On 08/07/2025 16:06, Weber (US), Matthew L wrote:
Hi Ayan,
Hi Matthew,
I didn’t get a chance to ask in the FuSA call today about build time
configurations. Is there a configuration that’s been “ifdef” on the
original codebase to put it into a certification configuration?
Wasn’t sure if there is a working/staging branch separate from the
main project repository with these sort of changes.
I will provide you the configuration which we are using for arm64 and
x86. It is mostly based of the upstream codebase. There are few features
like domain roles, hyperlaunch, etc which we are trying to flush out.
Thus, this is not the final configuration, but should be good enough to
get you started.
Hope this helps.
Brian and I are working on some reference configurations of Linux
and/or Xen for the ELISA project and wanted to narrow the build focus
on the FuSa configuration.
Cool.
- Ayan
Best Regards,
—
*Matthew L. Weber*
Associate Technical Fellow / ELISA Aerospace WG Chair
LinkedIn <https://www.linkedin.com/in/matthew-weber-a171527/>| GitHub
<https://github.com/matthew-l-weber>| GitLab
<https://gitlab.com/matthewlweber>| LXF Open Profile
<https://openprofile.dev/profile/matthew.l.weber>
#
# Automatically generated file; DO NOT EDIT.
# Xen/x86 4.20.0-rc5 Configuration
#
CONFIG_CC_IS_GCC=y
CONFIG_GCC_VERSION=120201
CONFIG_CLANG_VERSION=0
CONFIG_LD_IS_GNU=y
CONFIG_CC_HAS_VISIBILITY_ATTRIBUTE=y
CONFIG_FUNCTION_ALIGNMENT_16B=y
CONFIG_FUNCTION_ALIGNMENT=16
CONFIG_X86_64=y
CONFIG_X86=y
CONFIG_ARCH_DEFCONFIG="arch/x86/configs/x86_64_defconfig"
CONFIG_CC_HAS_INDIRECT_THUNK=y
CONFIG_HAS_AS_CET_SS=y
CONFIG_HAS_CC_CET_IBT=y
#
# Architecture Features
#
#
# Supported CPU vendors
#
CONFIG_AMD=y
# CONFIG_INTEL is not set
# end of Supported CPU vendors
CONFIG_64BIT=y
CONFIG_NR_CPUS=16
CONFIG_NR_NUMA_NODES=2
# CONFIG_PV is not set
CONFIG_HVM=y
