vyos-1x.git/src/helpers/vyos-config-encrypt.py, branch rollingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling2026-07-03T11:18:32+00:00T8344: Preserve symlinks when copying config to/from TPM encrypted volume2026-07-03T11:18:32+00:00Nataliia Solomkonatalirs1985@gmail.com2026-07-03T11:18:32+00:00urn:sha1:2a73f2a1bdd1c1ea6b7fd3d27ba8c2e335fa14bb
shutil.copytree() defaults to symlinks=False, so it recurses into
symlinked directories and recreates them as real directories instead
of preserving the symlink.
cloud-init creates /opt/vyatta/etc/config/cloud/instance as a symlink
to instances/i-<id>. Enabling/disabling config encryption copied this
tree with copytree() and silently turned that symlink into a real
directory, causing cloud-init to fail on later runs with:
IsADirectoryError: [Errno 21] Is a directory: '.../cloud/instance'
Pass symlinks=True to preserve symlinks during the copy.
Merge pull request #4935 from giga1699/T81462026-01-06T13:30:41+00:00Daniil Baturindaniil@vyos.io2026-01-06T13:30:41+00:00urn:sha1:041b990ae1662b4ac7fe2fc4b62e1f624f5d6c9a
T8146: Confirm the key when config encryption is configured without TPMT8146: Encryption without TPM confirm key2026-01-03T21:24:07+00:00Giga Murphygiga1699@gmail.com2026-01-03T21:24:07+00:00urn:sha1:c44d665dd4b77fa77b8d95ebce12217caaef3fc8T8145: LUKS Encryption Passphrase Observable2026-01-03T20:59:57+00:00Giga Murphygiga1699@gmail.com2026-01-03T20:57:04+00:00urn:sha1:379e3230634f4d929a309a07a4c3d7b36b23d462tpm: T7726: Test TPM key or prompt recovery key2025-09-23T19:25:26+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-09-23T08:14:10+00:00urn:sha1:36d9d7068cc0c437f17f85c8fbd05c79f7d99627tpm: T7726: Prompt before overwriting existing TPM key2025-09-23T19:25:26+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-09-09T13:22:18+00:00urn:sha1:a080cfae6523768f1d5dea7ed0ab3178622495eftpm: T7726: Prompt user before clearing TPM key2025-09-23T19:25:26+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-08-19T14:25:34+00:00urn:sha1:5865c42e37262da5a6ba67ae0785cb1cc4a2b15btpm: T4919: Use vyos module function for running image, single-line imports2025-09-23T19:25:26+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-08-19T11:06:00+00:00urn:sha1:e98ae3e5d50ecadd6fd988d0745e49868323bde1tpm: T7735: Only require key/recovery if unmapped2025-09-23T19:25:26+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-08-19T10:53:47+00:00urn:sha1:645f92140138623c81fe7922978e8298301e7be1tpm: T7713: Restore original config mounts when decrypting2025-09-23T19:25:26+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2025-08-19T09:07:57+00:00urn:sha1:b7c8955e3a96f9b016bc3c595d33e6ace2872af4