summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-04-11template: T2230: helper to generate templatesThomas Mangin
Currently the pattern is to import jinja2 and re-generate the template in every file. Dimitriy reported a reduction in performance (1s) when commiting. This code provide an helper function which caches the Environment and template renderer, and can generate template from one line (instead of the few currently)
2020-04-11dhcp: T2265: refactor DHCP classThomas Mangin
Break the code between v4 and v6, remove need for getter/setter as they are just exposing the underlying dict. Move FixedDict from tunnel code and expose it to other part so it can be used to prevent accidental change to the dhcp option if no default exists already.
2020-04-11dhcp: T2265: v4/v6 conflict for lease fileThomas Mangin
The vyatta-dhclient-hook is not differentiating between v4 and v6 and attempting to use the same lease file for both protocol. Therefore only dhcp v4 or v6 could be setup on an interface and not both.
2020-04-10pppoe: T2248: connect-on-demand and vrf are mutually exclusiveChristian Poessinger
As PPP can be used to establish a connection on-demand it manages the Kernel default route. This can not be used when using VRFs which are managed by the ip-up.d and ip-down.d scripts - thus those options are now mutially exclusive. The best fix would be adding support for VRFs into PPP.
2020-04-10Merge pull request #321 from jjakob/openvpn-ccd-fixChristian Poessinger
openvpn: T2261: re-add ccd to template (was removed by mistake)
2020-04-10openvpn: T2261: re-add ccd to template (was removed by mistake)jjakob
Commit ef27cef0 mistakenly removed client-config-dir from the server template.
2020-04-10vif-c: T2240: add VRF supportChristian Poessinger
2020-04-10Revert "vif-s: T2240: add VRF support"Christian Poessinger
This reverts commit 2d33cf656f5856fb06e8390fc2250bb99ea0206b.
2020-04-09op-mode: raid: T689: Typo in descriptionViacheslav Hletenko
2020-04-09Debian: T640: explicitly add easy-rsaChristian Poessinger
easy-rsa is used by e.g. OpenVPN installation and was dropped when enabling "--apt-recommends false" in VyOS build system. Dependency has been explicitly added.
2020-04-09vxlan: T2172: add source-address optionChristian Poessinger
This is a base requirement for l2vpn evpn. When source-address is configured, the option "local <source-addr> nolearning" is appended when creating the interface as mentioned here: https://vincent.bernat.ch/en/blog/2017-vxlan-bgp-evpn
2020-04-09Revert "vxlan: T2172: remove group or remote check in verify()"Christian Poessinger
This reverts commit 195e1da6a518ee3a2cbc0e1d454317e3c05e3e6e.
2020-04-09xml: radius: update source-address valueHelpChristian Poessinger
2020-04-09Merge branch 'vxlan' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 'vxlan' of github.com:c-po/vyos-1x: vxlan: pseudo-ethernet: T2260: convert link nodes to source-interface wireguard: T2206: fix comment in migration script pppoe: enable Jinja2 trim_blocks
2020-04-09vxlan: pseudo-ethernet: T2260: convert link nodes to source-interfaceChristian Poessinger
2020-04-09wireguard: T2206: fix comment in migration scriptChristian Poessinger
2020-04-09pppoe: enable Jinja2 trim_blocksChristian Poessinger
2020-04-09util: T2226: os.system was wrongly converted to runThomas Mangin
os.system does print the ouput of the command, run() does not. A new function called call() does the printing and return the error code.
2020-04-09Merge pull request #319 from thomas-mangin/T2205Christian Poessinger
util: T2205: do not display debuging when it is not set
2020-04-09util: T2205: do not display debuging when it is not setThomas Mangin
2020-04-09Revert "tunnel: T2028: prevent single 'remote' keyword"Christian Poessinger
This reverts commit 37973a13bbc168c09e5f4d1e606f91fd7ffbb41a.
