Age | Commit message (Collapse) | Author |
|
(cherry picked from commit 601e07c34205fb379d729c4faf654f95add90471)
|
|
(cherry picked from commit 83ca4a5a6ed042ee10881a861ba022e3b88b6de2)
|
|
(cherry picked from commit 8a57e7b14c818c93655819757d99b69747c9b2ca)
|
|
(cherry picked from commit 734db72b916192a3988f3b1e9f4bcc3be159cfe5)
|
|
(cherry picked from commit 1c59315e9d14a4160b6e744ded08312aa8c70d11)
|
|
(cherry picked from commit 23356ee435344d8e9272f3a8a2273e00e7fca3ad)
|
|
(cherry picked from commit 194a14e958ad336d590ba8f076e163f6908dcddc)
Co-authored-by: Alain Lamar <alain_lamar@yahoo.de>
|
|
op_mode: T6181: A feature for checking ports (backport #4038)
|
|
(cherry picked from commit 7d20a52e02bec76474ca060fcb1eaeca52c52001)
|
|
T6674: workflow: Add trigger to rebuild repo package
|
|
container: T6702: re-add missing UNIX API socket (backport #4034)
|
|
During podman upgrade and a build from the original source the UNIX socket
definition for systemd got lost in translation.
This commit re-adds the UNIX socket which is started on boot to interact with
Podman.
Example:
curl --unix-socket /run/podman/podman.sock -H 'content-type: application/json' \
-sf http://localhost/containers/json
(cherry picked from commit f67e217f2716937115a3bdf6d316b172bbec75e5)
|
|
(cherry picked from commit f1fd13941ed3c7c6f1504957066d0d8780709cc2)
|
|
T6681: Add option for SLAAC to support suppress Interval Advertisement in RA Packets (backport #4022)
|
|
(cherry picked from commit 07dee6164533d5f06d5768b597b6962b6af3b76e)
|
|
(cherry picked from commit eec95109981140f1b4323bcf4526c10c6364d9ae)
|
|
T6671: defer config dependency if scheduled in priority queue (backport #4015)
|
|
(cherry picked from commit 9ff620c50625c81733020f399c7f5a14e07c4d09)
|
|
(cherry picked from commit 4f0e0265d87b01aafde39f2682d2d5099ac4e942)
|
|
(cherry picked from commit d4b6bed84e5ac4214f2eae0e6ee7c1f4e0852222)
|
|
(cherry picked from commit 5819fd88e7948572a65b62885ddcba8ebbb7371c)
|
|
(cherry picked from commit 57a0333c423f74ef733619f57dbfc608e513aa56)
|
|
sysctl: T3204: restore sysctl settings overwritten by tuned (backport #3945)
|
|
(cherry picked from commit 8500e8658ff10f52739143fd7814cf60c9195f16)
|
|
T6672: Fix system option ssh-client source-interface (backport #4000)
|
|
wireless: T6318: move country-code to a system wide configuration (backport #3656)
|
|
Wireless devices are subject to regulations issued by authorities. For any
given AP or router, there will most likely be no case where one wireless NIC is
located in one country and another wireless NIC in the same device is located
in another country, resulting in different regulatory domains to apply to the
same box.
Currently, wireless regulatory domains in VyOS need to be configured per-NIC:
set interfaces wireless wlan0 country-code us
This leads to several side-effects:
* When operating multiple WiFi NICs, they all can have different regulatory
domains configured which might offend legislation.
* Some NICs need additional entries to /etc/modprobe.d/cfg80211.conf to apply
regulatory domain settings, such as: "options cfg80211 ieee80211_regdom=US"
This is true for the Compex WLE600VX. This setting cannot be done
per-interface.
Migrate the first found wireless module country-code from the wireless
interface CLI to: "system wireless country-code"
(cherry picked from commit 9e22ab6b2aee48029d3455f65880e45c558cf1da)
|
|
(cherry picked from commit 5f780ebb7f1799eb9a93218bb83561db509c7e56)
Co-authored-by: Viacheslav Hletenko <v.gletenko@vyos.io>
|
|
op_mode: T6668: Add detailed statistics infomartion about MACsec (backport #4001)
|
|
(cherry picked from commit b7e7619636c372e642240c3e42f10c9813f2f587)
|
|
Fix for system option ssh-client source-interface
For the `verify_source_interface` the key `ifname` if required
(cherry picked from commit f453b33a6056de8fc5145ca9e680361fbce68348)
# Conflicts:
# smoketest/scripts/cli/test_system_option.py
|
|
op_mode: T3961: Generate PKI expect 2 character country code (backport #3997)
|
|
|
|
(cherry picked from commit 71d6d0fe31db13f4ddf5c75209b9bba88a1e0a32)
|
|
T5794: firewall: change firewall priority in oder to be loaded after all interfaces (backport #3988)
|
|
ipoe_server: T6649: Accel-ppp separate vlan-mon from listen interfaces (backport #3987)
|
|
(cherry picked from commit 58125b64c6678ea581998c9f83a19fae0cdbda12)
Co-authored-by: John Estabrook <jestabro@vyos.io>
|
|
(cherry picked from commit 663e468de2b431f771534b4e3a2d00a5924b98fe)
|
|
(cherry picked from commit b3ae35987a860a5d2cf64dfbc156a7ee7cc799a2)
|
|
op_mode: T6651: Add a top level op mode word "execute" (backport #3980)
|
|
(cherry picked from commit 69ab44309d56d73d92c2f8a7b0b4ca3016e61ff6)
|
|
T6646: conntrack: in ignore rules, if protocols=all, do not append it to the rule (backport #3981)
|
|
rule
(cherry picked from commit 2d953bedd0e416ead924f77ec612c997f950535a)
|
|
configd: T6633: inject missing env vars for configfs utility (backport #3937)
|
|
configverify: T6642: verify_interface_exists requires config_dict arg (backport #3961)
|
|
(cherry picked from commit a9024f302fd9657a0e6ef274cfc1dedccaf9d1a3)
|
|
configd: T6640: enforce in_session returns False under configd (backport #3955)
|
|
The function verify_interface_exists requires a reference to the ambient
config_dict rather than creating an instance. As access is required to
the 'interfaces' path, provide as attribute of class ConfigDict, so as
not to confuse path searches of script-specific config_dict instances.
(cherry picked from commit 5f23b7275564cfaa7c178d320868b5f5e86ae606)
|
|
T6643: firewall: fix ip address range parsing on firewall rules. (backport #3964)
|
|
(cherry picked from commit ff58f3e5f30d3775487a6a3b561863aa37d11d43)
|