metal/devstack/files/platform.conf
Jim Somerville 91f488af02 Security: Handle nospectre_v1 in the bootargs
Most of the v1 mitigation is baked into the kernel and not
optional.  The swapgs barriers are, however, optional.
They have a negative performance impact so we disable them
by using the nospectre_v1 kernel bootarg.

Partial-Bug: 1860193
Depends-On: https://review.opendev.org/#/c/704406
Change-Id: Id11232fe113293ed04b2802aaf038e2eedf9d797
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
2020-01-28 18:21:13 -05:00

15 lines
395 B
Plaintext

nodetype=controller
subfunction=@SUBFUNCTION@
system_type=@SYS_TYPE@
security_profile=standard
INSTALL_UUID=b4c47f98-1fe6-4959-b031-e4a71a261526
management_interface=@MGMT_ETH@
UUID=1be42dc6-a072-4364-9b51-c8535ff16644
oam_interface=@OAM_ETH@
sdn_enabled=no
region_config=no
system_mode=@SYS_MODE@
sw_version=@SW_VERSION@
security_feature="nopti nospectre_v2 nospectre_v1"
vswitch_type=ovs-dpdk