2020-04-09Merge pull request #316 from thomas-mangin/T2242Christian Poessinger
import: T2242: remove all import *
2020-04-09Merge pull request #317 from thomas-mangin/T2028-remoteChristian Poessinger
tunnel: T2028: fix remote and registration
2020-04-09Merge pull request #314 from thomas-mangin/T2186Christian Poessinger
airbag: T2186: report friendly user message and log to syslog
2020-04-08http api: T2252: increase proxy_read_timeout for image managementJohn Estabrook
2020-04-08tunnel: T2028: register the _Tunnel classThomas Mangin
All interface classes register themselves so that we can figure out from an interface name what class is responsible for its creation. In the case of Tunnel, it is not the case as multiple different interfaces are sharing the same "tun" prefix. Still many operations are the same and it should be done.
2020-04-08Revert "util: T2226: rewrite merge config to use cmd"John Estabrook
This reverts commit 9664e7d685307f5f9736929731e759ff7bad7353.
2020-04-08Revert "util: T2226: rewrite remote function helpers to use cmd"John Estabrook
This reverts commit 7219d4013814a55c4eeaf36b7a36d5e8076d09f0.
2020-04-08tunnel: T2028: prevent single 'remote' keywordThomas Mangin
When the remote keywrod is ommited, the default value of '' is still set, therefore the ip command will include it. Remote is now removed if unset.
2020-04-08vyos.util: introduce chmod_750() for files/directoriesChristian Poessinger
2020-04-08wireguard: T2244: re-use interface removal code from WireGuardIf classChristian Poessinger
2020-04-08wireguard: T2244: fix writing PSKChristian Poessinger
2020-04-08wireguard: T2226: fix generation of pskChristian Poessinger
Commit 264e0059449 ("util: T2226: rewrite wireguard oper to use run") changed the code on PSK key generation, but the generated key must be output to stdout.
2020-04-08vyos-util: rename chown_file() > chown()Christian Poessinger
... to make it clear also directories can be chown(-ed)
2020-04-08vif-s: T2240: add VRF supportChristian Poessinger
2020-04-08Merge branch 't2244-wireguard' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 't2244-wireguard' of github.com:c-po/vyos-1x: wireguard: T2244: split port configuration to XML include file wireguard: T2247: add VRF support wireguard: T2244: use xml include for mtu wireguard: T2244: rewrite to match code structure of other interfaces
2020-04-08wireguard: T2244: split port configuration to XML include fileChristian Poessinger
2020-04-08wireguard: T2247: add VRF supportChristian Poessinger
2020-04-08wireguard: T2244: use xml include for mtuChristian Poessinger
2020-04-08wireguard: T2244: rewrite to match code structure of other interfacesChristian Poessinger
Accessing a list of dictionaries and parsind/manipulating the content can and should be done in a way other interface implementations do it. Just to name a few: - Ethernet - L2TPv3 - WWAN (WirelessModem)
2020-04-08op-mode: lldp: T2246: check if service is configuredChristian Poessinger
2020-04-08op-mode: dns: forwarding: cleanupChristian Poessinger
2020-04-08logging: T2186: cosmetic changesThomas Mangin
2020-04-08import: T2242: remove all import *Thomas Mangin
2020-04-08Merge pull request #315 from jjakob/openvpn-templateChristian Poessinger
openvpn: T2234: clean up and rework openvpn template
2020-04-08openvpn: T2234: clean up and rework openvpn templatejjakob
- rearranged options to put them in logical groups separated by blank lines - removed unnecessary blank lines (whitespace) - fixed encryption if-else comparison logic that caused 3des to be ignored - set tls if tls-version-min is set
2020-04-08vrf: add additional documentation linkChristian Poessinger
2020-04-08Merge pull request #313 from DmitriyEshenko/dmvpn-fix1Christian Poessinger
tunnel: T2236: Add additional check for type change
2020-04-08Merge pull request #311 from thomas-mangin/T2028-explainChristian Poessinger
tunnel: T2028: document the classes created
2020-04-08Merge pull request #312 from DmitriyEshenko/patch-11Christian Poessinger
tunnel: T1579: Change help value for encapsulation node