VyOS image build scripts (mirror of https://github.com/vyos/vyos-build.git) https://git.amelek.net/vyos/vyos-build.git/atom?h=rolling 2026-10-13T16:26:18+00:00 2026-10-13T16:26:18+00:00 asklymenko a.klymenko@vyos.io 2026-10-13T16:26:18+00:00 urn:sha1:c9b9015272ec514a22a0ee1f6cd6b6577f5ac527 2026-10-01T12:56:25+00:00 asklymenko a.klymenko@vyos.io 2026-09-28T12:26:44+00:00 urn:sha1:cd593388fce66b8791d578db38bb6d865976f33d 2026-09-07T18:43:35+00:00 Christian Breunig christian@breunig.cc 2026-09-04T08:21:06+00:00 urn:sha1:c598316aa436d682999a710446edb4ef504a6e56 VyOS carried a fork of Debian's live-boot, based on release 1:20151213, purely to add a handful of VyOS specific behaviours. The fork is retired here in favour of Debian's own live-boot plus a drop-in component. live-boot's frontend sources every /lib/live/boot/????-* file in glob order, so 9991-vyos.sh is read after all upstream components and can both translate the vyos-union= kernel parameter and redefine three helpers. An initramfs-tools hook copies the multiarch klibc libraries that upstream's non-multiarch glob never matches, and a live-top shim runs mdadm, which boot=live otherwise skips entirely, leaving RAID arrays unassembled. 2026-09-06T16:35:04+00:00 Christian Breunig christian@breunig.cc 2026-09-06T16:35:04+00:00 urn:sha1:b553de025eb543dfcb8dac0a7b938f6fe6b84e0f Only two actions were left in this hook and neither is needed. - /etc/pam_radius_auth.conf is created empty at image build time, but vyos-1x renders the file from its own Jinja2 template and the router init script removes it on every boot when restoring PAM to its virgin state. - kernel.printk was patched into /etc/sysctl.conf. The setting now ships in vyos-1x as part of /etc/sysctl.d/30-vyos-router.conf, next to the other kernel defaults. 2026-09-06T16:34:42+00:00 Christian Breunig christian@breunig.cc 2026-09-06T16:34:42+00:00 urn:sha1:27c96774929340d8bb060fa20c80a126e6b7da03 /opt/vyatta/etc/default_ssh has not been shipped by any VyOS package for years, so the copy failed on every ISO build: cp: cannot stat '/opt/vyatta/etc/default_ssh': No such file or directory /etc/default/ssh is left at its Debian default, and ssh.service is disabled in the image anyway - the SSH daemon is started from the CLI configuration. 2026-09-06T16:33:55+00:00 Christian Breunig christian@breunig.cc 2026-09-06T16:33:55+00:00 urn:sha1:99cd490978f3bf5579db7db12e5ec2e6a9926bfc Disabling ipsec.service and strongswan-starter.service failed during every ISO build: Failed to disable unit, unit ipsec.service does not exist. Failed to disable unit, unit strongswan-starter.service does not exist. Since the strongSwan 6.0 update only strongswan.service unit is shipped. 2026-06-19T15:12:54+00:00 Daniil Baturin daniil@vyos.io 2026-06-19T15:12:54+00:00 urn:sha1:6f3f7b7290bb7de9f970c58e4f26e75fbd62e6cb T8099: Update strongswan to 6.0.6 2026-06-18T14:21:31+00:00 Christian Breunig christian@breunig.cc 2026-06-18T14:21:31+00:00 urn:sha1:bd827e7b8d12c82ed6a9455c22d8f9cc0c280f33 geoip: T5746: Download ASN database 2026-06-17T08:48:57+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2026-06-17T08:48:57+00:00 urn:sha1:ea19696ae03d3aaeb145c0ac3fcfa6d4fafe2df2 2026-06-10T10:55:16+00:00 Kyrylo Yatsenko hedrok@gmail.com 2026-06-10T10:44:14+00:00 urn:sha1:71dcf959744e46707f2eaae6e567847c78d4acb5 * Upgrade to 6.0.6 * Update 30-strongswan-configs.chroot to not change /etc/strongswan.d/charon.conf as the file is part of package strongswan-charon that should not be installed * Rebase all patches * Enable ML-KEM for Post Quantum