diff --git a/br-ext-chip-goke/board/gk7205v200/gk7205v200.generic.config b/br-ext-chip-goke/board/gk7205v200/gk7205v200.generic.config
index 3e2279ab29..271efd1dac 100644
--- a/br-ext-chip-goke/board/gk7205v200/gk7205v200.generic.config
+++ b/br-ext-chip-goke/board/gk7205v200/gk7205v200.generic.config
@@ -806,7 +806,15 @@ CONFIG_BQL=y
 # CONFIG_AF_KCM is not set
 # CONFIG_STREAM_PARSER is not set
 CONFIG_WIRELESS=y
-CONFIG_CFG80211=m
+# #2437 built this board's crypto helpers in and left 8KB of headroom, saying in
+# as many words that the fleet-wide majestic drift would take it again; it did,
+# one day later. cfg80211 is the cheaper half of the only lever #2420 found
+# left: built in it moves 88KB out of the size-capped rootfs for 62KB of uImage,
+# which has room, while mac80211 and mt7601u stay modules -- moving those too
+# would trade "one commit from red on rootfs" for the same on uImage. The cost
+# worth stating is RAM: the wireless core is now resident whether a dongle is
+# ever plugged in or not. Same change #2440 made for gk7205v300.
+CONFIG_CFG80211=y
 # CONFIG_NL80211_TESTMODE is not set
 # CONFIG_CFG80211_DEVELOPER_WARNINGS is not set
 CONFIG_CFG80211_DEFAULT_PS=y
diff --git a/br-ext-chip-goke/board/gk7205v200/gk7605v100.generic.config b/br-ext-chip-goke/board/gk7205v200/gk7605v100.generic.config
index 58ffec5a8e..192c4dadc6 100644
--- a/br-ext-chip-goke/board/gk7205v200/gk7605v100.generic.config
+++ b/br-ext-chip-goke/board/gk7205v200/gk7605v100.generic.config
@@ -702,7 +702,15 @@ CONFIG_BQL=y
 # CONFIG_AF_KCM is not set
 # CONFIG_STREAM_PARSER is not set
 CONFIG_WIRELESS=y
-CONFIG_CFG80211=m
+# #2437 built this board's crypto helpers in and left 8KB of headroom, saying in
+# as many words that the fleet-wide majestic drift would take it again; it did,
+# one day later. cfg80211 is the cheaper half of the only lever #2420 found
+# left: built in it moves 88KB out of the size-capped rootfs for 62KB of uImage,
+# which has room, while mac80211 and mt7601u stay modules -- moving those too
+# would trade "one commit from red on rootfs" for the same on uImage. The cost
+# worth stating is RAM: the wireless core is now resident whether a dongle is
+# ever plugged in or not. Same change #2440 made for gk7205v300.
+CONFIG_CFG80211=y
 # CONFIG_NL80211_TESTMODE is not set
 # CONFIG_CFG80211_DEVELOPER_WARNINGS is not set
 CONFIG_CFG80211_DEFAULT_PS=y
diff --git a/br-ext-chip-hisilicon/board/hi3516cv200/hi3516cv200.generic.config b/br-ext-chip-hisilicon/board/hi3516cv200/hi3516cv200.generic.config
index 68f8da5fb6..fbddf83d76 100644
--- a/br-ext-chip-hisilicon/board/hi3516cv200/hi3516cv200.generic.config
+++ b/br-ext-chip-hisilicon/board/hi3516cv200/hi3516cv200.generic.config
@@ -1091,14 +1091,18 @@ CONFIG_MT7601U=m
 # CONFIG_WLAN_VENDOR_RALINK is not set
 CONFIG_WLAN_VENDOR_REALTEK=y
 # CONFIG_RTL8187 is not set
-CONFIG_RTL_CARDS=m
-CONFIG_RTL8192CU=m
-CONFIG_RTLWIFI=m
-CONFIG_RTLWIFI_USB=m
-CONFIG_RTLWIFI_DEBUG=y
-CONFIG_RTL8192C_COMMON=m
-CONFIG_RTL8XXXU=m
-# CONFIG_RTL8XXXU_UNTESTED is not set
+# Both of these wait on firmware no package in this tree installs. rtl8192cu
+# asks for rtlwifi/rtl8192cufw*.bin; rtl8xxxu, with UNTESTED off, is RTL8723AU
+# only and asks for rtlwifi/rtl8723aufw*.bin. The only Wi-Fi blobs on this image
+# are mediatek/mt7601u.bin and rtlwifi/rtl8188eufw.bin, so neither could finish
+# probing, and nothing modprobes them either -- /etc/wireless/usb is the one
+# entry point and names mt7601u and 8188eu. That was 350KB of .ko on a rootfs
+# 4KB over its cap, and RTLWIFI_DEBUG=y is why rtlwifi.ko was as big as it was.
+# Same argument as #2404 and #2410. R8188EU below stays: rtl8188eufw.bin is the
+# firmware it requests, and it is the only symbol here selecting WIRELESS_EXT
+# and WEXT_PRIV, which the out-of-tree drivers a camera may add still need.
+# CONFIG_RTL_CARDS is not set
+# CONFIG_RTL8XXXU is not set
 # CONFIG_WLAN_VENDOR_RSI is not set
 # CONFIG_WLAN_VENDOR_ST is not set
 # CONFIG_WLAN_VENDOR_TI is not set