Age | Commit message (Collapse) | Author | |
---|---|---|---|
2025-01-02 | Kernel: T5887: update Linux Kernel to v6.6.69 | Christian Breunig | |
2024-12-20 | eula: T6859: reformat file to honor default UNIX 80x25 terminal width and length | Christian Breunig | |
Runnning "show license" on a default 80x25 terminal makes it almost impossible to properly read it. | |||
2024-12-17 | Kernel: T5887: update Linux Kernel to v6.6.66T5887-kernel-6.6.66 | Christian Breunig | |
2024-12-10 | Merge pull request #856 from dmbaturin/T6942-no-guest-agents | Christian Breunig | |
flavors: T6942: remove VM guest agents from the generic flavor | |||
2024-12-09 | Kernel: T5887: update Linux Kernel to v6.6.64 | Viacheslav Hletenko | |
2024-12-06 | Merge pull request #824 from jestabro/vyconf-minimal | Daniil Baturin | |
T6718: use the vyconf daemon for validation of set commands | |||
2024-12-05 | flavors: T6942: remove VM guest agents from the generic flavor | Daniil Baturin | |
2024-11-30 | Update data/build-types/release.toml | Christian Breunig | |
2024-11-30 | build: T6859: include EULA files in build type definitions | Daniil Baturin | |
2024-11-30 | Merge pull request #847 from dmbaturin/T6915-flavor-cleanup | Christian Breunig | |
build-flavors: T6915: clean up flavor definitions | |||
2024-11-26 | build-flavors: T6915: clean up flavor definitions | Daniil Baturin | |
and leave only illustrative essentials | |||
2024-11-26 | build-flavors: T6913: fix Xen guest agent package in the generic image | Daniil Baturin | |
Also, remove the old XCP-NG flavor because the new agent works for both mainline Xen and XCP-NG | |||
2024-11-20 | build: T6905: Add stream build type | Daniil Baturin | |
2024-11-19 | Kernel: T5887: update Linux Kernel to v6.6.62 | Viacheslav Hletenko | |
2024-11-15 | Kernel: T5887: update Linux Kernel to v6.6.61 | Viacheslav Hletenko | |
2024-11-13 | image-tools: T6864: keep file necessary for compat add image | John Estabrook | |
Revert "T1416: remove deprecated default-union-grub-entry" This reverts commit d50707bb295dbd4bc50e3d0301fc8be605448429. The file grub/default-union-grub-entry and its companion install-image/postinst are needed for 'compatibility-mode' upgrades: when upgrading from a system with legacy image-tools, those two files are expected to exist in the mounted image of the target iso. | |||
2024-11-06 | build: T6855: make the custom APT entry and key syntax more flexible | Daniil Baturin | |
2024-11-01 | Merge pull request #829 from c-po/T6844-salt | Christian Breunig | |
T6844: use our own mirror of the salt repository | |||
2024-11-01 | T6844: use our own mirror of the salt repository | Christian Breunig | |
2024-10-28 | Merge pull request #822 from sarthurdev/grub_fix | Daniil Baturin | |
live: T5568: Fix live grub menu entries | |||
2024-10-25 | T6718: vyconfd.service is started by vyos-router | John Estabrook | |
2024-10-25 | Kernel: T5887: Revert update Linux Kernel to v6.6.58 | Viacheslav Hletenko | |
This reverts commit 6e256633b34dc737a812b0b8d253733608eb8ca8. Issues with the kernel and netfilter IPv6 https://vyos.dev/T6814 https://bugzilla.redhat.com/show_bug.cgi?id=2321325 | |||
2024-10-25 | live: T5568: Fix live grub menu entries | sarthurdev | |
2024-10-22 | Kernel: T5887: update Linux Kernel to v6.6.58c-po-patch-3 | Christian Breunig | |
2024-10-17 | build: T6776: use the official Zabbix repo for zabbix-agent2 | Daniil Baturin | |
2024-10-12 | Kernel: T5887: update Linux Kernel to v6.6.56 | Christian Breunig | |
2024-10-10 | build: T6231: remove Mellanox OFED drivers and tools | Daniil Baturin | |
until their license status is confirmed | |||
