VyOS image build scripts (mirror of https://github.com/vyos/vyos-build.git) https://git.amelek.net/vyos/vyos-build.git/atom?h=sever-sever-patch-1 2025-02-19T15:21:14+00:00 2025-02-19T15:21:14+00:00 Christian Breunig christian@breunig.cc 2025-02-19T15:21:14+00:00 urn:sha1:2c61c156566f7dd3d4a5108555dd6b71b2438a1a Use one build script to rule all the Intel Git based drivers. 2025-02-15T08:19:16+00:00 Christian Breunig christian@breunig.cc 2025-02-15T08:19:01+00:00 urn:sha1:fc2fe22b4c4736ba58e04334f5c20914abce4a62 2025-02-13T20:14:00+00:00 Christian Breunig christian@breunig.cc 2025-02-13T20:14:00+00:00 urn:sha1:a10b29560155431029352778392a32546287d9b2 2024-11-01T13:50:56+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2024-10-28T22:04:53+00:00 urn:sha1:50b3d9f80e0f11b6d234d3e535539b1bd0082c93 Build tarballs for the packages related linux-kernel dir. 2024-09-25T18:24:21+00:00 Christian Breunig christian@breunig.cc 2024-09-25T18:24:21+00:00 urn:sha1:d235b31a095f9b8fdb2d5c231935c8b4b4c3da6c The shim review board (which is the secure boot base loader) recommends using ephemeral keys when signing the Linux Kernel. This commit enables the Kernel build system to generate a one-time ephemeral key that is used to: * sign all build-in Kernel modules * sign all other out-of-tree Kernel modules The key lives in /tmp and is destroyed after the build container exits and is named: "VyOS build time autogenerated kernel key". In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it unable to load any Kernel Module to the image that is NOT signed by the ephemeral key. 2024-08-29T09:30:52+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2024-08-26T15:21:14+00:00 urn:sha1:cc7d0993b420c3245e628a818f887411d72530ff Add build scripts for .deb packages without Jenkins. To exclude Jenkins we need some place where we can put new builds-scripts to run in parallel (old/new) during meantime We will deprecate old Jenkins package builds in the future.