Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-09-08 | config-mgmt: T5353: after updated save-config, one can include init rev | John Estabrook | |
The legacy config-mgmt/save-config tools had an abiding bug that would raise an error if comparing/reading the init archive; this is no longer an issue. (cherry picked from commit 52e4b4431ef440f0cffb570ca61c428c78699ee6) | |||
2023-09-08 | config-mgmt: T5353: correct update check during boot | John Estabrook | |
(cherry picked from commit 730e744931e4ccc1f214d3e5bff0e6a2e589fd50) | |||
2023-09-08 | config-mgmt: T5353: only add log entry if archiving | John Estabrook | |
(cherry picked from commit 73e317bee57c03b719019daabd578842d912b761) | |||
2023-09-08 | T5489: Add sysctl TCP congestion control by default to BBR | Viacheslav Hletenko | |
Add by default sysctl TCP congestion control to BBR. Default value `cubic` is not optimal. net.core.default_qdisc=fq net.ipv4.tcp_congestion_control=bbr (cherry picked from commit b99ed37dd1cff3310437ff8ccf1a27cd20714c41) | |||
2023-09-08 | Merge pull request #2207 from jestabro/T5551-sagitta | Christian Breunig | |
save-config: T5551: check if None before write, as is the case at boot | |||
2023-09-07 | Merge pull request #2218 from sarthurdev/T5555_sagitta | Christian Breunig | |
system: T5555: Fix time-zone migrator changing valid time-zones to UTC | |||
2023-09-07 | system: T5555: Fix time-zone migrator changing valid time-zones to UTC | sarthurdev | |
2023-09-06 | T5533: Fix for vrrp dict key if virtual-server is used | Viacheslav Hletenko | |
When using `virtual-server` alongside Keepalived, there can be situations where the `vrrp` key is completely unused. (cherry picked from commit 5f2926cf04e8a569bb25cd4121179d12b9e04c6c) | |||
2023-09-06 | T5480: Ability to disable SNMP for keepalived service VRRP | Viacheslav Hletenko | |
By default we enable `--snmp` for keepalived unit service Add ability to disable it set high-availability vrrp disable-snmp (cherry picked from commit 5ae730a52de2f284e45cd433bb0cf66c8508f2f7) | |||
2023-09-05 | Merge pull request #2210 from sever-sever/T5548-sag | Viacheslav Hletenko | |
T5548: Fix load-balancing reverse-proxy timeouts | |||
2023-09-05 | Merge pull request #2209 from sever-sever/T2958-sag | Viacheslav Hletenko | |
T2958: Refactor DHCP-server systemd unit and lease | |||
2023-09-05 | T5548: Fix load-balancing reverse-proxy timeouts | Viacheslav Hletenko | |
By default haproxy uses timeouts in millisecond but we set timeouts in seconds from CLI Fix template to use 'seconds' units (cherry picked from commit 257019520c49c20824b7e5cad01d2d29ef5f62e6) | |||
2023-09-05 | T2958: Refactor DHCP-server systemd unit and lease | Viacheslav Hletenko | |
Render isc-dhcp-server systemd unit from configuration | |||
2023-09-05 | save-config: T5551: check if None before write, as is the case at boot | John Estabrook | |
(cherry picked from commit 3fe5482a29042c92298d3e69d90c0c38404d2fcc) | |||
2023-09-04 | Merge pull request #2192 from sever-sever/T5533vyos/1.5dev0 | zdc | |
T5533: Fix VRRP IPv6 group enters in FAULT state | |||
2023-09-04 | T5533: Fix VRRP IPv6 group enters in FAULT state | Viacheslav Hletenko | |
Checks if an IPv6 address on a specific network interface is in the tentative state. IPv6 tentative addresses are not fully configured and are undergoing Duplicate Address Detection (DAD) to ensure they are unique on the network. inet6 2001:db8::3/125 scope global tentative It tentative state the group enters in FAULT state. Fix it | |||
2023-09-04 | Merge pull request #2197 from anthr76/cap-sys-module | Christian Breunig | |
feat(T5544): Allow CAP_SYS_MODULE to be set on containers | |||
2023-09-03 | fix: sys-module auto-tab completion | Anthony Rabbito | |
Signed-off-by: Anthony Rabbito <hello@anthonyrabbito.com> | |||
2023-09-03 | feat(T5544): Allow CAP_SYS_MODULE to be set on containers | Anthony Rabbito | |
Signed-off-by: Anthony Rabbito <hello@anthonyrabbito.com> | |||
2023-09-03 | T5543: IGMP: fix source address handling in static joins | Yuxiang Zhu | |
