From fef14737eba9c652cb5e02f5342d7c3e700562b8 Mon Sep 17 00:00:00 2001
From: Clayton Craft <clayton@craftyguy.net>
Date: Wed, 24 Sep 2025 14:38:18 -0700
Subject: [PATCH] kconfigcheck: use tristate values for options

Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7080>
---
 kconfigcheck.toml | 793 +++++++++++++++++++++++-----------------------
 1 file changed, 397 insertions(+), 396 deletions(-)

diff --git a/kconfigcheck.toml b/kconfigcheck.toml
index a37bb50ec..db4515791 100644
--- a/kconfigcheck.toml
+++ b/kconfigcheck.toml
@@ -29,9 +29,10 @@ community = [
 # Format for rule sections:
 #   ["category:<NAME>"."<KERNEL_VERSION>"."<ARCHITECTURES>"]
 # Implemented value types:
-# - boolean (e.g. 'ANDROID_PARANOID_NETWORK = false'):
-#   - false: disabled
-#   - true: enabled, either as module or built-in
+# - tristate (e.g. 'ANDROID_PARANOID_NETWORK = n'):
+#   - y: built-in, preferred but module is OK
+#   - m: module, preferred but built-in is OK
+#   - n: disabled
 # - list (e.g. 'ANDROID_BINDER_DEVICES = ["binder", "hwbinder"]'):
 #   - each element of the array must be contained in the kernel config string,
 #     in any order. The example above would accept the following in the config:
@@ -42,505 +43,505 @@ community = [
 
 # default: all devices must satisfy these
 ["category:default".">=0.0.0"."all"]
-ANDROID_PARANOID_NETWORK = false
-BLK_DEV_INITRD = true
-CGROUPS = true
-CRYPTO_AES = true
-CRYPTO_XTS = true
-DEVTMPFS = true
-DM_CRYPT = true
-INPUT_EVDEV = true
-EXT4_FS = true
-KINETO_GAN = false
-PFT = false
-SEC_RESTRICT_ROOTING = false
-SYSVIPC = true
-TMPFS_POSIX_ACL = true
-USE_VFB = false
-VT = true
+ANDROID_PARANOID_NETWORK = "n"
+BLK_DEV_INITRD = "y"
+CGROUPS = "y"
+CRYPTO_AES = "y"
+CRYPTO_XTS = "y"
+DEVTMPFS = "y"
+DM_CRYPT = "y"
+INPUT_EVDEV = "y"
+EXT4_FS = "y"
+KINETO_GAN = "n"
+PFT = "n"
+SEC_RESTRICT_ROOTING = "n"
+SYSVIPC = "y"
+TMPFS_POSIX_ACL = "y"
+USE_VFB = "n"
+VT = "y"
 ["category:default".">=2.6.0"."all"]
-BINFMT_ELF = true
+BINFMT_ELF = "y"
 ["category:default".">=3.10.0"."all"]
-BINFMT_SCRIPT = true
+BINFMT_SCRIPT = "y"
 ["category:default".">=4.0.0"."all"]
-UEVENT_HELPER = true
-USER_NS = true
+UEVENT_HELPER = "y"
+USER_NS = "y"
 ["category:default"."<4.7.0"."all"]
-DEVPTS_MULTIPLE_INSTANCES = true
+DEVPTS_MULTIPLE_INSTANCES = "y"
 ["category:default"."<4.14.0"."all"]
-SAMSUNG_TUI = false
-TZDEV = false
+SAMSUNG_TUI = "n"
+TZDEV = "n"
 ["category:default"."<5.2.0"."armhf armv7 x86"]
-LBDAF = true
+LBDAF = "y"
 ["category:default".">=5.2.0"."all"]
 # Provide a proper dummy null console to improve compatibility
 # on devices that like to coerce console=null
-NULL_TTY = true
+NULL_TTY = "y"
 ["category:default".">=5.19.0"."all"]
-FW_LOADER_COMPRESS_ZSTD = true
+FW_LOADER_COMPRESS_ZSTD = "y"
 ["category:default".">=4.20.0"."all"]
 # required for systemd-oomd
-PSI = true
-PSI_DEFAULT_DISABLED = false
-UDMABUF = true
+PSI = "y"
+PSI_DEFAULT_DISABLED = "n"
+UDMABUF = "y"
 
