moved patches near kernel compilation

This commit is contained in:
TheK0tYaRa 2026-03-09 08:04:59 +02:00
parent 374c73c925
commit 692e7746cd
2 changed files with 78 additions and 76 deletions

View file

@ -9,5 +9,82 @@ let
linuxMainline = import ./kernel.nix { inherit pkgs lib kernel-src; };
in
{
boot.kernelPackages = pkgs.linuxPackagesFor linuxMainline;
boot = {
kernelPackages = pkgs.linuxPackagesFor linuxMainline;
kernelPatches = [
{
name = "gpu";
structuredExtraConfig = (
with lib.kernel;
{
CPU_SUP_INTEL = no;
CPU_SUP_HYGON = no;
CPU_SUP_CENTAUR = no;
CPU_SUP_ZHAOXIN = no;
#
X86_MCE_INTEL = no;
}
);
}
{
name = "gpu";
structuredExtraConfig = (
with lib.kernel;
{
DRM_AMDGPU = no;
DRM_KOMEDA = no;
DRM_NOUVEAU = no;
DRM_RADEON = no;
#
FB_NVIDIA = no;
FB_RADEON = no;
}
);
}
{
name = "go crazy, go stupid";
structuredExtraConfig = (
with lib.kernel;
{
# CPU_MITIGATIONS = no;
#
# unaffected by
MITIGATION_PAGE_TABLE_ISOLATION = no;
MITIGATION_GDS = no;
MITIGATION_RFDS = no;
MITIGATION_MDS = no;
MITIGATION_TAA = no;
MITIGATION_MMIO_STALE_DATA = no;
MITIGATION_L1TF = no;
MITIGATION_SRBDS = no;
MITIGATION_ITS = no;
MITIGATION_SPECTRE_BHI = no;
MITIGATION_IBRS_ENTRY = no;
MITIGATION_CALL_DEPTH_TRACKING = no;
}
);
}
{
name = "audio";
structuredExtraConfig = (
with lib.kernel;
{
SND_SEQ_DEVICE = no;
SND_SEQUENCER = no;
SND_SEQ_DUMMY = no;
SND_HRTIMER = no;
}
);
}
{
name = "network";
structuredExtraConfig = (
with lib.kernel;
{
# VLAN_8021Q = no;
}
);
}
];
};
}

View file

@ -156,81 +156,6 @@
# amneziawg
];
kernelParams = [ "mitigations=off" ];
kernelPatches = [
{
name = "gpu";
structuredExtraConfig = (
with lib.kernel;
{
CPU_SUP_INTEL = no;
CPU_SUP_HYGON = no;
CPU_SUP_CENTAUR = no;
CPU_SUP_ZHAOXIN = no;
#
X86_MCE_INTEL = no;
}
);
}
{
name = "gpu";
structuredExtraConfig = (
with lib.kernel;
{
DRM_AMDGPU = no;
DRM_KOMEDA = no;
DRM_NOUVEAU = no;
DRM_RADEON = no;
#
FB_NVIDIA = no;
FB_RADEON = no;
}
);
}
{
name = "go crazy, go stupid";
structuredExtraConfig = (
with lib.kernel;
{
# CPU_MITIGATIONS = no;
#
# unaffected by
MITIGATION_PAGE_TABLE_ISOLATION = no;
MITIGATION_GDS = no;
MITIGATION_RFDS = no;
MITIGATION_MDS = no;
MITIGATION_TAA = no;
MITIGATION_MMIO_STALE_DATA = no;
MITIGATION_L1TF = no;
MITIGATION_SRBDS = no;
MITIGATION_ITS = no;
MITIGATION_SPECTRE_BHI = no;
MITIGATION_IBRS_ENTRY = no;
MITIGATION_CALL_DEPTH_TRACKING = no;
}
);
}
{
name = "audio";
structuredExtraConfig = (
with lib.kernel;
{
SND_SEQ_DEVICE = no;
SND_SEQUENCER = no;
SND_SEQ_DUMMY = no;
SND_HRTIMER = no;
}
);
}
{
name = "network";
structuredExtraConfig = (
with lib.kernel;
{
# VLAN_8021Q = no;
}
);
}
];
};
# nixpkgs.config.permittedInsecurePackages = [
# "olm-3.2.16"