Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-06-18 | T6492: Check if all migrators have the executable bit set | Nataliia Solomko | |
2024-06-16 | Revert T6494: Update sonarcloud.yml and add more branches for scanning" (#3663) | Yuriy Andamasov | |
2024-06-16 | Merge pull request #3661 from vyos/update-sonarcloud-settings | Yuriy Andamasov | |
T6494: Update sonarcloud.yml and add more branches for scanning | |||
2024-06-16 | T6494: Update sonarcloud.yml and add more branches for scanning | Yuriy Andamasov | |
2024-06-16 | Merge pull request #3659 from natali-rs1985/openvpn-fix-smoketests | Christian Breunig | |
openvpn: T5487: Fix migration smoketests commands | |||
2024-06-16 | openvpn: T5487: Fix migration smoketests commands | Nataliia Solomko | |
2024-06-15 | Merge pull request #3653 from c-po/openvpn-migration-permission-fix | Christian Breunig | |
openvpn: T5487: make migration script executable | |||
2024-06-15 | openvpn: T5487: make migration script executable | Christian Breunig | |
Migration script introduced in commit 0f669a226 ("openvpn: T5487: Remove eprecated option --cipher for server and client mode") lacked executable permission. | |||
2024-06-14 | Merge pull request #3645 from c-po/pki-T6480 | Christian Breunig | |
op-mode: T6480: must call pki.py helper as root to work with ACME certificates | |||
2024-06-14 | Merge pull request #3646 from c-po/pki-T6407 | Christian Breunig | |
op-mode: T6407: "generate pki" missed to mangle in ACME certificates when required | |||
2024-06-14 | Merge pull request #3647 from vyos/T6487-update-central-workflow-branch | Christian Breunig | |
T6487: updated central workflows to use current branch | |||
2024-06-14 | T6487: updated central workflows to use current branch | kumvijaya | |
2024-06-14 | op-mode: T6407: "generate pki" missed to mangle in ACME certificates when ↵ | Christian Breunig | |
required If the requested certificate to generate an Apple IOS profile was based on an ACME certificate, we also need to mangle in the ACME certs content to retrieve the certificates issuer name. | |||
2024-06-14 | op-mode: T6480: must call pki.py helper as root to work with ACME certificates | Christian Breunig | |
This is an addition to commit 65fba1cd2 ("op-mode: T6377: must call pki.py helper as root to work with ACME certificates") which missed out the basic "show pki" command, as the <command> XML node was deep down in the view. | |||
2024-06-13 | Merge pull request #3639 from natali-rs1985/T5487-current | Daniil Baturin | |
openvpn: T5487: Remove deprecated option --cipher for server and client mode | |||
2024-06-13 | Merge pull request #3601 from talmakion/bugfix/T6456 | Daniil Baturin | |
T6456: Convert "monitor traffic" to modern op-mode wrapper | |||
2024-06-13 | Merge pull request #3590 from talmakion/feature/T6045 | Daniil Baturin | |
T6045: Recreate show lldp detail views & improve remote port selection | |||
2024-06-13 | Merge pull request #3644 from natali-rs1985/T6227-current | Christian Breunig | |
op_mode: T6227: Rewrite show conntrack-sync cache internal to use tabulate output | |||
2024-06-12 | Merge pull request #3642 from vyos/T6476-sonar-cloud-workflow | Christian Breunig | |
T6476: added sonarcloud workflow | |||
2024-06-12 | op_mode: T6227: Rewrite show conntrack-sync cache internal to use tabulate ↵ | Nataliia Solomko | |
output | |||
2024-06-12 | T6476: added sonarcloud workflow | Vijayakumar A | |
2024-06-12 | Merge pull request #3638 from c-po/bgp-vrf-completion-helper | Christian Breunig | |
bgp: T6473: missing completion helper for peer-groups inside a VRF | |||
2024-06-11 | bgp: T6473: missing completion helper for peer-groups inside a VRF | Christian Breunig | |
Using BGP peer-groups inside a VRF instance will make use if the global VRFs peer-group list during tab-completion and not the peer-groups defined within the BGP instance of the given VRF. | |||
2024-06-11 | openvpn: T5487: Remove eprecated option --cipher for server and client mode | Nataliia Solomko | |
2024-06-11 | T6456: Convert "monitor traffic" to modern op-mode wrapper | Andrew Topp | |
The old "monitor traffic" definition had misaligned arguments under the verbose node and manually offered the same parameter keyword in multiple positions to emulate flexible parameters. I've wrapped tcpdump for op-mode and replicated the "varargs" style from mtr.py/mtr.xml.in to present a few more parameters in a more flexible manner. Changes to the Makefile were required for recursive varargs lookup. | |||
