summaryrefslogtreecommitdiff
path: root/data
AgeCommit message (Collapse)Author
2025-01-02Kernel: T5887: update Linux Kernel to v6.6.69Christian Breunig
2024-12-20eula: T6859: reformat file to honor default UNIX 80x25 terminal width and lengthChristian Breunig
Runnning "show license" on a default 80x25 terminal makes it almost impossible to properly read it.
2024-12-17Kernel: T5887: update Linux Kernel to v6.6.66T5887-kernel-6.6.66Christian Breunig
2024-12-10Merge pull request #856 from dmbaturin/T6942-no-guest-agentsChristian Breunig
flavors: T6942: remove VM guest agents from the generic flavor
2024-12-09Kernel: T5887: update Linux Kernel to v6.6.64Viacheslav Hletenko
2024-12-06Merge pull request #824 from jestabro/vyconf-minimalDaniil Baturin
T6718: use the vyconf daemon for validation of set commands
2024-12-05flavors: T6942: remove VM guest agents from the generic flavorDaniil Baturin
2024-11-30Update data/build-types/release.tomlChristian Breunig
2024-11-30build: T6859: include EULA files in build type definitionsDaniil Baturin
2024-11-30Merge pull request #847 from dmbaturin/T6915-flavor-cleanupChristian Breunig
build-flavors: T6915: clean up flavor definitions
2024-11-26build-flavors: T6915: clean up flavor definitionsDaniil Baturin
and leave only illustrative essentials
2024-11-26build-flavors: T6913: fix Xen guest agent package in the generic imageDaniil Baturin
Also, remove the old XCP-NG flavor because the new agent works for both mainline Xen and XCP-NG
2024-11-20build: T6905: Add stream build typeDaniil Baturin
2024-11-19Kernel: T5887: update Linux Kernel to v6.6.62Viacheslav Hletenko
2024-11-15Kernel: T5887: update Linux Kernel to v6.6.61Viacheslav Hletenko
2024-11-13image-tools: T6864: keep file necessary for compat add imageJohn Estabrook
Revert "T1416: remove deprecated default-union-grub-entry" This reverts commit d50707bb295dbd4bc50e3d0301fc8be605448429. The file grub/default-union-grub-entry and its companion install-image/postinst are needed for 'compatibility-mode' upgrades: when upgrading from a system with legacy image-tools, those two files are expected to exist in the mounted image of the target iso.
2024-11-06build: T6855: make the custom APT entry and key syntax more flexibleDaniil Baturin
2024-11-01Merge pull request #829 from c-po/T6844-saltChristian Breunig
T6844: use our own mirror of the salt repository
2024-11-01T6844: use our own mirror of the salt repositoryChristian Breunig
2024-10-28Merge pull request #822 from sarthurdev/grub_fixDaniil Baturin
live: T5568: Fix live grub menu entries
2024-10-25T6718: vyconfd.service is started by vyos-routerJohn Estabrook
2024-10-25Kernel: T5887: Revert update Linux Kernel to v6.6.58Viacheslav Hletenko
This reverts commit 6e256633b34dc737a812b0b8d253733608eb8ca8. Issues with the kernel and netfilter IPv6 https://vyos.dev/T6814 https://bugzilla.redhat.com/show_bug.cgi?id=2321325
2024-10-25live: T5568: Fix live grub menu entriessarthurdev
2024-10-22Kernel: T5887: update Linux Kernel to v6.6.58c-po-patch-3Christian Breunig
2024-10-17build: T6776: use the official Zabbix repo for zabbix-agent2Daniil Baturin
2024-10-12Kernel: T5887: update Linux Kernel to v6.6.56Christian Breunig
2024-10-10build: T6231: remove Mellanox OFED drivers and toolsDaniil Baturin
until their license status is confirmed
2024-10-07Merge pull request #762 from sever-sever/T6713-current-realtekDaniil Baturin
T6713: Update Realtek r8152 driver
2024-10-05Kernel: T5887: update Linux Kernel to v6.6.54c-po-patch-1Christian Breunig
2024-10-02T6713: Update Realtek r8152 driverViacheslav Hletenko
2024-10-02T6755: Change default vyos mirror URLViacheslav Hletenko
2024-09-25T861: sign all Kernel modules with an ephemeral keyChristian Breunig
The shim review board (which is the secure boot base loader) recommends using ephemeral keys when signing the Linux Kernel. This commit enables the Kernel build system to generate a one-time ephemeral key that is used to: * sign all build-in Kernel modules * sign all other out-of-tree Kernel modules The key lives in /tmp and is destroyed after the build container exits and is named: "VyOS build time autogenerated kernel key". In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it unable to load any Kernel Module to the image that is NOT signed by the ephemeral key.
2024-09-22Kernel: T5887: update Linux Kernel to v6.6.52Christian Breunig
2024-09-22T861: stripping Kernel modules would also remove module signaturesChristian Breunig
As the VyOS Linux Kernel will be compiled with CONFIG_MODULE_SIG_FORCE all driver modules need to be cryptographically signed. This happens during build of the Kernel and it's 3rd party modules. Stripping the objects would remove said signature and the system will be unable to boot b/c of CONFIG_MODULE_SIG_FORCE.
2024-09-14T861: add UEFI Secure Boot supportChristian Breunig
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux Kernel and enforces module signing. This results in an additional security layer where untrusted (unsigned) Kernel modules can no longer be loaded into the live system. NOTE: This commit will not work unless signing keys are present. Arbitrary keys can be generated using instructions found in: data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
2024-09-14Kernel: T5887: update Linux Kernel to v6.6.51Christian Breunig
2024-09-07Kernel: T861: remove superfluous architecture from Kernel stringChristian Breunig
2024-09-05T4974: remove package openvpn-dco as it has a proper dependency via vyos-1xChristian Breunig
2024-09-05telegraf: T3664: remove package dependencyChristian Breunig
Telegraf is not a full VyOS feature with a proper dependency in place via vyos-1x package. Drop this temporary dependency.
2024-09-05T1416: remove deprecated default-union-grub-entryChristian Breunig
2024-09-04Kernel: T5887: update Linux Kernel to v6.6.49t5887-kernel-6.6.49Christian Breunig
2024-08-22Merge pull request #738 from bk2zsto/image_format_singularChristian Breunig
build: T6666: singular image_format in flavor files
2024-08-20build: T6666: singular image_format in flavor filesbk2zsto
2024-08-20Kernel: T5887: update Linux Kernel to v6.6.47kernel-6-6-47Christian Breunig
2024-08-11Kernel: T5887: update Linux Kernel to v6.6.45Christian Breunig
2024-07-29Kernel: T5887: update Linux Kernel to v6.6.43cpo-T5887-kernelChristian Breunig
2024-07-25build: T6231: include out-of-tree Mellanox driver in imageChristian Breunig
2024-07-25Kernel: T5887: update Linux Kernel to v6.6.42Christian Breunig
2024-07-24Merge pull request #709 from c-po/podman-T6598Christian Breunig
podman: T6598: add custom podman build for version 4.9.5
2024-07-23podman: T6598: add custom podman build for version 4.9.5Christian Breunig