vyos-build.git/scripts/check-qemu-install, branch c-po-patch-3VyOS image build scripts (mirror of https://github.com/vyos/vyos-build.git)
https://git.amelek.net/vyos/vyos-build.git/atom?h=c-po-patch-32024-10-06T14:16:02+00:00Testsuite: T6494: add new make target "test-interfaces"2024-10-06T14:16:02+00:00Christian Breunigchristian@breunig.cc2024-10-06T14:10:04+00:00urn:sha1:57d5afe0ff6623d63f014d277246b14a1f12f62c
We can not run the interface related tests, and non interface related
testcases in parallel to speedup the entire build process.
T861: sign all Kernel modules with an ephemeral key2024-09-25T18:24:21+00:00Christian Breunigchristian@breunig.cc2024-09-25T18:24:21+00:00urn:sha1:d235b31a095f9b8fdb2d5c231935c8b4b4c3da6c
The shim review board (which is the secure boot base loader) recommends using
ephemeral keys when signing the Linux Kernel. This commit enables the Kernel
build system to generate a one-time ephemeral key that is used to:
* sign all build-in Kernel modules
* sign all other out-of-tree Kernel modules
The key lives in /tmp and is destroyed after the build container exits and is
named: "VyOS build time autogenerated kernel key".
In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it
unable to load any Kernel Module to the image that is NOT signed by the
ephemeral key.
tpm: T4919: Fix TPM test for changes in 7f23b572024-09-17T09:30:36+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2024-09-17T09:20:09+00:00urn:sha1:d60f5222c264cdc426c5ea4ebba5107566900d22tpm: T4919: Fix check for /dev/tpm02024-09-17T08:25:36+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2024-09-17T08:25:36+00:00urn:sha1:e35345a446f26fea92ae916b47257fc0712b8670T861: add UEFI Secure Boot support2024-09-14T21:05:23+00:00Christian Breunigchristian@breunig.cc2024-09-04T19:37:11+00:00urn:sha1:fd737172f1068870fe1ededbe9b2ed4a86663acd
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux
Kernel and enforces module signing. This results in an additional security
layer where untrusted (unsigned) Kernel modules can no longer be loaded into
the live system.
NOTE: This commit will not work unless signing keys are present. Arbitrary
keys can be generated using instructions found in:
data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
Testsuite: T861: add explicit --smoketest argument2024-09-07T19:32:34+00:00Christian Breunigchristian@breunig.cc2024-09-06T18:54:38+00:00urn:sha1:e86bfd7ab96333fb3dec62a15b9e9720d95dbda8
In the past the CLI based smoketest was always executed under an else branch in
the testcase if-statement. Instead of using negative logic move all testcases
to positive logic adding an empty "catch all" else path.
Testsuite: T861: use fix bootindex for install medium and non-volatile disks2024-09-07T19:32:34+00:00Christian Breunigchristian@breunig.cc2024-09-06T18:41:43+00:00urn:sha1:6ef7069098245cee78918b84821909fcdb42b39d
This is required to support proper disk ejection and not reloading the disk on
system reboot when operation in BIOS mode.
Testsuite: T861: add support to use VNC for a graphics console2024-09-07T19:32:34+00:00Christian Breunigchristian@breunig.cc2024-09-06T18:35:17+00:00urn:sha1:115fb522c8d814ceb72ce98b14181f5d6f95890b
To use VNC you could run "make test -- --vnc"
Testsuite: T861: use variable to define one single place for VM name2024-09-07T19:32:34+00:00Christian Breunigchristian@breunig.cc2024-09-06T18:28:36+00:00urn:sha1:986b71af2d72f3da4c7fcae4bd061e57734592b4Testsuite: T861: cleanup imports and use "kernel_flavor" from vyos_defaults2024-09-07T19:32:34+00:00Christian Breunigchristian@breunig.cc2024-09-06T18:26:47+00:00urn:sha1:aa6ca5c65bddb1b473421573710faa00a3e52dbc