| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-01-04 | qos: T5848: Add triple-isolate option to CAKE policy config | Matthew Kobayashi | |
| 2024-01-03 | Merge pull request #2746 from MattKobayashi/t5890 | Christian Breunig | |
| op-mode: T5890: Fix arguments passed to generate_system_login_user.py | |||
| 2024-01-03 | op-mode: T5890: Fix arguments passed to generate_system_login_user.py | Matthew Kobayashi | |
| 2024-01-02 | op-mode: T5884: correct "generate wireguard" help string | hwlnx | |
| 2024-01-02 | Merge pull request #2743 from nicolas-fort/T5888 | Christian Breunig | |
| T5888: fix migration script in order to fit new type-names for icmp and icmpv6 | |||
| 2024-01-02 | T5888: fix migration script in order to fit new type-names for icmp and icmpv6. | Nicolas Fort | |
| 2024-01-02 | Merge pull request #2736 from c-po/configd-include | Christian Breunig | |
| vyos-configd: extend list of included scripts | |||
| 2024-01-02 | Merge pull request #2739 from c-po/cli-validators-base64 | Daniil Baturin | |
| T3642: add missing base64 CLI validators | |||
| 2024-01-02 | pki: T3642: add missing base64 constraint on PEM keys | Christian Breunig | |
| 2024-01-01 | wireguard: T3642: use base64 validator | Christian Breunig | |
| 2024-01-01 | Merge pull request #2737 from jestabro/len-image-name | Christian Breunig | |
| image-tools: T5885: relax restriction on image-name len from 32 to 64 | |||
| 2024-01-01 | image-tools: T5885: relax restriction on image-name len from 32 to 64 | John Estabrook | |
| 2024-01-01 | vyos-configd: T4942: include config-management script | Christian Breunig | |
| 2024-01-01 | vyos-configd: T563: include webproxy script | Christian Breunig | |
| 2024-01-01 | vyos-configd: T4222: include SLA (OWAMP and TWAMP) script | Christian Breunig | |
| 2024-01-01 | vyos-configd: T5261: include AWS GLB script | Christian Breunig | |
| 2024-01-01 | Merge pull request #2731 from jestabro/copy-preserve-owner | John Estabrook | |
| image-tools: T5883: preserve file owner in /config on add system update | |||
| 2024-01-01 | Merge pull request #2728 from c-po/verify-T5880 | Viacheslav Hletenko | |
| T5880: verify_source_interface() should not allow dynamic interfaces like ppp, l2tp, ipoe or sstpc client interfaces | |||
| 2024-01-01 | Merge pull request #2726 from c-po/login-T5875-part2 | Christian Breunig | |
| login: T5875: restore home directory permissions only when needed | |||
| 2024-01-01 | Merge pull request #2724 from sever-sever/T3476 | Christian Breunig | |
| T3476: Add option latest to add system image | |||
| 2023-12-31 | image-tools: T5883: preserve file owner in /config on add system update | John Estabrook | |
| 2024-01-01 | tunnel: T5879: properly verify source-interface used for tunnels | Christian Breunig | |
| A tunnel interface can not properly be sourced from a pppoe0 interface when such interface is not (yet) connected to the BRAS. It might work on a running system, but subsequent reboots will fail as the source-interface most likely does not yet exist. | |||
| 2024-01-01 | configverify: T5880: raise exception if interfaces sourced form dynamic ↵ | Christian Breunig | |
| interfaces Interfaces matching the following regex (ppp|pppoe|sstpc|l2tp|ipoe)[0-9]+ can not be used as source-interface for e.g. a tunnel. The main reason is that these are dynamic interfaces which come and go from a kernel point of view, thus it's not possible to bind an interface to them. | |||
| 2024-01-01 | login: T5875: restore home directory permissions only when needed | Christian Breunig | |
| This improves commit 3c990f49e ("login: T5875: restore home directory permissions when re-adding user account") in a way that the home directory owner is only altered if it differs from the expected owner. Without this change on every boot we would alter the owner which could increase the boot time if the home of a user is cluttered. | |||
| 2024-01-01 | Merge pull request #2729 from c-po/rename-T5474 | Christian Breunig | |
| T5474: establish common file name pattern for XML conf mode commands | |||
| 2023-12-31 | T5474: establish common file name pattern for XML conf mode commands | Christian Breunig | |
| We will use _ as CLI level divider. The XML definition filename and also the Python helper should match the CLI node. Example: set interfaces ethernet -> interfaces_ethernet.xml.in set interfaces bond -> interfaces_bond.xml.in set service dhcp-server -> service_dhcp-server-xml.in | |||
| 2023-12-31 | Merge pull request #2696 from indrajitr/kea-lfc-fix | Christian Breunig | |
| dhcp: T3316: Adjust kea lease files' location and permissions | |||
| 2023-12-30 | Merge pull request #2707 from lucasec/t5870 | Christian Breunig | |
| T5870: ipsec remote access VPN: add x509 ("pubkey") authentication. | |||
| 2023-12-30 | T5870: ipsec remote access VPN: add x509 ("pubkey") authentication. | Lucas Christian | |
