diff --git a/hosts/dunamis/boot.nix b/hosts/dunamis/boot.nix index 2a0886f..65ea95d 100644 --- a/hosts/dunamis/boot.nix +++ b/hosts/dunamis/boot.nix @@ -10,6 +10,7 @@ ]; boot = { # kernelPackages = pkgs.linuxPackages_latest; + consoleLogLevel = 0; kernelPackages = pkgs.linuxPackages_cachyos; kernelModules = ["kvm-amd"]; kernelParams = [ @@ -30,11 +31,11 @@ "iommu.passthrough=0" "iommu.strict=1" "iommu=force" - "lockdown=confidentiality" - "module.sig_enforce=1" + # "lockdown=confidentiality" + # "module.sig_enforce=1" "page_alloc.shuffle=1" - "reg_file_data_sampling=on" - "spec_rstack_overflow=safe-ret" + # "reg_file_data_sampling=on" + # "spec_rstack_overflow=safe-ret" "vsyscall=none" ]; initrd = { diff --git a/hosts/dunamis/services.nix b/hosts/dunamis/services.nix index 97f86e0..a17583b 100644 --- a/hosts/dunamis/services.nix +++ b/hosts/dunamis/services.nix @@ -23,7 +23,7 @@ }; }; scx = { - enable = false; + enable = true; scheduler = "scx_flash"; }; logind = {