CONFIG_AMD_SVM=y
CONFIG_INTEL_VMX=y
CONFIG_XEN_SHSTK=y
# CONFIG_XEN_IBT is not set
# CONFIG_SHADOW_PAGING is not set
# CONFIG_BIGMEM is not set
# CONFIG_HVM_FEP is not set
# CONFIG_X86_PSR is not set
CONFIG_XEN_ALIGN_DEFAULT=y
# CONFIG_XEN_ALIGN_2M is not set
# CONFIG_X2APIC_PHYSICAL is not set
CONFIG_X2APIC_MIXED=y
# CONFIG_XEN_GUEST is not set
# CONFIG_HYPERV_GUEST is not set
# CONFIG_MEM_PAGING is not set
# CONFIG_MEM_SHARING is not set
# CONFIG_REQUIRE_NX is not set
CONFIG_ALTP2M=y
# end of Architecture Features
#
# Common Features
#
CONFIG_COMPAT=y
CONFIG_CORE_PARKING=y
CONFIG_GRANT_TABLE=y
CONFIG_ALTERNATIVE_CALL=y
CONFIG_ARCH_MAP_DOMAIN_PAGE=y
CONFIG_GENERIC_BUG_FRAME=y
CONFIG_HAS_ALTERNATIVE=y
CONFIG_HAS_COMPAT=y
CONFIG_HAS_DIT=y
CONFIG_HAS_EX_TABLE=y
CONFIG_HAS_FAST_MULTIPLY=y
CONFIG_HAS_IOPORTS=y
CONFIG_HAS_KEXEC=y
CONFIG_HAS_PIRQ=y
CONFIG_HAS_SCHED_GRANULARITY=y
CONFIG_HAS_UBSAN=y
CONFIG_HAS_VMAP=y
CONFIG_MEM_ACCESS_ALWAYS_ON=y
CONFIG_MEM_ACCESS=y
CONFIG_NEEDS_LIBELF=y
CONFIG_NUMA=y
#
# Speculative hardening
#
CONFIG_INDIRECT_THUNK=y
CONFIG_SPECULATIVE_HARDEN_ARRAY=y
CONFIG_SPECULATIVE_HARDEN_BRANCH=y
CONFIG_SPECULATIVE_HARDEN_LOCK=y
# end of Speculative hardening
# CONFIG_DIT_DEFAULT is not set
# CONFIG_HYPFS is not set
CONFIG_IOREQ_SERVER=y
# CONFIG_KEXEC is not set
# CONFIG_EFI_SET_VIRTUAL_ADDRESS_MAP is not set
# CONFIG_XENOPROF is not set
# CONFIG_XSM is not set
CONFIG_ARGO=y
#
# Schedulers
#
# CONFIG_SCHED_CREDIT is not set
CONFIG_SCHED_CREDIT2=y
# CONFIG_SCHED_RTDS is not set
# CONFIG_SCHED_ARINC653 is not set
CONFIG_SCHED_NULL=y
CONFIG_SCHED_CREDIT2_DEFAULT=y
# CONFIG_SCHED_NULL_DEFAULT is not set
CONFIG_SCHED_DEFAULT="credit2"
# end of Schedulers
# CONFIG_LIVEPATCH is not set
# CONFIG_ENFORCE_UNIQUE_SYMBOLS is not set
# CONFIG_SUPPRESS_DUPLICATE_SYMBOL_WARNINGS is not set
CONFIG_CMDLINE=""
CONFIG_DOM0_MEM=""
