vyos-1x.git/src/migration-scripts, branch fix/T8955-http-api-verify-tlsVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8955-http-api-verify-tls2026-04-28T07:40:59+00:00migration: T8280: Fix auth file read for interfaces on first boot of new image2026-04-28T07:40:59+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2026-04-24T14:30:32+00:00urn:sha1:996a872eca8786ddd4335dd23dd9cb048ec11ffd
During first boot after installing a new VyOS image, migrations are
executed before the filesystem is fully initialized.
At this point `/config` is not yet bind-mounted, causing auth files
(certificates, keys, credentials) for OpenVPN, WireGuard and Ethernet
EAPoL interfaces under `/config/auth` to be inaccessible even though they
exist under the underlying `/opt/vyatta/etc/config/auth` path which is
available at all boot stages.
Add fallback logic to `read_auth_file()` to retry the file lookup under
`/opt/vyatta/etc/config/auth` when the file is not found under `/config/auth`.
serial: T8375: add CLI option to explicitly set kernel console2026-04-09T18:54:06+00:00Christian Breunigchristian@breunig.cc2026-04-02T05:53:02+00:00urn:sha1:35db941bcf30f3fac5b1358aa1124f34f9808950
Previously, VyOS hardcoded the kernel boot log console to either ttyS0 or
tty0, with no post-install CLI method to change it (manual GRUB edits
were required).
This commit adds a new CLI node:
system console device <name> kernel
When set, the selected serial console is used as the kernel boot console.
When removed, the kernel boot console falls back to tty0.
Merge pull request #5103 from alexandr-san4ez/T8281-current2026-04-07T12:50:06+00:00Daniil Baturindaniil@vyos.io2026-04-07T12:50:06+00:00urn:sha1:b7d191cd3053a736fa14ebfefe7a95093b0fcacd
firewall: T8281: Normalize network prefixes in rule configurationfirewall: T8281: Normalize network prefixes in rule configuration2026-04-06T12:18:12+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2026-04-02T12:31:32+00:00urn:sha1:227699e62146c71c3a0d3923650edd247b20ef16
Convert non-canonical IPv4 and IPv6 prefixes in 'source/destination address'
fields to proper network addresses (e.g. 10.10.10.1/30 -> 10.10.10.0/30).
This prevents invalid configurations and ensures consistent prefix handling.
firewall: T8282: Normalize invalid network-group names during migration2026-04-03T13:03:33+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2026-04-03T12:14:39+00:00urn:sha1:fc33a96dd2394c0c6bb109f8e5a2d0c379aa1508
Replace unsupported characters (e.g. `,`, `+`) with `_` when migrating
from 1.3.x and handle name collisions safely to prevent commit failures.
T8410: Fix typos and mistakes for comments and messages2026-03-27T15:00:17+00:00Viacheslav Hletenkov.gletenko@vyos.io2026-03-27T14:43:47+00:00urn:sha1:139b0841f8242a5c6ebdafb37380c1fb78342aae
Fix typos and mistakes
No functional changes
Merge pull request #5082 from sever-sever/T84102026-03-25T19:15:35+00:00Christian Breunigchristian@breunig.cc2026-03-25T19:15:35+00:00urn:sha1:210547f31ef45e6bb42b44bdaa8a8864179a8bbc
T8410: Fix typos and mistakes for operational and configuration commandsfirewall: T8277: Resolve migration issue when using `port-group` with protocol 'all'2026-03-25T14:32:31+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2026-03-25T14:32:31+00:00urn:sha1:f8c5643b36bd0df630453d8b6e5e25c6df984ec4
Updated the migration script to ensure that when migrating firewall rules,
if a `port-group` exists, the protocol will be set to 'tcp_udp' only
when its previous value is 'all'.
T8410: Fix typos and mistakes for operational and configuration commands2026-03-24T17:02:56+00:00Viacheslav Hletenkov.gletenko@vyos.io2026-03-20T16:41:24+00:00urn:sha1:bb2aee1e58c1cd30087b935798060e6bf3c698c8
Fix typos and mistakes in the commands and comments
No functional changes
vpp: T8393: Remove xconnect interfaces with bonding member interface2026-03-17T14:07:09+00:00Nataliia Solomkonatalirs1985@gmail.com2026-03-17T14:07:09+00:00urn:sha1:225f5750cea84290c60803d65212e678ab7c9e67