vyos-1x.git/src, branch 1.3.2VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=1.3.22022-09-02T11:36:45+00:00bonding: T4668: fix live bonding member add or remove2022-09-02T11:36:45+00:00initramfsinitramfs@initramfs.io2022-09-01T12:51:21+00:00urn:sha1:0f1d29ac0480dc202595b96357789e6d15d49f2c
Fixes several bugs around bonding member interface states not matching
the committed configuration, including:
- Disabled removed interfaces coming back up
- Newly added disabled interfaces not staying down
- Newly added interfaces not showing up in the bond
bonding: T4668: refactor configuration mode interface bonding script2022-09-02T11:36:37+00:00initramfsinitramfs@initramfs.io2022-09-01T12:31:00+00:00urn:sha1:df97b5a4130ec7763176c86295bce586e0808f72
Refactor interfaces-bonding.py to simplify existing code and to remove
potentially bugprone sections in preparation for member add/remove
fixes for T4668.
ethernet: T4538: fix wrong systemd unit used for EAPoL2022-08-19T18:04:00+00:00Christian Poessingerchristian@poessinger.com2022-08-19T16:55:24+00:00urn:sha1:33db81f8055fa471d3b0b6cdf78c2a057c11a0fc
When MACsec was bound to an ethernet interface and the underlaying
source-interface got changed (even description only) this terminated the
MACsec session running on top of it.
The root cause is when EAPoL was implemented in commit d59354e52a8a7f we
re-used the same systemd unit which is responsible for MACsec. That indeed lead
to the fact that wpa_supplicant was always stopped when anything happened on
the underlaying source-interface that was not related to EAPoL.
(cherry picked from commit f92a23ef9ab8be59681e5b7ba627e399d89bce53)
openconnect: T4616: bugfix KeyError: 'local_users'2022-08-15T18:54:46+00:00Christian Poessingerchristian@poessinger.com2022-08-15T18:54:08+00:00urn:sha1:28936477c4f4c4633c9a384054c0a65090ece101
To reproduce:
set vpn openconnect authentication mode local
commit
Traceback (most recent call last):
File "/usr/libexec/vyos/conf_mode/vpn_openconnect.py", line 147, in <module>
verify(c)
File "/usr/libexec/vyos/conf_mode/vpn_openconnect.py", line 64, in verify
if not ocserv["authentication"]["local_users"] or not ocserv["authentication"]["local_users"]["username"]:
KeyError: 'local_users'
macsec: T4592: can not create two interfaces using the same source-interface2022-08-15T16:00:56+00:00Christian Poessingerchristian@poessinger.com2022-08-04T06:29:14+00:00urn:sha1:922871b4dc41f345d7ec1aae518ba91b6dfeb62c
(cherry picked from commit 993961f60ead2a18912eb577b1152463d4eb8b4e)
macsec: T4537: remove debug falg "-d" from systemd service file2022-08-15T16:00:56+00:00Christian Poessingerchristian@poessinger.com2022-08-01T19:10:19+00:00urn:sha1:dc41d55eba5e47a105d295e27fd30a0e6d62c711
(cherry picked from commit fa25d349aebc86e43957f37db765787fb7e431db)
macsec: T4537: supply PID path via systemd service file to daemon2022-08-15T16:00:56+00:00Christian Poessingerchristian@poessinger.com2022-08-01T18:53:47+00:00urn:sha1:52b4b47f9e2484af7d493b72ebf0999c0047bf7b
(cherry picked from commit 5e919d3f91bccaf64878a94756c21766896db132)
macsec: T4537: restart wpa_supplicant on error2022-08-15T16:00:56+00:00Christian Poessingerchristian@poessinger.com2022-08-01T17:46:17+00:00urn:sha1:fdc7814f12bc0bd1a6442284a5dbac8adeb57f54
(cherry picked from commit b2ff1407330e383a9fff688376377efc534bcfbc)
macsec: T2023: fixup systemd unit description2022-08-15T16:00:56+00:00Christian Poessingerchristian@poessinger.com2022-07-22T21:17:42+00:00urn:sha1:66c1fbe7665fab4a51cbf1d626925d27e339f118
(cherry picked from commit bc70c1f502bc587627b1bd15f6803c6c09d20a66)
macsec: T4537: support online ciper and source-interface re-configuration2022-08-15T16:00:54+00:00Christian Poessingerchristian@poessinger.com2022-07-18T21:48:31+00:00urn:sha1:488024e698ac5479b652f072b1680cdc62396f73
(cherry picked from commit 82d8494d349edd7707c3811a71ca0e9c0648204e)