Skip to content

Commit b0a4de5

Browse files
committed
chore: add kernel args that disable some security features
1 parent f65e42d commit b0a4de5

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed
Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
machine:
2+
install:
3+
extraKernelArgs:
4+
- apparmor=0 # Less security, faster puter
5+
- init_on_alloc=0 # Less security, faster puter
6+
- init_on_free=0 # Less security, faster puter
7+
- mitigations=off # Less security, faster puter
8+
- security=none # Less security, faster puter
9+
- talos.auditd.disabled=1 # Less security, faster puter

talos/talconfig.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -128,6 +128,7 @@ patches:
128128
- "@./patches/global/machine-time.yaml"
129129
- "@./patches/global/machine-features.yaml"
130130
- "@./patches/global/machine-openebs.yaml"
131+
- "@./patches/global/machine-install.yaml"
131132

132133
# Controller patches
133134
controlPlane:

0 commit comments

Comments
 (0)