Age | Commit message (Collapse) | Author |
|
isis: T4336: add support for MD5 authentication password on a circuit (equuleus)
|
|
T4341 SSH and system login fixes + smoketests
|
|
T4319: bugfixes for disabled IPv6 (equuleus)
|
|
(cherry picked from commit 16a88f6b86e4ab920178701f6b3c02e893f337e8)
|
|
(cherry picked from commit a6c936997611de85dc73152297679d0b53095713)
|
|
T4337: isis: IETF SPF delay algorithm cannot be configured - results in vyos.frr.CommitError (equuleus)
|
|
dns: forwarding: T3804: bugfix DHCP name-servers used for recursion
|
|
Commit 2ecf7a9f9c ('name-server: T3804: merge "system name-servers-dhcp" into
"system name-server"') missed out an old dictionary key "system_name_server_dhcp"
and thus system nameservers configured via DHCP did not get used for the DNS
forwar recursor.
(cherry picked from commit 806ff50bf1a970d731c2227f9d2cd2342b8a1b4e)
|
|
(cherry picked from commit 796178f69ce09e28ab9f20c7b5e1ce97ef00a1ff)
|
|
(cherry picked from commit 6a04ff2840dfcfcad7a1cb93baf210370fa8871e)
|
|
(cherry picked from commit efa753bc661d04967237e7ec3d72d3757230aaf9)
|
|
(cherry picked from commit 4bb0adf535e12dc962a0ebea0f5a96f612a76a5d)
|
|
In order to test for proper system authentication and security setup a new
testcase is added which performs an SSH login and command execution with a
predefined user. The result (output of uname -a) must match the output if the
command is run natively.
We also try to login as an invalid user - this is not allowed to work.
(cherry picked from commit e66c45ce7a664ecb26d21a215975777bef0fcd71)
|
|
GitHub: enable PR conflict workflow - backport from current
|
|
|
|
|
|
To reproduce:
set protocols isis interface eth1
set protocols isis net '49.0001.1921.6800.1002.00'
Now enable SPF:
set protocols isis spf-delay-ietf holddown '20'
set protocols isis spf-delay-ietf init-delay '31'
set protocols isis spf-delay-ietf long-delay '30'
set protocols isis spf-delay-ietf short-delay '32'
set protocols isis spf-delay-ietf time-to-learn '44'
This will only render the FRR config line: spf-delay-ietf init-delay 31 which
is incomplete:
frr-reload output: 2 2022-04-03 12:35:24,764 ERROR: vtysh failed to process new configuration: vtysh (mark file) exited with status 4:
frr-reload output: 3 b'line 15: % Command incomplete: spf-delay-ietf init-delay 31\n\n'
|
|
This extends the fix from 53e20097 ("vyos.ifconfig: T4330: bugfix changing MTU
when IPv6 is disabled") by ordering the execution in a way the Kernel does not
complain.
(cherry picked from commit 601ab19fd8c81a998b3c966cc83b85ed60ac5ae0)
|
|
Commit f8b3d8999c ("ipv6: T4319: do not configure IPv6 related settings if it's
disabled") moved the MTU configuration part under the code path which is only
run if IPv6 is enabled on the system.
This prevented MTU changes on IPv6 disabled systems.
(cherry picked from commit 53e20097d227ebf4bdb4dc6c85427ec9c5ec3982)
|
|
|
|
|
|
(cherry picked from commit a33b737b753843501c86eee744aef75137d2b64e)
|
|
(cherry picked from commit 60f009defadb9d36bf84def1e839cb11a0b3d619)
|
|
(cherry picked from commit c33a96f6f0f0259808992b246b1a550fcf9a454a)
|
|
(cherry picked from commit df0fbfeedce0f163e9d10be21d58ad4dc797a28a)
|
|
T4319: do not try to add ::1/128 to lo when IPv6 is disabled
|
|
|
|
Revert "backport: T4515: T4219: policy local-route6 and inbound-interface support"
|
|
support"
|
|
This reverts commit 382d5aa16d81b745e522a14122b429750ee64789.
|
|
graphql: T3993: add unsettable gql option; this is not exposed by CLI
|
|
(cherry picked from commit 9d3acc2b55f2d1c563f1941e59c98c159211dc58)
|
|
(cherry picked from commit 6249c2abe7e40a6671549d318ee9b0fbd622b991)
|
|
(cherry picked from commit 625ea99e69a319c88fa67125438fdc457eaaaed3)
|
|
(cherry picked from commit cabe0c06e2312cc872d3e22d91611a3ccecefdb0)
|
|
(cherry picked from commit 364009e4317fb5c6732635726b511613aa2ed519)
|
|
(cherry picked from commit f8b3d8999cbea988ce8e7d303957558308ddc1bc)
|
|
(cherry picked from commit 1b16a4eab926462c0d2752d698bedf28c995058d)
|
|
(cherry picked from commit 52cb6185a4a51ffa92f10e0ded55a943bc21bc60)
|
|
(cherry picked from commit eaf4b60c9e7fa094d17b87b29bebaf81182ee7a1)
|
|
(cherry picked from commit 87ccafd06b897b63f847e6b47cf72b951b0ed223)
|
|
(cherry picked from commit 1cbcbf40b7721849f9696c05fac65db010a66b7c)
|
|
openvpn: T4230: Delete checks if local-host address assigned
|
|
(cherry picked from commit 999b1e50dfdea8694174e82d22b2438cb1bf5e28)
|
|
backport: T4515: T4219: policy local-route6 and inbound-interface support
|
|
Commit 92f6feca ("T3506: loadkey: Add `generate public-key-command` command")
backported a change from current for the op-mode command definitions.
Unfortunately VyOS 1.3 (equuleus) uses the old GCC preprocessor which is
unable to properly handle long strings containing control characters
lilke // (CPP-comment).
|
|
In verify function for arp-monitor option was used by mistake an extra
conversion for incoming data before comparing items. This commit removed
these unnecessary conversions and makes the option operable.
(cherry picked from commit df4b544c29974e36b52fc42bcbf617f50738a4a6)
|
|
The iavf, ice, and i40e drivers do not support speed, flow, or duplex control
using ethtool. As a result, interface configuration changes fail to commit when
using those drivers. This patch fixes that by correctly marking those drivers
as not supporting those controls.
(cherry picked from commit 2894b52454311f8e011bed910704064be7471275)
|
|
T3506: loadkey: Add `generate public-key-command` command
|
|
|