102 Commits

Author SHA1 Message Date
Christian Breunig
cfdd4451ca Kernel: T7428: remove io_uring support
Given the recent chatter about io_uring and it flaws - e.g. [1] - and we have
to my knowledge no use for it we should remove it from the Kernel configuration.

Every feature not used and removed from the Kernel is a good one.

1: https://www.armosec.io/blog/io_uring-rootkit-bypasses-linux-security/
2025-05-04 23:44:41 +02:00
Daniil Baturin
db23b29ceb
Merge pull request #943 from nvollmar/T7347
T7347: Update prometheus exporters
2025-04-24 16:11:40 +01:00
AlexIT-FT
5107733137
T7384: Radius patch for Dns-Server-IPv6-Address attribute - accel-ppp (#926)
* Add 0002-Radius-Dns-Server-IPv6-Address.patch

This adds the ability to pull IPv6 DNS servers from the radius response not just hard coded in the config file
2025-04-24 15:44:36 +01:00
Nicolas Vollmar
9bfb053c91 packages: T7347: Update prometheus exporters 2025-04-23 09:25:13 +02:00
Ryan Zuwala
67f82f8240 radvd: T7376: upgrade package to v2.20 2025-04-19 00:18:19 -04:00
Daniil Baturin
d38ad1dc21 packages: T6230: include iptables modules in vyos-ipt-netflow 2025-04-17 16:54:27 +01:00
sarthurdev
f7cdc3ec51 kea: T7281: Patches from upstream to include ping_check library 2025-04-14 15:56:12 +02:00
sarthurdev
351a251347 kea: T7281: Update Kea to 2.6.1-2 2025-04-14 11:52:42 +02:00
Thomas Kupper
1ce93fc396 vyos-build: T7357: add libnss-mapuser package
After renaming the package from libnss-mapuser to vyos-libnss-mapuser
in T7336-new-package-name, the package is missing from
scripts/package-build/.

Adding it, taking libpam-radius-auth as an example. The dependency
is taking from the Build-Depends field of the debian/control file
of the libnss-mapuser package.

