vyos-build.git - VyOS image build scripts (mirror of https://github.com/vyos/vyos-build.git)

Age	Commit message (Collapse)	Author
2026-04-30	Merge pull request #1169 from robinchrist/T8506-use-kconfig-merge-config-sh	Daniil Baturin
	linux-kernel: T8506: Use scripts/kconfig/merge_config.sh for merging kernel config fragments
2026-04-28	linux-kernel: T8506: Use scripts/kconfig/merge_config.sh for merging config ↵	Robin Christ
	fragments Using scripts/kconfig/merge_config.sh for merging config fragments provides validation and insights compared to the previously used simple concatenation
2026-04-28	Kernel: T861: add custom VyOS CA to Kernel builds for later module signing	Christian Breunig
	With this addition we can always sign a Kernel module later and ship it if needed, without re-compiling the Kernel. Kernel will report: [ 1.223891] Loaded X.509 cert 'VyOS Networks Secure Boot Signer 2025 - linux: 6ca57e2add335babd08da69b48c70693edd2b037' Issuer: CN = VyOS Networks Secure Boot CA Validity Not Before: Apr 26 09:07:06 2025 GMT Not After : Apr 24 09:07:06 2035 GMT Subject: CN = VyOS Networks Secure Boot Signer 2025 - linux
2026-03-26	T8410: Fix typos and mistakes in scripts and comments	Viacheslav Hletenko
	Fix typos and mistakes in the comments No functional changes
2026-02-17	Kernel: T8134: split-out common executable file formats from config	Christian Breunig

2026-02-17	Kernel: T8134: add ccache build dependency for local build time speedupx	Christian Breunig

2025-12-10	T8085: Do not hardcode values in kernel build scripts	Andrii Klymenko
	Add architecture detection for kernel configuration file.
2025-03-18	T861: use custom Kernel certificate over the root shim signing certificate	Christian Breunig

2025-03-11	T7233: Fix wrong MOK certs path in the script of build-kernel.sh	Youyuan

2024-10-01	T861: Fix kernel suffix for package build by actions	Viacheslav Hletenko

2024-09-25	T861: sign all Kernel modules with an ephemeral key	Christian Breunig
	The shim review board (which is the secure boot base loader) recommends using ephemeral keys when signing the Linux Kernel. This commit enables the Kernel build system to generate a one-time ephemeral key that is used to: * sign all build-in Kernel modules * sign all other out-of-tree Kernel modules The key lives in /tmp and is destroyed after the build container exits and is named: "VyOS build time autogenerated kernel key". In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it unable to load any Kernel Module to the image that is NOT signed by the ephemeral key.
2024-08-29	T6674: Add build-scrips for packages without Jenkins	Viacheslav Hletenko
	Add build scripts for .deb packages without Jenkins. To exclude Jenkins we need some place where we can put new builds-scripts to run in parallel (old/new) during meantime We will deprecate old Jenkins package builds in the future.