2024-06-11 | T6045: Recreate show lldp detail views & improve remote port selection | Andrew Topp | |
If the remote device has explicitly sent the interface name as the portID, we should use that first as the interface name, before working through the previous priority order. I've brought back LLDP detail views directly calling lldpcli. This can be extended to render a template from op_mode/lldp.py, but lldpcli isn't bad at rendering readable info. Raw mode (including detailed raw) is still accessible for programmatic access. | |||
2024-06-11 | Merge pull request #3632 from c-po/fixup-firewall | Christian Breunig | |
firewall: T3900: fix migration and smoketests | |||
2024-06-11 | Merge pull request #3611 from c-po/op-mode-wifi | Christian Breunig | |
wireless: T6462: add op-mode command for hostapd and wpa_supplicant logs | |||
2024-06-11 | Merge pull request #3628 from jestabro/op-mode-config-dict | Christian Breunig | |
op-mode: T6471: add optimized get_config_dict | |||
2024-06-11 | firewall: T3900: fix migration and smoketests | Christian Breunig | |
Commit 770edf016838523 ("T3900: T6394: extend functionalities in firewall") changed the position in the CLI for conntrack timeout. This lead to failing smoketests because of a regression in the migrator. | |||
2024-06-10 | op-mode: T6471: add optimized get_config_dict | John Estabrook | |
2024-06-11 | T6469: remove j2 lint workflow (#3626) | Vijayakumar A | |
2024-06-10 | Merge pull request #3621 from sever-sever/T6442 | Christian Breunig | |
T6442: CGNAT add log for address allocation | |||
2024-06-10 | Merge pull request #3606 from c-po/utils-cpu-T5195 | Christian Breunig | |
vyos.utils: T5195: import vyos.cpu to this package | |||
2024-06-10 | Merge pull request #3615 from vyos/T6467-add-workflow-sagitta | Daniil Baturin | |
T6467: add PR checks workflows for sagitta branch | |||
2024-06-10 | T6442: CGNAT add log for address allocation | Viacheslav Hletenko | |
Add the configuration command to log current CGNAT allocation set nat cgnat log-allocation | |||
2024-06-10 | Merge pull request #3614 from nvollmar/T6219 | Christian Breunig | |
T6219: Add support for container sysctl parameter | |||
2024-06-10 | T6219: align with system sysctl and limit parameters to supported | Nicolas Vollmar | |
2024-06-10 | container: T6219: Add support for container sysctl / kernel parameters | Ben Pilgrim | |
2024-06-10 | wireless: T6462: add op-mode command for hostapd and wpa_supplicant logs | Christian Breunig | |
* monitor log wireless hostapd [interface <name>] * monitor log wireless wpa-supplicant [interface <name>] * show log wireless hostapd [interface <name>] * show log wireless wpa-supplicant [interface <name>] | |||
2024-06-10 | vyos.utils: T5195: import vyos.cpu to this package | Christian Breunig | |
The intention of vyos.utils package is to have a common ground for repeating actions/helpers. This is also true for number of CPUs and their respective core count. Move vyos.cpu to vyos.utils.cpu | |||
2024-06-10 | Merge pull request #3610 from c-po/ipsec-profile-T6424 | Christian Breunig | |
op-mode: T6424: ipsec: honor certificate CN and CA chain during profile generation | |||
2024-06-10 | Merge pull request #3612 from c-po/haproxy-pki-T6463 | Christian Breunig | |
pki: T6463: reverse-proxy service not reloaded when updating SSL certificate(s) | |||
2024-06-10 | Merge pull request #3613 from c-po/sstpc-T6464 | Christian Breunig | |
pki: T6464: sstpc interface not reloaded when updating SSL certificate(s) | |||
2024-06-10 | Merge pull request #3607 from c-po/firewall-unused-import | Christian Breunig | |
firewall: T3900: T6394: remove unused import | |||
2024-06-10 | T6467: add PR checks workflows for sagitta | Vijayakumar A | |
2024-06-10 | T6467: add PR checks workflows for sagitta | Vijayakumar A | |
2024-06-10 | T6467: add PR checks workflows for sagitta | Vijayakumar A | |
2024-06-09 | op-mode: T6424: ipsec: filter out duplicate CA certificates in Apple IOS profile | Christian Breunig | |
2024-06-09 | op-mode: T6424: ipsec: honor certificate CN and CA chain during profile ↵ | Christian Breunig | |
generation In e6fe6e50a5c ("op-mode: ipsec: T6407: fix profile generation") we fixed support for multiple CAs when dealing with the generation of Apple IOS profiles. This commit extends support to properly include the common name of the server certificate issuer and all it's paren't CAs. A list of parent CAs is automatically generated from the "PKI" subsystem content and embedded into the resulting profile. |