From 9b6b43e71f95b96e7144c89092d080ad3f850dbd Mon Sep 17 00:00:00 2001 From: Daniel Golle Date: Wed, 9 Dec 2020 12:45:55 +0000 Subject: [PATCH] kernel: enable kernel keyring by default on !SMALL_FLASH Enable CONFIG_KEYS by default on systems which are not marked as flash-space constraint by the 'small_flash' feature. CONFIG_KEYS is required by Docker, enabling it in our kernel allows users to run Docker on stock OpenWrt. It is also used of by some network file systems (such as NFSv4) to store credentials as well as UID/GID mappings. Adds about 50kB to vmlinux on ath79/generic (~18kB compressed) Signed-off-by: Daniel Golle --- config/Config-kernel.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/Config-kernel.in b/config/Config-kernel.in index a249e9726a..83c4c70b51 100644 --- a/config/Config-kernel.in +++ b/config/Config-kernel.in @@ -346,7 +346,7 @@ endif config KERNEL_KEYS bool "Enable kernel access key retention support" - default n + default !SMALL_FLASH config KERNEL_PERSISTENT_KEYRINGS bool "Enable kernel persistent keyrings"