summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-09-20T7852: Switch to yescypt for password encryptionroedie
Accidentally slipped in 2 whitespace corrections
2025-09-20frr_exporter: T7851: export IPv6 BGP sessionsPeter Lehmann
2025-09-20Merge pull request #4733 from l0crian1/reset-ip-bgp-fixViacheslav Hletenko
op-mode: T7516: fix reset ip bgp base commands
2025-09-20ssh: T7839: fix warning on deprecated algorithms during commitChristian Breunig
The list calculation of in-use but deprecated SSH hostkey algorithms was wrong. This was implemented in commit 6deda171e ("ssh: T7839: add deprecation warning for DSA hostkey-algorithm usage"). It always returned the content of the list of deprecated algorithms, but not the list of deprecated algorithms actually - in use - by the configuration. This has been corrected. Before: DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will be removed in VyOS 1.6. Please update affected keys to a supported algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication failures after the upgrade. The following hostkey-algorithms are in use: ssh-dss, ssh-dss-cert-v01@openssh.com After: DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will be removed in VyOS 1.6. Please update affected keys to a supported algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication failures after the upgrade. The following hostkey-algorithms are in use: ssh-dss The generation of the MOTD was not affected!
2025-09-20Debian: T7847: add explicit dependency on net-tools providing arp binaryChristian Breunig
2025-09-20Merge pull request #4732 from jestabro/simplified-bind-mountChristian Breunig
T7836: move bind mount of /config to vyos-1x
2025-09-19Merge pull request #4730 from natali-rs1985/T7842Viacheslav Hletenko
T7842: VPP add pppoe enable-pass-nd-and-dhcpv6 option
2025-09-19T7836: use /opt/vyatta/etc/config as source of truth in tpm encryptionJohn Estabrook
The mount point /opt/vyatta/etc/config is considered the source of truth whereas /config is simply a bind mount of convenience. As the latter is no longer defined at boot, all operations should use the former.
2025-09-19T7836: move bind mount of /config to vyos-1xJohn Estabrook
We are removing the bind mount construction from the initrd components in live-boot, as: (1) it is not needed before initialization in the vyos-router script (2) does not correctly update inodes on libc rename (3) fails on the livecd (cf. /var/log/live/boot.log)
2025-09-19op-mode: T7516: fix reset ip bgp base commandsl0crian1
2025-09-18Merge pull request #4723 from sarthurdev/kea3.0Viacheslav Hletenko
kea: T7821: Update Kea to 3.0
2025-09-18Merge pull request #4692 from l0crian1/fw-pre-def-fixSimon
op-mode: T6857: Fix default action for prerouting hook
2025-09-18Merge pull request #4728 from sarthurdev/T7825Simon
nose: T7825: Use nose2 for unit tests
2025-09-18nose: T7825: Use nose2 for unit testssarthurdev
2025-09-18Merge pull request #4724 from l0crian1/fix-container-branchChristian Breunig
container: T7681: fix multiple name servers
2025-09-18Merge pull request #4729 from natali-rs1985/T7805Daniil Baturin
T7805: VPP remove unused 'default-hugepage-size' from memory section and restrict page sizes in xml
2025-09-18op-mode: T7746: Fix 'show interfaces' description wrapping (#4725)Christian Breunig
- Fixed incorrect wrapping of 'show interfaces' description
2025-09-18Merge pull request #4731 from c-po/openssh-T7787Daniil Baturin
T7787: add deprecation warning for ssh-dss keys
2025-09-18container: T6673: Fix restart of containers with podman (#4691)l0crian1
Fixed issue with podman and systemd sync when restarting containers with 'podman restart' command. - Placed podman storage directory in vyos/defaults.py - Replaced repeated declarations with vyos.defaults.directories['podman_storage']
2025-09-18T7842: VPP add pppoe enable-pass-nd-and-dhcpv6 optionNataliia Solomko
2025-09-18T7805: VPP remove unused 'default-hugepage-size' from memory section and ↵Nataliia Solomko
restrict page sizes in xml
2025-09-18T7737: use vyconf aware add/delete_cli_node if enabledJohn Estabrook
2025-09-18T7737: add vyconf aware versions of add/delete_cli_nodeJohn Estabrook
2025-09-18T7737: add auxiliary set/delete functionsJohn Estabrook
Add methods to request auxiliary changes to the config file during a commit. Used only for non-actionable updates, for example removing a plaintext password and adding the encrypted password.
2025-09-18T7737: inject env vars provided by vyconfd sessionJohn Estabrook
2025-09-18T7737: update init data as needed for vyos-commitd environmentJohn Estabrook
Provide env vars of config session for injection into the commitd environment. This information is needed for certain config-mode scripts, namely those that reference the module vyos.utils.auth.
