| Age | Commit message (Collapse) | Author |
|---|
|
Kernel: T9197: package iwlwifi firmware the 6.18 driver actually loads
|
|
Firmware was selected by exact match against the names a driver declares.
On 6.18 iwlwifi declares only its highest API version, while at runtime it
falls back to lower versions, and for Wi-Fi 6/6E parts it caps the API at
the MAC family limit. linux-firmware ships none of the declared names, so
BE200, AX201, AX210, AX211 and AX411 were left without firmware.
For each declared iwlwifi name, the newest available ucode at or below the
declared version (core 99 falls back to API 101) is now packaged, together
with its PNVM file. Names with no loadable firmware emit a build warning.
|
|
includes security fix follow-up hardening and message-authenticator support for Blast-RADIUS mitigation
|
|
Kernel: T9385: Update Linux Kernel to 6.18.55
|
|
|
|
Adds to cleanup kernel intermediate objects and create source tarball
|
|
|
|
Added in commit 21c7e661 ("Kernel: T5641: enable module compression to save
disk space"), the flag is removed again as there is no need for it.
|
|
The README still described the pre-T8506 flow, where a single
x86_64_vyos_defconfig was copied into arch/x86/configs of the Kernel source
tree. That file and that flow no longer exist, and the text also claimed
the Kernel was 6.6 and that only amd64 was built.
Describe what actually happens: a per architecture base config selected from
dpkg --print-architecture, the config/*.config snippets merged on top in
file name order, and the module signing snippet generated at build time.
|
|
Smoketest test_kernel_options.py::test_hypervisor_virtio fails on arm64.
The test is not architecture gated and checks fifteen virtio options, of
which VIRTIO_IOMMU was the only one not enabled on arm64 - amd64 has it
as a module already.
The driver is available here, it is "depends on VIRTIO && (ARM64 || X86)",
and it is what QEMU virt machines use, so build it as a module to match
amd64.
ACPI_VIOT comes along because VIRTIO_IOMMU selects it.
|
|
The arm64 base config was still the dump of a 6.6.15 configuration. It had
only ever been hand edited per feature, never regenerated, so building
6.18.x produced 91 warnings from merge_config.sh:
Value requested for CONFIG_AS_HAS_LSE_ATOMICS not in final .config
Requested value: CONFIG_AS_HAS_LSE_ATOMICS=y
Actual value:
|
|
The config/*.config snippets are merged on every architecture, so an option
that only exists on one of them is reported as a mismatch on the others:
Value requested for CONFIG_NETLABEL not in final .config
Requested value: # CONFIG_NETLABEL is not set
Actual value:
Three options are only available on amd64 and were sitting in the shared
snippets. Move them to the amd64 base config, each next to the symbol that
gates it:
* XFRM_USER_COMPAT needs COMPAT_FOR_U64_ALIGNMENT
* HUGETLB_PAGE_OPTIMIZE_VMEMMAP_DEFAULT_ON needs
ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
* NETLABEL depends on SECURITY, which arm64 does not enable
|
|
T8938 consolidated the WWAN build time options into config/12-wwan.config
and requested the USB WWAN drivers as built-in. That only ever took effect
on amd64. On arm64 all of them silently ended up as modules, because a
tristate can never exceed the value of what it depends on and the arm64
base config had USB_USBNET=m and USB_SERIAL=m, while amd64 had both =y.
Pull the two parents into the snippet so the requested =y is reachable on
every architecture - this is a no-op on amd64 where they were already =y.
|
|
|
|
Update accel-ppp-ng to the 306fff8 version includes multiple
upstream fixes
|
|
Currently when the Kernel is build and creates the vyos-linux-firmware package,
the Kernel modules are inspected and the firmware file string is extracted.
This is the case for years. Now with ARM64 on the doorstep, we would assemble
the vyos-linux-firmware package twice, once for x86_64 and once for amd64.
The generated package is for CPU architecture all - as the package is build
twice, the longer running build will win -> perfect race condition.
|
|
Update accel-ppp-ng to the 8cb6287 version, which includes multiple
security fixes, merged in the https://github.com/accel-ppp/accel-ppp-ng/pull/40
|
|
The Accel-PPP maintainer scripts call depmod without a Kernel version, so it
uses the version reported by uname of the build host instead of the VyOS Kernel
the ipoe and vlan_mon modules were compiled for.
The ISO build therefore logs:
depmod: ERROR: could not open directory /lib/modules/6.1.0-52-amd64
depmod: FATAL: could not search modules
Add a patch that generates the maintainer scripts from a template so the module
directory version known to the build is substituted and handed to depmod
explicitly. The same version is already passed to the build via MODULES_KDIR,
and the uname fallback for standalone builds stays untouched.
|
|
* ixgbe v6.4.4 -> v6.4.5
* ice v2.6.6 -> v2.6.7
|
|
Fixes accel-ppp: vlan-mon does not create dynamic VLAN interfaces
|
|
Kernel 6.18 moved Intel BE200/BE-series (Wi-Fi 7) devices to the new
iwlmld op-mode driver: their dev_info entries in iwlwifi's pcie/drv.c
are guarded by IS_ENABLED(CONFIG_IWLMLD). The VyOS kernel config enables
IWLWIFI/IWLDVM/IWLMVM but not IWLMLD, so BE-series support is compiled
out and probing fails with error -22 (no wlan interface is created).
