649 Commits

Author SHA1 Message Date
Daniil Baturin
75f72ab901
Remove a stray debug output 2025-06-10 15:43:29 +01:00
Gabin-CC
02c2e30622 T7453: handle dynamic partition mapping in raw image build
Enhanced the raw image creation logic to dynamically detect and assign
EFI and root partitions based on the number of partitions created by kpartx.

- Supports both 2-partition and 3-partition layouts
- Adds debug output for mapped partitions
- Avoids hardcoded assumptions about partition order
- Improves resilience in cloud-init and containerized build contexts

Fixes build failure when /dev/loopXp3 is missing or not mapped properly.

Signed-off-by: Gabin-CC <gabin.laurent@rte-international.com>
2025-06-06 20:59:22 +02:00
Gabin-CC
1cda2d42bb T7453: Enhance raw/qcow2 image creation
Description
This pull request introduces improvements to the raw_image.py script responsible for building raw disk images in the VyOS build process.

Main Changes
Added use of kpartx to reliably map EFI and root partitions from the loop device.
Introduced disk_details as an attribute on the BuildContext object to pass partition metadata through the image build steps.
Improved the __exit__ method for BuildContext to unmount all mount points and clean up kpartx mappings and loop devices, even in failure cases.
Fixed a crash in mount_image() when con.disk_details was not set.
Added useful debug logs for loop device usage and partition mapping.
Motivation
The previous implementation assumed partitions like /dev/loopXp3 would appear automatically, which is unreliable across some environments (especially containers or newer systems).

This PR makes the process more reliable by explicitly mapping partitions with kpartx, a tool designed for this purpose.

It also ensures proper resource cleanup by unmounting and detaching everything cleanly, preventing leaked loop devices or stale mount points.

Test Instructions

Flavor : cloud-init.toml
packages = [
  "cloud-init",
  "qemu-guest-agent"
]

image_format = ["qcow2"]
disk_size = 10

[boot_settings]
console_type = "ttyS0"

Run:

sudo ./build-vyos-image --architecture amd64 \
  --build-by "you@example.com" \
  --reuse-iso vyos-1.5-rolling-*.iso \
  cloud-init
Expected behavior:

The build completes without errors.
The .qcow2 image file is generated and bootable (e.g., in KVM or Proxmox).
Partitions are mounted correctly via /dev/mapper/loopXp*.

Signed-off-by: Gabin-CC <gabin.laurent@rte-international.com>
2025-06-06 20:58:04 +02:00
Christian Breunig
5871203be6 Kernel: T7428: re-enable CONFIG_INOTIFY_STACKFS
Kernel compile time option for our custom patch to enable inotify
on stackable filesystems accidently got removed in commit cfdd4451ca3aa
("Kernel: T7428: remove io_uring support").

Option was re-enabled.
2025-05-30 19:05:05 +02:00
Yevhen Bondarenko
fe8ea308a6
Merge pull request #967 from dmbaturin/T7490-broadcast-relay-build
packages: T7490: add build files for udp-broadcast-relay
2025-05-28 12:11:12 +02:00
Daniil Baturin
c51513fb5c packages: T7490: add build files for udp-broadcast-relay 2025-05-28 10:50:04 +01:00
Viacheslav Hletenko
6fa46e8668 T7494: FRR add build dependency flex libelf-dev 2025-05-28 09:32:24 +00:00
Viacheslav Hletenko
3b44daa55f T7494: FRR add missing build bison and liblua dependencies 2025-05-28 06:54:30 +00:00
John Estabrook
45c21a06ea T7352: add test script arg for testing under vyconfd/commitd 2025-05-22 13:24:32 -05:00
Christian Breunig
1545aa4b76 Kernel: T7253: build linux-perf-$version package
Previous patch was removed during VyOS 1.3 -> 1.4 development cycle as the
internal handling for Kernel package generation changed.

