VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) https://git.amelek.net/marekm72/vyos-1x.git/atom?h=sagitta 2024-09-09T14:01:04+00:00 2024-09-09T14:01:04+00:00 mergify[bot] 37929162+mergify[bot]@users.noreply.github.com 2024-09-09T14:01:04+00:00 urn:sha1:92504cee34006f2198393a51efd93bea46346ec2 During podman upgrade and a build from the original source the UNIX socket definition for systemd got lost in translation. This commit re-adds the UNIX socket which is started on boot to interact with Podman. Example: curl --unix-socket /run/podman/podman.sock -H 'content-type: application/json' \ -sf http://localhost/containers/json (cherry picked from commit f67e217f2716937115a3bdf6d316b172bbec75e5) Co-authored-by: Christian Breunig <christian@breunig.cc> 2024-07-27T08:22:40+00:00 Christian Breunig christian@breunig.cc 2024-07-25T09:10:06+00:00 urn:sha1:bbbe2069c3a76adbb271d9af3c541caa3b34e8a0 (cherry picked from commit b9daaaa38abc08d27158ea44e016752b3cb45400) 2024-07-04T18:09:46+00:00 Christian Breunig christian@breunig.cc 2024-07-04T18:07:08+00:00 urn:sha1:92131f9a555578a89d229f687b63bafbe050f3f7 This fixes an error during ISO assembly: update-alternatives: error: no alternatives for regulatory.db dpkg: error processing archive /tmp/apt-dpkg-install-PJplR3/00-vyos-1x_1.5dev0-1880-gecaa44498_amd64.deb (--unpack): new vyos-1x package pre-installation script subprocess returned error exit status 2 (cherry picked from commit a414190447c32be0775a077cde13cef0cf2b8c54) 2024-07-04T11:37:13+00:00 Christian Breunig christian@breunig.cc 2024-07-03T20:28:26+00:00 urn:sha1:7b99545ee9ad2f55b9659104a76bcaff44149de4 Most likely b/c of our non signed Kernel binary we do not trust the Debian signed wireless regulatory database. Fallback to the upstream database instead. (cherry picked from commit 9263965071289b6e51e22669b6d588a8d8fbcc1f) 2024-05-14T17:37:45+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2024-05-14T16:47:29+00:00 urn:sha1:f844b28a6164fcc3f2ad5992b3a1da2bcb6194f9 Remove `service upnp` as it never worked as expected, nft rules do not integrated and custom patches do not seem like a suitable solution for now. Security: UPnP has been historically associated with security risks due to its automatic and potentially unauthenticated nature. UPnP devices might be vulnerable to unauthorized access or exploitation. (cherry picked from commit 7c438caa2c21101cbefc2eec21935ab55af19c46) 2024-05-06T15:15:13+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2024-05-06T11:40:14+00:00 urn:sha1:0e77c68a44518542a0462adffce96fe0a95d9391 (cherry picked from commit 8041201fccffa96ca05ecd764b6d4b9d103b4c1a) 2024-04-09T15:23:03+00:00 Christian Breunig christian@breunig.cc 2024-04-09T15:21:02+00:00 urn:sha1:de1afd1cfe39cfcf880ea667d6478f27378a3ca6 (cherry picked from commit 8e2330fed6480886cbce97cc1b541e54c5394564) 2024-04-06T08:58:33+00:00 Christian Breunig christian@breunig.cc 2024-04-06T08:49:18+00:00 urn:sha1:98a25837ff391d2d181db517b414c81e4b91390f (cherry picked from commit 71786307eed6a0ebb42755f24c19dfd46b1b9696) 2024-04-03T19:01:42+00:00 Christian Breunig christian@breunig.cc 2024-04-02T22:00:43+00:00 urn:sha1:9305f615e55c68efb2d9c5feb65bc716efa6c20d (cherry picked from commit 86b632874288aa5707a94a4f28ca816e543823b9) 2024-04-02T16:33:59+00:00 Christian Breunig christian@breunig.cc 2024-04-01T18:40:16+00:00 urn:sha1:cc208d74567e44d6cffa4fc9fd58bd9bcf050930 Currently VyOS only supports binding a service to one individual VRF. It might become handy to have the services (initially it will be VRF, NTP and SNMP) be bound to multiple VRFs. Changed VRF from leafNode to multi leafNode with defaultValue: default - which is the name of the default VRF. (cherry picked from commit e5af1f0905991103b12302892e6f0070bbb7b770)