166config MODULE_SIG_SHA384
2167 bool "Sign modules with SHA-384"
2168 select CRYPTO_SHA512
2169
2170config MODULE_SIG_SHA512
2171 bool "Sign modules with SHA-512"
2172 select CRYPTO_SHA512
2173
2174endchoice
2175
Michal Marek22753672013-01-25 13:41:00 +10302176config MODULE_SIG_HASH
2177 string
2178 depends on MODULE_SIG
2179 default "sha1" if MODULE_SIG_SHA1
2180 default "sha224" if MODULE_SIG_SHA224
2181 default "sha256" if MODULE_SIG_SHA256
2182 default "sha384" if MODULE_SIG_SHA384
2183 default "sha512" if MODULE_SIG_SHA512
2184
Bertrand Jacquinbeb50df2014-08-27 20:31:56 +09302185config MODULE_COMPRESS
2186 bool "Compress modules on installation"
Bertrand Jacquinbeb50df2014-08-27 20:31:56 +09302187 help
Bertrand Jacquinbeb50df2014-08-27 20:31:56 +09302188
Rusty Russellb6c09b52015-06-16 12:16:22 +09302189 Compresses kernel modules when 'make modules_install' is run; gzip or
2190 xz depending on "Compression algorithm" below.
Bertrand Jacquinbeb50df2014-08-27 20:31:56 +09302191
Rusty Russellb6c09b52015-06-16 12:16:22 +09302192 module-init-tools MAY support gzip, and kmod MAY support gzip and xz.
Bertrand Jacquinbeb50df2014-08-27 20:31:56 +09302193
Rusty Russellb6c09b52015-06-16 12:16:22 +09302194 Out-of-tree kernel modules installed using Kbuild will also be
2195 compressed upon installation.
Bertrand Jacquinbeb50df2014-08-27 20:31:56 +09302196
Rusty Russellb6c09b52015-06-16 12:16:22 +09302197 Note: for modules inside an initrd or initramfs, it's more efficient
2198 to compress the whole initrd or initramfs instead.
Bertrand Jacquinbeb50df2014-08-27 20:31:56 +09302199
Rusty Russellb6c09b52015-06-16 12:16:22 +09302200 Note: This is fully compatible with signed modules.
2201
2202 If in doubt, say N.
Bertrand Jacquinbeb50df2014-08-27 20:31:56 +09302203
2204choice
2205 prompt "Compression algorithm"
2206 depends on MODULE_COMPRESS
2207 default MODULE_COMPRESS_GZIP
2208 help
2209 This determines which sort of compression will be used during
2210 'make modules_install'.
2211
2212 GZIP (default) and XZ are supported.
2213
2214config MODULE_COMPRESS_GZIP
2215 bool "GZIP"
2216
2217config MODULE_COMPRESS_XZ
2218 bool "XZ"
2219
2220endchoice
2221
Matthias Maennich3d52ec52019-09-06 11:32:29 +01002222config MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS
2223 bool "Allow loading of modules with missing namespace imports"
2224 help
2225 Symbols exported with EXPORT_SYMBOL_NS*() are considered exported in
2226 a namespace. A module that makes use of a symbol exported with such a
2227 namespace is required to import the namespace via MODULE_IMPORT_NS().
2228 There is no technical reason to enforce correct namespace imports,
2229 but it creates consistency between symbols defining namespaces and
2230 users importing namespaces they make use of. This option relaxes this
2231 requirement and lifts the enforcement when loading a module.
2232
2233 If unsure, say N.
2234
Masahiro Yamadaefd97632019-09-09 20:04:08 +09002235config UNUSED_SYMBOLS
2236 bool "Enable unused/obsolete exported symbols"
2237 default y if X86
2238 help
2239 Unused but exported symbols make the kernel needlessly bigger. For
2240 that reason most of these unused exports will soon be removed. This
2241 option is provided temporarily to provide a transition period in case
2242 some external kernel module needs one of these symbols anyway. If you
2243 encounter such a case in your module, consider if you are actually
2244 using the right API. (rationale: since nobody in the kernel is using
2245 this in a module, there is a pretty good chance it's actually the
2246 wrong interface to use). If you really need the symbol, please send a
2247 mail to the linux kernel mailing list mentioning the symbol and why
2248 you really need it, and what the merge plan to the mainline kernel for
2249 your module is.