 ["category:netmount".">=2.6.0"."all"]
-CACHEFILES = true
-CRYPTO_AES = true
-CRYPTO_CAMELLIA = true
-CRYPTO_CBC = true
-CRYPTO_CTS = true
-CRYPTO_HMAC = true
-CRYPTO_SHA256 = true
-CRYPTO_SHA512 = true
-FSCACHE = true
-NFS_FS = true
-NFS_FSCACHE = true
-NFS_V3 = true
-NFS_V4 = true
-RPCSEC_GSS_KRB5 = true
+CACHEFILES = "y"
+CRYPTO_AES = "y"
+CRYPTO_CAMELLIA = "y"
+CRYPTO_CBC = "y"
+CRYPTO_CTS = "y"
+CRYPTO_HMAC = "y"
+CRYPTO_SHA256 = "y"
+CRYPTO_SHA512 = "y"
+FSCACHE = "y"
+NFS_FS = "y"
+NFS_FSCACHE = "y"
+NFS_V3 = "y"
+NFS_V4 = "y"
+RPCSEC_GSS_KRB5 = "y"
 ["category:netmount".">=3.1.0"."all"]
-CRYPTO_CMAC = true
+CRYPTO_CMAC = "y"
 ["category:netmount".">=3.10.0"."all"]
-CRYPTO_AES_TI = true
+CRYPTO_AES_TI = "y"
 ["category:netmount".">=3.10.0"."aarch64"]
-CRYPTO_AES_ARM64_CE_BLK = true
+CRYPTO_AES_ARM64_CE_BLK = "y"
 ["category:netmount".">=4.14.0"."all"]
-RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1 = true
-RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2 = true
-RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA = true
+RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1 = "y"
+RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2 = "y"
+RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA = "y"
 
 # waydroid: android compatibility layer
 ["category:waydroid".">=0.0.0"."all"]
-ANDROID_BINDERFS = false
+ANDROID_BINDERFS = "n"
 ANDROID_BINDER_DEVICES = ["binder", "hwbinder", "vndbinder"]
-ANDROID_BINDER_IPC = true
-ANDROID_BINDER_IPC_SELFTEST = false
-BLK_DEV_LOOP = true
-BPF_SYSCALL = true
-BRIDGE = true
-BRIDGE_VLAN_FILTERING = true
-CGROUP_BPF = true
-FUSE_FS = true
-IP_NF_MANGLE = true
-NETFILTER_XTABLES = true
-NETFILTER_XT_MATCH_COMMENT = true
-SQUASHFS = true
-SQUASHFS_XATTR = true
-SQUASHFS_XZ = true
-TMPFS_XATTR = true
-TUN = true
-VETH = true
-VLAN_8021Q = true  # prerequisite for bridge
+ANDROID_BINDER_IPC = "y"
+ANDROID_BINDER_IPC_SELFTEST = "n"
+BLK_DEV_LOOP = "y"
+BPF_SYSCALL = "y"
+BRIDGE = "y"
+BRIDGE_VLAN_FILTERING = "y"
+CGROUP_BPF = "y"
+FUSE_FS = "y"
+IP_NF_MANGLE = "y"
+NETFILTER_XTABLES = "y"
+NETFILTER_XT_MATCH_COMMENT = "y"
+SQUASHFS = "y"
+SQUASHFS_XATTR = "y"
+SQUASHFS_XZ = "y"
+TMPFS_XATTR = "y"
+TUN = "y"
+VETH = "y"
+VLAN_8021Q = "y"  # prerequisite for bridge
 ["category:waydroid".">=3.5"."all"]
-CROSS_MEMORY_ATTACH = true
+CROSS_MEMORY_ATTACH = "y"
 ["category:waydroid".">=4.20.0"."all"]
-PSI = true  # required by userspace OOM killer
-PSI_DEFAULT_DISABLED = false
+PSI = "y"  # required by userspace OOM killer
+PSI_DEFAULT_DISABLED = "n"
 ["category:waydroid"."<5.18"."all"]
-ASHMEM = true
+ASHMEM = "y"
 
 # iwd: modern inet wireless daemon
 # Obtained from 'grep ADD_MISSING src/main.c' in iwd.git
 ["category:iwd".">=0.0.0"."all"]
-ASYMMETRIC_KEY_TYPE = true
-ASYMMETRIC_PUBLIC_KEY_SUBTYPE = true
-CRYPTO_AES = true
-CRYPTO_CBC = true
-CRYPTO_CMAC = true
-CRYPTO_DES = true
-CRYPTO_ECB = true
-CRYPTO_HMAC = true
-CRYPTO_MD4 = true  # Needed for EAP MSCHAPV2 authentication
-CRYPTO_MD5 = true
-CRYPTO_SHA1 = true
-CRYPTO_SHA256 = true
-CRYPTO_SHA512 = true
-CRYPTO_USER_API_HASH = true
-CRYPTO_USER_API_SKCIPHER = true
-KEYS = true
-KEY_DH_OPERATIONS = true
-PKCS7_MESSAGE_PARSER = true
-PKCS8_PRIVATE_KEY_PARSER = true
-X509_CERTIFICATE_PARSER = true
-RFKILL = true
+ASYMMETRIC_KEY_TYPE = "y"
+ASYMMETRIC_PUBLIC_KEY_SUBTYPE = "y"
+CRYPTO_AES = "y"
+CRYPTO_CBC = "y"
+CRYPTO_CMAC = "y"
+CRYPTO_DES = "y"
+CRYPTO_ECB = "y"
+CRYPTO_HMAC = "y"
+CRYPTO_MD4 = "y"  # Needed for EAP MSCHAPV2 authentication
+CRYPTO_MD5 = "y"
+CRYPTO_SHA1 = "y"
+CRYPTO_SHA256 = "y"
+CRYPTO_SHA512 = "y"
+CRYPTO_USER_API_HASH = "y"
+CRYPTO_USER_API_SKCIPHER = "y"
+KEYS = "y"
+KEY_DH_OPERATIONS = "y"
+PKCS7_MESSAGE_PARSER = "y"
+PKCS8_PRIVATE_KEY_PARSER = "y"
+X509_CERTIFICATE_PARSER = "y"
+RFKILL = "y"
 