This brings back the perf binary in a new linux-perf-$KERNELVERSION
Debian package.
2025-05-12 20:45:52 +02:00
Christian Breunig
73df823da1 Docker: T7253: remove Kernel build dependencies to shrink container image
Move the Kernel build dependencies to package.toml to unbload the build
container even more.
2025-05-12 20:45:52 +02:00
Christian Breunig
63f3ae10b0 Kernel: T5887: update Linux Kernel to v6.6.90 2025-05-12 18:14:32 +02:00
Viacheslav Hletenko
247e810339
Merge pull request #955 from tjjh89017/arm64_kernel
T7406: add virtio-gpu and pl011 console support for arm64
2025-05-06 17:31:06 +03:00
Christian Breunig
cfdd4451ca Kernel: T7428: remove io_uring support
Given the recent chatter about io_uring and it flaws - e.g. [1] - and we have
to my knowledge no use for it we should remove it from the Kernel configuration.

Every feature not used and removed from the Kernel is a good one.

1: https://www.armosec.io/blog/io_uring-rootkit-bypasses-linux-security/
2025-05-04 23:44:41 +02:00
Daniil Baturin
65f3b103a5
Merge pull request #957 from dmbaturin/T7409-no-md5
build: T7409: do not include MD5 checksums in the ISO image
2025-04-29 15:23:12 +01:00
Daniil Baturin
64ff1e538d build: T7409: do not include MD5 checksums in the ISO image 2025-04-28 18:27:58 +01:00
Date Huang
217aa7ae4f T7406: add virtio-gpu and pl011 console support for arm64
Signed-off-by: Date Huang <tjjh89017@hotmail.com>
2025-04-28 21:42:53 +08:00
Daniil Baturin
1f400a4b01 build: T7399: remove the APT option to allow downgrades
It doesn't appear necessary anymore, if it ever was
2025-04-25 19:45:03 +01:00
Daniil Baturin
db23b29ceb
Merge pull request #943 from nvollmar/T7347
T7347: Update prometheus exporters
2025-04-24 16:11:40 +01:00
AlexIT-FT
5107733137
T7384: Radius patch for Dns-Server-IPv6-Address attribute - accel-ppp (#926)
* Add 0002-Radius-Dns-Server-IPv6-Address.patch

This adds the ability to pull IPv6 DNS servers from the radius response not just hard coded in the config file
2025-04-24 15:44:36 +01:00
Nicolas Vollmar
9bfb053c91 packages: T7347: Update prometheus exporters 2025-04-23 09:25:13 +02:00
Christian Breunig
d401c8fee1
Merge pull request #948 from dmbaturin/T7372-quote-lb-config-arguments
build: T7372: correctly quote lb_config arguments
2025-04-20 16:54:54 +02:00
Ryan Zuwala
67f82f8240 radvd: T7376: upgrade package to v2.20 2025-04-19 00:18:19 -04:00
Daniil Baturin
2986466f7b build: T7372: correctly quote lb_config arguments 2025-04-18 13:04:44 +01:00
Daniil Baturin
d38ad1dc21 packages: T6230: include iptables modules in vyos-ipt-netflow 2025-04-17 16:54:27 +01:00
sarthurdev
f7cdc3ec51 kea: T7281: Patches from upstream to include ping_check library 2025-04-14 15:56:12 +02:00
sarthurdev
351a251347 kea: T7281: Update Kea to 2.6.1-2 2025-04-14 11:52:42 +02:00
Thomas Kupper
1ce93fc396 vyos-build: T7357: add libnss-mapuser package
After renaming the package from libnss-mapuser to vyos-libnss-mapuser
in T7336-new-package-name, the package is missing from
scripts/package-build/.

Adding it, taking libpam-radius-auth as an example. The dependency
is taking from the Build-Depends field of the debian/control file
of the libnss-mapuser package.

