| Age | Commit message (Collapse) | Author |
|---|
|
It does not make sense to have the common VyOS functionality for e.g VXLAN,
GENEVE, PPP, WireGuard, filesystems crypto or module signing duplicated for
both arm64 and x86_64.
Split out common configuration parts to be defined only once.
|
|
* Forwared port all out-of-tree driver patches
* Add Intel QAT patch to make it compile for LInux 6.18
* Remove out-of-tree OpenVPN DCO module - now available upstream
|
|
|
|
|
|
|
|
|
|
|
|
The inotify support for overlayfs is no longer needed. Native upstream support
landed in kernel 4.16 (commit 31747eda41ef/764baba80168 in 2018, which made
overlayfs hash inodes by their lower inode so fsnotify works on overlay mounts),
and kernel 6.8 (commit bc2473c90fca in 2023) extended it so fsnotify generates
events for operations on the real underlying files of an overlay.
The patch was an out-of-tree workaround that never went upstream and predates
these solutions.
|
|
linux-kernel: T8506: Use scripts/kconfig/merge_config.sh for merging kernel config fragments
|
|
fragments
Using scripts/kconfig/merge_config.sh for merging config fragments provides
validation and insights compared to the previously used simple
concatenation
|
|
With this addition we can always sign a Kernel module later and ship it if
needed, without re-compiling the Kernel.
Kernel will report:
[ 1.223891] Loaded X.509 cert 'VyOS Networks Secure Boot Signer 2025 - linux: 6ca57e2add335babd08da69b48c70693edd2b037'
Issuer: CN = VyOS Networks Secure Boot CA
Validity
Not Before: Apr 26 09:07:06 2025 GMT
Not After : Apr 24 09:07:06 2035 GMT
Subject: CN = VyOS Networks Secure Boot Signer 2025 - linux
|
|
PWRU (https://github.com/cilium/pwru) is a very useful tool to debug complex networking issues on Linux, as it allows you to trace how packets travel through the kernel functions
|
|
|
|
for the memory corruption vulnerability
|
|
T8410: Fix typos and mistakes in scripts and comments
|
|
Fix typos and mistakes in the comments
No functional changes
|
|
The custom patch "nft_ct: Added nfct_seqadj_ext_add() for DNAT'ed - conntrack."
is now available upstream in the Kernel tree.
|
|
Add CONFIG_RTC_DRV_EFI, CONFIG_RTC_DRV_PL031 kernel options for
system time update
|
|
Enable several additional kernel modules required for specific hardware
platforms.
Network:
- CONFIG_OCTEONTX2_AF
- CONFIG_OCTEONTX2_PF
eMMC:
- CONFIG_MMC_SDHCI_CADENCE
LED:
- CONFIG_GPIO_PCA953X
- CONFIG_LEDS_PCA955X_GPIO
I2C:
- CONFIG_I2C_THUNDERX
These drivers are built as modules to provide support for Marvell
OCTEON TX2 network devices, Cadence SDHCI eMMC controllers, PCA95xx
GPIO/LED expanders, and ThunderX I2C controllers.
|
|
|
|
Re-use a building block for WWAN support to de-duplicate individual configs for
both ARM64 and AMD64/X86.
|
|
Both architectures share common Kernel features - place them in single
config snippets so we have to maintain them only once.
This can for sure be further improved.
|
|
|
|
|
|
Fail vefore building VPP to not waste time.
|
|
|
|
|
|
If build.py detects a local "linux" directory which could be a
Git repository - it is used over downloading the released tarball.
|
|
|
|
|
|
|
|
|
|
Kernel: T8203: Update Linux Kernel to 6.6.121
|
|
|
|
|
|
T8181: Add kernel CONFIG_MODULE_SIG for arm64 architecture
|
|
T8174: Disable CHELSIO_FCOE kernel module due to issues
|
|
Add missed CONFIG_MODULE_SIG kernel options for arm64 architecture
|
|
Switch to https://github.com/nuclearcat/ipt-netflow as it has up-to-date
kernel support.
Remove outdated patches.
|
|
While by-passing a Chelsio NIC in Proxmox, some users are experiencing
issues with the `csiostor module`. After manually blacklisting
the module in GRUB settings, no issues were found.
Comment this module for the kernel.
|
|
ipoe: Fix flowi4_tos build error for the Kernel 6.18
|
|
Update accel-ppp-ng version, use VPP hooks plugin
```
$ git log --oneline a9ceadc..HEAD
474b63d (HEAD -> current, origin/current, origin/HEAD) Merge pull request #19 from Andri
iFullroot/SESSION_HOOKS
cda32aa Merge pull request #20 from AndriiFullroot/CRYPTO_API_ACTUALIZATION
b485a90 VD-2365: SSL calls refactoring
bfeab4b T8010: Refactoring VPP hooks private data
e451115 T8010: Rename vpp plugin to vyos_vpp plugin
88c0833 VD-2365: Update OpenSSL DES encryption
ff14f31 VD-2365: Update OpenSSL DH usage
a9bd91a VD-2365: Update OpenSSL calls for MD4/MD5 and SHA1
91bb6b1 T8010: ap_session/ppp cleanup fixup
d65aeee T8010: added vpp plugin
e2399b0 T8010: limiter plugin refactoring
2c00fde T8010: PPPoE plugin refactoring
9818f30 T8010: ap_session refactoring
56ac406 T8010: accel_iputils refactoring
1441dc2 T8010: PPP non-dev-ppp option
07f158d T8010: DHCPv6 and ND with non-socket packets
feda3e0 T8010: Added hooks interface
```
|
|
Signed-off-by: Andrii Melnychenko <a.melnychenko@vyos.io>
|
|
|
|
Add Secure Boot - compatible kexec Kernel options
- Required if system uses Secure Boot
- Allows systemctl kexec or kexec to load signed kernels safely
|
|
Add architecture detection for kernel configuration file.
|
|
|
|
The patch adds seqadj initialization for NATed conntrack.
This fixes access to FTP servers "behind" the NAT router.
The patch itself was proposed to the kernel and was accepted.
In future versions it should be included into the kernel.
Signed-off-by: Andrii Melnychenko <a.melnychenko@vyos.io>
|
|
T7706: linux‑perf package missing required shared libraries
|
|
slabtop: T7657: Op-mode command `show system memory cache` does not work
|
