Per Request from Geaaru for docker/vm admin purposes. (spectre issues appear to be mitigated already for bpf)
CONFIG_NET_CLS_CGROUP=m
CONFIG_BPFILTER=m
CONFIG_BPF_JIT=m
I'm curious about CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y (not set for Gentoo)
I'm curious if this my issue on my laptop and other ryzen laptops that causing the system to hang upon boot without the noapic flag.
CONFIG_EFI_VARS_PSTORE allows writing console messages, crash dumps, or anything else supported by pstore to EFI variables. Including as Y, but disabling by default may help with diagnosing issues?
Removed EFI_MIXED which allowed booting 64-bit kernels from 32-bit EFI firmware systems, but disabled booting from EFI boot stub. (very niche)
Removed EFI_FAKE_MEMMAP which was used for debugging EFI firmware problems. Not necessary for us.