| Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
|
|
|
|
The inotify support for overlayfs is no longer needed. Native upstream support
landed in kernel 4.16 (commit 31747eda41ef/764baba80168 in 2018, which made
overlayfs hash inodes by their lower inode so fsnotify works on overlay mounts),
and kernel 6.8 (commit bc2473c90fca in 2023) extended it so fsnotify generates
events for operations on the real underlying files of an overlay.
The patch was an out-of-tree workaround that never went upstream and predates
these solutions.
|
|
T8445: add support for extension of activation system
|
|
linux-kernel: T8506: Use scripts/kconfig/merge_config.sh for merging kernel config fragments
|
|
T8636: add FRR patches that fix pathd no cmds
|
|
Kernel: T861: add custom VyOS CA to Kernel builds for later module signing
|
|
7735ca88019a4fc6a9affee9df276b9c99773148
pathd: add optional parameters to `no index` cmd
d421a3360bdb6eba18777388325b003b8bc985bc:
pathd: add optional protocol to 'no mpls-te import'
Both are upstream
|
|
Clone specific branch of kea-packaging repo.
|
|
fragments
Using scripts/kconfig/merge_config.sh for merging config fragments provides
validation and insights compared to the previously used simple
concatenation
|
|
With this addition we can always sign a Kernel module later and ship it if
needed, without re-compiling the Kernel.
Kernel will report:
[ 1.223891] Loaded X.509 cert 'VyOS Networks Secure Boot Signer 2025 - linux: 6ca57e2add335babd08da69b48c70693edd2b037'
Issuer: CN = VyOS Networks Secure Boot CA
Validity
Not Before: Apr 26 09:07:06 2025 GMT
Not After : Apr 24 09:07:06 2035 GMT
Subject: CN = VyOS Networks Secure Boot Signer 2025 - linux
|
|
PWRU (https://github.com/cilium/pwru) is a very useful tool to debug complex networking issues on Linux, as it allows you to trace how packets travel through the kernel functions
|
|
Add additional validation step to ensure that the transfer drive is unmounted successfully.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
|
Apply suggestion, add validation that the Syft binary was copied with success.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
|
Exclude the transfer directory from scan.
|
|
Use the Syft util to generate SBOM files in both CycloneDX and SPDX format. This process includes creating a transfer disk to copy the Syft util from the host machine and copy the scan results back to the host machine.
|
|
|
|
When building raw images, leave hint to indicate activiation init on
boot.
|
|
It does not make sense to test the serial console autodeteaction on a flavor
which uses a VGA console like PROXMOX. If console_type is a VGA console, bail
out early from the tests.
|
|
VyOS flavors might come with boot_settings which already provided additional
serial interface settings if required. Instead of using our own definitions,
re-use what's already existing.
scripts/image-build/build-vyos-image comes with an implicit default for
boot_settings like console number and speed, thus we do not need to redefine
the existing default - again.
|
|
|
|
T8472: Revert KEA-DHCP patch
|
|
Testsuite: T8375: verify proper serial console settings
|
|
Reverts vyos/vyos-build#1139 due to https://vyos.dev/T8472
As patch is incorrect
|
|
Now that the serial console definition is dynamically generated by the image
installer, depending on the flavor data, it is time to validate the resulting
CLI nodes and GRUB config.
|
|
As there is also "set system console device <DEV> kernel", use a more specific
match criteria to avoid false positives.
|
|
|
|
Jool: T8299: upgrade version to 4.1.15
|
|
flavor: T8375: add flavor.json during build into resulting image
|
|
|
|
In order for amd64 or arm64 images to know their serial console settings, we
embed a new file named "flavor.json" under "/usr/share/vyos" into the resulting
image. The file holds configuration parameters unique to the build flavor.
Corresponding library functions are available via a Python vyos.flavor module.
|
|
for the memory corruption vulnerability
|
|
T8410: Fix typos and mistakes in scripts and comments
|
|
Fix typos and mistakes in the comments
No functional changes
|
|
The custom patch "nft_ct: Added nfct_seqadj_ext_add() for DNAT'ed - conntrack."
is now available upstream in the Kernel tree.
|
|
|
|
|
|
The patch
0018-zebra-Ensure-FRR-does-not-see-duplicate-local-routes.patch
is already in FRR 10.5, in commit b342bc23ce128520722c078e501ef2b410140632,
so removing it.
|
|
kea: T7853: Offer subnet for any interface address
|
|
Move repo prep to pre-build hook so patches can be applied and build using build.py
|
|
T8377: Update kernel ARM config for Marvell Octeon 10 CN10308
|
|
oci: T8366: remove features from container image which are not supported
|
|
Add CONFIG_RTC_DRV_EFI, CONFIG_RTC_DRV_PL031 kernel options for
system time update
|
|
Enable several additional kernel modules required for specific hardware
platforms.
Network:
- CONFIG_OCTEONTX2_AF
- CONFIG_OCTEONTX2_PF
eMMC:
- CONFIG_MMC_SDHCI_CADENCE
LED:
- CONFIG_GPIO_PCA953X
- CONFIG_LEDS_PCA955X_GPIO
I2C:
- CONFIG_I2C_THUNDERX
These drivers are built as modules to provide support for Marvell
OCTEON TX2 network devices, Cadence SDHCI eMMC controllers, PCA95xx
GPIO/LED expanders, and ThunderX I2C controllers.
|
|
T8373: check-qemu-install: increase BOOTLOADER_SLEEP time
|
|
|
|
Add zebra patch from upstream
|