878 Commits

Author SHA1 Message Date
Daniil Baturin
6dab4426c6 build: T7345: do not use Debian Buster repos in image builds 2025-04-10 11:53:34 +01:00
Christian Breunig
1b00253bb1
Merge pull request #940 from dmbaturin/T7301-goodbye-gnupg
build: T7301: do not include the GPG image signing key in images
2025-04-01 16:02:47 +02:00
Daniil Baturin
03f73ec571
Merge pull request #924 from c-po/ipt-netflow
Kernel: T6230: add ipt_NETFLOW out-of-tree module
2025-04-01 11:30:39 +01:00
Daniil Baturin
56497dd47d build: T7301: do not include the GPG image signing key in images 2025-04-01 11:01:43 +01:00
oniko94
0646013a7c
T7278: Fix missing cracklib database files on image update 2025-03-25 14:15:45 +02:00
Christian Breunig
d5db3bf117 T861: use custom Kernel certificate over the root shim signing certificate 2025-03-18 16:24:43 +01:00
Christian Breunig
a02b10b2ba T861: use secure-boot certificates from data/certificates 2025-03-18 16:19:39 +01:00
Daniil Baturin
b35cbd8363
Merge pull request #931 from jestabro/commitd
T7121: Set up communication vyconfd to vyos-commitd
2025-03-18 15:09:02 +00:00
Daniil Baturin
452b17eaca hooks: T7217: remove Dropbear SSH host keys
that may be generated by postinstall scripts
to prevent accidental use of non-unique keys
baked into images
2025-03-17 17:58:33 +00:00
John Estabrook
2c90ce3fd2 T7121: disable vyos-commitd.service until replacement of vyos-configd 2025-03-16 23:59:49 -05:00
Christian Breunig
282ca5b308 Kernel: T6230: add ipt_NETFLOW out-of-tree module 2025-03-11 16:37:27 +01:00
Christian Breunig
e9017a53e1 Kernel: T5887: update Linux Kernel to v6.6.79 2025-02-25 17:01:24 +01:00
Christian Breunig
36a0a79a9d
Kernel: T5887: update Linux Kernel to v6.6.77 2025-02-15 14:32:25 +01:00
Christian Breunig
3d24c1077e
Merge pull request #898 from c-po/syslog-T6989
T6989: disable rsyslog service
2025-02-04 18:24:45 +01:00
Daniil Baturin
591f550246 build: T7132: new boot splash for rolling release images
The pseudo-constellation can be nicknamed "Operarius" ("The Worker")
(genitive singular: "Operarii")

