summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-02-24T5781: use dynamic minisign key listKyleM
Updated image_installer.py to try and validate image with all minisign public keys in /usr/share/vyos/keys/ (cherry picked from commit dfbc854157fa4655a8f459b2447df64dc74119d1)
2024-02-23Merge pull request #3041 from vyos/mergify/bp/sagitta/pr-3040Christian Breunig
pki: T6055: Cleanup unnecessary sudo, preserve env when sudo is needed (backport #3040)
2024-02-23pki: T3642: Fix typo in PKI includessarthurdev
(cherry picked from commit e2adfdef9e79aa7550e82a12d661718a479aba90)
2024-02-23pki: T6055: Cleanup unnecessary sudo, preserve env when sudo is neededsarthurdev
(cherry picked from commit 1f22ac1bb0a32d3e7ef06713f42e7f6f1c3f3775)
2024-02-22Merge pull request #3039 from dmbaturin/T3420-no-upnp-for-now1.4.0-epa1Christian Breunig
upnp: T3420: disable the UPnP CLI in Sagitta until bugs are fixed
2024-02-22upnp: T3420: disable the UPnP CLI in Sagitta until bugs are fixedDaniil Baturin
2024-02-22Merge pull request #3038 from vyos/mergify/bp/sagitta/pr-3037Christian Breunig
conntrack: T5376: Fix priority for CT helpers (backport #3037)
2024-02-22conntrack: T5376: Fix priority for CT helperssarthurdev
Ref: https://www.spinics.net/lists/netfilter/msg59549.html (cherry picked from commit 538aeeccc46d31ab54647b67c8a2ba442d61cc46)
2024-02-21Merge pull request #3036 from vyos/mergify/bp/sagitta/pr-3032Christian Breunig
vyos-event-handler.py: T6048: handling exception when _PID is not found (backport #3032)
2024-02-20event-handler: T6048: handling exception when _PID is not foundgavol
(cherry picked from commit b678009b484eb6d20fceb5db00b0dc62344296a2)
2024-02-20Merge pull request #3034 from vyos/mergify/bp/sagitta/pr-3033Christian Breunig
T6050: Fixed descriptions of 'extended-scripts' commands in accel-ppp (backport #3033)
2024-02-20T6050: Fixed descriptions of 'extended-scripts' commands in accel-pppaapostoliuk
Removed word 'PPPoE' from descriptions in common template for all accel-ppp services. (cherry picked from commit 8e1793834bf453ff252f38ae5271f7f9bcea9bf9)
2024-02-18Merge pull request #3031 from vyos/mergify/bp/sagitta/pr-3030Christian Breunig
smoketest: T6043: proper cleanup after testcase (backport #3030)
2024-02-18smoketest: T6043: proper cleanup after testcaseChristian Breunig
This extends commit dbe8c613b ("bridge: T6043: do not call vxlan dependency if interface does not exist (yet)") with a proper cleanup of additional interfaces created during the testrun. (cherry picked from commit 4cb80868ab3ab35453d8609392ca470a02764fac)
2024-02-18Merge pull request #3029 from vyos/mergify/bp/sagitta/pr-3026Christian Breunig
bridge: T6043: do not call vxlan dependency if interface does not exist (yet) (backport #3026)
2024-02-18bridge: T6043: do not call vxlan dependency if interface does not exist (yet)Christian Breunig
In order to keep the proper priority list during system startup and on initial setup/commit for this feature the dependent VXLAN code should not be called, if the interface in question does not exist (yet). (cherry picked from commit dbe8c613bb80bc8b714398825054ade5942ea75b)
2024-02-17Merge pull request #3023 from vyos/mergify/bp/sagitta/pr-3019John Estabrook
login: T5972: add possibility to disable individual local user accounts (backport #3019)
2024-02-17Merge pull request #3028 from vyos/mergify/bp/sagitta/pr-3027Daniil Baturin
op-mode: T5581: add "show ipv6 nht" command (backport #3027)