2250
Nicolas Pitredbacb0e2016-01-26 21:51:05 -05002251config TRIM_UNUSED_KSYMS
2252 bool "Trim unused exported kernel symbols"
Masahiro Yamadad189c2a2019-09-09 20:04:07 +09002253 depends on !UNUSED_SYMBOLS
Nicolas Pitredbacb0e2016-01-26 21:51:05 -05002254 help
2255 The kernel and some modules make many symbols available for
2256 other modules to use via EXPORT_SYMBOL() and variants. Depending
2257 on the set of modules being selected in your kernel configuration,
2258 many of those exported symbols might never be used.
2259
2260 This option allows for unused exported symbols to be dropped from
2261 the build. In turn, this provides the compiler more opportunities
2262 (especially when using LTO) for optimizing the code and reducing
2263 binary size. This might have some security advantages as well.
2264
Valdis Kletnieksf1cb6372016-08-02 14:07:27 -07002265 If unsure, or if you need to build out-of-tree modules, say N.
Nicolas Pitredbacb0e2016-01-26 21:51:05 -05002266
Quentin Perret1518c632020-02-28 17:20:13 +00002267config UNUSED_KSYMS_WHITELIST
2268 string "Whitelist of symbols to keep in ksymtab"
2269 depends on TRIM_UNUSED_KSYMS
2270 help
2271 By default, all unused exported symbols will be un-exported from the
2272 build when TRIM_UNUSED_KSYMS is selected.
2273
2274 UNUSED_KSYMS_WHITELIST allows to whitelist symbols that must be kept
2275 exported at all times, even in absence of in-tree users. The value to
2276 set here is the path to a text file containing the list of symbols,
2277 one per line. The path can be absolute, or relative to the kernel
2278 source tree.
2279
Robert P. J. Day0b0de142008-08-04 13:31:32 -04002280endif # MODULES
2281
Peter Zijlstra6c9692e2015-05-27 11:09:37 +09302282config MODULES_TREE_LOOKUP
2283 def_bool y
2284 depends on PERF_EVENTS || TRACING
2285
Rusty Russell98a79d62008-12-13 21:19:41 +10302286config INIT_ALL_POSSIBLE
2287 bool
2288 help
Rusty Russell5f054e32012-03-29 15:38:31 +10302289 Back when each arch used to define their own cpu_online_mask and
2290 cpu_possible_mask, some of them chose to initialize cpu_possible_mask
Rusty Russell98a79d62008-12-13 21:19:41 +10302291 with all 1s, and others with all 0s. When they were centralised,
2292 it was better to provide this option than to break all the archs
Matt LaPlante692105b2009-01-26 11:12:25 +01002293 and have several arch maintainers pursuing me down dark alleys.
Rusty Russell98a79d62008-12-13 21:19:41 +10302294
Jens Axboe3a65dfe2005-11-04 08:43:35 +01002295source "block/Kconfig"
Avi Kivitye98c3202007-10-16 23:27:31 -07002296
2297config PREEMPT_NOTIFIERS
2298 bool
Paul E. McKenneye260be62008-01-25 21:08:24 +01002299
Steffen Klassert16295be2010-01-06 19:47:10 +11002300config PADATA
2301 depends on SMP
2302 bool
2303
David Howells4520c6a2012-09-21 23:31:13 +01002304config ASN1
2305 tristate
2306 help
2307 Build a simple ASN.1 grammar compiler that produces a bytecode output
2308 that can be interpreted by the ASN.1 stream decoder and used to
2309 inform it as to what tags are to be expected in a stream and what
2310 functions to call on what tags.
2311
Thomas Gleixner6beb0002009-11-09 15:21:34 +00002312source "kernel/Kconfig.locks"
Mathieu Desnoyerse61938a2018-01-29 15:20:15 -05002313
Daniel Borkmann0ebeea82020-05-15 12:11:16 +02002314config ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE
2315 bool
2316
Mathieu Desnoyerse61938a2018-01-29 15:20:15 -05002317config ARCH_HAS_SYNC_CORE_BEFORE_USERMODE
2318 bool
Dominik Brodowski1bd21c62018-04-05 11:53:01 +02002319
2320# It may be useful for an architecture to override the definitions of the
Dominik Brodowski7303e302018-04-05 11:53:03 +02002321# SYSCALL_DEFINE() and __SYSCALL_DEFINEx() macros in <linux/syscalls.h>
2322# and the COMPAT_ variants in <linux/compat.h>, in particular to use a
2323# different calling convention for syscalls. They can also override the
2324# macros for not-implemented syscalls in kernel/sys_ni.c and
2325# kernel/time/posix-stubs.c. All these overrides need to be available in
2326# <asm/syscall_wrapper.h>.
Dominik Brodowski1bd21c62018-04-05 11:53:01 +02002327config ARCH_HAS_SYSCALL_WRAPPER
2328 def_bool n