 # nftables: firewall, not related to nft scams
 ["category:nftables".">=3.13.0"."all"]
-NETFILTER = true
-NF_CONNTRACK = true
-NF_TABLES = true
-NF_TABLES_INET = true
-NFT_CT = true
-NFT_LOG = true
-NFT_LIMIT = true
-NFT_MASQ = true
-NFT_NAT = true
-NFT_REJECT = true
-NF_TABLES_IPV4 = true
-NF_REJECT_IPV4 = true
-IP_NF_IPTABLES = true
-IP_NF_FILTER = true
-IP_NF_TARGET_REJECT = true
-IP_NF_NAT = true
-NF_TABLES_IPV6 = true
-NF_REJECT_IPV6 = true
-IP6_NF_IPTABLES = true
-IP6_NF_FILTER = true
-IP6_NF_TARGET_REJECT = true
-IP6_NF_NAT = true
+NETFILTER = "y"
+NF_CONNTRACK = "y"
+NF_TABLES = "y"
+NF_TABLES_INET = "y"
+NFT_CT = "y"
+NFT_LOG = "y"
+NFT_LIMIT = "y"
+NFT_MASQ = "y"
+NFT_NAT = "y"
+NFT_REJECT = "y"
+NF_TABLES_IPV4 = "y"
+NF_REJECT_IPV4 = "y"
+IP_NF_IPTABLES = "y"
+IP_NF_FILTER = "y"
+IP_NF_TARGET_REJECT = "y"
+IP_NF_NAT = "y"
+NF_TABLES_IPV6 = "y"
+NF_REJECT_IPV6 = "y"
+IP6_NF_IPTABLES = "y"
+IP6_NF_FILTER = "y"
+IP6_NF_TARGET_REJECT = "y"
+IP6_NF_NAT = "y"
 ["category:nftables".">=3.13.0 <0.17"."all"]
-NFT_COUNTER = true
+NFT_COUNTER = "y"
 
