mirror of
https://github.com/kernelkit/infix.git
synced 2026-08-01 21:33:02 +02:00
Non-privileged users in the sys-cli group can now access sysrepo data. The data is now solely protected by the NCAM rules and not Unix file permissions. Any stray user that's not part of the (default) sys-cli group still can't access syrepo, like users added from the shell. Fixes #932 Signed-off-by: Richard Alpe <richard@bit42.se>
205 lines
7.1 KiB
Plaintext
205 lines
7.1 KiB
Plaintext
BR2_riscv=y
|
|
BR2_TOOLCHAIN_EXTERNAL=y
|
|
BR2_DL_DIR="${BR2_EXTERNAL_INFIX_PATH}/dl"
|
|
BR2_CCACHE=y
|
|
BR2_CCACHE_DIR="${BR2_EXTERNAL_INFIX_PATH}/.ccache"
|
|
BR2_ENABLE_DEBUG=y
|
|
BR2_GLOBAL_PATCH_DIR="${BR2_EXTERNAL_INFIX_PATH}/patches"
|
|
BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
|
|
BR2_TARGET_GENERIC_HOSTNAME="infix"
|
|
BR2_TARGET_GENERIC_ISSUE="Infix by KernelKit"
|
|
BR2_INIT_FINIT=y
|
|
BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y
|
|
BR2_ROOTFS_DEVICE_TABLE="system/device_table.txt ${BR2_EXTERNAL_INFIX_PATH}/board/common/xattrs"
|
|
# BR2_TARGET_ENABLE_ROOT_LOGIN is not set
|
|
BR2_ROOTFS_MERGED_USR=y
|
|
BR2_SYSTEM_BIN_SH_BASH=y
|
|
BR2_TARGET_GENERIC_GETTY_PORT="@console"
|
|
BR2_TARGET_GENERIC_GETTY_TERM="xterm"
|
|
BR2_SYSTEM_DHCP="eth0"
|
|
BR2_SYSTEM_DEFAULT_PATH="/bin:/sbin:/usr/bin:/usr/sbin"
|
|
BR2_ENABLE_LOCALE_WHITELIST="C en_US en_CA C.UTF-8"
|
|
BR2_GENERATE_LOCALE="en_US en_CA C.UTF-8"
|
|
BR2_TARGET_TZ_INFO=y
|
|
BR2_ROOTFS_OVERLAY="${BR2_EXTERNAL_INFIX_PATH}/board/common/rootfs ${BR2_EXTERNAL_INFIX_PATH}/board/riscv64/rootfs"
|
|
BR2_ROOTFS_POST_BUILD_SCRIPT="$(BR2_EXTERNAL_INFIX_PATH)/board/common/post-build.sh"
|
|
BR2_ROOTFS_POST_IMAGE_SCRIPT="$(BR2_EXTERNAL_INFIX_PATH)/board/common/post-image.sh support/scripts/genimage.sh"
|
|
BR2_ROOTFS_POST_SCRIPT_ARGS="-c $(BR2_EXTERNAL_INFIX_PATH)/board/riscv64/visionfive2/genimage.cfg"
|
|
BR2_LINUX_KERNEL=y
|
|
BR2_LINUX_KERNEL_CUSTOM_VERSION=y
|
|
BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.8.2"
|
|
BR2_LINUX_KERNEL_PATCH="$(BR2_EXTERNAL_INFIX_PATH)/board/riscv64/visionfive2/jh7110-starfive-visionfive-2-dtsi.patch"
|
|
BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
|
