Age | Commit message (Collapse) | Author |
|
range is not defined.
|
|
conntrack-sync: T6057: Add ability to disable syslog for conntrackd
|
|
|
|
T5418: PPPoE allowed creating subnet started from any IP
|
|
Added the possibility of creating subnet in PPPoE
client's IP pools started from any IP.
|
|
configverify: T3992: fix KeyError in verify_address()
|
|
rpki: T6004: add missing startup priority (backport #2983)
|
|
Reproducible by:
set interfaces bridge br0 member interface eth1.10
set interfaces ethernet eth1 vif 10 address 100.64.0.1/24
File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 314, in verify_vlan_config
verify_address(vlan)
File "/usr/lib/python3/dist-packages/vyos/configverify.py", line 206, in verify_address
interface = config['ifname']
KeyError: 'ifname'
|
|
utils: T5239: add low-level read from config.boot (RPKI fixes)
|
|
|
|
(cherry picked from commit 4c2acb970c62478cf1139fcf66b0de341d46f7fc)
|
|
xml: T302: replace references to Quagga with FRRouting
|
|
|
|
T5586: delete old systemd unit keepalived service
|
|
|
|
The custom systemd unit is not required as we generate 10-override
which was implemented in https://github.com/vyos/vyos-1x/pull/2310/commits/5a6938a2e14373dfaa72211fe18deeb257d3ba12
|
|
bfd: T5967: add minimum-ttl option
|
|
* set protocols bfd peer <x.x.x.x> minimum-ttl <1-254>
(partially cherry-picked from 1f07dcbddfcfdbb9079936ec479c5633934dd547)
|
|
(cherry picked from commit 32183aa0f0f9c51126d21693db0eafa256419b31)
|
|
ethernet: T4638: deleting parent interface does not delete underlying VIFs (backport #2850)
|
|
(cherry picked from commit 7ba47f027f3a9441125c13a927eb23cee2de041b)
|
|
wireguard: T5924: harden migration script logic 22-to-23
|
|
|
|
The original commit 2c1c36135 ("wireguard: T5413: Blocked adding the peer with
the router's public key") did not honor the fact that there might be no
private-key CLI node defined for a WireGuard interface. If this is the case,
private-key defaults to "default". This fact needs to be handled in the
migration script.
|
|
console: T4646: Fixed USB console issues (backport #1508)
|
|
* fixed the `systemctl restart` command that used a value from config instead
converted to `ttyUSBX`
* moved systemd units from `/etc/` to `/run/`
(cherry picked from commit ad1236e8d72ff29e0e2215df175b6f032fba75eb)
|
|
T1297: vrrp: backport VRRP GARP options to Equuleus
|
|
|
|
ddclient: T5852: add missing priority (backport #2703)
|
|
Running ddclient on a VLAN interface will fail during reboot as there is no
discrete priority to tell that the dynamic DNS service needs to be started
after the interfaces.
(cherry picked from commit ef237a7555843226e9bf48e552ed5feb5df581f4)
|
|
T5796:backport-add/fixed OCSERV HTTP security headers
|
|
|
|
T5817: Fix for show openvpn server
|
|
In some cases we can get error:
```
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 173, in <module>
data = get_status(args.mode, intf)
File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 130, in get_status
client["tunnel"] = get_vpn_tunnel_address(client['remote'], interface)
File "/usr/libexec/vyos/op_mode/show_openvpn.py", line 66, in get_vpn_tunnel_address
tunnel_ip = lst[0].split(',')[0]
IndexError: list index out of range
```
|
|
wireguard: T5413: Blocked adding the peer with the router's public key
|
|
|
|
https: T5772: Move API key check to http-api.py
|
|
Signed-off-by: Daniil Baturin <daniil@baturin.org>
|
|
|
|
This reverts commit 57ba2fa91573ad2ecd03f0c2eb89507dfc397f1e.
|
|
T5714: op-cmd: Fix for "show log vpn ipsec/all"
|
|
https: T5772: remove the default API key
|
|
The new verification code prevents it from being used,
but it's not a reason to keep it
|
|
pppoe: T5630: make MRU default to MTU if unspecified (backport #2527)
|
|
T5763: fix imprecise check for remote file name (backport #2511)
|
|
(cherry picked from commit fe9b08665367b8e7d9b906a0760d44efc9b5cafb)
|
|
Disabled adding the peer with the same public key as the router has.
Backport from current
https://github.com/vyos/vyos-1x/pull/2122
|
|
smoketest: tftp: T4012: disable VRF based tests due to false positives
|
|
https api: T5772: check if keys are configured unless PAM auth is enabled for GraphQL (backport #2522)
|
|
TFTP VRF support is working on a live system but the smoketests tend to fail.
This commit removes the VRF based smoketests for TFTP server, to make
the equuleus Jenkins builds work again.
|