Files
Deshab-OS/SYSTEM/system/deshab64/FUCK
T
Linehu 87d532df01 feat: SAS-R0 boot-time capability attestation - unimplemented feature blocks boot
- attest.c: subsystems report readiness, attest_check() before DSK handoff

- FUCK [attest] require_<name>=1 (default) + not-ready -> lotus panic with feature errcode

- wired: sealed_mem/pckc/sched/drr/fs_fat32_rw/net_wired + placeholders (pkg/brand/dkm/nvme/virtio/wlan/vmx/drr_real_mac)

- negative test: require_pkg=1 -> boot-time PKG-E10 panic (verified); dev/release FUCK whitelist = STATUS.md undone items

- CLAUDE.md whitelist rule updated
2026-10-04 21:34:50 +08:00

136 lines
2.4 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Deshab Kernel Configuration — dev 变体(build/configs/dev/FUCK)
# build.ps1 -Variant dev 打包前注入 SYSTEM/system/deshab64/FUCK
# 开发者模式:selftest 开、dev_mode 自动跑 shell.elf 测试、日志持久化、跳过向导直达桌面
[boot]
vmm=1
linux_guest=1
xj380_guest=0
# F4: 分级自检 0=关 1=快速 2=全量(含 UTSM selftest;RFC 8439 KAT 已确定性对拍通过)
selftest=1
# F1 验证钩子: 1=启动自检后触发莲花崩溃屏(演示/回归用,日常保持 0)
panic_test=0
dev_mode=0
la57_guard=0
mcfg_check=0
max_phys_addr_bits=0
disk_log=1
[drivers]
timer=1
apic=1
acpi=1
pci=1
console_fb=1
ahci=1
nvme=1
ehci=1
xhci=1
bootfs=1
vfs=1
fat32=1
devfs=1
e1000=1
virtio_net=1
ath9k=0
ps2kbd=1
ioapic_init=1
lapic_enable=1
apic_route=1
apic_route_legacy=1
nvme_msi=1
apic_diag=0
[utsm]
max_segments=1024
max_capabilities=256
max_pckc_keys=8
dirty_shard_pages=1024
arena_size_mb=64
drr_emergency_pool_kb=64
drr_recovery_log_size=4096
drr_heartbeat_interval=0
[sched]
enable=1
tick_hz=100
timeslice_ms=10
demo_ms=1000
demo_fault=0
[drr]
watchdog_enabled=1
# === SAS-R0 启动期能力证明(attest) ===
# require_<name>=1(默认)而能力未就绪 → 启动即莲花屏 panic。
# require_<name>=0 是设计内白名单:仅限"该构建环境不可能具备"或
# "该能力尚未实现且已登记 STATUS.md ⬜/🔶"的项,须在 CLAUDE.md §3 说明。
[attest]
require_sealed_mem=1
require_pckc_derive=1
require_sched=1
require_drr=1
require_fs_fat32_rw=1
require_fs_ext4_rw=1
require_net_wired=1
# QEMU 无 wlan 硬件(ath9k=0),wlan 栈未实现(NET-E01)
require_net_wlan=0
# WHPX/TCG 无嵌套 VMX,QEMU 必无
require_vmm_vmx=0
# DRR 真 MAC = Phase 9(当前 CRC64 占位,DRR-E31)
require_drr_real_mac=0
# 以下为设计已定未实现(STATUS.md ⬜),实现后翻转 require=1
require_pkg=0
require_brand_anim=0
require_dkm_hot_unload=0
require_dkm_api_export=0
require_nvme_rw=0
require_virtio_net=0
[dsk]
show_logo=1
skip_login=0
# F5: dev 也走完整流程(Logo→向导→登录→桌面);skip_firstinit=1 可直达桌面
skip_firstinit=0
mouse_init=1
netman=1
session=native
[debug]
enabled=1
log_level=1
probe_enable=1
probe_capacity=4096
stat_summary_interval=256
utsm_trace=1
vmm_trace=1
dkm_trace=1
dsk_trace=1
block_trace=1
net_trace=0
input_trace=1
color_log=1
[compat]
lib_path=lib
linux_lib_guest_path=/usr/lib/deshab
linux_lib_sync=1
pe_dll_search=1