|
BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/riscv64/linux_defconfig"
|
|
BR2_LINUX_KERNEL_DTS_SUPPORT=y
|
|
BR2_LINUX_KERNEL_INTREE_DTS_NAME="starfive/jh7110-starfive-visionfive-2-v1.3b"
|
|
BR2_LINUX_KERNEL_DTB_KEEP_DIRNAME=y
|
|
BR2_LINUX_KERNEL_INSTALL_TARGET=y
|
|
BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y
|
|
BR2_PACKAGE_BUSYBOX_CONFIG="$(BR2_EXTERNAL_INFIX_PATH)/board/common/busybox_defconfig"
|
|
BR2_PACKAGE_STRACE=y
|
|
BR2_PACKAGE_STRESS_NG=y
|
|
BR2_PACKAGE_SYSREPO_GROUP="sys-cli"
|
|
BR2_PACKAGE_JQ=y
|
|
BR2_PACKAGE_E2FSPROGS=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RALINK_RT61=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RALINK_RT73=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RALINK_RT2XX=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RTL_81XX=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RTL_87XX=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RTL_88XX=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RTL_RTW88=y
|
|
BR2_PACKAGE_LINUX_FIRMWARE_RTL_815X=y
|
|
BR2_PACKAGE_DBUS_CXX=y
|
|
BR2_PACKAGE_DBUS_GLIB=y
|
|
BR2_PACKAGE_DBUS_TRIGGERD=y
|
|
BR2_PACKAGE_EUDEV_RULES_GEN=y
|
|
# BR2_PACKAGE_EUDEV_ENABLE_HWDB is not set
|
|
BR2_PACKAGE_GPTFDISK=y
|
|
BR2_PACKAGE_GPTFDISK_SGDISK=y
|
|
BR2_PACKAGE_MDIO_TOOLS=y
|
|
BR2_PACKAGE_RNG_TOOLS=y
|
|
BR2_PACKAGE_UBOOT_TOOLS_FIT_SUPPORT=y
|
|
BR2_PACKAGE_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
|
|
BR2_PACKAGE_UBOOT_TOOLS_FIT_CHECK_SIGN=y
|
|
BR2_PACKAGE_UBOOT_TOOLS_MKENVIMAGE=y
|
|
BR2_PACKAGE_PYTHON3=y
|
|
BR2_PACKAGE_PYTHON_GUNICORN=y
|
|
BR2_PACKAGE_LIBSSH2=y
|
|
BR2_PACKAGE_LIBXCRYPT=y
|
|
BR2_PACKAGE_LIBOPENSSL_BIN=y
|
|
BR2_PACKAGE_LIBINPUT=y
|
|
BR2_PACKAGE_LIBCURL_CURL=y
|
|
BR2_PACKAGE_NETOPEER2_CLI=y
|
|
BR2_PACKAGE_NSS_MDNS=y
|
|
BR2_PACKAGE_LINUX_PAM=y
|
|
BR2_PACKAGE_LIBPAM_RADIUS_AUTH=y
|
|
BR2_PACKAGE_ONIGURUMA=y
|
|
BR2_PACKAGE_AVAHI_DAEMON=y
|
|
BR2_PACKAGE_AVAHI_DEFAULT_SERVICES=y
|
|
BR2_PACKAGE_CHRONY=y
|
|
BR2_PACKAGE_CONNTRACK_TOOLS=y
|
|
BR2_PACKAGE_DNSMASQ=y
|
|
BR2_PACKAGE_ETHTOOL=y
|
|
BR2_PACKAGE_FPING=y
|
|
BR2_PACKAGE_FRR=y
|
|
# BR2_PACKAGE_IFUPDOWN_SCRIPTS is not set
|
|
