vyos-1x.git/src/tests, branch rollingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling2026-07-07T13:42:21+00:00Merge pull request #5275 from BradKollmyer/remote-T8829-head-fallback2026-07-07T13:42:21+00:00John Estabrookjestabro@vyos.io2026-07-07T13:42:21+00:00urn:sha1:e3b38a56bd24407b1f03d6e833b3b5db94fe2443
remote: T8829: fall back to GET when HEAD is not supportedMerge pull request #5285 from c-po/cmdl2026-06-29T14:18:55+00:00Daniil Baturindaniil@vyos.io2026-06-29T14:18:55+00:00urn:sha1:4a888ac808c29323d3adb3862d908e7cb2bfc592
utils: T9003: add list-argument variant of cmd() for safer subprocess executionT9015: add nosetest2026-06-24T20:30:08+00:00John Estabrookjestabro@vyos.io2026-06-24T19:17:19+00:00urn:sha1:5b52dbea7e780809ddc9b0d086c49849336f3259ipsec: T8975: add unit tests for vti_updown_db lock wiring2026-06-24T04:49:41+00:00Robert Navarrocrshman@gmail.com2026-06-19T02:13:10+00:00urn:sha1:66d984ae1b25928335650d04a28a497702ba8280
The module previously had no tests. Cover the DB logic (add/remove,
multiple connections per interface, removeAllOtherInterfaces,
setPersistentInterfaces, seed-from-file) and assert each open_* helper
acquires the serialising lock, exercised with vyos.utils.locking.Lock
patched out.
remote: T8829: fall back to GET when HEAD is not supported2026-06-21T22:42:29+00:00Brad Kollmyerbradk@vitalsoft.com2026-06-21T22:31:42+00:00urn:sha1:516eccd41b75bbfd237440d919ef5292215ba30d
HttpC.download() always probed remote URLs with HEAD before GET to
discover redirects and Content-Length. Some APIs (e.g. AbuseIPDB)
reject HEAD with 405 Method Not Allowed, causing firewall remote-group
downloads to fail and leave empty cached list files.
Treat HEAD 405/501 as unsupported and proceed with GET using the
original URL. When HEAD does not provide Content-Length, read it from
the GET response headers instead. Validate available storage after
determining file size and before opening the destination file.
Log sanitized download errors in vyos-domain-resolver when a remote-
group list-file fetch fails. Add unit tests with mock servers that
return 405 or 501 on HEAD and 200 on GET.
utils: T9003: add list-argument variant of cmd() for safer subprocess execution2026-06-20T12:12:23+00:00Christian Breunigchristian@breunig.cc2026-06-19T20:27:30+00:00urn:sha1:2c7757048169be7db306efbedacd3ae9af4fbb64
A list-argument variant of cmd() for safer subprocess execution named cmdl().
Command must be a list of strings; no shell interpolation is performed, which
eliminates a class of command-injection risks present when building commands
with f-strings or other string formatting.
T8916: add simple nosetest for subtree_from_partial utility2026-05-28T13:31:32+00:00John Estabrookjestabro@vyos.io2026-05-27T13:19:01+00:00urn:sha1:8aa9fe5d526e3a7432959e60216ca3363bde90fbMerge pull request #5130 from natali-rs1985/T84602026-04-24T12:43:36+00:00Viacheslav Hletenkov.gletenko@vyos.io2026-04-24T12:43:36+00:00urn:sha1:0cc2bbfc54370cce2d2c7540fb155e464207f1be
vpp: T8460: Use isolated cpus for VPP cpu-coresvpp: T8460: Use isolated cpus for VPP cpu-cores2026-04-21T13:45:43+00:00Nataliia Solomkonatalirs1985@gmail.com2026-04-14T15:07:41+00:00urn:sha1:9cb6f4c001fa5d4f4ed26850fc99dde4c3692c8f
VPP CPU core assignment now uses kernel-isolated CPUs (from /sys/devices/system/cpu/isolated) with explicit corelist-workers instead of computing offsets from available cores with skip-cores/workers. Added validation that enough CPUs are actually isolated before VPP starts, and that isolate-cpus config only references existing CPU IDs. Moved smoketest for kernel option 'isolate-cpus' to test_vpp.py
T8534: refactor sysctl_(read|write) to accept key parts2026-04-21T04:13:21+00:00Christian Breunigchristian@breunig.cc2026-04-19T20:45:50+00:00urn:sha1:754635c257b1860ce393cdc342c1b7ca7e65da1f
Interface names can contain dots (e.g. VLAN subinterfaces like eth0.10), which
conflicts with sysctl's dot-separated key syntax.
Change sysctl_read() and sysctl_write() to take key components as a list and
normalize each component by replacing . with / before invoking sysctl. This
fixes sysctl lookups/updates for VLAN subinterfaces.
Extend the SR-TE smoketest to cover a VLAN subinterface.
Previous error raising this issue:
vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/10/seg6_enabled: No such file or directory
vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/201/seg6_enabled: No such file or directory