summaryrefslogtreecommitdiff
path: root/src/services
AgeCommit message (Collapse)Author
2022-03-27graphql: T3993: add unsettable gql option; this is not exposed by CLIJohn Estabrook
(cherry picked from commit 9d3acc2b55f2d1c563f1941e59c98c159211dc58)
2021-12-16http-api: T4076: allow setting CORS option 'Access-Control-Allow-Origin'John Estabrook
(cherry picked from commit 55f8ede2d09a9ad095f9ec5c2a729f8c5fb6aafa)
2021-12-14http-api: T4071: allow API to bind to unix domain socketJohn Estabrook
(cherry picked from commit 0e3c35e6517f5cfebb4206c735a2ea976a7fd383)
2021-12-12graphql: T3993: add requests for firewall ipv6-address-groupJohn Estabrook
(cherry picked from commit 92c4cc5e1248b3c7ffda03e23eeb21e2073ba7f0)
2021-12-12graphql: T3993: distinguish queries and mutations; update README.graphqlJohn Estabrook
(cherry picked from commit 30311db5a00c78872c9ad9b29e7081e0d81a5362)
2021-12-11vyos.util: T4061: fix typo in function nameJohn Estabrook
(cherry picked from commit 86ab3b7dad7f2ad2c39a8b110e4a845195cda32e)
2021-12-09vyos.util: T4061: add function to check for completion of boot configJohn Estabrook
2021-12-01graphql: T3993: define add/delete system image requestJohn Estabrook
(cherry picked from commit 358831c18fcf2937f4bf85a55fa0c8bdc802d817)
2021-12-01graphql: T3993: update README.graphqlJohn Estabrook
(cherry picked from commit 9f6ca1e489c0498bfa90ca027d1d7419d4e422b8)
2021-11-30graphql: T3993: add config session show_configJohn Estabrook
Note that one can also use the mutation Show, with path ["configuration", "json", "pretty"]; that command will obscure passwords and keys, and we may want to disallow this version. (cherry picked from commit a05866e5301934f61a3c83550f91926e03bfc7b0)
2021-11-30graphql: T3993: add op-mode requestsJohn Estabrook
(cherry picked from commit 1f926e1b1fe7d82113be55916a55ca7e3cceac76)
2021-11-24graphql: T3993: add requests for manipulating firewall groupsJohn Estabrook
(cherry picked from commit ee53af35eb1edb6167a65b290f25a95b2a586498)
2021-11-24graphql: T3993: refactor directive and mutation definitionsJohn Estabrook
(cherry picked from commit ef7f5ca2fd2c0113875dbd9143342e925cf00621)
2021-11-24graphql: T3993: normalize naming conventionsJohn Estabrook
(cherry picked from commit fb2dc58d91bd93ba3aaa63d46e49e6609c18d46f)
2021-11-24graphql: T3993: change name of directiveJohn Estabrook
(cherry picked from commit 6de15a4162224dbf2d911bce0a9d4eaa396071a3)
2021-11-24graphql: T3993: update README.graphqlJohn Estabrook
(cherry picked from commit f4ec1a88b655e64372d30166b69021e2a17b2a90)
2021-11-15graphql: T3993: add config file save/loadJohn Estabrook
(cherry picked from commit 8915a19f7761253b7bdf6ca847069539ee33851d)
2021-11-15graphql: T3993: move schema generation to bindings.py; clean up for lintingJohn Estabrook
(cherry picked from commit 9e2694b24b06d928240522322c9a6d60c7a7d290)
2021-11-07http-api: T2768: update dhcp-server example for migration 5-to-6John Estabrook
(cherry picked from commit dc9a2821d063a96681d6cb1d962618829b71937d)
2021-11-07http-api: T2768: add README.graphqlJohn Estabrook
(cherry picked from commit 5b69aad5bfe1fd1dfc51afb1d4b6323028009deb)
2021-11-07http-api: T2768: example using GraphQL for high-level config operationsJohn Estabrook
(cherry picked from commit b168b4cc7da456f14714d917cdc7a1c6b8df9af5)
2021-11-07http-api: T3616: update for strict content-type check in FastAPI 0.65.2John Estabrook
FastAPI 0.65.2 checks content-type request header before assuming JSON, closing a well-known loophole. This requires a modification of the code providing backwards compatibility of multipart forms. (cherry picked from commit 3a9041e2d4d4a48ba7c01439e69c5f86a4a850c2)
2021-11-07http api: T3412: use FastAPI as web framework; support application/jsonJohn Estabrook
Replace the Flask micro-framework with FastAPI, in order to support extensions to the API and OpenAPI 3.* generation. This change will remain backwards compatible with previous versions. Notably, the multipart forms version of requests remain supported; in addition application/json requests are now natively supported. (cherry picked from commit 0125fff200efe3259aa25953e7505f69679261f8)
2021-09-02configd: T3694: always set script.argvBrandon Stepler
Several scripts imported by vyos-configd (including src/conf_mode/protocols_static.py) rely on argv for operating on VRFs. Always setting script.argv in src/services/vyos-configd ensures those scripts will operate on the default VRF when called with no arguments. Otherwise, a stale argv might cause those scripts to operate on the last modified VRF instead of the default VRF. (cherry picked from commit 3341c591ad1190f39ff3ffd475eddf5d95aef763)
2021-05-14configd: T3426: add support for script arguments to vyos-configdJohn Estabrook
(cherry picked from commit b3d914edcb506bb25c3798683cda341b8acbb0ad)
2021-05-14configd: T3426: check script name against include_set, not exclude_setJohn Estabrook
