瀏覽代碼

Modify kernel config in build workflow

Updated kernel configuration settings in build.yml to include additional IPC, namespace, and hardware access support options, while removing some existing configurations.
jimsterino98 5 月之前
父節點
當前提交
b141ed28ed
共有 1 個文件被更改,包括 24 次插入10 次删除
  1. 24 10
      .github/workflows/build.yml

+ 24 - 10
.github/workflows/build.yml

@@ -369,18 +369,32 @@ jobs:
 
           cd "$GITHUB_WORKSPACE"
           cat >> "$DEFCONFIG" <<EOF
+          # IPC
           CONFIG_SYSVIPC=y
-          CONFIG_DEVTMPFS=y
-          CONFIG_PID_NS=y
           CONFIG_POSIX_MQUEUE=y
-          CONFIG_CGROUPS=y
-          CONFIG_CGROUP_DEVICE=y
-          CONFIG_CGROUP_PIDS=y
-          CONFIG_MEMCG=y
-          CONFIG_CGROUP_SCHED=y
-          CONFIG_FAIR_GROUP_SCHED=y
-          CONFIG_CGROUP_FREEZER=y
-          CONFIG_CGROUP_NET_PRIO=y
+
+          # Namespaces
+          CONFIG_IPC_NC=y
+          CONFIG_PID_NS=y
+
+          # HW Access Support
+          CONFIG_DEVTMPFS=y
+
+          # Below configs are optional
+
+          # Docker NAT
+          CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
+
+          # UFW
+          CONFIG_NETFILTER_XT_TARGET_REJECT=y
+          CONFIG_NETFILTER_XT_TARGET_LOG=y
+          CONFIG_NETFILTER_XT_MATCH_RECENT
+
+          # Fail2Ban
+          CONFIG_IP_SET=y
+          CONFIG_IP_SET_HASH_IP=y
+          CONFIG_IP_SET_HASH_NET=y
+          CONFIG_NETFILTER_XT_SET=y
           EOF
           
       - name: Set Kernel Configuration Variables