VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2026-10-13T14:40:38+00:00 2026-10-13T14:40:38+00:00 John Estabrook jestabro@vyos.io 2026-10-13T14:40:38+00:00 urn:sha1:9461df647df2a6608a2753cc5a0f21b50a209683 vpp: T9161: Fix smoketests failing on NICs capped at 1500 MTU 2026-10-12T10:08:59+00:00 Kyrylo Yatsenko hedrok@gmail.com 2026-10-12T10:08:59+00:00 urn:sha1:507625435cf70a6fd5ae9a26d8f19eac1a50d4ae pseudo-ethernet: T9253: fix anycast-gateway with shared MAC on bridge VLANs 2026-10-11T19:20:57+00:00 Christian Breunig christian@breunig.cc 2026-10-11T19:20:57+00:00 urn:sha1:713626a1978b40e0a818203e95a529f9fb32a228 container: T9401: add chown option to tmpfs mounts 2026-10-11T18:57:18+00:00 Christian Breunig christian@breunig.cc 2026-10-11T18:57:18+00:00 urn:sha1:1bd02305554643b698e254fcc725487b0d66b20f firewall: T9332: fix GeoIP source/destination nftables set name colli… 2026-10-09T13:32:03+00:00 Antonio Quartulli antonio@mandelbit.com 2026-10-01T13:28:13+00:00 urn:sha1:0d49d1ba8dbfabb6c1a49216b69d79ed47b4a251 Static key mode only supports CBC, so OpenVPN refuses to start with an AEAD "data-ciphers-fallback" just like with an AEAD "encryption cipher". Reject it at commit time. 2026-10-09T13:02:37+00:00 John Estabrook jestabro@vyos.io 2026-10-09T13:02:37+00:00 urn:sha1:998fe8286fea7c2a0492fcf77ee87ae41597f0e8 config-management: T6304: Rewrite commit-archive location into a structured CLI 2026-10-09T11:37:43+00:00 Nataliia Solomko natalirs1985@gmail.com 2026-10-09T11:19:11+00:00 urn:sha1:c254b0dca087083b77dea7dc3c8c3a797be7cf72 VPP now rejects an MTU above the NIC limit, but the CI NICs are capped at 1500, so tests using MTU 2500 on eth1 failed. The rejected commit also left a queued initial VPP dependency in the commit daemon, which the next commit ran with the old config, so every following test failed too. Pending initial dependents are now cleared before each script run in vyos-configd and vyos-commitd, and the tests use MTUs that fit any NIC. 2026-10-08T19:36:33+00:00 Christian Breunig christian@breunig.cc 2026-10-07T18:44:34+00:00 urn:sha1:e3643b21a507dc744b9b64d919a555ff597cc71c Several anycast-gateway pseudo-ethernets with the same MAC on different VLANs of one bridge (the usual EVPN layout) failed to commit with "bridge fdb add ... File exists". The local FDB entry was always installed without a VLAN, so every interface competed for the same entry. A failing commit at boot left only one interface configured and dropped the rest of the config. The local FDB entry is now bound to the VLAN of the bridge sub-interface when the bridge is VLAN aware, and it is installed with replace so a re-commit over an existing entry no longer fails. Two anycast-gateways with the same MAC on the same source-interface are rejected. 2026-10-08T11:36:32+00:00 Nataliia Solomko natalirs1985@gmail.com 2026-09-04T13:32:01+00:00 urn:sha1:d054b7c82f239ff09a905b506943c03094d2d26b On a VPP-bound interface the MTU limit is the NIC's, which only VPP knows (the kernel side is an LCP tap reporting a meaningless larger max). Reject at commit an MTU larger than that limit, read from VPP's 'show hardware-interfaces' (max mtu + driver frame overhead), so the kernel and dataplane cannot silently end up with different MTUs. Also apply a VLAN sub-interface's MTU to its VPP dataplane sub-interface and its linux-cp tap (created with MTU 0), not just the parent; a sub-interface without its own MTU inherits the parent's. Covers ethernet (vif/vif-s) and VPP bond/loopback (vif). 2026-10-08T07:48:58+00:00 Christian Breunig christian@breunig.cc 2026-10-08T07:48:58+00:00 urn:sha1:1ac0219e62c7b0efee9e81e7266558dffc7b14e6 configd: T9368: reconcile FRR after a DHCP lease without the commit socket