| Age | Commit message (Collapse) | Author |
|---|
|
migration: T8280: Fix auth file read for interfaces on first boot of new image
|
|
FRR (#4994)
* sr-te: T6750: Adding Segment Routing Traffic Engineering portion of FRR
---------
Co-authored-by: Cheeze_It <none@none.com>
Co-authored-by: Christian Breunig <christian@breunig.cc>
|
|
T8539: Unable to traceroute using hostname and ipv6 source address
|
|
T8587: fix XML data type from u32 to u64 where range exceeds uint32 max
|
|
bgp: T8589: Add ead, es and [1-5] to route-map match evpn route-type
|
|
T8531: add Mergify config with commands restrictions
|
|
op-mode: T8305: Fix completion for "show isis neighbor <system-id>" command
|
|
kea: T8586: Skip static mappings without match criteria
|
|
utils: T8541: add write-config-file-value helper
|
|
Improve config formatting for valueless leaf nodes with a new helper.
Otherwise the rendered-to-string configuration would become
device ttyS0 {
kernel {
}
}
Whereas this would be the preferred representation:
device ttyS0 {
kernel
}
Co-authored-by: John Estabrook <jestabro@vyos.io>
|
|
|
|
T8293: Add ability to set timeout for high-availability health-check
|
|
Problem: The completion helper for `show isis neighbor` showed `system-id` as a literal keyword suggestion,
leading users to type exactly `system-id` instead of an actual neighbor name. Doing so returned
`Invalid system id system-id`. In reality, FRR accepts any real system-id (e.g. vyos01)
and returns correct per-neighbor details — the issue was purely in the completion hint misguiding the user.
Fix: Replaced the static `system-id` placeholder in the completion helper with a dynamic script that queries
`vtysh -c "show isis hostname"` and offers real neighbor names as tab-completion suggestions.
|
|
During first boot after installing a new VyOS image, migrations are
executed before the filesystem is fully initialized.
At this point `/config` is not yet bind-mounted, causing auth files
(certificates, keys, credentials) for OpenVPN, WireGuard and Ethernet
EAPoL interfaces under `/config/auth` to be inaccessible even though they
exist under the underlying `/opt/vyatta/etc/config/auth` path which is
available at all boot stages.
Add fallback logic to `read_auth_file()` to retry the file lookup under
`/opt/vyatta/etc/config/auth` when the file is not found under `/config/auth`.
|
|
Setting a timeout allows VRRP health-check scripts to run longer than the set interval.
Without timeout, keepalived considers the script as failed after interval seconds.
With timeout set higher than interval, the script has more time to complete
before being marked as failed and transitioning VRRP to FAULT state.
|
|
|
|
T8535: Remove next-hop-self for BGP link state
|
|
The following nodes specified u32 but their range values exceed the
uint32 maximum (4,294,967,295):
- service lldp interface location coordinate-based elin:
u32:0-9999999999 -> u64:0-9999999999
- vpn ipsec esp-group life-bytes:
u32:1024-26843545600000 -> u64:1024-26843545600000
- vpn ipsec esp-group life-packets:
u32:1000-26843545600000 -> u64:1000-26843545600000
|
|
BGP link-state doesn't support next-hop-self, so remove it.
|
|
Introduce src/helpers/write-config-file-value.py to patch a saved config.boot
from scripts by writing a quoted CLI path with an optional value (omit --value
to create a valueless node).
Extend vyos.utils.config.write_saved_value() to safely update saved configs:
create missing parent nodes before tagging (ConfigTree.set_tag requires nodes
to exist) and then write the requested value/valueless leaf back to disk.
Remove the legacy serial console activation script which is now replaced by the
helper-based approach. The helper is run once during ISO Image assembly and will
inject the approprate serial console defintiions into config.boot.default.
|
|
|
|
vpp: T8460: Use isolated cpus for VPP cpu-cores
|
|
VPP: T8495: fix issue with assigning acl on sub interfaces
|
|
T8534: refactor sysctl_(read|write) to accept key parts
|
|
T8490: Improve Typo Detection with exclusions for typos workflow check
|
|
|
|
|
|
|
|
T8532: merge unrelated histories of vyos-utils and vyos-1x repo
|
|
|
|
VPP CPU core assignment now uses kernel-isolated CPUs (from /sys/devices/system/cpu/isolated) with explicit corelist-workers instead of computing offsets from available cores with skip-cores/workers. Added validation that enough CPUs are actually isolated before VPP starts, and that isolate-cpus config only references existing CPU IDs. Moved smoketest for kernel option 'isolate-cpus' to test_vpp.py
|
|
firewall: T8446: Prevent chain with offload rule on local zone
|
|
|
|
bridge: T8411: Allow disabling MAC learning on bridge member interfaces
|
|
|
|
|
|
Interface names can contain dots (e.g. VLAN subinterfaces like eth0.10), which
conflicts with sysctl's dot-separated key syntax.
Change sysctl_read() and sysctl_write() to take key components as a list and
normalize each component by replacing . with / before invoking sysctl. This
fixes sysctl lookups/updates for VLAN subinterfaces.
Extend the SR-TE smoketest to cover a VLAN subinterface.
Previous error raising this issue:
vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/10/seg6_enabled: No such file or directory
vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/201/seg6_enabled: No such file or directory
|
|
T8445: T8335: Extend config activation system
|
|
Fix install location for validate-value which must be in $(VYOS_LIBEXEC_DIR)
instead of $(VYOS_LIBEXEC_DIR)/validators.
Co-authored-by: John Estabrook <jestabro@vyos.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* 'current' of github.com:vyos/vyos-utils: (65 commits)
T8269: add option to silence output of individual validators
T8306: update package version
vyos-op-run: T8306: add error messages for system exceptions
vyos-op-run: T8306: improve execution logic logging
vyos-op-run: T8301: improve the security of UID check and setuid logic
T8110: "list_interfaces --bondable" must not return VLAN subinterfaces
vyos-op-run: T7901: skip permission checks if the user is root
vyos-op-run: T8005: sanitize environment variables to prevent malicious variable injection
T7878: conflict check updated to use mergify
T7878: conflict check updated to use mergify
T7899: virtual-ethernet interfaces support broadcasts
Debian: T7899: bump dh compat version
T7758: add missing case to allow repeated option --type
T7758: allow repeated option --type in list_interfaces
vyos-op-run: T7745: add a command permission checking mechanism
op-mode: T7583: add a new operational command runner
T7644: mirror workflow refactoring rollout
T7579: fix of the run trigger for CLA
T7579: added workflow for CLA
validators: T6622: Radix-aware numeric validation
...
|
|
T8479: The op-mode command `run show history` does not work from configuration mode
|
|
configuration mode
|
|
op-mode: T8483: fix /show_sensors.py: No such file or directory
|
|
serial: T8375: call update_serial_console() only once for default tty
|
