VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2026-10-11T19:20:57+00:00 2026-10-11T19:20:57+00:00 Christian Breunig christian@breunig.cc 2026-10-11T19:20:57+00:00 urn:sha1:713626a1978b40e0a818203e95a529f9fb32a228 container: T9401: add chown option to tmpfs mounts 2026-10-09T13:02:37+00:00 John Estabrook jestabro@vyos.io 2026-10-09T13:02:37+00:00 urn:sha1:998fe8286fea7c2a0492fcf77ee87ae41597f0e8 config-management: T6304: Rewrite commit-archive location into a structured CLI 2026-10-08T06:04:55+00:00 Christian Breunig christian@breunig.cc 2026-10-08T06:04:55+00:00 urn:sha1:4bc4755d4279066e8a580bdc1f018c4b53b08cad bgp: T9410: add route-map vrf import under ipv6-unicast 2026-10-08T05:40:43+00:00 Christian Breunig christian@breunig.cc 2026-10-08T05:40:43+00:00 urn:sha1:49c898a151779151dcd544e3b3d261cbc3265677 router-advert: T9413: add no-remove-on-exit and no-flush-* options 2026-10-07T22:23:34+00:00 Robert Navarro crshman@gmail.com 2026-10-07T04:02:47+00:00 urn:sha1:dd82e3b98f850d5c61f0779c3e53b972a8581711 On shutdown radvd sends a final RA with router lifetime 0 and announces its RDNSS and DNSSL entries with lifetime 0. On a VRRP pair that sends RAs from a shared source address (source-address fe80::1), hosts read the zero router lifetime as the shared router going away and remove their default route until the backup's next RA. On my routers that was 1.6 s of IPv6 loss when the master rebooted. radvd controls this with RemoveAdvOnExit, FlushRDNSS and FlushDNSSL, all defaulting to on. Expose them per interface: set service router-advert interface <if> no-remove-on-exit set service router-advert interface <if> no-flush-name-server set service router-advert interface <if> no-flush-dnssl The directives are only rendered when the options are set, so the generated radvd.conf is unchanged for existing configurations. 2026-10-07T19:16:51+00:00 Landry JUGE landry@netario.fr 2026-10-07T19:16:51+00:00 urn:sha1:d4e09b53fd246e616abf50fcbea177509fa68335 The ipv4-unicast address family has 'route-map vrf import' to filter the VRF route leak; ipv6-unicast did not, so an IPv6 leak could not be filtered. The template is already AFI-generic: only the CLI node was missing. 2026-10-07T18:04:21+00:00 Christian Breunig christian@breunig.cc 2026-10-07T18:04:21+00:00 urn:sha1:58ccdee2d255f4e952322467902f7d69b4f828fa openvpn: T9370: add chacha20poly1305 data cipher 2026-10-07T17:42:07+00:00 Christian Breunig christian@breunig.cc 2026-10-07T17:42:07+00:00 urn:sha1:c5fcf4bcde6582f963e1fb0fb884bfe75bcc8b49 bgp: T9404: do not render "bgp default local-preference" when the value is 100 2026-10-07T15:41:58+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2026-10-07T15:41:58+00:00 urn:sha1:cad6115d7a767f6ba398cc902b25072a832b05b9 T9351: Accel-PPP-NG: Add CLI support for Message Authenticator attribute in Access packets (Blast-RADIUS mitigation) 2026-10-07T13:45:58+00:00 Nataliia Solomko natalirs1985@gmail.com 2026-09-25T13:51:50+00:00 urn:sha1:575f265daf973428ed1b910f91fb124615fbebd4 Replace the free-form 'commit-archive location <url>' leafNode with a structured, per-destination tagNode: `set system config-management commit-archive location <name> <protocol> \ authentication { username | password } | server | port | path` Each location selects exactly one transport protocol (scp, sftp, ssh, ftp, ftps, http, https, git, tftp). 'git' additionally accepts a 'transport' (https/http/ssh, default https). 'source-address' and 'vrf' stay under 'commit-archive' and apply to every location, as before.