metal/devstack
Jim Somerville 91f488af02 Security: Handle nospectre_v1 in the bootargs
Most of the v1 mitigation is baked into the kernel and not
optional.  The swapgs barriers are, however, optional.
They have a negative performance impact so we disable them
by using the nospectre_v1 kernel bootarg.

Partial-Bug: 1860193
Depends-On: https://review.opendev.org/#/c/704406
Change-Id: Id11232fe113293ed04b2802aaf038e2eedf9d797
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
2020-01-28 18:21:13 -05:00
..
files Security: Handle nospectre_v1 in the bootargs 2020-01-28 18:21:13 -05:00
lib Remove unused inventory and python-inventoryclient 2020-01-08 14:12:05 -06:00
plugin.sh Followup opendev cleanup and test jobs 2019-04-22 16:42:03 +00:00
settings Followup opendev cleanup and test jobs 2019-04-22 16:42:03 +00:00