| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-06-09 | op-mode: T6424: ipsec: honor certificate CN and CA chain during profile ↵ | Christian Breunig | |
| generation In e6fe6e50a5c ("op-mode: ipsec: T6407: fix profile generation") we fixed support for multiple CAs when dealing with the generation of Apple IOS profiles. This commit extends support to properly include the common name of the server certificate issuer and all it's paren't CAs. A list of parent CAs is automatically generated from the "PKI" subsystem content and embedded into the resulting profile. | |||
| 2024-06-06 | grub: T6453: Fixed GRUB variables parsing | zsdc | |
| To parse variables with `=` a variable name should be limited by alphanumerical characters only. | |||
| 2024-06-06 | Merge pull request #3578 from nicolas-fort/raw-hook | Daniil Baturin | |
| T3900: Add support for raw tables in firewall | |||
| 2024-06-06 | Merge pull request #3573 from talmakion/bugfix/T6401-2 | Daniil Baturin | |
| vxlan: T6401: Avoid calling get_vxlan_vni_filter() unless we need it | |||
| 2024-06-05 | migration: T6006: add activation script dir and helper function | John Estabrook | |
| 2024-06-05 | migration: T6447: add module compose_config | John Estabrook | |
| 2024-06-05 | migration: T6006: update config.boot.default and move to vyos-1x | John Estabrook | |
| 2024-06-01 | vxlan: T6401: Avoid calling get_vxlan_vni_filter() unless we need it | Andrew Topp | |
| `bridge vni show dev vxlanX` will exit with an error if no VNI filters are installed, but the getter is used even when we haven't installed any. This fix avoids fetching a list of VNI filters unless we know we've created some. | |||
| 2024-05-30 | vyos.ifconfig: T6421: verify /etc/hostname exists before reading | Christian Breunig | |
| Inspired-By: Brandon Zhi <Huiyuze_Zhi@protonmail.com> | |||
| 2024-05-27 | T5786: Add set/show system image to /image endpoint | khramshinr | |
| 2024-05-23 | Merge pull request #3399 from 0xThiebaut/suricata | Christian Breunig | |
| suricata: T751: Initial support for suricata | |||
| 2024-05-22 | Merge pull request #3502 from dmbaturin/T6385-yes-no-ctrl-c | Christian Breunig | |
| vyos.utils.io: T6385: handle keyboard interrupts in ask_yes_no | |||
| 2024-05-22 | vyos.utils.io: T6385: handle keyboard interrupts in ask_yes_no | Daniil Baturin | |
| and return False if the user interrupts the prompt with Ctrl-C | |||
| 2024-05-22 | rollback-soft: T6384: tell the user to compare or commit | Daniil Baturin | |
| after applying the diff | |||
| 2024-05-21 | Merge pull request #3494 from HollyGurza/T6373 | Christian Breunig | |
| T6373: QoS Policy Limiter - classes for marked traffic do not work | |||
| 2024-05-21 | T6373: QoS Policy Limiter - classes for marked traffic do not work | khramshinr | |
| 2024-05-21 | T6375: Fix/Update NAT logging | l0crian1 | |
| Fixed broken logging for "show log nat" Added the following commands: show log nat source show log nat source rule <ruleNum> show log nat destination nat show log nat destination nat rule <ruleNum> show log nat static show log nat static rule <ruleNum> | |||
| 2024-05-17 | T6354: do an explicit read from version file to avoid circular reference | John Estabrook | |
| 2024-05-17 | T6354: Get rid of the custom boot type check in version.py | khramshinr | |
| 2024-05-15 | T3900: add support for raw table in firewall. | Nicolas Fort | |
| 2024-05-15 | op mode: T3355: remove the mention of legacy non-image installations | Daniil Baturin | |
| They were never supported by VyOS, that was just for very old systens upgraded from Vyatta Core | |||
| 2024-05-12 | suricata: T751: Initial support for suricata | Maxime THIEBAUT | |
| 2024-05-10 | image-tools: T6327: prune, instead of ignore, menu entries with ttyUSB | John Estabrook | |
| 2024-05-10 | image-tools: T6327: drop boot console type ttyUSB | John Estabrook | |
| 2024-05-10 | Merge pull request #3410 from fett0/T6303 | Christian Breunig | |
| Bond: T6303: add system mac address on interfaces bond | |||
| 2024-05-10 | bond: T6303: must reset system-mac to 00:00:00:00:00:00 on deletion | Christian Breunig | |
| 2024-05-10 | bond: T6303: system-mac is not allowed to be a multicast MAC address | Christian Breunig | |
| 2024-05-10 | bond: T6303: add system mac address on bond | fett0 | |
| 2024-05-08 | xml: T6319: add util for ancestor owner/priority | John Estabrook | |
| 2024-05-06 | vyos.template: T3664: use a module-level global variable for the default ↵ | Daniil Baturin | |
| template directory as a more convenient and secure alternative to environment variable | |||
