summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-01-16dhcp: T5840: Merge systemd service overrides for kea-ctrl-agentIndrajit Raychaudhuri
Default systemd service for kea-ctrl-agent expects `/etc/kea/kea-api-password` which is not used in VyOS. The systemd unit override to remove the condition does not need to be in a separate (templated and dynamic) override file and can be merged into the existing static override file.
2025-01-15T7046: add wrappers for reference tree cache utilsJohn Estabrook
2025-01-15T7046: normalize formattingJohn Estabrook
2025-01-15bonding: fix remove LCP kernel-interfacesViacheslav Hletenko
2025-01-15bonding: change priority to 304 to avoid prio inversionViacheslav Hletenko
2025-01-15remote: T7048: merge git environment with the os environmentRobert Gingras
allows utilizing ssh-agent and other environment-variable-based behavior customizations
2025-01-15Exclude GENEVE interfacesViacheslav Hletenko
2025-01-15warning: introduce a delay between add() and kernel_add()Viacheslav Hletenko
Introduce a delay to address instability in the VPP API, which may fail to create the LCP or establish a connection. This should be reviewed and resolved in future releases. This fixes confgurations with included kernel-itnerface (LCP) And all smoketests Example: set interfaces ethernet eth1 address '192.0.2.1/30' set vpp settings interface eth1 driver 'dpdk' set vpp interfaces vxlan vxlan10 remote '192.0.2.2' set vpp interfaces vxlan vxlan10 source-address '192.0.2.1' set vpp interfaces vxlan vxlan10 vni '10' set vpp interfaces vxlan vxlan10 kernel-interface 'vpptap10' Without this delay we get: vyos@r14# commit [ vpp interfaces vxlan vxlan10 ] Traceback (most recent call last): File "/usr/libexec/vyos/services/vyos-configd", line 139, in run_script script.apply(c) File "/usr/libexec/vyos//conf_mode/vpp_interfaces_vxlan.py", line 174, in apply i.kernel_add() File "/usr/lib/python3/dist-packages/vyos/vpp/interface/vxlan.py", line 85, in kernel_add self.vpp.lcp_pair_add(self.ifname, self.kernel_interface) File "/usr/lib/python3/dist-packages/vyos/vpp/control_vpp.py", line 79, in check_retval_wrapper return_value = decorated_func(cls, *args, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3/dist-packages/vyos/vpp/control_vpp.py", line 58, in api_safe_wrapper return decorated_func(cls, *args, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3/dist-packages/vyos/vpp/control_vpp.py", line 188, in lcp_pair_add return self.__vpp_api_client.api.lcp_itf_pair_add_del_v2(**api_call_args) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3/dist-packages/vpp_papi/vpp_papi.py", line 129, in __call__ return self._func(**kwargs) ^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3/dist-packages/vpp_papi/vpp_papi.py", line 564, in f return self._call_vpp(i, msg, multipart, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3/dist-packages/vpp_papi/vpp_papi.py", line 853, in _call_vpp raise VPPIOError(2, "VPP API client: read failed") vpp_papi.vpp_papi.VPPIOError: [Errno 2] VPP API client: read failed
2025-01-14vpp: add example of adding vxlan kernel_addViacheslav Hletenko
2025-01-13Merge pull request #4299 from c-po/radius-smoketestChristian Breunig
T7038: T7039: fix broken RADIUS IPv6 source address and add smoketests
2025-01-13Merge pull request #4301 from sarthurdev/T7041Christian Breunig
kea: T7041: Check lease hostname string is not empty
2025-01-13Merge pull request #4217 from aapostoliuk/T2326-circinusChristian Breunig
nhrp: T2326: NHRP migration to FRR
2025-01-13T681: Fix QoS DSCP filterkhramshinr
The left shift operation aligns the DSCP/TOS value with its bit position in the IP header. TC expects a DSCP value with this shift
2025-01-12kea: T7041: Check lease hostname string is not emptysarthurdev
2025-01-11Use VPPControl for the show class interfacesViacheslav Hletenko
2025-01-11Remove recursive_defaults from the get_config argViacheslav Hletenko
Do not use 'recursive_defaults' as argument of the funciton get_config() It cause vyos-1x/src/tests/test_configd_inspect.py signature checks fail AssertionError: 2 != 1 : 'vpp_interfaces_bonding.py': 'get_config' incorrect signature
2025-01-11Move VPPContron to interface initViacheslav Hletenko
2025-01-11Modify patch to build vyos-1x XMLViacheslav Hletenko
2025-01-11Merge pull request #4300 from jestabro/configd-inspect-by-astJohn Estabrook
T7042: drop use of inspect module in favor of ast for source analysis
2025-01-11radius: T7039: fix broken IPv6 source addressChristian Breunig
When configuring RADIUS to use IPv6 as connection to the server with an optional source-address set system login radius server 2001:db8::4 key '9LMVCtPYpG' set system login radius source-address '2001:db8::1' It will error out: pam_radius_auth(sshd:auth): Failed looking up source IP address [2001:db8::1] for server [2001:db8::4]:1812 (error=System error) The source address is not allowed to be in [] - thus the brackets need to be removed.
2025-01-11smoketest: T7038: add freeradius container to live validate login via RADIUSChristian Breunig
RADIUS is pretty sensible to its configuration. Instead of manual testing, extend the smoketest platform to ship a freeradius container and perform logins against a locally running freeradius server in a container.
