Reducing the need to compile a custom kernel

[Glen Barber]

On Fri, Feb 10, 2012 at 02:56:04PM +0100, Alexander Leidinger wrote:
> The question is, is this enough? Or asked differently, why are you  
> compiling a custom kernel in a production environment (so I rule out  
> debug options zhich are not enabled in GENERIC)? Are there options  
> which you add which you can not add as a module (SW_WATCHDOG comes to  
> my mind)? If yes, which ones and how important are they for you?
> 

For me, the two big ones are IPSEC (which, as I understand it, we cannot
ship with GENERIC due to export laws), and KDB_UNATTENDED.  The latter
may be a sysctl tunable, I never bothered to look.

Regards,

Glen