VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2023-12-31T22:49:48+00:00 2023-12-31T22:49:48+00:00 Christian Breunig christian@breunig.cc 2023-12-30T22:25:20+00:00 urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465 We will use _ as CLI level divider. The XML definition filename and also the Python helper should match the CLI node. Example: set interfaces ethernet -> interfaces_ethernet.xml.in set interfaces bond -> interfaces_bond.xml.in set service dhcp-server -> service_dhcp-server-xml.in 2023-08-07T05:48:31+00:00 John Estabrook jestabro@vyos.io 2023-08-06T02:45:27+00:00 urn:sha1:d247419d8a00d8bae3adbe3df40fcb4e73d884f4 2023-07-14T20:18:36+00:00 Christian Breunig christian@breunig.cc 2023-07-14T20:18:36+00:00 urn:sha1:d1ca536da448749dff557f13ecae97b124026e96 * T5195: move run, cmd, call, rc_cmd helper to vyos.utils.process * T5195: use read_file and write_file implementation from vyos.utils.file Changed code automatically using: find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import read_file$/from vyos.utils.file import read_file/g' {} + find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import write_file$/from vyos.utils.file import write_file/g' {} + * T5195: move chmod* helpers to vyos.utils.permission * T5195: use colon_separated_to_dict from vyos.utils.dict * T5195: move is_systemd_service_* to vyos.utils.process * T5195: fix boot issues with missing imports * T5195: move dict_search_* helpers to vyos.utils.dict * T5195: move network helpers to vyos.utils.network * T5195: move commit_* helpers to vyos.utils.commit * T5195: move user I/O helpers to vyos.utils.io 2023-05-04T21:19:49+00:00 Christian Breunig christian@breunig.cc 2023-05-04T21:19:49+00:00 urn:sha1:11e25707683138d4a5a64a3717160edb84816182 2023-05-04T21:19:21+00:00 Christian Breunig christian@breunig.cc 2023-05-04T21:19:21+00:00 urn:sha1:5122049d9e69c9a7614fcb19637fe0e50aba0ccf 2023-03-28T15:16:07+00:00 Indrajit Raychaudhuri irc@indrajit.com 2023-03-27T08:56:13+00:00 urn:sha1:2bb5c5d0fd9ed07649b81a61e9c1a78a9f222405 This would allow using custom ports in name server operating on non- default port for forwarding zones. This is a follow-up to T5113 for sake of completeness and having consistent treatment of all name servers configured in PowerDNS recursor. Additionally, migrate `service dns forwarding domain example.com server` to `service dns forwarding domain foo3.com name-server` for consistency and reusability. 2023-03-27T06:42:38+00:00 Indrajit Raychaudhuri irc@indrajit.com 2023-03-25T23:51:34+00:00 urn:sha1:c6494f12f92746cc4603fceca6b1a22fed010b93 Support custom port for name-server forwarders that would allow using custom ports in name server forwarders to enable forwarding to alternative name servers (unbound, stubby, dnscrypt-proxy etc.) operating on non-default port. This would also allow using DNS Over TLS in PowerDNS Recursor 4.6 onwards (pdns doesn't support certificate check for validity yet) by enabling 'dot-to-port-853'. This is set by default if compiled in with DoT support. See: https://doc.powerdns.com/recursor/settings.html#dot-to-port-853 This also partially implements T921, T2195 (DoT without certificate check). Implementation details: - In 'dns/forwarding' configuration, 'name-server' now allows optional 'port' (defaults to 53). - Instead of modifying 'name-server-ipv4-ipv6.xml.i' to add optional 'port', a new file 'name-server-ipv4-ipv6-port.xml.i' has been used to avoid impacting other places where it is reused because not all of them honor ports (mostly VPN related). - The `host:port` entries to be used by PowerDNS recursor config are normalized eagerly at the point of loading VyOS `Config` instead of doing them lazily while rendering the Jinja2 template to keep the implementation less intrusive. The alternative would entail making quite a bit of change in how 'vyos-hostsd' processes 'static' 'name_servers' entries or persists their runtime states. 2022-07-07T10:36:34+00:00 Christian Poessinger christian@poessinger.com 2022-07-07T10:36:34+00:00 urn:sha1:ee603b3a0f9f3add72c1e5ac2277c013d40cf5a4 2022-07-05T10:05:44+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2022-07-04T18:16:06+00:00 urn:sha1:2bdf4798570222b57af2de2f0b443529abdc3feb rfc6147: DNS Extensions for Network Address Translation from IPv6 Clients to IPv4 Servers set service dns forwarding dns64-prefix 2001:db8:aabb::/96 2022-07-04T10:03:53+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2022-06-30T12:03:26+00:00 urn:sha1:9cda38bbc7ef5debbbdfba267a430d621e6da3d0 Ability to set wildcard record for authoritative-domain set authoritative-domain example.com records a any address 192.0.2.11 cat /run/powerdns/zone.example.com.conf * 300 A 192.0.2.11