# CONFIG_TRACEBUFFER is not set
# end of Common Features
#
# Device Drivers
#
CONFIG_ACPI=y
CONFIG_ACPI_LEGACY_TABLES_LOOKUP=y
CONFIG_ACPI_NUMA=y
CONFIG_HAS_NS16550=y
CONFIG_HAS_EHCI=y
CONFIG_SERIAL_TX_BUFSIZE=32768
# CONFIG_XHCI is not set
CONFIG_HAS_CPUFREQ=y
CONFIG_HAS_PASSTHROUGH=y
CONFIG_AMD_IOMMU=y
# CONFIG_INTEL_IOMMU is not set
# CONFIG_IOMMU_QUARANTINE_NONE is not set
CONFIG_IOMMU_QUARANTINE_BASIC=y
# CONFIG_IOMMU_QUARANTINE_SCRATCH_PAGE is not set
CONFIG_HAS_PCI=y
CONFIG_HAS_PCI_MSI=y
CONFIG_VIDEO=y
CONFIG_VGA=y
CONFIG_HAS_VPCI=y
# end of Device Drivers
CONFIG_EXPERT=y
CONFIG_UNSUPPORTED=y
CONFIG_ARCH_SUPPORTS_INT128=y
CONFIG_ARCH_VCPU_IOREQ_COMPLETION=y
#
# Debugging Options
#
CONFIG_DEBUG=y
# CONFIG_GDBSX is not set
# CONFIG_FRAME_POINTER is not set
# CONFIG_SELF_TESTS is not set
# CONFIG_COVERAGE is not set
# CONFIG_DEBUG_LOCK_PROFILE is not set
# CONFIG_DEBUG_LOCKS is not set
# CONFIG_PERF_COUNTERS is not set
CONFIG_VERBOSE_DEBUG=y
# CONFIG_SCRUB_DEBUG is not set
CONFIG_UBSAN=y
CONFIG_UBSAN_FATAL=y
# CONFIG_DEBUG_TRACE is not set
# CONFIG_XMEM_POOL_POISON is not set
CONFIG_DEBUG_INFO=y
# end of Debugging Options
#
# Automatically generated file; DO NOT EDIT.
# Xen/arm 4.20.0-rc5 Configuration
#
CONFIG_CC_IS_GCC=y
CONFIG_GCC_VERSION=140200
CONFIG_CLANG_VERSION=0
CONFIG_LD_IS_GNU=y
CONFIG_CC_HAS_VISIBILITY_ATTRIBUTE=y
CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
CONFIG_CC_HAS_MCDC=y
CONFIG_FUNCTION_ALIGNMENT_4B=y
CONFIG_FUNCTION_ALIGNMENT=4
CONFIG_ARM_64=y
CONFIG_ARM=y
CONFIG_ARCH_DEFCONFIG="arch/arm/configs/arm64_defconfig"
#
# Architecture Features
#
CONFIG_PADDR_BITS=48
CONFIG_MMU=y
# CONFIG_MPU is not set
CONFIG_64BIT=y
CONFIG_NR_CPUS=16
# CONFIG_ACPI is not set
CONFIG_ARM_EFI=y
# CONFIG_GICV2 is not set
CONFIG_DOM0LESS_BOOT=y
CONFIG_GICV3=y
CONFIG_HAS_ITS=y
# CONFIG_OVERLAY_DTB is not set
# CONFIG_VGICV2 is not set
CONFIG_HVM=y
# CONFIG_NEW_VGIC is not set
CONFIG_SBSA_VUART_CONSOLE=y
# CONFIG_HWDOM_VUART is not set
CONFIG_ARM_SSBD=y
CONFIG_HARDEN_BRANCH_PREDICTOR=y
# CONFIG_ARM64_SVE is not set
#
# TEE mediators
#
# CONFIG_OPTEE is not set
# CONFIG_FFA is not set
# end of TEE mediators
CONFIG_STATIC_SHM=y
CONFIG_STATIC_EVTCHN=y
CONFIG_PARTIAL_EMULATION=y
#
# Firmware Drivers
#
CONFIG_SCMI_SMC=y
# end of Firmware Drivers
CONFIG_PCI_PASSTHROUGH=y
# end of Architecture Features
#
# ARM errata workaround via the alternative framework
#
CONFIG_ARM64_ERRATUM_827319=y
CONFIG_ARM64_ERRATUM_824069=y
CONFIG_ARM64_ERRATUM_819472=y
CONFIG_ARM64_ERRATUM_843419=y
CONFIG_ARM64_ERRATUM_832075=y
CONFIG_ARM64_ERRATUM_834220=y
CONFIG_ARM_ERRATUM_858921=y
CONFIG_ARM64_WORKAROUND_REPEAT_TLBI=y
CONFIG_ARM64_ERRATUM_1286807=y
