Age | Commit message (Collapse) | Author |
|
|
|
|
|
Fix build python3-vici. It did not include the directory
/usr/lib/python3/dist-packages/vici
|
|
T3303: fix location of os-release file
|
|
T6713: Update Realtek r8152 driver
|
|
|
|
We can not run the interface related tests, and non interface related
testcases in parallel to speedup the entire build process.
|
|
T973: Add build script for node_exporter package
|
|
The 'xen-guest-agent' could be used for XCP-NG images
|
|
|
|
T6754: Delete Jenkins build packages
|
|
|
|
|
|
|
|
|
|
|
|
build: T6738: add build_type field to version data instead of the very limited and unused lts_build
|
|
The shim review board (which is the secure boot base loader) recommends using
ephemeral keys when signing the Linux Kernel. This commit enables the Kernel
build system to generate a one-time ephemeral key that is used to:
* sign all build-in Kernel modules
* sign all other out-of-tree Kernel modules
The key lives in /tmp and is destroyed after the build container exits and is
named: "VyOS build time autogenerated kernel key".
In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it
unable to load any Kernel Module to the image that is NOT signed by the
ephemeral key.
|
|
instead of the very limited and unused lts_build
|
|
|
|
Same as T6078 but we now wan't to make use of ethtool --json eth0 to drop out
own text based parsing of ethtool options in [1]. This is the base for moving
to a better, machine readable interface
1: https://github.com/vyos/vyos-1x/blob/e47d4fd385631236da68/python/vyos/ethtool.py#L77-L105
|
|
so that the manifest only contains files considered build artifacts,
and those artifacts can be automatically picked up by CI jobs and the like
|
|
|
|
|
|
|
|
|
|
T861: add UEFI Secure Boot support
|
|
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux
Kernel and enforces module signing. This results in an additional security
layer where untrusted (unsigned) Kernel modules can no longer be loaded into
the live system.
NOTE: This commit will not work unless signing keys are present. Arbitrary
keys can be generated using instructions found in:
data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
|
|
|
|
In the past the CLI based smoketest was always executed under an else branch in
the testcase if-statement. Instead of using negative logic move all testcases
to positive logic adding an empty "catch all" else path.
|
|
This is required to support proper disk ejection and not reloading the disk on
system reboot when operation in BIOS mode.
|
|
To use VNC you could run "make test -- --vnc"
|
|
|
|
|
|
This code path was unused during CI runs.
|
|
When moving to UEFI and secure-boot it's better to just reboot the system
for Machine Owner Key installation, then powercycling the machine.
This commit will use `reboot now` over `poweroff` after base system installation
and boot into installed image for smoketest handling.
|
|
|
|
|
|
Get kernel version from the vyos-build/data/defaults.toml
for buld 'linux-kernel' and related packages
Retrun the original build-jool.py script
|
|
|
|
T6674: Add build-scrips for packages without Jenkins
|
|
Add build scripts for .deb packages without Jenkins.
To exclude Jenkins we need some place where we can put new builds-scripts
to run in parallel (old/new) during meantime
We will deprecate old Jenkins package builds in the future.
|
|
|
|
As we got rid of most of the old vyatta packages we can now also discontinue
vyos-world. It only served the purpose of keeping the package list during ISO
build small.
|
|
|
|
|
|
|
|
Moved defaults away from argparser to `defaults.py`. This unlocks the ability to
pass values that can be defined as command line arguments via a config file.
With this change logic looks like this (in order of overrides).
Pre-build config:
`data/defaults.toml` -> `build-flavors/<flavor>.toml` ->
`--<command line argument>`
Build config:
`defaults.py` -> `data/defaults.toml` -> `build-types/<type>.toml` ->
`architectures/<architecture>.toml` -> `build-flavors/<flavor>.toml` ->
`--<command line argument>`
|
|
The previous version did not work for all flavor types. This one should be
universal.
|
|
Mark artifacts with a flavor name for better clarity.
|