| 2024-05-06 | T6298: Fix TPM incorrect path for rc_cmd | Viacheslav Hletenko | |
| Fix import for `rc_cmd` | |||
| 2024-05-02 | qos: T6225: Fix qos random-detect policy | khramshinr | |
| Fix default values for random-detect Remove dsmakr qdisc from gred cofig because dsmark was deleted from kernel | |||
| 2024-04-26 | T6269: policy: ensure correct rule parsing when using, and when not using ↵ | Nicolas Fort | |
| <set table> option in policy route. | |||
| 2024-04-25 | Merge pull request #3316 from HollyGurza/T4248 | Daniil Baturin | |
| qos: T4248: Allow to remove the only rule from the qos class | |||
| 2024-04-25 | T6258: Add sysctl base-reachable-time for IPv6 | Viacheslav Hletenko | |
| Add abiilty to change `base_reachable_time_ms` option /proc/sys/net/ipv6/neigh/{ifname}/base_reachable_time_ms | |||
| 2024-04-22 | PKI: T6259: Support RFC822 names in certificate generation | Alex W | |
| 2024-04-21 | vyos.utils: T6244: add support for year timebase in seconds_to_human() | Christian Breunig | |
| We only supported calculating seconds to weeks but not seconds to years. This has been added. Testcase: from vyos.utils.convert import seconds_to_human minute = 60 hour = minute * 60 day = hour * 24 week = day * 7 year = day * 365.25 for separator in ['', ' ', '-', '/']: print(f'----- Using separator "{separator}" -----') print(seconds_to_human(10, separator)) print(seconds_to_human(5* minute, separator)) print(seconds_to_human(3* hour, separator)) print(seconds_to_human(4* day, separator)) print(seconds_to_human(7 * week, separator)) print(seconds_to_human(10 * year, separator)) print(seconds_to_human(5*year + 4*week + 3*day + 2*hour + minute + 5, separator)) print() cpo@LR1.wue3:~$ ./foo.py ----- Using separator "" ----- 10s 5m 3h 4d 7w 10y 5y4w3d2h1m5s ----- Using separator " " ----- 10s 5m 3h 4d 7w 10y 5y 4w 3d 2h 1m 5s ----- Using separator "-" ----- 10s 5m 3h 4d 7w 10y 5y-4w-3d-2h-1m-5s ----- Using separator "/" ----- 10s 5m 3h 4d 7w 10y 5y/4w/3d/2h/1m/5s | |||
| 2024-04-21 | vyos.utils: T6244: use list to build up result string | Christian Breunig | |
| When handling optional separators rather build up a list and join the list with the requested delimiter to form the resulting human readable time string. | |||
| 2024-04-17 | Merge pull request #3320 from nicolas-fort/T6191 | Christian Breunig | |
| T6191: do not append action policy route|route6 when its not specified | |||
| 2024-04-16 | image-tools: T6154: installer prompts to confirm a non-default passwd | John Estabrook | |
| 2024-04-16 | T6191: do not append action to firewall and policy route|route6 when its not ↵ | Nicolas Fort | |
| specified, in order to ensure same behavior as in Equuleus | |||
| 2024-04-16 | qos: T4248: Allow to remove the only rule from the qos class | khramshinr | |
| 2024-04-13 | Merge pull request #3297 from HollyGurza/T6035 | Daniil Baturin | |
| qos: T6035: QoS policy shaper queue-type random-detect requires limit avpkt | |||
| 2024-04-12 | qos: T6035: QoS policy shaper queue-type random-detect requires limit avpkt | khramshinr | |
| Added params for configuration red on the shaper policy | |||
| 2024-04-11 | T6222: VRRP show prefix for long rfc3768-compatibility interfaces | Viacheslav Hletenko | |
| If we use rfc3768-compatibility with long interface names like eth1.100.200 it converts the VRRP interface name name to `<interface>v<VRID><IP version>` For example `eth2.100.200v10v4` The limit for interface name is 15 symbols and it causes that interface name is ignoring by keepalived VMAC interface name 'eth2.100.200v10v4' too long or invalid characters - ignoring And it uses the default prefix `vrrp` for such cases. It works fine, but such interfaces are not displayed in the op-mode Allow prefix `vrrp` for the op-mode for `show interfaces` | |||
| 2024-04-07 | utils.io: T6207: allow default in select_entry | John Estabrook | |
| 2024-04-06 | ethernet: T5862: default MTU is not acceptable in some environments | Christian Breunig | |
| There are cloud environments available where the maximum supported ethernet MTU is e.g. 1450 bytes, thus we clamp this to the adapters maximum MTU value or 1500 bytes - whatever is lower. | |||
| 2024-04-05 | Merge pull request #3255 from jestabro/remove-xml-lib | Christian Breunig | |
| T6203: remove obsoleted xml lib | |||
| 2024-04-05 | T6203: remove obsoleted xml lib | John Estabrook | |
| The vyos.xml functionality is replaced with vyos.xml_ref. | |||
| 2024-04-05 | T6204: cleanup shebang lines | khramshinr | |
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) |
| summaryrefslogtreecommitdiff |