Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-09-25 | T861: sign all Kernel modules with an ephemeral key | Christian Breunig | |
The shim review board (which is the secure boot base loader) recommends using ephemeral keys when signing the Linux Kernel. This commit enables the Kernel build system to generate a one-time ephemeral key that is used to: * sign all build-in Kernel modules * sign all other out-of-tree Kernel modules The key lives in /tmp and is destroyed after the build container exits and is named: "VyOS build time autogenerated kernel key". In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it unable to load any Kernel Module to the image that is NOT signed by the ephemeral key. | |||
2024-09-17 | tpm: T4919: Fix TPM test for changes in 7f23b57 | sarthurdev | |
2024-09-17 | tpm: T4919: Fix check for /dev/tpm0 | sarthurdev | |
2024-09-14 | T861: add UEFI Secure Boot support | Christian Breunig | |
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux Kernel and enforces module signing. This results in an additional security layer where untrusted (unsigned) Kernel modules can no longer be loaded into the live system. NOTE: This commit will not work unless signing keys are present. Arbitrary keys can be generated using instructions found in: data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md | |||
2024-09-07 | Testsuite: T861: add explicit --smoketest argument | Christian Breunig | |
In the past the CLI based smoketest was always executed under an else branch in the testcase if-statement. Instead of using negative logic move all testcases to positive logic adding an empty "catch all" else path. | |||
2024-09-07 | Testsuite: T861: use fix bootindex for install medium and non-volatile disks | Christian Breunig | |
This is required to support proper disk ejection and not reloading the disk on system reboot when operation in BIOS mode. | |||
2024-09-07 | Testsuite: T861: add support to use VNC for a graphics console | Christian Breunig | |
To use VNC you could run "make test -- --vnc" | |||
2024-09-07 | Testsuite: T861: use variable to define one single place for VM name | Christian Breunig | |
2024-09-07 | Testsuite: T861: cleanup imports and use "kernel_flavor" from vyos_defaults | Christian Breunig | |
2024-09-07 | Testsuite: T861: remove option to disable KVM and use soft-emulation | Christian Breunig | |
This code path was unused during CI runs. | |||
2024-09-07 | Testsuite: T861: eject installation media CD-ROM over powercycle | Christian Breunig | |
When moving to UEFI and secure-boot it's better to just reboot the system for Machine Owner Key installation, then powercycling the machine. This commit will use `reboot now` over `poweroff` after base system installation and boot into installed image for smoketest handling. | |||
2024-09-07 | Kernel: T861: remove superfluous architecture from Kernel string | Christian Breunig | |
2024-06-14 | T6484: Smoketest: Increase KVM memory limit | Matthew Kobayashi | |
2024-04-16 | image-tools: T6154: installer prompts to confirm non-default password | John Estabrook | |
2024-04-07 | image-tools: T6207: update test script for prompt for boot config | John Estabrook | |
2024-03-12 | docker, build: T6119: use python3-tomli instead of python3-toml | Daniil Baturin | |
for a compliant implementation ot TOML | |||
2024-03-08 | build: T4919: Fix error due to variable not found | sarthurdev | |
2024-02-20 | config: T4919: Add emulated TPM encryption test | sarthurdev | |
2023-11-19 | Makefile: add new target qemu-live | Christian Breunig | |
