| Age | Commit message (Collapse) | Author |
|---|
|
T6054: WLB: fix rules parsing when using multiple ports in one rule (backport #3042)
|
|
container: T5909: move registry login to op-mode (backport #3044)
|
|
It does not make sense to perform the "podman login" command when setting up
containers, as images are not automatically pulled in from the registry - due
to issues with the default route during startup.
The same issue manifests in "podman login" where we can not login to a registry
unless there is a default route present.
This commit changes the behavior that the container registry is part of the
configuration, but it is only referenced during "add container image" and thus
never during system boot.
(cherry picked from commit baf30d8319ef4d0f0cc4cdf0f7c12f03f8a492b6)
|
|
(cherry picked from commit 6d79c73d4fa2d26197c1bc19df215a204af6c5dd)
|
|
pki: T6055: Cleanup unnecessary sudo, preserve env when sudo is needed (backport #3040)
|
|
(cherry picked from commit e2adfdef9e79aa7550e82a12d661718a479aba90)
|
|
(cherry picked from commit 1f22ac1bb0a32d3e7ef06713f42e7f6f1c3f3775)
|
|
upnp: T3420: disable the UPnP CLI in Sagitta until bugs are fixed
|
|
|
|
conntrack: T5376: Fix priority for CT helpers (backport #3037)
|
|
Ref: https://www.spinics.net/lists/netfilter/msg59549.html
(cherry picked from commit 538aeeccc46d31ab54647b67c8a2ba442d61cc46)
|
|
vyos-event-handler.py: T6048: handling exception when _PID is not found (backport #3032)
|
|
(cherry picked from commit b678009b484eb6d20fceb5db00b0dc62344296a2)
|
|
T6050: Fixed descriptions of 'extended-scripts' commands in accel-ppp (backport #3033)
|
|
Removed word 'PPPoE' from descriptions in common template for all
accel-ppp services.
(cherry picked from commit 8e1793834bf453ff252f38ae5271f7f9bcea9bf9)
|
|
smoketest: T6043: proper cleanup after testcase (backport #3030)
|
|
This extends commit dbe8c613b ("bridge: T6043: do not call vxlan dependency if
interface does not exist (yet)") with a proper cleanup of additional interfaces
created during the testrun.
(cherry picked from commit 4cb80868ab3ab35453d8609392ca470a02764fac)
|
|
bridge: T6043: do not call vxlan dependency if interface does not exist (yet) (backport #3026)
|
|
In order to keep the proper priority list during system startup and on initial
setup/commit for this feature the dependent VXLAN code should not be called,
if the interface in question does not exist (yet).
(cherry picked from commit dbe8c613bb80bc8b714398825054ade5942ea75b)
|
|
login: T5972: add possibility to disable individual local user accounts (backport #3019)
|
|
op-mode: T5581: add "show ipv6 nht" command (backport #3027)
|
|
image-tools: T6041: fix logic of is_live_boot to allow for PXE boot (backport #3024)
|
|
This improves the implementation to support both IPv4 and IPv6
(cherry picked from commit e144e55d6360a92279167198928cbe24efd97f08)
|
|
(cherry picked from commit 5949ff72a9f953da9d06d1ad75add0e6023d0dc4)
|
|
T3722: Fixed L-Time in 'show vpn ike sa' command (backport #3021)
|
|
* set system login user <name> disable
(cherry picked from commit 6e0b146ed3b90da577c3ecba38836883fd435e7a)
|
|
Fixed L-Time in 'show vpn ike sa' command
(cherry picked from commit bb6e6fc2119584df6ec571e7e9335dc509d5faeb)
|
|
T6001: add option to disable next-hop-tracking resolve-via-default (backport #3016)
|
|
context
* set vrf name <name> ip nht no-resolve-via-default
* set vrf name <name> ipv6 nht no-resolve-via-default
(cherry picked from commit 0fafc4bcdb9efc03796ddab0832471b11ba1bbe0)
|
|
* set system ip nht no-resolve-via-default
* set system ipv6 nht no-resolve-via-default
(cherry picked from commit ece0e768f36e52f8964823d891264d7c187204ec)
|
|
EDB should be EGP for exterior gateway protocol
(cherry picked from commit 56654191613113764415d7eddadcbd8c97e126de)
|
|
rpki: T6034: extend config migration testcase (backport #3011)
|
|
(cherry picked from commit 354603398b693af06695d5d1a7602f17079f8350)
|
|
T6029: Rewritten Accel-PPP services to an identical feature set (backport #3004)
|
|
Removed dhcp-interface option (l2tp)
Added wins-server (sstp)
Added description (ipoe, pppoe, sstp, pptp)
Added exteded-script (l2tp, sstp, pptp)
Added shaper (ipoe, pptp, sstp, l2tp)
Added limits (ipoe, pptp, sstp, l2tp)
Added snmp ( ipoe, pptp,sstp, l2tp)
Refactoring and reformated code.
(cherry picked from commit ac6a16f6c5ad7700789759e1ec093236c2e182a2)
|
|
rpki: T6034: move file based SSH keys for authentication to PKI subsystem (backport #2988)
|
|
T6019: Fix smoketest test_system_conntrack custom timeout (backport #3005)
|
|
(cherry picked from commit 3bfbbef22954488541abd3cad262b1e196d4c240)
|
|
(cherry picked from commit 4d76e9ef3e7773ed96c037108021c292675b101c)
|
|
(cherry picked from commit 78820752b936e77d30f995498ff36487c5c6af87)
|
|
(cherry picked from commit 0f8bf6bd0fb29cfd638e9920674e7ad1d1d25350)
|
|
(cherry picked from commit ac2d7dfac6073d0f232191ec494f78a8d12889e4)
|
|
set pki openssh rpki private key ...
set pki openssh rpki public key ...
set pki openssh rpki public type 'ssh-rsa'
(cherry picked from commit 8c78ef0879f22ffd4a5f7fdb175e9109b46e9d7b)
|
|
After updateing netfilter in the commit https://github.com/vyos/vyos-build/commit/b31f5fe934bcb37534d49acdb5f7756bf05422e8
The nftables format for conntrack timeouts is different.
Fix this.
(cherry picked from commit 24860e092426bf0bb09c2d164d66330be13bcd77)
|
|
T5064: Firewall fix RegEx for for domain-group (backport #3000)
|
|
T5928: Change firewall priority to 319 (backport #2999)
|
|
Improve RegEx for firewall domain-groups.
This domain group looks good, but the current RegEx validation
fils:
```
set firewall group domain-group a_aa
```
(cherry picked from commit b67049edab41e8714aec087b81d589fdb03a350b)
|
|
(cherry picked from commit ef87bd7320da2750de4d93c14314965704f3dfbd)
|
|
Change the firewall priority to 319, after interface ethernet
configuration
For example if we use VLANs and the vlan interface must be
created before we can use it in the firewall/flowtable
The current priority
```
199 firewall
300 interfaces/dummy
300 interfaces/loopback
300 interfaces/virtual-ethernet
310 interfaces/bridge
310 interfaces/input
318 interfaces/ethernet
...
```
(cherry picked from commit f1dcd2d23f89251b0a96c61f8186002cb0d50d18)
|
|
bgp: T6032: add EVPN MAC-VRF Site-of-Origin support (backport #2987)
|
