VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2026-08-11T18:02:14+00:00 2026-08-11T18:02:14+00:00 Christian Breunig christian@breunig.cc 2026-08-11T18:02:14+00:00 urn:sha1:625d03bfcb12f4b2971590f6b0266c6c37d2f12b pki: T9135: derive ACME certificate chains from disk 2026-08-11T15:53:51+00:00 John Estabrook jestabro@vyos.io 2026-08-11T15:53:51+00:00 urn:sha1:7767004a4d2368dd7f9c6b3876f312944a4ce862 firewall: T8221: Add last-used option to firewall rules 2026-08-11T07:22:11+00:00 Kyrylo Yatsenko hedrok@gmail.com 2026-08-11T07:22:11+00:00 urn:sha1:dadeaf21e70712ecd617ddd4850bc8e9f599a973 qos: T9134: Fix commit crash when classes match different protocols 2026-08-10T19:04:07+00:00 Christian Breunig christian@breunig.cc 2026-08-09T18:12:53+00:00 urn:sha1:e0d7cd46336f104869fb73001f010a59f2b70b04 The PKI testsuite's setUpClass() already clears out pki and service https so it can run on a live system, but left an existing load-balancing haproxy configuration in place, which could reference certificates the tests then delete out from under it. 2026-08-10T13:43:08+00:00 John Estabrook jestabro@vyos.io 2026-08-10T13:43:08+00:00 urn:sha1:b361f499edbca79703157b943201547b52f0e453 container: T7736: fix smoketest failures caused by netavark/aardvark-dns IPv6 DAD race 2026-08-08T16:46:36+00:00 Kyrylo Yatsenko hedrok@gmail.com 2026-08-08T16:46:36+00:00 urn:sha1:f6a1ff94f02282bd018b9b49ae1a9812619ec7ba flow-accounting: T9122: bind NetFlow export to the configured VRF 2026-08-07T21:17:32+00:00 Christian Breunig christian@breunig.cc 2026-08-07T21:04:22+00:00 urn:sha1:7f9853b2a2778e79ba60a8e294c84ad4f00eb172 On a live system, prevent that the smoketest default route overwrites any other dynamically learned route by defining a higher distance. 2026-08-07T21:17:32+00:00 Christian Breunig christian@breunig.cc 2026-08-07T21:00:09+00:00 urn:sha1:ccb9703ef5c382199c823428b90a458cd6ab7027 VyOSUnitTestSHIM.tearDownClass() restores the pre-test configuration from /tmp/vyos-smoketest-save but never removed the file afterwards. Since it is a fixed, shared path, whichever user ran a smoketest last ends up owning it with no group/other write permission - the next user to run any smoketest on the same box gets a hard "Permission denied" writing to that path, even though nothing else is actually wrong. 2026-08-07T21:17:28+00:00 Christian Breunig christian@breunig.cc 2026-08-07T20:59:54+00:00 urn:sha1:dabeff277774190d047155be6566da184b2b3e8f netavark assigns the IPv6 gateway address to a container "pod-*" bridge and immediately invokes aardvark-dns to bind its DNS listener to it. While the address is "tentative" during Duplicate Address Detection, that bind() fails with EADDRNOTAVAIL and container startup fails for any IPv6-enabled network. The kernel only skips DAD for an address if both "all" and the specific interface's own accept_dad are disabled at the moment the interface is created. A per-interface override is always either too late for a network's first-ever container - as the network can only be created in-time and not explicitly before starting the first container. 2026-08-06T15:33:27+00:00 Daniil Baturin daniil@vyos.io 2026-08-06T15:33:27+00:00 urn:sha1:278fba204200f02bb461f786f889b40dc38a26f6 qos: T8996: Implement set-dscp packet remarking for shaper policy