vyos-build.git/scripts/image-build, branch rollingVyOS image build scripts (mirror of https://github.com/vyos/vyos-build.git)
https://git.amelek.net/vyos/vyos-build.git/atom?h=rolling2026-10-01T12:56:25+00:00T861: Finalize VyOS kernel signing for UEFI Secure Boot2026-10-01T12:56:25+00:00asklymenkoa.klymenko@vyos.io2026-09-28T12:26:44+00:00urn:sha1:cd593388fce66b8791d578db38bb6d865976f33dMerge pull request #1291 from c-po/image-size2026-09-14T10:46:19+00:00Daniil Baturindaniil@vyos.io2026-09-14T10:46:19+00:00urn:sha1:7a5205d66cf20f2edff3e96d7e8d6f14d4f90df8
T9277: image: further reduced installed and ISO image sizeT9014: install flavor.json before Debian packages are installed2026-09-07T14:42:03+00:00Christian Breunigchristian@breunig.cc2026-09-07T14:42:03+00:00urn:sha1:b8e182138afddfe6a1d20a0aa5d543eca99058df
The vyos-1x-smoketest maintainer script now queries the image flavor to implant
the correct serial console device and speed into the configuration test data.
This requires /usr/share/vyos/flavor.json to be present in the chroot before
the Debian packages get installed, but config/includes.chroot is only copied
into the chroot after package installation.
Write flavor.json to config/includes.chroot_before_packages instead, which
live-build copies into the chroot prior to installing packages. version.json
and the activation hints are unaffected and remain in config/includes.chroot.
Companion change to vyos-1x commit 2f9fe3e74 ("smoketest: T9014: make
configtest serial console image flavor agnostic").
T9277: add noticable warning when installing debug packages2026-09-04T09:21:22+00:00Christian Breunigchristian@breunig.cc2026-09-04T09:21:22+00:00urn:sha1:e8e28f49f97807d119903cfef93fe13585422bf6T9203: refactor SBOM generation script2026-08-19T19:27:26+00:00asklymenkoa.klymenko@vyos.io2026-08-19T19:27:26+00:00urn:sha1:3a296d21a83711550e38d2a47fc272d595916d1fT9203: Enrich SBOM files with additional metadata2026-08-14T10:04:26+00:00asklymenkoa.klymenko@vyos.io2026-08-14T10:04:26+00:00urn:sha1:b9c957db4e85696cb87e1c4bfad808b0e0154fb0T9203: Enrich SBOM files with additional metadata2026-08-12T16:33:47+00:00asklymenkoa.klymenko@vyos.io2026-08-12T16:33:47+00:00urn:sha1:4fb76dcc4580e6bc16fb8fa89b1d0bdcd1dfee26build: T9140: include version and flavor information in the boot menu2026-07-28T21:56:32+00:00Daniil Baturindaniil@baturin.org2026-07-28T21:56:32+00:00urn:sha1:a3b7ace20597fd74475b25b9d41af01fceaac22csbom: T9098: syft should run un squashfs instead of unpacked chroot2026-07-16T20:52:17+00:00Christian Breunigchristian@breunig.cc2026-07-16T19:01:50+00:00urn:sha1:3db21e81c99ae1e8bf8f24450046c18f53d78d74
lb (live-build) binary runs binary_rootfs first, then binary_grub-efi.
binary_grub-efi temporarily installs EFI tooling and then runs:
"apt remove --auto-remove --purge --allow-remove-essential"
That cleanup is safe for the already-generated squashfs, but it mutates
build/chroot and can remove vyos-1x, breaking subsequent work that expects
chroot to remain intact for SBOM generation.
But why unpacking the squashfs?
In an ideal world we could call syft on the compressed squashfs file which is
supported. In our world, we do use a BCJ pre-filter chained with LZMA2 for
compressing the squashfs, which will increase the compression ratio without a
decompression penalty.
Difference: ~14.3 MB, ~2.7% smaller
This is unsupported by fyft which means we do need to unpack the squashfs first
before checking the files and generating the SBOM file.
sbom: T8542: bugfix shadowing cmd() function with cmd variable name2026-06-04T20:10:56+00:00Christian Breunigchristian@breunig.cc2026-06-04T20:08:24+00:00urn:sha1:3c26a4805c35fac97adfc45b85eff051ca7d3312
Commit 75a495b237 ("sbom: T8542: create during ISO assembly") will shadow any
subsequent calls to vyos.utils.process.cmd() as cmd has be redefined as
variable to hold the CLI command strings for SBOM generation using the syft
binary.
This has been fixed by replacing the cmd variable with another name syft_cmd.