If the script name is mangled, for any reason (e.g. missing support for script arguments) checking against the exclude_set will yield a false positive; check against the include_set, even if this is a longer search. (cherry picked from commit 93c07ea1edff3f6f84285322b494a24b807ccc25)
2021-05-12configd: T3302: check vyos-config-status to determine if in boot sessionJohn Estabrook
(cherry picked from commit eeb9687bb9aaf6050b0a8759767f08ab8faac442)
2021-03-18configd: T3411: redirect stdout from scripts to console; to file on bootJohn Estabrook
2020-11-03T2465: Fixing permissions on socket so DHCP workskroy
2020-10-21http-api: T3007: use ConfigSession config load script, not backend loadJohn Estabrook
2020-10-08configd: T2931: workaround for suspected zmq bugJohn Estabrook
2020-10-02configd: T2952: synchronize received messages in case of client timeoutJohn Estabrook
2020-10-02configd: T2582: catch config initialization errorsJohn Estabrook
2020-10-02configd: T2582: remove unused variablesJohn Estabrook
2020-09-25dns: forwarding: T2921: migrate to get_config_dict()Christian Poessinger
2020-09-16configd: T2885: fix output of error string to config sessionJohn Estabrook
2020-09-15configd: T2885: print commit errors to config session terminalJohn Estabrook
2020-08-31configd: T2582: add config daemon and supporting filesJohn Estabrook
2020-07-22http-api: remove unneeded check for VyOSErrorJohn Estabrook
The only calls to config (return_value, return_values, exists) do not throw VyOSError; remove unneeded except.
2020-06-11vyos-hostsd: T2583: partial rewriteJernej Jakob
- update copyright date - validate incoming JSON data against a schema with voluptuous - add usage help describing internal messages syntax at top of vyos-hostsd - move socket and state file to directory /run/vyos-hostsd - replace jinja2 rendering with vyos.template - move all templates out of the executable into dedicated data/templates dirs - move recursor.conf forward-zones-recurse to forward-zones-file - generate lua-config-file for pdns-recursor with addNTA - support adding custom forward zones for pdns-recursor with optional added NTA and/or recursion-desired - move search_domains from set_host_name to separate add/delete/get commands - unify functions to support abstracting them in the future - track number of internal changes in "changes" variable saved in state file (informational in apply function) - do not apply changes immediately, add apply function that applies all changes (to not reload pdns-recursor excessively for a large set of changes, users must call the apply function once at the end) - add pdns_rec_control function that supports sending arbitrary commands to rec_control (fix pdns-recursor process name that caused the old function to think pdns-recursor was never running) - create /run/powerdns if it doesn't exist (on boot vyos-hostsd starts before pdns-recursor but we need to put our generated conf files there) - abstract specific command functions (add_*/del_*) into general functions to manipulate various types of data in the state variable - add command types: - forward_zones (generate custom forward zones for pdns-recursor) - search_domains (move from set_host_name as dhcp client needs to change them too) - name_server_tags_recursor (to set tags whose nameservers are added to pdns-recursor) - name_server_tags_system (to set tags whose nameservers and search domains are added to /etc/resolv.conf) - change hosts data format to make more sense (move tag from within each host dict to the key for a list of host dicts) - do not remove state file when shut down cleanly, to not lose state when restarting vyos-hostsd service that's then impossible to restore without restarting the whole router - a reboot will remove the state file as it lives in a tmpfs (/run) - remove too verbose info log on every received message - set mode of socket to 770 to secure it against processes not in hostsd group
2020-05-28dhcp: T2465: T2483: fix DNS resolution (pdns restatt)kroy-the-rabbit
2020-05-19T2465: Permissions on vyos-hostsd socket incorrectkroy-the-rabbit
The DHCP server is unable to apply entries to the hosts file because the permissions on the socket are getting created wrong. ``` $ ls -al /run/vyos-hostsd.sock srwxrwxrwx 1 root vyattacfg 0 May 20 01:38 /run/vyos-hostsd.sock ``` This gives it the correct permissions so that the nobody/nobody user/group can change it.
2020-05-06http api: T2395: add waitress as production WSGI serverJohn Estabrook
2020-05-06http api: T2395: replace bottle with flask as microframeworkJohn Estabrook
2020-05-06http api: use decorator to get command data from requestJohn Estabrook
2020-05-06http api: catch appropriate errorsJohn Estabrook
2020-05-06http api: function names should be consistentJohn Estabrook
2020-05-03Merge pull request #352 from maplewf/currentDaniil Baturin
[T2311] name servers via cmdline can't take effect
2020-04-22http api: T2096: form of show/generate should be consistent with other cmdsJohn Estabrook
2020-04-20http api: T2292: handle SIGTERM from systemd restart; raise SIGINTJohn Estabrook