aarch64: Add kpti=off similar to x86_64 nopti

[fuel.git] / mcp / reclass / classes / cluster / all-mcp-arch-common / infra / maas.yml.j2

diff --git a/mcp/reclass/classes/cluster/all-mcp-arch-common/infra/maas.yml.j2 b/mcp/reclass/classes/cluster/all-mcp-arch-common/infra/maas.yml.j2
index f98040b..f3b1f79 100644 (file)
--- a/mcp/reclass/classes/cluster/all-mcp-arch-common/infra/maas.yml.j2
+++ b/mcp/reclass/classes/cluster/all-mcp-arch-common/infra/maas.yml.j2
@@ -33,7 +33,7 @@ parameters:
         aarch64_hugepages_1g:
           comment: 'Enable 1G pagesizes on aarch64'
           definition: '//capability[@id="asimd"]|//capability[@id="cp15_barrier"]'
-          kernel_opts: 'default_hugepagesz=1G hugepagesz=1G'
+          kernel_opts: 'default_hugepagesz=1G hugepagesz=1G kpti=off'
 {%- endif %}
       enable_iframe: False
       timeout:
@@ -111,6 +111,7 @@ parameters:
         enable_third_party_drivers: true
         network_discovery: 'enabled'
         default_min_hwe_kernel: ${_param:hwe_kernel}
+        kernel_opts: 'spectre_v2=off nopti kpti=off nospec_store_bypass_disable noibrs noibpb'
     cluster:
       saltstack_repo_bionic: "deb [arch=amd64] http://repo.saltstack.com/apt/ubuntu/18.04/amd64/2017.7/ bionic main"
       region: