peter/infix
1
0
Fork 0
mirror of https://github.com/kernelkit/infix.git synced 2026-08-06 15:43:02 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,409 Commits 45 Branches 86 Tags
0e590e9cbf47e2ed0c73d36c2bc1050f05fe808a
Commit Graph
4409 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mattias Walström 0e590e9cbf Upgrade buildroot to 2025.02.11 (LTS) 
2025.02.11, released February 20, 2026

	avahi: CVE-2021-3468, CVE-2023-38469, CVE-2023-38470, CVE-2023-38471,
	  CVE-2023-38472, CVE-2023-38473, CVE-2024-52615, CVE-2024-52616,
	  CVE-2025-68276, CVE-2025-68468, CVE-2025-68471, CVE-2026-24401
	bind: CVE-2025-13878
	busybox: CVE-2025-46394, CVE-2025-60876
	expat: CVE-2026-24515, CVE-2026-25210
	glibc: CVE-2025-15281, CVE-2026-0861, CVE-2026-0915
	gnutls: CVE-2025-14831, CVE-2026-1584
	haproxy: CVE-2025-11230
	intel-microcode: CVE-2024-24853, CVE-2025-31648
	libopenssl: CVE-2025-11187, CVE-2025-15467, CVE-2025-15468,
	  CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419,
	  CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796
	libpng: CVE-2026-22695, CVE-2026-22801, CVE-2026-25646
	libtasn1: CVE-2025-13151
	libvpx
	linux-pam: CVE-2024-10963
	nginx: CVE-2025-53859
	nodejs: CVE-2025-27210, CVE-2025-55130, CVE-2025-55131, CVE-2025-55132,
	  CVE-2025-59465, CVE-2025-59466, CVE-2026-21637
	python-django: CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285,
	 CVE-2026-1287, CVE-2026-1312
	python-urllib3: CVE-2026-21441
	strongswan: CVE-2025-62291
	tor: TROVE-2025-016
	vim: CVE-2025-66476
	webkitgtk
 2026-02-20 13:53:23 +01:00
Joachim WibergandGitHub 8d647a8e43 Merge pull request #1408 from kernelkit/kernel-upgrade-5201d390-057f-48d7-84f8-8c48fe75926d 2026-02-19 20:47:06 +01:00
ael-bot 6fee172c85 Upgrade Linux kernel to 6.18.13 2026-02-19 17:02:17 +00:00
Joachim WibergandGitHub 5c0a4c099e Merge pull request #1405 from kernelkit/kernel-upgrade-652fbc25-5bae-4cb9-a897-5afe6d25e872 2026-02-16 19:29:23 +01:00
ael-bot 3fe7fa5548 Upgrade Linux kernel to 6.18.12 2026-02-16 17:01:34 +00:00
Joachim WibergandGitHub 2120709b68 Merge pull request #1404 from kernelkit/kernel-upgrade-f5acaddd-eaf7-4ee4-8b43-d7c6c60d2f9d 
Upgrade to kernel 6.18.11

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-16 14:21:08 +01:00
ael-bot 13a50c8b0c Upgrade Linux kernel to 6.18.11 2026-02-16 10:25:51 +00:00
Mattias WalströmandGitHub 48718d764b Merge pull request #1401 from kernelkit/kernel-upgrade-1acd358b-2cf7-4127-8f0e-ca47d21998b9 
Upgrade to kernel 6.18.10
 2026-02-12 10:59:00 +01:00
ael-bot ae8a93c4cf Upgrade Linux kernel to 6.18.10 2026-02-11 13:28:31 +00:00
Joachim WibergandGitHub cbde057bf8 Merge pull request #1399 from kernelkit/gps 2026-02-10 21:04:34 +01:00
Joachim Wiberg f3e058f203 doc: update ChangeLog, initial GPS receiver support 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-10 16:49:41 +01:00
Joachim Wiberg c16eeaa9f4 doc: add section on GPS receivers and GPS reference clock 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-10 16:49:41 +01:00
Joachim Wiberg 681251f899 statd: support gps reference clocks in 'show <hardware|ntp>' 
This patch adds a background gps monitor to statd because the gpspipe
program, normally used to interface with gpsd, slows down access to the
operational datastore with *seconds*.

