Age | Commit message (Collapse) | Author |
|
(cherry picked from commit bb578a1cab177e8cee6e4d02144d21387ba13a93)
|
|
(cherry picked from commit 0b97bde2cb04cf5e23350798f972abcee4bfe4ee)
|
|
(cherry picked from commit e036f783bc85e4d2bad5f5cbfd688a03a352223e)
|
|
(cherry picked from commit bd701768796d6ebb03ca943faf96d1dbea030edd)
|
|
(cherry picked from commit fc5dc00a3892fa26d03213854ea5091d6b0c2c18)
|
|
(cherry picked from commit 9ffa3e82d951756696367578dd5e82ef0f690065)
|
|
(cherry picked from commit 3d15cfd484e8c2732d9f10e4065f2282f1f5d334)
|
|
(cherry picked from commit cdc5fddfd796ccf7cfe35d2501cb1da380df53b2)
|
|
An attempt to upgrade to 1.2.x is caught, but error is of failed
checksum verification; add check and message.
(cherry picked from commit aae1247da61206d7a1b0b4d6ee20d36d194dbaba)
|
|
Note that this was updated for the fix in T5739.
(cherry picked from commit 424c9b19fd54598081e965c3364b082c5ef984de)
|
|
This commit allows management of system images with either new or legacy
tools: 'add/delete/rename system image' and 'set default' are translated
appropriately on booting between images with the old and new tools.
Consequently, the warning of the initial commit of T4516 is dropped.
(cherry picked from commit 96b65e90fbfa1fe63d97929ac86fc910abb0caa9)
|
|
(cherry picked from commit 8efab9ee8cdb0e65dddb9d3ba97de8ddcf3666dc)
|
|
(cherry picked from commit fcded7930b5426193e8490c6df2a70e300a60e31)
|
|
(cherry picked from commit a604d5d56d93a6958d879b838066bbe2df131bc5)
|
|
(cherry picked from commit d88168b8e26e46d512e3b175cd2eacecae0e596a)
|
|
(cherry picked from commit b31092cc33685628c74845f2aa1e94f0e7879e87)
|
|
(cherry picked from commit 7d6c262976eba624b935c96a7495cc392158b8ff)
|
|
(cherry picked from commit 9e3b769f8402a816f6c7fa80ff12c9579c3f5243)
|
|
(cherry picked from commit 169c9ff01287cb558850479afb733dd53fb6ae5d)
|
|
(cherry picked from commit 74b00c1f6961d1bd3a59768021f154bdb64c154e)
|
|
This commit adds the whole set of system image tools written from the scratch in
Python that allows performing all the operations on images:
* check information
* perform installation and deletion
* versions management
Also, it contains a new service that will update the GRUB menu and keep tracking
its version in the future.
WARNING: The commit contains non-reversible changes. Because of boot menu
changes, it will not be possible to manage images from older VyOS versions after
an update.
(cherry picked from commit 8f94262e8fa2477700c50303ea6e2c6ddad72adb)
|
|
ocserv: T5796: add CLI knob "http-security-headers" (backport #2644)
|
|
(cherry picked from commit 1c82e661e04e0979e09e487a58a801ffa9f438e8)
|
|
OCserv manual recommended HTTP headers tobe included in the configuration.
(cherry picked from commit ad65d37ddf92ec8416c84707d7d41e63346b550c)
(cherry picked from commit 24f449cc099703df95646c719e9d3f308ed1a3f0)
|
|
T5775: firewall: re-add state-policy to firewall. (manual backport #2539)
|
|
|
|
|
|
included in <set firewall global-options state-policy> node.
|
|
firewall: T4502: add offload to firewall table actions (backport #2638)
|
|
|
|
frr: T4020: add option to define number of open file descriptors (backport #2639)
|
|
This allows the operator to control the number of open file descriptors each
daemon is allowed to start with. The current assumed value on most operating
systems is 1024.
If the operator plans to run bgp with several thousands of peers then this is
where we would modify FRR to allow this to happen.
set system frr descriptors <n>
(cherry picked from commit 892c28ccf634173d4c4952c248cb03974c560793)
|
|
T5749: Add a more scrict search for get_vrf method (backport #2635)
|
|
The current implementation is wrong as it searches `master` in the
iproute2 JSON output. It is a worng as it could include bridges
or bonding interfaces
Add the more strict search `info_slave_kind == vrf`
(cherry picked from commit 2ebac5af10a36668ed3b8cfa6e5a9f61cf5d1068)
|
|
T5826: ensure dmidecode is installed as a dependency of vyos-1x (backport #2631)
|
|
dmicode is used in the "show hardware dmi" and to derive
synthetic MAC addresses (see python/vyos/ifconfig/interface.py).
On non-x86 platforms like arm64 it may not be pulled in explictly
by other packages (like libparted2) so add it as an explicit dependency.
(cherry picked from commit 46c929a99b7d507451d8385b315ae7ef9e7cbed5)
|
|
T5774: fix regression in remote.upload (backport #2628)
|
|
(cherry picked from commit 6b325962a4b8b3e67d7976bf161aed34a9fe6cce)
|
|
T5803: Migrate vscode settings to new value and clean up .gitattributes (backport #2609)
|
|
SRv6: T591: initial implementation to support locator definition (backport #2606)
|
|
VyOS CLI
set protocols segment-routing srv6 locator bar prefix '2001:b::/64'
set protocols segment-routing srv6 locator foo behavior-usid
set protocols segment-routing srv6 locator foo prefix '2001:a::/64'
Will generate in FRR
segment-routing
srv6
locators
locator bar
prefix 2001:b::/64 block-len 40 node-len 24 func-bits 16
exit
!
locator foo
prefix 2001:a::/64 block-len 40 node-len 24 func-bits 16
behavior usid
exit
!
exit
!
exit
!
exit
(cherry picked from commit ca301cdd4746187f96ff84e411fda6a84e33f237)
|
|
set protocols bgp sid vpn per-vrf export '99'
set protocols bgp srv6 locator 'foo'
set protocols bgp system-as '100'
Will generate in FRR config
router bgp 100
no bgp ebgp-requires-policy
no bgp default ipv4-unicast
no bgp network import-check
!
segment-routing srv6
locator foo
exit
sid vpn per-vrf export 99
exit
(cherry picked from commit af46fe54e56cf85d13b62ee771bec3d80f225ac5)
|
|
validator: T5816: large community validator should only allos character set and basic format (backport #2618)
|
|
load-config: T5815: provide a variety of load config methods (backport #2608)
|
|
and basic format
(cherry picked from commit 5acc655c316216122ba975f30df7b76f161cbf02)
|
|
Collect in a module several versions of a 'load config' function.
They have different use cases according to performance and error
reporting, and allow comparison of non-legacy and legacy variants.
(cherry picked from commit 7e4caa118692d9b6fd798783596bd018f805e5eb)
|
|
T5812: report actual number of revisions instead of max (backport #2613)
|
|
(cherry picked from commit ccbf03f1a87ac37eef78aeb29420ceea9a730a90)
|
|
T5812: Fix for rollback check max revision number (backport #2598)
|
|
T5807: fix op-mode command <show nat66> (backport #2612)
|