vyos-build.git/Makefile, branch rolling

Testsuite: T861: boot VyOS CA signed images as-is in Secure Boot test

2026-10-05T21:06:19+00:00

The Secure Boot test always disabled Secure Boot in the UEFI and enrolled a Machine Owner Key. That only applies to images signed with a custom certificate - an image signed by the VyOS CA is already trusted and must boot without any firmware changes. If the custom signing key pair is present in the build tree, the MOK workflow is used as before. Otherwise the image boots with Secure Boot enabled from the start, and the Kernel signature is verified against the VyOS CA issuer and signer via "show secure-boot detail", which requires a matching vyos-1x. The make target is renamed from testsb to test-secure-boot.

T9269: add OCI container image test

2026-09-07T15:31:21+00:00

Add scripts/check-oci-container, a container adapted counterpart to check-qemu-install. It imports the OCI tarball produced by scripts/iso-to-oci, verifies the containerlab healthcheck survives the import, boots the image with systemd as PID 1 and then drives the VyOS CLI to run basic operational and configuration mode tests plus assertions on the rootfs modifications done by iso-to-oci (locale, banner, /config symlink, removed podman runtime and removed container CLI nodes). Wire it up as "make test-oci", which picks up the newest tarball matching the host architecture. The boot wait polls for the vyos user in addition to vyos-router, as the unit reports itself active before the default configuration has been committed.

Makefile: T9269: extend "make test-suite" to cover more tests

2026-09-01T13:37:23+00:00

oci: T9269: compress container image with XZ

2026-09-01T13:37:23+00:00

Can be compresed with up to 75% ratio.

Makefile: T9014: add test-suite target to run core testcases sequentially

2026-08-17T19:23:45+00:00

Add test-suite, which runs test-interfaces, test-no-interfaces-no-vpp, testc, testraid, and testifname as separate $(MAKE) invocations so it aborts on the first failing testcase instead of running all of them regardless of earlier failures.

Makefile: T9014: unify test target CPU count and memory size

2026-08-17T19:04:34+00:00

Test targets had inconsistent --cpu (2/4) and --memory (7/8) values hardcoded inline. Standardize on TEST_CPUS and TEST_MEM variables: TEST_CPUS is min(nproc, 4) so hosts with fewer than 4 CPUs don't request more vCPUs than exist; TEST_MEM is 8GB when the host has at least 10GB of RAM, otherwise 4GB.

Makefile: T9014: pass --uefi to check-qemu-install only on arm64 hosts

2026-08-17T19:04:19+00:00

check-qemu-install now requires --uefi on arm64/aarch64. Add a UEFI_FLAG variable derived from ARCH so test targets that didn't already hardcode --uefi pick it up on arm64 while staying unchanged on amd64.

Testsuite: T3871: add testifname Makefile target

2026-08-06T19:54:53+00:00

Testcase removes NIC definition entirely and on a second NIC drops only the hw-id node. Testcase is there to verify proper ordering which simulates a NIC replacement.

Makefile: T9099: stop catch-all rule from eating forwarded test arguments

2026-07-17T11:17:53+00:00

Test targets forward extra CLI arguments to their scripts via $(filter-out $@,$(MAKECMDGOALS)) (e.g. make test -- --match interfaces_bond) Those extra words are also goals as far as make is concerned, so after the test recipe succeeded, make went on to "build" --match and interfaces_bond too, falling through to the generic `%:` flavor rule and running build-vyos-image --match which errored and masked the fact that the smoketest itself had already passed. Declare the trailing goals as phony no-ops when the primary target is one of the test targets, so they no longer reach the `%:` rule. The existing MATCH= form is unaffected.

Testsuite: T8602: add QEMU smoketest for add-system-image over HTTP (default + VRF)

2026-06-02T04:57:20+00:00

Extend check-qemu-install with --test-image-update: build a nested installer ISO as a second CD-ROM, serve the inner image over HTTP, and exercise add/delete system image in the default routing context and in a named VRF. Add make test-image-update and ignore/clean nested_installer_payload.iso artefacts.