2681 Commits

Author SHA1 Message Date
Daniil Baturin
3fe55e7813 build: T3664: improve support for custom build hooks 2024-09-18 13:06:49 +01:00
Daniil Baturin
ead4cc2eba
Merge pull request #766 from dmbaturin/manifest-reuse-iso
build: T6653: fix a manifest generation error when using --reuse-iso
2024-09-18 08:29:01 +01:00
Daniil Baturin
d991d8779b build: T6653: fix a manifest generation error when using --reuse-iso 2024-09-17 22:20:33 +01:00
Simon
2a53f210ee
Merge pull request #765 from sarthurdev/tpm_luks 2024-09-17 20:04:04 +02:00
sarthurdev
983e4ffd97 build: T861: Add socat as needed by commit 7f23b57 2024-09-17 11:30:36 +02:00
sarthurdev
d60f5222c2 tpm: T4919: Fix TPM test for changes in 7f23b57 2024-09-17 11:30:36 +02:00
sarthurdev
e35345a446 tpm: T4919: Fix check for /dev/tpm0 2024-09-17 10:25:36 +02:00
Christian Breunig
be867edddc
Merge pull request #764 from c-po/secure-boot
Kernel: T861: use find over ls when probing for Kernel signing public keys
2024-09-16 23:37:05 +02:00
Christian Breunig
5aaf98f57c Kernel: T861: use find over ls when probing for Kernel signing public keys 2024-09-16 21:09:41 +02:00
Daniil Baturin
d5adf5b36c
Merge pull request #758 from HollyGurza/T6684
T6684: new Debian package repo snapshot logic
2024-09-16 16:51:14 +01:00
Viacheslav Hletenko
5255ad102a
Merge pull request #763 from c-po/secure-boot
T861: add UEFI Secure Boot support
2024-09-16 12:27:21 +03:00
khramshinr
a26ef9e170 T6684: new Debian package repo snapshot logic
patch live-build to save information about all installed packages and their source repo, including temporary packages
2024-09-16 14:23:59 +06:00
Christian Breunig
928c1f505b Docker: T861: fix warning for UID_MIN/UID_MAC out of range
Rise upper limit for UID when working in an Active Direcotry integrated
environment. This solves the warning: vyos_bld's uid 1632000007 outside of the
UID_MIN 1000 and UID_MAX 60000 range.
2024-09-14 23:14:19 +02:00
Christian Breunig
fd737172f1 T861: add UEFI Secure Boot support
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux
Kernel and enforces module signing. This results in an additional security
layer where untrusted (unsigned) Kernel modules can no longer be loaded into
the live system.

NOTE: This commit will not work unless signing keys are present. Arbitrary
keys can be generated using instructions found in:

  data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
2024-09-14 23:05:23 +02:00
Christian Breunig
beb3df0733 Kernel: T5887: cleanup Debian postinst files after package build 2024-09-14 20:58:44 +02:00
Christian Breunig
f523ae5cac Kernel: T5887: update Linux Kernel to v6.6.51 2024-09-14 20:58:44 +02:00
Christian Breunig
e4a2e22ced mellanox: T6231: execute build script with sudo 2024-09-14 20:58:44 +02:00
Christian Breunig
300674c144
Merge pull request #759 from sever-sever/T6674-netfilter
T6674: Fix build package netfilter dependencies
2024-09-12 19:07:03 +02:00
Viacheslav Hletenko
21370c5c7d T6674: Fix build package netfilter dependencies 2024-09-12 08:26:26 +00:00
Christian Breunig
55c17f9283
Merge pull request #755 from nvollmar/T6703
T6703: add support for amd pstate driver
2024-09-09 10:40:46 +02:00
Christian Breunig
fc3f8317e9
Merge pull request #754 from sever-sever/T6674
T6674: build-kernel: Get kernel version from the defatults
2024-09-09 10:38:59 +02:00
Christian Breunig
e86bfd7ab9 Testsuite: T861: add explicit --smoketest argument
In the past the CLI based smoketest was always executed under an else branch in
the testcase if-statement. Instead of using negative logic move all testcases
to positive logic adding an empty "catch all" else path.
2024-09-07 21:32:34 +02:00
Christian Breunig
6ef7069098 Testsuite: T861: use fix bootindex for install medium and non-volatile disks
This is required to support proper disk ejection and not reloading the disk on
system reboot when operation in BIOS mode.
2024-09-07 21:32:34 +02:00
Christian Breunig
115fb522c8 Testsuite: T861: add support to use VNC for a graphics console
To use VNC you could run "make test -- --vnc"
2024-09-07 21:32:34 +02:00
Christian Breunig
986b71af2d Testsuite: T861: use variable to define one single place for VM name 2024-09-07 21:32:34 +02:00
Christian Breunig
aa6ca5c65b Testsuite: T861: cleanup imports and use "kernel_flavor" from vyos_defaults 2024-09-07 21:32:34 +02:00
Christian Breunig
e5627bf050 Testsuite: T861: remove option to disable KVM and use soft-emulation
This code path was unused during CI runs.
2024-09-07 21:32:34 +02:00
Christian Breunig
7f23b57b19 Testsuite: T861: eject installation media CD-ROM over powercycle
When moving to UEFI and secure-boot it's better to just reboot the system
for Machine Owner Key installation, then powercycling the machine.

