# Contrats après olddefconfig. Format exact, une contrainte par ligne.
# = CONFIG_NOM=valeur          valeur finale obligatoire
# = # CONFIG_NOM is not set    symbole présent et éteint
# ! CONFIG_NOM                 interdit toute ligne CONFIG_NOM=... ; absence/commentaire acceptés
# Un écart non listé dans un fichier accepté identique arrête le script au code 3.

= CONFIG_64BIT=y
= CONFIG_SMP=y
= CONFIG_GENERIC_CPU=y
= CONFIG_NR_CPUS=512
! CONFIG_MAXSMP
= CONFIG_KERNEL_GZIP=y
= CONFIG_MODULES=y
= CONFIG_MODULE_COMPRESS=y
= CONFIG_MODULE_COMPRESS_XZ=y
= CONFIG_MODULE_COMPRESS_ALL=y
= # CONFIG_MODULE_COMPRESS_GZIP is not set
= CONFIG_RD_GZIP=y
= CONFIG_RD_XZ=y
= CONFIG_EXT4_FS=y
= CONFIG_XFS_FS=y
= CONFIG_BLK_DEV_NVME=y
= CONFIG_SATA_AHCI=y
= CONFIG_MD=y
= CONFIG_BLK_DEV_MD=m
= CONFIG_MD_RAID0=m
= CONFIG_MD_RAID1=m
= CONFIG_MD_RAID10=m
= CONFIG_MD_RAID456=m
= CONFIG_ICE=m
= CONFIG_IGB=m
= CONFIG_IXGBE=m
= CONFIG_E1000E=m
= CONFIG_CGROUPS=y
= CONFIG_MEMCG=y
= CONFIG_MEMCG_V1=y
= CONFIG_CPUSETS_V1=y
= CONFIG_IP_NF_IPTABLES=m
= CONFIG_IP_NF_FILTER=m
= CONFIG_NFT_COMPAT=m
= CONFIG_VIRTIO_PCI=y
= CONFIG_VIRTIO_BLK=y
= CONFIG_CPU_MITIGATIONS=y
= CONFIG_MITIGATION_RETPOLINE=y
= CONFIG_MITIGATION_RETHUNK=y
= CONFIG_MITIGATION_SLS=y
= CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y
= CONFIG_RANDOMIZE_BASE=y
= CONFIG_STACKPROTECTOR=y
= CONFIG_STACKPROTECTOR_STRONG=y
= CONFIG_FORTIFY_SOURCE=y
= CONFIG_INIT_STACK_ALL_ZERO=y
! CONFIG_MODULE_SIG
= CONFIG_EXTRA_FIRMWARE=""

! CONFIG_KERNEL_ZSTD
! CONFIG_MODULE_COMPRESS_ZSTD
! CONFIG_RD_ZSTD
! CONFIG_MODULE_SIG_FORCE
! CONFIG_X86_KERNEL_IBT
! CONFIG_DEBUG_INFO_BTF
! CONFIG_GCC_PLUGINS
! CONFIG_SECURITY_LOCKDOWN_LSM

= CONFIG_SECURITY_PERF_EVENTS_RESTRICT=y
= CONFIG_SECURITY_APPARMOR=y
= CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y
= CONFIG_IOMMU_DEFAULT_DMA_STRICT=y
= CONFIG_NETFILTER_XTABLES_COMPAT=y

= CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL=y
= CONFIG_SQUASHFS_COMPILE_DECOMP_SINGLE=y

# Contraintes Buster : migration critique, policy kexec historique, ext4 intégré.
= CONFIG_FS_ENCRYPTION=y
= CONFIG_KEXEC_FILE=y
= CONFIG_KEXEC_SIG=y
= CONFIG_SIGNED_PE_FILE_VERIFICATION=y
= CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y
= CONFIG_KEXEC_SIG_FORCE=y
= CONFIG_FS_ENCRYPTION_ALGS=y
! CONFIG_RUST
! CONFIG_BUILTIN_MODULE_RANGES

# Migration Buster0550 : type, capacités historiques et alignement heap-zero/obsolete.
= # CONFIG_BASE_SMALL is not set
= CONFIG_HSA_AMD=y
= CONFIG_VIDEO_ZORAN_ZR36060=y
= CONFIG_VIDEO_ZORAN_DC30=y
= CONFIG_VIDEO_ZORAN_BUZ=y
= CONFIG_VIDEO_ZORAN_DC10=y
= CONFIG_VIDEO_ZORAN_LML33=y
= CONFIG_VIDEO_ZORAN_LML33R10=y
= CONFIG_VIDEO_ZORAN_AVS6EYES=y
= CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
= # CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE is not set
= CONFIG_DRM_AMDGPU=m
= CONFIG_VIDEO_ZORAN=m
= CONFIG_CRYPTO_USER_API_HASH=m
= CONFIG_CRYPTO_USER_API_SKCIPHER=m
= CONFIG_CRYPTO_USER_API_RNG=m
= CONFIG_CRYPTO_USER_API_AEAD=m

# Contrats NAND après résolution, sans forcer le symbole ECC caché dans le fragment.
= CONFIG_MTD=m
= CONFIG_MTD_RAW_NAND=m
= CONFIG_MTD_NAND_ECC=y
= CONFIG_MTD_NAND_ECC_SW_HAMMING=y
= CONFIG_MTD_NAND_ECC_SW_BCH=y
= # CONFIG_MTD_NAND_ECC_SW_HAMMING_SMC is not set

# Compatibilité Buster0635, à vérifier après résolution séparément autorisée.
= CONFIG_INTEGRITY_PLATFORM_KEYRING=y
= CONFIG_NFSD_V2=y
= CONFIG_NFSD_V2_ACL=y
= # CONFIG_SQUASHFS_COMPILE_DECOMP_MULTI_PERCPU is not set
= # CONFIG_SQUASHFS_COMPILE_DECOMP_MULTI is not set
= CONFIG_RD_BZIP2=y
= CONFIG_RD_LZMA=y
= CONFIG_RD_LZO=y
= CONFIG_RD_LZ4=y
= CONFIG_ACPI_DPTF=y
= CONFIG_DPTF_POWER=m
= # CONFIG_DPTF_PCH_FIVR is not set
= CONFIG_DECOMPRESS_BZIP2=y
= CONFIG_DECOMPRESS_LZMA=y
= CONFIG_DECOMPRESS_LZO=y
= CONFIG_DECOMPRESS_LZ4=y
= CONFIG_SQUASHFS_DECOMP_SINGLE=y
! CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU
! CONFIG_SQUASHFS_DECOMP_MULTI
= CONFIG_EFI=y
= CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
= CONFIG_SYSTEM_BLACKLIST_KEYRING=y
= CONFIG_SYSTEM_TRUSTED_KEYRING=y
= CONFIG_SYSTEM_TRUSTED_KEYS=""
! CONFIG_INTEGRITY_MACHINE_KEYRING
= CONFIG_NFSD=m
= CONFIG_NFSD_V3_ACL=y
= CONFIG_NFSD_V4=y
= CONFIG_BRIDGE=m
= CONFIG_NF_TABLES=m
