summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-05-18op-mode: drop full path to iproute2 binaryChristian Poessinger
(cherry picked from commit 21d97ba0651fc20bded91e22e00a402d0044da3c)
2021-05-18revert: "util: T2467: add autosudo as an option to command"Christian Poessinger
Implementing a wrapper which will - based on the command - add a sudo prefix to the execution string seemed to be a nice idea but unfortunately it did not only not get momentum but also the codebase somethis added an implicit "sudo" call a second time. This resulted in a call: "sudo sudo systemctl" The entire functionality was removed again and if an op-mode script requires root priviledges it must be explicitly called with them - no black magic. (cherry picked from commit b76931e6d3a4bd0cdb74ca447a746ab6855fcf55)
2021-05-18ddns: T3254: fix incorrect update timeFileGo
This fixes a bug when show dynamic dns status returned (formatted) UNIX time 0. I have changed the code to use ddclient's mtime value in the cache file, which is updated on every successful sync with DDNS service as opposed to atime, which was previously used. (cherry picked from commit 89b127647cbf3fea3a439f43efa32a31aa03524e)
2021-05-18vmware: T3525: fix invocation of resume scriptChristian Poessinger
Commit dce67433 ("util: T2226: rewrite resume-vm to use run") changed the way in which the script executed system binaries in a way which could not be processes by the underlayin infrastructure (lists are not supported, only strings). (cherry picked from commit fa05e4267c17d93c4e9594a0ba32e66c7b2a1d61)
2021-05-18vmware: T1028: properly expose syslog identityChristian Poessinger
(cherry picked from commit 7de7a1b2d127df85d4224162116c1d4c984b022b)
2021-05-17ddclient: T3557: fix FileNotFoundError when querying status informationChristian Poessinger
If ddclient is not problery configured it will start up but no status file is generated. This commit checks if the status file exists before reading it. (cherry picked from commit 041cea6d7a13a804b4e656778048bcefd0a46cb8)
2021-05-15router-advert: T3550: fixed completion typoFileGo
(cherry picked from commit e36120d93ee1c8077b713c4bb9c10035f0a9957a)
2021-05-15smoketest: T3549: dhcpv6-server: adjust to new config syntaxChristian Poessinger
Commit b0520172 ("dhcpv6-server: T3549: fix incorrect syntax for global name-server definition") changed how the daemon configuration represents global DNS nameservers. Test updated. (cherry-picked from commit ae57c5dc783d8c87382e25e031e21d8c2be59d03)
2021-05-15dhcpv6-server: T3549: fix incorrect syntax for global name-server definitionChristian Poessinger
dhcp6.name-servers is a comma-delimited, multi-value list of name-servers that should only appear once in the dhcpdv6.conf file.
2021-05-15vyos.ifconfig: T3532: re-create Q-in-Q interface on protocol changeChristian Poessinger
It is not possible to change the VLAN encapsulation protocol "on-the-fly". For this "quirk" we need to actively delete and re-create the VIF-S interface. (cherry picked from commit cd504035015dca62149b57bc07d8e002bd8723b1)
2021-05-15smoketest: dhcp: T3544: verify locig preventing invalid daemon optionsChristian Poessinger
As we do not allow any invalid raw options passed into ISC dhcpd we should also verify this behavior with a smoketest. (cherry picked from commit 8ab55eb237370b2152b2c0027af5cf16a69675af)
2021-05-15dhcp-server: T3544: fix FileNotFoundError on first invokationChristian Poessinger
The problem of using the move() operation over render() is that render will silently create the directory tree in the background and move() does not. This means that on first boot when /run/dhcp-server does not exist, move will fail with a FileNotFoundError. Instead of using move() we render() the configuration two times, one for validating it via dhcpd -t and the other time to really apply it to the service. The performance impact should be little as the config should still be cached in the system RAM. (cherry picked from commit 1f68b69328c961e450ac70b12f7bf073d70355d7)
