summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2021-06-13wwan: T3622: add support for APN authenticationChristian Poessinger
Some APNs require a username/password. Add CLI nodes (matching the PPPoE syntax) for client authentication. One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany) APN Name: Telekom Internet IPv6 APN: internet.v6.telekom Benutzername: telekom Passwort: tm
2021-06-13pppoe: T3621: validate that both username and password are setChristian Poessinger
A validator is missing checking that if authentication is used on a PPPoE interface, both username and password are set.
2021-06-13wwan: T3611: switch to qmi/mbim modeChristian Poessinger
(cherry picked from commit 011f8ede55311e08d42f5afed9a2e8c44fd6d301)
2021-06-13wwan: T3620: adjust NAT inbound/outbound interfaces on config migrationChristian Poessinger
(cherry picked from commit e24e35e1ac11a0771b15417af191694fd0b88022)
2021-06-13wwan: T3620: fix backup route metric in migration scriptChristian Poessinger
(cherry picked from commit d20dd7a0e6af08a80c7c911e7b151f28e4666173)
2021-06-13wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface treeChristian Poessinger
(cherry picked from commit c2a1c071e7d0a9ca754d7f5016eed7db188b3d1a)
2021-06-03flow-accounting: T3132: fix egress iptables chainJan-Philipp Benecke
2021-05-27dhcp-server: T2669: do not allow overlapping ranges to be createdChristian Poessinger
set service dhcp-server shared-network-name NET01 authoritative set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 default-router '10.0.0.1' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 lease '86400' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 start '10.0.0.60' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 stop '10.0.0.70' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 start '10.0.0.55' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 stop '10.0.0.65' Will result in a dhcpd.conf: shared-network NET01 { authoritative; subnet 10.0.0.0 netmask 255.255.255.0 { option routers 10.0.0.1; default-lease-time 86400; max-lease-time 86400; range 10.0.0.60 10.0.0.70; range 10.0.0.55 10.0.0.65; } on commit { set shared-networkname = "NET01"; } } This is not allowed by ISC DHCPd: dhcpd[3307]: /run/dhcp-server/dhcpd.conf line 25: lease 10.0.0.63 is declared twice! dhcpd[3307]: range 10.0.0.55 10.0.0.65; (cherry picked from commit b0e1c8a9c9ef470297bf3c9f5059ad7c720c46ff)
2021-05-27login: T3455: Fix edit level configuration for usersever-sever
2021-05-27openconnect: T3461: Delete CA crt file checkssever-sever
2021-05-26ospfv3: T3581: Fix op-mode for linkstateViacheslav Hletenko
2021-05-24pseudo-ethernet: T3575: verify parent interface MTUChristian Poessinger
(cherry picked from commit 38b3dff1ebdf8c26a28d0befa6dcf0b4f51f21be)
2021-05-24router-advert: T3561: fix inconsistent use of tabs and spaces in indentationChristian Poessinger
Commit c17f259d ("router-advert: T3561: add support for specific routes") used tabs over spaces in the Migration script which triggered a TabError (inconsistent use of tabs and spaces in indentation"). (cherry picked from commit acc701bac3483a3242c77a2e00c076890e27eea9)
2021-05-24router-advert: T3561: add support for specific routesMark Royds
Co-authored-by: Mark Royds <mark.royds@vitaminit.co.uk> (cherry picked from commit c17f259d09abd2bf632d09400fe8deb4c2781d32)
2021-05-23op-mode: disks: T1621: bugfix no disk outputChristian Poessinger
2021-05-20vyos.util: T3532: Replace func get_interface_configViacheslav Hletenko
Replace function get_interface_config to function get_interface_config, as we have in 1.4 branch. It need after this cherry-picked commit edcdea8
2021-05-19openconnect-server: T3559: Add restart op-commandDmitriyEshenko
(cherry picked from commit 5b5e74fb667fa5a5abec779b6c411b3864f3b5fb)
2021-05-18ddns: T3254: fix incorrect update timeFileGo
This fixes a bug when show dynamic dns status returned (formatted) UNIX time 0. I have changed the code to use ddclient's mtime value in the cache file, which is updated on every successful sync with DDNS service as opposed to atime, which was previously used. (cherry picked from commit 89b127647cbf3fea3a439f43efa32a31aa03524e)
2021-05-18vmware: T3525: fix invocation of resume scriptChristian Poessinger
