summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-09-13qat: T2857: cleanup configuration scriptChristian Poessinger
2020-09-13configd: T2582: add .gitignoreChristian Poessinger
2020-09-13Revert "Debian: T2843: drop wireguard-modules dependency with kernel 5.8"Christian Poessinger
This reverts commit bd076f694a763991a0b0d3a7bb0fa5d194d56d7c.
2020-09-13vyos.util: add missing ConfigError import in check_kmod()Christian Poessinger
2020-09-13ifconfig: T2863: only use IPv6 link-local address if interface has MAC addressChristian Poessinger
With VyOS 1.2 the default WireGuard behavior is used. This means that when a WireGuard interface is added to the system, there is no "MAC" address - also there is no IPv6 link-local address assigned by the Kernel to this particular interface. With implementation of T2653 all interfaces now receive an IPv6 address - which is also valid for WireGuard interfaces - unfortunately this logic relies on the interface MAC address - and as there is none, the link-local address will be always the same. The logic behind is coded here [1]. We generate an IPv6 link-local address even when there is no "MAC" address. The behavior/functionality (as with VyOS 1.2) must be restored to not have a link-local IPv6 address at all. Any user can add any IPv6 link-local address manually by issuing: set interfaces wireguard wg01 address fe80::ff:1/64. Change vyos.ifconfig.add_ipv6_eui64_address to only add the EUI64-based link-local address if a MAC address is available. [1] https://github.com/vyos/vyos-1x/blob/3077158391ceee4ce04c27dec33f629529727c36/python/vyos/ifconfig/interface.py#L468
2020-09-10Merge pull request #543 from srividya0208/log_changeDaniil Baturin
show log:T2872:"Show log" options for nat and openvpn got inter-mixed
2020-09-10show log:T2872:"Show log" for nat and openvpn got inter-mixedroot
The possible completion of the "show log" shows only nat and the description shows for openvpn. Corrected the duplicate entry
2020-09-10Merge pull request #542 from sever-sever/T2856Christian Poessinger
op-mode: T2856: Fix broken pipe in show version all
2020-09-10op-mode: T2856: Fix broken pipe in show version allsever-sever
2020-09-09Merge pull request #541 from DmitriyEshenko/1x-cur-openconnectChristian Poessinger
openconnect: T2036: Move CLI commands under vpn openconnect
2020-09-09openconnect: T2036: Move CLI commands under vpn openconnectDmitriyEshenko
2020-09-03smoketest: kernel: try loading Intel QAT driversChristian Poessinger
2020-09-03configd: T2582: exclude dhcp[v6]_server.py to investigate regressionJohn Estabrook
2020-09-02Merge pull request #538 from sever-sever/T2850_bgp_templateChristian Poessinger
frr-template: T2850: Add BGP template for FRR
2020-09-01xml: T2849: vyos.xml.defaults should return a list on multi nodesJohn Estabrook
2020-09-01frr-template: T2850: Add BGP template for FRRsever-sever
2020-09-01T2636: ssh: add smoketest for XML defaultValue nodeChristian Poessinger
2020-09-01Merge pull request #537 from sever-sever/T2846Daniil Baturin
op-mode: T2846: Fix show ip route longer-prefixes
2020-09-01op-mode: T2846: Fix show ip route longer-prefixessever-sever
2020-08-31T2636: remove workarounds for get_config_dict()Christian Poessinger
Now that b40c52682a256 ("config: T2636: get_config_dict() returns a list on multi node by default") is implemented the workarounds can be removed.
2020-08-31Merge pull request #535 from jestabro/vyos-configdJohn Estabrook
configd: T2582: vyos config script daemon configd: T2582: add scripts to include list for daemon configd: T2808: add smoketest to ensure script consistency with daemon configd: T2582: add utility to safely add/remove items from include file configd: T2582: add shim var to node.def configd: T2582: inject shim env variable into configsession configd: T2582: add shim as config daemon client configd: T2582: add mkjson for use by shim configd: T2582: add config daemon and supporting files
2020-08-31configd: T2582: add scripts to include list for daemonJohn Estabrook
2020-08-31configd: T2808: add smoketest to ensure script consistency with daemonJohn Estabrook
2020-08-31configd: T2582: add utility to safely add/remove items from include fileJohn Estabrook
2020-08-31configd: T2582: add shim var to node.defJohn Estabrook
2020-08-31configd: T2582: inject shim env variable into configsessionJohn Estabrook
ConfigSession needs to have required env vars manully injected; add the shim definition env var to the list, if config daemon is active.
