vyos-1x.git/src/etc, branch sever-sever-patch-1VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=sever-sever-patch-12025-02-08T12:46:05+00:00netplug: T5103: only execute helper scripts on physical interfaces2025-02-08T12:46:05+00:00Christian Breunigchristian@breunig.cc2025-02-08T10:33:21+00:00urn:sha1:8faf67c1fab0eced732cf414d02a6c8d7affc626
Helper scripts should only work on physical interfaces not on individual
sub-interfaces. Moving e.g. a VLAN interface in/out a VRF will also trigger
this script which should be prohibited - bail out early
syslog: T6989: convert old configuration format to "advanced"2025-02-03T06:16:07+00:00Christian Breunigchristian@breunig.cc2025-01-13T18:36:41+00:00urn:sha1:e143e496e28b9d6d5803278fa76a14bf2bc2304edhcp: T5840: Merge systemd service overrides for kea-ctrl-agent2025-01-17T04:40:08+00:00Indrajit Raychaudhuriirc@indrajit.com2025-01-17T03:37:44+00:00urn:sha1:4c92ab9ff4ddf44f0d6a2bf4c7e724fc35629f0c
Default systemd service for kea-ctrl-agent expects
`/etc/kea/kea-api-password` which is not used in
VyOS.
The systemd unit override to remove the condition
does not need to be in a separate (templated and
dynamic) override file and can be merged into the
existing static override file.
udev: T6985: Fix udev rule to also register ttyACM serial devices2024-12-28T09:03:06+00:00Grant Slatergithub@firefishy.com2024-12-28T09:03:06+00:00urn:sha1:13dfb5093345abf14fe635a6aee83ad801dab027skel: T6979: disable iproute2 colors by default2024-12-26T16:32:51+00:00Christian Breunigchristian@breunig.cc2024-12-25T17:23:00+00:00urn:sha1:5c69a6240d0bdb67db4c16369415835844f9109dsudo: T6926: remove spam messages to syslog2024-12-01T11:44:10+00:00Christian Breunigchristian@breunig.cc2024-12-01T11:44:10+00:00urn:sha1:24b1d246373a0def45a6e6ba1b0ecabe19fe1d58
Right now every command that's executed via op-mode/conf-mode is logged with a
session entry/exit and command execution into syslog.
sudo[1082396]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/bin/mv /tmp/config.boot.1082388 /opt/vyatta/etc/config/archive/config.boot
sudo[1082396]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002)
sudo[1082396]: pam_unix(sudo:session): session closed for user root
sudo[1082399]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/sbin/logrotate -f -s /opt/vyatta/etc/config/archive/lr.state /opt/vyatta/etc/config/archive/lr.conf
sudo[1082399]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002)
sudo[1082399]: pam_unix(sudo:session): session closed for user root
This heavily bloats remote logging services - remove the log entries
T861: op-mode: "show version" will display secure boot state2024-09-16T15:28:50+00:00Christian Breunigchristian@breunig.cc2024-08-26T18:23:32+00:00urn:sha1:b78cc96cc4c4d506b7e959ec6ec9c3e7fc09fc33
vyos@vyos:~$ show ver
...
Architecture: x86_64
Boot via: installed image
System type: KVM guest
Secure Boot: enabled
...
dhclient: T6667: Added workaround for communication with FRR2024-08-24T08:06:39+00:00zsdctaras@vyos.io2024-08-21T18:55:17+00:00urn:sha1:da64a7246e9b12d5bd84287517cfbfa59e364c28
To increase the chance for dhclient to configure routes in FRR, added a
workaround. Now 10 attempts are performed with 1 second delay and only after
this dhclient gives up.
T6570: firewall: add global-option to configure sysctl parameter for enabling/disabling sending traffic from bridge layer to ipvX layer2024-08-01T16:25:39+00:00Nicolas Fortnicolasfort1988@gmail.com2024-07-24T17:40:28+00:00urn:sha1:a8a9cfe750da719605ab90ce8c83c42276ab07f3T5873: vpn ipsec: re-write of ipsec updown hook2024-07-27T01:26:30+00:00Lucas Christianlucas@lucasec.com2024-07-04T06:14:45+00:00urn:sha1:376e2d898f26c13a31f80d877f4e2621fd6efb0f