aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

Clean up & revise hardware-configuration comments

Browse source
This commit is contained in:
Henrik Lissner 2021-02-21 10:30:01 -05:00
parent a0b65fdb9a
commit b8e4813f09
2 changed files with 8 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
hosts/kuro/hardware-configuration.nix
View file

@ -10,9 +10,8 @@
kernelModules = [ "kvm-amd" ]; kernelModules = [ "kvm-amd" ];
kernelParams = [ kernelParams = [
# HACK Disables fixes for spectre, meltdown, L1TF and a number of CPU # HACK Disables fixes for spectre, meltdown, L1TF and a number of CPU
# vulnerabilities. This is not a good idea for mission critical or # vulnerabilities. Don't copy this blindly! And especially not for
# server/headless builds, but on my lonely home system I prioritize # mission critical or server/headless builds exposed to the world.
# raw performance over security. The gains are minor.
"mitigations=off" "mitigations=off"
]; ];
}; };

12
hosts/shiro/hardware-configuration.nix
View file

@ -1,6 +1,3 @@
# Do not modify this file! It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, inputs, modulesPath, ... }: { config, lib, pkgs, inputs, modulesPath, ... }:
{ {
@ -14,11 +11,12 @@
initrd.kernelModules = [ "dm-snapshot" ]; initrd.kernelModules = [ "dm-snapshot" ];
kernelModules = [ "kvm-intel" ]; kernelModules = [ "kvm-intel" ];
extraModulePackages = [ ]; extraModulePackages = [ ];
kernelParams = [
# HACK Disables fixes for spectre, meltdown, L1TF and a number of CPU # HACK Disables fixes for spectre, meltdown, L1TF and a number of CPU
# vulnerabilities. This is not a good idea for mission critical or # vulnerabilities. Don't copy this blindly! And especially not for
# server/headless builds, but Kuro isn't either. I'll prioritize raw # mission critical or server/headless builds exposed to the world.
# performance over security here, though the gains are minor. "mitigations=off"
kernelParams = [ "mitigations=off" ]; ];
}; };
# Modules # Modules