VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2026-10-12T12:28:02+00:00 2026-10-12T12:28:02+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2026-10-12T12:28:02+00:00 urn:sha1:ce2baa3179d655345a8381a842128762804ff00c debian: T9455: drop exfat-fuse in favour of in-kernel exFAT driver 2026-10-12T10:08:59+00:00 Kyrylo Yatsenko hedrok@gmail.com 2026-10-12T10:08:59+00:00 urn:sha1:507625435cf70a6fd5ae9a26d8f19eac1a50d4ae pseudo-ethernet: T9253: fix anycast-gateway with shared MAC on bridge VLANs 2026-10-11T19:20:57+00:00 Christian Breunig christian@breunig.cc 2026-10-11T19:20:57+00:00 urn:sha1:713626a1978b40e0a818203e95a529f9fb32a228 container: T9401: add chown option to tmpfs mounts 2026-10-11T18:57:18+00:00 Christian Breunig christian@breunig.cc 2026-10-11T18:57:18+00:00 urn:sha1:1bd02305554643b698e254fcc725487b0d66b20f firewall: T9332: fix GeoIP source/destination nftables set name colli… 2026-10-11T18:54:19+00:00 Christian Breunig christian@breunig.cc 2026-10-11T18:54:19+00:00 urn:sha1:a3a16c61445e4f53cab9093b26cc7022181fd0b6 ospf: T9448: do not render metric-type when it is the default 2026-10-11T07:43:36+00:00 Christian Breunig christian@breunig.cc 2026-10-11T07:43:36+00:00 urn:sha1:e5568919ced157534e05374ae50822a4efd94517 The VyOS kernel ships the native exFAT driver (CONFIG_EXFAT_FS=m), so the userspace FUSE implementation is no longer needed. The exfatprogs tools for creating and checking filesystems are kept. The kernel options smoketest now verifies CONFIG_EXFAT_FS is enabled. 2026-10-10T15:49:31+00:00 Christian Breunig christian@breunig.cc 2026-10-10T15:49:31+00:00 urn:sha1:c8d344fd8954035c840a0991a97c6653a72c7c54 T9386: openvpn: reject AEAD fallback cipher with shared-secret-key 2026-10-09T16:25:23+00:00 Robert Navarro crshman@gmail.com 2026-10-09T02:10:20+00:00 urn:sha1:104791f05d493f4001ff092717f24bafbfae28e3 With metric-type 2 (the CLI default), every FRR reload deletes and re-adds "default-information originate" and every "redistribute" line under "router ospf". ospfd flushes the Type-5 LSAs on the delete and re-originates them right after, so neighbours can briefly lose the external routes on commits that do not touch OSPF. ospfd and ospf6d (for redistribute) write "metric-type 1" back to the running config and print nothing for type 2, their default. The templates render "metric-type 2", so frr-reload sees a different line on every reload. frrender now adds the XML default of metric-type to the OSPF and OSPFv3 dicts as xml_default_metric_type, for the default and every VRF instance. The templates render metric-type only when it differs from that default, so the generated config matches what FRR prints back. OSPFv3 default-information keeps rendering metric-type, as ospf6d prints it for both types. Add smoketests that read the generated config and vtysh for types 2, 1 and back to 2. Rename the "ptotocol" loop variable in test_protocols_ospf.py to "protocol", which the typos check flags on any change to this file. 2026-10-09T13:32:03+00:00 Antonio Quartulli antonio@mandelbit.com 2026-10-01T13:28:13+00:00 urn:sha1:0d49d1ba8dbfabb6c1a49216b69d79ed47b4a251 Static key mode only supports CBC, so OpenVPN refuses to start with an AEAD "data-ciphers-fallback" just like with an AEAD "encryption cipher". Reject it at commit time. 2026-10-09T13:02:37+00:00 John Estabrook jestabro@vyos.io 2026-10-09T13:02:37+00:00 urn:sha1:998fe8286fea7c2a0492fcf77ee87ae41597f0e8 config-management: T6304: Rewrite commit-archive location into a structured CLI