Christian Breunig
cfdd4451ca
Kernel: T7428: remove io_uring support
...
Given the recent chatter about io_uring and it flaws - e.g. [1] - and we have
to my knowledge no use for it we should remove it from the Kernel configuration.
Every feature not used and removed from the Kernel is a good one.
1: https://www.armosec.io/blog/io_uring-rootkit-bypasses-linux-security/
2025-05-04 23:44:41 +02:00
AlexIT-FT
5107733137
T7384: Radius patch for Dns-Server-IPv6-Address attribute - accel-ppp ( #926 )
...
* Add 0002-Radius-Dns-Server-IPv6-Address.patch
This adds the ability to pull IPv6 DNS servers from the radius response not just hard coded in the config file
2025-04-24 15:44:36 +01:00
Daniil Baturin
d38ad1dc21
packages: T6230: include iptables modules in vyos-ipt-netflow
2025-04-17 16:54:27 +01:00
Daniil Baturin
03f73ec571
Merge pull request #924 from c-po/ipt-netflow
...
Kernel: T6230: add ipt_NETFLOW out-of-tree module
2025-04-01 11:30:39 +01:00
Christian Breunig
d5db3bf117
T861: use custom Kernel certificate over the root shim signing certificate
2025-03-18 16:24:43 +01:00
Christian Breunig
282ca5b308
Kernel: T6230: add ipt_NETFLOW out-of-tree module
2025-03-11 16:37:27 +01:00
Youyuan
2c95b9f624
T7233: Fix wrong MOK certs path in the script of build-kernel.sh
2025-03-11 09:15:12 +08:00
Christian Breunig
e9017a53e1
Kernel: T5887: update Linux Kernel to v6.6.79
2025-02-25 17:01:24 +01:00
Viacheslav Hletenko
28b64f7337
Merge pull request #913 from c-po/T6847-intel-oot
...
Intel: T6847: provide common build script for Out-Of-Tree drivers
2025-02-20 18:56:23 +02:00
Viacheslav Hletenko
a04f00f171
T7178: Add vDPA Virtio Data Path Aceleration kernel module
2025-02-20 08:47:58 +00:00
Christian Breunig
2c61c15656
Intel: T6847: provide common build script for Out-Of-Tree drivers
...
Use one build script to rule all the Intel Git based drivers.
2025-02-19 16:21:14 +01:00
Christian Breunig
2a2e36ba2e
intel: T6847: fix build system to perform proper "git clone" on IXGBE driver
...
Previous commit a10b29560 ("intel: T6847: update IXGBE Out-Of-Tree driver to
v6.0.5") missed a proper CI "git clone" on the driver repository - this has
been fixed.
2025-02-15 09:21:57 +01:00
Christian Breunig
fc2fe22b4c
intel: T6847: port patches to latest driver version 6.0.5
2025-02-15 09:19:16 +01:00
Christian Breunig
9cd6ef3807
Kernel: T861: add ephemeral key pattern to .gitignore file
2025-02-13 21:14:42 +01:00
Christian Breunig
a10b295601
intel: T6847: update IXGBE Out-Of-Tree driver to v6.0.5
2025-02-13 21:14:00 +01:00
Nataliia Solomko
62cdc8ea8d
T6895: Build hsflowd with option PSAMPLE
2025-01-17 11:04:25 +02:00
Christian Breunig
1a593421ec
Kernel: T861: enable lockdown subsystem as UEFI secure boot dependency
2025-01-02 11:44:27 +01:00
Christian Breunig
8013ff21ae
Kernel: T5887: update Linux Kernel to v6.6.69
2025-01-02 11:43:19 +01:00
Christian Breunig
9337990602
Merge pull request #869 from c-po/no-jenkins
...
T6674: remove all references to Jenkins
2024-12-23 10:02:32 +01:00
Christian Breunig
38395e86d5
T6674: remove all references to Jenkins
2024-12-23 09:47:19 +01:00
Nataliia Solomko
2a27860183
T6952: enable exFat in kernel config
2024-12-18 18:39:01 +02:00
Viacheslav Hletenko
50b3d9f80e
T6813: Build tarballs for the packages in the linux-kernel dir
...
Build tarballs for the packages related linux-kernel dir.
2024-11-01 13:50:56 +00:00
Viacheslav Hletenko
510aa6ec88
T6713: Build Realtek driver change source repo
2024-10-18 10:05:06 +00:00
Christian Breunig
3a6e1d4455
Kernel: T861: T6713: fix generation of realtek driver signature
...
We need to sign the module during the Debian build run, before the
binaries are packed into the resulting DEB.
2024-10-12 08:02:23 +02:00
Viacheslav Hletenko
df59bc2dd4
T861: T6713: Sign Realtek drivers
2024-10-09 15:45:39 +00:00
Daniil Baturin
49d41fa34a
Merge pull request #762 from sever-sever/T6713-current-realtek
...
T6713: Update Realtek r8152 driver
2024-10-07 15:58:30 +01:00
Viacheslav Hletenko
2b9303d0bd
Merge pull request #781 from sever-sever/T6754
...
T6754: Delete Jenkins build packages
2024-10-02 15:05:03 +03:00
Viacheslav Hletenko
a3b515ca71
T6713: Update Realtek r8152 driver
2024-10-02 11:48:46 +00:00
Viacheslav Hletenko
2fed892f27
T6754: Delete Jenkins build packages
2024-10-02 08:02:51 +00:00
Viacheslav Hletenko
7bd5496de1
T6755: Change default vyos mirror URL
2024-10-02 07:34:49 +00:00
Viacheslav Hletenko
8879bf0fdf
T861: Fix mellanox build by actions
2024-10-01 15:53:10 +00:00
Viacheslav Hletenko
db70544b0d
T861: Fix kernel suffix for package build by actions
2024-10-01 12:45:16 +00:00
Christian Breunig
d235b31a09
T861: sign all Kernel modules with an ephemeral key
...
The shim review board (which is the secure boot base loader) recommends using
ephemeral keys when signing the Linux Kernel. This commit enables the Kernel
build system to generate a one-time ephemeral key that is used to:
* sign all build-in Kernel modules
* sign all other out-of-tree Kernel modules
The key lives in /tmp and is destroyed after the build container exits and is
named: "VyOS build time autogenerated kernel key".
In addition the Kernel now uses CONFIG_MODULE_SIG_FORCE. This now makes it
unable to load any Kernel Module to the image that is NOT signed by the
ephemeral key.
2024-09-25 20:24:21 +02:00
Viacheslav Hletenko
f9372b85dd
T6674: Add symlink to original linux-kernel arch and patches
2024-09-06 09:43:59 +00:00
Viacheslav Hletenko
9055e9bae1
T6674: build-kernel: Get kernel version from the defatults
...
Get kernel version from the vyos-build/data/defaults.toml
for buld 'linux-kernel' and related packages
Retrun the original build-jool.py script
2024-09-06 08:15:22 +00:00
Viacheslav Hletenko
cc7d0993b4
T6674: Add build-scrips for packages without Jenkins
...
Add build scripts for .deb packages without Jenkins.
To exclude Jenkins we need some place where we can put new builds-scripts
to run in parallel (old/new) during meantime
We will deprecate old Jenkins package builds in the future.
2024-08-29 09:30:52 +00:00
