summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-01-18options: T1919: beautify with open() for reboot on panicChristian Poessinger
(cherry picked from commit 13d76e69cc43cae0570cc5fab1ee02fdec33aa17)
2021-01-18ssh: T3212: remove RestartPreventExitStatus from systemd unitChristian Poessinger
When configuring SSH to only run inside a given VRF the system can not start SSHd on bootup as the Kernel will report EPERM (Operation not permitted) when loading the VRF BPF program. This returns the exit code 255 which is marked in the systemd unit file to stop restarting the service forever. Removing this limitation will restart the SSHd on startup and it will live inside the VRF till the end of days. (cherry picked from commit cdbac8f10b470a06aff54832da7f006aa3ed194e)
2021-01-17openvpn: T2994: proper cleanup all files on interface deletionChristian Poessinger
(cherry picked from commit c0aaa0b8707c17fe86e6483b3f5caecaa3f7fd72)
2021-01-17openvpn: T2381: bugfix rendering multiple openvpn-options from CLIChristian Poessinger
The CLI statement "set interfaces openvpn vtun10 openvpn-option '--tun-mtu 1500 --fragment 1300 --mssfix'" will render in vtun10.conf to: --tun-mtu 1500 --fragment 1300 --mssfix On startup OpenVPN complains about: openvpn-vtun10: Options error: Unrecognized option or missing or extra parameter(s) in vtun10.conf:76: tun-mtu (2.4.7) The options must be split on -- to a new configuration line. (cherry picked from commit f8a8ee02d0ede240f555ffa558665df686df24a8)
2021-01-17smoketest: configs: add very basic bgp rpki configChristian Poessinger
(cherry picked from commit e0fdf9b4d746e751d0c12c1e6bd2d10daf22ec76)
2021-01-17smoketest: add testcases for "system ipv6"Christian Poessinger
(cherry picked from commit 62bd08a5811aeec5670c29af18583f9f3350cb1d)
2021-01-17ntp: T2185: store configuration in volatile /run areaChristian Poessinger
(cherry picked from commit 3c33359d0c9700a1c80f1a222fe5f43642cd4fde)
2021-01-17xdp: T2666: disable this highly experimental feature in 1.3 LTSChristian Poessinger
2021-01-16smoketest: interfaces: use provided unittest framework assert methodsChristian Poessinger
(cherry picked from commit b2b5ea81243f672d3cc3c4082374551f38fd4dde)
2021-01-16smoketest: loopback: interface can not be deleted, it must always existChristian Poessinger
Commit 35b049aa ("smoketest: interfaces: verify deletion of interfaces") validated that when the test completed (tearDown()) there must be no interfaces left registered for the tests. This is invalid for the loopback interface as it can not be deleted from the system. (cherry picked from commit b373d3841608838fd28f98691cb14e42c128c216)
2021-01-16smoketest: interfaces: verify deletion of interfacesChristian Poessinger
When deleting the test interfaces, ensure after each run that there are no leftovers from a previous run, indicating that there was a problem while removing the interfaces. (cherry picked from commit 35b049aa8b90ee41f9c59bf4b2e3610d03505776)
2021-01-16vrf: T31: add support for - and _ in VRF namesChristian Poessinger
(cherry picked from commit 8953a14b01a4183ea890f1c3d569aae54e363614)
2021-01-16vyos.configdict: node_changed() now accepts key mangling parameterChristian Poessinger
(cherry picked from commit 452a9c504f472dcaee8c93947a889dab4f8259ce)
2021-01-16smoketest: interface: test "disable" CLI optionChristian Poessinger
Verify interface is in admin down state afterwards. (cherry picked from commit 461a106cdaf892a067bcd5630952822242edd411)
2021-01-16vrf: T31: migrate to get_config_dict()Christian Poessinger
(cherry picked from commit e1b2f1012ca18ef4ecf2b53e9bb01a50880cbd3c)
