salt-pillar/base/sysctl/cp15_barrier.sls

# -*- coding: utf-8 -*-
# vim: ft=yaml
---
{%- if grains.get('cpuarch') in ['aarch64'] %}
sysctl:
  lookup:
    config:
      location: '/etc/sysctl.d'
  params:
    abi.cp15_barrier:
      value: 2
{%- endif %}