 # containers: lxc, docker, etc.
 ["category:containers".">=0.0.0"."all"]
-NAMESPACES = true
-NET_NS = true
-PID_NS = true
-IPC_NS = true
-UTS_NS = true
-CGROUPS = true
-CGROUP_CPUACCT = true
-CGROUP_DEVICE = true
-CGROUP_FREEZER = true
-CGROUP_SCHED = true
-CPUSETS = true
-KEYS = true
-VETH = true
-BRIDGE = true  # (also needed for waydroid)
-BRIDGE_NETFILTER = true
-IP_NF_FILTER = true
-IP_NF_TARGET_MASQUERADE = true
-NETFILTER_XT_MATCH_ADDRTYPE = true
-NETFILTER_XT_MATCH_CONNTRACK = true
-NETFILTER_XT_MATCH_IPVS = true
-NETFILTER_XT_MARK = true
-NETFILTER_XT_TARGET_CHECKSUM = true  # Needed for lxc
-IP_NF_NAT = true
-NF_NAT = true
-POSIX_MQUEUE = true
-BLK_DEV_DM = true  # Storage Drivers
-DUMMY = true  # Network Drivers
-# USER_NS = true  # This is already in pmOS kconfig check
-BLK_CGROUP = true  # Optional section
-BLK_DEV_THROTTLING = true  # Optional section
-CGROUP_PERF = true  # Optional section
-NET_SCHED = true # Required by NET_CLS_CGROUP
-NET_CLS_CGROUP = true  # Optional section
-FAIR_GROUP_SCHED = true  # Optional section
-IP_NF_TARGET_REDIRECT = true  # Optional section
-IP_VS = true  # Optional section
-IP_VS_NFCT = true  # Optional section
-IP_VS_PROTO_TCP = true  # Optional section
-IP_VS_PROTO_UDP = true  # Optional section
-IP_VS_RR = true  # Optional section
-# EXT4_FS = true  # This is already in pmOS kconfig check
-EXT4_FS_POSIX_ACL = true  # Optional section
-EXT4_FS_SECURITY = true  # Optional section
+NAMESPACES = "y"
+NET_NS = "y"
+PID_NS = "y"
+IPC_NS = "y"
+UTS_NS = "y"
+CGROUPS = "y"
+CGROUP_CPUACCT = "y"
+CGROUP_DEVICE = "y"
+CGROUP_FREEZER = "y"
+CGROUP_SCHED = "y"
+CPUSETS = "y"
+KEYS = "y"
+VETH = "y"
+BRIDGE = "y"  # (also needed for waydroid)
+BRIDGE_NETFILTER = "y"
+IP_NF_FILTER = "y"
+IP_NF_TARGET_MASQUERADE = "y"
+NETFILTER_XT_MATCH_ADDRTYPE = "y"
+NETFILTER_XT_MATCH_CONNTRACK = "y"
+NETFILTER_XT_MATCH_IPVS = "y"
+NETFILTER_XT_MARK = "y"
+NETFILTER_XT_TARGET_CHECKSUM = "y"  # Needed for lxc
+IP_NF_NAT = "y"
+NF_NAT = "y"
+POSIX_MQUEUE = "y"
+BLK_DEV_DM = "y"  # Storage Drivers
+DUMMY = "y"  # Network Drivers
+# USER_NS = "y"  # This is already in pmOS kconfig check
+BLK_CGROUP = "y"  # Optional section
+BLK_DEV_THROTTLING = "y"  # Optional section
+CGROUP_PERF = "y"  # Optional section
+NET_SCHED = "y" # Required by NET_CLS_CGROUP
+NET_CLS_CGROUP = "y"  # Optional section
+FAIR_GROUP_SCHED = "y"  # Optional section
+IP_NF_TARGET_REDIRECT = "y"  # Optional section
+IP_VS = "y"  # Optional section
+IP_VS_NFCT = "y"  # Optional section
+IP_VS_PROTO_TCP = "y"  # Optional section
+IP_VS_PROTO_UDP = "y"  # Optional section
+IP_VS_RR = "y"  # Optional section
+# EXT4_FS = "y"  # This is already in pmOS kconfig check
+EXT4_FS_POSIX_ACL = "y"  # Optional section
+EXT4_FS_SECURITY = "y"  # Optional section
 ["category:containers".">=3.2"."all"]
-CFS_BANDWIDTH = true  # Optional section
+CFS_BANDWIDTH = "y"  # Optional section
 ["category:containers".">=3.3"."all"]
-CHECKPOINT_RESTORE = true  # Needed for lxc
+CHECKPOINT_RESTORE = "y"  # Needed for lxc
 ["category:containers".">=3.6"."all"]
-MEMCG = true
-DM_THIN_PROVISIONING = true  # Storage Drivers
-SWAP = true
+MEMCG = "y"
+DM_THIN_PROVISIONING = "y"  # Storage Drivers
+SWAP = "y"
 ["category:containers".">=3.6"."x86 x64_64"]
-HUGETLB_PAGE = true
-CGROUP_HUGETLB = true  # Optional section
+HUGETLB_PAGE = "y"
+CGROUP_HUGETLB = "y"  # Optional section
 ["category:containers".">=3.6 <6.1_rc1"."all"]
-MEMCG_SWAP = true
+MEMCG_SWAP = "y"
 ["category:containers".">=3.7 <5.0"."all"]
-NF_NAT_IPV4 = true  # Needed for lxc
-NF_NAT_IPV6 = true  # Needed for lxc
+NF_NAT_IPV4 = "y"  # Needed for lxc
+NF_NAT_IPV6 = "y"  # Needed for lxc
 ["category:containers".">=3.7"."all"]
-VXLAN = true  # Network Drivers
-IP6_NF_TARGET_MASQUERADE = true  # Needed for lxc
+VXLAN = "y"  # Network Drivers
+IP6_NF_TARGET_MASQUERADE = "y"  # Needed for lxc
 ["category:containers".">=3.9"."all"]
-BRIDGE_VLAN_FILTERING = true  # Network Drivers (also for waydroid)
-MACVLAN = true  # Network Drivers
+BRIDGE_VLAN_FILTERING = "y"  # Network Drivers (also for waydroid)
+MACVLAN = "y"  # Network Drivers
 ["category:containers".">=3.13"."all"]
-NFT_COMPAT = true
+NFT_COMPAT = "y"
 ["category:containers".">=3.14"."all"]
-CGROUP_NET_PRIO = true  # Optional section
+CGROUP_NET_PRIO = "y"  # Optional section
 ["category:containers".">=3.18"."all"]
-OVERLAY_FS = true  # Storage Drivers
+OVERLAY_FS = "y"  # Storage Drivers
 ["category:containers".">=3.19"."all"]
-IPVLAN = true  # Network Drivers
-SECCOMP = true  # Optional section
+IPVLAN = "y"  # Network Drivers
+SECCOMP = "y"  # Optional section
 ["category:containers".">=4.4"."all"]
-CGROUP_PIDS = true  # Optional section
+CGROUP_PIDS = "y"  # Optional section
 
 # zram: RAM disk with on-the-fly compression
 ["category:zram".">=0.0.0"."all"]
-ZRAM = true
-ZSMALLOC = true
-SWAP = true
+ZRAM = "y"
+ZSMALLOC = "y"
+SWAP = "y"
 
 ["category:zram"."<6.12"."all"]
-CRYPTO_ZSTD = true
+CRYPTO_ZSTD = "y"
 
 ["category:zram".">=6.12"."all"]
-ZRAM_BACKEND_ZSTD = true
+ZRAM_BACKEND_ZSTD = "y"
 
