Kernel

EFI Boot

Linux Kernel Configuration: Kernel .config

-*- Enable the block layer ---> Partition Types ---> [*] Advanced partition selection [*] EFI GUID Partition support Processor type and features ---> [*] EFI runtime service support [*] EFI stub support Device Drivers ---> Graphics support ---> <*> Support for frame buffer devices ---> [*] Enable firmware EDID [*] EFI-based Framebuffer Support Console display driver support ---> <*> Framebuffer Console support Firmware Drivers ---> EFI (Extensible Firmware Interface) Support ---> <*> EFI Variable Support via sysfs

GPT partitions

Linux Kernel Configuration: Kernel .config

-*- Enable the block layer ---> Partition Types ---> [*] Advanced partition selection [*] EFI GUID Partition support

Ext4 filesystem

Linux Kernel Configuration: Kernel .config

File systems ---> <*> The Extended 4 (ext4) filesystem [*] Use ext4 for ext2/ext3 file systems [*] Ext4 extended attributes

systemd

Linux Kernel Configuration: Kernel .config

General setup ---> [*] open by fhandle syscalls (CONFIG_FHANDLE) [ ] Auditing support (CONFIG_AUDIT) [*] Control Group support (CONFIG_CGROUPS) ---> [*] Freezer cgroup subsystem [*] Device controller for cgroups [*] Cpuset support [*] Simple CPU accounting cgroup subsystem [*] Resource counters [*] Memory Resource Controller for Control Groups [*] Memory Resource Controller Swap Extension [*] Memory Resource Controller Swap Extension enabled by default [*] Memory Resource Controller Kernel Memory accounting [*] HugeTLB Resource Controller for Control Groups [*] Enable perf_event per-cpu per-container group (cgroup) monitoring [*] Group CPU scheduler ---> [*] Group scheduling for SCHED_OTHER [*] CPU bandwidth provisioning for FAIR_GROUP_SCHED [*] Group scheduling for SCHED_RR/FIFO [*] Block IO controller [*] Namespaces support ---> [*] UTS namespace [*] IPC namespace [*] User namespace [*] PID Namespaces [*] Network namespace [*] Automatic process group scheduling [ ] Enable deprecated sysfs features to support old userspace tools (CONFIG_SYSFS_DEPRECATED) [ ] Configure standard kernel features (expert users) ---- [*] Enable the block layer ---> [*] Block layer SG support v4 (CONFIG_BLK_DEV_BSG) Partition Types ---> [*] Advanced partition selection [*] EFI GUID Partition support (CONFIG_EFI_PARTITION) Processor type and features ---> [*] Transparent Hugepage Support Transparent Hugepage Support sysfs defaults (always) ---> [*] Enable seccomp to safely compute untrusted bytecode (CONFIG_SECCOMP) [*] EFI runtime service support [*] Networking support (CONFIG_NET) ---> Networking options ---> [*] The IPv6 protocol (CONFIG_IPV6) ---> Device Drivers ---> Generic Driver Options ---> () path to uevent helper (CONFIG_UEVENT_HELPER_PATH) [*] Maintain a devtmpfs filesystem to mount at /dev (CONFIG_DEVTMPFS) [*] Automount devtmpfs at /dev, after the kernel mounted the rootfs [ ] Fallback user-helper invocation for firmware loading (CONFIG_FW_LOADER_USER_HELPER) [*] Real Time Clock ---> [*] Set system time from RTC on startup and resume (rtc0) RTC used to set the system time [*] /sys/class/rtc/rtcN (sysfs) [*] /proc/driver/rtc (procfs for rtc0) [*] /dev/rtcN (character devices) [*] PC-style 'CMOS' Firmware Drivers ---> [*] Export DMI identification via sysfs to userspace (CONFIG_DMIID) [*] DMI table support in sysfs EFI (Extensible Firmware Interface) Support ---> [*] EFI Variable Support via sysfs (CONFIG_EFI_VARS) File systems ---> [*] Inotify support for userspace (CONFIG_INOTIFY_USER) [*] Filesystem wide access notification [*] fanotify permissions checking [*] Kernel automounter version 4 support (also supports v3) (CONFIG_AUTOFS4_FS) Pseudo filesystems [*] /proc file system support (CONFIG_PROC_FS) [*] Tmpfs virtual memory file system support (former shm fs) (CONFIG_TMPFS) [*] Tmpfs POSIX Access Control Lists (CONFIG_TMPFS_POSIX_ACL) [*] Tmpfs extended attributes (CONFIG_TMPFS_XATTR) [*] HugeTLB file system support Security options ---> [*] Enable different security models SMACK support Security options ---> [*] Simplified Mandatory Access Control Kernel Support Default security module (Simplified Mandatory Access Control) --->

udev

Linux Kernel Configuration: Kernel .config

[*] Enable the block layer ---> [*] Block layer SG support v4 Device Drivers ---> Generic Driver Options ---> [*] Maintain a devtmpfs filesystem to mount at /dev [*] Automount devtmpfs at /dev, after the kernel mounted the rootfs File systems ---> Pseudo filesystems [*] Tmpfs virtual memory file system support (former shm fs) [*] Tmpfs POSIX Access Control Lists

