https://www.wlstack.com/cn/tags/grub2/Recent content in Grub2 on 浙江物链网络科技有限公司Hugozh-CNinfo@wlstack.com (物链网络)info@wlstack.com (物链网络)Fri, 10 Mar 2023 00:00:00 +0000https://www.wlstack.com/cn/blog/%E5%86%85%E6%A0%B8%E4%BC%98%E5%8C%96%E5%8F%82%E6%95%B0%E8%AE%B0%E5%BD%95%E4%B9%8B2-%E7%BD%91%E5%8F%8B%E7%9A%84%E5%86%85%E6%A0%B8%E5%BC%95%E5%AF%BC%E5%8F%82%E6%95%B0/Fri, 10 Mar 2023 00:00:00 +0000info@wlstack.com (物链网络)https://www.wlstack.com/cn/blog/%E5%86%85%E6%A0%B8%E4%BC%98%E5%8C%96%E5%8F%82%E6%95%B0%E8%AE%B0%E5%BD%95%E4%B9%8B2-%E7%BD%91%E5%8F%8B%E7%9A%84%E5%86%85%E6%A0%B8%E5%BC%95%E5%AF%BC%E5%8F%82%E6%95%B0/<h1 id="参数说明">参数说明</h1> <p>Linux内核参数的配置对于性能的影响是巨大的。 可以通过修改/etc/sysctl.conf文件来调整。下面是每个参数的简要说明：</p> <table> <thead> <tr> <th>参数</th> <th>说明</th> </tr> </thead> <tbody> <tr> <td>loglevel=3</td> <td>设置内核打印级别为3</td> </tr> <tr> <td>selinux=0</td> <td>禁用 SELinux</td> </tr> <tr> <td>audit=1</td> <td>启用系统审计功能</td> </tr> <tr> <td>rd.systemd.show_status=auto</td> <td>启用 Systemd 系统启动状态</td> </tr> <tr> <td>rd.udev.log_priority=3</td> <td>设置 udev 日志级别为3</td> </tr> <tr> <td>systemd.unified_cgroup_hierarchy=false</td> <td>禁用 Systemd 统一 cgroup 层级</td> </tr> <tr> <td>systemd.legacy_systemd_cgroup_controller=false</td> <td>禁用旧版 Systemd cgroup 控制器</td> </tr> <tr> <td>scsi_mod.use_blk_mq=1</td> <td>使用多队列 I/O 调度器（blk-mq）</td> </tr> <tr> <td>crashkernel=384M-2G:64M,2G-:128M</td> <td>为内核启动设置的保留物理内存大小</td> </tr> <tr> <td>workqueue.power_efficient=0</td> <td>禁用内核 power_efficient 工作队列优化</td> </tr> <tr> <td>domain init_on_free=0, init_on_alloc=0</td> <td>禁用 NUMA 内存分配初始化</td> </tr> <tr> <td>cma=128M</td> <td>设置 Contiguous Memory Allocator（CMA）大小</td> </tr> <tr> <td>vsyscall=none</td> <td>禁用 vDSO/vsyscall</td> </tr> <tr> <td>nosoftlockup</td> <td>禁用软锁定检测</td> </tr> <tr> <td>mce=off</td> <td>禁用机器检查异常（MCE）</td> </tr> <tr> <td>threadirqs</td> <td>启用中断线程（threaded interrupt）</td> </tr> <tr> <td>noresume</td> <td>禁用系统挂起功能</td> </tr> <tr> <td>nmi_watchdog=0</td> <td>禁用 NMI 监视器</td> </tr> <tr> <td>vt.cur_default=50</td> <td>设置终端 VT 缓冲区大小</td> </tr> <tr> <td>transparent_hugepage=never</td> <td>禁用透明大页（Transparent Huge Pages，THP）</td> </tr> <tr> <td>cgroup_enable=memory</td> <td>启用 cgroup 内存限制</td> </tr> <tr> <td>cgroup_memory=nokmem</td> <td>禁用 KSM 和 THP</td> </tr> <tr> <td>swapaccount=1</td> <td>启用交换空间统计</td> </tr> <tr> <td>nf_conntrack.acct=0</td> <td>禁用 netfilter 连接追踪计数</td> </tr> <tr> <td>log_buf_len=2M</td> <td>设置内核日志缓冲区大小</td> </tr> <tr> <td>intel_pstate=disable</td> <td>禁用 Intel P-state 驱动</td> </tr> <tr> <td>processor.max_cstate=0</td> <td>禁用处理器 C 状态</td> </tr> <tr> <td>intel_idle.max_cstate=0</td> <td>禁用 Intel Idle</td> </tr> <tr> <td>thermal.off=1</td> <td>禁用温度传感器</td> </tr> <tr> <td>pci=realloc</td> <td>启用 PCI 设备热插拔支持</td> </tr> <tr> <td>pcie_aspm=off</td> <td>禁用 PCIe ASPM 支持</td> </tr> <tr> <td>cpufreq.off=1</td> <td>禁用 CPU 频率调节功能</td> </tr> <tr> <td>idle=halt</td> <td>使用 halt 代替 idle</td> </tr> <tr> <td>net.ifnames=0</td> <td>禁用预测命名接口</td> </tr> <tr> <td>biosdevname=0</td> <td>禁用预测 BIOS 命名接口</td> </tr> <tr> <td>mitigations=off</td> <td>禁用针对特定 CPU 安全漏洞的补丁</td> </tr> <tr> <td>noibrs</td> <td>禁用间接分支预测限制（Indirect Branch Restricted Speculation）</td> </tr> <tr> <td>nopti</td> <td>禁用特权级别转换限制（Privilege Level Translation Tables）</td> </tr> <tr> <td>l1tf=off</td> <td>禁用 L1 终端失效漏洞（L1 Terminal Fault）</td> </tr> <tr> <td>nomodeset</td> <td>禁用内核模式设置</td> </tr> <tr> <td>nospec_store_bypass_disable</td> <td>禁用处理器存储旁路漏洞的修复</td> </tr> <tr> <td>noibpb</td> <td>禁用分支预测条目保护（Indirect Branch Prediction Barrier）。