 # netboot: https://postmarketos.org/netboot
 ["category:netboot".">=0.0.0"."all"]
-BLK_DEV_NBD = true
+BLK_DEV_NBD = "y"
 
 # wireguard: VPN software, also includes options for wg-quick
 ["category:wireguard".">=5.6_rc1"."all"]
-WIREGUARD = true
-IP_ADVANCED_ROUTER = true
-IP_MULTIPLE_TABLES = true
-IPV6_MULTIPLE_TABLES = true
-NF_TABLES = true
-NF_TABLES_IPV4 = true
-NF_TABLES_IPV6 = true
-NFT_CT = true
-NFT_FIB = true
-NFT_FIB_IPV4 = true
-NFT_FIB_IPV6 = true
-NF_CONNTRACK_MARK = true
+WIREGUARD = "y"
+IP_ADVANCED_ROUTER = "y"
+IP_MULTIPLE_TABLES = "y"
+IPV6_MULTIPLE_TABLES = "y"
+NF_TABLES = "y"
+NF_TABLES_IPV4 = "y"
+NF_TABLES_IPV6 = "y"
+NFT_CT = "y"
+NFT_FIB = "y"
+NFT_FIB_IPV4 = "y"
+NFT_FIB_IPV6 = "y"
+NF_CONNTRACK_MARK = "y"
 
 # filesystems
 ["category:filesystems".">=0.0.0"."all"]
-BTRFS_FS = true
-EXFAT_FS = true
-EXT4_FS = true
-F2FS_FS = true
-UDF_FS = true
-XFS_FS = true
+BTRFS_FS = "y"
+EXFAT_FS = "y"
+EXT4_FS = "y"
+F2FS_FS = "y"
+UDF_FS = "y"
+XFS_FS = "y"
 
 # usb_gadgets
 ["category:usb_gadgets".">=0.0.0"."all"]
 # disable legacy gadgets
-USB_ETH = false
-USB_FUNCTIONFS = false
-USB_MASS_STORAGE = false
-USB_G_SERIAL = false
+USB_ETH = "n"
+USB_FUNCTIONFS = "n"
+USB_MASS_STORAGE = "n"
+USB_G_SERIAL = "n"
 # enable configfs gadgets
-USB_CONFIGFS_ACM = true  # Serial gadget for debug-shell
-USB_CONFIGFS_MASS_STORAGE = true  # Mass storage gadget for debug-shell
-USB_CONFIGFS_NCM = true  # USB networking via NCM
-USB_CONFIGFS_RNDIS = true  # USB networking via RNDIS (legacy)
+USB_CONFIGFS_ACM = "y"  # Serial gadget for debug-shell
+USB_CONFIGFS_MASS_STORAGE = "y"  # Mass storage gadget for debug-shell
+USB_CONFIGFS_NCM = "y"  # USB networking via NCM
+USB_CONFIGFS_RNDIS = "y"  # USB networking via RNDIS (legacy)
 
 # community_various: Various options that were not categorized properly due to
 # inflexibility of previous kconfigcheck related code. We should move these to
 # proper categories above and/or invent new categories with meaningful names.
 # >> Do not add more here!! <<
 ["category:community_various".">=0.0.0"."all"]
-BINFMT_MISC = true  # register binary formats
-NETWORK_FILESYSTEMS = true  # Required by CIFS
-CIFS = true  # mount SMB shares
-LEDS_TRIGGER_PATTERN = true  # feedbackd
-LEDS_TRIGGER_TIMER = true  # hfd-service
-NETFILTER_XT_MATCH_MARK = true  # e.g. HashiCorp Nomad
-NETFILTER_XT_MATCH_MULTIPORT = true  # e.g. HashiCorp Nomad
-NETFILTER_XT_MATCH_STATISTIC = true  # kube-proxy
-NETFILTER_XT_MATCH_TCPMSS = true  # change MTU e.g. for Wireguard
-NETFILTER_XT_TARGET_TCPMSS = true  # change MTU e.g. for Wireguard
+BINFMT_MISC = "y"  # register binary formats
+NETWORK_FILESYSTEMS = "y"  # Required by CIFS
+CIFS = "y"  # mount SMB shares
+LEDS_TRIGGER_PATTERN = "y"  # feedbackd
+LEDS_TRIGGER_TIMER = "y"  # hfd-service
+NETFILTER_XT_MATCH_MARK = "y"  # e.g. HashiCorp Nomad
+NETFILTER_XT_MATCH_MULTIPORT = "y"  # e.g. HashiCorp Nomad
+NETFILTER_XT_MATCH_STATISTIC = "y"  # kube-proxy
+NETFILTER_XT_MATCH_TCPMSS = "y"  # change MTU e.g. for Wireguard
+NETFILTER_XT_TARGET_TCPMSS = "y"  # change MTU e.g. for Wireguard
 # TODO = Depends on SUSPEND which is not enabled for some devices
-# PM_WAKELOCKS = true  # Sxmo
-UCLAMP_TASK = true  # Scheduler hints
-UCLAMP_TASK_GROUP = true  # Scheduler hints
-RT_GROUP_SCHED = false  # https://gitlab.postmarketos.org/postmarketOS/pmaports/-/issues/2652
-DM_INTEGRITY = true  # Device-mapper integrity target
+# PM_WAKELOCKS = "y"  # Sxmo
+UCLAMP_TASK = "y"  # Scheduler hints
+UCLAMP_TASK_GROUP = "y"  # Scheduler hints
+RT_GROUP_SCHED = "n"  # https://gitlab.postmarketos.org/postmarketOS/pmaports/-/issues/2652
+DM_INTEGRITY = "y"  # Device-mapper integrity target
 
