vyos-1x.git/src/conf_mode, branch current

Merge pull request #5109 from statio/fix/vrf-aware-port-check

2026-05-28T14:39:35+00:00

T8454: fix VRF-bind port availability check in service_https

Merge pull request #5074 from vyos/fix/bare-except-clauses

2026-05-28T11:42:05+00:00

python: T8857: replace bare except clauses with except Exception in config scripts

T8454: fix VRF-bind port availability check in service_https

2026-05-27T20:15:40+00:00

When service https is configured with a listen-address on a VRF interface, adding or changing the vrf option causes the commit to fail with "TCP port 443 is used by another service!" even though no conflict exists. Root cause: check_port_availability() performs a socket.bind() in the default network namespace. When the listen-address belongs to a VRF interface the address is unreachable from the default namespace, so the bind fails with OSError which is misinterpreted as "port in use". The secondary check via is_listen_port_bind_service() also fails because psutil cannot see sockets bound inside a VRF. Fix: add an optional vrf parameter to check_port_availability(). When set, the test socket is bound to the VRF master device via SO_BINDTODEVICE before the bind() call, so that the address is resolved in the correct L3 domain. This is done in-process (no subprocess) and works for both IPv4 and IPv6. service_https verify() now passes the configured VRF (if any) to check_port_availability(). Non-VRF configurations are unaffected. Add smoke test for HTTPS with listen-address inside a VRF. Co-authored-by: Christian Breunig

Merge pull request #5208 from alexandr-san4ez/T8538-current

2026-05-27T19:42:01+00:00

snmp: T8538: Persist engineBoots counter across reboots

ipsec: T8912: Fix log level not respected in system journal

2026-05-27T14:04:17+00:00

When setting 'vpn ipsec logging log-level 0', DPD informational messages (log level 1) were still appearing in the system journal. The root cause is that charon-systemd reads both `charon-systemd.conf` and `charon-logging.conf` and applies the higher of the two log levels to the journal. The VyOS only managed `charon-systemd.conf`, leaving `charon-logging.conf` at its default level of 1, which silently overrode the user-configured level. Fix this by rendering `charon-logging.conf` on every commit with syslog backend set to -1 (silent), making `charon-systemd.conf` the sole authoritative source for journal log verbosity. This also eliminates duplicate log entries in the journal that occurred when both backends were active and writing to the same destination.

Merge pull request #5157 from xTITUSMAXIMUSX/current

2026-05-26T15:27:03+00:00

geoip: T8590: fix initialization failure and set clobbering on boot and commit

Merge pull request #5197 from alexandr-san4ez/T7555-current

2026-05-26T14:47:15+00:00

ipsec: T7555: Implement `ikev2-reauth` for site-to-site peers

Merge pull request #5158 from alexandr-san4ez/T6478-current

2026-05-26T13:13:24+00:00

openvpn: T6478: Skip restart service when only client config changed

Merge pull request #5179 from josephillips85/current

2026-05-26T06:34:20+00:00

Policy: T8823: validation of GE and LE according FRR instructions

Merge pull request #5216 from natali-rs1985/T8412

2026-05-25T15:04:46+00:00

wwan: T8412: Fix commit failure when modem is absent or not connected