linux-hardened/qemu-virtio.nix

{ lib, ... }: with lib.kernel; {
  NR_CPUS = freeform "8";

  HYPERVISOR_GUEST = yes;
  PARAVIRT = yes;
  PARAVIRT_SPINLOCKS = yes;
  KVM_GUEST = yes;
  ARCH_CPUIDLE_HALTPOLL = yes;
  PARAVIRT_CLOCK = yes;

  HALTPOLL_CPUIDLE = yes;

  FW_CFG_SYSFS = yes;

  BLK_MQ_VIRTIO = yes;
  VIRTIO_BLK = yes;
  VIRTIO_NET = yes;
  VIRTIO_CONSOLE = yes;

  HW_RANDOM_VIRTIO = yes;

  I6300ESB_WDT = yes;

  DRM = yes;
  DRM_FBDEV_EMULATION = yes;
  DRM_VIRTIO_GPU = yes;
  DRM_VIRTIO_GPU_KMS = yes;
  DRM_BOCHS = yes;
  DRM_SIMPLEDRM = yes;

  VIRT_DRIVERS = yes;
  VMGENID = yes;

  VIRTIO_MENU = yes;
  VIRTIO = yes;
  VIRTIO_PCI = yes;
  VIRTIO_PCI_LEGACY = no;
  VIRTIO_BALLOON = yes;
  VIRTIO_INPUT = yes;

  VIRTIO_IOMMU = yes;

  EXT4_FS = yes;
  EXT4_USE_FOR_EXT2 = yes;
  EXT4_FS_POSIX_ACL = yes;
  BTRFS_FS = yes;
  BTRFS_FS_POSIX_ACL = yes;

  FUSE_FS = yes;
  VIRTIO_FS = yes;

  CRYPTO_HW = yes;
  CRYPTO_DEV_VIRTIO = yes;
}