My current production application stack runs on Ubuntu 18.04 on a intel device. The device is very busy processing live video so to get back some cycles I disabled all mitigations due to the various Intel processor bugs, like so:
GRUB_CMDLINE_LINUX_DEFAULT=“noresume noibrs noibpb nopti nospectre_v2 nospectre_v1 l1tf=off nospec_store_bypass_disable no_stf_barrier mds=off mitigations=off”
This decreased CPU loading almost 24% for my use-case and made the device performant enough for my payload.
Where does one set the same parameters for the BalenaOS kernel ?