| Age | Commit message (Collapse) | Author |
|---|
|
variables
since that means the command is malformed
|
|
that were revealed by the new cache format
|
|
|
|
|
|
Since AWS Gateway Load Balancer is specific to the AWS platform, its CLI and
binary dependencies don’t need to be included in generic images.
This commit removes the AWS GLB CLI definitions from all images and introduces
a new vyos-1x-aws package to provide the necessary CLI configuration and binary
dependencies.
|
|
to make it easy to access
|
|
mandatory
in the op mode cache generator
|
|
|
|
to distinguish them from fixed parts of the command
and allow rendering commands using a template processor
|
|
If we do not have the system options kernel the update fails
Change order for variables `k_cpu_opts` and `k_memory_opts`
If we do not have kernel_options set empty dictionary as
NoneType object has no attribue `get`
```
>>> kernel_options=None
>>> kernel_options.get('cpu', {})
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
AttributeError: 'NoneType' object has no attribute 'get'
>>>
>>>
>>> kernel_options={}
>>> kernel_options.get('cpu', {})
{}
>>>
```
|
|
|
|
If you have multiple images (tags) loaded for a container which point to the
exact same hash - you can only forcefully delete them.
vyos@vyos:~$ delete container image 70dc5806
Error: unable to delete image "70dc5806" by ID with more than one tag
([registry.io/foo/bar:v1.0 registry.io/foo/bar:v1.0.1]):
please force removal
In additon an image that is still beeing used can not be removed from the
system as this would cause infinite container restarts.
vyos@vyos:~$ delete container image all force
Cannot delete image "d205499ae8bb" because it is currently being used by
container "3b290f90e83d"!
|
|
|
|
This partially reverts commit 6b562aae2409 ("op-mode: T7459: eliminate direct
use of sudo in op mode commands") as the podman image listing currently only
works under superuser rights.
|
|
The reset_section.py script is used in a limited case for both (1)
recovery from an apply error in a config mode script and (2) recovery by
a service crash in a failure handler service. In the latter case, the
default pid must be os.getpid, not os.getppid, so as not to be called by
pid 1.
|
|
T7628: Fix non-TPM backed config encryption
|
|
isis: T7639: set SRv6 locator in ISIS
|
|
qat: T7662: add PCI ID range for Intel C62x virtual function devices
|
|
Multiple styles were used - streamline this to make it look more professional.
|
|
|
|
|
|
ipsec: T7593: Add dynamic prefix for local and remote traffic selectors
|
|
T7644: mirror workflow refactoring rollout
|
|
T7644: mirror workflow refactoring rollout
|
|
T7644: mirror workflow refactoring rollout
|
|
In case when there is no local/remote prefix configured in a tunnel settings,
a protocol configured for such tunnel is ignored.
The correct way to generate the configuration is to set the prefix
to `dynamic` if it was not set. The correct config for the described case is:
```
local_ts = dynamic[gre/]
remote_ts = dynamic[gre/]
```
|
|
ipsec: T7581: Fix unsupported 'all' protocol in site-to-site tunnels after upgrade to 1.4.x
|
|
upgrade to 1.4.x
Upgrading from VyOS 1.3.8 (strongSwan 5.7.2) to 1.4.x (strongSwan 5.9.11) caused
the IPsec service to fail if the configuration contained:
```
set vpn ipsec site-to-site peer <peer> tunnel <id> protocol 'all'
```
In 1.3.8, 'all' was supported in the CLI for protocol and converted internally to '%any'
in ipsec.conf traffic selectors, allowing the tunnel to match all protocols. However, in
1.4.x and strongSwan 5.9.11+, the '[all/]' syntax is no longer supported, and use of
'protocol all' produces an invalid traffic selector (e.g., 'x.x.x.0/24[all/]'), causing
the strongSwan service to fail on reload.
This fix ensures that 'protocol all' is converted to just the subnet notation (e.g.,
'x.x.x.0/24') in the generated traffic selector, restoring previous behavior and allowing
seamless service startup after upgrade.
|
|
|
|
|
|
|
|
T7649: Fix use hyphens instead of underscores for kernel options
|
|
T7175: Added VPP option
|
|
|
|
The ConfigTree for operation mode uses hyphens instaed of
underscores.
Fix kernel options during image upgrade.
|
|
|
|
T7649: Add missed system kernel options for image installer
|
|
* T7658: Increase max-map-count interval and default value to linux default
Also input a warning instead of ConfigError in case of "host-resources max-map-count" didn't pass the verification
* T7656: Clarify warning message for max-map-count option verification
|
|
pylint: T7648: disable some linter-checks hit by GitHub action pipeline
|
|
T5797: Adjust MSS clamping from forward to postrouting hook
|
|
Running pylint --errors-only ...
************* Module interfaces
src/op_mode/interfaces.py:42:54: E1101: Instance of '_IO' has no 'fileno' member (no-member)
************* Module show_techsupport_report
src/op_mode/show_techsupport_report.py:62:50: E1101: Instance of '_IO' has no 'fileno' member (no-member)
|
|
* T7626: op-mode: fix several op-mode command for syntax
update container image <container name>
show environment sensors
show log certbot
Signed-off-by: Date Huang <tjjh89017@hotmail.com>
* Update op-mode-definitions/show-log.xml.in
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---------
Signed-off-by: Date Huang <tjjh89017@hotmail.com>
Co-authored-by: Daniil Baturin <daniil@baturin.org>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
|
T7489: Fix output state of ipsec passthrough child
|
|
Add missed system kernel options to the image_installer do not
lose configured kernel options per an image upgrade.
|
|
|
|
Show state of passthrough tunnels as always up.
Passthrough children of connection have PASS mode but have no
sa and are not shown in vici list_sas.
Fix by passing mode from vici list_connections to _get_child_sa_state
and always return 'up' for child with PASS mode.
|
|
T7648: pylint depends on XML cache generated in interface_definitions
|
|
|
|
ipsec: T7504: Added IKEv2 retransmission options
|
|
T7637: T7605: update git submodule for typo and escape backslash
|