2024-02-17Merge pull request #3025 from vyos/mergify/bp/sagitta/pr-3024John Estabrook
image-tools: T6041: fix logic of is_live_boot to allow for PXE boot (backport #3024)
2024-02-17op-mode: T5581: add "show ipv6 nht" commandChristian Breunig
This improves the implementation to support both IPv4 and IPv6 (cherry picked from commit e144e55d6360a92279167198928cbe24efd97f08)
2024-02-17image-tools: T6041: fix logic of is_live_boot to allow for PXE bootJohn Estabrook
(cherry picked from commit 5949ff72a9f953da9d06d1ad75add0e6023d0dc4)
2024-02-17Merge pull request #3022 from vyos/mergify/bp/sagitta/pr-3021Viacheslav Hletenko
T3722: Fixed L-Time in 'show vpn ike sa' command (backport #3021)
2024-02-17login: T5972: add possibility to disable individual local user accountsChristian Breunig
* set system login user <name> disable (cherry picked from commit 6e0b146ed3b90da577c3ecba38836883fd435e7a)
2024-02-17T3722: Fixed L-Time in 'show vpn ike sa' commandaapostoliuk
Fixed L-Time in 'show vpn ike sa' command (cherry picked from commit bb6e6fc2119584df6ec571e7e9335dc509d5faeb)
2024-02-16Merge pull request #3017 from vyos/mergify/bp/sagitta/pr-3016Christian Breunig
T6001: add option to disable next-hop-tracking resolve-via-default (backport #3016)
2024-02-16T6001: add option to disable next-hop-tracking resolve-via-default in VRF ↵Christian Breunig
context * set vrf name <name> ip nht no-resolve-via-default * set vrf name <name> ipv6 nht no-resolve-via-default (cherry picked from commit 0fafc4bcdb9efc03796ddab0832471b11ba1bbe0)
2024-02-16T6001: add option to disable next-hop-tracking resolve-via-defaultChristian Breunig
* set system ip nht no-resolve-via-default * set system ipv6 nht no-resolve-via-default (cherry picked from commit ece0e768f36e52f8964823d891264d7c187204ec)
2024-02-16T5150: rename smoketest config egb-igp-route-maps -> egp-igp-route-mapsChristian Breunig
EDB should be EGP for exterior gateway protocol (cherry picked from commit 56654191613113764415d7eddadcbd8c97e126de)
2024-02-15Merge pull request #3014 from vyos/mergify/bp/sagitta/pr-3011Daniil Baturin
rpki: T6034: extend config migration testcase (backport #3011)
2024-02-15rpki: T6034: extend config migration testcaseChristian Breunig
(cherry picked from commit 354603398b693af06695d5d1a7602f17079f8350)
2024-02-15Merge pull request #3013 from vyos/mergify/bp/sagitta/pr-3004Christian Breunig
T6029: Rewritten Accel-PPP services to an identical feature set (backport #3004)
2024-02-15T6029: Rewritten Accel-PPP services to an identical feature setaapostoliuk
Removed dhcp-interface option (l2tp) Added wins-server (sstp) Added description (ipoe, pppoe, sstp, pptp) Added exteded-script (l2tp, sstp, pptp) Added shaper (ipoe, pptp, sstp, l2tp) Added limits (ipoe, pptp, sstp, l2tp) Added snmp ( ipoe, pptp,sstp, l2tp) Refactoring and reformated code. (cherry picked from commit ac6a16f6c5ad7700789759e1ec093236c2e182a2)
2024-02-14Merge pull request #3009 from vyos/mergify/bp/sagitta/pr-2988Christian Breunig
rpki: T6034: move file based SSH keys for authentication to PKI subsystem (backport #2988)
2024-02-13Merge pull request #3008 from vyos/mergify/bp/sagitta/pr-3005Viacheslav Hletenko
T6019: Fix smoketest test_system_conntrack custom timeout (backport #3005)
2024-02-13rpki: T6034: Add missing sections to configtestsarthurdev
(cherry picked from commit 3bfbbef22954488541abd3cad262b1e196d4c240)
2024-02-13rpki: T6024: add migration scripts from file based keys to PKI subsystemChristian Breunig