 # uefi: proper modern booting
 ["category:uefi".">=0.0.0"."all"]
-EFI_STUB = true
-EFI = true
-DMI = true
-PSTORE = true
-EFI_ESRT = true
-EFI_VARS_PSTORE = true
-EFI_RUNTIME_WRAPPERS = true
-VFAT_FS = true
-NLS_ASCII = true
+EFI_STUB = "y"
+EFI = "y"
+DMI = "y"
+PSTORE = "y"
+EFI_ESRT = "y"
+EFI_VARS_PSTORE = "y"
+EFI_RUNTIME_WRAPPERS = "y"
+VFAT_FS = "y"
+NLS_ASCII = "y"
 ["category:uefi".">=0.0.0"."x86_64"]
-EFI_MIXED = true
+EFI_MIXED = "y"
 ["category:uefi".">=0.0.0"."aarch64 armv7"]
-EFI_GENERIC_STUB = true
-EFI_PARAMS_FROM_FDT = true
+EFI_GENERIC_STUB = "y"
+EFI_PARAMS_FROM_FDT = "y"
 ["category:uefi".">=6.1.0"."aarch64"]
 # Required EFI booting compressed kernels on this arch
-EFI_ZBOOT = true
+EFI_ZBOOT = "y"
 # Devices that used to run windows may still want to access
 # the windows partition (e.g. to retrieve firmware on WoA)
 ["category:uefi".">=5.15"."aarch64 x86_64"]
-NTFS3_FS = true
+NTFS3_FS = "y"
 