Commit dce67433 ("util: T2226: rewrite resume-vm to use run") changed the way in which the script executed system binaries in a way which could not be processes by the underlayin infrastructure (lists are not supported, only strings). (cherry picked from commit fa05e4267c17d93c4e9594a0ba32e66c7b2a1d61)
2021-05-18vmware: T1028: properly expose syslog identityChristian Poessinger
(cherry picked from commit 7de7a1b2d127df85d4224162116c1d4c984b022b)
2021-05-17ddclient: T3557: fix FileNotFoundError when querying status informationChristian Poessinger
If ddclient is not problery configured it will start up but no status file is generated. This commit checks if the status file exists before reading it. (cherry picked from commit 041cea6d7a13a804b4e656778048bcefd0a46cb8)
2021-05-15dhcp-server: T3544: fix FileNotFoundError on first invokationChristian Poessinger
The problem of using the move() operation over render() is that render will silently create the directory tree in the background and move() does not. This means that on first boot when /run/dhcp-server does not exist, move will fail with a FileNotFoundError. Instead of using move() we render() the configuration two times, one for validating it via dhcpd -t and the other time to really apply it to the service. The performance impact should be little as the config should still be cached in the system RAM. (cherry picked from commit 1f68b69328c961e450ac70b12f7bf073d70355d7)
2021-05-15dhcp-server: T3544: test config in IPv4 mode onlyChristian Poessinger
(cherry picked from commit 37f3ead353625b53cfa8953196a9c32b42a10e7f)
2021-05-14ntp: T2809: Fix migration script if server not existsever-sever
(cherry picked from commit d96336a808e500934fc4fd9423345d0b965d35ac)
2021-05-14configd: T3426: add support for script arguments to vyos-configdJohn Estabrook
(cherry picked from commit b3d914edcb506bb25c3798683cda341b8acbb0ad)
2021-05-14configd: T3426: correct pass_through function for scripts with argsJohn Estabrook
(cherry picked from commit 5501e5f1de0201f4c977a8027b6e97caf1affa1b)
2021-05-14configd: T3426: check script name against include_set, not exclude_setJohn Estabrook
If the script name is mangled, for any reason (e.g. missing support for script arguments) checking against the exclude_set will yield a false positive; check against the include_set, even if this is a longer search. (cherry picked from commit 93c07ea1edff3f6f84285322b494a24b807ccc25)
2021-05-13dhcp-server: T3544: test newly rendered configuration before restarting daemonChristian Poessinger
The current DHCP server implementation comes with options (see below) which allow the user to pass in any arbitrary option(s) in a verbatim way which will manifest in dhcpd.conf. The options are: * set service dhcp-server global-parameters * set service dhcp-server shared-network-name foo shared-network-parameters * set service dhcp-server shared-network-name foo subnet 192.0.2.0/25 subnet-parameters * set service dhcp-server shared-network-name foo subnet 192.0.2.0/25 static-mapping ff static-mapping-parameters Having an invalid configuration will yield: vyos@vyos# commit [ service dhcp-server ] Configuration file errors encountered - check your options! [[service dhcp-server]] failed (cherry picked from commit 3c754695590b9d9e582c10e6d05c2b628e79262c)
2021-05-13bonding: T3543: add support to configure lacp-rate (slow or fast)Christian Poessinger
Option specifying the rate in which we'll ask our link partner to transmit LACPDU packets in 802.3ad mode. set interfaces bonding bond0 lacp-rate <slow|fast> slow: Request partner to transmit LACPDUs every 30 seconds (default) fast: Request partner to transmit LACPDUs every 1 second (cherry picked from commit 8e392a3dbc16f7b80a979f7b4e9c11408d700e6f)
2021-05-12configd: T3302: check vyos-config-status to determine if in boot sessionJohn Estabrook
(cherry picked from commit eeb9687bb9aaf6050b0a8759767f08ab8faac442)
2021-04-28ipsec: T3333: Fix status for SA state op-modesever-sever
2021-04-27ecmp: T3502: fix check for "layer4-hashing" keyBrandon Stepler
(cherry picked from commit 44d4b6e663aa0df979b37299fbbc3b5b698c5379)
2021-04-27op-mode: T2946: only call 'stty size' if in terminalJohn Estabrook