2025-01-10T7042: drop use of inspect module in favor of ast for source analysisJohn Estabrook
This avoids importing the config mode script as a module, with requisite dependencies, which may be inconvenient.
2025-01-10Merge pull request #4291 from c-po/tacacs-smoketest-improvementChristian Breunig
Debian: T7023: download smoketest container images only once
2025-01-09Merge pull request #4283 from indrajitr/ddclient-update-20250106Christian Breunig
ddclient: T5791: Relocate process params to ExecStart
2025-01-09Remove conflict-componentsViacheslav Hletenko
2025-01-09nhrp: T2326: NHRP migration to FRRaapostoliuk
NHRP migration to FRR
2025-01-09ddclient: T5791: Relocate process params to ExecStartIndrajit Raychaudhuri
Pull up all the global parameters controlling process behavior to systemd service. Also remove `syslog=yes`` as it is not needed with `exec` type service.
2025-01-09Merge pull request #4296 from c-po/xml-cleanupChristian Breunig
xml: T5738: reuse existing alpha-numeric-hyphen-underscore building block
2025-01-09xml: T5738: reuse existing alpha-numeric-hyphen-underscore building blockChristian Breunig
2025-01-09Merge pull request #4293 from indrajitr/haproxy-backend-completionChristian Breunig
haproxy: T5222: Enable backend completion in service ruleset
2025-01-09Merge pull request #4294 from indrajitr/xml-reuse-rexexpChristian Breunig
xml: T5738: Reuse predefined regex constraint
2025-01-09Merge pull request #4295 from c-po/smoketest-T7033Christian Breunig
smoketest: T7033: nat source group test should use an existing interface
2025-01-09smoketest: T7033: nat source group test should use an existing interfaceChristian Breunig
2025-01-09Delete patches/vyos-1x/0001-Add-vpp-component-version.patchViacheslav Hletenko
Is not required after this commit https://github.com/vyos/vyos-1x/commit/4ca6177f782c336330054c72854e5edbb2fe6322
2025-01-09xml: T5738: Reuse predefined regex constraintIndrajit Raychaudhuri
2025-01-09haproxy: T5222: Enable backend completion in service rulesetIndrajit Raychaudhuri
Enable completion for backend in haproxy service ruleset like so: ``` set load-balancing haproxy service NAME rule 10 set backend ```
2025-01-08Merge pull request #4290 from jestabro/wildcard-transcludeDaniil Baturin
xml: T7029: allow wildcard in include directive
2025-01-08T6342: extend schema to handle documentation in the xml interface definitionrebortg
2025-01-08Debian: T7023: download smoketest container images only onceChristian Breunig
When setting up vyos-1x-smoketest package, the required container images will be fetched from the appropriate registry. During development one will re-install the vyos-1x generated packages periodically. In the past this triggered a re-download of the container images for every set-up of the package. Getting image source signatures Copying blob sha256:d3a4026919f923f4e0bb9a23a1e5c2d3c5593d31cbac8d2d6d032285b4852945 Copying config sha256:c1f39daffdeffeb97987901406e2ecef0fb2c2ca236fdfaf570d088426294d91 Writing manifest to image destination Storing signatures Getting image source signatures Copying blob sha256:a0d0a0d46f8b52473982a3c466318f479767577551a53ffc9074c9fa7035982e Copying blob sha256:064e2154c8ec1ddeb114ebc9db9a3876ee8883e9a14fe8622c31cb6f17b759f6 Copying blob sha256:7e3fbb46165bc5a98b12c136087a13992e30fe00ab4fab2bbe6c7edd657d8c5b Copying blob sha256:80a416511ac029206f3f824a15b1c94845c410242a1e463c466a1b3081f7e20f Copying blob sha256:339be6688c410f9851f6f09cf0c9d63819f8ca5f2bb09d93ce8c42714842f5ed Copying config sha256:6950ba3bd4492642b6c6c0c5f5bb88a5f2a48f700974a2bdba74333a65d9324e Writing manifest to image destination Storing signatures This change will download the container images only if the image is not present on the system.
2025-01-08Merge pull request #4286 from c-po/T7024-vrf-upChristian Breunig
vrf: T7024: instance name "up" and "down" are reserved and should not be used
2025-01-08xml: T7029: allow wildcard in include directiveJohn Estabrook
2025-01-08Move component version to conflict-components or dynamicViacheslav Hletenko
2025-01-08Add patch skip-unittest-during-build-XMLViacheslav Hletenko
2025-01-08Add patch vyos-1x component versionViacheslav Hletenko
2025-01-08op-mode: T5992: show dhcpv6 leases with (mostly) the same fields and orderNicolas Vandamme
2025-01-08Merge pull request #4284 from indrajitr/simplify-T7016Daniil Baturin
T7016: Simplify logic for force deleting dynamic IPv4 address from interface
2025-01-08op-mode: T5992: show dhcpv6 leases with (mostly) the same fields and orderNicolas Vandamme
2025-01-08smoketest: T6841: fix config tests which validate migration scripts (#4287)Christian Breunig
This complements commit dda428fc4 ("T6841: firewall: migrate existing VRF in zone based firewall") which provides the new configuration files after CLI was migrated.
2025-01-08smoketest: T6841: fix config tests which validate migration scriptsChristian Breunig
This complements commit dda428fc4 ("T6841: firewall: migrate existing VRF in zone based firewall") which provides the new configuration files after CLI was migrated.
2025-01-07Add XML CLI for conf and op-modeViacheslav Hletenko