From 0ea0ca3f3c0382da6db9c2abd88a8abf3013274e Mon Sep 17 00:00:00 2001 From: Aleksandr Nogikh Date: Wed, 16 Jul 2025 19:28:05 +0200 Subject: dashboard/config/linux: disable CONFIG_CGROUP_BPF It seems incredibly difficult to clean up the side effects of this kernel functionality. Keep it enabled only on a new config dedicated specifically for the snapshot-based instance. Closes #5956. --- dashboard/config/linux/bits/subsystems.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'dashboard/config/linux/bits/subsystems.yml') diff --git a/dashboard/config/linux/bits/subsystems.yml b/dashboard/config/linux/bits/subsystems.yml index 064f44f86..b106e062a 100644 --- a/dashboard/config/linux/bits/subsystems.yml +++ b/dashboard/config/linux/bits/subsystems.yml @@ -44,7 +44,9 @@ config: - CGROUP_DEVICE - CGROUP_CPUACCT - CGROUP_PERF - - CGROUP_BPF + # It's incredibly difficult/impossible to reliably clean up these bpf links, + # so let's only fuzz it on the snapshot-based instances. See #5956. + - CGROUP_BPF: [snapshot] - CHECKPOINT_RESTORE - USERFAULTFD - COMPAT_BRK: n -- cgit mrf-deployment