vyos-1x.git/smoketest/configs, branch feature/T9082-codeql-cpp

bgp: T8865: Reject `vni` sub-block in VRF l2vpn-evpn when `advertise-all-vni` is globally active

2026-06-26T07:28:05+00:00

When `advertise-all-vni` is configured in the global/default BGP instance, VyOS generated a `vni ` sub-block under each VRF BGP `address-family l2vpn evpn` context. This conflicts with advertise-all-vni: FRR already owns all kernel VNIs and returns `% Failed to create VNI` when frr-reload.py attempts to apply the VRF-level vni sub-block. FRR then performs an early exit from config processing, silently dropping the entire l2vpn evpn address-family for all subsequent VRF BGP instances.

bgp: T8223: Prevent `advertise-all-vni` in multiple BGP VRF instances simultaneously

2026-06-09T15:41:56+00:00

FRR only allows one BGP instance to hold `advertise-all-vni` at a time (FRR issue #9405). When a default BGP instance is present it is always started before named VRF instances, so if a named VRF holds the flag FRR silently rejects it on every boot (regardless of default EVPN config), causing the running config to diverge from what is stored in VyOS. Enforce the following policy in verify(): - Default BGP instance may always hold `advertise-all-vni`. - A named VRF may hold it only when no default BGP instance exists. - Only one BGP instance (default or named VRF) may hold it at a time. The default BGP verify path additionally scans dependent VRFs so that adding or modifying the default BGP instance while a named VRF already holds the flag is caught even when the VRF node is not part of the current commit.

configtest: T8457: bgp link-state address family

2026-04-16T05:19:56+00:00

Very simple configuration with link-state address family check.

serial: T8375: add CLI option to explicitly set kernel console

2026-04-09T18:54:06+00:00

Previously, VyOS hardcoded the kernel boot log console to either ttyS0 or tty0, with no post-install CLI method to change it (manual GRUB edits were required). This commit adds a new CLI node: system console device kernel When set, the selected serial console is used as the kernel boot console. When removed, the kernel boot console falls back to tty0.

Merge pull request #5103 from alexandr-san4ez/T8281-current

2026-04-07T12:50:06+00:00

firewall: T8281: Normalize network prefixes in rule configuration

2026-04-06T12:18:12+00:00

Convert non-canonical IPv4 and IPv6 prefixes in 'source/destination address' fields to proper network addresses (e.g. 10.10.10.1/30 -> 10.10.10.0/30). This prevents invalid configurations and ensures consistent prefix handling.

firewall: T8282: Normalize invalid network-group names during migration

2026-04-03T13:03:33+00:00

Replace unsupported characters (e.g. `,`, `+`) with `_` when migrating from 1.3.x and handle name collisions safely to prevent commit failures.

vpp: T8327: Migrate bridge interface to 'interfaces vpp bridge'

2026-03-03T15:52:40+00:00

vpp: T8327: Remove support for GRE "point-to-multipoint" mode

2026-03-02T17:27:55+00:00

Disabled "point-to-multipoint" mode for GRE interfaces, along with related "mode" node. This mode relies on the 'teib' feature, which is not implemented yet.

vpp: T8325: Migrate gre interface to 'interfaces vpp gre'

2026-03-02T16:52:09+00:00