VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp 2023-12-31T22:49:48+00:00 2023-12-31T22:49:48+00:00 Christian Breunig christian@breunig.cc 2023-12-30T22:25:20+00:00 urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465 We will use _ as CLI level divider. The XML definition filename and also the Python helper should match the CLI node. Example: set interfaces ethernet -> interfaces_ethernet.xml.in set interfaces bond -> interfaces_bond.xml.in set service dhcp-server -> service_dhcp-server-xml.in 2023-11-02T20:11:18+00:00 Christian Breunig christian@breunig.cc 2023-11-02T19:37:57+00:00 urn:sha1:2fc8738bc9c2fb6364a22d86079e8635cee91949 Changing the public key of a peer (updating the key material) left the old WireGuard peer in place, as the key removal command used the new key. WireGuard only supports peer removal based on the configured public-key, by deleting the entire interface this is the shortcut instead of parsing out all peers and removing them one by one. Peer reconfiguration will always come with a short downtime while the WireGuard interface is recreated. 2023-08-17T19:53:50+00:00 Christian Breunig christian@breunig.cc 2023-08-17T19:53:50+00:00 urn:sha1:49f25c568c91750e06bb982ae0321d4448fbddbb wireguard: T5409: Added 'set interfaces wireguard wgX threaded' 2023-08-17T19:22:50+00:00 Christian Breunig christian@breunig.cc 2023-08-17T19:06:01+00:00 urn:sha1:113ed87c0aa9f6eebbc65545b336469b1ebcea84 Using threaded as CLI node is a very deep term used by kernel threads. To make this more understandable to users, rename the node to per-client-thread. It's also not necessary to test if any one peer is configured and probing if the option is set. There is a base test which requires at least one peer to be configured. 2023-08-07T08:32:22+00:00 aapostoliuk a.apostoliuk@vyos.io 2023-08-02T12:20:20+00:00 urn:sha1:0d54be778ba2bf1c918c43a525d7ef878a1cb9ea Added 'set interfaces wireguard wgX threaded' command. Process traffic from each peer in a dedicated thread. 2023-08-06T18:25:01+00:00 Christian Breunig christian@breunig.cc 2023-08-06T17:29:50+00:00 urn:sha1:d1c4294534dd04f075f89f1bb60736d56fc6c22a 2023-08-02T09:46:50+00:00 aapostoliuk a.apostoliuk@vyos.io 2023-07-31T13:24:54+00:00 urn:sha1:fee5669514492e9543b34b3e77e08d1552dee386 Disabeled adding the peer with the same public key as the router has. Added smoketest 2023-07-15T18:13:12+00:00 Christian Breunig christian@breunig.cc 2023-07-15T18:12:56+00:00 urn:sha1:5f77ccf91eb402c548fc91b2e080a4b2b86f4181 2023-07-14T20:18:36+00:00 Christian Breunig christian@breunig.cc 2023-07-14T20:18:36+00:00 urn:sha1:d1ca536da448749dff557f13ecae97b124026e96 * T5195: move run, cmd, call, rc_cmd helper to vyos.utils.process * T5195: use read_file and write_file implementation from vyos.utils.file Changed code automatically using: find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import read_file$/from vyos.utils.file import read_file/g' {} + find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import write_file$/from vyos.utils.file import write_file/g' {} + * T5195: move chmod* helpers to vyos.utils.permission * T5195: use colon_separated_to_dict from vyos.utils.dict * T5195: move is_systemd_service_* to vyos.utils.process * T5195: fix boot issues with missing imports * T5195: move dict_search_* helpers to vyos.utils.dict * T5195: move network helpers to vyos.utils.network * T5195: move commit_* helpers to vyos.utils.commit * T5195: move user I/O helpers to vyos.utils.io 2022-10-27T22:48:32+00:00 sarthurdev 965089+sarthurdev@users.noreply.github.com 2022-10-27T20:37:42+00:00 urn:sha1:c2ff9aa158b81fa66ce9c810e891ad25d4a7f14b