<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/data/config-mode-dependencies, branch circinus</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/marekm72/vyos-1x.git/atom?h=circinus</id>
<link rel='self' href='https://git.amelek.net/marekm72/vyos-1x.git/atom?h=circinus'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/'/>
<updated>2024-08-24T19:54:48+00:00</updated>
<entry>
<title>sysctl: T3204: restore sysctl setttings overwritten by tuned</title>
<updated>2024-08-24T19:54:48+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-08-05T15:09:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=092c922cfbec7ee82878fa5d22c5c016af01b60d'/>
<id>urn:sha1:092c922cfbec7ee82878fa5d22c5c016af01b60d</id>
<content type='text'>
(cherry picked from commit 8500e8658ff10f52739143fd7814cf60c9195f16)
</content>
</entry>
<entry>
<title>wireless: T6318: move country-code to a system wide configuration</title>
<updated>2024-08-23T06:18:32+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-06-15T19:40:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=549a16f5b1437d437ccc873ded500b8cecd03c28'/>
<id>urn:sha1:549a16f5b1437d437ccc873ded500b8cecd03c28</id>
<content type='text'>
Wireless devices are subject to regulations issued by authorities. For any
given AP or router, there will most likely be no case where one wireless NIC is
located in one country and another wireless NIC in the same device is located
in another country, resulting in different regulatory domains to apply to the
same box.

Currently, wireless regulatory domains in VyOS need to be configured per-NIC:
  set interfaces wireless wlan0 country-code us

This leads to several side-effects:
* When operating multiple WiFi NICs, they all can have different regulatory
  domains configured which might offend legislation.
* Some NICs need additional entries to /etc/modprobe.d/cfg80211.conf to apply
  regulatory domain settings, such as: "options cfg80211 ieee80211_regdom=US"
  This is true for the Compex WLE600VX. This setting cannot be done
  per-interface.

Migrate the first found wireless module country-code from the wireless
interface CLI to: "system wireless country-code"

(cherry picked from commit 9e22ab6b2aee48029d3455f65880e45c558cf1da)
</content>
</entry>
<entry>
<title>system_option: T5552: Apply IPv4 and IPv6 options after reapplying sysctls by TuneD (#3863)</title>
<updated>2024-07-25T16:07:28+00:00</updated>
<author>
<name>mergify[bot]</name>
<email>37929162+mergify[bot]@users.noreply.github.com</email>
</author>
<published>2024-07-25T16:07:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=609f4b9c1bb7f3144a997f76e74e86bef0559b23'/>
<id>urn:sha1:609f4b9c1bb7f3144a997f76e74e86bef0559b23</id>
<content type='text'>
(cherry picked from commit 7b82e4005724683c6311fab22358746f2cca4c1b)

Co-authored-by: Nataliia Solomko &lt;natalirs1985@gmail.com&gt;</content>
</entry>
<entry>
<title>Merge pull request #3612 from c-po/haproxy-pki-T6463</title>
<updated>2024-06-10T08:27:14+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-06-10T08:27:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=7ade4fa71b535289577978a73746c1fc1d993803'/>
<id>urn:sha1:7ade4fa71b535289577978a73746c1fc1d993803</id>
<content type='text'>
pki: T6463: reverse-proxy service not reloaded when updating SSL certificate(s)</content>
</entry>
<entry>
<title>pki: T6464: sstpc interface not reloaded when updating SSL certificate(s)</title>
<updated>2024-06-09T18:52:15+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-06-09T18:52:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=42294ccd904773fa19a6af0f37cf9526321d87e4'/>
<id>urn:sha1:42294ccd904773fa19a6af0f37cf9526321d87e4</id>
<content type='text'>
The SSTPC client was not reloaded/restarted with the new SSL certificate(s)
after a change in the PKI subsystem.

This was due to missing dependencies.
</content>
</entry>
<entry>
<title>pki: T6463: reverse-proxy service not reloaded when updating SSL certificate(s)</title>
<updated>2024-06-09T18:45:04+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-06-09T18:45:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=6ce8efdc8dafef67541bed89fc7dc7cd83335bf4'/>
<id>urn:sha1:6ce8efdc8dafef67541bed89fc7dc7cd83335bf4</id>
<content type='text'>
The haproxy reverse proxy was not reloaded/restarted with the new SSL
certificate(s) after a change in the PKI subsystem. This was due to missing
dependencies.
</content>
</entry>
<entry>
<title>bridge: T6317: add dependency call for wireless interfaces</title>
<updated>2024-05-08T19:47:40+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-05-08T19:40:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=431443ab3f663a6617008536d2d6d96407aebfcb'/>
<id>urn:sha1:431443ab3f663a6617008536d2d6d96407aebfcb</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug</title>
<updated>2024-03-04T10:23:26+00:00</updated>
<author>
<name>Viacheslav Hletenko</name>
<email>v.gletenko@vyos.io</email>
</author>
<published>2024-03-04T10:23:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=689fea253d9019df20d5c6ac7fa22d5e8454afab'/>
<id>urn:sha1:689fea253d9019df20d5c6ac7fa22d5e8454afab</id>
<content type='text'>
If we have any `vpn ipsec` and `protocol nhrp` configuration we
get the empty configuration file `/run/opennhrp/opennhrp.conf`
after rebooting the system.

Use config dependency instead of the old `resync_nhrp` function
fixes this issue
</content>
</entry>
<entry>
<title>vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is required</title>
<updated>2024-02-27T21:35:11+00:00</updated>
<author>
<name>sarthurdev</name>
<email>965089+sarthurdev@users.noreply.github.com</email>
</author>
<published>2024-02-27T20:38:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=6f7d1e15665655e37e8ca830e28d9650445c1217'/>
<id>urn:sha1:6f7d1e15665655e37e8ca830e28d9650445c1217</id>
<content type='text'>
</content>
</entry>
<entry>
<title>pki: T6034: add dependencies to trigger rpki re-run on openssh key update</title>
<updated>2024-02-12T20:16:12+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-02-12T20:16:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=0f8bf6bd0fb29cfd638e9920674e7ad1d1d25350'/>
<id>urn:sha1:0f8bf6bd0fb29cfd638e9920674e7ad1d1d25350</id>
<content type='text'>
</content>
</entry>
</feed>