udisks2

Linux Kernel Configuration: Kernel .config

General setup ---> [*] Support for paging of anonymous memory (swap) Power management and ACPI options ---> [*] Run-time PM core functionality Device Drivers ---> [*] USB support ---> File systems ---> Pseudo filesystems [*] Tmpfs virtual memory file system support (former shm fs) [*] Tmpfs POSIX Access Control Lists [*] Native language support ---> (utf8) Default NLS Option [*] NLS UTF-8

xf86-video-intel

Linux Kernel Configuration: Kernel .config

Device Drivers ---> Graphics support ---> [*] /dev/agpgart (AGP Support) ---> [*] Direct Rendering Manager (XFree86 4.1.0 and higher DRI support) ---> [*] Intel 8xx/9xx/G3x/G4x/HD Graphics [*] Enable modesetting on intel by default

sydbox

Linux Kernel Configuration: Kernel .config

Processor type and features ---> [*] Cross Memory Support [*] Enable seccomp to safely compute untrusted bytecode

Chromium/Chrome

Linux Kernel Configuration: Kernel .config

General setup ---> [*] Namespaces support ---> [*] PID Namespaces [*] Network namespace Processor type and features ---> [*] Enable seccomp to safely compute untrusted bytecode

Apache

Linux Kernel Configuration: Kernel .config

General setup ---> [*] System V IPC mpm-itk 2.4.2 Processor type and features ---> [*] Enable seccomp to safely compute untrusted bytecode

libvirt

Linux Kernel Configuration: Kernel .config

[*] Networking support ---> Networking options ---> [*] Advanced netfilter configuration [*] Network packet filtering framework (Netfilter) ---> Core Netfilter Configuration ---> [*] CHECKSUM target support [*] Network packet filtering framework (Netfilter) ---> [*] Ethernet Bridge tables (ebtables) support ---> Linux Containers virtualisation support: General setup ---> [*] POSIX Message Queues [*] Control Group support ---> [*] Freezer cgroup subsystem [*] Device controller for cgroups [*] Cpuset support [*] Simple CPU accounting cgroup subsystem [*] Resource counters [*] Memory Resource Controller for Control Groups [*] Memory Resource Controller Swap Extension [*] Memory Resource Controller Swap Extension enabled by default [*] Memory Resource Controller Kernel Memory accounting (EXPERIMENTAL) [*] Enable perf_event per-cpu per-container group (cgroup) monitoring [*] Group CPU scheduler ---> [*] Group scheduling for SCHED_OTHER [*] CPU bandwidth provisioning for FAIR_GROUP_SCHED [*] Group scheduling for SCHED_RR/FIFO [*] Block IO controller [*] Namespaces support ---> [*] UTS namespace [*] IPC namespace [*] PID Namespaces [*] Network namespace Device Drivers ---> Character devices ---> [*] Unix98 PTY support [*] Support multiple instances of devpts Device Drivers ---> [*] Network device support ---> [*] Network core driver support [*] MAC-VLAN support (EXPERIMENTAL) [*] Virtual ethernet pair device MAC-based TAP (macvlan/macvtap) for networking instead of the normal TUN/TAP: Device Drivers ---> [*] Network device support ---> [*] Network core driver support [*] MAC-VLAN support (EXPERIMENTAL) [*] MAC-VLAN based tap driver (EXPERIMENTAL)

KVM host

Linux Kernel Configuration: Kernel .config

[*] Networking support ---> Networking options ---> [*] 802.1d Ethernet Bridging Device Drivers ---> [*] Network device support ---> [*] Network core driver support [*] Universal TUN/TAP device driver support [*] Virtualization ---> [*] Kernel-based Virtual Machine (KVM) support [*] KVM for Intel processors support [ ] KVM for AMD processors support [*] Host kernel accelerator for virtio net (EXPERIMENTAL) Official VT-d documentation Bus options (PCI etc.) ---> [*] Enable PCI resource re-allocation detection [*] PCI Stub driver [*] PCI IOV support Device Drivers ---> [*] IOMMU Hardware Support ---> [ ] AMD IOMMU support [*] Support for Intel IOMMU using DMA Remapping Devices [*] Enable Intel DMA Remapping Devices by default [*] Support for Interrupt Remapping (EXPERIMENTAL)

open-vm-tools

VMware ESXi guest

Linux Kernel Configuration: Kernel .config

Processor type and features ---> [*] Allow for memory hot-add [*] Allow for memory hot remove [*] Support for hot-pluggable CPUs [*] Networking support ---> Networking options ---> <*> Virtual Socket protocol <*> VMware VMCI transport for Virtual Sockets Device Drivers ---> Misc devices ---> [*] VMware Balloon Driver <*> VMware VMCI Driver SCSI device support ---> [*] SCSI low-level drivers ---> [*] VMware PVSCSI driver support [*] Network device support ---> [*] VMware VMXNET3 ethernet driver Graphics support ---> [*] Direct Rendering Manager (XFree86 4.1.0 and higher DRI support) ---> [*] DRM driver for VMware Virtual GPU [*] Enable framebuffer console under vmwgfx by default