summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-08-13vyos.util: "harden" is_systemd_service_running() functionChristian Poessinger
Inspired by the comments of https://unix.stackexchange.com/a/435317 use a more robust approach. A service can be "active" but not "running" (e.g. restarting with a configuration error). We can now test if a systemd unit is "activated" and if it is "running" at all. >>> from vyos.util import is_systemd_service_active >>> from vyos.util import is_systemd_service_running >>> is_systemd_service_active('ssh') True >>> is_systemd_service_running('sshd') False >>> is_systemd_service_running('ssh') True
2021-08-13vrf: T3734: T3728: vni must be configured with a higher priority then bgpdChristian Poessinger
When removing bgp (vrf) instances the assigned VRF vni must be deleted from FRR prior the removal of the bgp settings (T3734). This is now done by moving the CLI command "set vrf name red vni 1000" to a dedicated Python script with a priority higher then bgp.
2021-08-13Merge pull request #969 from sarthurdev/T3752Christian Poessinger
pki: T3752: Fix file output for certificate requests
2021-08-13Merge pull request #968 from sever-sever/T3738Christian Poessinger
openvpn: T3738: Disable authentication option for server mode
2021-08-13pki: T3752: Fix file output for certificate requestssarthurdev
2021-08-13xml: T3234: update instead of overwrite on repeated pathJohn Estabrook
2021-08-13openvpn: T3738: Disable authentication option for server modeViacheslav
2021-08-13Merge pull request #914 from sever-sever/T3673Christian Poessinger
policy: T3673: Add set large-comm-list for route-map
2021-08-13Merge pull request #967 from sever-sever/T3708-currChristian Poessinger
isis: T3708: Fix errors in MTU calculation
2021-08-13policy: T3673: Add set large-comm-list-delete for route-mapViacheslav
2021-08-13isis: T3708: Fix errors in MTU calculationViacheslav
2021-08-13nginx: T3740: use bracketize_ipv6 Jinja2 filter on server addressChristian Poessinger
2021-08-12Merge pull request #966 from kroy-the-rabbit/T3749John Estabrook
T3749: Moving some counters into the proper loop
2021-08-12T3749: Moving some counters into the proper loopKroy
2021-08-12login: T3746: inform users about pending rebootsChristian Poessinger
2021-08-12Merge pull request #963 from FileGo/T3744Christian Poessinger
dns: T3744: fixed dns fwd statistics formatting
2021-08-12dns: T3744: fixed dns fwd statistics formattingFileGo
2021-08-11Merge pull request #962 from jestabro/T3732John Estabrook
T3732: merge leafNodes containing a defaultValue with default-less leafNodes of same path
2021-08-11xml: T3732: merge leafNode with defaultValue with leafNode(s) of same pathJohn Estabrook
2021-08-11bgp: T3739: add common route-distinguisher XML building blockChristian Poessinger
2021-08-11GitHub: fix typo in PR templateChristian Poessinger
2021-08-11xml: T3732: simplifications for merging defaultValue and default-less nodesJohn Estabrook
2021-08-11smoketest: ospf: add logger to passive-interface testChristian Poessinger
2021-08-11accel-ppp: T3731: eliminate service name from error messageChristian Poessinger
VyOS will automatically append the subsystem name (pppoe-server or sstp) when something goes wrong. No need to hardcode this into the error string a second time.
2021-08-10Merge pull request #961 from sarthurdev/T3727Christian Poessinger
ipsec: T3727: Fix ESP proposals not being set from tunnel esp-group
2021-08-10ipsec: T3727: Fix ESP proposals not being set from tunnel esp-groupsarthurdev
2021-08-10Merge pull request #960 from sever-sever/T3709Christian Poessinger
snmp: T3709: Allow enable oid ipCidrRouteTable
2021-08-10snmp: T3709: Allow enable oid ipCidrRouteTableViacheslav
2021-08-10pki: wireguard: T3642: strip private keyChristian Poessinger
Extend regex used by the "| strip-private" modifier to remove the WireGuard private key portion from stdout.
2021-08-09ipsec: T3720: assigning vti secondary address caused interface in A/D stateChristian Poessinger
2021-08-08pki: wireguard: T3642: add alias "generate wireguard key-pair" commandChristian Poessinger
Triggers the same code as "generate pki wireguard key-pair" which makes it easier for users switching from 1.3 -> 1.4.
2021-08-08ipsec: l2tp: T2816: remove duplicate 3des-sha1-modp1024 proposalChristian Poessinger
2021-08-08Debian: T3641: drop dead symlink file in /etc/init.dChristian Poessinger
2021-08-08Debian: add missing runtime dependency on ndisc6Christian Poessinger
2021-08-08smoketest: rpki: remporary disable SSH based connection testing due to FRR bugChristian Poessinger
see: https://github.com/FRRouting/frr/issues/7978
2021-08-08Merge pull request #956 from Cheeze-It/currentChristian Poessinger
PING: T3634: Fixing do not fragment to Ping
2021-08-06http-api: T2768: add README.graphqlJohn Estabrook
2021-08-06http-api: T2768: example using GraphQL for high-level config operationsJohn Estabrook
2021-08-06Revert "http-api: T2768: example using GraphQL for high-level config operations"John Estabrook
This reverts commit a2b959c50c96698da173b9c4720369a51442cc5c.
2021-08-06Revert "http-api: T2768: add README.graphql"John Estabrook
This reverts commit 4a9063f755b72786c3c5928b2fa74cf1aa935129.
2021-08-06http-api: T2768: add README.graphqlJohn Estabrook
2021-08-06http-api: T2768: example using GraphQL for high-level config operationsJohn Estabrook
2021-08-06vyos.template: T2720: allow setting template directoryJohn Estabrook
2021-08-06frr: T3694: temporary disable VRF VNI assignmentChristian Poessinger
Somehow we hit a priority inversion here as we need to remove the VRF assigned VNI before we can remove a BGP bound VRF instance. Maybe move this to an individual helper script that set's up the VNI for the given VRF after any routing protocol (in our case this was triggered by running "make testc" when building an ISO image by the bgp-rpki config).
2021-08-06frr: T2175: remove no longer required loop when removing VRF VNIChristian Poessinger
This is a completing commit to a55585a833 ("frr: T2175: remove no longer required loop when removing routing protocols") that was missed out previously.
2021-08-06Merge pull request #955 from sever-sever/T548-currChristian Poessinger
migration: T548: Rename quagga scripts for correct seq
2021-08-06migration: T548: Rename quagga scripts for correct seqViacheslav
Rename quagga migration scripts for correct sequences between 1.3 and 1.4 branches 7-to-8 in 1.3 uses the same migration as 8-to-9 in 1.4 This PR fix it
2021-08-06Merge pull request #953 from runborg/T3721Christian Poessinger
T3721: arm64: fastnetmon 1.2 is amd64 only (arm64 blocker)
2021-08-05PING: T3634: Fixing do not fragment to PingCheeze_It
In this commit we fix the do not fragment capability for ping commands. Sorry for messing it up earlier :(
2021-08-04ipsec: T3718: fix default processing of ike dh-group proposalsChristian Poessinger
IKE dh-group defaults to 2 (modp1024).