vyos-1x.git/src/conf_mode/system_syslog.py, branch rolling

syslog: T8272: remove dead code from previous "file" logging support

2026-02-17T15:37:33+00:00

Commit 395e3cb72 ("syslog: T6989: remove 'file' logging destination") removed CLI support for custom file based logging targets. The code about logrotate was not removed and just stayed "dead". Dead code is removed by this commit.

T7756: Fix rsyslog configuration generation

2026-02-10T03:59:37+00:00

1.) Fix both syslog and logrotate writing /etc/logrotate.d/vyos-rsyslog - system_syslog.py generates /etc/logrotate.d/vyos-rsyslog-user for user file logrotate - system_logs.py generates /etc/logrotate.d/vyos-rsyslog using configured rotation parameters 2.) Fix /run/rsyslog/rsyslog.conf ignoring configured size for /var/log/messages - system_syslog.py retrieves "system logs" config to set rotation limits - default rotation size is now based on configuration defaults 3.) prifilt strings for rsyslog are modified to use override syntax (e.g. ";facility.none") when all is combined with other facilities to honor per facility user intent Smoke test changes: Commonize configuration of syslog facilities Check that prifilt is sane based on configured facilities (i.e. overides only present when required) Test wildcard (all) only, specific facility only, and wildcard + specific facility

syslog: T4251: Rename "permitted-peers" to "permitted-peer" and improve TLS checks

2025-10-31T14:05:09+00:00

- Renamed `permitted-peers` to `permitted-peer` across templates, schema, and tests. - Added support for multiple `permitted-peer` entries and trimmed empty values. - Replaced TLS/UDP warning with ConfigError for strict validation. - Updated tests to use TCP for TLS and verified new validation logic.

syslog: T4251: Fix TLS enablement logic for syslog

2025-10-24T11:48:42+00:00

syslog: T4251: Add TLS support to syslog

2025-09-30T14:37:52+00:00

Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes. This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.

T7591: remove copyright years from source files

2025-06-28T21:16:52+00:00

The legal team says years are not necessary so we can go ahead with it, since it will simplify backporting. Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \ 's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors /g' In addition we will error-out during "make" if someone re-adds a legacy copyright notice

syslog: T7367: use generic systemd syslog.service over rsyslog.service

2025-04-18T17:54:12+00:00

defaults: T6989: provide single source of systemd services

2025-02-04T17:09:39+00:00

Some systemd services are re-used over multiple configuration files. Keep a single source of the real systemd names and only reference them by dictionary keys.

syslog: T6989: add possibility to define VRF per remote

2025-02-04T17:09:39+00:00

Rsyslog supports individual VRFs per omfwd remote entry - so we should support this, too.

syslog: T6989: rename "global" to "local"

2025-02-03T06:16:35+00:00

The previously "global" options actually were only relevant for the local logging to /var/log/messages.