Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-11-21 | graphql: T4574: add specific error message if token has expired | John Estabrook | |
Catch expiration error and return error-specific message instead of general 'not authenticated'. | |||
2022-11-21 | graphql: T4574: use Optional in func_sig | John Estabrook | |
A misreading of the makefun docs seemed to indicate Optional was not supported; it is. | |||
2022-11-21 | graphql: T4544: use load_as_module from vyos.util | John Estabrook | |
load_as_module was added to util.py for T4821; prefer over local copy | |||
2022-11-21 | Merge pull request #1673 from sever-sever/T4823 | Christian Poessinger | |
T4823: Fix IPsec transport mode remote TS | |||
2022-11-21 | T4823: Fix IPsec transport mode remote TS | Viacheslav Hletenko | |
Remote TS for transport mode GRE must be remote-address and not peer name | |||
2022-11-21 | Merge pull request #1671 from jestabro/reset-tunnel-arg-optional | Daniil Baturin | |
IPsec: T4829: tunnel argument to 'reset_peer' should have type hint Optional | |||
2022-11-20 | IPsec: T4829: use type hint Optional for arg tunnel in reset_peer | John Estabrook | |
2022-11-20 | IPsec: T4829: add missing import TimeoutExpired | John Estabrook | |
2022-11-20 | Merge pull request #1657 from sever-sever/T4812 | Daniil Baturin | |
T4812: Add op-mode Show vpn ipsec connections | |||
2022-11-20 | op-mode: dns-forwarding: T4578: drop sudo calls | Christian Poessinger | |
Commit 66288ccfee ("dns-forwarding: T4578: Rewrite show dns forwarding") added the implementation for the new standardized op-mode definitions/implementation. As the API daemon has the proper permissions and also the CLI op-mode calls the script already with "sudo", there is no need to call "sudo" inside this script, again. Also add dns.py to data/op-mode-standardized.json for the GraphQL schema to be generated. | |||
2022-11-20 | macvlan: pseudo-ethernet: T2104: _create() should place interface in A/D state | Christian Poessinger | |
2022-11-20 | Merge pull request #1667 from sever-sever/T4827 | Christian Poessinger | |
T4827: Route-map state continue must be with action permit only | |||
2022-11-20 | T4827: Route-map state continue must be with action permit only | Viacheslav Hletenko | |
route-map action 'deny' cannot be used for "continue" as FRR does not validate it r14(config)# route-map FOO permit 100 r14(config-route-map)# route-map FOO deny 50 r14(config-route-map)# on-match goto 100 % Configuration failed. Error type: validation r14(config-route-map)# | |||
2022-11-20 | vrf: T4562: no need to invode "sudo" when retrieving VRf information | Christian Poessinger | |
2022-11-20 | T4830: nat66: remove external IPv6 check on bracketize_ipv6() | Christian Poessinger | |
vyos.template.bracketize_ipv6() has a build-in check if the supplied address is of IPv6 AFI. No need to code an external check arround that. | |||
2022-11-19 | Merge pull request #1666 from nicolas-fort/T4830-nat66 | Christian Poessinger | |
T4830: nat66: fix how nat66 rules are written in nftables | |||
2022-11-19 | T4830: nat66: fix how nat66 rules are written in nftables, so translation ↵ | Nicolas Fort | |
works as expected | |||
2022-11-19 | Merge pull request #1665 from jestabro/op-mode-value-error | Christian Poessinger | |
IPsec: T4828: raise op-mode error on incorrect value | |||
2022-11-18 | IPsec: T4828: raise op-mode error on incorrect value | John Estabrook | |
2022-11-18 | Merge pull request #1664 from sever-sever/T4826 | Christian Poessinger | |
T4826: Fix login pubkey key type ed25519-sk ecdsa-sk | |||
2022-11-18 | T4826: Fix login pubkey key type ed25519-sk ecdsa-sk | Viacheslav Hletenko | |
Requires full key type name like sk-ecdsa-sha2-nistp256@openssh.com and sk-ssh-ed25519@openssh.com | |||
2022-11-18 | Merge pull request #1662 from jestabro/config-script-dependency | Daniil Baturin | |
firewall: T4821: correct calling of conf_mode script dependencies | |||
2022-11-18 | Merge pull request #1645 from aapostoliuk/T4793-sagitta | Christian Poessinger | |
T4793: Added warning about disable-route-autoinstall | |||
2022-11-18 | T4793: Added warning about disable-route-autoinstall | aapostoliuk | |
Added warning message about disable-route-autoinstall when ipsec vti is used. | |||
2022-11-17 | Merge pull request #1654 from sarthurdev/pbr_refactor | Christian Poessinger | |
policy: T2199: T4605: Migrate policy route interface node | |||
2022-11-17 | firewall: T4821: correct calling of conf_mode script dependencies | John Estabrook | |