 ["category:input".">=0.0.0"."all"]
-BT_HIDP = true  # Bluetooth HID
-HIDRAW = true  # /dev/hidraw* support
-INPUT_UINPUT = true  # buffyboard
-INPUT_JOYSTICK = true # Required by CONFIG_JOYSTICK_XPAD_FF
-JOYSTICK_XPAD = true  # Xbox controller
-JOYSTICK_XPAD_FF = true  # Xbox controller force-feedback
-JOYSTICK_XPAD_LEDS = true  # Xbox controller LEDs
-UHID = true  # User-space HID, e.g. Bluetooth
-USB_ANNOUNCE_NEW_DEVICES = true  # dmesg messages when connecting device
-USB_HIDDEV = true  # /dev/usb/hiddevX support
-USB_PRINTER = true  # printers
+BT_HIDP = "y"  # Bluetooth HID
+HIDRAW = "y"  # /dev/hidraw* support
+INPUT_UINPUT = "y"  # buffyboard
+INPUT_JOYSTICK = "y" # Required by CONFIG_JOYSTICK_XPAD_FF
+JOYSTICK_XPAD = "y"  # Xbox controller
+JOYSTICK_XPAD_FF = "y"  # Xbox controller force-feedback
+JOYSTICK_XPAD_LEDS = "y"  # Xbox controller LEDs
+UHID = "y"  # User-space HID, e.g. Bluetooth
+USB_ANNOUNCE_NEW_DEVICES = "y"  # dmesg messages when connecting device
+USB_HIDDEV = "y"  # /dev/usb/hiddevX support
+USB_PRINTER = "y"  # printers
 # All the special HID drivers that Fedora kernel enables
-HID_A4TECH = true
-HID_ACCUTOUCH = true
-HID_ACRUX_FF = true
-HID_ACRUX = true
-HID_ALPS = true
-HID_APPLEIR = true
-HID_APPLE = true
-HID_AUREAL = true
-HID_BATTERY_STRENGTH = true
-HID_BELKIN = true
-HID_BETOP_FF = true
-HID_BIGBEN_FF = true
-HID_CHERRY = true
-HID_CHICONY = true
-HID_CMEDIA = true
-HID_CORSAIR = true
-HID_COUGAR = true
-HID_CP2112 = true
-HID_CREATIVE_SB0540 = true
-HID_CYPRESS = true
-HID_DRAGONRISE = true
-HID_ELAN = true
-HID_ELECOM = true
-HID_ELO = true
-HID_EMS_FF = true
-HID_EZKEY = true
-HID_FT260 = true
-HID_GEMBIRD = true
-HID_GENERIC = true
-HID_GFRM = true
-HID_GLORIOUS = true
-HID_GREENASIA = true
-HID_GT683R = true
-HID_GYRATION = true
-HID_HOLTEK = true
-HID_ICADE = true
-HID_ITE = true
-HID_JABRA = true
-HID_KENSINGTON = true
-HID_KEYTOUCH = true
-HID_KYE = true
-HID_LCPOWER = true
-HID_LED = true
-HID_LETSKETCH = true
-HID_LOGITECH_DJ = true
-HID_LOGITECH_HIDPP = true
-HID_LOGITECH = true
-HID_MACALLY = true
-HID_MAGICMOUSE = true
-HID_MALTRON = true
-HID_MAYFLASH = true
-HID_MCP2221 = true
-HID_MEGAWORLD_FF = true
-HID_MICROSOFT = true
-HID_MONTEREY = true
-HID_MULTITOUCH = true
-HID_NINTENDO = true
-HID_NTI = true
-HID_NTRIG = true
-HID_ORTEK = true
-HID_PANTHERLORD = true
-HID_PENMOUNT = true
-HID_PETALYNX = true
-HID_PICOLCD_BACKLIGHT = true
-LCD_CLASS_DEVICE = true # Required by HID_PICOLCD_LCD
-HID_PICOLCD_LCD = true
-HID_PICOLCD_LEDS = true
-HID_PICOLCD = true
-HID_PID = true
-HID_PLANTRONICS = true
-HID_PLAYSTATION = true
-HID_PRIMAX = true
-HID_PRODIKEYS = true
-HID_PXRC = true
-HID_RAZER = true
-HID_RETRODE = true
-HID_RMI = true
-HID_ROCCAT = true
-HID_SAITEK = true
-HID_SAMSUNG = true
-HID_SEMITEK = true
-HID_SENSOR_ACCEL_3D = true
-HID_SENSOR_ALS = true
-HID_SENSOR_CUSTOM_INTEL_HINGE = true
-HID_SENSOR_DEVICE_ROTATION = true
-HID_SENSOR_GYRO_3D = true
-HID_SENSOR_HUB = true
-HID_SENSOR_HUMIDITY = true
-HID_SENSOR_IIO_COMMON = true
-HID_SENSOR_IIO_TRIGGER = true
-HID_SENSOR_INCLINOMETER_3D = true
-HID_SENSOR_MAGNETOMETER_3D = true
-HID_SENSOR_TEMP = true
-HID_SIGMAMICRO = true
-HID_SMARTJOYPLUS = true
-HID_SONY = true
-HID_SPEEDLINK = true
-HID_STEAM = true
-HID_STEELSERIES = true
-HID_SUNPLUS = true
-HID_THINGM = true
-HID_THRUSTMASTER = true
-HID_TIVO = true
-HID_TOPRE = true
-HID_TOPSEED = true
-HID_TWINHAN = true
-HID_U2FZERO = true
-HID_UCLOGIC = true
-HID_UDRAW_PS3 = true
-HID_VIEWSONIC = true
-HID_VIVALDI = true
-HID_WACOM = true
-HID_WALTOP = true
-HID_WIIMOTE = true
-HID_XIAOMI = true
-HID_XINMO = true
-HID_ZEROPLUS = true
-HID_ZYDACRON = true
+HID_A4TECH = "y"
+HID_ACCUTOUCH = "y"
+HID_ACRUX_FF = "y"
+HID_ACRUX = "y"
+HID_ALPS = "y"
+HID_APPLEIR = "y"
+HID_APPLE = "y"
+HID_AUREAL = "y"
+HID_BATTERY_STRENGTH = "y"
+HID_BELKIN = "y"
+HID_BETOP_FF = "y"
+HID_BIGBEN_FF = "y"
+HID_CHERRY = "y"
+HID_CHICONY = "y"
+HID_CMEDIA = "y"
+HID_CORSAIR = "y"
+HID_COUGAR = "y"
+HID_CP2112 = "y"
+HID_CREATIVE_SB0540 = "y"
+HID_CYPRESS = "y"
+HID_DRAGONRISE = "y"
+HID_ELAN = "y"
+HID_ELECOM = "y"
+HID_ELO = "y"
+HID_EMS_FF = "y"
+HID_EZKEY = "y"
+HID_FT260 = "y"
+HID_GEMBIRD = "y"
+HID_GENERIC = "y"
+HID_GFRM = "y"
+HID_GLORIOUS = "y"
+HID_GREENASIA = "y"
+HID_GT683R = "y"
+HID_GYRATION = "y"
+HID_HOLTEK = "y"
+HID_ICADE = "y"
+HID_ITE = "y"
+HID_JABRA = "y"
+HID_KENSINGTON = "y"
+HID_KEYTOUCH = "y"
+HID_KYE = "y"
+HID_LCPOWER = "y"
+HID_LED = "y"
+HID_LETSKETCH = "y"
+HID_LOGITECH_DJ = "y"
+HID_LOGITECH_HIDPP = "y"
+HID_LOGITECH = "y"
+HID_MACALLY = "y"
+HID_MAGICMOUSE = "y"
+HID_MALTRON = "y"
+HID_MAYFLASH = "y"
+HID_MCP2221 = "y"
+HID_MEGAWORLD_FF = "y"
+HID_MICROSOFT = "y"
+HID_MONTEREY = "y"
+HID_MULTITOUCH = "y"
+HID_NINTENDO = "y"
+HID_NTI = "y"
+HID_NTRIG = "y"
+HID_ORTEK = "y"
+HID_PANTHERLORD = "y"
+HID_PENMOUNT = "y"
+HID_PETALYNX = "y"
+HID_PICOLCD_BACKLIGHT = "y"
+LCD_CLASS_DEVICE = "y" # Required by HID_PICOLCD_LCD
+HID_PICOLCD_LCD = "y"
+HID_PICOLCD_LEDS = "y"
+HID_PICOLCD = "y"
+HID_PID = "y"
+HID_PLANTRONICS = "y"
+HID_PLAYSTATION = "y"
+HID_PRIMAX = "y"
+HID_PRODIKEYS = "y"
+HID_PXRC = "y"
+HID_RAZER = "y"
+HID_RETRODE = "y"
+HID_RMI = "y"
+HID_ROCCAT = "y"
+HID_SAITEK = "y"
+HID_SAMSUNG = "y"
+HID_SEMITEK = "y"
+HID_SENSOR_ACCEL_3D = "y"
+HID_SENSOR_ALS = "y"
+HID_SENSOR_CUSTOM_INTEL_HINGE = "y"
+HID_SENSOR_DEVICE_ROTATION = "y"
+HID_SENSOR_GYRO_3D = "y"
+HID_SENSOR_HUB = "y"
+HID_SENSOR_HUMIDITY = "y"
+HID_SENSOR_IIO_COMMON = "y"
+HID_SENSOR_IIO_TRIGGER = "y"
+HID_SENSOR_INCLINOMETER_3D = "y"
+HID_SENSOR_MAGNETOMETER_3D = "y"
+HID_SENSOR_TEMP = "y"
+HID_SIGMAMICRO = "y"
+HID_SMARTJOYPLUS = "y"
+HID_SONY = "y"
+HID_SPEEDLINK = "y"
+HID_STEAM = "y"
+HID_STEELSERIES = "y"
+HID_SUNPLUS = "y"
+HID_THINGM = "y"
+HID_THRUSTMASTER = "y"
+HID_TIVO = "y"
+HID_TOPRE = "y"
+HID_TOPSEED = "y"
+HID_TWINHAN = "y"
+HID_U2FZERO = "y"
+HID_UCLOGIC = "y"
+HID_UDRAW_PS3 = "y"
+HID_VIEWSONIC = "y"
+HID_VIVALDI = "y"
+HID_WACOM = "y"
+HID_WALTOP = "y"
+HID_WIIMOTE = "y"
+HID_XIAOMI = "y"
+HID_XINMO = "y"
+HID_ZEROPLUS = "y"
+HID_ZYDACRON = "y"
 ["category:input".">=0.0.0"."x86 x86_64"]
-HID_LENOVO = true
+HID_LENOVO = "y"
 ["category:input".">=6.3"."all"]
-HID_EVISION = true
-HID_SUPPORT = true
+HID_EVISION = "y"
+HID_SUPPORT = "y"
 ["category:input".">=6.5"."all"]
-HID_NVIDIA_SHIELD = true
+HID_NVIDIA_SHIELD = "y"
 ["category:input".">=6.6"."all"]
-HID_GOOGLE_STADIA_FF = true
+HID_GOOGLE_STADIA_FF = "y"
 ["category:input".">=6.10"."all"]
-HID_WINWING = true
+HID_WINWING = "y"
 ["category:input".">=6.12"."all"]
-HID_GOODIX_SPI = true
+HID_GOODIX_SPI = "y"
 ["category:input".">=0.0.0"."riscv64 x86 x86_64"]
-HID_BPF = true
+HID_BPF = "y"
 ["category:input".">=6.4.0"."aarch64"]
-HID_BPF = true
+HID_BPF = "y"
 ["category:input".">=4.15.0"."all"]
-BPF_JIT = true # Required by HID_BPF
+BPF_JIT = "y" # Required by HID_BPF
 
