Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-10-04 | Merge pull request #4121 from natali-rs1985/T6101-current | Christian Breunig | |
ipsec: T6101: Add validation for proposal option used in IKE group | |||
2024-10-04 | Merge pull request #4048 from rebortg/node_exporter | Christian Breunig | |
T973: add basic node_exporter implementation | |||
2024-10-03 | T973: remove irrelevant standard values | rebortg | |
2024-10-03 | cli: T6752: add a wrapper for the show command (#4111) | Daniil Baturin | |
2024-10-02 | ipsec: T6101: Add validation for proposal option used in IKE group | Nataliia Solomko | |
2024-09-30 | Merge pull request #4106 from dmbaturin/T6743-native-range-validators | Daniil Baturin | |
validators: T6743: use native ipaddrcheck validator options for ranges | |||
2024-09-30 | Merge pull request #4024 from nicolas-fort/T6687 | Daniil Baturin | |
T6687: add fqdn support to nat rules. | |||
2024-09-27 | validators: T6743: use native ipaddrcheck validator options for ranges | Daniil Baturin | |
2024-09-27 | validators: T6739: correctly quote ipaddrcheck arguments | Daniil Baturin | |
to avoid ipaddrcheck syntax errors when values include whitespace | |||
2024-09-27 | Revert "validators: T6739: fix ipaddrcheck argument quoting" | Daniil Baturin | |
2024-09-25 | validators: T6739: fix ipaddrcheck argument quoting | Daniil Baturin | |
2024-09-25 | Merge pull request #3876 from jestabro/uncaught-conf-script-err-as-commit-err | Daniil Baturin | |
configd: T6608: report uncaught config script exceptions as commit error | |||
2024-09-24 | syslog: T6719: fix the behavior of "syslog global preserve-fqdn" | Nicolas Vollmar | |
2024-09-24 | Merge pull request #4086 from natali-rs1985/T6675-current | Christian Breunig | |
bridge: T6675: VXLAN Interface configuration lost due to improper bridge detachment | |||
2024-09-22 | configd: T6608: report uncaught config script exceptions as commit error | John Estabrook | |
In the case of config mode script exceptions other than ConfigError, vyos-configd would previously trigger the shim to re-run the script in the CLI context. The use of config dependencies require this case to return a commit error. A traceback is returned as output, consistent with running without vyos-configd support. | |||
2024-09-21 | T6630: ntp: rename ptp-transport to ptp and use defaultValue for port | Christian Breunig | |
2024-09-21 | T6630: ntp: add chrony "ntp over ptp" transport | Lucas Christian | |
2024-09-20 | Merge pull request #4089 from natali-rs1985/T4833-current | Christian Breunig | |
op-mode: T4833: Include wireguard peer name in interface summary report | |||
2024-09-20 | http-api: T6326: return full warning/error output through api | John Estabrook | |
Configuration error output is not returned in full to the http-api when running under vyos-configd, due to an early implementation 'workaround' of vyos-configd writing directly to the session tty. This is corrected to return all ambient stdout (notably vyos.base.Warning) and error messages directly to the originating caller, which may be from a session tty or a ConfigSession instance. As the http-api runs in the latter case, the full output is returned. | |||
2024-09-20 | op-mode: T4833: Include wireguard peer name in interface summary report | Nataliia Solomko | |
2024-09-20 | bridge: T6675: VXLAN Interface configuration lost due to improper bridge ↵ | Nataliia Solomko | |
detachment | |||
2024-09-19 | Merge pull request #4061 from c-po/syslog-T5367 | Daniil Baturin | |
syslog: T5367: add format option to include timezone in message | |||
2024-09-18 | T973: add basic node_exporter implementation | rebortg | |
2024-09-17 | T6716: don't automatically set ethernet offload | Dave Vogel | |
Remove the lines of code that checked if the kernel had offloading enabled and was then forcing the config to set it to "on." The behavior now mirrors the config and offloading will only be enabled if the config is explicitly set to enabled. Note: the code is still present to disable the offloading, in the config, if the kernel doesn't support it. Note(2): Allow the previous behavior where the offload settings get set, based on the Kernel, if the boot is a live boot. | |||
2024-09-16 | Merge pull request #4020 from c-po/secure-boot | Christian Breunig | |
T861: op-mode: initial parts for UEFI secure boot CLI | |||
