• Vincenzo Frascino's avatar
    arm64: Enable docker support in defconfig · e2c12540
    Vincenzo Frascino authored
    The arm64 defconfig does not support the docker usecase.
    
    Enable the missing configuration options.
    
    The resulting .config was validated with [1].
    
    ...
    
    Generally Necessary:
    - cgroup hierarchy: properly mounted [/sys/fs/cgroup]
    - apparmor: enabled and tools installed
    - CONFIG_NAMESPACES: enabled
    - CONFIG_NET_NS: enabled
    - CONFIG_PID_NS: enabled
    - CONFIG_IPC_NS: enabled
    - CONFIG_UTS_NS: enabled
    - CONFIG_CGROUPS: enabled
    - CONFIG_CGROUP_CPUACCT: enabled
    - CONFIG_CGROUP_DEVICE: enabled
    - CONFIG_CGROUP_FREEZER: enabled
    - CONFIG_CGROUP_SCHED: enabled
    - CONFIG_CPUSETS: enabled
    - CONFIG_MEMCG: enabled
    - CONFIG_KEYS: enabled
    - CONFIG_VETH: enabled (as module)
    - CONFIG_BRIDGE: enabled (as module)
    - CONFIG_BRIDGE_NETFILTER: enabled (as module)
    - CONFIG_IP_NF_FILTER: enabled (as module)
    - CONFIG_IP_NF_TARGET_MASQUERADE: enabled (as module)
    - CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: enabled (as module)
    - CONFIG_NETFILTER_XT_MATCH_CONNTRACK: enabled (as module)
    - CONFIG_NETFILTER_XT_MATCH_IPVS: enabled (as module)
    - CONFIG_NETFILTER_XT_MARK: enabled (as module)
    - CONFIG_IP_NF_NAT: enabled (as module)
    - CONFIG_NF_NAT: enabled (as module)
    - CONFIG_POSIX_MQUEUE: enabled
    - CONFIG_CGROUP_BPF: enabled
    
    ...
    
    [1] https://github.com/moby/moby/blob/master/contrib/check-config.sh
    
    Cc: Will Deacon <will@kernel.org>
    Cc: Arnd Bergmann <arnd@kernel.org>
    Acked-by: default avatarCatalin Marinas <catalin.marinas@arm.com>
    Signed-off-by: default avatarVincenzo Frascino <vincenzo.frascino@arm.com>
    Link: https://lore.kernel.org/r/20220907110235.14708-1-vincenzo.frascino@arm.comSigned-off-by: default avatarCatalin Marinas <catalin.marinas@arm.com>
    e2c12540
defconfig 31.1 KB