vyos-1x.git/src/etc/dhcp, branch fix/T8955-http-api-verify-tls

dhcp: T9278: do not append the VRF option twice to ip route commands

2026-09-06T14:16:37+00:00

01-vyos-cleanup builds its route deletion with an explicit "vrf ". The ip() wrapper caught that command and delroute() appended $VRF_OPTION again, so both "ip route show" and "ip route del" ran with "vrf red vrf red". The FRR-down kernel fallback had the same flaw. Add vrf_option(), yielding $VRF_OPTION only when the arguments carry no "vrf" token, and use it in both places. The append cannot simply be dropped, as delroute() is also reached without a VRF. iptovtysh() parses single fields and was never affected.

dhcp: T9278: move DHCP client hook tracing to a gated debug level

2026-09-06T14:16:37+00:00

Each lease event emitted some fifteen daemon.info lines tracing internal steps rather than recording a change. Add a "debug" level to logmsg(), silenced unless /tmp/vyos.dhclient.debug exists, following the flag file convention used for FRR and ifconfig. Demoting alone would not help, as journald shows all priorities by default. Fifteen tracing messages move to debug; the sixteen recording an actual change stay at info. Also fix logmsg(): "warn" had no case arm although it is used, and the global LOG_PRIO leaked the preceding call's priority. It is now local.

static: T9278: reconcile FRR config after every DHCP lease event

2026-09-04T20:14:45+00:00

The default route derived from "interfaces address dhcp" is rendered from the DHCP lease file, so it is only known at lease time. Until now the sole runtime path into staticd was the one-shot vtysh injection in dhclient-enter-hooks.d/03-vyos-ipwrapper. That injection races the FRR reload of the very commit which started the DHCP client: dhclient runs with "-nw", thus the commit does not wait for a lease, and when BOUND arrives mid-reload frr_alive() can report FRR as down. The route is then installed into the kernel only and FRR never learns about it. Nothing recovers afterwards, as FRRender.generate() short-circuits on an unchanged configuration dict. The self-healing re-render used by "protocols static route dhcp-interface" was gated on /tmp/static_dhcp_interfaces, which never lists plain "address dhcp" interfaces - protocols_static.py does not even run on an interface-only commit, as no config-mode dependency points to it. Derive the DHCP dependent interface list from the configuration dict itself, both for the default VRF and for every named VRF, and use it for FRR change detection. Drop the interface list gate in the dhclient exit hook so any lease event requests a re-render. Also poll for the lease and for the rendered route in the affected smoketests instead of relying on a fixed sleep.

T8410: Fix typos and mistakes for comments and messages

2026-03-27T15:00:17+00:00

Fix typos and mistakes No functional changes

T8188: Preserve static IPv4 addresses flushed by dhclient

2026-03-19T16:07:08+00:00

When dhclient renews/rebinds a lease, it calls "ip -4 addr flush dev ". This removes ALL IPv4 addresses, including static addresses configured via VyOS (e.g., "set interfaces ethernet eth0 address 192.168.1.1/24"). The updated hook logic now intercepts the "ip -4 addr flush" command and replaces it with a selective flush that only removes addresses marked as "dynamic" by the kernel. DHCP-assigned addresses have the "dynamic" flag set automatically.

T5811: Make static dhcp-interface routes robust

2025-10-21T16:57:40+00:00

Solves the problem that vyos-configs in FRRender caches configuation and DHCP changes are ignored. * Add src/helpers/vyos-request-configd-update.py that requests vyos-configd to update FRR configuration. * Make dhclient hooks use it instead of calling protocols_static.py * Make FRRender cache not only configuration but also DHCP gateways so that is any of them changes, FRR configuration is updated

T3680: protocols: add dhclient hooks for dhcp-interface static routes

2025-10-21T16:57:40+00:00

T7941: fix DHCP client running in VRF with non-word characters

2025-10-18T11:19:10+00:00

The previous implementation used awk with a regex to extract the VRF name from JSON data, relying on "(\w+)" to match the value. This broke for valid VRF names containing hyphens or other non-word characters. This update replaces the regex-based extraction with a jq query that reliably parses the JSON structure, ensuring correct behavior regardless of VRF name format. This also reduces parsing fragility by using a tool purpose-built for JSON processing.

T7591: remove copyright years from source files

2025-06-28T21:16:52+00:00

The legal team says years are not necessary so we can go ahead with it, since it will simplify backporting. Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \ 's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors /g' In addition we will error-out during "make" if someone re-adds a legacy copyright notice

dhclient: T6253: Respect `no-default-route`

2025-04-22T02:20:30+00:00