Daniel Zatovic 4a2154feb2 sysext: Sign OS-dependent sysexts ...

Generate an ephemeral sysext signing key, that is injected into the
image's sysext root of trust. All OS-dependent sysexts will be signed by
this key and the private key (stored in /tmp) will be discarded on SDK
container exit.

Signed-off-by: Daniel Zatovic <daniel.zatovic@gmail.com>

2025-11-20 18:25:41 +01:00

..

portage

Drop Catalyst package.use.force for alternatives

2024-07-22 14:08:57 +01:00

board_options.sh

build_library/board_options: Fix pkg_version function

2021-09-28 16:32:30 +02:00

build_image_util.sh

Use a minimal initrd to switch to the full initrd stored in /usr

2025-10-09 14:55:52 +09:00

catalyst_sdk.sh

dev-lang/rust: Drop our custom package in favour of upstream Gentoo's

2024-08-15 16:54:11 +01:00

catalyst_toolchains.sh

Upgrade to Catalyst 4

2024-07-15 14:27:59 +01:00

catalyst.sh

virtual/rust: Drop unused package

2025-01-24 11:41:22 +01:00

check_root

build_library/check_root: Silence a warning about cgi.py

2023-05-11 12:29:48 +02:00

configure_bootloaders.sh

2317.0.1

2019-11-07 19:40:01 +01:00

cros_vm_constants.sh

Move cros_vm_constants to build_library

2021-08-27 14:20:54 +02:00

dev_container_util.sh

*: Add a way to determine the target of a package installation

2025-08-27 14:03:31 +02:00

disk_layout.json

disk_layout: Keep Azure image size at 30 GB

2025-11-03 21:12:44 +09:00

disk_util

Increase partition sizes

2025-10-10 00:56:42 +09:00

extra_sysexts.sh

build_library/extra_sysexts.sh: Use the x11-drivers/old-nvidia-drivers for 550

2025-08-25 10:28:39 +02:00

extract-initramfs-from-vmlinuz.sh

build_library: Create extraction script temp files in $TMPDIR or /tmp

2025-05-08 07:59:54 +01:00

flatcar-sb-dev-shim-2025.cert

build_libary/vm_image_util: Add the temporary shim signing cert

2025-03-21 18:02:37 +05:30

gen_tmpfiles.py

build_library/gen_tmpfiles.py: Add options for allowed users and groups

2023-04-26 15:39:58 +02:00

generate_au_zip.py

Drop lots of obsolete release signing and upload code

2024-11-26 14:58:24 +00:00

generate_grub_hashes.py

build_library: Fix getting integer from string

2021-08-18 19:01:51 +02:00

generate_kernel_hash.py

build_library: Fix python script extension

2021-08-18 18:57:04 +02:00

grub_install.sh

grub_install.sh: Ensure shim packages are installed

2025-07-03 17:00:02 +01:00

grub.cfg

build_library/grub.cfg: Enable grub fallback behavior

2024-09-17 11:01:06 +02:00

menu.lst

grub: the one bootloader to rule them all

2014-12-05 16:51:11 -08:00

parallels_pvs.sh

build_library: set parallels build scripts as executable

2016-10-27 13:27:30 -07:00

prefix_util.sh

Drop all instances of ineffective --root-deps=rdeps option

2024-11-12 22:08:21 +00:00

prod_image_util.sh

sysext: Sign OS-dependent sysexts

2025-11-20 18:25:41 +01:00

qemu_template.sh

Add hvf acceleration support for macOS

2025-10-08 21:25:08 +05:30

release_util.sh

Drop lots of obsolete release signing and upload code

2024-11-26 14:58:24 +00:00

reports_util.sh

build_library: Sort content listings for more consistent output

2025-05-08 07:59:53 +01:00

sbsign_util.sh

build_library/sbsign_util: Update the SBSIGN_KEY & AZURE_KEYVAULT_URL

2025-03-21 18:02:30 +05:30

set_lsb_release

Use new website flatcar.org

2022-09-14 14:32:49 +02:00

sysext_mangle_containerd-flatcar

build_library: Drop debug symbols and other noise from some sysexts

2025-11-13 10:46:36 +00:00

sysext_mangle_docker-flatcar

build_library: remove two Docker files not used on Flatcar

2024-10-02 16:32:20 +02:00

sysext_mangle_flatcar-incus

build_library: Drop debug symbols and other noise from some sysexts

2025-11-13 10:46:36 +00:00

sysext_mangle_flatcar-nvidia-drivers-535

build_library: Fix depmod issues with sysext kmods

2025-08-11 14:34:27 +02:00

sysext_mangle_flatcar-nvidia-drivers-535-open

build_library: Fix depmod issues with sysext kmods

2025-08-11 14:34:27 +02:00

sysext_mangle_flatcar-nvidia-drivers-550

build_library: Fix depmod issues with sysext kmods

2025-08-11 14:34:27 +02:00

sysext_mangle_flatcar-nvidia-drivers-550-open

build_library: Fix depmod issues with sysext kmods

2025-08-11 14:34:27 +02:00

sysext_mangle_flatcar-nvidia-drivers-570

build_library: Fix depmod issues with sysext kmods

2025-08-11 14:34:27 +02:00

sysext_mangle_flatcar-nvidia-drivers-570-open

build_library: Fix depmod issues with sysext kmods

2025-08-11 14:34:27 +02:00

sysext_mangle_flatcar-overlaybd

build_library: Drop debug symbols and other noise from some sysexts

2025-11-13 10:46:36 +00:00

sysext_mangle_flatcar-podman

build_library: Drop debug symbols and other noise from some sysexts

2025-11-13 10:46:36 +00:00

sysext_mangle_flatcar-python

build_library: Shrink the sysext-python image by removing python tests

2024-08-14 17:25:31 +02:00

sysext_mangle_flatcar-zfs

build_library: Fix depmod issues with sysext kmods

2025-08-11 14:34:27 +02:00

sysext_mangle_kmod

build_library: Fix depmod issues with sysext kmods

2025-08-11 14:34:27 +02:00

sysext_prod_builder

sysext: Sign OS-dependent sysexts

2025-11-20 18:25:41 +01:00

template_vmware.ovf

build_library/template_vmware.ovf: Newer OS type and hardware version

2020-07-09 12:19:23 +02:00

test_build_root

fix(test_image_content): Improve /usr symlink and conflict tests.

2013-12-09 19:32:54 -08:00

test_image_content.sh

test_image_content: add GLSA 202407-05 to allowlist

2024-07-17 09:41:24 +02:00

test_oem_pkgs

*: Make catalyst and emerge verbose by default

2023-02-16 13:57:05 +01:00

toolchain_util.sh

Drop all references to a toolchain-specific binpkg host

2025-04-22 17:59:38 +01:00

update_chroot_util.sh

build_library/update_chroot_util.sh: Ignore equery's non-zero exit status

2023-04-26 07:49:56 +02:00

virtualbox_ovf.sh

virtualbox_ovf.sh: use virtio network interfaces

2014-11-07 16:16:03 -07:00

vm_image_util.sh

sysext: Sign OS-dependent sysexts

2025-11-20 18:25:41 +01:00

write_hdd.sh

build_library: set parallels build scripts as executable

2016-10-27 13:27:30 -07:00