summaryrefslogtreecommitdiff
path: root/packages
AgeCommit message (Collapse)Author
2024-10-06Merge branch 'vyos:current' into currentdd
2024-10-06T6754: Ignore everyhting under packages folder via .gitignoreChristian Breunig
2024-10-02Merge branch 'vyos:current' into currentdd
2024-10-02T6754: Delete Jenkins build packagesViacheslav Hletenko
2024-09-25Merge branch 'vyos:current' into currentdd
2024-09-25T861: sign all Kernel modules with an ephemeral keyChristian Breunig
The shim review board (which is the secure boot base loader) recommends using ephemeral keys when signing the Linux Kernel. This commit enables the Kernel build system to generate a one-time ephemeral key that is used to: * sign all build-in Kernel modules * sign all other out-of-tree Kernel modules The key lives in /tmp and is destroyed after the build container exits and is named: "VyOS build time autogenerated kernel key". In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it unable to load any Kernel Module to the image that is NOT signed by the ephemeral key.
2024-09-22Kernel: T5887: disable various unused/not needed debug optionsChristian Breunig
2024-09-21Merge branch 'vyos:current' into currentdd
2024-09-21ethtool: T6729: upgrade to 6.10 to make use of more --json optionsChristian Breunig
Same as T6078 but we now wan't to make use of ethtool --json eth0 to drop out own text based parsing of ethtool options in [1]. This is the base for moving to a better, machine readable interface 1: https://github.com/vyos/vyos-1x/blob/e47d4fd385631236da68/python/vyos/ethtool.py#L77-L105
2024-09-17Merge branch 'vyos:current' into currentdd
2024-09-16Merge pull request #764 from c-po/secure-bootChristian Breunig
Kernel: T861: use find over ls when probing for Kernel signing public keys
2024-09-16Kernel: T861: use find over ls when probing for Kernel signing public keysChristian Breunig
2024-09-16Merge branch 'vyos:current' into currentdd
2024-09-16Merge pull request #763 from c-po/secure-bootViacheslav Hletenko
T861: add UEFI Secure Boot support
2024-09-14T861: add UEFI Secure Boot supportChristian Breunig
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux Kernel and enforces module signing. This results in an additional security layer where untrusted (unsigned) Kernel modules can no longer be loaded into the live system. NOTE: This commit will not work unless signing keys are present. Arbitrary keys can be generated using instructions found in: data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
2024-09-14Kernel: T5887: cleanup Debian postinst files after package buildChristian Breunig
2024-09-14mellanox: T6231: execute build script with sudoChristian Breunig
2024-09-09Merge branch 'vyos:current' into currentdd
2024-09-07Kernel: T861: remove superfluous architecture from Kernel stringChristian Breunig
2024-09-06T6703: add support for amd pstate driverNicolas Vollmar
2024-08-26Merge branch 'vyos:current' into currentdd
2024-08-26Merge pull request #657 from rafaelgaspar/add-thunderbolt-netChristian Breunig
linux-kernel: T6485: build modules for thunderbolt and thunderbolt-net
2024-08-26Merge branch 'vyos:current' into currentdd
2024-08-24T6231: update OFED version and fix build scriptRageLtMan
Push OFED to 24.07-0.6.1.0 Replace bash syntax for conditional check with sh syntax in OFED build script.
2024-08-20linux-kernel: T6485: build modules for thunderbolt and thunderbolt-netRafael Antunes
2024-08-12Merge branch 'vyos:current' into currentdd
2024-08-11Kernel: T5887: update Linux Kernel to v6.6.45Christian Breunig
2024-08-07Merge branch 'vyos:current' into currentdd
2024-08-07podman: T6635: add missing dependency on golang-github-containers-commonNicolas Vollmar
This is required as the dependency will add /etc/containers/policy.json
2024-08-04podman: T6598: add fuse-overlayfs runtime dependencyChristian Breunig
Dependency already exists in vyos-1x for live-system, but it does not hurt to also define the dependency here where it's needed by the filesystem layer.
2024-08-01Merge branch 'vyos:current' into currentdd
2024-07-30ddclient: T5792: Use Debian build from TrixieIndrajit Raychaudhuri
As part of "T5792: Upgrade to ddclient 3.11.2" in commit 368b89ef056, ddclient was built using build system from Debian Salsa and source code from upstream GitHub. This was subsequently modified in commit 7f7030d9281 to use both build system and source code from Debian Salsa. Now that Debian finally has ddclient 3.11.2 release, we can use the release tag to build the package.
2024-07-27Merge branch 'vyos:current' into currentdd
2024-07-26podman: T6598: add libgpgme11 runtime dependencyChristian Breunig
2024-07-25Merge branch 'vyos:current' into currentdd
2024-07-25Merge pull request #665 from sempervictus/feature/mellanox_ofed_driversChristian Breunig
T6231: Mellanox OFED
2024-07-25mellanox: T6231: we do not need to build all packages, delete all unused onesChristian Breunig
2024-07-25mellanox: T6231: add missing KERNEL_SUFFIX for module installation pathChristian Breunig
All VyOS kernel modules must live in the appropriate module directory, example: /lib/modules/6.6.41-amd64-vyos/ In addition we do not abbreviate script options to make reading easier, without call --help all the time.
2024-07-25Kernel: T6231: verify mellanox driver source by SHA1 hashChristian Breunig
2024-07-25Kernel: T6231: update .gitignore for mellanox driversChristian Breunig
2024-07-25Merge branch 'vyos:current' into currentdd
2024-07-25podman: T6598: add search PATH for GoChristian Breunig
2024-07-24Merge branch 'vyos:current' into currentdd
2024-07-24Merge pull request #710 from vyos/revert-704-frr-ospfd-ldp-syncChristian Breunig
Revert "frr: T6600: apply pending upstream patch for ospfd ldp-sync"
2024-07-24Revert "frr: T6600: apply pending upstream patch for ospfd ldp-sync"Christian Breunig
2024-07-23podman: T6598: add custom podman build for version 4.9.5Christian Breunig
2024-07-22Merge branch 'vyos:current' into currentdd
2024-07-22Merge pull request #704 from c-po/frr-ospfd-ldp-syncChristian Breunig
frr: T6600: apply pending upstream patch for ospfd ldp-sync
2024-07-21frr: T6600: apply pending upstream patch for ospfd ldp-syncChristian Breunig
2024-07-20hostapd: T6597: update hostapd versionChristian Breunig
Using a discrete commit ID as there has not been a release in a longer time.
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-21 00:57:14 +0000