ARM: pmos.config: Add defconfig

besides generic needed options:
- built-in stuff needed for cryptsetup
- anbox support (is broken on armv7, but we hope it will be fixed)
- waydroid support
- nftables
- containers (docker, lxc)
- zram

Link: #69 (comment)
Signed-off-by: Anton Bambura <[email protected]>

kernel/configs/pmos.config

@@ -0,0 +1,136 @@
+# general
+CONFIG_LOCALVERSION="-postmarketos-grate"
+CONFIG_BLK_DEV_INITRD=y
+CONFIG_CGROUPS=y
+CONFIG_CRYPTO_XTS=y
+CONFIG_DEVTMPFS=y
+CONFIG_DM_CRYPT=m
+CONFIG_EXT4_FS=m
+CONFIG_F2FS_FS=m
+CONFIG_BTRFS_FS=m
+CONFIG_SYSVIPC=y
+CONFIG_TMPFS_POSIX_ACL=y
+CONFIG_VT=y
+CONFIG_UEVENT_HELPER=y
+CONFIG_USER_NS=y
+
+# osk-sdl
+CONFIG_MD=y
+CONFIG_CRYPTO_SHA256=y
+CONFIG_CRYPTO_AES=y
+
+# nftables
+CONFIG_NETFILTER=y
+CONFIG_NF_CONNTRACK=m
+CONFIG_NF_TABLES=m
+CONFIG_NF_TABLES_INET=y
+CONFIG_NFT_CT=m
+CONFIG_NFT_COUNTER=m
+CONFIG_NFT_LOG=m
+CONFIG_NFT_LIMIT=m
+CONFIG_NFT_MASQ=m
+CONFIG_NFT_NAT=m
+CONFIG_NFT_REJECT=m
+CONFIG_NF_TABLES_IPV4=y
+CONFIG_NF_REJECT_IPV4=m
+CONFIG_IP_NF_IPTABLES=m
+CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_TARGET_REJECT=m
+CONFIG_IP_NF_NAT=m
+CONFIG_NF_TABLES_IPV6=y
+CONFIG_NF_REJECT_IPV6=m
+CONFIG_IP6_NF_IPTABLES=m
+CONFIG_IP6_NF_FILTER=m
+CONFIG_IP6_NF_TARGET_REJECT=m
+CONFIG_IP6_NF_NAT=m
+
+# anbox, waydroid
+CONFIG_SQUASHFS=m
+CONFIG_SQUASHFS_XZ=y
+CONFIG_SQUASHFS_XATTR=y
+CONFIG_TMPFS_XATTR=y
+CONFIG_ASHMEM=y
+CONFIG_ANDROID=y
+CONFIG_ANDROID_BINDER_IPC=y
+CONFIG_ANDROID_BINDERFS=n
+CONFIG_ANDROID_BINDER_DEVICES="binder,hwbinder"
+CONFIG_NETFILTER_XTABLES=m
+CONFIG_NETFILTER_XT_MATCH_COMMENT=m
+CONFIG_IP_NF_MANGLE=m
+CONFIG_FUSE_FS=m
+CONFIG_BLK_DEV_LOOP=m
+CONFIG_TUN=m
+CONFIG_VETH=m
+CONFIG_VLAN_8021Q=m  # prerequisite for bridge
+CONFIG_BRIDGE=m
+CONFIG_BRIDGE_VLAN_FILTERING=y
+CONFIG_PSI=y
+
+# containers (lxc, Docker)
+CONFIG_NAMESPACES=y
+CONFIG_NET_NS=y
+CONFIG_PID_NS=y
+CONFIG_IPC_NS=y
+CONFIG_UTS_NS=y
+# CONFIG_CGROUPS=y # This is already enabled
+CONFIG_CGROUP_CPUACCT=y
+CONFIG_CGROUP_DEVICE=y
+CONFIG_CGROUP_FREEZER=y
+CONFIG_CGROUP_SCHED=y
+CONFIG_CPUSETS=y
+CONFIG_KEYS=y
+# CONFIG_VETH=y # This is already enabled
+# CONFIG_BRIDGE=m # This is already enabled
+CONFIG_BRIDGE_NETFILTER=m
+# CONFIG_IP_NF_FILTER=m # This is already enabled
+CONFIG_IP_NF_TARGET_MASQUERADE=m
+CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
+CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
+CONFIG_NETFILTER_XT_MATCH_IPVS=m
+CONFIG_NETFILTER_XT_MARK=m
+CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m  # Needed for lxc
+# CONFIG_IP_NF_NAT=m # This is already enabled
+CONFIG_NF_NAT=m
+CONFIG_POSIX_MQUEUE=y
+CONFIG_BLK_DEV_DM=m  # Storage Drivers
+CONFIG_DUMMY=m  # Network Drivers
+# CONFIG_USER_NS=m  # This is already enabled
+CONFIG_BLK_CGROUP=y  # Optional section
+CONFIG_BLK_DEV_THROTTLING=y  # Optional section
+CONFIG_CGROUP_PERF=y  # Optional section
+CONFIG_NET_SCHED=y  # Optional section
+CONFIG_NET_CLS_CGROUP=m  # Optional section
+CONFIG_FAIR_GROUP_SCHED=y  # Optional section
+CONFIG_RT_GROUP_SCHED=y  # Optional section
+CONFIG_IP_NF_TARGET_REDIRECT=m  # Optional section
+CONFIG_IP_VS=m  # Optional section
+CONFIG_IP_VS_NFCT=y  # Optional section
+CONFIG_IP_VS_PROTO_TCP=y  # Optional section
+CONFIG_IP_VS_PROTO_UDP=y  # Optional section
+CONFIG_IP_VS_RR=m  # Optional section
+# CONFIG_EXT4_FS=m  # This is already enabled
+CONFIG_EXT4_FS_POSIX_ACL=y  # Optional section
+CONFIG_EXT4_FS_SECURITY=y  # Optional section
+CONFIG_CFS_BANDWIDTH=y  # Optional section
+CONFIG_CHECKPOINT_RESTORE=y  # Needed for lxc
+CONFIG_MEMCG=y
+CONFIG_MEMCG_SWAP=y
+CONFIG_DM_THIN_PROVISIONING=m  # Storage Drivers
+CONFIG_VXLAN=m  # Network Drivers
+CONFIG_IP6_NF_TARGET_MASQUERADE=m  # Needed for lxc
+# CONFIG_BRIDGE_VLAN_FILTERING=y  # This is already enabled
+CONFIG_MACVLAN=m  # Network Drivers
+CONFIG_CGROUP_NET_PRIO=y  # Optional section
+CONFIG_OVERLAY_FS=m  # Storage Drivers
+CONFIG_IPVLAN=m  # Network Drivers
+CONFIG_SECCOMP=y  # Optional section
+CONFIG_CGROUP_PIDS=y  # Optional section
+
+# zram
+CONFIG_ZRAM=m
+CONFIG_ZSMALLOC=m
+CONFIG_ZSMALLOC_STAT=y
+CONFIG_ZRAM_MEMORY_TRACKING=y
+CONFIG_CRYPTO_LZ4=m
+CONFIG_LZ4_COMPRESS=m
+CONFIG_SWAP=y