2020-08-31configd: T2582: add shim as config daemon clientJohn Estabrook
2020-08-31configd: T2582: add mkjson for use by shimJohn Estabrook
(https://github.com/Jacajack/mkjson.git)
2020-08-31configd: T2582: add config daemon and supporting filesJohn Estabrook
2020-08-30Debian: T2843: drop wireguard-modules dependency with kernel 5.8Christian Poessinger
2020-08-30https: add simple smoketest to check nginx config integrityJohn Estabrook
2020-08-30nat: T2814: nftables module for NAT has been renamedChristian Poessinger
Depending on the underlaying Kernel version load the corresponding Kernel module.
2020-08-30Merge pull request #536 from jestabro/T2636John Estabrook
config: T2636: get_config_dict() returns a list on multi node by default
2020-08-30config: T2636: get_config_dict() returns a list on multi node by defaultJohn Estabrook
Unless no_multi_convert is True, a single valued multi node will be returned as a list by get_config_dict(). Modification of Thomas Mangin's version.
2020-08-30WireGuard: T2842: switch to binary package from buster-backportsChristian Poessinger
2020-08-30Merge pull request #534 from sever-sever/T2833Christian Poessinger
rip: T2833: Fix distribute-list filter
2020-08-28nat: T2813: translation address is mandatory if rule is not excludedChristian Poessinger
2020-08-28T2836: show system integrity brokenhagbard
2020-08-27Debian: set proper changelog versionChristian Poessinger
2020-08-27Merge branch 'master' of github.com:vyos/vyos-smoketest into ↵Christian Poessinger
vyos-smoketest-integration (T2832) * 'master' of github.com:vyos/vyos-smoketest: (153 commits) pppoe-server: test some more values lcd: adjust to cli changes lcd: adapt test to new CLI design pppoe-server: initial smoketest with local and radius auth pppoe: validate dhcpv6 client will be started wireless: validate hostapd/wpa_supplicant is running pppoe: sync to new dhcpv6-pd cli anyconnect: T2812: add basic testing ethernet: check interface disable state router-advert: check 'infinity' option in script logic ssh: config file is now volatile (moved to /run) ipv6: link-local: test address assignment on interfaces router-advert: add initial test mdns-repeater: add basic test pseudo-ethernet: extend smoketests with VIFs l2tpv3: add initial interface test wireless: use library function for loading kernel modules ethernet: test "ip" subtree of interface for e.g. ARP settings pppoe: use assertEqual() service: bcast-relay: add initial tests ...
2020-08-27rip: T2833: Fix distribute-list filtersever-sever
2020-08-26pppoe-server: T2829: migrate 'ppp-options mppe' to leafNodeChristian Poessinger
2020-08-26https: T2830: update to use get_config_dictJohn Estabrook
2020-08-26pppoe-server: test some more valuesChristian Poessinger
2020-08-26pppoe-server: bugfix MPPE node definitionChristian Poessinger
PPPoE server supports setting the MPPE preferences, it is implemented as node with leafNodes for require, prefer and deny. This will render a wrong AccelPPP configuration as it will be "None" if specified. pppoe-server { ppp-options { mppe { deny require } } } instead it must be: pppoe-server { ppp-options { mppe require } }
2020-08-26Merge pull request #533 from runborg/T2826Daniil Baturin
T2826: frr: frr python lib error in replace_section
2020-08-25T2826: frr: frr python lib error in replace_sectionRunar Borge
because of a bug in frr.py the default before_re will not be working. it is by default without a group, but will be used in a match that needs a group. The whole string could be matched in the group, so the fix is easy to implement.
2020-08-23lcd: adjust to cli changesChristian Poessinger
2020-08-23lcd: adapt test to new CLI designChristian Poessinger
2020-08-23lcd: T2564: limit LCD display update to 2 updates per secondChristian Poessinger
... this reduces CPU load.