summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-06-24Merge pull request #4568 from factor2431/currentChristian Breunig
T7531: Add FRR no bgp ipv6-auto-ra option
2025-06-23pki: T7573: fix TypeError when HAProxy is not in useChristian Breunig
Commit 59d86826a2f ("haproxy: T7122: add ACME/certbot bootstrap support") introduced a regression where a None value was inadvertently iterated over. This patch prevents the invalid access by verifying that all required keys are present in the dictionary before proceeding.
2025-06-23pki: T7574: add optional force argument to renew certbot-issued certificatesChristian Breunig
Certbot renewal command in op-mode "renew certbot" only works if any of the certificates is up for renewal. There is no CLI option to forcefully renew a certificate. This is about adding a force option to the CLI and with this addition move the entire certbot renew handling to new-style op-mode commands. vyos@vyos:~$ renew certbot force - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Processing /config/auth/letsencrypt/renewal/vyos.conf - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Renewing an existing certificate for vyos.io - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Congratulations, all renewals succeeded: /config/auth/letsencrypt/live/vyos/fullchain.pem (success) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Hook 'post-hook' ran with output: Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done.
2025-06-23Merge pull request #4571 from c-po/T7355-cleanupChristian Breunig
T7355: periodical cleanup of unused Python3 import statements
2025-06-23T7355: periodical cleanup of unused Python3 import statementsChristian Breunig
2025-06-23T7570: add missing list of scripts to be committed, needed for configdepJohn Estabrook
2025-06-23Merge pull request #4569 from dmbaturin/T6144-update-free-space-checkDaniil Baturin
installer: T6144: require at least 2GB of free space for image upgrade
2025-06-21T7561: generate json if no ambiguous paths in (a subset of) XML filesJohn Estabrook
2025-06-20T7561: add option --check-path-ambiguity to show duplicate pathsJohn Estabrook
2025-06-20T7561: refine xml consistency report to ignore children and file fieldsJohn Estabrook
2025-06-20T7561: minimize risk of collision with possible node namesJohn Estabrook
2025-06-20T7561: simplify op-mode-definitions XML cache and add interface methodsJohn Estabrook
The original implementation of the op-mode XML cache generation resulted in a structure that was difficult to use, for example, in documentation generation. The source of complication is that, unlike the XML of interface-definitions, path names are not unique: the same path may occur as both a regular node and as a tag node. Here we simplify the underlying structure by enriching path names with type information, thus disambiguating paths. An interface to the cache is provided by explicit generator and lookup functions.
2025-06-20installer: T6144: require at least 2GB of free space for image upgradeDaniil Baturin
2025-06-20T7531: Add FRR no bgp ipv6-auto-ra optionfactor2431
2025-06-19Merge pull request #4567 from kumvijaya/currentChristian Breunig
T7564: added darker ruff lint workflow
2025-06-19T7564: added darker ruff lint workflowkumvijaya
2025-06-19Merge pull request #4557 from dmbaturin/T7541-make-every-op-mode-path-uniqueDaniil Baturin
op-mode: T7541: convert duplicate nodes and tag nodes to standalone tag nodes
2025-06-19Merge pull request #4556 from dmbaturin/T7543-clear-interface-countersDaniil Baturin
op-mode: T7543: move "clear interfaces <type> [name] counters" to "clear interfaces counters [type] [name]"
2025-06-19Merge pull request #4555 from dmbaturin/T7541-standalone-tag-node-supportDaniil Baturin
op-mode: T7542: add support for "standalone" behavior of operational mode tag nodes
2025-06-19Merge pull request #4564 from factor2431/fix-wireguard-fwmarkChristian Breunig
T7554: fix wireguard fwmark parsing
2025-06-19Merge pull request #4560 from c-po/ruff-lintChristian Breunig
T7564: GitHub: remove ruff linter PR check - should be an automated review
2025-06-19T7564: GitHub: remove ruff linter PR check - should be an automated reviewChristian Breunig
Consensus amongst the developers was to rather move the hard PR check to a soft check in form of an automated review by a Bot using GitHub actions.