</td> </tr> <tr> <td>spectre_v2_user=off</td> <td>禁用用户空间的漏洞修复</td> </tr> <tr> <td>spectre_v2=off</td> <td>禁用针对 Spectre Variant 2 漏洞的修复</td> </tr> <tr> <td>kvm-intel.vmentry_l1d_flush=never</td> <td>禁用 L1D Flush 特性，减少 L1D Cache 映射切换的开销</td> </tr> <tr> <td>no_timer_check</td> <td>禁用内核检查定时器是否过期，可减少部分系统调用的开销</td> </tr> <tr> <td>noreplace-smp</td> <td>禁用热插拔 CPU</td> </tr> <tr> <td>kvm-intel.nested=1</td> <td>启用 KVM Nested 虚拟化</td> </tr> <tr> <td>nosync</td> <td>禁用 CPU 忙等待</td> </tr> <tr> <td>iommu.strict=0</td> <td>禁用 IOMMU 严格模式</td> </tr> <tr> <td>intel_iommu=on</td> <td>启用 Intel VT-d IOMMU</td> </tr> <tr> <td>amd_iommu=on</td> <td>启用 AMD IOMMU</td> </tr> <tr> <td>cryptomgr.notests</td> <td>禁用内核加密 API 的测试模式</td> </tr> <tr> <td>rcu_nocbs=0-64</td> <td>设置 RCU 操作不会影响 CPU 0 到 CPU 64 之间的性能</td> </tr> <tr> <td>rcupdate.rcu_expedited=1</td> <td>优先处理 RCU 更新操作，以减少延迟</td> </tr> <tr> <td>rcutree.kthread_prio=2</td> <td>设置 RCU 的内核线程的优先级为 2</td> </tr> <tr> <td>skew_tick=1</td> <td>启用 CPU 偏移时钟</td> </tr> </tbody> </table> <h1 id="参考示例">参考示例</h1> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>loglevel<span style="color:#f92672">=</span><span style="color:#ae81ff">3</span> selinux<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> audit<span style="color:#f92672">=</span><span style="color:#ae81ff">1</span> rd.systemd.show_status<span style="color:#f92672">=</span>auto rd.udev.log_priority<span style="color:#f92672">=</span><span style="color:#ae81ff">3</span> systemd.unified_cgroup_hierarchy<span style="color:#f92672">=</span>false systemd.legacy_systemd_cgroup_controller<span style="color:#f92672">=</span>false scsi_mod.use_blk_mq<span style="color:#f92672">=</span><span style="color:#ae81ff">1</span> crashkernel<span style="color:#f92672">=</span>384M-2G:64M,2G-:128M workqueue.power_efficient<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> domain init_on_free<span style="color:#f92672">=</span>0, init_on_alloc<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> cma<span style="color:#f92672">=</span>128M vsyscall<span style="color:#f92672">=</span>none nosoftlockup mce<span style="color:#f92672">=</span>off threadirqs noresume nmi_watchdog<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> vt.cur_default<span style="color:#f92672">=</span><span style="color:#ae81ff">50</span> transparent_hugepage<span style="color:#f92672">=</span>never cgroup_enable<span style="color:#f92672">=</span>memory cgroup_memory<span style="color:#f92672">=</span>nokmem swapaccount<span style="color:#f92672">=</span><span style="color:#ae81ff">1</span> nf_conntrack.acct<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> log_buf_len<span style="color:#f92672">=</span>2M intel_pstate<span style="color:#f92672">=</span>disable processor.max_cstate<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> intel_idle.max_cstate<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> thermal.off<span style="color:#f92672">=</span><span style="color:#ae81ff">1</span> pci<span style="color:#f92672">=</span>realloc pcie_aspm<span style="color:#f92672">=</span>off cpufreq.off<span style="color:#f92672">=</span><span style="color:#ae81ff">1</span> idle<span style="color:#f92672">=</span>halt net.ifnames<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> biosdevname<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> mitigations<span style="color:#f92672">=</span>off noibrs nopti l1tf<span style="color:#f92672">=</span>off nomodeset nospec_store_bypass_disable noibpb spectre_v2_user<span style="color:#f92672">=</span>off spectre_v2<span style="color:#f92672">=</span>off kvm-intel.vmentry_l1d_flush<span style="color:#f92672">=</span>never no_timer_check noreplace-smp kvm-intel.nested<span style="color:#f92672">=</span><span style="color:#ae81ff">1</span> nosync iommu.strict<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> intel_iommu<span style="color:#f92672">=</span>on amd_iommu<span style="color:#f92672">=</span>on cryptomgr.notests rcu_nocbs<span style="color:#f92672">=</span>0-64 rcupdate.rcu_expedited<span style="color:#f92672">=</span><span style="color:#ae81ff">1</span> rcutree.kthread_prio<span style="color:#f92672">=</span><span style="color:#ae81ff">2</span> skew_tick<span style="color:#f92672">=</span><span style="color:#ae81ff">1</span> </span></span></code></pre></div>