summaryrefslogtreecommitdiff
path: root/scripts/package-build
AgeCommit message (Collapse)Author
2026-05-28Kernel: T8938: consolidate build time options for amd64 and arm64 WWANChristian Breunig
2026-05-23Kernel: T8919: Update Linux Kernel to 6.18.33Christian Breunig
The Kernel 6.18.33 now has an upstream fix for the fragnesia vulnerability
2026-05-18Merge pull request #1194 from c-po/kernel-sourceAndrii Klymenko
Kernel: T8880: reduce size of Kernel source TAR
2026-05-18Kernel: T8879: add missing Hyper-V drivers after 6.18 upgrade (#1193)Christian Breunig
* Kernel: T8846: consolidate config for CPU/Task time and stats accounting * Kernel: T8879: add config section for hypervisor Virtual Socket Protocol * Kernel: T8879: add missing Hyper-V drivers after 6.18 upgrade Add drivers for Hyper-V hypervisor which got lost in transition from 6.6 to 6.18 Kernel upgrade.
2026-05-17Kernel: T8880: reduce size of Kernel source TARChristian Breunig
Enable "make mrproper" before packaging kernel source tarball. After enabling PWRU support in T8496, the auto-generated kernel source tarball grew from under 1 GB to ~4 GB, largely due to intermediate build artifacts (for example, vmlinuz.o growing from 54 MB to 618 MB with additional debug symbols). Since the tarball is intended to contain kernel sources and custom patches and not intermediate objects, we now clean the tree with "make mrproper" before creating the tarball. This keeps package size down while preserving rebuildability.
2026-05-15Kernel: T8871: Update Linux Kernel to 6.18.31Christian Breunig
This fixes the LPE https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn
2026-05-15kernel: T8871: add a patch for the ptrace vulnerabilityDaniil Baturin
that allows unprivileged users to read files owned by any other user
2026-05-14Kernel: T8864: add patch for "fragnesia" local privilege escalationChristian Breunig
Fragnesia is a universal Linux local privilege escalation exploit, discovered with V12 by William Bowling with the V12 team. Fragnesia is a member of the Dirty Frag vulnerability class. This is a separate bug in the ESP/XFRM from dirtyfrag which has received its own patch. However, it is in the same surface and the mitigation is the same as for dirtyfrag. It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition. The technique extends the page-cache write bug class that includes Dirty Pipe: when a TCP socket transitions to espintcp ULP mode after data has already been spliced from a file into the receive queue, the kernel processes the queued file pages as ESP ciphertext. The AES-GCM keystream byte at counter block position 2, byte 0 is XORed directly into the cached file page. By selecting the IV nonce to produce a desired keystream byte, any target byte in the file can be set to any value — one byte per trigger invocation. From: https://github.com/v12-security/pocs/blob/532994fc003a7/fragnesia/README.md
2026-05-13Merge pull request #1178 from SuperQ/superq/psiDaniil Baturin
kernel: T8847: Enable PSI metric data
2026-05-12Merge pull request #1185 from c-po/intel-ootChristian Breunig
Kernel: T6847: update Intel Out-Of-Tree drivers for IGB, IXGBE, I40e, ICE and IAVF
2026-05-11Enable PSI metric dataSuperQ
Enable the kernel [Pressure Stall Information][PSI] accounting feature. This allows users to gather data on CPU and memory starvation. It's very useful to help find cases where the system performance is impacted by overloaded CPUs. [PSI]: https://docs.kernel.org/accounting/psi.html Signed-off-by: SuperQ <superq@gmail.com>
2026-05-08Kernel: T6847: add Intel IAVF out-of-tree Kernel driver with custom patchesChristian Breunig
The Intel iavf driver (formerly i40evf) is the Linux virtual function driver for modern Intel Ethernet adapters supporting SR-IOV, including the X700/E800 series. Renamed to iavf to support future devices, it replaced i40evf entirely by 2019. The driver facilitates high-performance networking in virtualized environments. This commit contains custom patches to make the driver build.