BR2_PACKAGE_IPROUTE2=y
|
|
BR2_PACKAGE_IPTABLES_NFTABLES=y
|
|
BR2_PACKAGE_IPUTILS=y
|
|
BR2_PACKAGE_LLDPD=y
|
|
BR2_PACKAGE_MSTPD=y
|
|
BR2_PACKAGE_NETCALC=y
|
|
BR2_PACKAGE_NETCAT_OPENBSD=y
|
|
BR2_PACKAGE_NETSNMP=y
|
|
BR2_PACKAGE_NFTABLES=y
|
|
BR2_PACKAGE_NGINX=y
|
|
BR2_PACKAGE_NGINX_HTTP_SSL_MODULE=y
|
|
BR2_PACKAGE_NGINX_HTTP_V2_MODULE=y
|
|
BR2_PACKAGE_NMAP=y
|
|
BR2_PACKAGE_NMAP_NCAT=y
|
|
BR2_PACKAGE_NMAP_NMAP=y
|
|
BR2_PACKAGE_NMAP_NPING=y
|
|
BR2_PACKAGE_OPENRESOLV=y
|
|
BR2_PACKAGE_OPENSSH=y
|
|
BR2_PACKAGE_SOCAT=y
|
|
BR2_PACKAGE_TCPDUMP=y
|
|
BR2_PACKAGE_TRACEROUTE=y
|
|
BR2_PACKAGE_ULOGD=y
|
|
BR2_PACKAGE_WHOIS=y
|
|
BR2_PACKAGE_BASH_COMPLETION=y
|
|
BR2_PACKAGE_SUDO=y
|
|
BR2_PACKAGE_TTYD=y
|
|
BR2_PACKAGE_HTOP=y
|
|
BR2_PACKAGE_IRQBALANCE=y
|
|
BR2_PACKAGE_KMOD_TOOLS=y
|
|
BR2_PACKAGE_PWGEN=y
|
|
BR2_PACKAGE_RAUC=y
|
|
BR2_PACKAGE_RAUC_DBUS=y
|
|
BR2_PACKAGE_RAUC_GPT=y
|
|
BR2_PACKAGE_RAUC_NETWORK=y
|
|
BR2_PACKAGE_RAUC_JSON=y
|
|
BR2_PACKAGE_SYSKLOGD=y
|
|
BR2_PACKAGE_SYSKLOGD_LOGGER=y
|
|
BR2_PACKAGE_WATCHDOGD=y
|
|
BR2_PACKAGE_LESS=y
|
|
BR2_PACKAGE_MG=y
|
|
BR2_PACKAGE_NANO=y
|
|
BR2_TARGET_ROOTFS_EXT2=y
|
|
BR2_TARGET_ROOTFS_EXT2_4=y
|
|
BR2_TARGET_ROOTFS_EXT2_SIZE="512M"
|
|
BR2_TARGET_ROOTFS_EXT2_INODE_SIZE=0
|
|
BR2_TARGET_ROOTFS_EXT2_MKFS_OPTIONS="-O ^64bit,large_file,ext_attr"
|
|
BR2_TARGET_ROOTFS_SQUASHFS=y
|
|
# BR2_TARGET_ROOTFS_TAR is not set
|
|
BR2_TARGET_OPENSBI=y
|
|
BR2_TARGET_OPENSBI_CUSTOM_VERSION=y
|
|
BR2_TARGET_OPENSBI_CUSTOM_VERSION_VALUE="1.4"
|
|
BR2_TARGET_OPENSBI_PLAT="generic"
|
|
# BR2_TARGET_OPENSBI_INSTALL_JUMP_IMG is not set
|
|
BR2_TARGET_OPENSBI_ADDITIONAL_VARIABLES="FW_TEXT_START=0x40000000 FW_OPTIONS=0"
|
|
BR2_TARGET_UBOOT=y
|
|
BR2_TARGET_UBOOT_BUILD_SYSTEM_KCONFIG=y
|
|
BR2_TARGET_UBOOT_CUSTOM_VERSION=y
|
|
BR2_TARGET_UBOOT_CUSTOM_VERSION_VALUE="2024.07"
|
|
BR2_TARGET_UBOOT_BOARD_DEFCONFIG="starfive_visionfive2"
|
|
BR2_TARGET_UBOOT_CONFIG_FRAGMENT_FILES="$(BR2_EXTERNAL_INFIX_PATH)/board/common/uboot/extras.config $(BR2_EXTERNAL_INFIX_PATH)/board/riscv64/visionfive2/uboot/extras.config"
|
|
BR2_TARGET_UBOOT_NEEDS_DTC=y
|
|
BR2_TARGET_UBOOT_NEEDS_PYLIBFDT=y
|
|
BR2_TARGET_UBOOT_NEEDS_OPENSSL=y
|
|