2021-01-15op-mode: restart: cleanup help stringsChristian Poessinger
(cherry picked from commit 56ec3259b67c6441d992948a8bae95039194eb6c)
2021-01-15ssh: T631: add op-mode "restart ssh" commandChristian Poessinger
(cherry picked from commit 3ce7a8c6e55d7296fc9155a6b8ca913d4a08b1ab)
2021-01-15snmp: T652: enable interface_replace_old option and restart commandChristian Poessinger
- Remove all old ifTable entries with the same ifName as newly appeared interface (with different ifIndex) - this is the case on e.g. ppp interfaces - Add new op-mode command "restart snmp" to restart the daemon (cherry picked from commit 79a02470c4f9f2184913a959545b54a2dfd76d1e)
2021-01-15openvpn: T3219: fix for server client subnet IPv6 irouteJernej Jakob
(cherry picked from commit fe2efbfb1a5b53225225b3c03c77a4a96a22a9c4)
2021-01-15salt: T3157: Fix location for log filesever-sever
(cherry picked from commit b6fe268876feeb151bd1f4c6b60356198f9408bc)
2021-01-15op-mode: T3215: Fix show ipv6 route overlaps in nodessever-sever
(cherry picked from commit 04ddf85bcc9d5ec06ef51537f5cbca97548716f3)
2021-01-14smoketest: bridge: remove failfast=TrueChristian Poessinger
(cherry picked from commit 3ece840792011fcca00617e42b049e1414ebb1d6)
2021-01-14smoketest: configs: add very basic internet-exchange configChristian Poessinger
(cherry picked from commit 5abd5c4267b18dd8ea34349b9cdaf2a58f13bb98)
2021-01-14is-is: T3210: Fix three-way-handshakesever-sever
(cherry picked from commit 2cace1bdf16fe3e2644e897dcd65ca3899883461)
2021-01-14smoketest: interface: validate empty description on removalChristian Poessinger
(cherry picked from commit 3b9ae4c22d8dffa8b5beee57bf5b19dac969a009)
2021-01-14op-mode: T3215: Fix show ipv6 route nodessever-sever
(cherry picked from commit d6faba8c708b4376f148a28c89fe6ff39f369064)
2021-01-13ifconfig: T2653: return empty string when there is no interface descriptionChristian Poessinger
After switching to iproute2 in commit 92f36735 ("ifconfig: T2653: use iproute2 commands for alias, mac and mtu set()/get()" it is necessary to return an empty string as iproute2 returns None. (cherry picked from commit ea1be032e98fd1634e71d3c2d61b3e93bff841de)
2021-01-13ssh: T3212: do not make /run/sshd directory disappear on failureChristian Poessinger
(cherry picked from commit 57fca79636b783dc4be2df1bc1ff12a0ce79d988)
2021-01-13nat: T3186: fix negated addresses not applied from CLIChristian Poessinger
(cherry picked from commit 806b1cb6eebce4a11a5d2496b062a93d5899746e)
2021-01-12smoketest: interface: enable ip/ipv6 tests on additional interfacesChristian Poessinger
(cherry picked from commit 910919d856d790ff8905d513c280fdf12f8892ef)
2021-01-12ifconfig: T2653: use iproute2 commands for alias, mac and mtu set()/get()Christian Poessinger
(cherry picked from commit 92f3673538e0328488c14c90c8acf7ea6b2141ba)
2021-01-12tunnel: T3205: bugfix gre-bridge interfacesChristian Poessinger
(cherry picked from commit 138e7a95c21fb2928182847693e366644be6e945)
2021-01-12Revert "ntp: T2944: By default do not listen port 123 on any address"sever-sever
This reverts commit ca61add5e7dea828c67ea074368196025f4cb4eb. (cherry picked from commit a051c928aeb2a14250d57c8495c07474c92a8b61)
2021-01-11op-mode: T3201: fix "show log all" for RADIUS usersChristian Poessinger
(cherry picked from commit f493df24ba29472735b1a4a081d0fce409b70d9f)
2021-01-11nat: T3206: unable to delete only rules but keep destination nodeChristian Poessinger
(cherry picked from commit 9db4dbc4a84ff1a110617cb3c7849d7c9d4a62e7)
2021-01-11login: T3208: fix wrong string formatting on my_setChristian Poessinger
