summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-01-17T671: cleanup rl-system and move components to better suited locationsChristian Poessinger
- CHanging sysctl values should be done by out generic file /etc/sysctl.d/30-vyatta-router.conf - NTP config must not be restored from from /opt as it is entirely rendered from scratch.
2021-01-14T671: re-add removed restricted-shell scriptChristian Poessinger
Commit ac2586bc ("T671: remove apparently unused scripts") dropped the restricted-shell helper script which is not referenced by any other VyOS/Vyatta shell script, but rather directly from C code [1]. Restore the file. [1] https://github.com/vyos/libpam-radius-auth/blob/76ad405d374f70812/src/radius_shell.c#L125-L129
2021-01-08Merge pull request #136 from dmbaturin/remove-unused-scriptsChristian Poessinger
T671: remove apparently unused scripts.
2021-01-08T671: remove apparently unused scripts.Daniil Baturin
2021-01-04Merge pull request #135 from jestabro/T3161Daniil Baturin
migration: T3161: move XorpConfigParser.pm; remove ConfigLoad.pm
2020-12-30migration: T3161: remove scripts ec2-vyos-init, ec2-check.plJohn Estabrook
These scripts have been superseded by the cloud-init tools, and contain legacy references to XorpConfigParser.pm (via vyatta-cfg/scripts/vyatta-load-config.pl, via ConfigLoad.pm), which one would like to retire.
2020-12-30migration: T3161: move XorpConfigParser to vyatta-cfg-systemJohn Estabrook
The scripts: vyatta_net_name vyatta_interface_rescan still require XorpConfigParser; all other uses have been rewritten, or obviated. In order to retire the package vyatta-config-migrate in favor of keeping migration scripts in vyos-1x, we need to move this module into vyatta-cfg-system for use by the above mentioned scripts.
2020-12-28debian: cleanup vyatta-cfg-system.postinstChristian Poessinger
VyOS requires all system services to be disabled by default, this is a second implementation of the same solution. We should stick with the general solution in [1]. [1]: https://github.com/vyos/vyos-build/blob/current/data/live-build-config/hooks/live/18-enable-disable_services.chroot
2020-12-28debian: ddclient: T757: migrate dependency to vyos-1xChristian Poessinger
2020-12-22xdp: mount /sys/fs/bpf on startup for later map populationChristian Poessinger
2020-12-20ethernet: T3140: bump config version 17 -> 18Christian Poessinger
2020-12-08Merge pull request #133 from jack9603301/currentChristian Poessinger
interfaces: T3112: bump config version 16 -> 17
2020-12-07interfaces: T3112: bump config version 16 -> 17jack9603301
2020-12-04interfaces: T3112: bump config version 15 -> 16Christian Poessinger
2020-11-27Merge pull request #132 from sever-sever/T2713Christian Poessinger
vyatta-cfg: T2713: Return original permissions for config-auth files
2020-11-27vyatta-cfg: T2713: Return original permissions for config-auth files in updatesever-sever
2020-11-21system: T3078: bump config version 19 -> 20Christian Poessinger
2020-11-21interfaces: T3048 bump config version 19 -> 20Christian Poessinger
2020-11-12Debian: T1579: drop dependency on ifupdownChristian Poessinger
This is no longer required as we take care about the interfaces by ourselfs through Python vyos.ifconfig module.
2020-11-03interfaces: T3043: bump interfaces version 13 -> 14Christian Poessinger
2020-10-28image: T3027: do not rely on the ISO filename when calculating sha256 hashChristian Poessinger
Updating a running VyOS installation by using the "add system image" command pointing to https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso will break the validation due to filename missmatch. The root cause for this is the sha256 checksum file itself. It contains the hash and the filename used when hashing. When running "sha256sum --check" during the upgrade it expects the "real" filename when calculating and verifying the hash. The real filename differs when using the vyos-rolling-latest.iso symlink on the webserver as it will tell the running VyOS installation a different filename and the validation fails. This is now fixed by not depending on the filename when verifying the hash. We simply calculate the hash of the downloaded file and compare it to the has we saved inside the checksum file and totally ignore the filename itself.
