summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-09-13Kernel: T2879: remove integrity subsystemChristian Poessinger
When enabled this does: This option enables the integrity subsystem, which is comprised of a number of different components including the Integrity Measurement Architecture (IMA), Extended Verification Module (EVM), IMA-appraisal extension, digital signature verification extension and audit measurement log support. We do not support secure-boot thus we do not need keyrings.
2020-09-13Kernel: T2879: remove auditing supportChristian Poessinger
Enabling this would do: Enable auditing infrastructure that can be used with another kernel subsystem, such as SELinux (which requires this for logging of avc messages output). System call auditing is include on architectures which support it. We have no SELinux.
2020-09-13Kernel: T2879: remove checkpoint/restore supportChristian Poessinger
When enabled this addditional feature does: Enables additional kernel features in a sake of checkpoint/restore. In particular it adds auxiliary prctl codes to setup process text, data and heap segment sizes, and a few additional /proc filesystem entries.
2020-09-13Kernel: T2879: remove SWAP supportChristian Poessinger
... we are a router and do not support SWAP partitions - swapping is slow, thus all data must be in memory.
2020-09-12Kernel: T2876: Update Linux Kernel to v4.19.144Christian Poessinger
2020-09-12Revert "Kernel: T2843: upgrade Kernel to v5.8.5"Christian Poessinger
This reverts commit 78c43c2078e292ac9b53d2d6a41a47466d283914. Unfortunately we must revert the Kernel upgrade as there are two problematic issues. One which is the break of ABI functionality with parted [1] and second the internal cryptop API [2] which removed required literals for the build of Intel QAT acceleration. In the two weeks running 5.8 we still learned a lot - we experienced a performance improvement of ~30% when doing NAT @ > 10GBit/s and also utilizing the build in updated drivers for Intel NICs and WireGuard. We are looking forward to the release of this years LTS kernel and we hope to ship this in the final 1.3 release. 1: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.8.y&id=692d062655 2: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.5.y&id=d63007eb95
2020-09-10Kernel: T2870: Update Linux Kernel to v5.8.8Christian Poessinger
2020-09-06Merge pull request #125 from DmitriyEshenko/qat-currChristian Poessinger
qat: T2853: Enables QAT registration with Linux Kernel Crypto
2020-09-06qat: T2853: Enables QAT registration with Linux Kernel CryptoDmitriyEshenko
2020-09-06Merge pull request #124 from DmitriyEshenko/patch-3Daniil Baturin
accel-ppp: T2860: bump version for L2TP CVE fix
2020-09-06accel-ppp: T2860: bump version for L2TP CVE fixEshenko Dmitriy
2020-09-04Intel: QAT: 2853: run depmod when building package to improve boot timeChristian Poessinger
Instead of running "depmod -a" on every boot, run it once during ISO build process.
2020-09-03firmware: compress using gzip over xz for Pipeline stepsChristian Poessinger
2020-09-03Kernel: move to fpm build scriptChristian Poessinger
2020-09-03Intel: QAT: T2853: use same version as in 1.2 (crux)Christian Poessinger
2020-09-03Kernel: prevent "dirty" tag of KernelChristian Poessinger
... Kernel is appended a + to the version string when there are locally modified files - which we have. This is prevented by the existence of the .scmversion file.
2020-09-03Jenkins: Kernel: keep last 20 buildsChristian Poessinger
2020-09-01Docker: add fpm to build containerChristian Poessinger
2020-09-01Kernel: T2843: remove Intel QAT drivers - we use our own onesChristian Poessinger
We compile Intel QAT drivers from Intel driver release incl. user-space tools.
2020-08-31Merge pull request #120 from jestabro/vyos-configdJohn Estabrook
configd: T2582: support for vyos config script daemon configd: T2582: add option to run testsuite with daemon (default off) configd: T2582: enable vyos-configd.service configd: T2582: add build dependency
2020-08-31configd: T2582: add option to run testsuite with daemon (default off)John Estabrook
2020-08-31configd: T2582: enable vyos-configd.serviceJohn Estabrook
2020-08-31configd: T2582: add build dependencyJohn Estabrook
2020-08-31Revert "Kernel: T2843: drop parallel ATA support"Christian Poessinger
This reverts commit 8b520c63ac705aa2c35579ebfbc053b5b6a1bccb. CI tests also use parallel ATA interfaces in QAEmu - we probably should keep it for "poor" virtualisation.
