summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2024-04-04dhcpv6-client: T2590: fix vyos-hostsd update for nameserver and search domainsChristian Breunig
After migrating from ISC DHCLIENT for IPv6 to wide-dhcp-client the logic which was present to update /etc/resolv.conf with the DHCP specified nameservers and also the search domain list was no longer present. This commit adds a per interface rendered script to inform vyos-hostsd about the received IPv6 nameservers and search domains. (cherry picked from commit ece425f0191762638b7c967097accd8739e9103d)
2024-04-01Merge pull request #3167 from aapostoliuk/T6150-equuleusDaniil Baturin
T6150: Fixed setting a static IP address by Radius in IPoE
2024-04-01Merge pull request #3228 from vyos/mergify/bp/equuleus/pr-3223Daniil Baturin
system: T6193: invalid warning "is not a DHCP interface but uses DHCP name-server option" (backport #3223)
2024-04-01system: T6193: invalid warning "is not a DHCP interface but uses DHCP ↵Christian Breunig
name-server option" This fixes an invalid warning when using a DHCP VLAN interface to retrieve the system nameserver to be used. VLAN CLI config is not properly expanded leading to a false warning: [ system name-server eth1.10 ] WARNING: "eth1.10" is not a DHCP interface but uses DHCP name-server option! (cherry picked from commit 61e70c5500ad5b0a9d25bdee28d982644bad6461)
2024-03-26T6150: Fixed setting a static IP address by Radius in IPoEaapostoliuk
Fixed setting a static IP address by Radius in IPoE Allowing using named pools by default Allowed adding 'gateway-address' without named pool.
2024-03-14Merge pull request #3121 from natali-rs1985/T2998-equuleusDaniil Baturin
snmp: T2998: SNMP v3 oid "exclude" option fix
2024-03-14Merge pull request #3111 from nicolas-fort/T6110Daniil Baturin
T6110: dhcp: add error check when fail-over is enabled on a subnet, but range is not defined.
2024-03-14snmp: T2998: updated snmp.pyNataliia Solomko
2024-03-14Merge pull request #3130 from natali-rs1985/T5504-equuleusDaniil Baturin
vrrp: T5504: Keepalived VRRP ability to set more than one peer-address
2024-03-13vrrp: T5504: Keepalived VRRP ability to set more than one peer-addressNataliia Solomko
2024-03-12T6110: dhcp: add error check when fail-over is enabled on a subnet, but ↵Nicolas Fort
range is not defined.
2024-03-11snmp: T2998: SNMP v3 oid "exclude" option fixNataliia Solomko
2024-03-07Merge pull request #3104 from natali-rs1985/T6057-equuleusDaniil Baturin
conntrack-sync: T6057: Add ability to disable syslog for conntrackd
2024-03-07conntrack-sync: T6057: Add ability to disable syslog for conntrackdNataliia Solomko
2024-02-16Merge pull request #3018 from aapostoliuk/T5418-equuleusDaniil Baturin
T5418: PPPoE allowed creating subnet started from any IP
2024-02-16T5418: PPPoE allowed creating subnet started from any IPaapostoliuk
Added the possibility of creating subnet in PPPoE client's IP pools started from any IP.
2024-02-14Merge pull request #3010 from c-po/t3992-equuleusChristian Breunig
configverify: T3992: fix KeyError in verify_address()
2024-02-14Merge pull request #3006 from vyos/mergify/bp/equuleus/pr-2983Daniil Baturin
rpki: T6004: add missing startup priority (backport #2983)
2024-02-13configverify: T3992: fix KeyError in verify_address()Christian Breunig
Reproducible by: set interfaces bridge br0 member interface eth1.10 set interfaces ethernet eth1 vif 10 address 100.64.0.1/24 File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 314, in verify_vlan_config verify_address(vlan) File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 206, in verify_address interface = config['ifname'] KeyError: 'ifname'
2024-02-13Merge pull request #3007 from c-po/rpki-fixesChristian Breunig
utils: T5239: add low-level read from config.boot (RPKI fixes)
2024-02-13utils: T5239: add low-level read from config.bootChristian Breunig
2024-02-13rpki: T6004: add missing startup priorityChristian Breunig
(cherry picked from commit 4c2acb970c62478cf1139fcf66b0de341d46f7fc)
2024-02-10Merge pull request #2981 from c-po/equuleusDaniil Baturin
xml: T302: replace references to Quagga with FRRouting
2024-02-10xml: T302: replace references to Quagga with FRRoutingChristian Breunig
2024-02-07Merge pull request #2949 from sever-sever/T55861.3.6Daniil Baturin
