522 Commits

Author SHA1 Message Date
Viacheslav Hletenko
33f15da7d4
Merge pull request #830 from dmbaturin/T6854-frr-pcre-build
frr: T6854: build FRR with PCRE2 support for better performance
2024-11-06 23:25:10 +02:00
Daniil Baturin
9ed7a29ebb build: T6855: make the custom APT entry and key syntax more flexible 2024-11-06 19:03:42 +00:00
Daniil Baturin
59228da66a frr: T6854: build FRR with PCRE2 support for better performance 2024-11-06 16:09:18 +00:00
Daniil Baturin
5674398d59
Merge pull request #827 from sever-sever/T6813-kernel
T6813: Build tarballs for the packages in the linux-kernel dir
2024-11-04 20:16:14 +00:00
Viacheslav Hletenko
50b3d9f80e T6813: Build tarballs for the packages in the linux-kernel dir
Build tarballs for the packages related linux-kernel dir.
2024-11-01 13:50:56 +00:00
Daniil Baturin
3a53e7b442
Merge pull request #825 from sever-sever/T6840
T6840: Build OpenVPN-otp use commit id instead of master
2024-10-29 16:11:22 +00:00
Viacheslav Hletenko
051bda1f2b T6813: Add tarballs for the netfilter 2024-10-28 19:07:35 +00:00
Viacheslav Hletenko
3c9a2ce87f T6840: Build OpenVPN-otp use commit id instead of master 2024-10-28 18:13:38 +00:00
Viacheslav Hletenko
b955b11680 T6813: Build tarballs for the packages
Build tarballs for the packages with our changes after patches
2024-10-24 12:49:56 +00:00
Viacheslav Hletenko
510aa6ec88 T6713: Build Realtek driver change source repo 2024-10-18 10:05:06 +00:00
Christian Breunig
3a6e1d4455 Kernel: T861: T6713: fix generation of realtek driver signature
We need to sign the module during the Debian build run, before the
binaries are packed into the resulting DEB.
2024-10-12 08:02:23 +02:00
Viacheslav Hletenko
df59bc2dd4 T861: T6713: Sign Realtek drivers 2024-10-09 15:45:39 +00:00
rebortg
b3460ca121 T973: add build script for frr_exporter package 2024-10-08 14:49:31 +02:00
Viacheslav Hletenko
7c5c0334ca T6765: Fix build python3-vici package
Fix build python3-vici. It did not include the directory
/usr/lib/python3/dist-packages/vici
2024-10-08 08:20:33 +00:00
Christian Breunig
c1fc21a0ad
Merge pull request #797 from c-po/fix-T3303
T3303: fix location of os-release file
2024-10-07 17:27:17 +02:00
Daniil Baturin
49d41fa34a
Merge pull request #762 from sever-sever/T6713-current-realtek
T6713: Update Realtek r8152 driver
2024-10-07 15:58:30 +01:00
Christian Breunig
65b64c8807 T3303: fix location of os-release file 2024-10-07 16:34:59 +02:00
Christian Breunig
57d5afe0ff Testsuite: T6494: add new make target "test-interfaces"
We can not run the interface related tests, and non interface related
testcases in parallel to speedup the entire build process.
2024-10-06 16:16:02 +02:00
Viacheslav Hletenko
c6231a51e8
Merge pull request #785 from sever-sever/T973
T973: Add build script for node_exporter package
2024-10-04 07:39:05 +03:00
Viacheslav Hletenko
1d69d490ca T6758: Add build package xen-guest-agent
The 'xen-guest-agent' could be used for XCP-NG images
2024-10-03 12:03:18 +00:00
Viacheslav Hletenko
40b0d63dcb T973: Add build script for node_exporter package 2024-10-02 16:18:07 +00:00
Viacheslav Hletenko
2b9303d0bd
Merge pull request #781 from sever-sever/T6754
T6754: Delete Jenkins build packages
2024-10-02 15:05:03 +03:00
Viacheslav Hletenko
a3b515ca71 T6713: Update Realtek r8152 driver 2024-10-02 11:48:46 +00:00
Viacheslav Hletenko
2fed892f27 T6754: Delete Jenkins build packages 2024-10-02 08:02:51 +00:00
Viacheslav Hletenko
7bd5496de1 T6755: Change default vyos mirror URL 2024-10-02 07:34:49 +00:00
Viacheslav Hletenko
8879bf0fdf T861: Fix mellanox build by actions 2024-10-01 15:53:10 +00:00
Viacheslav Hletenko
db70544b0d T861: Fix kernel suffix for package build by actions 2024-10-01 12:45:16 +00:00
Christian Breunig
47de7d4103
Merge pull request #773 from dmbaturin/T6738-build-type-field
build: T6738: add build_type field to version data instead of the very limited and unused lts_build
2024-09-30 17:09:08 +02:00
Christian Breunig
d235b31a09 T861: sign all Kernel modules with an ephemeral key
The shim review board (which is the secure boot base loader) recommends using
ephemeral keys when signing the Linux Kernel. This commit enables the Kernel
build system to generate a one-time ephemeral key that is used to:

* sign all build-in Kernel modules
* sign all other out-of-tree Kernel modules

The key lives in /tmp and is destroyed after the build container exits and is
named: "VyOS build time autogenerated kernel key".