Simply boot a live qemu version from the latest ISO build (10:18) cpo lnx01:~/vyos-build [current] # sudo make qemu-live if [ ! -f build/live-image-amd64.hybrid.iso ]; then echo "Could not find build/live-image-amd64.hybrid.iso" exit 1 fi scripts/check-qemu-install --qemu-cmd build/live-image-amd64.hybrid.iso INFO - Creating Disk image testinstall-20231119-101823-4483.img SeaBIOS (version 1.16.2-debian-1.16.2-1) Machine UUID f48b60b2-e6ad-49ef-9d09-4245d0585e52 Booting from DVD/CD... ISOLINUX 6.04 20200816 ETCD Copyright (C) 1994-2015 H. Peter Anvin et al | |||
2023-11-15 | image: T4516: update test script for changes in prompts/partition id | John Estabrook | |
2023-09-20 | smoketest: T5607: adjust for non-deterministic scsi device probing | John Estabrook | |
2023-09-14 | smoketest: Allow selection of smoketests to run | sarthurdev | |
Example: `make test MATCH="interfaces|policy"` will only run interfaces and policy tests | |||
2023-09-09 | T5562: Fix -smp syntax for qemu-system-x86_64 | Apachez | |
2023-09-09 | Testsuite: fix qemu SMP configuration | Christian Breunig | |
2023-02-22 | T5024: Try to shutdown several times for qemu install script | Viacheslav Hletenko | |
The first shutdown for qemu doesn't work Try to shutdown several times | |||
2023-02-13 | debian: T5003: Increase VM memory - tests failed due to OOM condition | sarthurdev | |
2022-10-07 | Testsuite: T3664: move to new toml based input files | Christian Poessinger | |
2022-06-30 | smoketest: Move PKI file generate to script in vyos-1x | sarthurdev | |
2022-06-29 | openvpn: T4485: Add intermediate CA for smoketest | sarthurdev | |
2022-04-18 | Testsuite: add new '--qemu-cmd' switch to print the commandline to launch ↵ | Christian Poessinger | |
QEMU manually | |||
2022-04-18 | Testsuite: enable DHCP on eth0 - future smoketests could now verify DHCP | Christian Poessinger | |
2022-04-11 | Testsuite: increase memory to 2G for fastnetmon testcase | Christian Poessinger | |
2021-12-26 | Testsuite: fix cdrom boot in UEFI mode | Christian Poessinger | |
2021-12-26 | Revert "Testsuite: limit QEmu test disk size to 1G to not waste space on ↵ | Christian Poessinger | |
build host" This reverts commit a5e591fa9b66b229f7296de177a570c7b7126be4. | |||
2021-12-26 | Testsuite: limit QEmu test disk size to 1G to not waste space on build host | Christian Poessinger | |
2021-12-25 | Testsuite: add RAID-1 test case for disk recovery | Christian Poessinger | |
2021-12-25 | Testsuite: add loginVM()/shutdownVM() helpers | Christian Poessinger | |
2021-12-25 | Testsuite: add 8th NIC and disable PXE boot | Christian Poessinger | |
2021-12-09 | Testsuite: set default timeout to 60 seconds | Christian Poessinger | |
2021-12-09 | Testsuite: add new "make testraid" target for RAID-1 installation testing | Christian Poessinger | |
2021-12-09 | Testsuite: reference default user/pass from variable | Christian Poessinger | |
2021-12-02 | Testsuite: increase testing timeout to 3h | Christian Poessinger | |
2021-11-27 | Testsuite: increase testing timeout to 2h | Christian Poessinger | |
2021-11-04 | Testsuite: use individual UUID/name per UEFI/BIOS instance | Christian Poessinger | |
2021-10-30 | Testsuite: add UUID for DUID generation during tests | Christian Poessinger | |
2021-10-02 | Testsuite: add support for UEFI boots in Qemu | Christian Poessinger | |
(cherry picked from commit 6c438f92e7ada6fa42e41ac9eff0b1e1eb3756b3) | |||
2021-09-19 | Testsuite: add missing leading 'f' for Python3 format strings | Christian Poessinger | |
2021-08-19 | Testsuite: verify proper running Kernel version compared to repo | Christian Poessinger | |
2021-08-15 | Makefile: add "make test-no-interfaces" to start smoketests w/o interface tests | Christian Poessinger | |
2021-08-01 | Revert "Testsuite: list config directories for trouble shooting" | Christian Poessinger | |
This reverts commit 9b1ed0551854575c1e0608daaf5e0dc31c2958c9. |