Have the kernel conditionally disable SMT if vulnerable

coreos/fedora-coreos-tracker#181
coreos · May 17, 2019 · 4a8e334 · 4a8e334
1 parent b4ebc04
commit 4a8e334
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/image.yaml b/image.yaml
@@ -1,8 +1,11 @@
 # This replaces image.ks
 # size is the target disk size in GB.
-# Currently, it is the only supported key.
 size: 8
 
+extra-kargs:
+    # Disable SMT on systems vulnerable to MDS or any similar future issue.
+    - mitigations=auto,nosmt
+
 # After this, we plan to add support for the Ignition
 # storage/filesystems sections.  (Although one can do
 # that on boot as well)