Age | Commit message (Collapse) | Author |
|
|
|
The shim review board (which is the secure boot base loader) recommends using
ephemeral keys when signing the Linux Kernel. This commit enables the Kernel
build system to generate a one-time ephemeral key that is used to:
* sign all build-in Kernel modules
* sign all other out-of-tree Kernel modules
The key lives in /tmp and is destroyed after the build container exits and is
named: "VyOS build time autogenerated kernel key".
In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it
unable to load any Kernel Module to the image that is NOT signed by the
ephemeral key.
|
|
Use L2TP Calling-Number in Calling-Station-ID RADIUS attribute
|
|
|
|
This reverts commit 262183c as Accel PPP has issues starting up.
|
|
|
|
Specifying -DLUA=True results in selection of the Lua language version 5.1 - we
need 5.3.
|
|
This reverts commit 719013886df2a324f09217d2fd11feddab330a05.
|
|
|
|
|
|
Imported from https://github.com/vyos/vyos-build-kernel commit 9e7c12b
|