| 2023-12-30 | T3476: Add option latest to add system image | Viacheslav Hletenko | |
| Add option `latest` for op-mode command `add system image` If the update check is configured we can get the remote `latest` version from conrfgure URL ``` set system update-check url 'https://example.com/version.json' ``` This way we can use "latest" option for image update: ``` add system image latest ``` | |||
| 2023-12-30 | ipsec: T1210: extend remote-access smoketest with IP pool configuration | Christian Breunig | |
| This extends commit 1a84c4d0e ("ipsec: T1210: add smoketest for remote-access (road-warrior) users") in a way that also the IPv4 pool and its DNS servers get validated. There is no separate IPv6 test, as both address families behave the same way when configuring these. | |||
| 2023-12-30 | Merge pull request #2722 from c-po/t1210-ipsec-smoketest | Viacheslav Hletenko | |
| ipsec: T1210: add smoketest for remote-access (road-warrior) users | |||
| 2023-12-30 | ipsec: T1210: add smoketest for remote-access (road-warrior) users | Christian Breunig | |
| 2023-12-30 | Merge pull request #2716 from c-po/login-t5875 | Christian Breunig | |
| login: T5875: restore home directory permissions when re-adding user account | |||
| 2023-12-30 | Merge pull request #2718 from indrajitr/shorten-domain-search-path | Christian Breunig | |
| system: T5877: Shorten system domain-search config path | |||
| 2023-12-30 | smoketest: remove base accel-ppp testcase function comments | Christian Breunig | |
| Python unittest framework treads the comments as test names during execution: Example: test_accel_ipv4_pool (__main__.TestVPNPPTPServer.test_accel_ipv4_pool) Test accel-ppp IPv4 pool ... ok | |||
| 2023-12-30 | Merge pull request #2711 from aapostoliuk/T5688-fixes-2 | Christian Breunig | |
| T5688: Fixed ip pool migration scripts for l2tp, sstp, pppoe | |||
| 2023-12-29 | system: T5877: Update smoketests for domain-search and related config | Indrajit Raychaudhuri | |
| In addition to testing for shortening the domain-search path, add and improve tests for other resolv.conf entries. | |||
| 2023-12-29 | system: T5877: Shorten system domain-search config path | Indrajit Raychaudhuri | |
| Shorten and simplify `system domain-search` config path from: ``` set system domain-search domain <domain1> ``` to: ``` set system domain-search <domain1> ``` This will shorten the path and also make consistent with `domain-search` config in other places (like `dhcp-server`). | |||
| 2023-12-29 | login: T5875: restore home directory permissions when re-adding user account | Christian Breunig | |
| After deleting a user account and working with a newly added account, we see that after rebooting in the previously saved configuration, the user is re-added but it's home directory might have an old UID set on the filesystem. This is due to the fact that vyos config does not store UIDs. When adding a user account to the system we now check if the home directory already exists and adjust the ownership to the new UID. | |||
| 2023-12-29 | Merge pull request #2715 from indrajitr/shell-quote-fix | Christian Breunig | |
| tacacs: T141: Wrap string in double quotes to allow expansion | |||
| 2023-12-29 | tacacs: T141: Wrap string in double quotes to allow expansion | Indrajit Raychaudhuri | |
| 2023-12-29 | smoketest: T5688: pppoe-server support multiple client-ip-pool subnets | Christian Breunig | |
| 2023-12-29 | dhcp: T3316: Add `_kea` user as vyattacfg group member | Indrajit Raychaudhuri | |
| Allowing `_kea` to be a member of `vyattacfg` group allows kea-dhcp{4,6}-server to have access to DHCP lease directory under `/config/` and thus have ability to manipupate the leases files. | |||
| 2023-12-29 | Merge pull request #2704 from c-po/template-t5869 | Christian Breunig | |
| vyos.template: T5869: first_host_address() does not honor RFC4291 section 2.6.1 | |||
| 2023-12-29 | Merge pull request #2709 from c-po/nat-T5681 | Christian Breunig | |
| nat: T5681: relax wording on non existing interface Warning message | |||
| 2023-12-29 | Merge pull request #2710 from c-po/container-smoketest | Viacheslav Hletenko | |
| smoketest: T5867: extend container tests for IPv4 and IPv6 networks | |||
| 2023-12-29 | T5688: Fixed ip pool migration scripts for l2tp, sstp, pppoe | aapostoliuk | |
| Fixed migration 'subnet' option in l2tp, sstp, pppoe. 'subnet' option can contain several values. | |||
| 2023-12-29 | smoketest: T5867: extend container tests for IPv4 and IPv6 networks | Christian Breunig | |
| 2023-12-29 | nat: T5681: relax wording on non existing interface Warning message | Christian Breunig | |
| Remove the word "error" from a Warning only message to not irritate the user. | |||
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) |
| summaryrefslogtreecommitdiff |