droidspaces.config

# droidspaces.config — reference fragment (for documentation)
#
# This is exactly what apply-droidspaces.sh appends to the device's
# arch/arm64/configs/vendor/diting_GKI.config (merged last, so it overrides the
# gki_defconfig defaults — notably it turns PID_NS back on).
#
# Why no CONFIG_SYSVIPC: the Android 16 VINTF compatibility matrix requires
# CONFIG_SYSVIPC=n; enabling it fails the check_vintf build step. IPC namespaces
# only need (SYSVIPC || POSIX_MQUEUE), so POSIX_MQUEUE keeps CONFIG_IPC_NS working.

# IPC
CONFIG_POSIX_MQUEUE=y
# Namespaces (PID_NS is disabled in gki_defconfig; this turns it on)
CONFIG_NAMESPACES=y
CONFIG_PID_NS=y
CONFIG_UTS_NS=y
CONFIG_IPC_NS=y
CONFIG_NET_NS=y
CONFIG_USER_NS=y
# Seccomp
CONFIG_SECCOMP=y
CONFIG_SECCOMP_FILTER=y
# Cgroups
CONFIG_CGROUPS=y
CONFIG_CGROUP_DEVICE=y
CONFIG_CGROUP_PIDS=y
CONFIG_MEMCG=y
CONFIG_CGROUP_SCHED=y
CONFIG_FAIR_GROUP_SCHED=y
CONFIG_CGROUP_FREEZER=y
CONFIG_CGROUP_NET_PRIO=y
# /dev + overlay (volatile mode)
CONFIG_DEVTMPFS=y
CONFIG_OVERLAY_FS=y
# Container NAT networking
CONFIG_VETH=y
CONFIG_BRIDGE=y
CONFIG_NF_TABLES=y
CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
CONFIG_NF_CONNTRACK_NETLINK=y
CONFIG_NF_NAT_REDIRECT=y
# Docker iptables/netfilter support
CONFIG_BRIDGE_NETFILTER=y
CONFIG_NF_CONNTRACK=y
CONFIG_NF_NAT=y
CONFIG_IP_NF_IPTABLES=y
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_NAT=y
CONFIG_IP_NF_TARGET_MASQUERADE=y
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
CONFIG_NETFILTER_XT_MARK=y
# Resource limits (optional but useful)
CONFIG_CPUSETS=y
CONFIG_CGROUP_CPUACCT=y
CONFIG_CFS_BANDWIDTH=y