summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-03-14snmp: T2998: updated snmp.pyNataliia Solomko
2024-03-11snmp: T2998: SNMP v3 oid "exclude" option fixNataliia Solomko
2024-03-07Merge pull request #3104 from natali-rs1985/T6057-equuleusDaniil Baturin
conntrack-sync: T6057: Add ability to disable syslog for conntrackd
2024-03-07conntrack-sync: T6057: Add ability to disable syslog for conntrackdNataliia Solomko
2024-02-16Merge pull request #3018 from aapostoliuk/T5418-equuleusDaniil Baturin
T5418: PPPoE allowed creating subnet started from any IP
2024-02-16T5418: PPPoE allowed creating subnet started from any IPaapostoliuk
Added the possibility of creating subnet in PPPoE client's IP pools started from any IP.
2024-02-14Merge pull request #3010 from c-po/t3992-equuleusChristian Breunig
configverify: T3992: fix KeyError in verify_address()
2024-02-14Merge pull request #3006 from vyos/mergify/bp/equuleus/pr-2983Daniil Baturin
rpki: T6004: add missing startup priority (backport #2983)
2024-02-13configverify: T3992: fix KeyError in verify_address()Christian Breunig
Reproducible by: set interfaces bridge br0 member interface eth1.10 set interfaces ethernet eth1 vif 10 address 100.64.0.1/24 File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 314, in verify_vlan_config verify_address(vlan) File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 206, in verify_address interface = config['ifname'] KeyError: 'ifname'
2024-02-13Merge pull request #3007 from c-po/rpki-fixesChristian Breunig
utils: T5239: add low-level read from config.boot (RPKI fixes)
2024-02-13utils: T5239: add low-level read from config.bootChristian Breunig
2024-02-13rpki: T6004: add missing startup priorityChristian Breunig
(cherry picked from commit 4c2acb970c62478cf1139fcf66b0de341d46f7fc)
2024-02-10Merge pull request #2981 from c-po/equuleusDaniil Baturin
xml: T302: replace references to Quagga with FRRouting
2024-02-10xml: T302: replace references to Quagga with FRRoutingChristian Breunig
2024-02-07Merge pull request #2949 from sever-sever/T55861.3.6Daniil Baturin
T5586: delete old systemd unit keepalived service
2024-02-07T5586: Improve systemd keepalived override fileViacheslav Hletenko
2024-02-07T5586: delete old systemd unit keepalived serviceViacheslav Hletenko
The custom systemd unit is not required as we generate 10-override which was implemented in https://github.com/vyos/vyos-1x/pull/2310/commits/5a6938a2e14373dfaa72211fe18deeb257d3ba12
2024-02-01Merge pull request #2920 from c-po/bfd-equuleus-T5967Daniil Baturin
bfd: T5967: add minimum-ttl option
2024-02-01bfd: T5967: add minimum-ttl optionChristian Breunig
* set protocols bfd peer <x.x.x.x> minimum-ttl <1-254> (partially cherry-picked from 1f07dcbddfcfdbb9079936ec479c5633934dd547)
2024-02-01GitHub: update PR request laballer to v5.0.0 tagChristian Breunig
(cherry picked from commit 32183aa0f0f9c51126d21693db0eafa256419b31)
2024-01-21Merge pull request #2868 from vyos/mergify/bp/equuleus/pr-2850Christian Breunig
ethernet: T4638: deleting parent interface does not delete underlying VIFs (backport #2850)
2024-01-21ethernet: T4638: deleting parent interface does not delete underlying VIFsChristian Breunig
(cherry picked from commit 7ba47f027f3a9441125c13a927eb23cee2de041b)
2024-01-13Merge pull request #2816 from c-po/equuleus-migration-T5924Christian Breunig
wireguard: T5924: harden migration script logic 22-to-23
2024-01-12GitHub: add pull request labalerChristian Breunig
2024-01-12wireguard: T5924: harden migration script logic 22-to-23Christian Breunig
The original commit 2c1c36135 ("wireguard: T5413: Blocked adding the peer with the router's public key") did not honor the fact that there might be no private-key CLI node defined for a WireGuard interface. If this is the case, private-key defaults to "default". This fact needs to be handled in the migration script.
