VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=1.3.5 2023-11-30T13:58:39+00:00 2023-11-30T13:58:39+00:00 Daniil Baturin daniil@baturin.org 2023-11-30T13:58:39+00:00 urn:sha1:ad72670a1f7410a3c4a7e2021f0b7511156f5850 The new verification code prevents it from being used, but it's not a reason to keep it 2023-09-18T14:34:14+00:00 Nicolas Fort nicolasfort1988@gmail.com 2023-09-18T14:34:14+00:00 urn:sha1:70f0a6142cc67271e34cf3816490fc8dae784a79 2023-09-04T15:51:00+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-09-04T15:51:00+00:00 urn:sha1:500d59cb1fe12916ae529fa20860f1518d68244b Checks if an IPv6 address on a specific network interface is in the tentative state. IPv6 tentative addresses are not fully configured and are undergoing Duplicate Address Detection (DAD) to ensure they are unique on the network. inet6 2001:db8::3/125 scope global tentative It tentative state the group enters in FAULT state. Fix it. 2023-08-28T19:21:14+00:00 Christian Breunig christian@breunig.cc 2023-08-28T19:21:14+00:00 urn:sha1:47d9c8067135b97bc1fbc5450dc5fa9b8e65e345 2023-09-01T06:29:12+00:00 Christian Breunig christian@breunig.cc 2023-08-23T18:14:37+00:00 urn:sha1:396329cc9a2419c5be8ddd0bc8fbde67fdcb03fa This is a workaround for the priority inversion from T5492 ("CLI node priority is not inversed on node deletion"). As this is a corner case bug that's only triggered if an interface is removed from a VRF and also the VRF is removed in one commit, priorities are not honored. Thus we implement this workaround which stop the DHCP(v6) client processes on the VRF associated interfaces to get out the DHCP RELEASE message before interfaces are shut down. (cherry picked from commit 005151f77be5cf999689cfd03620bbc39df59018) 2023-08-30T15:13:31+00:00 Daniil Baturin daniil@baturin.org 2023-01-12T12:18:15+00:00 urn:sha1:a8777563f19fe5f9f190b96a61b6bab8cdcd58d2 in vyos.util.colon_separated_to_dict (cherry picked from commit fb7f162f61522127ca72adffd6802797b136a99a) 2023-08-25T12:12:29+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-08-25T12:12:29+00:00 urn:sha1:9763154d99f7852e3fd8a50f8ecaf10b27b4ad0f Add interface type veth (Virtual ethernet) One of the usecases it's interconnect different vrf's and default vrf via bridge set interfaces virtual-ethernet veth0 peer-name 'veth1010' set interfaces virtual-ethernet veth1010 address '10.0.0.10/24' set interfaces virtual-ethernet veth1010 peer-name 'veth0' set interfaces virtual-ethernet veth1010 vrf 'foo' set interfaces bridge br0 address '10.0.0.1/24' set interfaces bridge br0 member interface veth0 vyos@r1:~$ ping 10.0.0.10 count 1 PING 10.0.0.10 (10.0.0.10) 56(84) bytes of data. 64 bytes from 10.0.0.10: icmp_seq=1 ttl=64 time=0.082 ms 2023-08-01T11:14:02+00:00 Christian Breunig christian@breunig.cc 2023-05-28T19:14:42+00:00 urn:sha1:58a20e42087cbb7a1b3b4725fa40fd15a31bb4ed process_named_running() was introduced in commit 16b2fc8fc4ca ("dns-forwarding: T2298: fix path to control file") and thus remained more or less unchanged. Smoketests use process_named_running() heavily and might spawn multiple processes with the same name but ifferent options (e.g. dhcp6c or dhclient) and it was yet not possible to properly filter on the "real-deal" like the process bound to a given interface. One can now optionally specify a string that is searched inside the command line argument list of the process. Example: >>> process_named_running('dhcp6c', 'veth0') ['/usr/sbin/dhcp6c', '-D', '-k', '/run/dhcp6c/dhcp6c.veth0.sock', '-c', '/run/dhcp6c/dhcp6c.veth0.conf', '-p', '/run/dhcp6c/dhcp6c.veth0.pid', 'veth0'] 4215 >>> process_named_running('dhcp6c', 'veth1') ['/usr/sbin/dhcp6c', '-D', '-k', '/run/dhcp6c/dhcp6c.veth1.sock', '-c', '/run/dhcp6c/dhcp6c.veth1.conf', '-p', '/run/dhcp6c/dhcp6c.veth1.pid', 'veth1'] 4253 Where the debug list returned is the commandline searched. (cherry picked from commit 9c677c81be6a6e62958c73b038c2a36f1f629108) 2023-07-21T14:52:53+00:00 zsdc taras@vyos.io 2023-07-21T13:38:41+00:00 urn:sha1:aab730c57542fdd64665ea5c4158a5e7d2e8ac76 - added timeout to socket creating - added skipping SSH fingerprint check with a negative result if a console is not interactive - replaced tracebacks with human-readable error messages - suppressed warnings from `cryptography` used by `paramiko` 2023-06-25T18:25:30+00:00 Christian Breunig christian@breunig.cc 2023-06-25T18:09:31+00:00 urn:sha1:c77e641c521c03b6098613833fe22e09b11ad23f (cherry picked from commit ca7c063666c038d104082542f04ead6062e79246)