VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2026-10-13T14:40:38+00:00 2026-10-13T14:40:38+00:00 John Estabrook jestabro@vyos.io 2026-10-13T14:40:38+00:00 urn:sha1:9461df647df2a6608a2753cc5a0f21b50a209683 vpp: T9161: Fix smoketests failing on NICs capped at 1500 MTU 2026-10-12T10:08:59+00:00 Kyrylo Yatsenko hedrok@gmail.com 2026-10-12T10:08:59+00:00 urn:sha1:507625435cf70a6fd5ae9a26d8f19eac1a50d4ae pseudo-ethernet: T9253: fix anycast-gateway with shared MAC on bridge VLANs 2026-10-11T19:20:57+00:00 Christian Breunig christian@breunig.cc 2026-10-11T19:20:57+00:00 urn:sha1:713626a1978b40e0a818203e95a529f9fb32a228 container: T9401: add chown option to tmpfs mounts 2026-10-11T18:57:18+00:00 Christian Breunig christian@breunig.cc 2026-10-11T18:57:18+00:00 urn:sha1:1bd02305554643b698e254fcc725487b0d66b20f firewall: T9332: fix GeoIP source/destination nftables set name colli… 2026-10-11T18:54:19+00:00 Christian Breunig christian@breunig.cc 2026-10-11T18:54:19+00:00 urn:sha1:a3a16c61445e4f53cab9093b26cc7022181fd0b6 ospf: T9448: do not render metric-type when it is the default 2026-10-09T16:25:23+00:00 Robert Navarro crshman@gmail.com 2026-10-09T02:10:20+00:00 urn:sha1:104791f05d493f4001ff092717f24bafbfae28e3 With metric-type 2 (the CLI default), every FRR reload deletes and re-adds "default-information originate" and every "redistribute" line under "router ospf". ospfd flushes the Type-5 LSAs on the delete and re-originates them right after, so neighbours can briefly lose the external routes on commits that do not touch OSPF. ospfd and ospf6d (for redistribute) write "metric-type 1" back to the running config and print nothing for type 2, their default. The templates render "metric-type 2", so frr-reload sees a different line on every reload. frrender now adds the XML default of metric-type to the OSPF and OSPFv3 dicts as xml_default_metric_type, for the default and every VRF instance. The templates render metric-type only when it differs from that default, so the generated config matches what FRR prints back. OSPFv3 default-information keeps rendering metric-type, as ospf6d prints it for both types. Add smoketests that read the generated config and vtysh for types 2, 1 and back to 2. Rename the "ptotocol" loop variable in test_protocols_ospf.py to "protocol", which the typos check flags on any change to this file. 2026-10-09T13:32:03+00:00 Antonio Quartulli antonio@mandelbit.com 2026-10-01T13:28:13+00:00 urn:sha1:0d49d1ba8dbfabb6c1a49216b69d79ed47b4a251 Static key mode only supports CBC, so OpenVPN refuses to start with an AEAD "data-ciphers-fallback" just like with an AEAD "encryption cipher". Reject it at commit time. 2026-10-09T13:02:37+00:00 John Estabrook jestabro@vyos.io 2026-10-09T13:02:37+00:00 urn:sha1:998fe8286fea7c2a0492fcf77ee87ae41597f0e8 config-management: T6304: Rewrite commit-archive location into a structured CLI 2026-10-09T11:37:43+00:00 Nataliia Solomko natalirs1985@gmail.com 2026-10-09T11:19:11+00:00 urn:sha1:c254b0dca087083b77dea7dc3c8c3a797be7cf72 VPP now rejects an MTU above the NIC limit, but the CI NICs are capped at 1500, so tests using MTU 2500 on eth1 failed. The rejected commit also left a queued initial VPP dependency in the commit daemon, which the next commit ran with the old config, so every following test failed too. Pending initial dependents are now cleared before each script run in vyos-configd and vyos-commitd, and the tests use MTUs that fit any NIC. 2026-10-08T20:32:45+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2026-10-08T20:32:45+00:00 urn:sha1:4b022646b7657416b3429202784ffb280eac9c80 interfaces: T9152: Refactor source-validation to use vmaps