T5586: delete old systemd unit keepalived service
2024-02-07T5586: Improve systemd keepalived override fileViacheslav Hletenko
2024-02-07T5586: delete old systemd unit keepalived serviceViacheslav Hletenko
The custom systemd unit is not required as we generate 10-override which was implemented in https://github.com/vyos/vyos-1x/pull/2310/commits/5a6938a2e14373dfaa72211fe18deeb257d3ba12
2024-02-01Merge pull request #2920 from c-po/bfd-equuleus-T5967Daniil Baturin
bfd: T5967: add minimum-ttl option
2024-02-01bfd: T5967: add minimum-ttl optionChristian Breunig
* set protocols bfd peer <x.x.x.x> minimum-ttl <1-254> (partially cherry-picked from 1f07dcbddfcfdbb9079936ec479c5633934dd547)
2024-02-01GitHub: update PR request laballer to v5.0.0 tagChristian Breunig
(cherry picked from commit 32183aa0f0f9c51126d21693db0eafa256419b31)
2024-01-21Merge pull request #2868 from vyos/mergify/bp/equuleus/pr-2850Christian Breunig
ethernet: T4638: deleting parent interface does not delete underlying VIFs (backport #2850)
2024-01-21ethernet: T4638: deleting parent interface does not delete underlying VIFsChristian Breunig
(cherry picked from commit 7ba47f027f3a9441125c13a927eb23cee2de041b)
2024-01-13Merge pull request #2816 from c-po/equuleus-migration-T5924Christian Breunig
wireguard: T5924: harden migration script logic 22-to-23
2024-01-12GitHub: add pull request labalerChristian Breunig
2024-01-12wireguard: T5924: harden migration script logic 22-to-23Christian Breunig
The original commit 2c1c36135 ("wireguard: T5413: Blocked adding the peer with the router's public key") did not honor the fact that there might be no private-key CLI node defined for a WireGuard interface. If this is the case, private-key defaults to "default". This fact needs to be handled in the migration script.
2024-01-10Merge pull request #2779 from vyos/mergify/bp/equuleus/pr-1508Daniil Baturin
console: T4646: Fixed USB console issues (backport #1508)
2024-01-09console: T4646: Fixed USB console issueszsdc
* fixed the `systemctl restart` command that used a value from config instead converted to `ttyUSBX` * moved systemd units from `/etc/` to `/run/` (cherry picked from commit ad1236e8d72ff29e0e2215df175b6f032fba75eb)
2024-01-09Merge pull request #2776 from nicolas-fort/T1297Daniil Baturin
T1297: vrrp: backport VRRP GARP options to Equuleus
2024-01-09T1297: vrrp: backport VRRP GARP options to EquuleusNicolas Fort
2023-12-29Merge pull request #2706 from vyos/mergify/bp/equuleus/pr-2703Christian Breunig
ddclient: T5852: add missing priority (backport #2703)
2023-12-28ddclient: T5852: add missing priorityChristian Breunig
Running ddclient on a VLAN interface will fail during reboot as there is no discrete priority to tell that the dynamic DNS service needs to be started after the interfaces. (cherry picked from commit ef237a7555843226e9bf48e552ed5feb5df581f4)
2023-12-16Merge pull request #2572 from fett0/T5796Christian Breunig
T5796:backport-add/fixed OCSERV HTTP security headers
2023-12-15 T5796:add command http-security-headersfett0
2023-12-12Merge pull request #2619 from sever-sever/T5817Daniil Baturin
T5817: Fix for show openvpn server
2023-12-12T5817: Fix for show openvpn serverViacheslav Hletenko
In some cases we can get error: ``` Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 173, in <module> data = get_status(args.mode, intf) File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 130, in get_status client["tunnel"] = get_vpn_tunnel_address(client['remote'], interface) File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 66, in get_vpn_tunnel_address tunnel_ip = lst[0].split(',')[0] IndexError: list index out of range ```
2023-12-09Merge pull request #2540 from aapostoliuk/T5413-equuleusDaniil Baturin
wireguard: T5413: Blocked adding the peer with the router's public key
2023-12-04 T5796:add/fixed OCSERV HTTP security headersfett0
2023-12-04Merge pull request #2570 from dmbaturin/https-api-keys-fix1.3.5Daniil Baturin
https: T5772: Move API key check to http-api.py
2023-12-04https: T5772: return from verify if NoneJohn Estabrook
​ Signed-off-by: Daniil Baturin <daniil@baturin.org>
2023-12-04https: T5772: require that at least one valid API key is presentDaniil Baturin
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-26 05:45:59 +0000