vyos-1x.git/src/migration-scripts, branch current-merge-commit-handlingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=current-merge-commit-handling2024-07-29T18:16:43+00:00vyos.configtree: T6620: allow list_nodes() to work on non-existent paths2024-07-29T18:16:43+00:00Daniil Baturindaniil@baturin.org2024-07-29T18:16:43+00:00urn:sha1:30111fa493c72e7182854f295bc88d9eecccf419
and return an empty list in that case
(handy for migration scripts and the like)
Merge pull request #3823 from srividya0208/T65712024-07-29T16:10:30+00:00Daniil Baturindaniil@vyos.io2024-07-29T16:10:30+00:00urn:sha1:9149c657dfdb4d8297aba3ef1ed1346e670b071b
OpenVPN CLI-option: T6571: rename ncp-ciphers with data-ciphersfirewall: T4694: incomplete node checks in migration script2024-07-29T15:05:21+00:00Andrew Toppandrewt@telekinetica.net2024-07-29T15:05:21+00:00urn:sha1:3d42009c0e3cf5ea7ea0ed167b4d8f655667edd8
This patch on #3616 will only attempt to fix ipsec matches in rules if the
firewall config tree passed to migrate_chain() has rules attached.
firewall: T4694: Adding rt ipsec exists/missing match to firewall configs (#3616)2024-07-28T11:47:07+00:00talmakionandrewt@telekinetica.net2024-07-28T11:47:07+00:00urn:sha1:e2bf8812f73a75356f56274968be8859a2186d73
* Change ipsec match-ipsec/none to match-ipsec-in and match-none-in for
fw rules
* Add ipsec match-ipsec-out and match-none-out
* Change all the points where the match-ipsec.xml.i include was used
before, making sure the new includes (match-ipsec-in/out.xml.i) are
used appropriately. There were a handful of spots where match-ipsec.xml.i
had snuck back in for output hooked chains already
(the common-rule-* includes)
* Add the -out generators to rendered templates
* Heavy modification to firewall config validators:
* I needed to check for ipsec-in matches no matter how deeply nested
under an output-hook chain(via jump-target) - this always generates
an error.
* Ended up retrofitting the jump-targets validator from root chains
and for named custom chains. It checks for recursive loops and improper
IPsec matches.
* Added "test_ipsec_metadata_match" and "test_cyclic_jump_validation"
smoketestsOpenVPN CLI-option: T6571: rename ncp-ciphers with data-ciphers2024-07-25T10:07:02+00:00srividya0208a.srividya@vyos.io2024-07-15T10:30:00+00:00urn:sha1:b62b2f5f8a9c4f0a7dc26bce1f15843651119256openvpn: T6591: deprecate OpenVPN server net30 topology (#3825)2024-07-18T18:33:24+00:00Daniil Baturindaniil@vyos.io2024-07-18T18:33:24+00:00urn:sha1:e2b05343b30d2f989968532106e792cbaf75ecf6T6536: change wildcard character from + to * - extend fix to interfaces defined in zone policy.2024-07-03T13:05:35+00:00Nicolas Fortnicolasfort1988@gmail.com2024-07-03T12:53:56+00:00urn:sha1:66ec278393dbabe71f320c543816f27797d51140T6536: nat: add migration script that replaces wildcard charater supported in 1.3 <+> with character supported in latest version <*>2024-07-03T13:05:35+00:00Nicolas Fortnicolasfort1988@gmail.com2024-07-02T11:54:11+00:00urn:sha1:148af29b68416a5b8d0e025a16aef252fdf31e67migration: T6007: convert all migration scripts to load as module2024-06-26T20:38:41+00:00John Estabrookjestabro@vyos.io2024-06-20T01:16:05+00:00urn:sha1:26740a8d583f64dc0a27b59dd4ae303056972c0binterfaces: T6519: harden config migration if ethernet interface is missing2024-06-26T13:39:10+00:00Christian Breunigchristian@breunig.cc2024-06-26T13:35:10+00:00urn:sha1:e47d4fd385631236da6882233b09f6364cbb077b
During a corner case where the configuration is migrated to a different system
with fewer ethernet interfaces, migration will fail during an image upgrade.
vyos.ethtool.Ethtool() is instantiated with an invalid interface leading to an
exception that kills the migrator