Make Linux fast again

[bluebell]

https://make-linux-fast-again.com/

noibrs noibpb nopti nospectre_v2 nospectre_v1 l1tf=off nospec_store_bypass_disable no_stf_barrier mds=off mitigations=off

Let's test.

[khz]

[jonetsu]

I think China will oppose.

[tavasti]

Fast but not safe. For computer which is not connected to network ever, that might be ok option.

[bluebell]

Fast but not safe. For computer which is not connected to network ever, that might be ok option.

I'd say for a single user workstation you're still safer than with any Windows system.

Most exploits affect people who have different customers on the same machine and have to keep their address spaces and registers separated.

[bluebell]

I think China will oppose.

Intel might oppose. All those fixes make machines slower so people have to buy faster CPUs or CPUs with more cores. Is there something better in the world of capitalism than having others pay for own failures?

[merlyn]

It would be interesting to see if disabling mitigations results in improved audio performance. I would try it, but I've got an AMD chip. I've read it doesn't make much difference on AMD. Although I probably will find out for myself. This was useful :

Code: Select all

★ grep . /sys/devices/system/cpu/vulnerabilities/*
/sys/devices/system/cpu/vulnerabilities/l1tf:Not affected
/sys/devices/system/cpu/vulnerabilities/meltdown:Not affected
/sys/devices/system/cpu/vulnerabilities/spec_store_bypass:Not affected
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer sanitization
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full AMD retpoline, STIBP: disabled, RSB filling

[Death]

I don't know what those commands do so I'm scared to try

[merlyn]

It's just one command and the rest is the output. It shows what vulnerabilities a processor has and what the mitigation is. This is back in the news with the discovery of ZombieLoad which doesn't show up in that list yet.

[Death]

It's just one command and the rest is the output. It shows what vulnerabilities a processor has and what the mitigation is. This is back in the news with the discovery of ZombieLoad which doesn't show up in that list yet.

Oh I meant the command in the first post

[merlyn]

I see. @bluebell posted a list of kernel boot options. They turn off all mitigations against spectre, meltdown and the new one : mds.

[Death]

Ah yeh I get it now after looking up and running the command you ran. I appear to be ok with my system. Not gonna try disabling those mitigations though haha

[Michael Willis]

Not gonna try disabling those mitigations though haha

This is definitely "here be dragons" territory.

[Death]

Yes. I thought it was dodgy just running the latest Mesa Devel drivers for a while haha

[merlyn]

I thought it was dodgy just running the latest Mesa Devel drivers

In terms of having a stable, reliable system development drivers are more of a risk than disabling meltdown/spectre mitigations.

I read that Intel wanted the mitigations to be 'opt-in'. The Linux kernel would be distributed without the performance hit to Intel hardware, and if you were a government employee, a spy, an international businessman or other party with valuable secrets the mitigations could be enabled.

It was Linus who insisted the mitigations be 'opt-out'.