Daniil Baturin
3fe55e7813
build: T3664: improve support for custom build hooks
2024-09-18 13:06:49 +01:00
Daniil Baturin
ead4cc2eba
Merge pull request #766 from dmbaturin/manifest-reuse-iso
...
build: T6653: fix a manifest generation error when using --reuse-iso
2024-09-18 08:29:01 +01:00
Daniil Baturin
d991d8779b
build: T6653: fix a manifest generation error when using --reuse-iso
2024-09-17 22:20:33 +01:00
Simon
2a53f210ee
Merge pull request #765 from sarthurdev/tpm_luks
2024-09-17 20:04:04 +02:00
sarthurdev
983e4ffd97
build: T861: Add socat as needed by commit 7f23b57
2024-09-17 11:30:36 +02:00
sarthurdev
d60f5222c2
tpm: T4919: Fix TPM test for changes in 7f23b57
2024-09-17 11:30:36 +02:00
sarthurdev
e35345a446
tpm: T4919: Fix check for /dev/tpm0
2024-09-17 10:25:36 +02:00
Christian Breunig
be867edddc
Merge pull request #764 from c-po/secure-boot
...
Kernel: T861: use find over ls when probing for Kernel signing public keys
2024-09-16 23:37:05 +02:00
Christian Breunig
5aaf98f57c
Kernel: T861: use find over ls when probing for Kernel signing public keys
2024-09-16 21:09:41 +02:00
Daniil Baturin
d5adf5b36c
Merge pull request #758 from HollyGurza/T6684
...
T6684: new Debian package repo snapshot logic
2024-09-16 16:51:14 +01:00
Viacheslav Hletenko
5255ad102a
Merge pull request #763 from c-po/secure-boot
...
T861: add UEFI Secure Boot support
2024-09-16 12:27:21 +03:00
khramshinr
a26ef9e170
T6684: new Debian package repo snapshot logic
...
patch live-build to save information about all installed packages and their source repo, including temporary packages
2024-09-16 14:23:59 +06:00
Christian Breunig
928c1f505b
Docker: T861: fix warning for UID_MIN/UID_MAC out of range
...
Rise upper limit for UID when working in an Active Direcotry integrated
environment. This solves the warning: vyos_bld's uid 1632000007 outside of the
UID_MIN 1000 and UID_MAX 60000 range.
2024-09-14 23:14:19 +02:00
Christian Breunig
fd737172f1
T861: add UEFI Secure Boot support
...
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux
Kernel and enforces module signing. This results in an additional security
layer where untrusted (unsigned) Kernel modules can no longer be loaded into
the live system.
NOTE: This commit will not work unless signing keys are present. Arbitrary
keys can be generated using instructions found in:
data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
2024-09-14 23:05:23 +02:00
Christian Breunig
beb3df0733
Kernel: T5887: cleanup Debian postinst files after package build
2024-09-14 20:58:44 +02:00
Christian Breunig
f523ae5cac
Kernel: T5887: update Linux Kernel to v6.6.51
2024-09-14 20:58:44 +02:00
Christian Breunig
e4a2e22ced
mellanox: T6231: execute build script with sudo
2024-09-14 20:58:44 +02:00
Christian Breunig
300674c144
Merge pull request #759 from sever-sever/T6674-netfilter
...
T6674: Fix build package netfilter dependencies
2024-09-12 19:07:03 +02:00
Viacheslav Hletenko
21370c5c7d
T6674: Fix build package netfilter dependencies
2024-09-12 08:26:26 +00:00
Christian Breunig
55c17f9283
Merge pull request #755 from nvollmar/T6703
...
T6703: add support for amd pstate driver
2024-09-09 10:40:46 +02:00
Christian Breunig
fc3f8317e9
Merge pull request #754 from sever-sever/T6674
...
T6674: build-kernel: Get kernel version from the defatults
2024-09-09 10:38:59 +02:00
Christian Breunig
e86bfd7ab9
Testsuite: T861: add explicit --smoketest argument
...
In the past the CLI based smoketest was always executed under an else branch in
the testcase if-statement. Instead of using negative logic move all testcases
to positive logic adding an empty "catch all" else path.
2024-09-07 21:32:34 +02:00
Christian Breunig
6ef7069098
Testsuite: T861: use fix bootindex for install medium and non-volatile disks
...
This is required to support proper disk ejection and not reloading the disk on
system reboot when operation in BIOS mode.
2024-09-07 21:32:34 +02:00
Christian Breunig
115fb522c8
Testsuite: T861: add support to use VNC for a graphics console
...
To use VNC you could run "make test -- --vnc"
2024-09-07 21:32:34 +02:00
Christian Breunig
986b71af2d
Testsuite: T861: use variable to define one single place for VM name
2024-09-07 21:32:34 +02:00
Christian Breunig
aa6ca5c65b
Testsuite: T861: cleanup imports and use "kernel_flavor" from vyos_defaults
2024-09-07 21:32:34 +02:00
Christian Breunig
e5627bf050
Testsuite: T861: remove option to disable KVM and use soft-emulation
...
