Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-10-05 | Kernel: T5887: update Linux Kernel to v6.6.54c-po-patch-1 | Christian Breunig | |
2024-10-04 | Merge pull request #785 from sever-sever/T973 | Viacheslav Hletenko | |
T973: Add build script for node_exporter package | |||
2024-10-03 | Merge pull request #788 from sever-sever/T6758 | Daniil Baturin | |
T6758: Add build package xen-guest-agent | |||
2024-10-03 | T6758: Add build package xen-guest-agent | Viacheslav Hletenko | |
The 'xen-guest-agent' could be used for XCP-NG images | |||
2024-10-02 | T973: Add build script for node_exporter package | Viacheslav Hletenko | |
2024-10-02 | Merge pull request #781 from sever-sever/T6754 | Viacheslav Hletenko | |
T6754: Delete Jenkins build packages | |||
2024-10-02 | Merge pull request #780 from sever-sever/T6755 | Viacheslav Hletenko | |
T6755: Change default vyos mirror URL | |||
2024-10-02 | T6754: Delete Jenkins build packages | Viacheslav Hletenko | |
2024-10-02 | T6755: Change default vyos mirror URL | Viacheslav Hletenko | |
2024-10-01 | Merge pull request #779 from ↵ | John Estabrook | |
dmbaturin/T6742-childless-leaf-nodes-rendering-libvyosconfig docker: T6742: libvyosconfig update for childless node rendering | |||
2024-10-01 | docker: T6742: libvyosconfig update for childless node rendering | Daniil Baturin | |
2024-10-01 | Merge pull request #778 from sever-sever/T861-mlnx | Viacheslav Hletenko | |
T861: Fix mellanox build by actions | |||
2024-10-01 | T861: Fix mellanox build by actions | Viacheslav Hletenko | |
2024-10-01 | Merge pull request #776 from sever-sever/T861 | Christian Breunig | |
T861: Fix kernel suffix for package build by actions | |||
2024-10-01 | T861: Fix kernel suffix for package build by actions | Viacheslav Hletenko | |
2024-09-30 | Merge pull request #774 from dmbaturin/T6742-childless-leaf-nodes-rendering | Daniil Baturin | |
build-image: T6742: update vyos1x-config for childless non-leaf node rendering fixes | |||
2024-09-30 | Merge pull request #773 from dmbaturin/T6738-build-type-field | Christian Breunig | |
build: T6738: add build_type field to version data instead of the very limited and unused lts_build | |||
2024-09-27 | build-image: T6742: update vyos1x-config for childless non-leaf node fixes | Daniil Baturin | |
2024-09-25 | Merge pull request #772 from c-po/kernel-ephemeral-keys | Christian Breunig | |
T861: sign all Kernel modules with an ephemeral key | |||
2024-09-25 | T861: sign all Kernel modules with an ephemeral key | Christian Breunig | |
The shim review board (which is the secure boot base loader) recommends using ephemeral keys when signing the Linux Kernel. This commit enables the Kernel build system to generate a one-time ephemeral key that is used to: * sign all build-in Kernel modules * sign all other out-of-tree Kernel modules The key lives in /tmp and is destroyed after the build container exits and is named: "VyOS build time autogenerated kernel key". In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it unable to load any Kernel Module to the image that is NOT signed by the ephemeral key. | |||
2024-09-25 | build: T6738: add build_type field to version data | Daniil Baturin | |
instead of the very limited and unused lts_build | |||
2024-09-22 | T861: VyOS image build should use UTC timestamps | Christian Breunig | |
2024-09-22 | Kernel: T5887: disable various unused/not needed debug options | Christian Breunig | |
2024-09-22 | Kernel: T5887: update Linux Kernel to v6.6.52 | Christian Breunig | |
2024-09-22 | T861: stripping Kernel modules would also remove module signatures | Christian Breunig | |
As the VyOS Linux Kernel will be compiled with CONFIG_MODULE_SIG_FORCE all driver modules need to be cryptographically signed. This happens during build of the Kernel and it's 3rd party modules. Stripping the objects would remove said signature and the system will be unable to boot b/c of CONFIG_MODULE_SIG_FORCE. | |||