Signed-off-by: Thomas Kupper <thomas.kupper@gmail.com>
2025-04-13 11:59:18 +02:00
Daniil Baturin
1a9b4cd941 packages: T7344: build bash-completion from source 2025-04-10 17:55:10 +01:00
Daniil Baturin
03f73ec571
Merge pull request #924 from c-po/ipt-netflow
Kernel: T6230: add ipt_NETFLOW out-of-tree module
2025-04-01 11:30:39 +01:00
Viacheslav Hletenko
feb144cdd7
Merge pull request #934 from AndriiFullroot/VyOS_T7226
T7226: Fixed ldpd crash with tLDP message for disabled LDP hello message
2025-03-21 14:59:47 +02:00
Andrii Melnychenko
0aa4c0366d T7226: Fixed ldpd crash with tLDP message for disabled LDP hello message
Signed-off-by: Andrii Melnychenko <a.melnychenko@vyos.io>
2025-03-21 12:40:22 +01:00
Christian Breunig
d552f7f8c3
Merge pull request #930 from c-po/T861-secure-boot
T861: minor improvements to secure-boot certificate handling
2025-03-21 08:37:34 +01:00
Christian Breunig
d5db3bf117 T861: use custom Kernel certificate over the root shim signing certificate 2025-03-18 16:24:43 +01:00
Andrii Melnychenko
ef328a44c4 T7226: Added FRR patch with option that disables LDP hello 2025-03-17 18:49:41 +01:00
Christian Breunig
282ca5b308 Kernel: T6230: add ipt_NETFLOW out-of-tree module 2025-03-11 16:37:27 +01:00
Youyuan
2c95b9f624
T7233: Fix wrong MOK certs path in the script of build-kernel.sh 2025-03-11 09:15:12 +08:00
Christian Breunig
e9017a53e1 Kernel: T5887: update Linux Kernel to v6.6.79 2025-02-25 17:01:24 +01:00
Viacheslav Hletenko
28b64f7337
Merge pull request #913 from c-po/T6847-intel-oot
Intel: T6847: provide common build script for Out-Of-Tree drivers
2025-02-20 18:56:23 +02:00
Daniil Baturin
2b80dc810e
Merge pull request #916 from sever-sever/T7178
T7178: Add vDPA Virtio Data Path Aceleration kernel module
2025-02-20 15:47:00 +00:00
Daniil Baturin
a48cc1d458
Merge pull request #912 from vyos/T7174
T7174: bump host-sflow version to v2.1.11-5 to build with VPP feature
2025-02-20 15:45:09 +00:00
Viacheslav Hletenko
a04f00f171 T7178: Add vDPA Virtio Data Path Aceleration kernel module 2025-02-20 08:47:58 +00:00
Christian Breunig
2c61c15656 Intel: T6847: provide common build script for Out-Of-Tree drivers
Use one build script to rule all the Intel Git based drivers.
2025-02-19 16:21:14 +01:00
Viacheslav Hletenko
dc4f7e36b0 T7174: bump host-sflow version to v2.1.11-5 to build with VPP feature 2025-02-17 09:42:10 +00:00
Viacheslav Hletenko
455383d3bd T7173: Bump keepalived version to 2.3.2 2025-02-17 09:11:16 +00:00
Christian Breunig
2a2e36ba2e intel: T6847: fix build system to perform proper "git clone" on IXGBE driver
Previous commit a10b29560 ("intel: T6847: update IXGBE Out-Of-Tree driver to
v6.0.5") missed a proper CI "git clone" on the driver repository - this has
been fixed.
2025-02-15 09:21:57 +01:00
Christian Breunig
fc2fe22b4c intel: T6847: port patches to latest driver version 6.0.5 2025-02-15 09:19:16 +01:00
Viacheslav Hletenko
26517587b6
Merge pull request #906 from c-po/intel-ixgbe-oot
intel: T6847: update IXGBE Out-Of-Tree driver to v6.0.5
2025-02-13 23:16:01 +02:00
Christian Breunig
9cd6ef3807 Kernel: T861: add ephemeral key pattern to .gitignore file 2025-02-13 21:14:42 +01:00
Christian Breunig
a10b295601 intel: T6847: update IXGBE Out-Of-Tree driver to v6.0.5 2025-02-13 21:14:00 +01:00
Viacheslav Hletenko
16aea063bd T7164: Bump VPP version to stable 2410 2025-02-13 16:39:06 +00:00
Christian Breunig
e850eb8854
Merge pull request #890 from c-po/current
frr: T6746: add libc-ares-dev build dependency
2025-01-19 15:41:34 +01:00
Christian Breunig
0b4f9b6d12 frr: T6746: add libc-ares-dev build dependency
Fix error:
  dpkg-checkbuilddeps: error: Unmet build dependencies: libc-ares-dev
2025-01-19 15:40:28 +01:00
Viacheslav Hletenko
2ab12b7566
Merge pull request #889 from natali-rs1985/T6895
T6895: Build hsflowd with option PSAMPLE
2025-01-18 19:47:43 +02:00
Nataliia Solomko
62cdc8ea8d T6895: Build hsflowd with option PSAMPLE 2025-01-17 11:04:25 +02:00
Viacheslav Hletenko
a4339b80ed T7026: build vpp source plus binaries instead of only binaries 2025-01-15 12:29:41 +00:00
John Estabrook
1e6cdf774b
Merge pull request #881 from sever-sever/T7206-vyos-1x-vpp
T7026: Extend vyos-1x build to include vyos-vpp
2025-01-14 09:50:25 -06:00
Viacheslav Hletenko
4b9c86bd9a
Merge pull request #886 from sever-sever/T7026-fix-patches
T7026: Use vpp patches during build as they not applied
2025-01-14 11:15:10 +02:00
Viacheslav Hletenko
0f44fc7abe T7026: Add apply_patches option for the build packages script
Add 'apply_patches' key is set to True (default) in the package configuration
This allows skipping/applying patch application by 'build.py' for specific
packages when desired

Usage:
  apply_patches = false
2025-01-14 09:13:17 +00:00
Viacheslav Hletenko
844cac86fd T7026: Use vpp patches during build as they not applied
Patches for VPP are not applied due to specific to the vpp repo
structure, so we cannot use standard included to build.py
function 'apply_patches' to patch the vpp sources.
Use explicit patch in the "build_cmd" as a workaround and the
simplest fix.
2025-01-14 09:05:54 +00:00
aapostoliuk
4d64c894b4 T2326: opennhrp: Removed OpenNHRP package
Removed OpenNHRP package
2025-01-13 15:52:08 +02:00
Viacheslav Hletenko
7d86ca29be
Merge pull request #883 from sever-sever/7026-vpp-build
T7026: Use prebuild hook to build vpp
2025-01-11 14:15:17 +02:00
Viacheslav Hletenko
2eb9deea6f T7026: Use prebuild hook to build vpp 2025-01-10 13:13:24 +00:00
Viacheslav Hletenko
a549693509 T7037: Add prebuild hook for the package-build
The pre_build_hook is an optional configuration defined in packages.toml
It executes after the repository is checked out and before the
build process begins. This hook allows you to perform preparatory tasks,
such as creating directories, copying files, or running custom scripts/commands.
2025-01-10 12:57:26 +00:00
Viacheslav Hletenko
72f39101bf T7026: Extend vyos-1x build to include vyos-vpp 2025-01-09 20:36:37 +00:00
Viacheslav Hletenko
528416d491 T7032: Add missing libpam-radius-auth build 2025-01-09 09:05:31 +00:00
Viacheslav Hletenko
b04538b9b2 T7026: Add script build vpp package 2025-01-07 20:05:35 +00:00
Christian Breunig
1a593421ec Kernel: T861: enable lockdown subsystem as UEFI secure boot dependency 2025-01-02 11:44:27 +01:00
Christian Breunig
8013ff21ae Kernel: T5887: update Linux Kernel to v6.6.69 2025-01-02 11:43:19 +01:00