kspp

Documentation

Index

• Variables
• func EnforceKSPPKernelParameters() error
• func EnforceKSPPSysctls() (err error)

Variables

var (
	// RequiredKSPPKernelParameters is the set of kernel parameters required to
	// satisfy the KSPP.
	// # TODO(andrewrynhard): Add slub_debug=P. See https://github.com/talos-systems/talos/pull/157.
	RequiredKSPPKernelParameters = kernel.Parameters{
		kernel.NewParameter("page_poison").Append("1"),
		kernel.NewParameter("slab_nomerge").Append(""),
		kernel.NewParameter("pti").Append("on"),
	}
)

Functions

func EnforceKSPPKernelParameters

func EnforceKSPPKernelParameters() error

EnforceKSPPKernelParameters verifies that all required KSPP kernel parameters are present with the right value.

func EnforceKSPPSysctls

func EnforceKSPPSysctls() (err error)

EnforceKSPPSysctls verifies that all required KSPP kernel sysctls are set with the right value.