Age | Commit message (Collapse) | Author |
|
Not all NICs could provide ring-buffers info requested by ethtool
in JSON format
For example 'vif' Xen/XCP-NG interfaces
Fix it
|
|
system_login: T6807: allow a trailing slash character in system login
|
|
op_mode: T6808: Console server op mode commands throw errors when console server is not configured
|
|
login: T6712: honor 80x25 terminal size for nonproduction banner message
|
|
|
|
In the new iproute2 package the link to `ip` was changed
$ file /usr/sbin/ip
/usr/sbin/ip: symbolic link to ../bin/ip
Fix smoketest
|
|
server is not configured
|
|
Allow the use of a trailing slash `("/")` at the of the user's home directory path. For example `/home/test/`
|
|
T4583: Rewrite VRRP op-mode to vyos.opmode format
|
|
T6791: Extend fair-queue hash-interval
|
|
|
|
|
|
pki: T4914: Rewrite the PKI op mode in the new style
|
|
|
|
|
|
reformat file by linter rules
|
|
|
|
|
|
(cherry picked from commit 3abe7c72c95c3d9b825db08b092c555786e9fbcf)
Co-authored-by: Viacheslav Hletenko <v.gletenko@vyos.io>
|
|
pki: T6766: Add support for ECDSA private keys
|
|
haproxy: T6745: Rename reverse-proxy to haproxy
|
|
|
|
|
|
|
|
config-mgmt: T5976: add option for commit-confirm to use 'soft' rollback
|
|
|
|
vyos.configtree: T4318: Allow set tag flag to true or false
|
|
|
|
smoketest: T4576: add guard timeout for systemd in log level tests
|
|
|
|
cli: T6740: add a converter from set commands to config
|
|
Signed-off-by: Daniil Baturin <daniil@baturin.org>
|
|
pbr: T6430: Local IP rules targeting VRFs by name as well as route table IDs
|
|
|
|
* This is the `policy local-route*` part of T6430, manipulating ip rules,
another PR covers firewall-backed `policy route*` for similar functionality
* Local PBR (policy local-route*) can only target table IDs up to 200 and
the previous PR to extend the range was rejected
* PBR with this PR can now also target VRFs directly by name, working around
targeting problems for VRF table IDs outside the overlapping 100-200 range
* Validation ensures rules can't target both a table ID and a VRF name
(internally they are handled the same)
* Relocated TestPolicyRoute.verify_rules() into VyOSUnitTestSHIM.TestCase,
extended to allow lookups in other address families (IPv6 in the new tests).
verify_rules() is used by original pbr and new lpbr smoketests in this PR.
|
|
pki: T6481: auto import ACME certificate chain into CLI
|
|
GitHub: T6494: add parallel step to run interface based smoketests
|
|
When using an ACME based certificate with VyOS we provide the necessary PEM
files opaque in the background when using the internal tools. This however will
not properly work with the CA chain portion, as the system is based on the
"pki certificate <name> acme" CLI node of a certificate but CA chains reside
under "pki ca".
This adds support for importing the PEM data of a CA chain issued via ACME into
the "pki ca AUTOCHAIN_<name> certificate" subsystem so it can be queried by
other daemons. Importing the chain only happens, when the chain was not already
added manually by the user.
ACME certificate chains that are automatically added to the CLI are all prefixed
using AUTOCHAIN_certname so they can be consumed by any daemon. This also adds
a safeguard when the intermediate CA changes, the referenced name on the CLI
stays consitent for any pending daemon updates.
|
|
T6759: add support for italian keymap
|
|
static: T4283: fix missing f'ormat string
|
|
|
|
set system option keyboard-layout it
|
|
|
|
This fixes the error message:
Can not use both blackhole and reject for prefix "{prefix}"!
Added in commit bb78f3a9ad28 ("static: T4283: support "reject" routes - emit an
ICMP unreachable when matched")
|
|
Debian: T973: add missing dependency on node-exporter package
|
|
Extend commit a0c15a159 ("T973: add basic node_exporter implementation") by
adding the required dependency to install node-exporter binary.
|
|
Systemd comes with a default of 5 restarts in 10 seconds policy, this limit can
be hit by this reastart sequence, slow down a bit.
|
|
Commit-confirm will restore a previous configuration if a confirmation
is not received in N minutes. Traditionally, this was restored by a
reboot into the last configuration on disk; add a configurable option to
reload the last completed commit without a reboot. The default setting
is to reboot.
|
|
|
|
http-api: T6736: move REST API to a node distinct from GraphQL API
|