canonical / charm-sysconfig

A subordinate charm to apply system settings like grub configurations or systemd configurations.
Apache License 2.0
0 stars 5 forks source link

pti should default to on #17

Closed dashmage closed 8 months ago

dashmage commented 8 months ago

The sysconfig charm allows users to choose between pti=on and pti=off, but defaults to off.

I think the charm should do the opposite. This is for two reasons:

  1. the Ubuntu kernel defaults to pti=on

  2. pti is used as a meltdown mitigation strategy and as such it should not be disabled without the explicit consent of the operator. Having a default of pti=off will make several operators disable it inadvertently just by installing the charm


Imported from Launchpad using lp2gh.