summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-10-06Revert "bgp: T7760: deprecate per bgp vrf instance system-as node"John Estabrook
This reverts commit d871fe9c4c65de87232802ed54b263c9b2824391.
2025-10-06Revert "bgp: T7760: remove per vrf instance system-as node"John Estabrook
This reverts commit 85fe32f0e1a91a47fe4a6d4a5cdd6ac516dcc3b9.
2025-10-06Revert "migrator: T7760: remove debug print statement"John Estabrook
This reverts commit 3f8404ac78e1a31e8afcacc6ce8e7331130d2093.
2025-10-06Revert "bgp: T7760: improfe verify() logic on default VRF removal"John Estabrook
This reverts commit 7da3fcc9b7306f2e241716aa26b518540f3e3471.
2025-10-06T7818: remove unneeded calls of get_cli_kernel_options causing regressionJohn Estabrook
The call of get_cli_kernel_options is made conditional to resolve T7818; remove later addition of unconditional calls causing regression.
2025-10-06Merge pull request #4770 from c-po/wlb-sudoDaniil Baturin
wlb: T7902: remove explicit calls to sudo
2025-10-06T7887: system_option: Add validation for memory hugepage-countNataliia Solomko
Move smoke test for hugepages to test_vpp.py
2025-10-03T7907: archive config file on first boot to avoid misleading log entryJohn Estabrook
Restrictions on writing an empty config file in T7709 lead to a misleading log entry on first boot, in the absence of a baseline archived config file; explicitly create.
2025-10-03Merge pull request #4774 from dmbaturin/T7898-no-container-mac-system-uuidDaniil Baturin
vyos.utils.network: T7898: check if system UUID is available before trying to use it for host identity generation
2025-10-03Merge pull request #4773 from sever-sever/T7905Viacheslav Hletenko
T7905: Add system login to config-sync
2025-10-03vyos.utils.network: T7898: check if system UUID is availableDaniil Baturin
before trying to use it for host identity generation
2025-10-03T7905: Add system login to config-syncViacheslav
Add the ability to sync system login between primary and secondary nodes ``` set service config-sync section system login ```
2025-10-03Merge pull request #4771 from jestabro/airbag-enable-log-falseChristian Breunig
T7903: set airbag enable to default log=False
2025-10-02Merge pull request #4769 from c-po/pki-acme-listen-addressJohn Estabrook
pki: T7885: check_port_availability() can't be used during system boot
2025-10-02T7903: set airbag enable to default log=FalseJohn Estabrook
The default setting for airbag enable redirects sys.stderr by way of a singleton class. Though this construction is not unreasonable, it has been implicated in recent bugs, and is disabled pending a full anaylsis.
2025-10-02wlb: T7902: remove explicit calls to sudoChristian Breunig
Configuration mode scripts are executed under the context of vyos-configd or vyos-commitd and thus do not need an explicit call to sudo. Permission handling is done outside.
2025-10-02container: T7863: Add user-defined MAC option for containers (#4762)l0crian1
2025-10-02pki: T7885: add openconnect to the list of used_by servicesChristian Breunig
2025-10-02config: T7885: show user Warning() instead of hard error on ACME cert issueChristian Breunig
This complements commit ae74a511e (pki: T7885: support full ACME setup via renew certbot force). If /config/auth/letsencrypt is missing, ACME certificate data can't be merged into the VyOS configuration, preventing interface (e.g., ethernet) setup during boot. This change ensures basic IP connectivity is established, allowing remote management instead of leaving the system entirely inaccessible. This is not what we will expect but if a user deletes /config/auth/letsencrypt - this is what will happen.
2025-10-02pki: T7885: "renew certbot force" now supports setting up ACME from scratchChristian Breunig
Assume someone deleted the certbot_config folder, "renew certbot force" alone will not work as there are no configuration files left to know what to renew. Re-run CLI PKI helper to initially request certificates via ACME again. This "should" (famous last words) never be the case - but sometimes the universe has a bad time.
2025-10-02pki: T7885: check_port_availability() can't be used during system bootChristian Breunig
A call to check_port_availability() will always fail during system boot when listen_address is set and the address is not yet assigned to an interface. This happens b/c PKI subsystem is called prior to any inteface - e.g. ethernet - and thus the OS will always be unable to bind() a socket() to a non existing IP address.