2025-06-19Merge pull request #4558 from natali-rs1985/T6951Daniil Baturin
firewall: T6951: Add a configuration command for ethertypes that bridge firewalls should always accept
2025-06-19Merge pull request #4566 from jestabro/static-route-migrationDaniil Baturin
migration: T6968: check for ip address as next-hop-interface
2025-06-18migration: T6968: check for ip address as next-hop-interface in 1.3.xJohn Estabrook
1.3.x did not disallow an ip address as value of: protocols static route addr next-hop-interface Consequently, the case should be checked and handled during migration.
2025-06-18Merge pull request #37 from zdc/T7223-currentViacheslav Hletenko
XDP/Mellanox: T7223: Fixed interfaces initialization
2025-06-18XDP/Mellanox: T7223: Fixed interfaces initializationzdc
For the XDP driver and Mellanox NIC, we create `defunct_*` interfaces to hide original interfaces from CLI, when they are replaced with VPP-enabled pairs. But sometimes IP addresses are not flushed from these `defunct_*` interfaces, which leads to broken routing afterward. This commit introduces an additional flush operation for `defunct_*` interfaces to ensure that they do not conflict with VPP interfaces.
2025-06-18T7554: fix wireguard fwmark parsingfactor2431
2025-06-17firewall: T6951: Add a configuration command for ethertypes that bridge ↵Nataliia Solomko
firewalls should always accept
2025-06-17container: T7473: fix show/monitor container log failed when log-driver is ↵opswill
journald
2025-06-17Merge pull request #4559 from natali-rs1985/T7506Christian Breunig
vrf: T7506: Do not use default table 254 for VRF
2025-06-17vrf: T7506: Do not use default table 254 for VRFNataliia Solomko
2025-06-15Merge pull request #4542 from yunzheng/T3681-remove-pppChristian Breunig
vyos-1x-vmware: T3681: Remove extra -x flag from Python bytecompile
2025-06-12Merge pull request #34 from natali-rs1985/T7488Viacheslav Hletenko
T7488: Make VPP restartable
2025-06-12Merge pull request #4552 from jestabro/reset-sectionViacheslav Hletenko
T7488: add utility for automatic rollback of section on apply stage error
2025-06-12Merge pull request #4497 from yzguy/T7432Daniil Baturin
T7432: RPKI VRF Support
2025-06-12Merge pull request #4546 from sarthurdev/T7056Daniil Baturin
openvpn: T7056: Raise error if non-TAP device is bridged
2025-06-12Merge pull request #4554 from c-po/wwan-smoketestDaniil Baturin
smoketest: T7539: improve Kernel option check for WWAN
2025-06-12op-mode: T7541: convert duplicate nodes and tag nodes to standalone tag nodesDaniil Baturin
where it is possible without changing the command syntax
2025-06-11op-mode: T7543: move "clear interfaces <type> [name] counters" to "clear ↵Daniil Baturin
interfaces counters [type] [name]"
2025-06-11op-mode: T7542: add support for "standalone" tag node callsDaniil Baturin
2025-06-11smoketest: T7539: improve Kernel option check for WWANChristian Breunig
2025-06-11smoketest: T7539: improve Kernel option check for INOTIFY STACKFS patchsetChristian Breunig
2025-06-11Merge pull request #4553 from dmbaturin/T7540-reset-connectionViacheslav Hletenko
op-mode: T7540: move "clear interface connection" to "reset connection"
2025-06-11op-mode: T7540: move "clear interface connection" to "reset connection"Daniil Baturin
2025-06-10T7488: exit silently if path doesn't exist, unless debugJohn Estabrook
2025-06-10T7488: allow reloads outside of config sessionJohn Estabrook
2025-06-10T7488: add utility for automatic rollback of section on apply stage errJohn Estabrook
2025-06-10configd: T7488: allow distinction of first-order error verify vs applyJohn Estabrook
Leave hint if vyos-configd encounters an error in the generate/apply stages: this only detects 'first-order' differences, meaning those originating from the called config mode script, and not its dependencies. This is useful for supporting automatic rollback for certain cases of apply stage error.
2025-06-10Merge pull request #4550 from ↵Daniil Baturin
dmbaturin/T7527-eliminate-embedded-op-mode-shell-snippets op-mode: T7527: move assorted embedded shel snippets to script files
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-03 18:00:24 +0000