| Age | Commit message (Collapse) | Author |
|---|
|
|
|
Add schema element to suppress output of individual validators, leaving
only constraintErrorMessage output in case of failure.
|
|
|
|
|
|
|
|
Add prefix `vpp` for the op-mode output of `show interfaces`
|
|
T8370: VPP cosmetic fix for verify buffers path
|
|
|
|
When removing the mirror CLI node to stop mirroring or redirecting traffic
to another interface, the egress configuration was not cleared. This caused
traffic to continue being sent out the SPAN port even after the node was
removed.
Fix by properly clearing all tc(8) qdiscs.
Update smoketests to verify nothing remains after mirror deletion.
|
|
Switch `verify()` to validate the real config tree (`interface -> prefix`) instead of non-existent `rule` nodes.
This enforces:
- `mode interface` requires `prefix ... interface`
- non-`interface` modes must not set `prefix ... interface`
- referenced interface exists when `mode` is `interface`
|
|
vpp: T8354: Move 'ignore-kernel-routes' option out of resource-allocation section
|
|
op-mode: T8362: "compare" command lacks catch_broken_pipe decorator
|
|
When compare calculation is still in progress and it should be abourted
by Ctrl+C, prevent a backtrace and catch the KeyboardInterrupt.
|
|
Multiple helper functions imported json.loads() or vyos.utils.process.cmd(),
this has been unified in one place.
|
|
Commit 0bf386cee9b0 ('qos: T4284: rename "traffic-policy" node to "qos policy"')
already renamed the CLI for QoS. The internal data representation kept the old
name which is now corrected.
|
|
|
|
ipt_NETFLOW protocol version 5 is incompatible with IPv6.
Add simple test for version 5.
|
|
T8347: enable pylint for all files under python/* path
|
|
op-mode: T8350: Move VPP op-mode 'show vpp interfaces' to 'show interfaces vpp'
|
|
|
|
This extends the CLI migration from commit 941c5adfaca2c7 ("openvpn: T5634:
Remove support for insecure DES and Blowfish ciphers") by not only deleting
insecure DES and Blowfish ciphers, but providing an alternative (3DES).
If no cipher is defined, this will result in OpenVPN service not starting at
all, as the implicit defined BF-CBC cipher is no longer supported by
OpenSSL 3.0.0.
|
|
section
|
|
|
|
opmode: T8343: implement common verify_cli_exists() helper
|
|
T7513: CGNAT show exclude rules - all protocol value fix
|
|
|
|
|
|
Pylint warns about mask being used before assignment because mask is created
inside the try block. While os.umask() itself is highly unlikely to fail,
Python can raise asynchronous exceptions like KeyboardInterrupt or MemoryError
at any given moment. If one of those exceptions occurs precisely after the try:
statement but before "mask = os.umask(0o111)" completes, Python calls
finally with "os.umask(mask)" causing UnboundLocalError.
|
|
Pylint is pointing out that because sftp.put(location, path) is located inside
a finally block, it is guaranteed to execute regardless of whether the try
block succeeds or fails.
If an exception other than an IOError is raised inside the try block,
"except IOError" block gets skipped, Python then jumps straight to the finally
block. When it executes the finally block, it attempts to read the variable
path, but path was never assigned!
This triggers UnboundLocalError, local variable 'path' referenced before
assignment.
|
|
This happens because requests.packages.urllib3 is essentially a dynamic alias
that requests creates at runtime. Because it's dynamically generated, pylint's
static analysis cannot find it, which triggers the import error.
Avoid dynamic import by importing PoolManager directly from urllib3.
|
|
|
|
As the python netifaces module is written in C - we can not inspect any import
line as the linter does not see it. Disable the warnings here.
|
|
Instead of re-defining a per module helper which verifies that a given CLI path
exists during execution, rather create a generic representation which takes a
CLI path (list) as argument with an optional error message to display on the
CLI.
This is the initial implementation of the generic helper with some migrations
for VPP, WireGuard and Wireless interfaces. More opmode scripts should follow.
|
|
geoip: T8326: Resolve permission issue on database paths
|
|
tech-support: T8215: Extend tech-support archive and report generation
|
|
Restore required sudo on geoip op-mode
Ensures group/permission set on geoip nftables config
|
|
|
|
T8313: T8074: add vyconf support for copy/rename
|
|
vpp: T8339: Cleanup vpp interfaces and kernel-interfaces after migration
|
|
isis: T6978: add IS-IS SRv6 node-msd configuration
|
|
vpp: T8340: Remove vif option from vxlan interface
|
|
T7513: vyos-1x: CGNAT Exclude Rule CLI support
|
|
Co-Authored-by: Christian Breunig <christian@breunig.cc>
|
|
|
|
|
|
|
|
vpp: T8328: Migrate xconnect interface to 'interfaces vpp xconnect'
|
|
|
|
ipsec: T8136: IPSEC PPK support
|
|
vpp: T8327: Migrate bridge interface to 'interfaces vpp bridge'
|
