summaryrefslogtreecommitdiff
path: root/debian/control
AgeCommit message (Collapse)Author
2023-07-19sshguard: T5354: Add service ssh dynamic-protectionViacheslav Hletenko
Sshguard protects hosts from brute-force attacks It can inspect logs and block "bad" addresses by threshold Auto-generates own tables and rules for nftables, so they are not intercept with VyOS firewall rules. When service stops, all generated tables are deleted. set service ssh dynamic-protection set service ssh dynamic-protection allow-from '192.0.2.1' set service ssh dynamic-protection block-time '120' set service ssh dynamic-protection detect-time '1800' set service ssh dynamic-protection threshold '30'
2022-12-31Debian: T578: add skopeo dependency on vyos-1x-smoketestChristian Poessinger
Dependency is required for the test Docker OCI image used within the smoketest framework
2022-12-30container: T578: backport podman from 1.4 development branchChristian Poessinger
2022-08-16Debian: T4584: remove version number from hostap package requirementChristian Poessinger
(cherry picked from commit 681bdf2946d1d10f3b432f70452a8d018b7a98ae)
2022-02-08monitoring: T3872: Add required telegraf version >=1.20Viacheslav Hletenko
2021-11-07http api: T3412: use FastAPI as web framework; support application/jsonJohn Estabrook
Replace the Flask micro-framework with FastAPI, in order to support extensions to the API and OpenAPI 3.* generation. This change will remain backwards compatible with previous versions. Notably, the multipart forms version of requests remain supported; in addition application/json requests are now natively supported. (cherry picked from commit 0125fff200efe3259aa25953e7505f69679261f8)
2021-10-10lcd: T2564: add support for hd44780 displaysChristian Poessinger
(cherry picked from commit 4218a5bcb1093108e25d4e07fa07050b4f79d3d5)
2021-07-13T3663: python3-inotify should be a runtime dependencyJohn Estabrook
2021-07-13T3663: prerequisites for inotify-based watching implementations.Daniil Baturin
2021-06-22Debian: add missing dependency on bridge-utilsChristian Poessinger
2021-06-21Debian: add missing dependencies on iproute2, sudo, sed and vyatta-bashChristian Poessinger
2021-06-13Debian: T3611: add libqmi-utils as new dependency for WWANChristian Poessinger
(cherry picked from commit beac82b2d0d4bad182718cc8159f79150c5a71ae)
2021-06-13wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface treeChristian Poessinger
(cherry picked from commit c2a1c071e7d0a9ca754d7f5016eed7db188b3d1a)
2021-06-06Debian: add missing dependency on vyatta-cfgChristian Poessinger
(cherry picked from commit fd9032fb7bfc86d4e8901e348bc0afdc83e07413)
2021-05-23op-mode: storage: T3572: add S.M.A.R.T. status supportChristian Poessinger
vyos@vyos:~$ show hardware storage nvme Node SN Model Namespace Usage Format FW Rev ---------------- -------------------- ---------------------------------------- --------- -------------------------- ---------------- -------- /dev/nvme0n1 S437Nxxxxxxxxx SAMSUNG MZQLB960HAJR-00007 1 25.17 GB / 960.20 GB 512 B + 0 B EDA5202Q /dev/nvme1n1 S437Nxxxxxxxxx SAMSUNG MZQLB960HAJR-00007 1 38.36 GB / 960.20 GB 512 B + 0 B EDA5202Q vyos@vyos:~$ show hardware storage smart nvme0n1 === START OF INFORMATION SECTION === Model Number: SAMSUNG MZQLB960HAJR-00007 Serial Number: S437Nxxxxxxxxx ...
2021-04-25wireguard: T1802: generate QR code for clients on CLIChristian Poessinger
generate wireguard mobile-config wg0 server wg.vyos.net address 1.2.2.2/24 WireGuard client configuration for interface: wg0 [Interface] PrivateKey = AEXrZ4b3xFVLg1lql3hy/93+d43q3+3vPdSMUGI6/Fo= Address = 1.2.2.2/24 [Peer] PublicKey = h1HkYlSuHdJN6Qv4Hz4bBzjGg5WUty+U1L7DJsZy1iE= Endpoint = wg.vyos.net:41751 AllowedIPs = 0.0.0.0/0, ::/0 The servers public key and port are automatically extracter from the running config. (cherry picked from commit 92d62740a1dd84d27ed3006cdc8d2560673f6bca)
2021-04-04T3457: output the "monitor log" command in a colorful wayChristian Poessinger
Add a new CLI command "monitor log colored" to run the log file monitoring through grc (https://github.com/garabik/grc). (cherry picked from commit 6330708f7ad50e56b16e1c7bc671eaddcd758bdb)
2021-04-03Debian: T2108: add minisign dependencyChristian Poessinger
(cherry picked from commit 52323dcd620ef1b6d716787c9c4729b9ae9ee7e0)
2021-03-22T3284: Merge Paramiko-based remote.py implementationerkin
2021-01-10Debian: vyos-1x depends on python3-spinx for "make docs"Christian Poessinger
2021-01-07Debian: add build-dependency on python3-jinja2Christian Poessinger
2021-01-07Debian: add python3-psutil build dependencyChristian Poessinger
vyos.util depends partially on python3-psutil, and some smoketests executed via "make test" include vyos.util, thus ensure the package is available.
