From 1523be72a7a66963ee7ae391b926a7edf04ed732 Mon Sep 17 00:00:00 2001 From: Stoiko Ivanov Date: Fri, 18 Aug 2023 13:35:08 +0200 Subject: [PATCH] d/rules: disable CONFIG_GDS_FORCE_MITIGATION when not having installed an intel-microcode version containing the mitigation, this options disables AVX instructions, which breaks quite a lot of software (e.g. firefox, electron apps) Reported-by: Stefan Hanreich Tested-by: Stefan Hanreich Signed-off-by: Stoiko Ivanov --- debian/rules | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/rules b/debian/rules index 9a26a0b..dac31d4 100755 --- a/debian/rules +++ b/debian/rules @@ -98,7 +98,7 @@ PMX_CONFIG_OPTS= \ --set-str CONFIG_LSM lockdown,yama,integrity,apparmor \ -e CONFIG_PAGE_TABLE_ISOLATION \ -e CONFIG_ARCH_HAS_CPU_FINALIZE_INIT \ --e CONFIG_GDS_FORCE_MITIGATION +-d CONFIG_GDS_FORCE_MITIGATION debian/control: $(wildcard debian/*.in) sed -e 's/@@KVNAME@@/$(KVNAME)/g' < debian/proxmox-kernel.prerm.in > debian/$(PMX_KERNEL_PKG).prerm