|
21 | 21 | #
|
22 | 22 | ################################################################
|
23 | 23 |
|
24 |
| -# ignore not backward compatible ext fs options like metadata_csum |
25 | 24 | # Only protecting nonroot from root inside guest -> but anyone can be root inside guest
|
26 | 25 | # so disabling spectre/meltdown mitigations doesn't hurt security and gains performance
|
27 |
| -vm_linux_kernel_parameter="ext4.allow_unsupported=1 mitigations=off" |
| 26 | +vm_linux_kernel_parameter="mitigations=off" |
28 | 27 | # Make sure that dodgy kernels fail quickly and early
|
29 | 28 | vm_linux_always_append="oops=panic panic=1 quiet"
|
30 | 29 |
|
@@ -398,7 +397,7 @@ vm_img_mkfs() {
|
398 | 397 | esac
|
399 | 398 |
|
400 | 399 | # defaults for creating the filesystem
|
401 |
| - vm_img_mkfs_ext4_options='-O ^has_journal,^huge_file,^resize_inode,sparse_super' |
| 400 | + vm_img_mkfs_ext4_options='-O ^has_journal,^huge_file,^resize_inode,sparse_super,^metadata_csum' |
402 | 401 | vm_img_mkfs_ext4_extra='-E lazy_itable_init,discard'
|
403 | 402 | vm_img_mkfs_ext4="mkfs.ext4 -m 0 -q -F $vm_img_mkfs_ext4_options"
|
404 | 403 | vm_img_mkfs_ext3='mkfs.ext3 -m 0 -q -F'
|
@@ -662,7 +661,7 @@ vm_detect_2nd_stage() {
|
662 | 661 | # set date to build start on broken systems (now < build start)
|
663 | 662 | if test $(date '+%s') -lt $(date -r /.build/.date '+%s') ; then
|
664 | 663 | echo -n "WARNING: system has a broken clock, setting it to a newer time: "
|
665 |
| - date -s `cat /.build/.date` |
| 664 | + date -s $(</.build/.date) |
666 | 665 | fi
|
667 | 666 |
|
668 | 667 | # Enable Core dump generation
|
|
0 commit comments