2021-05-15dhcp-server: T3544: test config in IPv4 mode onlyChristian Poessinger
(cherry picked from commit 37f3ead353625b53cfa8953196a9c32b42a10e7f)
2021-05-14ntp: T2809: Fix migration script if server not existsever-sever
(cherry picked from commit d96336a808e500934fc4fd9423345d0b965d35ac)
2021-05-14configd: T3426: add support for script arguments to vyos-configdJohn Estabrook
(cherry picked from commit b3d914edcb506bb25c3798683cda341b8acbb0ad)
2021-05-14configd: T3426: correct pass_through function for scripts with argsJohn Estabrook
(cherry picked from commit 5501e5f1de0201f4c977a8027b6e97caf1affa1b)
2021-05-14configd: T3426: check script name against include_set, not exclude_setJohn Estabrook
If the script name is mangled, for any reason (e.g. missing support for script arguments) checking against the exclude_set will yield a false positive; check against the include_set, even if this is a longer search. (cherry picked from commit 93c07ea1edff3f6f84285322b494a24b807ccc25)
2021-05-13dhcp-server: T3544: test newly rendered configuration before restarting daemonChristian Poessinger
The current DHCP server implementation comes with options (see below) which allow the user to pass in any arbitrary option(s) in a verbatim way which will manifest in dhcpd.conf. The options are: * set service dhcp-server global-parameters * set service dhcp-server shared-network-name foo shared-network-parameters * set service dhcp-server shared-network-name foo subnet 192.0.2.0/25 subnet-parameters * set service dhcp-server shared-network-name foo subnet 192.0.2.0/25 static-mapping ff static-mapping-parameters Having an invalid configuration will yield: vyos@vyos# commit [ service dhcp-server ] Configuration file errors encountered - check your options! [[service dhcp-server]] failed (cherry picked from commit 3c754695590b9d9e582c10e6d05c2b628e79262c)
2021-05-13bonding: T3543: add support to configure lacp-rate (slow or fast)Christian Poessinger
Option specifying the rate in which we'll ask our link partner to transmit LACPDU packets in 802.3ad mode. set interfaces bonding bond0 lacp-rate <slow|fast> slow: Request partner to transmit LACPDUs every 30 seconds (default) fast: Request partner to transmit LACPDUs every 1 second (cherry picked from commit 8e392a3dbc16f7b80a979f7b4e9c11408d700e6f)
2021-05-13smoketest: bonding: test minimum link assignmentChristian Poessinger
(cherry picked from commit ca75162b3bbace38fcad5c91ad07c4fedac8444c)
2021-05-12configd: T3302: check vyos-config-status to determine if in boot sessionJohn Estabrook
(cherry picked from commit eeb9687bb9aaf6050b0a8759767f08ab8faac442)
2021-05-10smoketest: policy: T3526: replace seq x for policy testsViacheslav Hletenko
2021-05-06l2tpv3: T3519: add vrf supportChristian Poessinger
(cherry picked from commit 59a82d4ba9790a61b5dc321544a7aa2a10e18322)
2021-05-06smoketest: T3517: Fix bfd test for equuleus FRR 7.5.1Viacheslav Hletenko
2021-05-06T3356: remote: Add support for custom source interfaceLulu Cathrinus Grimalkin
(cherry-picked from commit 60e3b3ef23a56edadab6abac00175433f99986c8)
2021-05-01dhcpv6-server: T3379: Add option global-parameters name-serversever-sever
(cherry picked from commit 117533482d29ce0bd1bc7f3a3f2536921c16565c)
2021-04-30Merge pull request #823 from sever-sever/T3333-eqChristian Poessinger
ipsec: T3333: Fix status for SA state op-mode
2021-04-28ipsec: T3333: Fix status for SA state op-modesever-sever
2021-04-27ecmp: T3502: fix check for "layer4-hashing" keyBrandon Stepler
(cherry picked from commit 44d4b6e663aa0df979b37299fbbc3b5b698c5379)
2021-04-27op-mode: T2946: only call 'stty size' if in terminalJohn Estabrook
(cherry picked from commit e1563f9d175026488a36d52a6ffcfb6745d56644)
2021-04-25lldp: T1898: add completion helper to list assigned IPs for management-addressChristian Poessinger
(cherry picked from commit b6301bfd6a6cb084671fd24970a4a06b10a89d90)