2025-09-18T7737: use standardized env var for config session pidJohn Estabrook
2025-09-18T7737: add generated protobuf filesJohn Estabrook
2025-09-18T7737: add commit hashes for analogue of legacy configfsJohn Estabrook
2025-09-18Merge pull request #4722 from natali-rs1985/T7796Daniil Baturin
T7796: PPPoE-server add mapping in vpp if vpp-cp is enabled
2025-09-18Merge pull request #4708 from sarthurdev/T114Daniil Baturin
wlb: T114: Add firewall group support for WAN load balancer
2025-09-18Merge pull request #4727 from kumvijaya/currentDaniil Baturin
T7746: updated conflict workflow reference in workflow
2025-09-17ssh: T7839: add deprecation warning for DSA hostkey-algorithm usageChristian Breunig
OpenSSH in Debian Trixie has removed support for ssh-dss (DSA) keys, which will prevent users with such keys from logging in after upgrade. To avoid lockouts, add a loud deprecation warning when users log in using a DSA key. This warning advises affected users to replace their keys with a supported algorithm (e.g., ed25519 or RSA) before the upgrade. Deprecation warning will be displayed during "commit" but also as MOTD to inform on this issue during every login. DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will be removed in VyOS 1.6. Please update affected keys to a supported algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication failures after the upgrade. The following hostkey-algorithms are in use: ssh-dss, ssh-dss-cert-v01@openssh.com
2025-09-17Makefile: T7787: error out early if pylint failsChristian Breunig
2025-09-17login: T7839: add deprecation warning for DSS public-key usageChristian Breunig
OpenSSH in Debian Trixie has removed support for ssh-dss (DSA) keys, which will prevent users with such keys from logging in after upgrade. To avoid lockouts, add a loud deprecation warning when users log in using a DSA key. This warning advises affected users to replace their keys with a supported algorithm (e.g., ed25519 or RSA) before the upgrade. Deprecation warning will be displayed during "commit" but also as MOTD to inform on this issue during every login. DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will be removed in VyOS 1.6. Please update affected keys to a supported algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication failures after the upgrade. The following users are using SSH-DSS keys for authentication. User "vyos" with deprecated public-key named: foo
2025-09-17T7746: updated conflict workflow reference in workflowkumvijaya
2025-09-17Merge pull request #4726 from sever-sever/T7785Viacheslav Hletenko
T7785: VPP enable L3 mode after removing interface from a bridge
2025-09-17T7796: PPPoE-server add mapping in vpp if vpp-cp is enabledNataliia Solomko
2025-09-17T7785: VPP enable L3 mode after removing interface from a bridgeViacheslav
We have to re-enable L3 mode for an interface after removing the interface from a bridge. From the VPP API @param enable - Enable beige mode if not 0, else set to L3 mode
2025-09-16op-mode: T7746: Fix 'show interfaces' description wrappingl0crian1
- Fixed incorrect wrapping of 'show interfaces' description
2025-09-16Merge pull request #4721 from natali-rs1985/T7806Viacheslav Hletenko
T7806: VPP do not allow skip-cores to be configured without main-core
2025-09-16container: T7681: fix multiple name serversl0crian1
- Fixed error with multiple name servers missing space between --dns options
2025-09-16T7806: VPP do not allow skip-cores to be configured without main-coreNataliia Solomko
2025-09-16Merge pull request #4696 from natali-rs1985/T7783Daniil Baturin
T7783: T7786: VPP clarify error messages for CPU requirements
2025-09-16Merge pull request #4688 from hedrok/T75-migration-to-ipt-netflowDaniil Baturin
T75: migrate from pmacct to ipt_NETFLOW
2025-09-16Merge pull request #4717 from c-po/no-ipv6-default-routeDaniil Baturin
dhcpv6: T7646: restore missing default route after upgrade
2025-09-16Merge pull request #4506 from davi2367/zbf-vrfDaniil Baturin
firewall: T7452: update rule generation for Zone-based firewall
2025-09-16T7783: T7786: VPP clarify error messages for CPU requirementsNataliia Solomko
2025-09-16T75: migrate from pmacct to ipt_NETFLOWKyrylo Yatsenko
* Change nft to iptables in system_flow-accounting.py as ipt_NETFLOW is iptales plugin * Remove specific and non-relevant pmacct options * Add ipt_NETFLOW options * Move 'interfaces' to 'netflow' tree * Support more flexible 'source-address' and 'source-interface' for each server instead of one source * Add migration script * Update op mode command 'show flow-accounting' * Update op mode command 'restart flow-accounting'
2025-09-15Merge pull request #4715 from c-po/ethernet-if-removalViacheslav Hletenko
ethernet: T7813: remove VLAN interfaces first on deletion
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-04 09:24:45 +0000