diff options
| author | Vagrant Cascadian <vagrant@debian.org> | 2019-09-29 10:11:50 -0700 |
|---|---|---|
| committer | Vagrant Cascadian <vagrant@debian.org> | 2019-09-29 15:10:32 -0700 |
| commit | 18b3ba6ff2f096193161742a06e4c1ae12600d0c (patch) | |
| tree | 431344f1ad8b995b0383b4a12ed36d968c259f75 /gnu | |
| parent | 2d74d42a65f14e2f4433e9784422841ed308e92d (diff) | |
| download | guix-18b3ba6ff2f096193161742a06e4c1ae12600d0c.tar.gz | |
gnu: %default-extra-linux-options: Ensure namespaces are enabled in all
linux-libre kernels. The linux-libre kernels using defconfig may not have namespaces enabled, which is needed for the default guix-daemon configuration in Guix System. * gnu/packages/linux (%default-extra-linux-options): Enable CONFIG_NAMESPACES, CONFIG_UTS_NS, CONFIG_IPC_NS, CONFIG_USER_NS, CONFIG_PID_NS, and CONFIG_NET_NS.
Diffstat (limited to 'gnu')
| -rw-r--r-- | gnu/packages/linux.scm | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm index 876eb005af..fed8d8b96d 100644 --- a/gnu/packages/linux.scm +++ b/gnu/packages/linux.scm @@ -564,6 +564,13 @@ for ARCH and optionally VARIANT, or #f if there is no such configuration." (define %default-extra-linux-options `(;; Some very mild hardening. ("CONFIG_SECURITY_DMESG_RESTRICT" . #t) + ;; All kernels should have NAMESPACES options enabled + ("CONFIG_NAMESPACES" . #t) + ("CONFIG_UTS_NS" . #t) + ("CONFIG_IPC_NS" . #t) + ("CONFIG_USER_NS" . #t) + ("CONFIG_PID_NS" . #t) + ("CONFIG_NET_NS" . #t) ;; Modules required for initrd: ("CONFIG_NET_9P" . m) ("CONFIG_NET_9P_VIRTIO" . m) |