i.MX 8X - imx_v8_defconfig - optimised for size, boot time, CVE risk

[petero5]

Hi, where can we find examples of defconfigs that are optimised for size, boot time, CVE risk?

Ideally for i.MX 8X, but failing that for IMX or embedded Linux in general?

https://github.com/nxp-imx/linux-imx/blob/lf-6.12.y/arch/arm64/configs/imx_v8_defconfig

has y for many things that an i.MX 8X embedded Linux device would not typically use?

Thank you
Peter

[JosephAtNXP]

Hi,

Thank you for your interest in NXP Semiconductor products,

Actually i.MX processors defconfigs have a lot of drivers and modules since it's the kernel that is going to be used in all Yocto images, including all their device tree and binary demos and the proof of concepts featuring them.

CVE risk is covered between every release, so this recommendation would be about the branch, use the latest one.

For size and boot time, you can start from imx_v8_defconfig and remove the drivers that your application won't need, it's mostly trial and error and application dependent.

Regards