VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp 2024-06-26T19:47:09+00:00 2024-06-26T19:47:09+00:00 Christian Breunig christian@breunig.cc 2024-06-26T19:13:43+00:00 urn:sha1:9473800055e0e1e9833f4a41c6d5d5a8a0d27399 Now that there is a build time validation that Config() is not instantiated twice in a config mode script, and also as there are no more direct calls on the my_set and my_delete binary, we can auto generate the list of helpers run by vyos-configd. 2024-06-24T14:16:31+00:00 khramshinr khramshinr@gmail.com 2024-05-29T13:46:20+00:00 urn:sha1:f6131611e15a644312e3c4baf5b8f6387c2930e7 Add CLI commands Add config Add conf_mode Add systemd config Add stunnel smoketests Add log level config 2024-06-20T20:32:15+00:00 Christian Breunig christian@breunig.cc 2024-06-20T20:30:40+00:00 urn:sha1:7e0e8101998a6c8de6cb93c42bfbf1278c13f226 Do no longer use my_set and my_delete as this prevents scripts beeing run under supervision of vyos-configd. 2024-06-17T18:00:13+00:00 Christian Breunig christian@breunig.cc 2024-06-17T18:00:13+00:00 urn:sha1:14dd6e5deeb7b3b0b81264bac06d92e86b5b91be T6489: Add support for CLI config scripts that change the underlaying working configuration 2024-06-16T07:22:28+00:00 Christian Breunig christian@breunig.cc 2024-06-15T19:40:04+00:00 urn:sha1:9e22ab6b2aee48029d3455f65880e45c558cf1da Wireless devices are subject to regulations issued by authorities. For any given AP or router, there will most likely be no case where one wireless NIC is located in one country and another wireless NIC in the same device is located in another country, resulting in different regulatory domains to apply to the same box. Currently, wireless regulatory domains in VyOS need to be configured per-NIC: set interfaces wireless wlan0 country-code us This leads to several side-effects: * When operating multiple WiFi NICs, they all can have different regulatory domains configured which might offend legislation. * Some NICs need additional entries to /etc/modprobe.d/cfg80211.conf to apply regulatory domain settings, such as: "options cfg80211 ieee80211_regdom=US" This is true for the Compex WLE600VX. This setting cannot be done per-interface. Migrate the first found wireless module country-code from the wireless interface CLI to: "system wireless country-code" 2024-06-15T06:16:23+00:00 Christian Breunig christian@breunig.cc 2024-06-15T06:03:37+00:00 urn:sha1:da29c9b3ab7b0cc23d64c8b033fc5a79c1b09174 2024-05-14T16:47:29+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2024-05-14T16:47:29+00:00 urn:sha1:7c438caa2c21101cbefc2eec21935ab55af19c46 Remove `service upnp` as it never worked as expected, nft rules do not integrated and custom patches do not seem like a suitable solution for now. Security: UPnP has been historically associated with security risks due to its automatic and potentially unauthenticated nature. UPnP devices might be vulnerable to unauthorized access or exploitation. 2024-05-01T18:55:57+00:00 Christian Breunig christian@breunig.cc 2024-05-01T18:55:57+00:00 urn:sha1:e7bb65894f86372dc0f6e8fd39b1628e0a224c68 When adding and removing VRF instances on the fly it was noticed that the vni statement under the VRF instance in FRR vanishes. This was caused by a race condition which was previously designed to fix another bug. The wierd design of a Python helper below the VRF tree to only generate the VNI configuration nodes is now gone and all is rendered in the proper place. 2024-01-01T20:30:03+00:00 Christian Breunig christian@breunig.cc 2024-01-01T20:30:03+00:00 urn:sha1:ad4958ff7b1a25564fcc6931d604288d7ff0a1d2 2024-01-01T20:28:09+00:00 Christian Breunig christian@breunig.cc 2024-01-01T20:28:09+00:00 urn:sha1:dd2a1955d66926dc4a987bad0acc52dcc6f5d433