Turn off Retpoline and KPTI protection 95/51395/2
authorMichael Polenchuk <mpolenchuk@mirantis.com>
Wed, 31 Jan 2018 10:38:16 +0000 (14:38 +0400)
committerMichael Polenchuk <mpolenchuk@mirantis.com>
Wed, 31 Jan 2018 13:28:02 +0000 (17:28 +0400)
commit9c20ea371b59a19072b124af86dc3817753872a2
tree51384677120d507b64a0706a8855229dc8afdda4
parent9b984e9be0ea5e78d111f57e2ea1c156b7b816a4
Turn off Retpoline and KPTI protection

Based on Canonical research (https://goo.gl/QJykMa) there is
low-risk of attack for private clouds environments, therefore
turn off the related kernel patches & regain performance back.

Change-Id: I661fa127241e327b07d21a29d58d584997607123
Signed-off-by: Michael Polenchuk <mpolenchuk@mirantis.com>
mcp/config/states/baremetal_init
mcp/patches/0008-Handle-file_recv-option.patch [deleted file]
mcp/patches/0008-Handle-kernel-boot-options.patch [new file with mode: 0644]
mcp/patches/patches.list
mcp/reclass/classes/cluster/baremetal-mcp-pike-common-ha/infra/kvm.yml
mcp/reclass/classes/cluster/baremetal-mcp-pike-common-ha/openstack_compute.yml