2026-05-08Kernel: T6847: use common build_intel_nic helper functionChristian Breunig
Instead of one build function per driver (ixgbe, i40, ice) which will anyways result in the same Python code path to be executed - use one common helper name: build_intel_nic
2026-05-08Kernel: T6847: add Intel ICE out-of-tree Kernel driver with custom patchesChristian Breunig
The current version of the Intel ice driver does not compile with a recent LTS Kernel due to missing internal Kernel API adjustments in the Intel driver. This commit contains custom patches to make the driver build.
2026-05-08Kernel: T6847: add Intel I40E out-of-tree Kernel driver with custom patchesChristian Breunig
The current version of the Intel i40e driver does not compile with a recent LTS Kernel due to missing internal Kernel API adjustments in the Intel driver. This commit contains custom patches to make the driver build.
2026-05-08Kernel: T6847: cleanup comments to not trigger config merge warningChristian Breunig
2026-05-08Kernel: T6847: cleanup Intel QAT driver source after buildChristian Breunig
2026-05-07T8612: FRR: fix ospf6d cmd output bugKyrylo Yatsenko
2026-05-07T8612: Upgrade FRR to 10.6.1Kyrylo Yatsenko
Rework BGP-LS megapatch to include all latest work on BGP-LS Rebase patches: * 0021-pathd-add-optional-protocol-to-no-mpls-te-import.patch * 0022-pathd-add-optional-parameters-to-no-index-cmd.patch Delete patches already merged into 10.6.1: * 0008-isis-fix-advertise-passive-only-routes-install.patch * 0009-T7909-eigrp-malformed-update-fix.patch * 0010-bgp-Support-multiple-labels-in-BGP-LU.patch * 0011-zebra-add-CLI-no-versions-for-max-bw-and-others.patch * 0014-Simplify-and-cleanup-mgmtd.patch
2026-05-06Kernel: T8147: extract common CONFIG_* options to be reusedChristian Breunig
It does not make sense to have the common VyOS functionality for e.g VXLAN, GENEVE, PPP, WireGuard, filesystems crypto or module signing duplicated for both arm64 and x86_64. Split out common configuration parts to be defined only once.
2026-05-03Kernel: T8147: upgrade to 6.18Christian Breunig
* Forwared port all out-of-tree driver patches * Add Intel QAT patch to make it compile for LInux 6.18 * Remove out-of-tree OpenVPN DCO module - now available upstream
2026-05-03Kernel: T8147: bump out-of-tree Intel NIC driver versionsChristian Breunig
2026-05-03Kernel: T8147: bump nat-rtsp commit id to support 6.18 API changesChristian Breunig
2026-05-03Kernel: T8147: bump linux-firmware package version to 20260410xChristian Breunig
2026-05-03Kernel: T8147: rename WWAN config snippet positionChristian Breunig
2026-05-03Kernel: T8147: use common WireGuard module in 10-networking.configChristian Breunig
2026-05-03Kernel: T8147: drop out-of-tree INOTIFY_STACKFS patchChristian Breunig
The inotify support for overlayfs is no longer needed. Native upstream support landed in kernel 4.16 (commit 31747eda41ef/764baba80168 in 2018, which made overlayfs hash inodes by their lower inode so fsnotify works on overlay mounts), and kernel 6.8 (commit bc2473c90fca in 2023) extended it so fsnotify generates events for operations on the real underlying files of an overlay. The patch was an out-of-tree workaround that never went upstream and predates these solutions.
2026-04-30Merge pull request #1169 from robinchrist/T8506-use-kconfig-merge-config-shDaniil Baturin
linux-kernel: T8506: Use scripts/kconfig/merge_config.sh for merging kernel config fragments
2026-04-30Merge pull request #1174 from hedrok/T8536-frr-no-mpls-import-fixViacheslav Hletenko
T8636: add FRR patches that fix pathd no cmds
2026-04-29Merge pull request #1171 from c-po/module-certJohn Estabrook
Kernel: T861: add custom VyOS CA to Kernel builds for later module signing
2026-04-29T8636: add FRR patches that fix pathd no cmdsKyrylo Yatsenko
7735ca88019a4fc6a9affee9df276b9c99773148 pathd: add optional parameters to `no index` cmd d421a3360bdb6eba18777388325b003b8bc985bc: pathd: add optional protocol to 'no mpls-te import' Both are upstream
2026-04-29T8597: Use specific version of kea-packaging repo in build scriptsAndrii Klymenko
Clone specific branch of kea-packaging repo.