This code path was unused during CI runs.
2024-09-07 21:32:34 +02:00
Christian Breunig
7f23b57b19
Testsuite: T861: eject installation media CD-ROM over powercycle
...
When moving to UEFI and secure-boot it's better to just reboot the system
for Machine Owner Key installation, then powercycling the machine.
This commit will use `reboot now` over `poweroff` after base system installation
and boot into installed image for smoketest handling.
2024-09-07 21:32:34 +02:00
Christian Breunig
fd7d1d0d20
Kernel: T861: remove superfluous architecture from Kernel string
2024-09-07 21:31:46 +02:00
Viacheslav Hletenko
f7022914d2
T6674: Add trigger rebuild kernel if defaults.toml is changed
2024-09-06 11:30:43 +00:00
Viacheslav Hletenko
f9372b85dd
T6674: Add symlink to original linux-kernel arch and patches
2024-09-06 09:43:59 +00:00
Nicolas Vollmar
01085c0512
T6703: add support for amd pstate driver
2024-09-06 10:30:11 +02:00
Viacheslav Hletenko
9055e9bae1
T6674: build-kernel: Get kernel version from the defatults
...
Get kernel version from the vyos-build/data/defaults.toml
for buld 'linux-kernel' and related packages
Retrun the original build-jool.py script
2024-09-06 08:15:22 +00:00
Christian Breunig
ae3e89deea
Merge pull request #753 from sever-sever/T6674-actions-keys
...
T6674: Add keys gpg_key_id and package_branch to rebuild packages
2024-09-06 07:23:41 +02:00
Viacheslav Hletenko
c371faf389
T6674: Add keys gpg_key_id and package_branch to rebuild packages
2024-09-05 14:42:43 +00:00
Daniil Baturin
c319ca6723
Merge pull request #751 from c-po/secure-boot-cleanup
...
T1416: T861: T3664: T3664: T2640: various cleanup commits
2024-09-05 15:42:15 +01:00
Viacheslav Hletenko
a6a4f08d56
Merge pull request #752 from sever-sever/T6674-actions
...
T6674: Add workflow to rebuild packages
2024-09-05 13:52:54 +03:00
Viacheslav Hletenko
ceb91a27a8
T6674: Add workflow to rebuild packages
2024-09-05 10:12:31 +00:00
Christian Breunig
68671774f9
T4974: remove package openvpn-dco as it has a proper dependency via vyos-1x
2024-09-05 07:14:43 +02:00
Christian Breunig
d851548515
Makefile: T2640: fix PHONY typo
...
Fix typo added in commit 499e8e1cbb ("Makefile: T2640: add helper to convert
ISO to OCI image to start a co…ntainer") should be PHONY over PHONE
2024-09-05 07:14:43 +02:00
Christian Breunig
3170bcaf2c
build: T3664: remove unused psutil dependency
2024-09-05 07:13:08 +02:00
Christian Breunig
f53921911e
telegraf: T3664: remove package dependency
...
Telegraf is not a full VyOS feature with a proper dependency in place via
vyos-1x package. Drop this temporary dependency.
2024-09-05 07:13:08 +02:00
Christian Breunig
3e9cda21c8
Docker: T861: fix warnings about latest ENV key=value syntax
2024-09-05 07:13:08 +02:00
Christian Breunig
388efd9f78
Makefile: T861: add possibility to pass CLI options to check-qemu-install
...
We can now pass any arbitrary option to the check-qemu-install script by
calling: make test -- --bar-option or make testc -- --foo-option
please note the -- which is not a typo but rather signals the end of options
and disables further option processing and passes the options down to the next
script.
2024-09-05 07:13:08 +02:00
Christian Breunig
d50707bb29
T1416: remove deprecated default-union-grub-entry
2024-09-05 07:13:08 +02:00
Christian Breunig
b82afa2bd5
Merge pull request #748 from vyos/t5887-kernel-6.6.49
...
Kernel: T5887: update Linux Kernel to v6.6.49
2024-09-05 00:24:01 +02:00
Christian Breunig
c635fc980e
Kernel: T5887: update Linux Kernel to v6.6.49
2024-09-04 21:23:47 +02:00
Daniil Baturin
9833897b7c
Merge pull request #745 from sever-sever/T6674
...
T6674: Add build-scrips for packages without Jenkins
2024-09-02 15:46:50 +01:00
Viacheslav Hletenko
cc7d0993b4
T6674: Add build-scrips for packages without Jenkins
...
Add build scripts for .deb packages without Jenkins.
To exclude Jenkins we need some place where we can put new builds-scripts
to run in parallel (old/new) during meantime
We will deprecate old Jenkins package builds in the future.
2024-08-29 09:30:52 +00:00
Christian Breunig
013e4d5dc9
Merge pull request #736 from c-po/artifacts-T6653
...
build: T6653: add build/manifest.json file
2024-08-26 20:53:33 +02:00