(cherry picked from commit e1563f9d175026488a36d52a6ffcfb6745d56644)
2021-04-25wireguard: T1802: add client name to configurationChristian Poessinger
(cherry picked from commit daf377aca3511e8ad74854828f3aaa1dd99f0a91)
2021-04-25wireguard: T1802: generate QR code for clients on CLIChristian Poessinger
generate wireguard mobile-config wg0 server wg.vyos.net address 1.2.2.2/24 WireGuard client configuration for interface: wg0 [Interface] PrivateKey = AEXrZ4b3xFVLg1lql3hy/93+d43q3+3vPdSMUGI6/Fo= Address = 1.2.2.2/24 [Peer] PublicKey = h1HkYlSuHdJN6Qv4Hz4bBzjGg5WUty+U1L7DJsZy1iE= Endpoint = wg.vyos.net:41751 AllowedIPs = 0.0.0.0/0, ::/0 The servers public key and port are automatically extracter from the running config. (cherry picked from commit 92d62740a1dd84d27ed3006cdc8d2560673f6bca)
2021-04-20bgp: remove references to new XML/Python implementation not yet available in ↵Christian Poessinger
equuleus
2021-04-20conntrack: T3290: remove references to removed GRE pluginsBrandon Stepler
(cherry picked from commit 91130ca7c386ecba291694ff08e521438d352e78)
2021-04-14dhclient: T3471: Fixed dhclient processes searchzsdc
Since in some cases a dhclient command may not end with an interface name, the way to find out a list of dhclients running for a current interface was replaced to catch PIDs regardless of the exact command syntax. (cherry picked from commit 13abffe43b2a5c41bb4ec4675c227f6cf1f868da)
2021-03-27op-mode: ipsec: T3055: Fixed parsing peer name errorjack9603301
2021-03-23ddclient: T3422: Allow zone property with cloudflare protocolJustin
Allows Dynamic DNS services with custom names to use the zone field if the protocol is set to cloudflare
2021-03-21validate: T3418: interface-name should also allow all local present interfacesChristian Poessinger
The regex only validated interfaces according to the VyOS naming scheme, but third party interfacs that are legit (e.g. exists within the kernel) failed to validate. The validator now also supports any kind of local interfaces attached to the OS kernel. (cherry picked from commit 911fe645928750f3ce38061a94c9b6db50db0749)
2021-03-21ntp: T3416: fix op-mode commands when running inside VRFChristian Poessinger
When NTP is executed inside a VRF context, we also must execute the op-mode commands inside the given VRF. This is a workaround until the op-mode programming library from T3402 is available. (cherry picked from commit f411351baef67740b76e800161fe55f495c4bd92)
2021-03-19dhcp: T3300: add DHCP default route distanceBrandon Stepler
(cherry picked from commit dd2eb5e5686655c996ae95285b8ad7eb73d63d0b)
2021-03-19dhcp: T3392: fix VRF detectionBrandon Stepler
(cherry picked from commit ce0600e97baec18c1781605f3a80c26d4ed01e2b)
2021-03-18configd: T3411: redirect stdout from scripts to console; to file on bootJohn Estabrook
2021-03-18Revert "udev: T3063: drop special WWAN rule for Sierra Wireless cards"Christian Poessinger
Turns out we still need it, else a MC7710 card won't work on an APU4 device. This reverts commit f9e0fb6bffd41c143ff5454c3b73cca4a588ca86.
2021-03-18grub: T3271: don't write grub.cfg if it hasn't changedBrandon Stepler
(cherry picked from commit 658456982ad4543790a3835f6ddbfbe3b583ec44)
2021-03-17ipv6: eui64: T3413: add custom validatorChristian Poessinger
VyOS 1.2 (crux) rejected prefixes other then of site /64. [ interfaces ethernet eth0 ipv6 address eui64 2006:ab00:abe1::2/127 ] Error: Prefix lenght is 127. It must be 64. Same should be done on VyOS 1.3 and newer (cherry picked from commit 6f6cd6552384704700f08e9367e167796b1f7fde)
2021-03-14xdp: T2666: remove entire XDP code for 1.3 LTS imageChristian Poessinger
This is an extension to commit 801c5235 ("xdp: T2666: disable this highly experimental feature in 1.3 LTS") by dropping all XDP references in the equuleus codebase.
2021-03-13console-server: T3407: can not reuse device used for "system console"Christian Poessinger
A user can specify both "set system console device ttyS0 speed '9600'" and "set service console-server device ttyS0 speed 9600". A serial interface can not be used multiple times. commit now produces an error: vyos@vyos# commit [ service console-server ] Port "ttyS0" requires speed to be set!
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-30 16:50:30 +0000