Daniil Baturin
b35cbd8363
Merge pull request #931 from jestabro/commitd
...
T7121: Set up communication vyconfd to vyos-commitd
2025-03-18 15:09:02 +00:00
Daniil Baturin
452b17eaca
hooks: T7217: remove Dropbear SSH host keys
...
that may be generated by postinstall scripts
to prevent accidental use of non-unique keys
baked into images
2025-03-17 17:58:33 +00:00
John Estabrook
2c90ce3fd2
T7121: disable vyos-commitd.service until replacement of vyos-configd
2025-03-16 23:59:49 -05:00
Christian Breunig
e9017a53e1
Kernel: T5887: update Linux Kernel to v6.6.79
2025-02-25 17:01:24 +01:00
Christian Breunig
36a0a79a9d
Kernel: T5887: update Linux Kernel to v6.6.77
2025-02-15 14:32:25 +01:00
Christian Breunig
3d24c1077e
Merge pull request #898 from c-po/syslog-T6989
...
T6989: disable rsyslog service
2025-02-04 18:24:45 +01:00
Daniil Baturin
591f550246
build: T7132: new boot splash for rolling release images
...
The pseudo-constellation can be nicknamed "Operarius" ("The Worker")
(genitive singular: "Operarii")
Image by Oleg Gorobets
2025-02-03 19:15:19 +00:00
Christian Breunig
a0ef45b19d
T6989: disable rsyslog service
2025-02-02 21:42:47 +01:00
Viacheslav Hletenko
631934dbea
T7105: Disable by default vpp service until it is configured
2025-01-30 10:04:33 +00:00
Christian Breunig
8013ff21ae
Kernel: T5887: update Linux Kernel to v6.6.69
2025-01-02 11:43:19 +01:00
Christian Breunig
37865246c2
eula: T6859: reformat file to honor default UNIX 80x25 terminal width and length
...
Runnning "show license" on a default 80x25 terminal makes it almost impossible
to properly read it.
2024-12-20 22:24:26 +01:00
Christian Breunig
e244e0f086
Kernel: T5887: update Linux Kernel to v6.6.66
2024-12-17 06:52:50 +01:00
Christian Breunig
6473704999
Merge pull request #856 from dmbaturin/T6942-no-guest-agents
...
flavors: T6942: remove VM guest agents from the generic flavor
2024-12-10 19:53:22 +01:00
Viacheslav Hletenko
e8bc65e026
Kernel: T5887: update Linux Kernel to v6.6.64
2024-12-09 11:46:25 +00:00
Daniil Baturin
15c0bd7578
Merge pull request #824 from jestabro/vyconf-minimal
...
T6718: use the vyconf daemon for validation of set commands
2024-12-06 21:37:58 +00:00
Daniil Baturin
090a5532af
flavors: T6942: remove VM guest agents from the generic flavor
2024-12-05 18:47:38 +00:00
Christian Breunig
029cd725be
Update data/build-types/release.toml
2024-11-30 08:49:54 +01:00
Daniil Baturin
e4fa5c6b3d
build: T6859: include EULA files in build type definitions
2024-11-30 08:49:54 +01:00
Christian Breunig
2ef1e83db2
Merge pull request #847 from dmbaturin/T6915-flavor-cleanup
...
build-flavors: T6915: clean up flavor definitions
2024-11-30 08:49:25 +01:00
Daniil Baturin
11e21b94c2
build-flavors: T6915: clean up flavor definitions
...
and leave only illustrative essentials
2024-11-26 18:29:07 +00:00
Daniil Baturin
00c4d39242
build-flavors: T6913: fix Xen guest agent package in the generic image
...
Also, remove the old XCP-NG flavor because the new agent
works for both mainline Xen and XCP-NG
2024-11-26 17:46:22 +00:00
Daniil Baturin
0b07ed516b
build: T6905: Add stream build type
2024-11-20 17:27:02 +00:00
Viacheslav Hletenko
2efc869757
Kernel: T5887: update Linux Kernel to v6.6.62
2024-11-19 17:44:13 +02:00
Viacheslav Hletenko
c967ef510e
Kernel: T5887: update Linux Kernel to v6.6.61
2024-11-15 15:36:59 +00:00
John Estabrook
2416f963ad
image-tools: T6864: keep file necessary for compat add image
...
Revert "T1416: remove deprecated default-union-grub-entry"
This reverts commit d50707bb295dbd4bc50e3d0301fc8be605448429.
The file grub/default-union-grub-entry and its companion
install-image/postinst are needed for 'compatibility-mode' upgrades:
when upgrading from a system with legacy image-tools, those two files
are expected to exist in the mounted image of the target iso.
2024-11-13 15:08:04 -06:00
Daniil Baturin
9ed7a29ebb
build: T6855: make the custom APT entry and key syntax more flexible
2024-11-06 19:03:42 +00:00
Christian Breunig
a900353a5b
Merge pull request #829 from c-po/T6844-salt
...