Signed-off-by: Thomas Kupper <thomas.kupper@gmail.com>
2025-04-13 11:59:18 +02:00
Daniil Baturin
1a9b4cd941 packages: T7344: build bash-completion from source 2025-04-10 17:55:10 +01:00
Daniil Baturin
03f73ec571
Merge pull request #924 from c-po/ipt-netflow
Kernel: T6230: add ipt_NETFLOW out-of-tree module
2025-04-01 11:30:39 +01:00
Viacheslav Hletenko
feb144cdd7
Merge pull request #934 from AndriiFullroot/VyOS_T7226
T7226: Fixed ldpd crash with tLDP message for disabled LDP hello message
2025-03-21 14:59:47 +02:00
Andrii Melnychenko
0aa4c0366d T7226: Fixed ldpd crash with tLDP message for disabled LDP hello message
Signed-off-by: Andrii Melnychenko <a.melnychenko@vyos.io>
2025-03-21 12:40:22 +01:00
Christian Breunig
d552f7f8c3
Merge pull request #930 from c-po/T861-secure-boot
T861: minor improvements to secure-boot certificate handling
2025-03-21 08:37:34 +01:00
Christian Breunig
d5db3bf117 T861: use custom Kernel certificate over the root shim signing certificate 2025-03-18 16:24:43 +01:00
Christian Breunig
a02b10b2ba T861: use secure-boot certificates from data/certificates 2025-03-18 16:19:39 +01:00
Christian Breunig
8d58a72368 T861: disable colored output when using live-build - good for CI 2025-03-18 16:19:39 +01:00
Andrii Melnychenko
ef328a44c4 T7226: Added FRR patch with option that disables LDP hello 2025-03-17 18:49:41 +01:00
Christian Breunig
282ca5b308 Kernel: T6230: add ipt_NETFLOW out-of-tree module 2025-03-11 16:37:27 +01:00
Youyuan
2c95b9f624
T7233: Fix wrong MOK certs path in the script of build-kernel.sh 2025-03-11 09:15:12 +08:00
Christian Breunig
e9017a53e1 Kernel: T5887: update Linux Kernel to v6.6.79 2025-02-25 17:01:24 +01:00
Christian Breunig
4d66688c2e
T7140: increase CI test timeout 3h -> 5h 2025-02-22 07:36:54 +01:00
Viacheslav Hletenko
28b64f7337
Merge pull request #913 from c-po/T6847-intel-oot
Intel: T6847: provide common build script for Out-Of-Tree drivers
2025-02-20 18:56:23 +02:00
Daniil Baturin
2b80dc810e
Merge pull request #916 from sever-sever/T7178
T7178: Add vDPA Virtio Data Path Aceleration kernel module
2025-02-20 15:47:00 +00:00
Daniil Baturin
a48cc1d458
Merge pull request #912 from vyos/T7174
T7174: bump host-sflow version to v2.1.11-5 to build with VPP feature
2025-02-20 15:45:09 +00:00
Viacheslav Hletenko
a04f00f171 T7178: Add vDPA Virtio Data Path Aceleration kernel module 2025-02-20 08:47:58 +00:00
Christian Breunig
2c61c15656 Intel: T6847: provide common build script for Out-Of-Tree drivers
Use one build script to rule all the Intel Git based drivers.
2025-02-19 16:21:14 +01:00
Viacheslav Hletenko
dc4f7e36b0 T7174: bump host-sflow version to v2.1.11-5 to build with VPP feature 2025-02-17 09:42:10 +00:00
Viacheslav Hletenko
455383d3bd T7173: Bump keepalived version to 2.3.2 2025-02-17 09:11:16 +00:00
Christian Breunig
2a2e36ba2e intel: T6847: fix build system to perform proper "git clone" on IXGBE driver
Previous commit a10b29560 ("intel: T6847: update IXGBE Out-Of-Tree driver to
v6.0.5") missed a proper CI "git clone" on the driver repository - this has
been fixed.
2025-02-15 09:21:57 +01:00
Christian Breunig
fc2fe22b4c intel: T6847: port patches to latest driver version 6.0.5 2025-02-15 09:19:16 +01:00