mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:36 +01:00
* chore(workarounds): re-evaluate stale hardware/kernel fixes Prune workarounds whose root cause is gone, fix one vendor typo, and document the ones we keep: - drop `transparent_hugepage=madvise` on shoryu/shushou/youko: it was tied to the old fixed 1G hugetlb pool, and the VMs now use ordinary memory - shoryu: `hardware.cpu.intel.updateMicrocode` -> `amd` (it is an AMD APU) - ai: drop `i915.enable_guc=3` (GuC/HuC submission is the default on modern i915/Xe) - kernel-hardening: name the Dirty Frag CVEs (CVE-2026-43284 / CVE-2026-43500) and the re-evaluation condition - document re-eval conditions for the Insta360 resume fix, the darwin auto-optimise-store workaround, and the youko USB-SATA bridge mitigations * chore(workarounds): keep the Dirty Frag module blacklist as defence in depth * chore(ai): correct the i915.enable_guc rationale (verified against the kernel) * chore(darwin): drop the auto-optimise-store workaround (nix#7273 fixed)
Nix-Darwin's Modules
This directory contains the modules for Nix-Darwin.
See ryan4yin/nix-darwin-kickstarter for a more detailed explanation.