This background monitor is not load bearing for how chrony accesses the
gps + nmea information from gpsd, this is handled separately in SHM.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-10 16:49:40 +01:00
Joachim Wiberg eb1763d49f confd: add gps support to ietf-hardware and ietf-ntp 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-10 16:49:40 +01:00
Joachim Wiberg 867239c7b8 package/feature-gps: new feature package 
Enable gpsd and override package defaults to integrate in Infix.

 - Sync with rules disabled downstream in Debian project to prevent
   clashes with common vendor/device ids used for other device types
 - Start gpsd instance with '-n' to ensure /dev/shm is udpated for chrony

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-08 16:37:54 +01:00
Mattias WalströmandGitHub 0f1aa30574 Merge pull request #1398 from kernelkit/kernel-upgrade-0b031c70-632a-47dc-a372-f31cd93c53e1 2026-02-07 07:52:39 +01:00
ael-bot 89146b739a Upgrade Linux kernel to 6.18.9 2026-02-07 04:39:24 +00:00
Joachim WibergandGitHub 7bcbd3c51b Merge pull request #1376 from kernelkit/copilot/review-issue-947 
Document VETH pair limitation with containers
 2026-02-06 15:58:20 +01:00
Joachim Wiberg 91374a1155 Fix trailing whitespace in YANG descriptions 
[skip ci]

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-06 15:57:42 +01:00
Joachim Wibergandtroglobit 3966f8ed0e Document VETH pair limitation with containers 
Add documentation noting that at least one side of a VETH pair must
remain in the host namespace. Both ends cannot be assigned to different
containers.

Updates:
- container.md: Added IMPORTANT note in Container Host Interface section
- infix-if-veth.yang: Added note in module description
- infix-if-container.yang: Added note in host identity description

Fixes: #947
Related: #941

Co-authored-by: troglobit <183517+troglobit@users.noreply.github.com>
 2026-02-06 15:56:51 +01:00
Joachim WibergandGitHub f708f9b1ed Merge pull request #1397 from kernelkit/sama7g54 
Add support for Microchip SamA7G54 Eval Kit

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-06 14:49:50 +01:00
Joachim Wiberg 055c8dd1ae doc: update ChangeLog, support for Microchip SAMA7G54-EK 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-06 13:30:21 +01:00
Joachim Wiberg fd4cda35b5 configs: add missing fdt_add_pubkey to bootloader defconfigs 
Follow-up to c152c5f361

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-06 13:30:21 +01:00
Joachim Wiberg a7a630e0d9 utils: allow creating bootloader-only images 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-06 13:30:20 +01:00
Joachim Wiberg 0c8ce332d1 utils: support SamA7G65 in mkimage.sh 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-06 13:30:20 +01:00
Joachim Wiberg 3d088f3e2b Add support for Microchip SAMA7G54-EK Evaluation Kit 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-06 13:30:20 +01:00
Joachim WibergandGitHub b691868a83 Merge pull request #1385 from kernelkit/arm-actions 
Arm 32-bit actions
 2026-02-05 10:40:48 +01:00
Joachim Wiberg d1659dbbc1 test: fix missing IPv6 forwarding on tunnel in tunnel_basic 
Enable IPv6 forwarding on the left DUT's tunnel interface, matching
the IPv4 tunnel config.  Without it, IPv6 packets are not forwarded
through the tunnel, causing all tunnel_basic IPv6 tests to fail.