2022-11-17 | firewall: T4821: add support for adding conf_mode script dependencies | John Estabrook | |
2022-11-17 | Merge pull request #1660 from aapostoliuk/T4819-sagitta | Christian Poessinger | |
T4819: Allow printing Warning messages in multiple lines with \n | |||
2022-11-16 | Merge pull request #1661 from roedie/T4794 | Christian Poessinger | |
T4794: Fix show show firewall name | |||
2022-11-16 | T4794: Fix show show firewall name | Sander Klein | |
show firewall name <name> will output an error as explained in https://phabricator.vyos.net/T4794 | |||
2022-11-16 | firewall: T4821: add utility to load script as module | John Estabrook | |
2022-11-16 | containers: T2216: support re-install via dpkg of vyos-1x-smoketest package | Christian Poessinger | |
skopeo does not support overwriting an image - simply remove and readd it. | |||
2022-11-16 | T4819: Allow printing Warning messages in multiple lines with \n | aapostoliuk | |
Allow printing Warning messages and DeprecationWarning in multiple lines with \n | |||
2022-11-16 | bridge: T4673: remove "sudo" as there is no need to elevate permissions | Christian Poessinger | |
2022-11-16 | Revert "Revert "dns: T4799: fix bug with not reloading powerdns config"" | Christian Poessinger | |
This reverts commit 44df1cea1ebc3296844c5c35cf053a92cda4b944. | |||
2022-11-16 | Revert "smoketest: T4652: adjust PowerDNS process name for 4.8 version" | Christian Poessinger | |
This reverts commit 726cdf8bfd27d751737383102fa205f3c082710c. | |||
2022-11-15 | T4812: Add op-mode Show vpn ipsec connections | Viacheslav Hletenko | |
Add op-mode CLI "show vpn ipsec connections" Add the ability to show all configured connections/tunnels and their states. Ability to get --raw data | |||
2022-11-15 | Merge pull request #1658 from vfreex/fix-ns-config2 | Christian Poessinger | |
T4815: ip-up/down scripts needs the executable bit | |||
2022-11-15 | T4815: ip-up/down scripts needs the executable bit | Yuxiang Zhu | |
ip-up/down scripts added in https://github.com/vyos/vyos-1x/pull/1656 need the executable bit. | |||
2022-11-14 | Merge pull request #1653 from jestabro/trace-migration | John Estabrook | |
migration: T4808: add details of configtree operations to migration log | |||
2022-11-14 | Merge pull request #1655 from fett0/T4813 | Christian Poessinger | |
T4813: Add L3vpn over gre option from route-map | |||
2022-11-14 | Merge pull request #1656 from vfreex/fix-ns-config | Christian Poessinger | |
T4815: Fix various name server config issues | |||
2022-11-14 | T4815: Fix various name server config issues | Yuxiang Zhu | |
1. When a PPPoE session is connected, `pppd` will update `/etc/resolv.conf` regardless of `system name-server` option unless `no-peer-dns` is set. This is because `pppd` vendors scripts `/etc/ppp/ip-up.d/0000usepeerdns` and `/etc/ppp/ip-down.d/0000usepeerdns`, which updates `/etc/resolv.conf` on PPPoE connection and reverts the change on disconnection. This PR removes those scripts and adds custom scripts to update name server entries through `vyos-hostsd` instead. 2. There is a typo in `/etc/dhcp/dhclient-enter-hooks.d/04-vyos-resolvconf, which misspells variable name `new_dhcp6_name_servers` as `new_dhcpv6_name_servers`. This causes IPv6 name server entries in `vyos-hostsd` not updated when dhclient receives nameservers from DHCPv6. 3. Regular expressions in scripts under `/etc/dhcp/dhclient-enter-hooks.d` and `/etc/dhcp/dhclient-exit-hooks.d/` are not enclosed in `^$`, so those IPv4 related branches (like `BOUND`) could be mistakenly executed when an IPv6 reason (like `BOUND6`) is given. | |||
2022-11-13 | T4813: add l3vpn over gre option from route-map | fett0 | |
2022-11-13 | l3VPN : T4182: add l3vpn over gre option from route-map | fett0 | |
2022-11-11 | policy: T2199: T4605: Migrate policy route interface to `policy route|route6 ↵ | sarthurdev | |
<name> interface <ifname>` * Include refactor to policy route to allow for deletion of mangle table instead of complex cleanup * T4605: Rename mangle table to vyos_mangle | |||
2022-11-11 | smoketest: T4284: add basic QoS config to be loaded for migration | Christian Poessinger | |
2022-11-11 | smoketest: dns: T738: add test for default value of port | Christian Poessinger | |
2022-11-10 | Update reviewers.yml | Yuriy Andamasov | |
update reviewers | |||
2022-11-10 | migration: T4808: print configtree operations during migration | John Estabrook | |
Print configtree operations to stdout during migration; the migrator will log the output. |