Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

T861: add UEFI Secure Boot support #763

Merged
merged 13 commits into from
Sep 16, 2024
Merged

Commits on Sep 7, 2024

  1. Configuration menu
    Copy the full SHA
    fd7d1d0 View commit details
    Browse the repository at this point in the history
  2. Testsuite: T861: eject installation media CD-ROM over powercycle

    When moving to UEFI and secure-boot it's better to just reboot the system
    for Machine Owner Key installation, then powercycling the machine.
    
    This commit will use `reboot now` over `poweroff` after base system installation
    and boot into installed image for smoketest handling.
    c-po committed Sep 7, 2024
    1 Configuration menu
    Copy the full SHA
    7f23b57 View commit details
    Browse the repository at this point in the history
  3. Testsuite: T861: remove option to disable KVM and use soft-emulation

    This code path was unused during CI runs.
    c-po committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    e5627bf View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    aa6ca5c View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    986b71a View commit details
    Browse the repository at this point in the history
  6. Testsuite: T861: add support to use VNC for a graphics console

    To use VNC you could run "make test -- --vnc"
    c-po committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    115fb52 View commit details
    Browse the repository at this point in the history
  7. Testsuite: T861: use fix bootindex for install medium and non-volatil…

    …e disks
    
    This is required to support proper disk ejection and not reloading the disk on
    system reboot when operation in BIOS mode.
    c-po committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    6ef7069 View commit details
    Browse the repository at this point in the history
  8. Testsuite: T861: add explicit --smoketest argument

    In the past the CLI based smoketest was always executed under an else branch in
    the testcase if-statement. Instead of using negative logic move all testcases
    to positive logic adding an empty "catch all" else path.
    c-po committed Sep 7, 2024
    Configuration menu
    Copy the full SHA
    e86bfd7 View commit details
    Browse the repository at this point in the history

Commits on Sep 14, 2024

  1. Configuration menu
    Copy the full SHA
    e4a2e22 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    f523ae5 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    beb3df0 View commit details
    Browse the repository at this point in the history
  4. T861: add UEFI Secure Boot support

    This adds support for UEFI Secure Boot. It adds the missing pieces to the Linux
    Kernel and enforces module signing. This results in an additional security
    layer where untrusted (unsigned) Kernel modules can no longer be loaded into
    the live system.
    
    NOTE: This commit will not work unless signing keys are present. Arbitrary
    keys can be generated using instructions found in:
    
      data/live-build-config/includes.chroot/var/lib/shim-signed/mok/README.md
    c-po committed Sep 14, 2024
    Configuration menu
    Copy the full SHA
    fd73717 View commit details
    Browse the repository at this point in the history
  5. Docker: T861: fix warning for UID_MIN/UID_MAC out of range

    Rise upper limit for UID when working in an Active Direcotry integrated
    environment. This solves the warning: vyos_bld's uid 1632000007 outside of the
    UID_MIN 1000 and UID_MAX 60000 range.
    c-po committed Sep 14, 2024
    Configuration menu
    Copy the full SHA
    928c1f5 View commit details
    Browse the repository at this point in the history