vyos-1x.git/op-mode-definitions, branch rolling

pki: T9135: add "show pki ca/certificate text" command

2026-08-10T19:34:19+00:00

"show pki ca/certificate " only ever offered PEM output, which isn't practical for a human to actually read. Add a "text" form that runs the certificate through OpenSSL's own "-text" formatter, the same human-readable breakdown "openssl x509 -text" produces.

op-mode: T9135: add CLI tab-completion for existing CA/certificate names

2026-08-10T19:09:13+00:00

"import pki ca " and "import pki certificate " only ever offered a literal "" hint, never the names of CAs/certificates already present in the running configuration - useful when re-importing an updated certificate under its existing name, not just when adding a brand new one.

op-mode: T9135: allow importing a CA certificate from a remote URL

2026-08-10T19:04:07+00:00

The path argument to the CA import command now also accepts a remote URL (http, https, ftp, sftp, scp, tftp, ...), detected by scheme, in addition to a local file path. Makes it convenient to pull a well-known public intermediate directly by URL instead of downloading and pasting PEM content by hand.

container: T7736: give container veths a deterministic host_interface_name

2026-08-04T18:36:28+00:00

Podman's default "vethN" auto-naming for a container's host-side veth can collide with VyOS's own "virtual-ethernet vethN" interfaces. Bump the minimum Podman dependency to 5.8 (which supports "host_interface_name" network connect option) and use it to name every non-macvlan container network attachment "veth-" instead, eliminating the collision by construction. Container names too long to fit are shortened to a recognizable prefix plus a short hash of the full name; verify() rejects the rare case where two containers still generate the same interface name. Add "show container interface" to display the resulting name-to-container mapping.

op-mode: T9009: add "show log priority " command

2026-07-01T19:01:16+00:00

op-mode: T9009: rename "monitor log level" to priority to match journalctl

2026-07-01T19:01:14+00:00

op-mode: T8372: add "show log facility " command

2026-06-29T14:58:53+00:00

op-mode: T8372: improve authentication logging journalctl command

2026-06-29T14:58:53+00:00

Instead of passing environment variables now pass proper CLI arguments.

geoip: T8987: Support updates via source-address/vrf

2026-06-25T14:19:06+00:00

op-mode: T9009: extend "monitor log" with filter level

2026-06-20T21:17:00+00:00

journalctl captures all syslog priority levels; filtering happens at query time via -p . The existing monitor log command always shows all priorities. A "monitor log filter " sub-command lets operators tail the journal at a specific minimum severity without having to remember journalctl flags. "journalctl -p " shows messages at that level and above (i.e., lower numeric severity values are always included — warning also shows err, crit, alert, emerg).