T6844: use our own mirror of the salt repository
2024-11-01 09:40:19 +01:00
Christian Breunig
f36d645550
T6844: use our own mirror of the salt repository
2024-11-01 09:36:16 +01:00
Daniil Baturin
09ccfe7a70
Merge pull request #822 from sarthurdev/grub_fix
...
live: T5568: Fix live grub menu entries
2024-10-28 10:42:34 +00:00
John Estabrook
394ec80f49
T6718: vyconfd.service is started by vyos-router
2024-10-25 10:04:09 -05:00
Viacheslav Hletenko
7cd109889b
Kernel: T5887: Revert update Linux Kernel to v6.6.58
...
This reverts commit 6e256633b34dc737a812b0b8d253733608eb8ca8.
Issues with the kernel and netfilter IPv6
https://vyos.dev/T6814
https://bugzilla.redhat.com/show_bug.cgi?id=2321325
2024-10-25 12:21:47 +00:00
sarthurdev
61d3585f19
live: T5568: Fix live grub menu entries
2024-10-25 00:07:11 +02:00
Christian Breunig
6e256633b3
Kernel: T5887: update Linux Kernel to v6.6.58
2024-10-22 20:24:28 +02:00
Daniil Baturin
bf2e6afc49
build: T6776: use the official Zabbix repo for zabbix-agent2
2024-10-17 11:13:35 +01:00
Christian Breunig
267bd9ca61
Kernel: T5887: update Linux Kernel to v6.6.56
2024-10-12 08:04:09 +02:00
Daniil Baturin
4d68265e7a
build: T6231: remove Mellanox OFED drivers and tools
...
until their license status is confirmed
2024-10-10 09:51:34 +01:00
Daniil Baturin
49d41fa34a
Merge pull request #762 from sever-sever/T6713-current-realtek
...
T6713: Update Realtek r8152 driver
2024-10-07 15:58:30 +01:00
Christian Breunig
1e53e6451c
Kernel: T5887: update Linux Kernel to v6.6.54
2024-10-05 08:15:55 +02:00
Viacheslav Hletenko
a3b515ca71
T6713: Update Realtek r8152 driver
2024-10-02 11:48:46 +00:00
Viacheslav Hletenko
7bd5496de1
T6755: Change default vyos mirror URL
2024-10-02 07:34:49 +00:00
Christian Breunig
d235b31a09
T861: sign all Kernel modules with an ephemeral key
...
The shim review board (which is the secure boot base loader) recommends using
ephemeral keys when signing the Linux Kernel. This commit enables the Kernel
build system to generate a one-time ephemeral key that is used to:
* sign all build-in Kernel modules
* sign all other out-of-tree Kernel modules
The key lives in /tmp and is destroyed after the build container exits and is
named: "VyOS build time autogenerated kernel key".
In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it
unable to load any Kernel Module to the image that is NOT signed by the
ephemeral key.
2024-09-25 20:24:21 +02:00
Christian Breunig
88f072df3d
Kernel: T5887: update Linux Kernel to v6.6.52
2024-09-22 09:31:31 +02:00
Christian Breunig
53bd06d17b
T861: stripping Kernel modules would also remove module signatures
...
As the VyOS Linux Kernel will be compiled with CONFIG_MODULE_SIG_FORCE all
driver modules need to be cryptographically signed. This happens during build
of the Kernel and it's 3rd party modules.
Stripping the objects would remove said signature and the system will be unable
to boot b/c of CONFIG_MODULE_SIG_FORCE.
2024-09-22 09:31:31 +02:00
Christian Breunig
fd737172f1
T861: add UEFI Secure Boot support
...
This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux
Kernel and enforces module signing. This results in an additional security
layer where untrusted (unsigned) Kernel modules can no longer be loaded into
the live system.
NOTE: This commit will not work unless signing keys are present. Arbitrary
keys can be generated using instructions found in:
data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
2024-09-14 23:05:23 +02:00
Christian Breunig
f523ae5cac
Kernel: T5887: update Linux Kernel to v6.6.51
2024-09-14 20:58:44 +02:00
Christian Breunig
fd7d1d0d20
Kernel: T861: remove superfluous architecture from Kernel string
2024-09-07 21:31:46 +02:00
Christian Breunig
68671774f9
T4974: remove package openvpn-dco as it has a proper dependency via vyos-1x
2024-09-05 07:14:43 +02:00
Christian Breunig
f53921911e
telegraf: T3664: remove package dependency
...
Telegraf is not a full VyOS feature with a proper dependency in place via
vyos-1x package. Drop this temporary dependency.
2024-09-05 07:13:08 +02:00
Christian Breunig
d50707bb29
T1416: remove deprecated default-union-grub-entry
2024-09-05 07:13:08 +02:00
Christian Breunig
c635fc980e
Kernel: T5887: update Linux Kernel to v6.6.49
2024-09-04 21:23:47 +02:00
