Age | Commit message (Collapse) | Author |
|
Extended PPPoE-server rate-limiter to avoid shaping marked resources
Often this feature needs for ISP, which provides access to some IX
or its resources.
set service pppoe-server shaper fwmark '223'
|
|
smoketest: tftp: T4012: add busy waiting loop when validating service availability
|
|
availability
TFTP daemon is started as "fire and forget" and systemctl can return (thus
commit will return) but the daemon itself is not yet running.
This adds a loop checking if the service runs and will fail after 10 seconds.
|
|
T4975: always sync() filesystem after commit (equuleus)
|
|
This reverts commit 7b36c363cd5b0168bd83c399f50a0a360ba3ee58.
A general solution is implemented in Commit ae9dde04 ("T4975: always sync()
filesystem after commit").
|
|
(cherry picked from commit 29a44a73c638cb22839aa32986de367231b6efe9)
|
|
login: T4975: Fixed broken CLI commands
|
|
User profile files are not saved to disk after configuration is fully applied.
Because of this, after a fast system reset, profile files can be empty, and CLI
is broken.
This fix adds a `sync()` call after the user's configuration, which should
protect from data loss and fix the problem with profiles.
|
|
T4947: container: fix existing issues in equuleus after backport from 1.4
|
|
|
|
VyOS 1.3 does not support automatic generation of the (default: <>) string
from XML defaultValue nodes. Specify help string manually.
|
|
|
|
pppoe: T4948: add CLI option to allow definition of host-uniq flag (equuleus backport)
|
|
container: T4947: support mounting container volumes as ro or rw (equuleus backport)
|
|
T4949: Backport "monitor log" and "show log" op-mode definitions from current to equuleus
|
|
(cherry picked from commit 1bd69a81dc32fdaa62be27e4f5ae3cfe333f2a26)
|
|
(cherry picked from commit 68a8cd2612cb1b00d381059747de8107f38e8c96)
|
|
|
|
Some ISPs seem to use the host-uniq flag to authenticate client equipment.
Add CLI option in VyOS to allow specification of the host-uniq flag.
set interfaces pppoe pppoeN host-uniq <value>
(cherry-picked from commit 38bab79324087df5a9057c23b85a0a784c09540a)
|
|
validators: T4875: use file-path to replace validator 'interface-name' (backport)
|
|
(cherry-picked from commit 046bb9ccd56ac5e97c638bb4a9ca856d3d36026a)
|
|
(cherry picked from commit f0bc6c62016d285f0645c4b3ba8b1451c40c637f)
|
|
Whenever a container is used and a folder is mounted, this happenes as
read-write which is the default in Docker/Podman - so is the default in VyOS.
A new option is added "set container name foo volume mode <ro|rw>" to specify
explicitly if rw (default) or ro should be used for this mounted folder.
(cherry picked from commit 275ea7303cfdb79c042da1b710622aee17a488a8)
|
|
Smoketest fixes backport for equuleus
|
|
(cherry picked from commit 5cd2cd89b295c728f21c418c3fa081560a00eefc)
|
|
Commit cca7ec3e ("T4832: dhcp: Add IPv6-only dhcp option support (RFC 8925)")
extended the smoketests but used int over str when calilng the CLI wrapper.
This led to:
TypeError: sequence item 7: expected str instance, int found
(cherry picked from commit a741a9297f02f938653aeaa1af3c4a57364e9215)
|
|
T4906: Fix show vpn ipsec connections data
|
|
We get incorrect data when shows connections
As we get list of all connections we should compare the connection
name with entries in list and set correct data if they match
|
|
vyos.util: T4575: Add new wrapper "rc_cmd"
|
|
It is useful to have both a return code and output of the command
Add a new wrapper "rc_cmd" that returns both
% rc_cmd('uname')
(0, 'Linux')
% rc_cmd('ip link show dev fake')
(1, 'Device "fake" does not exist.')
(cherry picked from commit 14418b6d80ef4652a44d9280baf369c8e3c429fd)
|
|
[1.3] T4832: dhcp: Add dhcp option to signal IPv6-only support (RFC 8925)
|
|
Backport: T4918: op_mode interfaces: Fix show int
|
|
`show interfaces ethernet eth0` and `show interface bonding eth0`
produces the same output. While this is not a big problem it does
make usage a bit odd sometimes.
This commit adds the --intf_type option to all instances of
interfaces.py to make output consistent.
|
|
webproxy: T4927: Changed restart to reload-or-restart in commit
|
|
Changed restart to reload-or-restart in the commit.
It allows to reload the config
and not restart webproxy service during the commit.
Backported from 1.4
|
|
T4922: T4922: ssh-client backports for equuleus
|
|
used
We need to ensure that source-address is assigned on source-interface before
applying the configuration, else SSH client will have a hard time talking to
someone.
(cherry picked from commit d1ef90e1eb51334b99ad716969e17c7f257e1a39)
|
|
(cherry picked from commit 87cc636bd2baf576a2a5ece7a4f8318eb4f69c2e)
|
|
Commit 846e306700a ("ssh: T2651: add cli options for source address") added
support for a basic SSH client option, but it grabbed the entire
/etc/ssh/ssh_config file without the ability to make custom user
adjustments via the /etc/ssh/ssh_config.d/ folder.
This commit places the VyOS SSH options under /etc/ssh/ssh_config.d/ leaving
the common override system alive.
(cherry picked from commit 7763de6c4b93d3372ab3f4572d9fa6b7536102b3)
|
|
smoketest: container: T578: adjust to podman 3.0.1 JSON output
|
|
The podman version used in VyOS 1.3 differs from the one used in VyOS 1.4 as
it is currently not possible to build podman 4.2 for Debian Buster. Due to this
restriction we need to adjust the handling of the JSON output when working with
container networks.
|
|
Debian: T578: add skopeo dependency on vyos-1x-smoketest
|
|
Dependency is required for the test Docker OCI image used within the
smoketest framework
|
|
container: T578: backport podman from 1.4 development branch (equuleus)
|
|
T4898: add MTU config option for dummy interfaces (equuleus)
|
|
|
|
(cherry picked from commit e5a5684eb4004772439b2dc33ec21b7546db3fe1)
|
|
(cherry picked from commit 7923e7c57a7492111c7cec8b04228db0a6f00af3)
|
|
I use dummy interfaces in a VRF as source-interfaces for VXLAN in order to
force VXLAN send underlay UDP traffic through the VRF where the dummy interface
resides.
However dummy interface has no mtu option so it always gets an MTU of 1500.
This will cause an error when the mtu of dummy is not large enough for the
VXLAN traffic.
Adding this option in the config template will solve this.
(cherry picked from commit 1440ef93e13d15e2247cbfc2cb4ea2afb266fc9e)
|
|
T4809: radvd: (Backport) Allow the use of AdvRASrcAddress
|