 ["category:usb".">=0.0.0"."all"]
-DRM_UDL = true  # DisplayLink - connecting displays via USB
-SND_USB_AUDIO = true  # USB audio devices
-USB_SERIAL_CP210X = true  # USB serial console
-USB_STORAGE = true  # USB mass storage devices
-USB_RTL8152 = true  # USB Ethernet
+DRM_UDL = "y"  # DisplayLink - connecting displays via USB
+SND_USB_AUDIO = "y"  # USB audio devices
+USB_SERIAL_CP210X = "y"  # USB serial console
+USB_STORAGE = "y"  # USB mass storage devices
+USB_RTL8152 = "y"  # USB Ethernet
 
 ["category:virt".">=0.0.0"."all"]
-HW_RANDOM_VIRTIO = true
-KVM = true
-VIRTUALIZATION = true
+HW_RANDOM_VIRTIO = "y"
+KVM = "y"
+VIRTUALIZATION = "y"
 
 ["category:debug".">=0.0.0"."all"]
-FTRACE = true # Required by DEBUG_FTRACE
-FUNCTION_TRACER = true # Required by DEBUG_FTRACE
-DYNAMIC_DEBUG = true  # Enable debug dynamically
-DYNAMIC_FTRACE = true  # Enable function tracing dynamically
+FTRACE = "y" # Required by DEBUG_FTRACE
+FUNCTION_TRACER = "y" # Required by DEBUG_FTRACE
+DYNAMIC_DEBUG = "y"  # Enable debug dynamically
+DYNAMIC_FTRACE = "y"  # Enable function tracing dynamically
 
 # Device specific settings to prevent regressions
 ["category:librem5".">=0.0.0"."aarch64"]
-RS9116_FLASH_MODE = false  # pma!2059
+RS9116_FLASH_MODE = "n"  # pma!2059
 ["category:pinephonepro".">=0.0.0"."aarch64"]
-LEDS_GROUP_MULTICOLOR = true  # pma!5991
+LEDS_GROUP_MULTICOLOR = "y"  # pma!5991