<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/src/tests, branch current</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-1x.git/atom?h=current</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-1x.git/atom?h=current'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/'/>
<updated>2025-07-08T13:26:11+00:00</updated>
<entry>
<title>T7499: add unittest for config tree merge function</title>
<updated>2025-07-08T13:26:11+00:00</updated>
<author>
<name>John Estabrook</name>
<email>jestabro@vyos.io</email>
</author>
<published>2025-06-23T20:20:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=8af85206e172b2c50514df9990ea6061f72a1ed5'/>
<id>urn:sha1:8af85206e172b2c50514df9990ea6061f72a1ed5</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T7591: remove copyright years from source files</title>
<updated>2025-06-28T21:16:52+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2025-06-28T18:51:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=1478516ae437f19ebeb7d6ff9b83dd74f8e76758'/>
<id>urn:sha1:1478516ae437f19ebeb7d6ff9b83dd74f8e76758</id>
<content type='text'>
The legal team says years are not necessary so we can go ahead with it, since
it will simplify backporting.

Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \
's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors &lt;maintainers@vyos.io&gt;/g'

In addition we will error-out during "make" if someone re-adds a legacy
copyright notice
</content>
</entry>
<entry>
<title>firewall: T6951:  Add a configuration command for ethertypes that bridge firewalls should always accept</title>
<updated>2025-06-17T15:16:51+00:00</updated>
<author>
<name>Nataliia Solomko</name>
<email>natalirs1985@gmail.com</email>
</author>
<published>2025-06-13T09:20:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=8dbc3c5e67cc1fd043a78dd3446a1a733ebd814f'/>
<id>urn:sha1:8dbc3c5e67cc1fd043a78dd3446a1a733ebd814f</id>
<content type='text'>
</content>
</entry>
<entry>
<title>ssh: T6013: rename trusted-user-ca-key -&gt; truster-user-ca</title>
<updated>2025-05-29T12:01:32+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2025-05-20T17:57:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=4b4bbd73b84c2c478c7752f58e7f66ec6d90459e'/>
<id>urn:sha1:4b4bbd73b84c2c478c7752f58e7f66ec6d90459e</id>
<content type='text'>
The current implementation for SSH CA based authentication uses "set service
ssh trusted-user-ca-key ca-certificate &lt;foo&gt;" to define an X.509 certificate
from "set pki ca &lt;foo&gt; ..." - fun fact, native OpenSSH does not support X.509
certificates and only runs with OpenSSH ssh-keygen generated RSA or EC keys.

This commit changes the bahavior to support antive certificates generated using
ssh-keygen and loaded to our PKI tree. As the previous implementation
did not work at all, no migrations cript is used.
</content>
</entry>
<entry>
<title>vyos.template: T7122: add Jinja2 clever function helper to read vyos.defaults</title>
<updated>2025-05-04T09:23:54+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2025-05-04T09:23:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=aff2835d7b6226e4b89f51e3f6133da26f3a07bf'/>
<id>urn:sha1:aff2835d7b6226e4b89f51e3f6133da26f3a07bf</id>
<content type='text'>
Add a new category if Jinja2 operands. We already have filters and tests, but
sometimes we would like to call a Python function without and data "|" piped
to it - that's what they call a clever-function.

{{ get_default_port(NAME) }} can be used to retrieve the value from
vyos.defaults.internal_ports[NAME] within Jinja2. We no longer need to extend
the dictionary with arbitrary data retrieved from vyos.defaults, we can now
simply register another clever-function to the Jinja2 backend.
</content>
</entry>
<entry>
<title>vyos.utils: T7122: fix IPv6 support in check_port_availability()</title>
<updated>2025-04-28T20:10:08+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2025-04-22T14:31:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=cbb6c944fea616547cec43f7f1ed6ea3cc4beb54'/>
<id>urn:sha1:cbb6c944fea616547cec43f7f1ed6ea3cc4beb54</id>
<content type='text'>
Commit 4523e9c897b3 ("wireguard: T3763: Added check for listening port
availability") added a function to check if a port is free to use or already
occupied by a different running service. This has been done by trying to bind a
socket to said given port.

Unfortunately there is no support for IPv6 address-fdamily in both
socketserver.TCPServer or socketserver.UDPServer. This must be done manually by
deriving TCPServer and setting self.address_family for IPv6.

The new implementation gets rid of both TCPServer and UDPServer and replaces it
with a simple socket binding to a given IPv4/IPv6 address or any interface/
address if unspecified.

In addition build time tests are added for the function to check for proper
behavior during build time of vyos-1x.
</content>
</entry>
<entry>
<title>T7246: update libvyosconfig hash and add nosetest</title>
<updated>2025-03-20T15:02:55+00:00</updated>
<author>
<name>John Estabrook</name>
<email>jestabro@vyos.io</email>
</author>
<published>2025-03-18T17:19:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=fbf871b3cdbbe6fd4fd6cad3281adc24438acc79'/>
<id>urn:sha1:fbf871b3cdbbe6fd4fd6cad3281adc24438acc79</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T7121: use dunder equal instead of string rep comparison, where possible</title>
<updated>2025-03-17T04:55:12+00:00</updated>
<author>
<name>John Estabrook</name>
<email>jestabro@vyos.io</email>
</author>
<published>2025-02-05T22:31:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=4dc02b404311aa39b2f5374103c106367d2cc14e'/>
<id>urn:sha1:4dc02b404311aa39b2f5374103c106367d2cc14e</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T7042: drop use of inspect module in favor of ast for source analysis</title>
<updated>2025-01-11T04:49:13+00:00</updated>
<author>
<name>John Estabrook</name>
<email>jestabro@vyos.io</email>
</author>
<published>2025-01-11T03:54:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=d5b1bfc7c9009202782b47102d9ff3072c12394d'/>
<id>urn:sha1:d5b1bfc7c9009202782b47102d9ff3072c12394d</id>
<content type='text'>
This avoids importing the config mode script as a module, with requisite
dependencies, which may be inconvenient.
</content>
</entry>
<entry>
<title>multicast: T6746: flatten CLI by merging "multicast route" to "mroute" CLI tagNode</title>
<updated>2024-12-16T21:24:50+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-12-08T08:11:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=13baad691410009d1e5f7e6f6bf5afe72afd2f73'/>
<id>urn:sha1:13baad691410009d1e5f7e6f6bf5afe72afd2f73</id>
<content type='text'>
This will save an entire level for the configuration and there is no need for a
parent "multicast" node, as it will only have "route" as tagNode below.

Move set protocols static multicast route &lt;x.x.x.x/y&gt; to:
* set protocols static mroute &lt;x.x.x.x/y&gt;
</content>
</entry>
</feed>