2026-04-28linux-kernel: T8506: Use scripts/kconfig/merge_config.sh for merging config ↵Robin Christ
fragments Using scripts/kconfig/merge_config.sh for merging config fragments provides validation and insights compared to the previously used simple concatenation
2026-04-28Kernel: T861: add custom VyOS CA to Kernel builds for later module signingChristian Breunig
With this addition we can always sign a Kernel module later and ship it if needed, without re-compiling the Kernel. Kernel will report: [ 1.223891] Loaded X.509 cert 'VyOS Networks Secure Boot Signer 2025 - linux: 6ca57e2add335babd08da69b48c70693edd2b037' Issuer: CN = VyOS Networks Secure Boot CA Validity Not Before: Apr 26 09:07:06 2025 GMT Not After : Apr 24 09:07:06 2035 GMT Subject: CN = VyOS Networks Secure Boot Signer 2025 - linux
2026-04-27linux-kernel: T8496: Add kernel config needed for PWRURobin Christ
PWRU (https://github.com/cilium/pwru) is a very useful tool to debug complex networking issues on Linux, as it allows you to trace how packets travel through the kernel functions
2026-04-10T8472: Revert KEA-DHCP patchViacheslav Hletenko
Reverts vyos/vyos-build#1139 due to https://vyos.dev/T8472 As patch is incorrect
2026-04-05T8457: FRR: backport BGP-LSKyrylo Yatsenko
2026-04-03Jool: T8299: upgrade version to 4.1.15Christian Breunig
2026-03-30accel-ppp: T8439: update the commit referenceDaniil Baturin
for the memory corruption vulnerability
2026-03-26Merge pull request #1146 from sever-sever/T8410Christian Breunig
T8410: Fix typos and mistakes in scripts and comments
2026-03-26T8410: Fix typos and mistakes in scripts and commentsViacheslav Hletenko
Fix typos and mistakes in the comments No functional changes
2026-03-25Kernel: T8427: Update Linux Kernel to 6.6.130Christian Breunig
The custom patch "nft_ct: Added nfct_seqadj_ext_add() for DNAT'ed - conntrack." is now available upstream in the Kernel tree.
2026-03-25kea: T8424: Update Kea to 3.0.3sarthurdev
2026-03-22T8273: FRR ospfv3: fix LSA when no new BDR electedKyrylo Yatsenko
2026-03-22T8273: FRR remove already merged patchKyrylo Yatsenko
The patch 0018-zebra-Ensure-FRR-does-not-see-duplicate-local-routes.patch is already in FRR 10.5, in commit b342bc23ce128520722c078e501ef2b410140632, so removing it.
2026-03-19Merge pull request #1139 from sarthurdev/kea_multiaddrViacheslav Hletenko
kea: T7853: Offer subnet for any interface address
2026-03-18kea: T7853: Offer subnet for any interface addresssarthurdev
Move repo prep to pre-build hook so patches can be applied and build using build.py
2026-03-12T8376: Add ARM kernel options for system time udpateViacheslav Hletenko
Add CONFIG_RTC_DRV_EFI, CONFIG_RTC_DRV_PL031 kernel options for system time update
2026-03-12T8377: Update kernel ARM config for Marvell Octeon 10 CN10308Viacheslav Hletenko
Enable several additional kernel modules required for specific hardware platforms. Network: - CONFIG_OCTEONTX2_AF - CONFIG_OCTEONTX2_PF eMMC: - CONFIG_MMC_SDHCI_CADENCE LED: - CONFIG_GPIO_PCA953X - CONFIG_LEDS_PCA955X_GPIO I2C: - CONFIG_I2C_THUNDERX These drivers are built as modules to provide support for Marvell OCTEON TX2 network devices, Cadence SDHCI eMMC controllers, PCA95xx GPIO/LED expanders, and ThunderX I2C controllers.
2026-03-09T8363: Ensure FRR does not see duplicate local routes on interface changesViacheslav Hletenko
Add zebra patch from upstream
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-13 06:41:06 +0000