Enable IWLMLD as a module on x86 and arm64, matching the existing
IWLDVM/IWLMVM op-modes. The firmware these devices need is already
shipped by the linux-firmware package.
|
|
Update the accel-ppp-ng version to 9654bb6
Includes fixes for T8391
(Bonding interface permission errors with custom ethernet MTU)
|
|
Convert build-nat-rtsp.sh, build-ipt-netflow.sh, build-intel-nic.sh,
build-intel-qat.sh and build-linux-firmware.sh from fpm to debmake +
debuild, matching the jool/realtek packaging style.
|
|
build-kernel.sh parsed kernel_flavor out of defaults.toml itself via a
brittle awk one-liner, even though build.py already has that value from
its own defaults.toml read.
Pass kernel_flavor down as an env var instead, so defaults.toml is read
in exactly one place (build.py's main) and everything downstream flows
through kernel-vars or explicit parameters.
|
|
Rewrite build-jool.py, build-realtek-r8126.py and build-realtek-r8152.py
as build-*.sh, matching the Bash convention already used by every other
sub-dependency script in this directory (kernel-vars sourcing, debmake +
debuild packaging).
|
|
Accel-PPP-ng only links against a few VPP libraries, but the build triggered
a full VPP package rebuild (make pkg-deb) on every run, with no caching.
Skip that step when the required VPP libraries already exist from a
previous run.
Delete them to force a rebuild.
|
|
Commit 21c7e661 ("Kernel: T5641: enable module compression to save disk
space") which enabled module compression using XZ missed that when we search
modules for firmware inclusion, the pattern was hardcoded to *.ko instead of
*.ko* - this has been fixed.
|
|
T9147: Bump accel-ppp-ng version to 9874ea3
|
|
Upgrade rolling release Kernel version.
Changelogs:
* 6.18.41 https://lwn.net/Articles/1086227/
* 6.18.40 https://lwn.net/Articles/1084923/
* 6.18.39 https://lwn.net/Articles/1083464/
|
|
This version includes a fix for
T8391: Bonding interface permission errors with custom Ethernet MTU
|
|
|
|
Kernel: T9103: fix arm64 syscalltbl path breaking linux-perf package build
|
|
Building linux-perf-* on a native arm64 build host failed with "No rule to
make target '.../unistd_64.h'" because arch/arm64/kernel/Makefile.syscalls
overrides syscalltbl with a path relative to the kernel root, but
tools/lib/perf/Makefile invokes the header generator from tools/lib/perf/
instead. Make the override absolute, matching the srctree-prefixed default.
|
|
Kernel: T8868: Enable crash dump (kdump) and debug info in config
|
|
Kernel: T5641: enable module compression to save disk space
|
|
Enabling the following options allows us to use `kdump-tools`:
- `CONFIG_CRASH_DUMP`
- `CONFIG_DEBUG_INFO`
- `CONFIG_PROC_VMCORE`
|
|
Kernel: T9067: Update Linux Kernel to 6.18.38
|
|
Option useful during development to not automatically clean the Linux Kernel
source folder of all its intermediate files.
|
|
After signing the Linux Kernel modules with the ephemeral key, proceed
by compressing the Kernel modules with xz to reduce the final ISO image
size.
Initial tests have shown a size reduction by 60MiB.
|
|
|
|
|
|
|
|
for the fix for legacy hash algorithm loading
to make MS-CHAP work correctly again
|
|
Kernel: T8914: add support for 2.5G pluggables on BCM57810S
|
|
Kernel: T8605: net/l2tp: allow unmanaged tunnel setup without route to peer
|
|
Add the well-known JAMESMTL kernel module patch for bnx2x to advertise 2.5Gbit/s
capabilities on Broadcom NetXtreme2-X cards with BCM57810S chipset.
This is useful for ISP GPON access networks that use 2.5Gbit/s pluggables and
need the NIC to negotiate beyond 1000baseT/Full, avoiding the 940Mbit/s
practical cap on overprovisioned 1G services.
References:
* https://hack-gpon.org/broadcom-57810s/
* https://github.com/JAMESMTL/snippets/blob/dceb2fee74d80c66d/bnx2x/patches/bnx2x_warpcore_8727_2_5g_sgmii_txfault.patch
|
|
|
|
|
|
Update versions:
* igb v5.20.28
* ixgbe v6.4.4
* ixgbevf v5.3.36
* i40e v2.30.18
* ice v2.6.6
* iavf v4.13.35
|
|
|