Commit e8a1c291 ("login: radius: T3192: migrate to get_config_dict()") did an invalid forward of the newly encrypted passwort to my_set to store it inside the config. (cherry picked from commit a7fe2ff4fdfcb2619b892aff170d42609965b20b)
2021-01-10Merge branch 'current' of github.com:vyos/vyos-1x into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyos-1x: op-mode: T3178: add "monitor protocols <bgp|ospf|ospfv3|rib|rip|ripng>" commands op-mode: T3178: add remaining "show ipv6 ospfv3 database" commands from vyatta-op-quagga op-mode: T3178: migrate most of the OSPFv3 parts to re-includable snippets xml: op-mode: add preprocessor support as known from configuration mode Debian: vyos-1x depends on python3-spinx for "make docs" ospf: T3198: Fix show information for database tag nodes login: radius: T3192: remove debug print() xml: convert tab to space in "system login"
2021-01-10op-mode: T3178: add "monitor protocols <bgp|ospf|ospfv3|rib|rip|ripng>" commandsChristian Poessinger
2021-01-10op-mode: T3178: add remaining "show ipv6 ospfv3 database" commands from ↵Christian Poessinger
vyatta-op-quagga
2021-01-10Merge branch 'op-mode-xml' into currentChristian Poessinger
* op-mode-xml: op-mode: T3178: migrate most of the OSPFv3 parts to re-includable snippets xml: op-mode: add preprocessor support as known from configuration mode Debian: vyos-1x depends on python3-spinx for "make docs"
2021-01-10op-mode: T3178: migrate most of the OSPFv3 parts to re-includable snippetsChristian Poessinger
This eases CLI maintenance and also migration from legacy code.
2021-01-10xml: op-mode: add preprocessor support as known from configuration modeChristian Poessinger
2021-01-10Debian: vyos-1x depends on python3-spinx for "make docs"Christian Poessinger
2021-01-10Merge pull request #675 from sever-sever/T3198Christian Poessinger
ospf: T3198: Fix show information for database tag nodes
2021-01-09ospf: T3198: Fix show information for database tag nodessever-sever
2021-01-09login: radius: T3192: remove debug print()Christian Poessinger
(cherry picked from commit 586b440a835cba7d45e50bb6d1781823903332b6)
2021-01-09login: radius: T3192: remove debug print()Christian Poessinger
2021-01-08xml: convert tab to space in "system login"Christian Poessinger
2021-01-08Merge branch 'current' of github.com:vyos/vyos-1x into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyos-1x: (30 commits) smoketest: dummy: fix indent smoketest: bridge: bond: enable ip subsystem tests smoketest: interfaces: dhcpv6pd final fix smoketest: ethernet: fix link-speed loop test Debian: add build-dependency on python3-jinja2 smoketest: ethernet: verify() speed/duplex must both be auto or discrete smoketest: interfaces: report skipped tests smoketest: ethernet: bugfixes for dhcpc6 and unknown interfaces Debian: add python3-psutil build dependency smoketest: ethernet: check for error on non existing interface vyos.configverify: provide generic helper to check for interface existence smoketest: interfaces: fix dhcpv6 pd testcase when using multiple interfaces login: radius: T3192: migrate to get_config_dict() ssh: T2635: harden Jinja2 template and daemon startup ssh: T2635: change sshd_config path to /run/sshd login: radius: T3192: support IPv6 server(s) and source-address xml: include: provide generic include for disable node xml: radius: T3192: split individual nodes to discrete includes bgp: T2174: verify() existence of route-map and prefix-list smoketest: interfaces: test dhcpv6 pd sla-id auto increment ...
2021-01-08smoketest: dummy: fix indentChristian Poessinger