Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-08-13 | vyos.util: "harden" is_systemd_service_running() function | Christian Poessinger | |
Inspired by the comments of https://unix.stackexchange.com/a/435317 use a more robust approach. A service can be "active" but not "running" (e.g. restarting with a configuration error). We can now test if a systemd unit is "activated" and if it is "running" at all. >>> from vyos.util import is_systemd_service_active >>> from vyos.util import is_systemd_service_running >>> is_systemd_service_active('ssh') True >>> is_systemd_service_running('sshd') False >>> is_systemd_service_running('ssh') True | |||
2021-08-13 | vrf: T3734: T3728: vni must be configured with a higher priority then bgpd | Christian Poessinger | |
When removing bgp (vrf) instances the assigned VRF vni must be deleted from FRR prior the removal of the bgp settings (T3734). This is now done by moving the CLI command "set vrf name red vni 1000" to a dedicated Python script with a priority higher then bgp. | |||
2021-08-13 | Merge pull request #969 from sarthurdev/T3752 | Christian Poessinger | |
pki: T3752: Fix file output for certificate requests | |||
2021-08-13 | Merge pull request #968 from sever-sever/T3738 | Christian Poessinger | |
openvpn: T3738: Disable authentication option for server mode | |||
2021-08-13 | pki: T3752: Fix file output for certificate requests | sarthurdev | |
2021-08-13 | xml: T3234: update instead of overwrite on repeated path | John Estabrook | |
2021-08-13 | openvpn: T3738: Disable authentication option for server mode | Viacheslav | |
2021-08-13 | Merge pull request #914 from sever-sever/T3673 | Christian Poessinger | |
policy: T3673: Add set large-comm-list for route-map | |||
2021-08-13 | Merge pull request #967 from sever-sever/T3708-curr | Christian Poessinger | |
isis: T3708: Fix errors in MTU calculation | |||
2021-08-13 | policy: T3673: Add set large-comm-list-delete for route-map | Viacheslav | |
2021-08-13 | isis: T3708: Fix errors in MTU calculation | Viacheslav | |
2021-08-13 | nginx: T3740: use bracketize_ipv6 Jinja2 filter on server address | Christian Poessinger | |
2021-08-12 | Merge pull request #966 from kroy-the-rabbit/T3749 | John Estabrook | |
T3749: Moving some counters into the proper loop | |||
2021-08-12 | T3749: Moving some counters into the proper loop | Kroy | |
2021-08-12 | login: T3746: inform users about pending reboots | Christian Poessinger | |
2021-08-12 | Merge pull request #963 from FileGo/T3744 | Christian Poessinger | |
dns: T3744: fixed dns fwd statistics formatting | |||
2021-08-12 | dns: T3744: fixed dns fwd statistics formatting | FileGo | |
2021-08-11 | Merge pull request #962 from jestabro/T3732 | John Estabrook | |
T3732: merge leafNodes containing a defaultValue with default-less leafNodes of same path | |||
2021-08-11 | xml: T3732: merge leafNode with defaultValue with leafNode(s) of same path | John Estabrook | |
2021-08-11 | bgp: T3739: add common route-distinguisher XML building block | Christian Poessinger | |
2021-08-11 | GitHub: fix typo in PR template | Christian Poessinger | |
2021-08-11 | xml: T3732: simplifications for merging defaultValue and default-less nodes | John Estabrook | |
2021-08-11 | smoketest: ospf: add logger to passive-interface test | Christian Poessinger | |
2021-08-11 | accel-ppp: T3731: eliminate service name from error message | Christian Poessinger | |
VyOS will automatically append the subsystem name (pppoe-server or sstp) when something goes wrong. No need to hardcode this into the error string a second time. | |||
2021-08-10 | Merge pull request #961 from sarthurdev/T3727 | Christian Poessinger | |
ipsec: T3727: Fix ESP proposals not being set from tunnel esp-group | |||
