Linehu
87d532df01
- attest.c: subsystems report readiness, attest_check() before DSK handoff - FUCK [attest] require_<name>=1 (default) + not-ready -> lotus panic with feature errcode - wired: sealed_mem/pckc/sched/drr/fs_fat32_rw/net_wired + placeholders (pkg/brand/dkm/nvme/virtio/wlan/vmx/drr_real_mac) - negative test: require_pkg=1 -> boot-time PKG-E10 panic (verified); dev/release FUCK whitelist = STATUS.md undone items - CLAUDE.md whitelist rule updated
123 lines
2.1 KiB
Plaintext
123 lines
2.1 KiB
Plaintext
# Deshab Kernel Configuration — release 变体（build/configs/release/FUCK）
|
||
# build.ps1 -Variant release 打包前注入 SYSTEM/system/deshab64/FUCK
|
||
# 发布版：调试零开销、进登录+向导正常路径、真机安全选项
|
||
|
||
[boot]
|
||
vmm=0
|
||
linux_guest=0
|
||
xj380_guest=0
|
||
# F4: 分级自检（快速档，不含 UTSM selftest）
|
||
selftest=1
|
||
dev_mode=0
|
||
la57_guard=0
|
||
mcfg_check=0
|
||
max_phys_addr_bits=0
|
||
disk_log=0
|
||
|
||
[drivers]
|
||
timer=1
|
||
apic=1
|
||
acpi=1
|
||
pci=1
|
||
console_fb=1
|
||
ahci=1
|
||
nvme=1
|
||
ehci=1
|
||
xhci=1
|
||
bootfs=1
|
||
vfs=1
|
||
fat32=1
|
||
devfs=1
|
||
e1000=1
|
||
virtio_net=1
|
||
ath9k=0
|
||
ps2kbd=1
|
||
ioapic_init=1
|
||
lapic_enable=1
|
||
apic_route=1
|
||
apic_route_legacy=1
|
||
nvme_msi=1
|
||
apic_diag=0
|
||
|
||
[utsm]
|
||
max_segments=1024
|
||
max_capabilities=256
|
||
max_pckc_keys=8
|
||
dirty_shard_pages=1024
|
||
arena_size_mb=64
|
||
drr_emergency_pool_kb=64
|
||
drr_recovery_log_size=4096
|
||
drr_heartbeat_interval=0
|
||
|
||
[sched]
|
||
enable=1
|
||
tick_hz=100
|
||
timeslice_ms=10
|
||
demo_ms=0
|
||
demo_fault=0
|
||
|
||
[drr]
|
||
watchdog_enabled=1
|
||
|
||
# === SAS-R0 启动期能力证明（attest） ===
|
||
# require_<name>=1（默认）而能力未就绪 → 启动即莲花屏 panic。
|
||
# release 真机：未实现能力一律阻断启动（不豁免）——宁可启动即 panic。
|
||
# 当前仍需豁免的项 = STATUS.md ⬜/🔶 未落地项；实现后逐项删除豁免行。
|
||
[attest]
|
||
require_sealed_mem=1
|
||
require_pckc_derive=1
|
||
require_sched=1
|
||
require_drr=1
|
||
require_fs_fat32_rw=1
|
||
require_fs_ext4_rw=1
|
||
require_net_wired=1
|
||
# NET-E01 wlan 栈未实现
|
||
require_net_wlan=0
|
||
# VMX 为 guest 能力，真机不强制
|
||
require_vmm_vmx=0
|
||
# DRR-E31 Phase 9
|
||
require_drr_real_mac=0
|
||
# PKG-E10
|
||
require_pkg=0
|
||
# BRAND-E10
|
||
require_brand_anim=0
|
||
# DKM-E60
|
||
require_dkm_hot_unload=0
|
||
# DKM-E61
|
||
require_dkm_api_export=0
|
||
# NVME-E30
|
||
require_nvme_rw=0
|
||
# VNET-E30
|
||
require_virtio_net=0
|
||
|
||
[dsk]
|
||
show_logo=1
|
||
skip_login=0
|
||
# F5: release 走正常路径（向导/登录生效）
|
||
skip_firstinit=0
|
||
mouse_init=1
|
||
netman=1
|
||
session=native
|
||
|
||
[debug]
|
||
enabled=0
|
||
log_level=0
|
||
probe_enable=0
|
||
probe_capacity=4096
|
||
stat_summary_interval=0
|
||
utsm_trace=0
|
||
vmm_trace=0
|
||
dkm_trace=0
|
||
dsk_trace=0
|
||
block_trace=0
|
||
net_trace=0
|
||
input_trace=0
|
||
color_log=0
|
||
|
||
[compat]
|
||
lib_path=lib
|
||
linux_lib_guest_path=/usr/lib/deshab
|
||
linux_lib_sync=0
|
||
pe_dll_search=1
|
||
|