# Contrats après olddefconfig. Format exact, une contrainte par ligne.
# = CONFIG_NOM=valeur          valeur finale obligatoire
# = # CONFIG_NOM is not set    symbole présent et éteint
# ! CONFIG_NOM                 interdit toute ligne CONFIG_NOM=... ; absence/commentaire acceptés
# Un écart non listé dans un fichier accepté identique arrête le script au code 3.

= CONFIG_64BIT=y
= CONFIG_SMP=y
= CONFIG_GENERIC_CPU=y
= CONFIG_NR_CPUS=512
! CONFIG_MAXSMP
= CONFIG_KERNEL_GZIP=y
= CONFIG_MODULES=y
= CONFIG_MODULE_COMPRESS=y
= CONFIG_MODULE_COMPRESS_XZ=y
= CONFIG_MODULE_COMPRESS_ALL=y
= # CONFIG_MODULE_COMPRESS_GZIP is not set
= CONFIG_RD_GZIP=y
= CONFIG_RD_XZ=y
= CONFIG_EXT4_FS=y
= CONFIG_XFS_FS=y
= CONFIG_BLK_DEV_NVME=y
= CONFIG_SATA_AHCI=y
= CONFIG_MD=y
= CONFIG_BLK_DEV_MD=m
= CONFIG_MD_RAID0=m
= CONFIG_MD_RAID1=m
= CONFIG_MD_RAID10=m
= CONFIG_MD_RAID456=m
= CONFIG_ICE=m
= CONFIG_IGB=m
= CONFIG_IXGBE=m
= CONFIG_E1000E=m
= CONFIG_CGROUPS=y
= CONFIG_MEMCG=y
= CONFIG_MEMCG_V1=y
= CONFIG_CPUSETS_V1=y
= CONFIG_IP_NF_IPTABLES=m
= CONFIG_IP_NF_FILTER=m
= CONFIG_NFT_COMPAT=m
= CONFIG_VIRTIO_PCI=y
= CONFIG_VIRTIO_BLK=y
= CONFIG_CPU_MITIGATIONS=y
= CONFIG_MITIGATION_RETPOLINE=y
= CONFIG_MITIGATION_RETHUNK=y
= CONFIG_MITIGATION_SLS=y
= CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y
= CONFIG_RANDOMIZE_BASE=y
= CONFIG_STACKPROTECTOR=y
= CONFIG_STACKPROTECTOR_STRONG=y
= CONFIG_FORTIFY_SOURCE=y
= CONFIG_INIT_STACK_ALL_ZERO=y
! CONFIG_MODULE_SIG
= CONFIG_EXTRA_FIRMWARE=""

! CONFIG_KERNEL_ZSTD
! CONFIG_MODULE_COMPRESS_ZSTD
! CONFIG_RD_ZSTD
! CONFIG_MODULE_SIG_FORCE
! CONFIG_X86_KERNEL_IBT
! CONFIG_DEBUG_INFO_BTF
! CONFIG_GCC_PLUGINS
! CONFIG_SECURITY_LOCKDOWN_LSM

= CONFIG_SECURITY_PERF_EVENTS_RESTRICT=y
= CONFIG_SECURITY_APPARMOR=y
= CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y
= CONFIG_IOMMU_DEFAULT_DMA_STRICT=y
= CONFIG_NETFILTER_XTABLES_COMPAT=y

= CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL=y
= CONFIG_SQUASHFS_COMPILE_DECOMP_MULTI_PERCPU=y
