|
|
@@ -369,18 +369,32 @@ jobs:
|
|
|
|
|
|
cd "$GITHUB_WORKSPACE"
|
|
|
cat >> "$DEFCONFIG" <<EOF
|
|
|
+ # IPC
|
|
|
CONFIG_SYSVIPC=y
|
|
|
- CONFIG_DEVTMPFS=y
|
|
|
- CONFIG_PID_NS=y
|
|
|
CONFIG_POSIX_MQUEUE=y
|
|
|
- CONFIG_CGROUPS=y
|
|
|
- CONFIG_CGROUP_DEVICE=y
|
|
|
- CONFIG_CGROUP_PIDS=y
|
|
|
- CONFIG_MEMCG=y
|
|
|
- CONFIG_CGROUP_SCHED=y
|
|
|
- CONFIG_FAIR_GROUP_SCHED=y
|
|
|
- CONFIG_CGROUP_FREEZER=y
|
|
|
- CONFIG_CGROUP_NET_PRIO=y
|
|
|
+
|
|
|
+ # Namespaces
|
|
|
+ CONFIG_IPC_NC=y
|
|
|
+ CONFIG_PID_NS=y
|
|
|
+
|
|
|
+ # HW Access Support
|
|
|
+ CONFIG_DEVTMPFS=y
|
|
|
+
|
|
|
+ # Below configs are optional
|
|
|
+
|
|
|
+ # Docker NAT
|
|
|
+ CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
|
|
|
+
|
|
|
+ # UFW
|
|
|
+ CONFIG_NETFILTER_XT_TARGET_REJECT=y
|
|
|
+ CONFIG_NETFILTER_XT_TARGET_LOG=y
|
|
|
+ CONFIG_NETFILTER_XT_MATCH_RECENT
|
|
|
+
|
|
|
+ # Fail2Ban
|
|
|
+ CONFIG_IP_SET=y
|
|
|
+ CONFIG_IP_SET_HASH_IP=y
|
|
|
+ CONFIG_IP_SET_HASH_NET=y
|
|
|
+ CONFIG_NETFILTER_XT_SET=y
|
|
|
EOF
|
|
|
|
|
|
- name: Set Kernel Configuration Variables
|