2024-10-07 | Merge pull request #762 from sever-sever/T6713-current-realtek | Daniil Baturin | |
T6713: Update Realtek r8152 driver | |||
2024-10-05 | Kernel: T5887: update Linux Kernel to v6.6.54c-po-patch-1 | Christian Breunig | |
2024-10-02 | T6713: Update Realtek r8152 driver | Viacheslav Hletenko | |
2024-10-02 | T6755: Change default vyos mirror URL | Viacheslav Hletenko | |
2024-09-25 | T861: sign all Kernel modules with an ephemeral key | Christian Breunig | |
The shim review board (which is the secure boot base loader) recommends using ephemeral keys when signing the Linux Kernel. This commit enables the Kernel build system to generate a one-time ephemeral key that is used to: * sign all build-in Kernel modules * sign all other out-of-tree Kernel modules The key lives in /tmp and is destroyed after the build container exits and is named: "VyOS build time autogenerated kernel key". In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it unable to load any Kernel Module to the image that is NOT signed by the ephemeral key. | |||
2024-09-22 | Kernel: T5887: update Linux Kernel to v6.6.52 | Christian Breunig | |
2024-09-22 | T861: stripping Kernel modules would also remove module signatures | Christian Breunig | |
As the VyOS Linux Kernel will be compiled with CONFIG_MODULE_SIG_FORCE all driver modules need to be cryptographically signed. This happens during build of the Kernel and it's 3rd party modules. Stripping the objects would remove said signature and the system will be unable to boot b/c of CONFIG_MODULE_SIG_FORCE. | |||
2024-09-14 | T861: add UEFI Secure Boot support | Christian Breunig | |
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux Kernel and enforces module signing. This results in an additional security layer where untrusted (unsigned) Kernel modules can no longer be loaded into the live system. NOTE: This commit will not work unless signing keys are present. Arbitrary keys can be generated using instructions found in: data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md | |||
2024-09-14 | Kernel: T5887: update Linux Kernel to v6.6.51 | Christian Breunig | |
2024-09-07 | Kernel: T861: remove superfluous architecture from Kernel string | Christian Breunig | |
2024-09-05 | T4974: remove package openvpn-dco as it has a proper dependency via vyos-1x | Christian Breunig | |
2024-09-05 | telegraf: T3664: remove package dependency | Christian Breunig | |
Telegraf is not a full VyOS feature with a proper dependency in place via vyos-1x package. Drop this temporary dependency. | |||
2024-09-05 | T1416: remove deprecated default-union-grub-entry | Christian Breunig | |
2024-09-04 | Kernel: T5887: update Linux Kernel to v6.6.49t5887-kernel-6.6.49 | Christian Breunig | |
2024-08-22 | Merge pull request #738 from bk2zsto/image_format_singular | Christian Breunig | |
build: T6666: singular image_format in flavor files | |||
2024-08-20 | build: T6666: singular image_format in flavor files | bk2zsto | |
2024-08-20 | Kernel: T5887: update Linux Kernel to v6.6.47kernel-6-6-47 | Christian Breunig | |
2024-08-11 | Kernel: T5887: update Linux Kernel to v6.6.45 | Christian Breunig | |
2024-07-29 | Kernel: T5887: update Linux Kernel to v6.6.43cpo-T5887-kernel | Christian Breunig | |
2024-07-25 | build: T6231: include out-of-tree Mellanox driver in image | Christian Breunig | |
2024-07-25 | Kernel: T5887: update Linux Kernel to v6.6.42 | Christian Breunig | |
2024-07-24 | Merge pull request #709 from c-po/podman-T6598 | Christian Breunig | |
podman: T6598: add custom podman build for version 4.9.5 | |||
2024-07-23 | podman: T6598: add custom podman build for version 4.9.5 | Christian Breunig | |