summaryrefslogtreecommitdiff
path: root/scripts
AgeCommit message (Collapse)Author
2021-12-05T1869: Install and Boot from RAID Doesn't WorkKim Hagen
2021-10-16gpg: T3879: fix signature validationChristian Poessinger
2021-09-06install-image: T2108: use minisign backup key if primary key failsChristian Poessinger
2021-09-06install-image: remove whitespaces after .Christian Poessinger
2021-09-03T1785: Deleting partitions on disks (Raid1) with default value 'no'Kim Hagen
the default was still set to "Yes"
2021-08-27T3351: Check for SHA256 filesLulu Cathrinus Grimalkin
Fall back to MD5 if SHA256 checksums could not be found Don't bother downloading .iso.sha256 files (cherry picked from commit 085d0148c3d7d22afc5ce4fc10750b67c8cdfe26)
2021-08-26install-image: T2108: verify image by using minisign over GPGChristian Poessinger
We will first download and try to verify the image using the generated minisign signature. If this fails, we try to retrieve the GPG signature file.
2021-08-08T169: Image install should put correct serial console device in created grub ↵Kim Hagen
menuentry
2021-08-06T1153: VyOS 1.2.0RC10, RAID-1, fresh install, unable to save configEquuleus ↵Kim
(#159) * add search for same drive size if more than 2 drives are installed * add ability to configure RAID-1 by selecting 2 drives * cleaning up sysconf/filecaps rights * cleaning up sysconf/filecaps rights xtables-monitor
2021-04-03migration: T2838: fix parsing of quoted config value for hw-idJohn Estabrook
(cherry picked from commit 6019ab063d8f26172ffc3993fa25a57fcd5782aa)
2021-01-17T671: cleanup rl-system and move components to better suited locationsChristian Poessinger
- CHanging sysctl values should be done by out generic file /etc/sysctl.d/30-vyatta-router.conf - NTP config must not be restored from from /opt as it is entirely rendered from scratch. (cherry picked from commit b74daed7c3d2e302426fd5c6ace7e299d4278ca0)
2021-01-04migration: T3161: move XorpConfigParser to vyatta-cfg-systemJohn Estabrook
The scripts: vyatta_net_name vyatta_interface_rescan still require XorpConfigParser; all other uses have been rewritten, or obviated. In order to retire the package vyatta-config-migrate in favor of keeping migration scripts in vyos-1x, we need to move this module into vyatta-cfg-system for use by the above mentioned scripts.
2021-01-04migration: T3161: remove scripts ec2-vyos-init, ec2-check.plJohn Estabrook
These scripts have been superseded by the cloud-init tools, and contain legacy references to XorpConfigParser.pm (via vyatta-cfg/scripts/vyatta-load-config.pl, via ConfigLoad.pm), which one would like to retire.
2020-12-22xdp: mount /sys/fs/bpf on startup for later map populationChristian Poessinger
2020-11-27vyatta-cfg: T2713: Return original permissions for config-auth files in updatesever-sever
2020-10-28image: T3027: do not rely on the ISO filename when calculating sha256 hashChristian Poessinger
Updating a running VyOS installation by using the "add system image" command pointing to https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso will break the validation due to filename missmatch. The root cause for this is the sha256 checksum file itself. It contains the hash and the filename used when hashing. When running "sha256sum --check" during the upgrade it expects the "real" filename when calculating and verifying the hash. The real filename differs when using the vyos-rolling-latest.iso symlink on the webserver as it will tell the running VyOS installation a different filename and the validation fails. This is now fixed by not depending on the filename when verifying the hash. We simply calculate the hash of the downloaded file and compare it to the has we saved inside the checksum file and totally ignore the filename itself.
2020-10-18image: T2992: automatically verify sha256 checksum on ISO downloadChristian Poessinger
Good: ===== vyos@vyos:~$ add system image http://foo.com/vyos-1.3-rolling-202010180826-amd64.iso Trying to fetch ISO file from http://foo.com/vyos-1.3-rolling-202010180826-amd64.iso % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 309M 100 309M 0 0 25.1M 0 0:00:12 0:00:12 --:--:-- 25.2M ISO download succeeded. Checking SHA256 (256-bit) checksum... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 106 100 106 0 0 26500 0 --:--:-- --:--:-- --:--:-- 26500 Found it. Verifying checksum... SHA256 checksum valid. Checking for digital signature file... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (22) The requested URL returned error: 404 Not Found Unable to fetch digital signature file. Do you want to continue without signature check? (yes/no) [yes] Bad: ==== vyos@vyos:~$ add system image http://foo.com/vyos-1.3-rolling-202010180826-amd64.iso Trying to fetch ISO file from http://foo.com/vyos-1.3-rolling-202010180826-amd64.iso % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 309M 100 309M 0 0 25.8M 0 0:00:11 0:00:11 --:--:-- 25.8M ISO download succeeded. Checking SHA256 (256-bit) checksum... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 106 100 106 0 0 9636 0 --:--:-- --:--:-- --:--:-- 9636 Found it. Verifying checksum... vyos-1.3-rolling-202010180826-amd64.iso: FAILED sha256sum: WARNING: 1 computed checksum did NOT match Signature check FAILED. Installation will not be performed. Exiting...