Image by Oleg Gorobets
2025-02-03 19:15:19 +00:00
Christian Breunig
a0ef45b19d T6989: disable rsyslog service 2025-02-02 21:42:47 +01:00
Viacheslav Hletenko
631934dbea T7105: Disable by default vpp service until it is configured 2025-01-30 10:04:33 +00:00
Christian Breunig
8013ff21ae Kernel: T5887: update Linux Kernel to v6.6.69 2025-01-02 11:43:19 +01:00
Christian Breunig
37865246c2 eula: T6859: reformat file to honor default UNIX 80x25 terminal width and length
Runnning "show license" on a default 80x25 terminal makes it almost impossible
to properly read it.
2024-12-20 22:24:26 +01:00
Christian Breunig
e244e0f086
Kernel: T5887: update Linux Kernel to v6.6.66 2024-12-17 06:52:50 +01:00
Christian Breunig
6473704999
Merge pull request #856 from dmbaturin/T6942-no-guest-agents
flavors: T6942: remove VM guest agents from the generic flavor
2024-12-10 19:53:22 +01:00
Viacheslav Hletenko
e8bc65e026 Kernel: T5887: update Linux Kernel to v6.6.64 2024-12-09 11:46:25 +00:00
Daniil Baturin
15c0bd7578
Merge pull request #824 from jestabro/vyconf-minimal
T6718: use the vyconf daemon for validation of set commands
2024-12-06 21:37:58 +00:00
Daniil Baturin
090a5532af flavors: T6942: remove VM guest agents from the generic flavor 2024-12-05 18:47:38 +00:00
Christian Breunig
029cd725be Update data/build-types/release.toml 2024-11-30 08:49:54 +01:00
Daniil Baturin
e4fa5c6b3d build: T6859: include EULA files in build type definitions 2024-11-30 08:49:54 +01:00
Christian Breunig
2ef1e83db2
Merge pull request #847 from dmbaturin/T6915-flavor-cleanup
build-flavors: T6915: clean up flavor definitions
2024-11-30 08:49:25 +01:00
Daniil Baturin
11e21b94c2 build-flavors: T6915: clean up flavor definitions
and leave only illustrative essentials
2024-11-26 18:29:07 +00:00
Daniil Baturin
00c4d39242 build-flavors: T6913: fix Xen guest agent package in the generic image
Also, remove the old XCP-NG flavor because the new agent
works for both mainline Xen and XCP-NG
2024-11-26 17:46:22 +00:00
Daniil Baturin
0b07ed516b build: T6905: Add stream build type 2024-11-20 17:27:02 +00:00
Viacheslav Hletenko
2efc869757 Kernel: T5887: update Linux Kernel to v6.6.62 2024-11-19 17:44:13 +02:00
Viacheslav Hletenko
c967ef510e Kernel: T5887: update Linux Kernel to v6.6.61 2024-11-15 15:36:59 +00:00
John Estabrook
2416f963ad image-tools: T6864: keep file necessary for compat add image
Revert "T1416: remove deprecated default-union-grub-entry"
This reverts commit d50707bb295dbd4bc50e3d0301fc8be605448429.
The file grub/default-union-grub-entry and its companion
install-image/postinst are needed for 'compatibility-mode' upgrades:
when upgrading from a system with legacy image-tools, those two files
are expected to exist in the mounted image of the target iso.
2024-11-13 15:08:04 -06:00
Daniil Baturin
9ed7a29ebb build: T6855: make the custom APT entry and key syntax more flexible 2024-11-06 19:03:42 +00:00
Christian Breunig
a900353a5b
Merge pull request #829 from c-po/T6844-salt
T6844: use our own mirror of the salt repository
2024-11-01 09:40:19 +01:00
Christian Breunig
f36d645550 T6844: use our own mirror of the salt repository 2024-11-01 09:36:16 +01:00
Daniil Baturin
09ccfe7a70
Merge pull request #822 from sarthurdev/grub_fix
live: T5568: Fix live grub menu entries
2024-10-28 10:42:34 +00:00
John Estabrook
394ec80f49 T6718: vyconfd.service is started by vyos-router 2024-10-25 10:04:09 -05:00
Viacheslav Hletenko
7cd109889b Kernel: T5887: Revert update Linux Kernel to v6.6.58
This reverts commit 6e256633b34dc737a812b0b8d253733608eb8ca8.

Issues with the kernel and netfilter IPv6
https://vyos.dev/T6814
https://bugzilla.redhat.com/show_bug.cgi?id=2321325
2024-10-25 12:21:47 +00:00
sarthurdev
61d3585f19 live: T5568: Fix live grub menu entries 2024-10-25 00:07:11 +02:00
Christian Breunig
6e256633b3
Kernel: T5887: update Linux Kernel to v6.6.58 2024-10-22 20:24:28 +02:00
Daniil Baturin
bf2e6afc49 build: T6776: use the official Zabbix repo for zabbix-agent2 2024-10-17 11:13:35 +01:00
Christian Breunig
267bd9ca61 Kernel: T5887: update Linux Kernel to v6.6.56 2024-10-12 08:04:09 +02:00
Daniil Baturin
4d68265e7a build: T6231: remove Mellanox OFED drivers and tools
until their license status is confirmed
2024-10-10 09:51:34 +01:00
Daniil Baturin
49d41fa34a
Merge pull request #762 from sever-sever/T6713-current-realtek
T6713: Update Realtek r8152 driver
2024-10-07 15:58:30 +01:00
Christian Breunig
1e53e6451c Kernel: T5887: update Linux Kernel to v6.6.54 2024-10-05 08:15:55 +02:00
Viacheslav Hletenko
a3b515ca71 T6713: Update Realtek r8152 driver 2024-10-02 11:48:46 +00:00
Viacheslav Hletenko
7bd5496de1 T6755: Change default vyos mirror URL 2024-10-02 07:34:49 +00:00
Christian Breunig
d235b31a09 T861: sign all Kernel modules with an ephemeral key
The shim review board (which is the secure boot base loader) recommends using
ephemeral keys when signing the Linux Kernel. This commit enables the Kernel
build system to generate a one-time ephemeral key that is used to:

* sign all build-in Kernel modules
* sign all other out-of-tree Kernel modules

The key lives in /tmp and is destroyed after the build container exits and is
named: "VyOS build time autogenerated kernel key".

In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it
unable to load any Kernel Module to the image that is NOT signed by the
ephemeral key.
2024-09-25 20:24:21 +02:00
Christian Breunig
88f072df3d Kernel: T5887: update Linux Kernel to v6.6.52 2024-09-22 09:31:31 +02:00