| Age | Commit message (Collapse) | Author |
|
T8147: Update Linux Kernel to 6.18
|
|
|
|
Systems under heavy load might require more time to init the VM
|
|
|
|
|
|
|
|
Avoid duplicated code when working with TPM
|
|
It does not make sense to have the common VyOS functionality for e.g VXLAN,
GENEVE, PPP, WireGuard, filesystems crypto or module signing duplicated for
both arm64 and x86_64.
Split out common configuration parts to be defined only once.
|
|
|
|
* Forwared port all out-of-tree driver patches
* Add Intel QAT patch to make it compile for LInux 6.18
* Remove out-of-tree OpenVPN DCO module - now available upstream
|
|
|
|
|
|
|
|
|
|
|
|
The inotify support for overlayfs is no longer needed. Native upstream support
landed in kernel 4.16 (commit 31747eda41ef/764baba80168 in 2018, which made
overlayfs hash inodes by their lower inode so fsnotify works on overlay mounts),
and kernel 6.8 (commit bc2473c90fca in 2023) extended it so fsnotify generates
events for operations on the real underlying files of an overlay.
The patch was an out-of-tree workaround that never went upstream and predates
these solutions.
|
|
Kernel: T8610: Update Linux Kernel to 6.6.137 (fix CVE-2026-31431)
|
|
|
|
T8445: add support for extension of activation system
|
|
linux-kernel: T8506: Use scripts/kconfig/merge_config.sh for merging kernel config fragments
|
|
T8636: add FRR patches that fix pathd no cmds
|
|
Kernel: T861: add custom VyOS CA to Kernel builds for later module signing
|
|
7735ca88019a4fc6a9affee9df276b9c99773148
pathd: add optional parameters to `no index` cmd
d421a3360bdb6eba18777388325b003b8bc985bc:
pathd: add optional protocol to 'no mpls-te import'
Both are upstream
|
|
T8597: Use specific version of kea-packaging repo in build scripts
|
|
Clone specific branch of kea-packaging repo.
|
|
T8531: restrict Mergify commands to maintainers team
|
|
fragments
Using scripts/kconfig/merge_config.sh for merging config fragments provides
validation and insights compared to the previously used simple
concatenation
|
|
hooks: T8541: inject flavor serial console settings once into config.boot.default
|
|
With this addition we can always sign a Kernel module later and ship it if
needed, without re-compiling the Kernel.
Kernel will report:
[ 1.223891] Loaded X.509 cert 'VyOS Networks Secure Boot Signer 2025 - linux: 6ca57e2add335babd08da69b48c70693edd2b037'
Issuer: CN = VyOS Networks Secure Boot CA
Validity
Not Before: Apr 26 09:07:06 2025 GMT
Not After : Apr 24 09:07:06 2035 GMT
Subject: CN = VyOS Networks Secure Boot Signer 2025 - linux
|
|
linux-kernel: T8496: Add kernel config needed for PWRU
|
|
PWRU (https://github.com/cilium/pwru) is a very useful tool to debug complex networking issues on Linux, as it allows you to trace how packets travel through the kernel functions
|
|
config.boot.default
We do have different default console configurations per flavor used. We will
set the serial console to the default configuration for the flavor once during
ISO image assembly.
|
|
|
|
Add additional validation step to ensure that the transfer drive is unmounted successfully.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
|
Apply suggestion, add validation that the Syft binary was copied with success.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
|
Apply quoting to the passed variable.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
|
Exclude the transfer directory from scan.
|
|
image: T8375: honor already existing boot_settings
|
|
Add make_sbom target to Makefile.
|
|
Use the Syft util to generate SBOM files in both CycloneDX and SPDX format. This process includes creating a transfer disk to copy the Syft util from the host machine and copy the scan results back to the host machine.
|
|
|
|
When building raw images, leave hint to indicate activiation init on
boot.
|
|
Kernel: T8537: Update Linux Kernel to 6.6.135
|
|
It does not make sense to test the serial console autodeteaction on a flavor
which uses a VGA console like PROXMOX. If console_type is a VGA console, bail
out early from the tests.
|
|
VyOS flavors might come with boot_settings which already provided additional
serial interface settings if required. Instead of using our own definitions,
re-use what's already existing.
scripts/image-build/build-vyos-image comes with an implicit default for
boot_settings like console number and speed, thus we do not need to redefine
the existing default - again.
|
|
|
|
* 6.6.135 https://lwn.net/Articles/1068477/
* 6.6.134 https://lwn.net/Articles/1067276/
|
|
T8460: Add CPU isolation option to QEMU install checks for VPP-related tests
|
|
|
|
T8472: Revert KEA-DHCP patch
|