VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2026-06-18T14:19:54+00:00 2026-06-18T14:19:54+00:00 Christian Breunig christian@breunig.cc 2026-06-18T14:19:54+00:00 urn:sha1:5566e3392db808839dd93a035b21b6f13a551da5 firewall: T8546: Fix conntrack_required for global state-policy 2026-06-17T11:28:38+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2026-06-17T09:04:18+00:00 urn:sha1:6525f3924cf7ee529e87597e0f48f4b89370a14d 2026-06-16T18:24:44+00:00 Christian Breunig christian@breunig.cc 2026-06-16T18:24:44+00:00 urn:sha1:fa853ed8f25b5b9bf396d6e819b2c6259e7f5f42 Replace two-word "can not" / "Can not" with "cannot" across comments, ConfigError messages, CLI help text, and op-mode output. Standard SNMP MIB files under mibs/ are left unchanged. 2026-04-21T04:13:21+00:00 Christian Breunig christian@breunig.cc 2026-04-19T20:45:50+00:00 urn:sha1:754635c257b1860ce393cdc342c1b7ca7e65da1f Interface names can contain dots (e.g. VLAN subinterfaces like eth0.10), which conflicts with sysctl's dot-separated key syntax. Change sysctl_read() and sysctl_write() to take key components as a list and normalize each component by replacing . with / before invoking sysctl. This fixes sysctl lookups/updates for VLAN subinterfaces. Extend the SR-TE smoketest to cover a VLAN subinterface. Previous error raising this issue: vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/10/seg6_enabled: No such file or directory vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/201/seg6_enabled: No such file or directory 2026-03-27T15:00:17+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2026-03-27T14:43:47+00:00 urn:sha1:139b0841f8242a5c6ebdafb37380c1fb78342aae Fix typos and mistakes No functional changes 2026-01-21T19:45:55+00:00 Christian Breunig christian@breunig.cc 2026-01-21T19:45:55+00:00 urn:sha1:774de4b11330e7d3d30ddf6af0ad75e8be0f7bb3 T7664: support FRR 10.5 2026-01-12T21:17:50+00:00 Kyrylo Yatsenko hedrok@gmail.com 2025-12-28T15:21:11+00:00 urn:sha1:2471f686979fd83bd015f124b6faa66f27b8c9ba In FRR 10.5 ip protocols * connected * kernel * local * table * table-direct are removed. First three in fb8e399e4f66d09780f176fbecb99168089e64eb, table* in 7fd030504be060387694e8a2af7f19ddd7dee39d. In `ip protocols`, `ipv6 protocols` and `vrf` VyOS supports * connected * kernel * table Remove these from CLI, add migration scripts, update tests. 2026-01-10T20:28:16+00:00 Christian Breunig christian@breunig.cc 2026-01-10T20:26:07+00:00 urn:sha1:a2f54d4bf139fa15e47df9422be7dc5edb8be279 Check if the VRF which is about to be removed is referenced in any PBR rule, where any is one or more of route, route6, local-route or local-route6. 2025-11-12T12:14:49+00:00 Oleksandr Kuchmystyi o.kuchmystyi@vyos.io 2025-11-10T10:08:30+00:00 urn:sha1:b63388c8125f542e58e961722ded84b137fb4bdf When deleting the 'protocols' node under a VRF, a `KeyError` was raised in `frrender.py` because the 'protocols' dictionary key was missing when attempting to update protocol states. This prevented configuration commits from completing successfully. 2025-11-06T20:44:05+00:00 Christian Breunig christian@breunig.cc 2025-11-06T20:33:59+00:00 urn:sha1:da679f0cf8fe048bae7d648a4f447db47032f3c0 The original VRF DHCP test case, introduced in commit 186900f7165b2 ("smoketest: T7927: test DHCP route preservation"), used a fixed delay of 8 seconds to wait for the DHCP server and client to initialize. This approach was unreliable and could cause unnecessary test delays. Since commit 354517677f ("wlb: T7977: Updated smoketest to validate nft vmap weight buckets"), the "vyos.utils.misc.wait_for()" helper provides a more efficient busy-wait loop with an early-exit condition. This test case now uses wait_for() to detect when the DHCP-assigned default route becomes available, eliminating the fixed sleep and reducing test runtime.