CONFIG_DEVTMPFS CONFIG_CGROUPS (it is allowed to disable all controllers but some optional statistics-gathering capability will be lost) CONFIG_INOTIFY_USER CONFIG_SIGNALFD CONFIG_TIMERFD CONFIG_EPOLL CONFIG_NET CONFIG_SYSFS CONFIG_PROC_FS CONFIG_FHANDLE CONFIG_CRYPTO_USER_API_HASH CONFIG_CRYPTO_HMAC CONFIG_CRYPTO_SHA256 CONFIG_SYSFS_DEPRECATED=n CONFIG_UEVENT_HELPER_PATH="" CONFIG_FW_LOADER_USER_HELPER=n CONFIG_DMIID (if applicable to your target system) CONFIG_BLK_DEV_BSG additional symlinks in /dev/disk/ and /dev/tape for SCSI CONFIG_NET_NS CONFIG_DEVPTS_MULTIPLE_INSTANCES (n/a for kernel 4.9 or higher) CONFIG_USER_NS for PrivateUsers= CONFIG_IPV6 "Optional but strongly recommended" CONFIG_AUTOFS4_FS "Optional but strongly recommended" CONFIG_TMPFS_XATTR "Optional but strongly recommended" CONFIG_TMPFS_POSIX_ACL "Optional but strongly recommended" CONFIG_EXT4_POSIX_ACL "Optional but strongly recommended" CONFIG_SECCOMP "Optional but strongly recommended" CONFIG_SECCOMP_FILTER "Optional but strongly recommended" CONFIG_CHECKPOINT_RESTORE "Optional but strongly recommended" CONFIG_CGROUP_SCHED for CPUShares= CONFIG_FAIR_GROUP_SCHED for CPUShares= CONFIG_CFS_BANDWIDTH for CPUQuota= CONFIG_RT_GROUP_SCHED=n unless you know what you're doing