fix #28925962

In faas's VPC network mode, we should enable this feature to support
multi-tenancy's snat on a node.
Signed-off-by: NZhiyuan Hou <zhiyuan2048@linux.alibaba.com>
Acked-by: NDust Li <dust.li@linux.alibaba.com>

fix #28886284

On AMD platforms cpu frequency was not able to be tuned as there's no
cpufreq driver registered -- intel_pstate has been enabled but it only
can be loaded on Intel CPUs. Hence after evaluated and validated on AMD
platforms, we decide to enable acpi-cpufreq.
acpi-cpufreq won't impact on intel_pstate on Intel platforms as
intel_pstate will be loaded in device_initcall while acpi-cpufreq will
be loaded in late_initcall. This sequence ensure intel_pstate can be
loaded but acpi-cpufreq can not on Intel platforms.
Signed-off-by: NZelin Deng <zelin.deng@linux.alibaba.com>
Reviewed-by: NCaspar Zhang <caspar@linux.alibaba.com>
Reviewed-by: NArtie Ding <fulin.dn@linux.alibaba.com>
Acked-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

fix #28198752

ext4 encryption will increase lock contention when opening directory and
result in performance drop in case will-it-scale open1.
Since we don't have explicit usecases as of now, so we decide to disabed
it.
Signed-off-by: NJoseph Qi <joseph.qi@linux.alibaba.com>
Reviewed-by: NDust Li <dust.li@linux.alibaba.com>

fix #27365977

It enables AMD_IOMMU for AMD platforms which support X2APIC.
Because AMD IOMMU driver initializes OMMU protection domains as
direct map, IOMMU_DEFAULT_PASSTHROUGH is needed.
Signed-off-by: NArtie Ding <artie.ding@linux.alibaba.com>
Reviewed-by: NShile Zhang <shile.zhang@linux.alibaba.com>
Acked-by: NCaspar Zhang <caspar@linux.alibaba.com>

to #27793353

The following configs are set to 'm' to make x86 the same
as aarch64.
  CONFIG_NET_EMATCH_CMP=m
  CONFIG_NET_EMATCH_NBYTE=m
  CONFIG_NET_EMATCH_U32=m
  CONFIG_NET_EMATCH_META=m
  CONFIG_NET_EMATCH_TEXT=m

Some commonly used cases need CONFIG_NET_EMATCH_CMP,
for example:

tc qdisc add dev eth0 root handle 1: prio bands 4
tc qdisc add dev eth0 parent 1:4 handle 40: netem delay 20ms 2ms
tc filter add dev eth0 parent 1: protocol ip prio 4 basic match
			       "cmp(u16 at 2 layer transport eq 3306)
                            and cmp(u8 at 16 layer network eq 10)
                            and cmp(u8 at 17 layer network eq 0)
                            and cmp(u8 at 18 layer network eq 200)
                            and cmp(u8 at 19 layer network eq 45)" flowid 1:4
Signed-off-by: NDust Li <dust.li@linux.alibaba.com>
Reviewed-by: NShile Zhang <shile.zhang@linux.alibaba.com>
Acked-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

to #27778669

Aligned NET_SCHED configs with aarch64, except:

1. CONFIG_NET_SCH_ATM is not enabled since we don't use
   ATM on cloud, and CONFIG_ATM is not enabled
2. CONFIG_NET_SCH_DEFAULT is not set since we still use
   pfifo_fast as the default scheduler.
3. CONFIG_NET_SCH_FQ_CODEL set to 'm' since we don't use
   fq_codel as the default qdisc
Signed-off-by: NDust Li <dust.li@linux.alibaba.com>
Reviewed-by: NShile Zhang <shile.zhang@linux.alibaba.com>
Acked-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

to #26353046
Acked-by: NDust Li <dust.li@linux.alibaba.com>
Signed-off-by: Nxuanzhuo <xuanzhuo@linux.alibaba.com>

fix #27497636

Enable ip route multipath and dm multipath, for consistent with arm and
physical kconfig.
Signed-off-by: NJoseph Qi <joseph.qi@linux.alibaba.com>
Acked-by: NDust Li <dust.li@linux.alibaba.com>

to #26809468, #25931767

Disable deferred struct page init by default since some stability issue
observed.

A new kernel parameter was planed to enable it for large size instance
on demand, for memory init speed up.
Signed-off-by: NShile Zhang <shile.zhang@linux.alibaba.com>
Acked-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

to #27362006

Especially, we eanble the following for daishu, which are consistent
with centos8:
CONFIG_SQUASHFS_FILE_DIRECT
CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU
Signed-off-by: NJoseph Qi <joseph.qi@linux.alibaba.com>
Acked-by: NCaspar Zhang <caspar@linux.alibaba.com>

fix #27138800
Signed-off-by: NShile Zhang <shile.zhang@linux.alibaba.com>
Acked-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

to #26613714
Signed-off-by: NShile Zhang <shile.zhang@linux.alibaba.com>
Acked-by: NJoseph Qi <joseph.qi@linux.alibaba.com>

to #26832542
Signed-off-by: NShile Zhang <shile.zhang@linux.alibaba.com>
Acked-by: NCaspar Zhang <caspar@linux.alibaba.com>

to #26581627

Enable a set of config related to kernel trust, including
vptm, IMA, EVM, smack LSM, and SM3, SM4, in which SM algorithm
is compiled into module.

These configs also support the x64 arm platform.

The following are some performance data. The output of
`systemd-analyze` on the startup time of an ECS (executed
three times):

before:
725ms (kernel) + 471ms (initrd) + 3.375s (userspace) = 4.572s
794ms (kernel) + 426ms (initrd) + 3.281s (userspace) = 4.501s
797ms (kernel) + 464ms (initrd) + 3.275s (userspace) = 4.538s

after:
777ms (kernel) + 439ms (initrd) + 3.456s (userspace) = 4.672s
785ms (kernel) + 450ms (initrd) + 3.313s (userspace) = 4.549s
741ms (kernel) + 481ms (initrd) + 3.274s (userspace) = 4.497s
Signed-off-by: NTianjia Zhang <tianjia.zhang@linux.alibaba.com>
Reviewed-by: Jia Zhang <zhang.jia@linux.alibaba.com>
Reviewed-by: NShile Zhang <shile.zhang@linux.alibaba.com>

to #26424323

Enable CONFIG_SCHED_SLI by default.
Signed-off-by: NYihao Wu <wuyihao@linux.alibaba.com>
Acked-by: NShanpei Chen <shanpeic@linux.alibaba.com>

to #26424368

Enable CONFIG_MEMSLI by default.
Signed-off-by: NXu Yu <xuyu@linux.alibaba.com>
Reviewed-by: NYang Shi <yang.shi@linux.alibaba.com>
Reviewed-by: NXunlei Pang <xlpang@linux.alibaba.com>

to #26589609

Move the configs in tree for bisect, it's convenient for locating configure
related issue.
Signed-off-by: NShile Zhang <shile.zhang@linux.alibaba.com>
Acked-by: NJoseph Qi <joseph.qi@linux.alibaba.com>