BR2_TARGET_UBOOT_NEEDS_OPENSBI=y
|
|
# BR2_TARGET_UBOOT_FORMAT_BIN is not set
|
|
BR2_TARGET_UBOOT_FORMAT_DTB=y
|
|
BR2_TARGET_UBOOT_FORMAT_CUSTOM=y
|
|
BR2_TARGET_UBOOT_FORMAT_CUSTOM_NAME="u-boot.itb"
|
|
BR2_TARGET_UBOOT_SPL=y
|
|
BR2_TARGET_UBOOT_SPL_NAME="spl/u-boot-spl.bin.normal.out"
|
|
BR2_TARGET_UBOOT_CUSTOM_DTS_PATH="$(BR2_EXTERNAL_INFIX_PATH)/board/riscv64/visionfive2/uboot/visionfive2-env.dtsi"
|
|
BR2_PACKAGE_HOST_GENIMAGE=y
|
|
BR2_PACKAGE_HOST_RAUC=y
|
|
BR2_PACKAGE_HOST_UBOOT_TOOLS=y
|
|
BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
|
|
BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
|
|
INFIX_VENDOR_HOME="https://github.com/kernelkit"
|
|
INFIX_DESC="Infix is a Network Operating System based on Linux. It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
|
|
INFIX_HOME="https://github.com/kernelkit/infix/"
|
|
INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
|
|
INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
|
|
BR2_PACKAGE_CONFD=y
|
|
# BR2_PACKAGE_CONFD_TEST_MODE is not set
|
|
BR2_PACKAGE_GENCERT=y
|
|
BR2_PACKAGE_STATD=y
|
|
BR2_PACKAGE_SHOW=y
|
|
BR2_PACKAGE_FACTORY=y
|
|
BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
|
|
BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
|
|
BR2_PACKAGE_FINIT_PLUGIN_MODULES_LOAD=y
|
|
BR2_PACKAGE_FINIT_PLUGIN_RTC=y
|
|
BR2_PACKAGE_FINIT_RTC_DATE="2024-11-04 10:54:00"
|
|
BR2_PACKAGE_FINIT_RTC_FILE="/var/lib/misc/rtc"
|
|
BR2_PACKAGE_FINIT_PLUGIN_TTY=y
|
|
BR2_PACKAGE_FINIT_PLUGIN_URANDOM=y
|
|
BR2_PACKAGE_IITO=y
|
|
BR2_PACKAGE_KEYACK=y
|
|
BR2_PACKAGE_KLISH_PLUGIN_INFIX=y
|
|
BR2_PACKAGE_LANDING=y
|
|
BR2_PACKAGE_LOWDOWN=y
|
|
BR2_PACKAGE_MCD=y
|
|
BR2_PACKAGE_MDNS_ALIAS=y
|
|
BR2_PACKAGE_NETBROWSE=y
|
|
BR2_PACKAGE_PODMAN=y
|
|
BR2_PACKAGE_PODMAN_DRIVER_BTRFS=y
|
|
BR2_PACKAGE_PODMAN_DRIVER_DEVICEMAPPER=y
|
|
BR2_PACKAGE_PODMAN_DRIVER_VFS=y
|
|
BR2_PACKAGE_TETRIS=y
|
|
BR2_PACKAGE_ROUSETTE=y
|
|
BR2_PACKAGE_HOST_PYTHON_YANGDOC=y
|
|
BR2_PACKAGE_RAUC_INSTALLATION_STATUS=y
|
|
BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
|
|
BR2_PACKAGE_GETENT=y
|
|
TRUSTED_KEYS=y
|
|
TRUSTED_KEYS_DEVELOPMENT=y
|
|
# GNS3_APPLIANCE is not set
|
|
SDCARD_AUX=y
|