2020-09-26cfg-system: T2902: Fix regex that doesnt allow X in image namesever-sever
2020-09-23cfg-system: T2896: Fix DHCP interface lease file namesever-sever
2020-09-01Revert "init: refresh Kernel module dependencies"Christian Poessinger
This reverts commit c406852a0288f598a74a86cde553790f6a85537f.
2020-09-01init: refresh Kernel module dependenciesChristian Poessinger
2020-08-23Merge pull request #126 from sever-sever/T2423Christian Poessinger
conf-mode: T2423: Loadkey add insecure option
2020-08-23install-image: T2690: T2762: always run in default VRF unless specifiedChristian Poessinger
When you connect via SSH and run the "add system image" command, it is launched inside the VRF you are currently connected to. This might become confusing as the VRF context changes. Change command to always run in "default" vrf unless "add system image" command is invoked with the vrf option.
2020-08-04cronjob: T1194: clear config on bootChristian Poessinger
Config must be cleared on boot, otherwise if one configures a cronjob without explicit saving the config it will still be present on the next reboot.
2020-08-01install-image: T2690: add VRF support when installing new imagesChristian Poessinger
2020-08-01install-image: T2753: add named command line optionsChristian Poessinger
This makes it easier to add VRF support.
2020-07-23conf-mode: T2423: Loadkey add insecure optionsever-sever
2020-04-11grub: remove quiet option for better information gatheringChristian Poessinger
2020-02-23pppoe: T1318: Migrate pppoe interfaces to vyos-1xChristian Poessinger
2020-02-10banner: T2024: migrate "system login banner" to XML/Python representationChristian Poessinger
2020-02-05ssh: T631: remove sshd config manglingChristian Poessinger
The configuration of SSHd is rendered from a template each time the service changes. Thus it is not required that the boot process touches the config.
2020-02-05login: T1990: Migrate "system login" to XML/Python representationChristian Poessinger
2020-01-13install: T1940, fix unbootable EFI, 4kn compatibilitykroy
2019-12-28T1912: migrate 'system ip(v6)' subsystem to XML/PythonChristian Poessinger
2019-12-26T1903: Implement predefined interface naming for VMWareDmitriyEshenko
2019-12-06Merge branch 'current' of github.com:vyos/vyatta-cfg-system into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyatta-cfg-system: syslog: T1845: migration script support bumps system to 12 syslog: T1845: migration script support bumps system to 12 Revert "syslog: T1845 bumping system version for migration script" syslog: T1845 bumping system version for migration script Fix rootdev regex to support mmcblk devices geneve: T1799: add Generic Network Virtualization Encapsulation
2019-12-03Fix rootdev regex to support mmcblk devicesRobert Edström
2019-10-21Merge branch 'current' into equuleushagbard
Auto-merging scripts/rl-system.init Auto-merging scripts/install/install-image Auto-merging Jenkinsfile
2019-10-19T1743: do not generate ssh rsa1 host keysjjakob
2019-10-18[system-proxy]: T1741 - Add system wide proxy settinghagbard
2019-10-08install-image: T1718 - ISO check in /opt/vyatta/sbin/install-image faultyhagbard
2019-09-29net.ipv6.route.max_size = 262144Marek Isalski
The IPv6 DFZ is now approaching 80k routes. Time to bump VyOS's default up, because otherwise it is a nasty surprise that's tricky to debug.
2019-09-15Merge branch 'current' of github.com:vyos/vyatta-cfg-system into equuleusChristian Poessinger
* 'current' of github.com:vyos/vyatta-cfg-system: T1616: fix DHCPv6 script behaviour in op mode. openvpn: T1630: add system user openvpn vxlan: T1636: initial rewrite with XML and Python Makefile.am: fix after removing files for bridge and bonding bridge: T1615: remove old vyatta-bridge.pl bonding: T1614: increase config version from interfaces 1 -> 2 bonding: T1614: remove old style node.def files in favour of XML/Python rewrite bridge: T1556: migrate bridge config to XML/Python [tunnel] T1593: Added ip6gre encapsulation for tunnel interfaces loopback: T1601: rewrite using XML/Python definitions powerdns: T1595: add config migrator to remove 'listen-on' powerdns: T1524: support setting allow-from network dummy: T1580: rewrite in new style XML/Python
2019-09-06T1616: fix DHCPv6 script behaviour in op mode.Daniil Baturin
2019-09-04bridge: T1615: remove old vyatta-bridge.plChristian Poessinger
2019-09-04bonding: T1614: remove old style node.def files in favour of XML/Python rewriteChristian Poessinger
2019-08-15T1584: equuleus: buster: consistent grub options for live/installed imageJohn Estabrook
2019-07-31T1381: add dhclient config options for option 121 classless routes.Daniil Baturin
2019-07-31T1553: add 'noautologin' to boot parametersJohn Estabrook
Debian live-config (>= 5.0) will set the default to 'autologin' when booting in live mode, unless explicitly set.
2019-06-30Merge branch 'current' of https://github.com/vyos/vyatta-cfg-system into currentDaniil Baturin
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-05 13:49:02 +0000