2024-09-21 | Merge pull request #769 from vyos/t6729-ethtool | Daniil Baturin | |
ethtool: T6729: upgrade to 6.10 to make use of more --json options | |||
2024-09-21 | ethtool: T6729: upgrade to 6.10 to make use of more --json optionst6729-ethtool | Christian Breunig | |
Same as T6078 but we now wan't to make use of ethtool --json eth0 to drop out own text based parsing of ethtool options in [1]. This is the base for moving to a better, machine readable interface 1: https://github.com/vyos/vyos-1x/blob/e47d4fd385631236da68/python/vyos/ethtool.py#L77-L105 | |||
2024-09-20 | Merge pull request #768 from dmbaturin/artifact-filtering | Viacheslav Hletenko | |
build: T3664: add an option to specify artifact extensions | |||
2024-09-20 | build: T3664: add an option to specify artifact extensions | Daniil Baturin | |
so that the manifest only contains files considered build artifacts, and those artifacts can be automatically picked up by CI jobs and the like | |||
2024-09-19 | Merge pull request #767 from dmbaturin/post_build_hook_improvements | Daniil Baturin | |
build: T3664: improve support for custom build hooks | |||
2024-09-18 | build: T3664: improve support for custom build hooks | Daniil Baturin | |
2024-09-18 | Merge pull request #766 from dmbaturin/manifest-reuse-iso | Daniil Baturin | |
build: T6653: fix a manifest generation error when using --reuse-iso | |||
2024-09-17 | build: T6653: fix a manifest generation error when using --reuse-iso | Daniil Baturin | |
2024-09-17 | Merge pull request #765 from sarthurdev/tpm_luks | Simon | |
2024-09-17 | build: T861: Add socat as needed by commit 7f23b57 | sarthurdev | |
2024-09-17 | tpm: T4919: Fix TPM test for changes in 7f23b57 | sarthurdev | |
2024-09-17 | tpm: T4919: Fix check for /dev/tpm0 | sarthurdev | |
2024-09-16 | Merge pull request #764 from c-po/secure-boot | Christian Breunig | |
Kernel: T861: use find over ls when probing for Kernel signing public keys | |||
2024-09-16 | Kernel: T861: use find over ls when probing for Kernel signing public keys | Christian Breunig | |
2024-09-16 | Merge pull request #758 from HollyGurza/T6684 | Daniil Baturin | |
T6684: new Debian package repo snapshot logic | |||
2024-09-16 | Merge pull request #763 from c-po/secure-boot | Viacheslav Hletenko | |
T861: add UEFI Secure Boot support | |||
2024-09-16 | T6684: new Debian package repo snapshot logic | khramshinr | |
patch live-build to save information about all installed packages and their source repo, including temporary packages | |||
2024-09-14 | Docker: T861: fix warning for UID_MIN/UID_MAC out of range | Christian Breunig | |
Rise upper limit for UID when working in an Active Direcotry integrated environment. This solves the warning: vyos_bld's uid 1632000007 outside of the UID_MIN 1000 and UID_MAX 60000 range. | |||
2024-09-14 | T861: add UEFI Secure Boot support | Christian Breunig | |
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux Kernel and enforces module signing. This results in an additional security layer where untrusted (unsigned) Kernel modules can no longer be loaded into the live system. NOTE: This commit will not work unless signing keys are present. Arbitrary keys can be generated using instructions found in: data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md | |||
2024-09-14 | Kernel: T5887: cleanup Debian postinst files after package build | Christian Breunig | |
2024-09-14 | Kernel: T5887: update Linux Kernel to v6.6.51 | Christian Breunig | |
2024-09-14 | mellanox: T6231: execute build script with sudo | Christian Breunig | |
2024-09-12 | Merge pull request #759 from sever-sever/T6674-netfilter | Christian Breunig | |
T6674: Fix build package netfilter dependencies | |||
2024-09-12 | T6674: Fix build package netfilter dependencies | Viacheslav Hletenko | |
2024-09-09 | Merge pull request #755 from nvollmar/T6703 | Christian Breunig | |
T6703: add support for amd pstate driver |