2021-08-10 | ipsec: T3727: Fix ESP proposals not being set from tunnel esp-group | sarthurdev | |
2021-08-10 | Merge pull request #960 from sever-sever/T3709 | Christian Poessinger | |
snmp: T3709: Allow enable oid ipCidrRouteTable | |||
2021-08-10 | snmp: T3709: Allow enable oid ipCidrRouteTable | Viacheslav | |
2021-08-10 | pki: wireguard: T3642: strip private key | Christian Poessinger | |
Extend regex used by the "| strip-private" modifier to remove the WireGuard private key portion from stdout. | |||
2021-08-09 | ipsec: T3720: assigning vti secondary address caused interface in A/D state | Christian Poessinger | |
2021-08-08 | pki: wireguard: T3642: add alias "generate wireguard key-pair" command | Christian Poessinger | |
Triggers the same code as "generate pki wireguard key-pair" which makes it easier for users switching from 1.3 -> 1.4. | |||
2021-08-08 | ipsec: l2tp: T2816: remove duplicate 3des-sha1-modp1024 proposal | Christian Poessinger | |
2021-08-08 | Debian: T3641: drop dead symlink file in /etc/init.d | Christian Poessinger | |
2021-08-08 | Debian: add missing runtime dependency on ndisc6 | Christian Poessinger | |
2021-08-08 | smoketest: rpki: remporary disable SSH based connection testing due to FRR bug | Christian Poessinger | |
see: https://github.com/FRRouting/frr/issues/7978 | |||
2021-08-08 | Merge pull request #956 from Cheeze-It/current | Christian Poessinger | |
PING: T3634: Fixing do not fragment to Ping | |||
2021-08-06 | http-api: T2768: add README.graphql | John Estabrook | |
2021-08-06 | http-api: T2768: example using GraphQL for high-level config operations | John Estabrook | |
2021-08-06 | Revert "http-api: T2768: example using GraphQL for high-level config operations" | John Estabrook | |
This reverts commit a2b959c50c96698da173b9c4720369a51442cc5c. | |||
2021-08-06 | Revert "http-api: T2768: add README.graphql" | John Estabrook | |
This reverts commit 4a9063f755b72786c3c5928b2fa74cf1aa935129. | |||
2021-08-06 | http-api: T2768: add README.graphql | John Estabrook | |
2021-08-06 | http-api: T2768: example using GraphQL for high-level config operations | John Estabrook | |
2021-08-06 | vyos.template: T2720: allow setting template directory | John Estabrook | |
2021-08-06 | frr: T3694: temporary disable VRF VNI assignment | Christian Poessinger | |
Somehow we hit a priority inversion here as we need to remove the VRF assigned VNI before we can remove a BGP bound VRF instance. Maybe move this to an individual helper script that set's up the VNI for the given VRF after any routing protocol (in our case this was triggered by running "make testc" when building an ISO image by the bgp-rpki config). | |||
2021-08-06 | frr: T2175: remove no longer required loop when removing VRF VNI | Christian Poessinger | |
This is a completing commit to a55585a833 ("frr: T2175: remove no longer required loop when removing routing protocols") that was missed out previously. | |||
2021-08-06 | Merge pull request #955 from sever-sever/T548-curr | Christian Poessinger | |
migration: T548: Rename quagga scripts for correct seq | |||
2021-08-06 | migration: T548: Rename quagga scripts for correct seq | Viacheslav | |
Rename quagga migration scripts for correct sequences between 1.3 and 1.4 branches 7-to-8 in 1.3 uses the same migration as 8-to-9 in 1.4 This PR fix it | |||
2021-08-06 | Merge pull request #953 from runborg/T3721 | Christian Poessinger | |
T3721: arm64: fastnetmon 1.2 is amd64 only (arm64 blocker) | |||
2021-08-05 | PING: T3634: Fixing do not fragment to Ping | Cheeze_It | |
In this commit we fix the do not fragment capability for ping commands. Sorry for messing it up earlier :( | |||
2021-08-04 | ipsec: T3718: fix default processing of ike dh-group proposals | Christian Poessinger | |
IKE dh-group defaults to 2 (modp1024). |