harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

feat: Add several boot options in hardware config

Browse source 
Multiple boot options have been added in the hardware-configuration for the x86_64-linux system. This includes unsafe secrets mitigation options, such as 'noibrs', 'noibpb', 'nopti', etc., to potentially enhance system performance.
This commit is contained in:
Harald Hoyer 2024-07-18 10:06:41 +02:00
parent 0a874834bc
commit 96e66ebad4
1 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
systems/x86_64-linux/t15/hardware-configuration.nix
View file

@ -34,7 +34,21 @@
"quiet" "quiet"
"splash" "splash"
"video=efifb:nobgrt" "video=efifb:nobgrt"
];
# unsafe, but no secrets on that machine
"noibrs"
"noibpb"
"nopti"
"nospectre_v2"
"nospectre_v1"
"l1tf=off"
"nospec_store_bypass_disable"
"no_stf_barrier"
"mds=off"
"tsx=on"
"tsx_async_abort=off"
"mitigations=off"
];
boot.extraModulePackages = [ ]; boot.extraModulePackages = [ ];