CONFIG_ARM64_ERRATUM_1508412=y
# end of ARM errata workaround via the alternative framework
CONFIG_ARM64_HARDEN_BRANCH_PREDICTOR=y
CONFIG_ALL_PLAT=y
# CONFIG_QEMU is not set
# CONFIG_RCAR3 is not set
# CONFIG_MPSOC is not set
# CONFIG_S32G3 is not set
# CONFIG_NO_PLAT is not set
CONFIG_ALL64_PLAT=y
CONFIG_MPSOC_PLATFORM=y
#
# Common Features
#
CONFIG_GRANT_TABLE=y
CONFIG_PDX_COMPRESSION=y
CONFIG_HAS_ALTERNATIVE=y
CONFIG_HAS_DEVICE_TREE=y
CONFIG_HAS_FAST_MULTIPLY=y
CONFIG_HAS_LLC_COLORING=y
CONFIG_HAS_PMAP=y
CONFIG_HAS_UBSAN=y
CONFIG_HAS_VMAP=y
# CONFIG_MEM_ACCESS is not set
CONFIG_STATIC_MEMORY=y
#
# Speculative hardening
#
CONFIG_SPECULATIVE_HARDEN_ARRAY=y
# end of Speculative hardening
# CONFIG_HYPFS is not set
CONFIG_IOREQ_SERVER=y
# CONFIG_EFI_SET_VIRTUAL_ADDRESS_MAP is not set
# CONFIG_XSM is not set
CONFIG_ARGO=y
#
# Schedulers
#
# CONFIG_SCHED_CREDIT is not set
CONFIG_SCHED_CREDIT2=y
# CONFIG_SCHED_RTDS is not set
# CONFIG_SCHED_ARINC653 is not set
CONFIG_SCHED_NULL=y
CONFIG_SCHED_CREDIT2_DEFAULT=y
# CONFIG_SCHED_NULL_DEFAULT is not set
CONFIG_SCHED_DEFAULT="credit2"
# end of Schedulers
CONFIG_BOOT_TIME_CPUPOOLS=y
# CONFIG_LIVEPATCH is not set
# CONFIG_ENFORCE_UNIQUE_SYMBOLS is not set
CONFIG_SUPPRESS_DUPLICATE_SYMBOL_WARNINGS=y
CONFIG_CMDLINE=""
CONFIG_DOM0_MEM=""
CONFIG_DTB_FILE=""
# CONFIG_TRACEBUFFER is not set
# CONFIG_LLC_COLORING is not set
# end of Common Features
#
# Device Drivers
#
CONFIG_GENERIC_UART_INIT=y
# CONFIG_HAS_NS16550 is not set
# CONFIG_HAS_CADENCE_UART is not set
# CONFIG_HAS_LINFLEX is not set
# CONFIG_HAS_IMX_LPUART is not set
# CONFIG_HAS_MVEBU is not set
# CONFIG_HAS_MESON is not set
CONFIG_HAS_PL011=y
# CONFIG_HAS_OMAP is not set
# CONFIG_HAS_SCIF is not set
CONFIG_SERIAL_TX_BUFSIZE=32768
CONFIG_HAS_PASSTHROUGH=y
# CONFIG_ARM_SMMU is not set
CONFIG_ARM_SMMU_V3=y
# CONFIG_IPMMU_VMSA is not set
CONFIG_IOMMU_FORCE_PT_SHARE=y
# CONFIG_IOMMU_QUARANTINE_NONE is not set
CONFIG_IOMMU_QUARANTINE_BASIC=y
# CONFIG_IOMMU_QUARANTINE_SCRATCH_PAGE is not set
CONFIG_HAS_PCI=y
CONFIG_HAS_PCI_MSI=y
CONFIG_HAS_VPCI=y
CONFIG_HAS_VPCI_GUEST_SUPPORT=y
# end of Device Drivers
CONFIG_EXPERT=y
CONFIG_UNSUPPORTED=y
#
# Debugging Options
#
CONFIG_DEBUG=y
# CONFIG_FRAME_POINTER is not set
# CONFIG_SELF_TESTS is not set
CONFIG_COVERAGE=y
CONFIG_CONDITION_COVERAGE=y
# CONFIG_DEBUG_LOCK_PROFILE is not set
# CONFIG_DEBUG_LOCKS is not set
# CONFIG_PERF_COUNTERS is not set
CONFIG_VERBOSE_DEBUG=y
# CONFIG_DEVICE_TREE_DEBUG is not set
# CONFIG_SCRUB_DEBUG is not set
# CONFIG_UBSAN is not set
# CONFIG_DEBUG_TRACE is not set
# CONFIG_XMEM_POOL_POISON is not set
# CONFIG_PCI_DEVICE_DEBUG is not set
CONFIG_DEBUG_INFO=y
# end of Debugging Options