2024-01-10Merge pull request #2779 from vyos/mergify/bp/equuleus/pr-1508Daniil Baturin
console: T4646: Fixed USB console issues (backport #1508)
2024-01-09console: T4646: Fixed USB console issueszsdc
* fixed the `systemctl restart` command that used a value from config instead converted to `ttyUSBX` * moved systemd units from `/etc/` to `/run/` (cherry picked from commit ad1236e8d72ff29e0e2215df175b6f032fba75eb)
2024-01-09Merge pull request #2776 from nicolas-fort/T1297Daniil Baturin
T1297: vrrp: backport VRRP GARP options to Equuleus
2024-01-09T1297: vrrp: backport VRRP GARP options to EquuleusNicolas Fort
2023-12-29Merge pull request #2706 from vyos/mergify/bp/equuleus/pr-2703Christian Breunig
ddclient: T5852: add missing priority (backport #2703)
2023-12-28ddclient: T5852: add missing priorityChristian Breunig
Running ddclient on a VLAN interface will fail during reboot as there is no discrete priority to tell that the dynamic DNS service needs to be started after the interfaces. (cherry picked from commit ef237a7555843226e9bf48e552ed5feb5df581f4)
2023-12-16Merge pull request #2572 from fett0/T5796Christian Breunig
T5796:backport-add/fixed OCSERV HTTP security headers
2023-12-15 T5796:add command http-security-headersfett0
2023-12-12Merge pull request #2619 from sever-sever/T5817Daniil Baturin
T5817: Fix for show openvpn server
2023-12-12T5817: Fix for show openvpn serverViacheslav Hletenko
In some cases we can get error: ``` Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 173, in <module> data = get_status(args.mode, intf) File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 130, in get_status client["tunnel"] = get_vpn_tunnel_address(client['remote'], interface) File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 66, in get_vpn_tunnel_address tunnel_ip = lst[0].split(',')[0] IndexError: list index out of range ```
2023-12-09Merge pull request #2540 from aapostoliuk/T5413-equuleusDaniil Baturin
wireguard: T5413: Blocked adding the peer with the router's public key
2023-12-04 T5796:add/fixed OCSERV HTTP security headersfett0
2023-12-04Merge pull request #2570 from dmbaturin/https-api-keys-fix1.3.5Daniil Baturin
https: T5772: Move API key check to http-api.py
2023-12-04https: T5772: return from verify if NoneJohn Estabrook
​ Signed-off-by: Daniil Baturin <daniil@baturin.org>
2023-12-04https: T5772: require that at least one valid API key is presentDaniil Baturin
2023-12-04Revert "https api: T5772: check if keys are configured"Daniil Baturin
This reverts commit 57ba2fa91573ad2ecd03f0c2eb89507dfc397f1e.
2023-12-02Merge pull request #2442 from srividya0208/T5714Daniil Baturin
T5714: op-cmd: Fix for "show log vpn ipsec/all"
2023-11-30Merge pull request #2553 from dmbaturin/T5772Daniil Baturin
https: T5772: remove the default API key
2023-11-30https: T5772: remove the default API keyDaniil Baturin
The new verification code prevents it from being used, but it's not a reason to keep it
2023-11-28Merge pull request #2536 from c-po/backport-pr-2527Christian Breunig
pppoe: T5630: make MRU default to MTU if unspecified (backport #2527)
2023-11-27Merge pull request #2548 from vyos/mergify/bp/equuleus/pr-2511Christian Breunig
T5763: fix imprecise check for remote file name (backport #2511)
2023-11-27T5763: fix imprecise check for remote file nameJohn Estabrook
(cherry picked from commit fe9b08665367b8e7d9b906a0760d44efc9b5cafb)
2023-11-24wireguard: T5413: Blocked adding the peer with the router's public keyaapostoliuk
Disabled adding the peer with the same public key as the router has. Backport from current https://github.com/vyos/vyos-1x/pull/2122
2023-11-23Merge pull request #2537 from c-po/tftp-no-vrf-smoketestDaniil Baturin
smoketest: tftp: T4012: disable VRF based tests due to false positives
2023-11-23Merge pull request #2531 from vyos/mergify/bp/equuleus/pr-2522Daniil Baturin
https api: T5772: check if keys are configured unless PAM auth is enabled for GraphQL (backport #2522)