5 Commits

Author SHA1 Message Date
Andrey Smirnov
b95912e049
feat: enforce proc_mem.force_override=never by default
Note: this is Talos 1.13 only, and will only be enabled once we get to
release v1.13.0-alpha.0.

See https://github.com/siderolabs/pkgs/pull/1412#issuecomment-3665787378
for more details.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-18 15:43:21 +04:00
Noel Georgi
ced57b047a
feat: support optionally disabling module sig verification
Support disabling kernel module signature verification.
Note that this does not work when SecureBoot is enabled.

Fixes: #11989

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-16 20:18:46 +05:30
Noel Georgi
2a7b735b26
feat: drop IMA support
Fixes: #11133

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-06-02 21:20:13 +05:30
Andrey Smirnov
8212e4864d
refactor: use quirks in kernel args
Make default args depend on quirks, and also pass quirks down to
platform code.

Reduces amount of hacks, but it is functionally equivalent.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-23 18:52:06 +04:00
Nico Berlee
a009f5c60c
fix: accept sysctl paths with dots
Fixes #7878

Signed-off-by: Nico Berlee <nico.berlee@on2it.net>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2023-10-20 21:16:15 +04:00