2024-09-16 | T861: op-mode: add "show secure-boot [keys]" CLI command | Christian Breunig | |
Support getting current system secure boot state. In addition add optional suppor tto list all enrolled MOK (Machine Owner Keys) in the UEFI variable store. | |||
2024-09-16 | T861: op-mode: "show version" will display secure boot state | Christian Breunig | |
vyos@vyos:~$ show ver ... Architecture: x86_64 Boot via: installed image System type: KVM guest Secure Boot: enabled ... | |||
2024-09-16 | T6687: add fqdn support to nat rules. | Nicolas Fort | |
2024-09-16 | Merge pull request #4069 from c-po/eapol-bond | Christian Breunig | |
bond: T6709: add EAPoL support | |||
2024-09-15 | Merge pull request #4057 from natali-rs1985/T6682-current | Daniil Baturin | |
op-mode: T6682: Fix for show vpn ike sa peer that always shows all SAs | |||
2024-09-15 | bond: T6709: add EAPoL support | Christian Breunig | |
2024-09-14 | ethernet: T6709: move EAPoL support to common framework | Christian Breunig | |
Instead of having EAPoL (Extensible Authentication Protocol over Local Area Network) support only available for ethernet interfaces, move this to common ground at vyos.ifconfig.interface making it available for all sorts of interfaces by simply including the XML portion #include <include/interface/eapol.xml.i> | |||
2024-09-12 | syslog: T5367: add format option to include timezone in message | Christian Breunig | |
Add CLI option to include the systems timezone in the syslog message sent to a collector. This can be enabled using: set system syslog host <hostname> format include-timezone | |||
2024-09-12 | Merge pull request #4047 from natali-rs1985/T6676-current | Christian Breunig | |
policy: T6676: Invalid route-map caused bgpd to crash | |||
2024-09-12 | Merge pull request #4046 from nvollmar/T6703 | Christian Breunig | |
T6703: Adds option to configure AMD pstate driver | |||
2024-09-12 | Merge pull request #4021 from natali-rs1985/T6652-current | Daniil Baturin | |
openfabric: T6652: Add support for OpenFabric protocol | |||
2024-09-12 | op-mode: T6682: Fix for show vpn ike sa peer always shows all SAs | Nataliia Solomko | |
2024-09-12 | T6711: Fix restart vrrp missed comma between services | Viacheslav Hletenko | |
Missing comma in the list between services 'ssh', 'suricata' 'vrrp', 'webproxy' Fix it | |||
2024-09-12 | Merge pull request #4042 from natali-rs1985/T6694-current | Christian Breunig | |
op-mode: T6694: Move some op-mode commands to the "execute" family | |||
2024-09-12 | Merge pull request #4032 from dvlogic/Allow_Container_DNS_Disable | Christian Breunig | |
T6701: Added ability to disable the container DNS plugin | |||
2024-09-11 | policy: T6676: Invalid route-map caused bgpd to crash | Nataliia Solomko | |
2024-09-11 | T6703: fix unrelated lint issues | Nicolas Vollmar | |
2024-09-11 | T6703: Adds option to configure AMD pstate driver | Nicolas Vollmar | |
2024-09-11 | T6294: Service dns forwarding add the ability to configure ZonetoCache | khramshinr | |
2024-09-11 | Merge pull request #4023 from nvollmar/T6679 | Christian Breunig | |
T6679: add group option for nat66 | |||
2024-09-11 | container: T6701: add support to disable container network DNS support | Dave Vogel | |
Add ability to set the container network with a disable-dns setting to disable the DNS plugin that is on be default. set container network <network> no-name-server | |||
2024-09-10 | Merge pull request #4038 from natali-rs1985/T6181-current | Daniil Baturin | |
op_mode: T6181: A feature for checking ports | |||
2024-09-10 | op-mode: T6694: Move some op-mode commands in the "execute" family | Nataliia Solomko | |
'force netns' — move to 'execute shell netns'. 'force vrf'— move to 'execute shell vrf'. 'force owping' — move to 'execute owping'. 'force twping' — move to 'execute twping'. 'monitor bandwidth-test' — move to 'execute bandwidth-test`. 'telnet' — move to 'execute telnet' | |||
2024-09-10 | op_mode: T6181: A feature for checking ports | Nataliia Solomko | |
2024-09-06 | container: T6702: re-add missing UNIX API socket | Christian Breunig | |
During podman upgrade and a build from the original source the UNIX socket definition for systemd got lost in translation. This commit re-adds the UNIX socket which is started on boot to interact with Podman. Example: curl --unix-socket /run/podman/podman.sock -H 'content-type: application/json' \ -sf http://localhost/containers/json |