Reducing the need to compile a custom kernel
gjb at FreeBSD.org
Fri Feb 10 14:19:52 UTC 2012
On Fri, Feb 10, 2012 at 02:56:04PM +0100, Alexander Leidinger wrote:
> The question is, is this enough? Or asked differently, why are you
> compiling a custom kernel in a production environment (so I rule out
> debug options zhich are not enabled in GENERIC)? Are there options
> which you add which you can not add as a module (SW_WATCHDOG comes to
> my mind)? If yes, which ones and how important are they for you?
For me, the two big ones are IPSEC (which, as I understand it, we cannot
ship with GENERIC due to export laws), and KDB_UNATTENDED. The latter
may be a sysctl tunable, I never bothered to look.
More information about the freebsd-stable