2020-12-28webproxy: T563: use new bash blacklist updaterChristian Poessinger
2020-12-28webproxy: T563: op-mode: initial command supportChristian Poessinger
2020-12-28webproxy: T563: migrate from old Perl code to XML and get_config_dict()Christian Poessinger
Basic proxy functionality is working but the squidguard smoketest still fails as this is yet not implemented.
2020-12-28ddns: T757: add missing dependencyChristian Poessinger
2020-12-19xdp: T2666: switch to example code provided by xdp-tutorialChristian Poessinger
2020-12-17Debian: xdp: T2666: add build dependenciesChristian Poessinger
2020-12-14netplug: T3130: use Debian upstream versionChristian Poessinger
2020-11-23Debian: move wireguard-modules dependency to vyos-buildChristian Poessinger
The dependency on the WireGuard modules actually depend on the runnning Kernel. While already working on 5.9 support which has a buildin version of WireGuard, this also eases ARM development.
2020-11-14options: keyboard: T3038: use proper XML <defaultValue> over hardcoded ↵Christian Poessinger
Python value We should not use hardcoded Python values whenever possible. vyos.xml provides an abstraction of the XML CLI definitions providing default values from the CLI specified via the <defaultValue> node. This increases consistency among all XML/Python wrappers. Additional small fixes in this commit (besides the bad practice incorporating unrelated changes into the same commit) contain: - Keyboard layout shout be explicitly set for /dev/console - Added missing Debian dependency on console-data - When looking for a key in a dict, we do not need to specify dict.keys()
2020-11-06system: T3048: add dynamic performance tuning daemonChristian Poessinger
Add new CLI command "set system options performance <latency | throughput>"
2020-11-01test: vyos.validate: add unittestsChristian Poessinger
2020-10-30Debian: add OpenSSL dependency, inherited by OpenVPNChristian Poessinger
2020-09-26Debian: adding vyos-configd made this package architecture specificChristian Poessinger
There is a shim which is compiled by GCC per target architecture.
2020-09-13Revert "Debian: T2843: drop wireguard-modules dependency with kernel 5.8"Christian Poessinger
This reverts commit bd076f694a763991a0b0d3a7bb0fa5d194d56d7c.
2020-08-31configd: T2582: add config daemon and supporting filesJohn Estabrook
2020-08-30Debian: T2843: drop wireguard-modules dependency with kernel 5.8Christian Poessinger
2020-08-30WireGuard: T2842: switch to binary package from buster-backportsChristian Poessinger
2020-08-27Merge branch 'master' of github.com:vyos/vyos-smoketest into ↵Christian Poessinger
vyos-smoketest-integration (T2832) * 'master' of github.com:vyos/vyos-smoketest: (153 commits) pppoe-server: test some more values lcd: adjust to cli changes lcd: adapt test to new CLI design pppoe-server: initial smoketest with local and radius auth pppoe: validate dhcpv6 client will be started wireless: validate hostapd/wpa_supplicant is running pppoe: sync to new dhcpv6-pd cli anyconnect: T2812: add basic testing ethernet: check interface disable state router-advert: check 'infinity' option in script logic ssh: config file is now volatile (moved to /run) ipv6: link-local: test address assignment on interfaces router-advert: add initial test mdns-repeater: add basic test pseudo-ethernet: extend smoketests with VIFs l2tpv3: add initial interface test wireless: use library function for loading kernel modules ethernet: test "ip" subtree of interface for e.g. ARP settings pppoe: use assertEqual() service: bcast-relay: add initial tests ...
2020-08-20Debian: alphabetically sort (build-)dependenciesChristian Poessinger
2020-08-20lcd: T2564: remove lcdproc-extra-drivers packageChristian Poessinger
2020-08-18anyconnect: T2036: add anyconnect VPN supportEshenko Dmitriy
2020-08-10tcptraceroute: T2723: Fix the problem that tcptraceroute6 cannot be executedjack9603301
2020-07-18ndptool: T2706: Support NDP protocol monitoringjack9603301
It supports NDP protocol monitoring. The submission supports the following features: - Support the monitoring of specified port or all ports - Supports monitoring of specific message types - Support sending specific NDP message
2020-07-04Merge pull request #487 from DmitriyEshenko/1x-impl-fnmDaniil Baturin
ids: T2659: Implement fastnetmon support
2020-07-03ids: T2659: Implement fastnetmon supportDmitriyEshenko
2020-06-28T2638: FRR: New framework for configuring FRRRunar Borge
This commit adds the python module vyos.frr that support reading and modifying the frr cofiguration. Functions get_configuration() : Collects the configuration from FRR and returns it as a string reload_configuration() : uses frr-reload.py to activate a new configuration. The configuration applied will overwrite the current configuration. mark_configuration() : Does syntax check/validation and add "end" tags to the configuration The marked configuration will be returned as a string A syntax fault will render an Exception execute() : Execute a command inside vtysh configure() : Executes a command in vtysh config mode replace_section() / _replace_section() : Adds the ability to replace a section of frr code remove_section() : Removes the specified configuration block from the config For now this supports replacing complete config sub-blocks of configuration and selecting the daemon to replace inside. This should work for most daemons, but static routing will still be an issue because this is not a separate sub-config mode
2020-06-23Debian: cleanup runtime dependenciesChristian Poessinger
Depends field of package vyos-smoketest: substitution variable ${shlibs:Depends} used, but is not defined
2020-06-22Merge branch 'T2588' of https://github.com/thomas-mangin/vyos-1x into ↵Christian Poessinger
default-doct * 'T2588' of https://github.com/thomas-mangin/vyos-1x: xml: T2588: code to extract defaults values from xml