2020-08-30Merge branch 'kernel-5.8' of github.com:c-po/vyos-build into currentChristian Poessinger
* 'kernel-5.8' of github.com:c-po/vyos-build: Kernel: T2843: drop parallel ATA support Kernel: T2843: enable Multipath TCP support Kernel: T2843: enable APU2 LEDs and front button Kernel: T2843: upgrade Kernel to v5.8.5 WireGuard: T2842: switch to binary package from buster-backports
2020-08-30Kernel: T2843: drop parallel ATA supportChristian Poessinger
2020-08-30Kernel: T2843: enable Multipath TCP supportChristian Poessinger
2020-08-30Kernel: T2843: enable APU2 LEDs and front buttonChristian Poessinger
2020-08-30Kernel: T2843: upgrade Kernel to v5.8.5Christian Poessinger
Note: Intel does not provide a compatible QAT version. There is a custom patch which make QAT compile for the specified Kernel version. This patch will change the source to a non backwards-compatible version - this is fine as we run 5.8 anyways.
2020-08-30WireGuard: T2842: switch to binary package from buster-backportsChristian Poessinger
2020-08-30Kernel: enable Xen virtual keyboard and mouse supportChristian Poessinger
2020-08-30Kernel: T1205: re-add PC speaker driverChristian Poessinger
2020-08-30Kernel: WireGuard: T2839: update to recent versionsChristian Poessinger
* wireguard user-space tools debian/1.0.20200513-1_bpo10+1 * wireguard-linux-compat kernel modules debian/1.0.20200712-1_bpo10+1
2020-08-27T2832: vyos-smoketest package is not called vyos-1x-smoketestChristian Poessinger
2020-08-26Kernel: T2831: Update Linux Kernel to v4.19.142Christian Poessinger
2020-08-23lcd: T2564: disable services by defaultChristian Poessinger
2020-08-23Kernel: T2822: Update Linux Kernel to v4.19.141Christian Poessinger
2020-08-18Merge pull request #119 from DmitriyEshenko/curr-ocservChristian Poessinger
anyconnect: T2036: disable ocserv.service by default
2020-08-18anyconnect: T2036: disable ocserv.service by defaultDmitriyEshenko
2020-08-15Kernel: T2797: Update Linux Kernel to v4.19.139Christian Poessinger
2020-08-14Merge pull request #118 from naoki9911/packer-fix-T2792Christian Poessinger
packer.json: T2792: use iso_checksum field instead of iso_checksum_type
2020-08-14packer.json: T2792: use iso_checksum field instead of iso_checksum_typeNaoki Matsumoto
Latest packer dropped iso_checksum_type field. Instead of iso_checksum_type field, use iso_checksum field to specify checksum type.
2020-08-10Kernel: Intel: config: i40evf driver is used from mainlineChristian Poessinger
2020-08-10Merge pull request #116 from runborg/armfixChristian Poessinger
T2766: vyos-build: build-config: arm64 is not a valid architecture
2020-08-10Kernel: T2780: Update Linux Kernel to v4.19.138Christian Poessinger
2020-08-06T2766: vyos-build: build-config: arm64 is not a valid architectureRunar Borge
arm64 is not a configurable as a valid architecture to build a vyos system on. This commit adds arm64 to the list of supported platforms to build a vyos system on
2020-08-04systemd: services: disable certbot by defaultChristian Poessinger
2020-08-03Revert "T1414: disable failing 10-unmountfs.chroot and needs verification"Christian Poessinger
This reverts commit 1850f165abda3f3d0498220e56ca594dc8ecca9c.
2020-08-03Jenkins: fix post { success { }} script when there is no ISO buildChristian Poessinger
2020-08-03build-packages: remove obsolete script and link to VyOS documentationChristian Poessinger
The referenced scripts/build-packages script was a proof of concept from me some time ago to build VyOS packages through a more or less tiny wrapper. The script was not maintained at any time and randomly caused more harm then good. The script has been abandoned and the documentation has been updated on how to build individual VyOS packages.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-26 23:22:47 +0000