2021-04-25tunnel: T3468: add interfaces to completion helper for bridgeChristian Poessinger
(cherry-picked from commit efa744c63b388773a4ea76d0f690042ec1689159)
2021-04-25wireguard: T1802: add client name to configurationChristian Poessinger
(cherry picked from commit daf377aca3511e8ad74854828f3aaa1dd99f0a91)
2021-04-25wireguard: T1802: generate QR code for clients on CLIChristian Poessinger
generate wireguard mobile-config wg0 server wg.vyos.net address 1.2.2.2/24 WireGuard client configuration for interface: wg0 [Interface] PrivateKey = AEXrZ4b3xFVLg1lql3hy/93+d43q3+3vPdSMUGI6/Fo= Address = 1.2.2.2/24 [Peer] PublicKey = h1HkYlSuHdJN6Qv4Hz4bBzjGg5WUty+U1L7DJsZy1iE= Endpoint = wg.vyos.net:41751 AllowedIPs = 0.0.0.0/0, ::/0 The servers public key and port are automatically extracter from the running config. (cherry picked from commit 92d62740a1dd84d27ed3006cdc8d2560673f6bca)
2021-04-20bgp: remove references to new XML/Python implementation not yet available in ↵Christian Poessinger
equuleus
2021-04-20xml: T3488: when using regex one must use ^ and $ when checking string literalsChristian Poessinger
(cherry picked from commit 85d0ae7b434a3ae9f3bd50ad7fee1fcd23b26a26)
2021-04-20conntrack: T3290: remove references to removed GRE pluginsBrandon Stepler
(cherry picked from commit 91130ca7c386ecba291694ff08e521438d352e78)
2021-04-20interfaces: T3488: harden regex for supplied address stringChristian Poessinger
The previously used regex allowed an address value of "dhcpfoo" which is invalid and will raise an OSError. Harden the regex that it explicitly must be dhcp or dhcpv6. (cherry picked from commit dd4c60c1c3423f02457bc1dcc25e36d03d537a5f)
2021-04-18config: T3481: add switch to prevent mangling of tag node valuesJohn Estabrook
(cherry picked from commit e96932cbd99f508f9f5c24b207b5650aa8817e45)
2021-04-18xml: T3475: disable processing of syntaxVersion elementJohn Estabrook
(cherry picked from commit bafdc46e7af94b32aa3fed90c287ac170d764b7d)
2021-04-17Merge pull request #813 from erkin/equuleusChristian Poessinger
util: T3356: Fix password variables
2021-04-17util: T3356: Fix password variableserkin
2021-04-14dhclient: T3471: Fixed dhclient processes searchzsdc
Since in some cases a dhclient command may not end with an interface name, the way to find out a list of dhclients running for a current interface was replaced to catch PIDs regardless of the exact command syntax. (cherry picked from commit 13abffe43b2a5c41bb4ec4675c227f6cf1f868da)
2021-04-12interfaces: dhcp-client: T3454: add reject optionCharles Surett
Sometimes a modem might give a local IP before it retrieves a WAN IP. This can be an issue with failover routes, since the default route will get overridden. (cherry picked from commit e8535616aae2bf0c20aacee6a4d0761183bae6d9)
2021-04-05smoketest: l2tpv3: only remove modules if they are loadedChristian Poessinger
(cherry picked from commit 0ac696663b6885e659987efdbe83ae7d4a3f7779)
2021-04-05vrf: vlan: T3438: do not automatically delete upper interfaceChristian Poessinger
Removing a VLAN (VIF) interface from the CLI always deleted all interfaces the kernel listed as "upper" in the /sys/class/net folder. This had the drawback that when deleting a VIF, also the VRF interface was simply deleted - killing all VRF related services. (cherry picked from commit 6458f91735412fb2e6e7e37f7b3e6ca587a5a235)
2021-04-04T3457: output the "monitor log" command in a colorful wayChristian Poessinger
Add a new CLI command "monitor log colored" to run the log file monitoring through grc (https://github.com/garabik/grc). (cherry picked from commit 6330708f7ad50e56b16e1c7bc671eaddcd758bdb)
2021-04-03Jenkins: select build library from proper branch "equuleus"Christian Poessinger
2021-04-03Debian: T2108: add minisign dependencyChristian Poessinger
(cherry picked from commit 52323dcd620ef1b6d716787c9c4729b9ae9ee7e0)
2021-03-31xml: T3445: avoid false positive on element references; use path nameJohn Estabrook
(cherry picked from commit f22fa8e6454b1cd2539ddb7c354ac9eeeac725c5)