2020-10-19Merge pull request #131 from c-po/sha256-verifyChristian Poessinger
image: T2992: automatically verify sha256 checksum on ISO download
2020-10-18image: T2992: automatically verify sha256 checksum on ISO downloadChristian Poessinger
Good: ===== vyos@vyos:~$ add system image http://foo.com/vyos-1.3-rolling-202010180826-amd64.iso Trying to fetch ISO file from http://foo.com/vyos-1.3-rolling-202010180826-amd64.iso % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 309M 100 309M 0 0 25.1M 0 0:00:12 0:00:12 --:--:-- 25.2M ISO download succeeded. Checking SHA256 (256-bit) checksum... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 106 100 106 0 0 26500 0 --:--:-- --:--:-- --:--:-- 26500 Found it. Verifying checksum... SHA256 checksum valid. Checking for digital signature file... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (22) The requested URL returned error: 404 Not Found Unable to fetch digital signature file. Do you want to continue without signature check? (yes/no) [yes] Bad: ==== vyos@vyos:~$ add system image http://foo.com/vyos-1.3-rolling-202010180826-amd64.iso Trying to fetch ISO file from http://foo.com/vyos-1.3-rolling-202010180826-amd64.iso % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 309M 100 309M 0 0 25.8M 0 0:00:11 0:00:11 --:--:-- 25.8M ISO download succeeded. Checking SHA256 (256-bit) checksum... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 106 100 106 0 0 9636 0 --:--:-- --:--:-- --:--:-- 9636 Found it. Verifying checksum... vyos-1.3-rolling-202010180826-amd64.iso: FAILED sha256sum: WARNING: 1 computed checksum did NOT match Signature check FAILED. Installation will not be performed. Exiting...
2020-10-04pppoe-server: T2953: bump config version to 5Christian Poessinger
2020-10-02sstp: T2953: bump config version to 3Christian Poessinger
2020-09-26Merge pull request #129 from sever-sever/T2902Daniil Baturin
cfg-system: T2902: Fix regex that doesnt allow X in image name
2020-09-26cfg-system: T2902: Fix regex that doesnt allow X in image namesever-sever
2020-09-25syslog: T2899: shift system config version +1 to allow for cruxJohn Estabrook
2020-09-23Merge pull request #128 from sever-sever/T2896Daniil Baturin
cfg-system: T2896: Fix DHCP interface lease file name
2020-09-23cfg-system: T2896: Fix DHCP interface lease file namesever-sever
2020-09-20T2903: T2905: increase config-version for new migratorChristian Poessinger
2020-09-01Revert "init: refresh Kernel module dependencies"Christian Poessinger
This reverts commit c406852a0288f598a74a86cde553790f6a85537f.
2020-09-01init: refresh Kernel module dependenciesChristian Poessinger
2020-08-26pppoe-server: T2829: migrate config from version 3 to 3 (mppe node)Christian Poessinger
2020-08-23Merge pull request #126 from sever-sever/T2423Christian Poessinger
conf-mode: T2423: Loadkey add insecure option
2020-08-23install-image: T2690: T2762: always run in default VRF unless specifiedChristian Poessinger
When you connect via SSH and run the "add system image" command, it is launched inside the VRF you are currently connected to. This might become confusing as the VRF context changes. Change command to always run in "default" vrf unless "add system image" command is invoked with the vrf option.
2020-08-23cfg-version: T2677: increase interface version from 11 to 12Christian Poessinger
Optimize CLI interface for PD configuration
2020-08-07Merge pull request #127 from runborg/armfixDaniil Baturin
T2765: arm: vyatta-cfg-system is dependent on a amd64 only package
2020-08-06T2765: arm: vyatta-cfg-system is dependent on a amd64 only packageRunar Borge
The vyatta-cfg-system package is dependent on the grub-efi-amd64-bin package to be installed. This makes it unable to be built for any other platform as the package is amd64 only. This commit changes the dependency to be a amd64 dependency only, thouse it will not be present on other architectures
2020-08-04cronjob: T1194: clear config on bootChristian Poessinger
Config must be cleared on boot, otherwise if one configures a cronjob without explicit saving the config it will still be present on the next reboot.
2020-08-01install-image: T2690: add VRF support when installing new imagesChristian Poessinger
2020-08-01install-image: T2753: add named command line optionsChristian Poessinger
This makes it easier to add VRF support.
2020-07-23conf-mode: T2423: Loadkey add insecure optionsever-sever
2020-07-11snmp: T2687: increase config version form 1 to 2Christian Poessinger
2020-07-07ssh: T2691: increase config version to 2Christian Poessinger
2020-06-25tunnel: T2633: fix generated package containing .git folderChristian Poessinger
Commit a8f66736 ("tunnel: T2633: migrate to vyos-1x") unfortunately did not remove all files and produced an invalid DEB containing the .git directory for instance.
2020-06-23tunnel: T2633: migrate to vyos-1xChristian Poessinger
2020-06-23Jenkins: T2625: migrate to build libraryChristian Poessinger
2020-06-22Merge pull request #125 from jjakob/T2486-dns-hostsd-config-versionChristian Poessinger
T2486: increase dns-forwarding and system config versions
2020-06-11system: T2486: increase config version to 18Jernej Jakob
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-15 05:21:17 +0000