vyos-build.git/data, branch c-po-patch-3VyOS image build scripts (mirror of https://github.com/vyos/vyos-build.git)
https://git.amelek.net/vyos/vyos-build.git/atom?h=c-po-patch-32024-10-22T18:24:28+00:00Kernel: T5887: update Linux Kernel to v6.6.582024-10-22T18:24:28+00:00Christian Breunigchristian@breunig.cc2024-10-22T18:24:28+00:00urn:sha1:6e256633b34dc737a812b0b8d253733608eb8ca8build: T6776: use the official Zabbix repo for zabbix-agent22024-10-17T10:13:35+00:00Daniil Baturindaniil@baturin.org2024-10-17T10:13:35+00:00urn:sha1:bf2e6afc49ca43c5ba81f79787e8d866517263caKernel: T5887: update Linux Kernel to v6.6.562024-10-12T06:04:09+00:00Christian Breunigchristian@breunig.cc2024-10-12T06:04:09+00:00urn:sha1:267bd9ca61c14b8528e2a3dfe7c2a46e39a67ce9build: T6231: remove Mellanox OFED drivers and tools2024-10-10T08:51:34+00:00Daniil Baturindaniil@baturin.org2024-10-10T08:51:34+00:00urn:sha1:4d68265e7af38f2cd901dd7dfc139289cf9ef9e2
until their license status is confirmed
Merge pull request #762 from sever-sever/T6713-current-realtek2024-10-07T14:58:30+00:00Daniil Baturindaniil@vyos.io2024-10-07T14:58:30+00:00urn:sha1:49d41fa34ab0ac31ccea687e97ed0cad6f60c1e5
T6713: Update Realtek r8152 driverKernel: T5887: update Linux Kernel to v6.6.542024-10-05T06:15:55+00:00Christian Breunigchristian@breunig.cc2024-10-04T05:11:21+00:00urn:sha1:1e53e6451c3fef7599f7ab69afa9c7a59539d94dT6713: Update Realtek r8152 driver2024-10-02T11:48:46+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-09-13T10:50:49+00:00urn:sha1:a3b515ca716bc2505c15900c4d5e549a672e7dfaT6755: Change default vyos mirror URL2024-10-02T07:34:49+00:00Viacheslav Hletenkov.gletenko@vyos.io2024-10-02T07:34:49+00:00urn:sha1:7bd5496de13343a951b6376d50a24264f36a3c0cT861: sign all Kernel modules with an ephemeral key2024-09-25T18:24:21+00:00Christian Breunigchristian@breunig.cc2024-09-25T18:24:21+00:00urn:sha1:d235b31a095f9b8fdb2d5c231935c8b4b4c3da6c
The shim review board (which is the secure boot base loader) recommends using
ephemeral keys when signing the Linux Kernel. This commit enables the Kernel
build system to generate a one-time ephemeral key that is used to:
* sign all build-in Kernel modules
* sign all other out-of-tree Kernel modules
The key lives in /tmp and is destroyed after the build container exits and is
named: "VyOS build time autogenerated kernel key".
In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it
unable to load any Kernel Module to the image that is NOT signed by the
ephemeral key.
Kernel: T5887: update Linux Kernel to v6.6.522024-09-22T07:31:31+00:00Christian Breunigchristian@breunig.cc2024-09-21T18:54:30+00:00urn:sha1:88f072df3d08c650d8ac0f5f616428fde694e0bd