This commit will use `reboot now` over `poweroff` after base system installation
and boot into installed image for smoketest handling.
2024-09-07 21:32:34 +02:00
Christian Breunig
fd7d1d0d20 Kernel: T861: remove superfluous architecture from Kernel string 2024-09-07 21:31:46 +02:00
Viacheslav Hletenko
f7022914d2 T6674: Add trigger rebuild kernel if defaults.toml is changed 2024-09-06 11:30:43 +00:00
Viacheslav Hletenko
f9372b85dd T6674: Add symlink to original linux-kernel arch and patches 2024-09-06 09:43:59 +00:00
Nicolas Vollmar
01085c0512 T6703: add support for amd pstate driver 2024-09-06 10:30:11 +02:00
Viacheslav Hletenko
9055e9bae1 T6674: build-kernel: Get kernel version from the defatults
Get kernel version from the vyos-build/data/defaults.toml
for buld 'linux-kernel' and related packages
Retrun the original build-jool.py script
2024-09-06 08:15:22 +00:00
Christian Breunig
ae3e89deea
Merge pull request #753 from sever-sever/T6674-actions-keys
T6674: Add keys gpg_key_id and package_branch to rebuild packages
2024-09-06 07:23:41 +02:00
Viacheslav Hletenko
c371faf389 T6674: Add keys gpg_key_id and package_branch to rebuild packages 2024-09-05 14:42:43 +00:00
Daniil Baturin
c319ca6723
Merge pull request #751 from c-po/secure-boot-cleanup
T1416: T861: T3664: T3664: T2640: various cleanup commits
2024-09-05 15:42:15 +01:00
Viacheslav Hletenko
a6a4f08d56
Merge pull request #752 from sever-sever/T6674-actions
T6674: Add workflow to rebuild packages
2024-09-05 13:52:54 +03:00
Viacheslav Hletenko
ceb91a27a8 T6674: Add workflow to rebuild packages 2024-09-05 10:12:31 +00:00
Christian Breunig
68671774f9 T4974: remove package openvpn-dco as it has a proper dependency via vyos-1x 2024-09-05 07:14:43 +02:00
Christian Breunig
d851548515 Makefile: T2640: fix PHONY typo
Fix typo added in commit 499e8e1cbb ("Makefile: T2640: add helper to convert
ISO to OCI image to start a co…ntainer") should be PHONY over PHONE
2024-09-05 07:14:43 +02:00
Christian Breunig
3170bcaf2c build: T3664: remove unused psutil dependency 2024-09-05 07:13:08 +02:00
Christian Breunig
f53921911e telegraf: T3664: remove package dependency
Telegraf is not a full VyOS feature with a proper dependency in place via
vyos-1x package. Drop this temporary dependency.
2024-09-05 07:13:08 +02:00
Christian Breunig
3e9cda21c8 Docker: T861: fix warnings about latest ENV key=value syntax 2024-09-05 07:13:08 +02:00
Christian Breunig
388efd9f78 Makefile: T861: add possibility to pass CLI options to check-qemu-install
We can now pass any arbitrary option to the check-qemu-install script by
calling: make test -- --bar-option or make testc -- --foo-option

please note the -- which is not a typo but rather signals the end of options
and disables further option processing and passes the options down to the next
script.
2024-09-05 07:13:08 +02:00
Christian Breunig
d50707bb29 T1416: remove deprecated default-union-grub-entry 2024-09-05 07:13:08 +02:00
Christian Breunig
b82afa2bd5
Merge pull request #748 from vyos/t5887-kernel-6.6.49
Kernel: T5887: update Linux Kernel to v6.6.49
2024-09-05 00:24:01 +02:00
Christian Breunig
c635fc980e
Kernel: T5887: update Linux Kernel to v6.6.49 2024-09-04 21:23:47 +02:00
Daniil Baturin
9833897b7c
Merge pull request #745 from sever-sever/T6674
T6674: Add build-scrips for packages without Jenkins
2024-09-02 15:46:50 +01:00
Viacheslav Hletenko
cc7d0993b4 T6674: Add build-scrips for packages without Jenkins
Add build scripts for .deb packages without Jenkins.
To exclude Jenkins we need some place where we can put new builds-scripts
to run in parallel (old/new) during meantime
We will deprecate old Jenkins package builds in the future.
2024-08-29 09:30:52 +00:00
Christian Breunig
013e4d5dc9
Merge pull request #736 from c-po/artifacts-T6653
build: T6653: add build/manifest.json file
2024-08-26 20:53:33 +02:00