The following command expects to join source-specific multicast group 239.1.2.3 on interface eth0, where the source address is 192.0.2.1. set protocols igmp interface eth0 join 239.1.2.3 source 192.0.2.1 This command should generate FRR config: interface eth0 ip igmp ip igmp join 239.1.2.3 192.0.2.1 exit However, there is a bug in the Jinja template where `if ifaces[iface].gr_join[group]` is mostly evaluated as `false` because `iface` is a loop variable from another loop. | |||
2023-09-03 | ipoe: T5542: fix Jinja2 template and add missing dhcp relay config | Niklas Polte | |
2023-09-03 | wireless: T5540: fix smoketests after adjusting VHT channel width | Christian Breunig | |
Commit 6896aabb6 ("wireless: T5540: fix VHT capability settings for 802.11ac" changed how the VHT channel-sidth is configured in hostapd - but smoketests did not get adjusted. | |||
2023-09-03 | wireless: T5540: use elif in Jinja2 template for VHT channel width | Christian Breunig | |
2023-09-02 | wireless: T5540: fix VHT capability settings for 802.11ac | alainlamar | |
2023-09-01 | container: T4353: capitalize ascii -> ASCII | Christian Breunig | |
2023-09-01 | Merge pull request #2193 from sever-sever/T5536 | Christian Breunig | |
T5536: Fix show dhcp client leases | |||
2023-09-01 | T2546: re-add "monitor command" op-mode command with a new "diff" option as well | Christian Breunig | |
2023-09-01 | T5536: Fix show dhcp client leases | Viacheslav Hletenko | |
Fix helpers was moved to vyos.utils package Fix empty new address from the lease file causes OSError: illegal IP address string passed to inet_pton | |||
2023-08-31 | Merge pull request #2189 from sever-sever/T5531 | Christian Breunig | |
T5531: Containers add label option | |||
2023-08-31 | Merge pull request #2190 from sarthurdev/T4782 | Christian Breunig | |
eapol: T4782: Support multiple CA chains | |||
2023-08-31 | T5531: Containers add label option | Viacheslav Hletenko | |
Ability to set labels for container set container name c1 allow-host-networks set container name c1 image 'busybox' set container name c1 label mypods value 'My label for containers' | |||
2023-08-31 | eapol: T4782: Support multiple CA chains | sarthurdev | |
2023-08-30 | Merge pull request #2186 from nicolas-fort/T5496 | Christian Breunig | |
T5496: firewall: fix op-mode command show firewall | |||
2023-08-29 | T5496: firewall op-mode: add fix for source and destination when not ↵ | Nicolas Fort | |
specified (correct ::/0 for ipv6). Also, add columns for inbound and outbound interfaces | |||
2023-08-29 | T5496: firewall op-mode: add fix for firewall statics. Include groups ↵ | Nicolas Fort | |
correct reference in source/destination column | |||
2023-08-29 | Debian: T5521: remove unused tacacs UNIX group | Christian Breunig | |
2023-08-29 | T5496: firewall op-mode: fix show command for group member and references | Nicolas Fort | |
2023-08-29 | Debian: T5521: use bash over dash for postinstall script | Christian Breunig | |
2023-08-28 | Debian: T5521: use --no-create-home for TACACS users | Christian Breunig | |
2023-08-28 | Debian: T5521: place AAA users in users group (besides aaa group) | Christian Breunig | |
2023-08-28 | Debian: T5521: both RADIUS and TACACS users belong to aaa group, add group first | Christian Breunig | |
2023-08-28 | Merge pull request #2180 from vfreex/fix-call-hangs | Christian Breunig | |
T5519: Fix `vyos.utils.process.call` hangs | |||
2023-08-28 | T5519: Fix `vyos.utils.process.call` hangs | Yuxiang Zhu | |
See https://vyos.dev/T5519 for more information. | |||
2023-08-27 | Merge pull request #2176 from sarthurdev/T5080 | Christian Breunig | |
firewall: T5080: Disable conntrack unless required by rules | |||
2023-08-27 | Merge pull request #2178 from sarthurdev/labels | Christian Breunig | |
github: Labeler needs to run on `pull_request_target` | |||
2023-08-27 | github: Labeler needs to run on `pull_request_target` | sarthurdev | |
Ref: https://github.com/actions/labeler#permissions | |||
2023-08-27 | Merge pull request #2175 from sarthurdev/labels | Christian Breunig | |
github: Set permissions for label workflow | |||
2023-08-27 | github: Set permissions for label workflow | sarthurdev | |
2023-08-27 | Merge pull request #2174 from sarthurdev/T5018_fix | Christian Breunig | |
qos: T5018: Fix dependents only being set for QoS interfaces | |||
2023-08-27 | qos: T5018: Fix dependents only being set for QoS interfaces | sarthurdev | |