From ea203ec8c903af78155602466c7f316c6444d8f6 Mon Sep 17 00:00:00 2001 From: Vadim Rutkovsky Date: Fri, 1 Nov 2019 16:26:24 +0100 Subject: [PATCH] templates: place /etc/pivot/kernel-args on masters/workers This would disable cgroupsv2 and Spectre mitigations --- templates/common/_base/files/etc-pivot-kernel-args.yaml | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 templates/common/_base/files/etc-pivot-kernel-args.yaml diff --git a/templates/common/_base/files/etc-pivot-kernel-args.yaml b/templates/common/_base/files/etc-pivot-kernel-args.yaml new file mode 100644 index 0000000000..9d59702eca --- /dev/null +++ b/templates/common/_base/files/etc-pivot-kernel-args.yaml @@ -0,0 +1,7 @@ +filesystem: "root" +mode: 0644 +path: "/etc/pivot/kernel-args" +contents: + inline: | + DELETE mitigations=auto,nosmt + ADD systemd.unified_cgroup_hierarchy=0