Regression introduced when fixing issue #515 in 717c1c0.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-05 08:50:22 +01:00
Joachim Wiberg 8973dc488b test: ensure result of tests is the exit code of the rule 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-05 08:50:22 +01:00
Joachim Wiberg f71bb73375 board/arm: add missing rootfs (empty) overlay 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-05 08:50:21 +01:00
Joachim Wiberg 0c11cea07b .github: refactor, simplify, and reduce duplication in actions 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-05 08:50:21 +01:00
Joachim Wiberg 65b674855a .github: add rpi2 bootloader and SD card image builds 
Add Raspberry Pi 2B to the bootloader build matrix and raspberrypi-rpi2
to the SD card image builder, enabling full RPi 2B image creation.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-05 08:50:09 +01:00
Joachim Wiberg 71ec4fa220 .github: add arm_defconfig and arm_minimal_defconfig builds 
Catch ARM 32-bit build regressions early by adding arm targets
to the familty of Infix image and release builds.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-05 08:50:09 +01:00
Mattias WalströmandGitHub f47bf0e0b1 Merge pull request #1395 from kernelkit/run-fix 
Fix extration of rootfs.squashfs in release tarball
v26.01.0 v26.01.0-rc2 		2026-02-03 15:13:18 +01:00
Joachim Wiberg e7108f52cf board/common: fix extration of rootfs.squashfs in release tarball 
[skip ci]

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-03 15:05:20 +01:00
Joachim WibergandGitHub 26c7fe40c0 Merge pull request #1391 from kernelkit/update-bpi-recommendations 
Doc: Update recommendations for bpi-r3
v26.01.0-rc1 		2026-02-03 09:58:13 +01:00
Mattias Walström 1e6286f1d3 Doc: Update recommendations for bpi-r3 
[skip ci]
 2026-02-03 09:55:05 +01:00
Joachim WibergandGitHub fe56591d8d Merge pull request #1379 from kernelkit/copilot/add-infix-keystore-documentation 
Keystore refactor and documentation

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-03 08:09:05 +01:00
Joachim WibergandGitHub 18c812c1b4 Merge pull request #1390 from kernelkit/fix-boot-defconfigs 
Add missing `fdt_add_pubkey` tool to bootloader defconfigs
 2026-02-03 07:39:54 +01:00
Joachim Wiberg bb199590ce configs: add missing fdt_add_pubkey to bootloader defconfigs 
Follow-up to c152c5f361

[skip ci]

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-03 07:35:25 +01:00
Joachim Wiberg 047d818cbd doc: update ChangeLog with new 'change' command feature 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:45 +01:00
Joachim Wiberg 2b6588eaf4 cli: add 'show keystore' command to admin-exec 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:13 +01:00
Joachim Wiberg 08742df166 doc: ux update with new 'change' and 'do wireguard' commands 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:12 +01:00
Joachim Wiberg 2a176d5888 cli: add 'wireguard <genkey | genpsk>' command to admin-exec 
Helper command to improve the UX for setting up Wireguard tunnels.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:11 +01:00
Joachim Wiberg 93dfd00754 packge/klish-plugin-sysrepo: add 'change cleartext-symmetric-key' 
This update brings new support for editing cleartext-symmetric-keys with
the 'change' command.  The cleartext-symmetric-key is of type binary and
its use differs between different key-formats.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:10 +01:00
Joachim Wiberg 94808331da doc: update docs with keystore format changes 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:09 +01:00
Joachim Wiberg 74a09d2c1b board/aarch64: update bpi factory-config and rpi readme example 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:08 +01:00
Joachim Wiberg 0c1aede731 confd: add wifi passphrase and key validation to SR_EV_CHANGE 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:08 +01:00
Joachim Wiberg 5ceda4569e confd: restore IETF standard keystore leaf types and NACM rules 
Infix key format identities now derive from the IETF bases, so the standard
identityref accepts them without any need for deviations.  This also preserves
the nacm default rules, which were inadvertently dropped before.

Also rename format identities for generality:

 - wifi-preshared-key-format      -> renamed: 'passphrase-key-format'
 - wireguard-symmetric-key-format -> use IETF 'octet-string-key-format'

Since cleartext-symmetric-key is now type binary (base64-encoded), the
WiFi backends (station and AP) decode values before passing them to
wpa_supplicant and hostapd.

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:07 +01:00
Joachim Wiberg 683f696e19 utils: add 'scan' feature to ixll 
Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
 2026-02-02 17:50:06 +01:00