summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2026-04-09T8465: Fix test_06_dhcp_default_route_for_vrfKyrylo Yatsenko
* Add wait_for_result function to VyOSUnitTestSHIM. * Use it for periodic polling in test_06_dhcp_default_route_for_vrf * Move interface removal from VRF before assert.
2026-04-08serial: T8211: refactor rule to reduce duplicationStephen Nothnagel
Store the PROGRAM output in a temporary .BY_BUS ENV variable, then reference it via %E{.BY_BUS} in the SYMLINK+= assignments. This collapses the three duplicated PROGRAM pipelines into a single invocation and removes the mixed usage of $result and %c. No functional change: tested on MosChip MCS7840 (2x 4-port chips, 8 ports total), FTDI FT4232H, and Sierra EM7455 -- all symlinks identical before and after, verified with udevadm test. Reduces duplication; refactor suggested by @copilot-pull-request-reviewer on PR #5113.
2026-04-07remote: T4732: redact u/p from URL on errorChristian Breunig
The upload error message echoes the full urlstring, which may include embedded credentials (e.g., https://user:pass@host/...). With this commit the information has been redacted.
2026-04-07Merge pull request #5103 from alexandr-san4ez/T8281-currentDaniil Baturin
firewall: T8281: Normalize network prefixes in rule configuration
2026-04-07Merge pull request #5107 from alexandr-san4ez/T8282-currentDaniil Baturin
firewall: T8282: Normalize invalid network-group names during migration
2026-04-06vpp: T8452: fix typo in variable nameMiha
Rename `id_from_persisten_conf` to `id_from_persistent_conf`.
2026-04-06serial: T8211: fix symlink collisions for multi-port USB serial adaptersStephen Nothnagel
Multi-port USB serial adapters (e.g., MosChip MCS7840) where all ports share the same USB ID_PATH create identical symlink names in /dev/serial/by-bus/, causing only the last-enumerated port to be accessible. Split the existing catch-all rule for devices with .ID_PORT into two cases: - Port 0: keeps the base symlink name (backward compatible) - Port 1+: appends pN suffix (e.g., usb0b1.4.1p1.0p1) Devices where each port has a unique ID_PATH (e.g., FTDI FT4232H) and single-port devices are unaffected.
2026-04-06remote: T4732: add VRF option for commit-archiveChristian Breunig
Add new CLI option to make transfers to the commit-archive working using a dedicated (e.g. management) VRF. set system config-management commit-archive vrf MGMT All transfers using vyos.remote module will now run through the VRF defined on the CLI.
2026-04-06firewall: T8281: Normalize network prefixes in rule configurationOleksandr Kuchmystyi
Convert non-canonical IPv4 and IPv6 prefixes in 'source/destination address' fields to proper network addresses (e.g. 10.10.10.1/30 -> 10.10.10.0/30). This prevents invalid configurations and ensures consistent prefix handling.
2026-04-03Merge pull request #5105 from kumvijaya/currentChristian Breunig
T8453: smoke test workflow updated to check branch match with vyos-build for checkout
2026-04-03Merge pull request #5101 from natali-rs1985/T8438Viacheslav Hletenko
vpp: T8438: Add bidirectional interface-in-use validation
2026-04-03Merge pull request #5106 from c-po/joolViacheslav Hletenko
nat64: T8456: add constraint for translation port range
2026-04-03firewall: T8282: Normalize invalid network-group names during migrationOleksandr Kuchmystyi
Replace unsupported characters (e.g. `,`, `+`) with `_` when migrating from 1.3.x and handle name collisions safely to prevent commit failures.
2026-04-03nat64: T8456: add constraint for translation port rangeChristian Breunig
NAT64 requires dedicated transport address space for translation, similar to exclusive port ownership during socket binding. If a local process and Jool translation both use the same transport tuple (for example, 192.0.2.1:5000), traffic conflicts can occur. Jool does not prevent pool4 from overlapping with other port allocations, so avoiding conflicts is an operator responsibility. In addition to service ports already in use, account for Linux ephemeral range (net.ipv4.ip_local_port_range), which defaults to 32768-60999. This default is why, when pool4 is empty, Jool uses 61001-65535 on the node's primary global addresses. One can adjust the ephemeral range via sysctl, and Jools translation range via pool4 add/remove. vyos@vyos:~$ sysctl net.ipv4.ip_local_port_range net.ipv4.ip_local_port_range = 32768 60999 VyOS now uses verify() in NAT64 to check that the supplied tranlation port range does not overlap with the Kernels ephemeral port range.