(cherry picked from commit 4d76e9ef3e7773ed96c037108021c292675b101c)
2024-02-13rpki: T6034: remove OpenSSH keys from /run/frr when unloadedChristian Breunig
(cherry picked from commit 78820752b936e77d30f995498ff36487c5c6af87)
2024-02-13pki: T6034: add dependencies to trigger rpki re-run on openssh key updateChristian Breunig
(cherry picked from commit 0f8bf6bd0fb29cfd638e9920674e7ad1d1d25350)
2024-02-13rpki: T6034: move SSH authentication keys to PKI subsystemChristian Breunig
(cherry picked from commit ac2d7dfac6073d0f232191ec494f78a8d12889e4)
2024-02-13pki: T6034: add OpenSSH key supportChristian Breunig
set pki openssh rpki private key ... set pki openssh rpki public key ... set pki openssh rpki public type 'ssh-rsa' (cherry picked from commit 8c78ef0879f22ffd4a5f7fdb175e9109b46e9d7b)
2024-02-13T6019: Fix smoketest test_system_conntrack custom timeoutViacheslav Hletenko
After updateing netfilter in the commit https://github.com/vyos/vyos-build/commit/b31f5fe934bcb37534d49acdb5f7756bf05422e8 The nftables format for conntrack timeouts is different. Fix this. (cherry picked from commit 24860e092426bf0bb09c2d164d66330be13bcd77)
2024-02-13Merge pull request #3003 from vyos/mergify/bp/sagitta/pr-3000Daniil Baturin
T5064: Firewall fix RegEx for for domain-group (backport #3000)
2024-02-13Merge pull request #3002 from vyos/mergify/bp/sagitta/pr-2999Daniil Baturin
T5928: Change firewall priority to 319 (backport #2999)
2024-02-13T5064: Firewall fix RegEx for for domain-groupViacheslav Hletenko
Improve RegEx for firewall domain-groups. This domain group looks good, but the current RegEx validation fils: ``` set firewall group domain-group a_aa ``` (cherry picked from commit b67049edab41e8714aec087b81d589fdb03a350b)
2024-02-13T5928: Smoketest change firewall flowtable test to use VLANViacheslav Hletenko
(cherry picked from commit ef87bd7320da2750de4d93c14314965704f3dfbd)
2024-02-13T5928: Change firewall priority to 319Viacheslav Hletenko
Change the firewall priority to 319, after interface ethernet configuration For example if we use VLANs and the vlan interface must be created before we can use it in the firewall/flowtable The current priority ``` 199 firewall 300 interfaces/dummy 300 interfaces/loopback 300 interfaces/virtual-ethernet 310 interfaces/bridge 310 interfaces/input 318 interfaces/ethernet ... ``` (cherry picked from commit f1dcd2d23f89251b0a96c61f8186002cb0d50d18)
2024-02-13Merge pull request #3001 from vyos/mergify/bp/sagitta/pr-2987Daniil Baturin
bgp: T6032: add EVPN MAC-VRF Site-of-Origin support (backport #2987)
2024-02-13bgp: T6032: add EVPN MAC-VRF Site-of-Origin supportChristian Breunig
In some EVPN deployments it is useful to associate a logical VTEP's Layer 2 domain (MAC-VRF) with a Site-of-Origin "site" identifier. This provides a BGP topology-independent means of marking and import-filtering EVPN routes originated from a particular L2 domain. One situation where this is valuable is when deploying EVPN using anycast VTEPs set protocols bgp address-family l2vpn-evpn mac-vrf soo (cherry picked from commit f308df322bd62024e29dd458642cb6bcac8a5ad6)
2024-02-12Merge pull request #2996 from vyos/mergify/bp/sagitta/pr-2993Christian Breunig
ipsec: T5981: Strip '@' from migrated peer PKI name (backport #2993)
2024-02-12ipsec: T5981: Strip '@' from migrated peer namesarthurdev
(cherry picked from commit 8238f8cdae3ae14bd8bd95158c218c45285df478)
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-22 22:15:59 +0000