In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it
unable to load any Kernel Module to the image that is NOT signed by the
ephemeral key.
2024-09-25 20:24:21 +02:00
Daniil Baturin
e41d2f12b9 build: T6738: add build_type field to version data
instead of the very limited and unused lts_build
2024-09-25 11:50:48 +01:00
Christian Breunig
b93672d9fb T861: VyOS image build should use UTC timestamps 2024-09-22 09:31:31 +02:00
Christian Breunig
9e7dd13f52 ethtool: T6729: upgrade to 6.10 to make use of more --json options
Same as T6078 but we now wan't to make use of ethtool --json eth0 to drop out
own text based parsing of ethtool options in [1]. This is the base for moving
to a better, machine readable interface

1: https://github.com/vyos/vyos-1x/blob/e47d4fd385631236da68/python/vyos/ethtool.py#L77-L105
2024-09-21 09:27:41 +02:00
Daniil Baturin
25aeda5c4b build: T3664: add an option to specify artifact extensions
so that the manifest only contains files considered build artifacts,
and those artifacts can be automatically picked up by CI jobs and the like
2024-09-20 16:07:00 +01:00
Daniil Baturin
3fe55e7813 build: T3664: improve support for custom build hooks 2024-09-18 13:06:49 +01:00
Daniil Baturin
d991d8779b build: T6653: fix a manifest generation error when using --reuse-iso 2024-09-17 22:20:33 +01:00
sarthurdev
d60f5222c2 tpm: T4919: Fix TPM test for changes in 7f23b57 2024-09-17 11:30:36 +02:00
sarthurdev
e35345a446 tpm: T4919: Fix check for /dev/tpm0 2024-09-17 10:25:36 +02:00
Viacheslav Hletenko
5255ad102a
Merge pull request #763 from c-po/secure-boot
T861: add UEFI Secure Boot support
2024-09-16 12:27:21 +03:00
Christian Breunig
fd737172f1 T861: add UEFI Secure Boot support
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux
Kernel and enforces module signing. This results in an additional security
layer where untrusted (unsigned) Kernel modules can no longer be loaded into
the live system.

NOTE: This commit will not work unless signing keys are present. Arbitrary
keys can be generated using instructions found in:

  data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
2024-09-14 23:05:23 +02:00
Viacheslav Hletenko
21370c5c7d T6674: Fix build package netfilter dependencies 2024-09-12 08:26:26 +00:00
Christian Breunig
e86bfd7ab9 Testsuite: T861: add explicit --smoketest argument
In the past the CLI based smoketest was always executed under an else branch in
the testcase if-statement. Instead of using negative logic move all testcases
to positive logic adding an empty "catch all" else path.
2024-09-07 21:32:34 +02:00
Christian Breunig
6ef7069098 Testsuite: T861: use fix bootindex for install medium and non-volatile disks
This is required to support proper disk ejection and not reloading the disk on
system reboot when operation in BIOS mode.
2024-09-07 21:32:34 +02:00
Christian Breunig
115fb522c8 Testsuite: T861: add support to use VNC for a graphics console
To use VNC you could run "make test -- --vnc"
2024-09-07 21:32:34 +02:00
Christian Breunig
986b71af2d Testsuite: T861: use variable to define one single place for VM name 2024-09-07 21:32:34 +02:00
Christian Breunig
aa6ca5c65b Testsuite: T861: cleanup imports and use "kernel_flavor" from vyos_defaults 2024-09-07 21:32:34 +02:00
Christian Breunig
e5627bf050 Testsuite: T861: remove option to disable KVM and use soft-emulation
This code path was unused during CI runs.
2024-09-07 21:32:34 +02:00
Christian Breunig
7f23b57b19 Testsuite: T861: eject installation media CD-ROM over powercycle
When moving to UEFI and secure-boot it's better to just reboot the system
for Machine Owner Key installation, then powercycling the machine.

This commit will use `reboot now` over `poweroff` after base system installation
and boot into installed image for smoketest handling.
2024-09-07 21:32:34 +02:00
Christian Breunig
fd7d1d0d20 Kernel: T861: remove superfluous architecture from Kernel string 2024-09-07 21:31:46 +02:00
Viacheslav Hletenko
f9372b85dd T6674: Add symlink to original linux-kernel arch and patches 2024-09-06 09:43:59 +00:00
Viacheslav Hletenko
9055e9bae1 T6674: build-kernel: Get kernel version from the defatults
Get kernel version from the vyos-build/data/defaults.toml
for buld 'linux-kernel' and related packages
Retrun the original build-jool.py script
2024-09-06 08:15:22 +00:00