2026-04-03nat64: T8456: rename CLI path variables for a better fitChristian Breunig
2026-04-03nat64: T8456: remove no longer needed pylint control statementsChristian Breunig
2026-04-03Merge pull request #5102 from sever-sever/T8377-stestViacheslav Hletenko
T8377: Extend smoketestest to check ARM CN10308 kernel modules
2026-04-03T8453: smoke test workflow updated to use right creds for gh cli accesskumvijaya
2026-04-03Merge pull request #5104 from sever-sever/T8380Christian Breunig
T8380: Add sbsigntool for ARM64 debian control for vyos-1x
2026-04-02T8453: smoke test workflow updated to check branch match with vyos-build for ↵kumvijaya
checkout
2026-04-02Merge pull request #5099 from c-po/user-utilsChristian Breunig
T8449: Merge vyos-user-utils package into vyos-1x
2026-04-02Merge pull request #4872 from c-po/vyos-netlinkdChristian Breunig
vyos-netlinkd: T8047: replacement of netplugd
2026-04-02T8380: Add sbsigntool for ARM64 debian control for vyos-1xViacheslav Hletenko
2026-04-02T8377: Extend smoketestest to check ARM CN10308 kernel modulesViacheslav Hletenko
Extend required kernel options in arm64 test to cover CN10308 platform features, including OCTEONTX2 networking, I2C, GPIO, MMC, LED, and RTC drivers.
2026-04-02vpp: T8438: Add bidirectional interface-in-use validationNataliia Solomko
Add bidirectional VPP interface reference validation: prevent assigning an interface used by a VPP feature (NAT/ACL/IPFIX/sFlow, etc.) as a VPP member (bond/bridge/xconnect) and prevent using a VPP member interface in VPP features. Block interface deletion when it is still referenced by any VPP feature/member. Fix VLAN subinterface removal checks broken by the recent VPP config tree restructuring.
2026-04-02Debian: T8449: "socat" used by "reset openvpn client" - move to vyos-1x ↵Christian Breunig
dependencies
2026-04-02Debian: T8449: drop duplicate package definitionsChristian Breunig
2026-04-01Merge pull request #5098 from alexandr-san4ez/T8275-currentChristian Breunig
firewall: T8275: Resolve migration issue for 'weekdays' option from 1.3.8
2026-04-01firewall: T8275: Resolve migration issue for 'weekdays' option from 1.3.8Oleksandr Kuchmystyi
Fix error parsing for day of week while loading firewall configuration.
2026-04-01config-sync: T7784: Add command to diff configuration with secondary nodeOleksandr Kuchmystyi
Add a new operational command to compare configuration between nodes participating in config synchronization. New command: - `show configuration secondary sync [commands] [running|candidate|saved] [config-node-path]`. This allows operators to view configuration differences across secondary peer before applying or syncing changes. Supports: - displaying using raw diff and 'commands' format; - optional section filtering (subtree comparison); - selectable config source (running, candidate, saved).
2026-03-31firewall: T8446: Prevent chain with offload rule on local zonesarthurdev
* Add warning when defining `offload-target` without setting action to `offload`
2026-03-31T8449: Merge branch 'current' of https://github.com/vyos/vyos-user-utils ↵Christian Breunig
into user-utils * 'current' of https://github.com/vyos/vyos-user-utils: (24 commits) T7644: mirror workflow refactoring rollout T7579: fix of the run trigger for CLA T7579: added workflow for CLA T7334: pr mirror trigger workflow added with label creation permission for default github token T7373: remove irqtop to avoid the overhead of having a Ruby runtims (30+ MB) in the image for a single, rarely-used program T7330: mirror workflows added T6804: Add ipmitool to user utils T6763: Delete Jenkins file T6674: Action add trigger workflow to rebuild package T5984: Add user util numactl T5222: Remove haproxy from user-utils as it added to vyos-1x T5632: Add user-util jq to parse JSON files from sh T5028: Add exfat-fuse package T5028: Add package exfatprogs T4841: Add fancontrol user-utils package T4426: add arpwatch to the image user-pkgs: T4023: Add user pkg grepcidr and sorting the pkgs Add dnsdist to the image Include haproxy in the image Import dependencies from the former vyos-utils package list. ...