2025-10-02kea: T7823: DHCP-server lease cannot be clearedcanoziia
* kea: T7823: DHCP-server lease cannot be cleared * Update smoketest/scripts/cli/test_service_dhcp-server.py Co-authored-by: Christian Breunig <christian@breunig.cc> --------- Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-10-02Merge pull request #4739 from roedie/T7852Daniil Baturin
T7852: Switch to yescrypt password encryption
2025-10-02Merge pull request #4758 from dmbaturin/T7871-op-mode-constraintsDaniil Baturin
op-mode: T7871: add support for op mode command argument constraints
2025-10-02Merge pull request #4761 from natali-rs1985/T7884Daniil Baturin
T7884: VPP: dependency issue when set interface address and NAT44 address translation interface in one commit
2025-10-02Merge pull request #4764 from alexandr-san4ez/T7895-currentDaniil Baturin
vyos-dhcp: T7895: rename "DHCP Server" column to "Lease Time"
2025-10-02Merge pull request #4768 from awolfnet/currentDaniil Baturin
op-mode: T7868: fix op-cmd "reset ip arp table" is not working
2025-10-02T7884: VPP: dependency issue when set interface address and NAT44 address ↵Nataliia Solomko
translation interface in one commit Moved dependencies for NAT to be executed after interfaces_ethernet, and all settings for the interface (including interface address) have already been applied
2025-10-02op-mode: T7868: fix op-cmd "reset ip arp table" is not workingawolfnet
2025-10-01Merge pull request #4734 from alexandr-san4ez/T4251-currentJohn Estabrook
syslog: T4251: Add TLS support to syslog
2025-10-01vyos-dhcp: T7895: rename "DHCP Server" column to "Lease Time"vanitypurpose
(cherry picked from commit e7c8867b75f6855e93792ddd255bf0ad2b2464b1)
2025-09-30Merge pull request #4763 from c-po/config-boot-motdChristian Breunig
boot-config-loader: T7889: Inform user during login of config-load issues
2025-09-30Merge pull request #4760 from c-po/pppoe-client-smoketestsChristian Breunig
smoketest: T7858: add PPPoE client tests with IPv4, IPv6 and DHCPv6-PD
2025-09-30boot-config-loader: T7889: Inform user during login of config-load issuesChristian Breunig
As T7885 turns out to be a config load related bug the user will only be informed when entering conf mode that something is off. vyos@vyos:~$ configure WARNING: There was a config error on boot: saving the configuration now could overwrite data. You may want to check and reload the boot config More information is displayed on tty0 of the router - but not everyone has access to tty0. This change is about copying the message displayed on tty0 to the MOTD system.
2025-09-30smoketest: T7858: use pylint for our testcasesChristian Breunig
2025-09-30smoketest: T7858: add PPPoE client tests with IPv4, IPv6 and DHCPv6-PDChristian Breunig
VyOS includes a full-featured PPPoE server (BRAS), but it was previously not exercised during embedded platform smoketests. This commit extends the smoketest suite to include a basic PPPoE server configuration. The test starts a local PPPoE server instance that provides both IPv4 and IPv6 addresses, including DHCPv6-PD for prefix delegation. The client side attempts to establish a PPPoE session and verifies that the assigned addresses and prefixes are within the expected configured pools. Connection is established through virtual-ethernet interface pairs. This helps ensure that core PPPoE functionality works correctly in the base system image and catches regressions early.
2025-09-30smoketest: T7858: make failfast main argument dynamicChristian Breunig
When smoketest debugging is enabled (by creating the file /tmp/vyos.smoketest.debug), all available smoketests will fail fast instead of running to completion. This helps reduce test time when something is broken or undergoing refactoring, as it avoids waiting for the full test suite to finish.
2025-09-30syslog: T4251: Add TLS support to syslogOleksandr Kuchmystyi
Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes. This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.
2025-09-30Merge pull request #4744 from sarthurdev/kea-vrfDaniil Baturin
kea: T7854: Use helper for Kea VRF systemd units
2025-09-29Merge pull request #4754 from natali-rs1985/T7815Viacheslav Hletenko
T7815: VPP: NAT44 rules with port requires protocol specification and vice versa
2025-09-27frr: T7875: add pre-apply validation using frr-reload --testChristian Breunig
Ensures rendered FRR config passes sanity checks before applying. Prevents issues like T7089 where bad template syntax broke routing. Improves robustness and minimizes risk of config-induced outages.
2025-09-26bgp: T7760: improfe verify() logic on default VRF removalChristian Breunig
After commit 85fe32f0e ("bgp: T7760: remove per vrf instance system-as node") BGP isntances running in a VRF will no longer have a system-as node set. This results in "set vrf name <name> protocols bgp" becomeing a valid CLI path. When reading in the config dict - we now might see {'protocols': {'bgp': {}} as a valid entry. We do need to account for this empty dictionary.
2025-09-26migrator: T7760: remove debug print statementChristian Breunig
2025-09-26op-mode: T7871: add support for op mode command argument constraintsDaniil Baturin
2025-09-26image: T5455: Add migration of SSH `known_hosts` files during image upgradeOleksandr Kuchmystyi
During upgrade, the script now checks if any `known_hosts` files exist. If so, it prompts the user to save these SSH fingerprints, and upon confirmation, copies the files to the new image persistence directory.
2025-09-25Merge pull request #4745 from jestabro/catch-frr-exceptionViacheslav Hletenko
T7855: redirect stdout and catch exceptions on frr render
2025-09-25T7815: VPP: NAT44 rules with port requires protocol specification and vice versaNataliia Solomko
2025-09-25Merge pull request #4753 from jestabro/config-save-sync-atomicDaniil Baturin
T7709: Add file sync and atomic write to config save script
2025-09-25Merge pull request #4669 from sarthurdev/tpm_fixesDaniil Baturin
tpm: T7713: T7717: Multiple TPM fixes
2025-09-25Merge pull request #4756 from natali-rs1985/T7862Viacheslav Hletenko
T7862: VPP: Enable support of ixgbevf driver for DPDK
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-06 02:10:24 +0000