pygos/build
1
0
Fork 0
mirror of https://github.com/pygos/build.git synced 2024-11-16 00:17:11 +01:00
Code Issues Releases Wiki Activity
547 commits 1 branch 0 tags 4.1 MiB
Commit graph

547 commits

This branch
This branch
All branches
Author SHA1 Message Date
David Oberhollenzer
6ad8ed37f7 Cleanup binutils confgiure flags, add relro, PIC, deterministic ar 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
1aa829699c Explicitly disable libquadmath in second stage gcc 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
544ac03d1f Allways build libssp_noshared, even for non hardened toolchains 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
e87a8ec43c Explicitly turn on size optimizations 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
cf2e438a45 Bump Raspberry Pi 3 vendor kernel version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
35e72a4ae7 Bump Raspberry Pi 3 firmware version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
82a00e5a1b Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
60f9a68807 Bump file version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
81f4f36044 Bump tzdata version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
e91029b64e Bump unbound version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
0b5e2ccc38 Bump dnsmasq version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
1786c65c4c Bump init version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-11-03 19:28:43 +01:00
David Oberhollenzer
d6030cd898 Replace gcc libssp with built musl builtins 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-20 12:52:06 +02:00
David Oberhollenzer
8a7f8ea357 Disable libmpx on the ALIX board 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-20 01:05:41 +02:00
David Oberhollenzer
d06083c96d Propperly process Linux package targets in deploy function 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 21:50:57 +02:00
David Oberhollenzer
073a7b3aa7 Update documentation 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 21:50:57 +02:00
David Oberhollenzer
7dd6306b30 cleanup: derive LINUX_CPU from TARGET, merge linux packages 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 21:50:57 +02:00
David Oberhollenzer
b5d4ece03d cleanup: derive MUSL_CPU from TARGET in Musl package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 21:50:57 +02:00
David Oberhollenzer
569f7d5e0c cleanup: derive OPENSSL_TARGET from TARGET in OpenSSL package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 21:50:57 +02:00
David Oberhollenzer
8e5c6d3a2e Make toolchain and user space hardening configurable 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 21:50:57 +02:00
David Oberhollenzer
69aa1d33e9 Set hardening options for packages with custom build system 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-19 00:18:51 +02:00
David Oberhollenzer
7b0e1f182c Add hardening flags to autotools based packages 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-17 01:11:02 +02:00
David Oberhollenzer
8063550d4e Add libc agnostic fortify-headers package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-17 01:11:02 +02:00
David Oberhollenzer
52933c58c9 Enable hardening flags for stage-1 gcc 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-17 00:52:10 +02:00
David Oberhollenzer
0958272eb3 Export CROSS_COMPILE environment variable for Musl build script 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-17 00:52:10 +02:00
David Oberhollenzer
c16ff53c14 Remove overlay partition setup from release shell scripts 
The initial ram disk does that for us (with the propper permissions
in the case of Qemu).

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-11 19:02:11 +02:00
David Oberhollenzer
cf60632398 Enable kernel hardening options 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-11 19:02:11 +02:00
David Oberhollenzer
2a1add41e7 Enable stack protection flags in GCC cross compiler 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-11 19:02:11 +02:00
David Oberhollenzer
f1be060f7c Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-07 16:35:25 +02:00
David Oberhollenzer
edeedb8047 Update documentation 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-07 16:35:25 +02:00
David Oberhollenzer
62345ef7bb Cleanup nginx user and directory setup 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-07 16:35:25 +02:00
David Oberhollenzer
30cad432bf Add an Nginx server landing page to the router product 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-07 02:16:28 +02:00
David Oberhollenzer
dcadff7637 Init version rebase 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-07 02:16:28 +02:00
David Oberhollenzer
8d75cb83fd Add nginx package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-06 20:32:44 +02:00
David Oberhollenzer
f3861b9df1 Add PCRE package 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-06 17:25:52 +02:00
David Oberhollenzer
a71c45aec0 Fix final image copy in Linux LTS build script 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-06 17:25:52 +02:00
David Oberhollenzer
e7101d5400 Unfuck libtool archives for libnl3 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-06 17:25:52 +02:00
David Oberhollenzer
8ee48e70d2 Add documentation index 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-03 02:04:01 +02:00
David Oberhollenzer
804aad6274 Add writeup on system boot and VFS setup 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-03 01:59:57 +02:00
David Oberhollenzer
86dcb7d8c1 Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-01 20:49:03 +02:00
David Oberhollenzer
e61ca9decf Another overlay mount overhaul 
- Directly pass the device type to the mount command
 - Use the special default type "hwdevice" to wait for a device node
   before mounting it
 - Initialize the overlay partition from the initrd script
 - Do the bind mount setup as document

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-01 19:11:12 +02:00
David Oberhollenzer
05298e3363 Update documentation 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-10-01 17:34:25 +02:00
David Oberhollenzer
38a9b5865c Add libdir to autotools configuration 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-30 02:36:59 +02:00
David Oberhollenzer
121fee7e97 Add configuration for testing with qemu 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-30 01:28:33 +02:00
David Oberhollenzer
59d01432b1 More sophisticated filesystem setup from initrd 
- Let us specify the "type" of the root and overlay filesystem.
   At the moment we have raw device that we wait for (default) and
   qemu virtio 9pfs.
 - If no squasfs image is specified, mount the root partition as
   root filesystem.
 - If no overlay device is specified, don't touch the new root
   filesystem.

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-29 21:32:58 +02:00
David Oberhollenzer
2d74caf06b Remove perl scripts from ntp package installed files 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-29 17:10:07 +02:00
David Oberhollenzer
90fc4f4e9e Patch gcc to install 64 bit libraries to /lib instead of /lib64 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-29 17:10:07 +02:00
David Oberhollenzer
6ced6fc948 Minor fixes for main line Linux LTS build 
- Patch the config first, don't touch it after running make oldconfig
 - Add modules target to toolchain config, don't directly call it
 - Only try to install modules if we actually have support for loadable
   modules

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-29 17:10:07 +02:00
David Oberhollenzer
8faae986b6 Bump psmisc version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-27 23:58:12 +02:00
David Oberhollenzer
b0da273179 Bump mainline LTS linux version 
Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
 2018-09-27 23:56:34 +02:00