From 23049f9c31f030829980b7e32e424435572ae9ac Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Wed, 9 Dec 2020 12:45:55 +0000
Subject: [PATCH] kernel: enable kernel keyring by default on !SMALL_FLASH

Enable CONFIG_KEYS by default on systems which are not marked as
flash-space constraint by the 'small_flash' feature.
CONFIG_KEYS is required by Docker, enabling it in our kernel allows
users to run Docker on stock OpenWrt.
It is also used of by some network file systems (such as NFSv4) to
store credentials as well as UID/GID mappings.

Adds about 50kB to vmlinux on ath79/generic (~18kB compressed)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
---
 config/Config-kernel.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/Config-kernel.in b/config/Config-kernel.in
index b5eba78719db..3f013aa2b21f 100644
--- a/config/Config-kernel.in
+++ b/config/Config-kernel.in
@@ -532,7 +532,7 @@ endif
 
 config KERNEL_KEYS
 	bool "Enable kernel access key retention support"
-	default n
+	default !SMALL_FLASH
 
 config KERNEL_PERSISTENT_KEYRINGS
 	bool "Enable kernel persistent keyrings"
-- 
2.30.2