VyOS rolling Fullcone kernel

Builds the current VyOS rolling kernel with the SONiC Fullcone NAT patch set used by homerouter/aports:

• 984-add-sonic-fullcone-support.patch adds the kernel 3-tuple hash table and NAT core logic.
• 986-add-sonic-fullcone-to-nft.patch adds the nftables fullcone expression into nft_masq.ko.
• 987-sonic-fullcone-fix-races-and-drops.patch fixes multi-core concurrency locks and packet drops.

The repository keeps the original shell build flow, updated from current VyOS:

• build-kernel.sh builds the rolling kernel with the Fullcone patches.
• build-intel-qat.sh builds and signs the matching Intel QAT driver modules.
• build-linux-firmware.sh packages firmware selected from the built drivers.

A QEMU boot test exercises the Fullcone path before all generated .deb packages are released.

Run Build VyOS rolling Fullcone kernel from the Actions tab. No repository secrets are required.