2026-03-31Merge pull request #5097 from natali-rs1985/T8229Viacheslav Hletenko
T8229: Fix handling of endpoint in Telegraf Loki template
2026-03-30Merge pull request #5089 from robinchrist/T7338-bgp-as-notationChristian Breunig
bgp: T7338: Add support for "parameters as-notation <asdot|asdot+>"
2026-03-30Merge pull request #5086 from natali-rs1985/T8419Christian Breunig
vpp: T8419: Disallow cross-membership between VPP and kernel bonding/bridge interfaces
2026-03-30Merge pull request #5083 from fatpelt/currentDaniil Baturin
kea: T8408: Fixes to enable dhcp option 67
2026-03-30T8229: Fix handling of endpoint in Telegraf Loki templateNataliia Solomko
2026-03-30Merge pull request #5094 from sever-sever/T8222Daniil Baturin
T8222: Set the default VXLAN interface TTL to 64
2026-03-30Merge pull request #5095 from sever-sever/T8410-srcDaniil Baturin
T8410: Fix typos and mistakes for comments and messages
2026-03-29bgp: T7338: Add support for "parameters as-notation <asdot|asdot+>"Robin Christ
We explicitly omit the "plain" option, as it is the implicit default in FRR We also do not want to add "plain" as VyOS default value and emit it by default as this makes the config a bit ugly (frr puts it in the router line so you get "router bgp <AS> as-notation plain"). Additionally, setting plain as default value and emitting it by default would break pretty much all BGP tests, as they commonly do self.getFRRconfig(f'router bgp {ASN}', stop_section='^exit') and getFRRConfig does a "^<content>$" match, which breaks when you add the "as-notation plain"
2026-03-27T8410: Fix typos and mistakes for comments and messagesViacheslav Hletenko
Fix typos and mistakes No functional changes
2026-03-27vpp: T8419: Disallow cross-membership between VPP and kernel bonding/bridge ↵Nataliia Solomko
interfaces
2026-03-27T8222: Set the default VXLAN interface TTL to 64Viacheslav Hletenko
Default TTL of 16 is insufficient in many deployments, especially in multi-hop or routed underlay networks. Increase it to 64 to provide better compatibility and avoid packet drop in real-world topologies.
2026-03-27Merge pull request #5093 from teslazonda/T8420-vpn-openconnect-typoViacheslav Hletenko
T8420: Fix typo in vpn_openconnect.py
2026-03-27Merge pull request #5091 from vyos/T8437-smoke-runnersViacheslav Hletenko
T8437: Use self-hosted runners for smoketests
2026-03-27T8420: Fix typo in vpn_openconnect.pyQuill Cronwall
2026-03-26T8437: Use self-hosted runners for smoketestsAndrii Klymenko
Add the configuration parameters required to specify self-hosted smoketests runners.
2026-03-26Merge pull request #5090 from c-po/peth-source-interfaceChristian Breunig
pseudo-ethernet: T8434: source-interface does not show bridge or bond interfaces
2026-03-26Merge pull request #5067 from AlectoTheFirst/fix/pppoe-ipv6-address-typeerrorChristian Breunig
T8404: pppoe: fix TypeError when ipv6 address node exists without autoconf
2026-03-26pseudo-ethernet: T8434: source-interface does not show bridge or bond interfacesChristian Breunig
We can create pseudo-ethernet (peth, macvlan) interfaces from bond or bridge interfaces as the unddelraying parent, so the completion helper should honor it.
generated by cgit v1.2.3 (git 2.39.1) at 2026-07-21 08:28:45 +0000