miku: Disable mitigations

2022-08-05 21:17:22 +02:00 · 2022-08-05 21:17:22 +02:00 · 885fb6feae
commit 885fb6feae
parent 5de5e206d2
1 changed files with 7 additions and 3 deletions
--- a/hosts/miku.nix
+++ b/hosts/miku.nix
@ -149,14 +149,18 @@
      "kvm.report_ignored_msrs=N"
      "fbcon=rotate:3"
      "quiet"
-      "nopti"
-      "nospectre_v2"
-      "nospec"
      "clocksource=tsc"
 	    "tsc=reliable"
      "pci=noaer"
+      # Disable mitigations
+      "mitigations=off"
+      "rhgb"
+      # Enable ZSwap
+      "zswap.enabled=1"
      # Enable Apparmor
      "lsm=landlock,lockdown,yama,integrity,apparmor,bpf"
+      # Prevent sequential probing
+      "libahci.ignore_sss=1"
    ];
    kernel.sysctl = {
      # League of Legends under Linux