Age | Commit message (Collapse) | Author |
|
This is a fix for commit 665ae50729 ("vyos-hostsd: T4270: do not resolve local
router FQDN to 127.0.1.1") as it made calls to sudo super slow due to:
sudo: unable to resolve host vyos: System error
To avoid the initial issue we only add the hostname without domain name, thus
the FQDN is not resolved by powerdns.
|
|
configdep: T5839: remove trivially redundant config dependency calls
|
|
vyos.ethtool: T6070: fix EEE reading the incorrect status line
|
|
T5504: Keepalived VRRP ability to set more than one peer-address
|
|
banner: T6077: implement ASCII contest winner default logo
|
|
|
|
|
|
|
|
Implement VyOS ASCII art contest winners logo as the default for our MOTD
|
|
vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is required
|
|
vyos-hostsd: T4270: do not resolve local router FQDN to 127.0.1.1
|
|
container: T6074: do not allow deleting images which have a container running
|
|
|
|
required
|
|
Clients using VyOS as their DNS server and trying to resolve the FQDN of the
router will receive 127.0.1.1 as answer.
set service dns forwarding allow-from '172.16.0.0/12'
set service dns forwarding listen-address '172.31.0.254'
set service dns forwarding negative-ttl '60'
set system domain-name 'vyos.net'
set system host-name 'R1'
Will return:
$ host R1.vyos.net 172.31.0.254
Using domain server:
Name: 172.31.0.254
Address: 172.31.0.254#53
Aliases:
R1.vyos.net has address 127.0.1.1
When it should rather return the real IP address assigned via DNS.
|
|
The current VyOS container image manipulation "delete container image" command
allows force removal of container images - even if they still have a container
running.
Drop the --force option from the op-mode script.
vyos@vyos:~$ delete container image 2636705a815a
Error: image used by 6adb0175d47f.. image is in use by a container: consider
listing external containers and force-removing image
|
|
remove obsolete imports
|
|
EEE enabled status is on the 2nd line of ethtool output and not the 3rd. Subsequently, reading the 3rd line was causing an out-of-bounds access for the bnx2x driver as well.
|
|
dhcp-server: T6063: Add `ignore-client-id` to relax client identifier checks for leases
|
|
for leases
|
|
container: T6060: support removing all container images at once via op-mode
|
|
cpo@LR1.wue3:~$ show container image
REPOSITORY TAG IMAGE ID CREATED SIZE
docker.io/library/busybox latest 3f57d9401f8d 5 weeks ago 4.5 MB
docker.io/jacobalberty/unifi v7.5 f6df690d6c67 4 months ago 827 MB
docker.io/jacobalberty/unifi v7.4 7838b75ef7b9 7 months ago 786 MB
cpo@LR1.wue3:~$ delete container image
Possible completions:
3f57d9401f8d Delete container image
7838b75ef7b9
all
f6df690d6c67
cpo@LR1.wue3:~$ delete container image all
cpo@LR1.wue3:~$ show container image
REPOSITORY TAG IMAGE ID CREATED SIZE
|
|
container: T5909: move registry login to op-mode
|
|
It does not make sense to perform the "podman login" command when setting up
containers, as images are not automatically pulled in from the registry - due
to issues with the default route during startup.
The same issue manifests in "podman login" where we can not login to a registry
unless there is a default route present.
This commit changes the behavior that the container registry is part of the
configuration, but it is only referenced during "add container image" and thus
never during system boot.
|
|
T6054: WLB: fix rules parsing when using multiple ports in one rule
|
|
|
|
pki: T6055: Cleanup unnecessary sudo, preserve env when sudo is needed
|
|
|
|
|
|
conntrack: T5376: Fix priority for CT helpers
|
|
Ref: https://www.spinics.net/lists/netfilter/msg59549.html
|
|
vyos-event-handler.py: T6048: handling exception when _PID is not found
|
|
T6050: Fixed descriptions of 'extended-scripts' commands in accel-ppp
|
|
Removed word 'PPPoE' from descriptions in common template for all
accel-ppp services.
|
|
|
|
smoketest: T6043: proper cleanup after testcase
|
|
This extends commit dbe8c613b ("bridge: T6043: do not call vxlan dependency if
interface does not exist (yet)") with a proper cleanup of additional interfaces
created during the testrun.
|
|
bridge: T6043: do not call vxlan dependency if interface does not exist (yet)
|
|
op-mode: T5581: add "show ipv6 nht" command
|
|
This improves the implementation to support both IPv4 and IPv6
|
|
In order to keep the proper priority list during system startup and on initial
setup/commit for this feature the dependent VXLAN code should not be called,
if the interface in question does not exist (yet).
|
|
image-tools: T6041: fix logic of is_live_boot to allow for PXE boot
|
|
|
|
login: T5972: add possibility to disable individual local user accounts
|
|
T3722: Fixed L-Time in 'show vpn ike sa' command
|
|
Fixed L-Time in 'show vpn ike sa' command
|
|
* set system login user <name> disable
|
|
T6001: add option to disable next-hop-tracking resolve-via-default
|
|
context
* set vrf name <name> ip nht no-resolve-via-default
* set vrf name <name> ipv6 nht no-resolve-via-default
|
|
* set system ip nht no-resolve-via-default
* set system ipv6 nht no-resolve-via-default
|