summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
3 daysMerge pull request #4321 from sskaje/T7092Daniil Baturin
T7092: Add Container Registry Mirror
3 daysT7092: Change validators: regex to host-name|address + port + pathsskaje
3 daysT7092: Update interface-definitions/container.xml.insskaje
Co-authored-by: Daniil Baturin <daniil@baturin.org>
3 daysMerge pull request #4388 from jestabro/cleanup-libvyosconfig-buildViacheslav Hletenko
T5400: clean up directory as needed before local build of libvyosconfig
4 daysT5400: clean up directory as needed before local build of libvyosconfigJohn Estabrook
4 daysMerge pull request #4386 from c-po/syslog-T7229Daniil Baturin
syslog: T7229: advanced format should not have IPv6 addresses in [] brackets
6 dayssmoketest: T7229: add syslog test to verify source-address for remoteChristian Breunig
6 dayssyslog: T7229: advanced format should not have IPv6 addresses in [] bracketsChristian Breunig
Otherwise rsyslog will report an error: omfwd: could not get addrinfo for hostname '[2001:db8::2]':'514': System error
7 dayslogin: T6712: add newline after motd warning messageChristian Breunig
7 daysMerge pull request #4382 from c-po/ipsec-ios-profile-fixesChristian Breunig
ipsec: T7225: fix IKE DiffieHellmanGroup and ExtendedAuthEnabled in iOS profile
8 daysipsec: T7225: fix dynamic generation of IKE DiffieHellmanGroup in iOS profileChristian Breunig
Commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") added a bug when working with DiffieHellmanGroup, it started becoming a boolead and no longer referencing the DH groups itself. This has been fixed.
8 daysipsec: T7225: iOS18+ always requires ExtendedAuthEnabled to be setChristian Breunig
If this is unset, loading the iOS VPN profile will error out on the device giving: Profile Installation Failed configuration is invalid: Missing identity My first assumption was an empty string in LocalIdentifier for IKE, but turned out only adding this flag solved it. This was made optional in commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") but got reverted now.
8 daysMerge pull request #4381 from c-po/ipsec-opmode-profileChristian Breunig
ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError
8 daysMerge pull request #4380 from oniko94/feature/T4406-vyos-info-api-endpointChristian Breunig
T4406: Add public API endpoint to display information
8 daysipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedErrorChristian Breunig
Calling "generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name VYOS-NET profile VYOS" in op-mode causes File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code {% if authentication.client_mode.startswith("eap") %} ^^^^^^^^^^^^^^^^^^^^^^^^^ jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode'
8 daysT4406: Add public API endpoint to display informationoniko94
10 daysMerge pull request #4378 from jestabro/libvyosconfig-buildJohn Estabrook
T5400: Move libvyosconfig build out of the Docker image
10 daysMerge pull request #4377 from vyos/syslog-typos-T6989Christian Breunig
syslog: T6989: fix typos and add option to disable MARK
10 daysT5400: add local build of libvyosconfig to MakefileJohn Estabrook
libvyosconfig is both a build and a run dependency of vyos-1x. Satisfying the build dependency within the Docker image requires coordination of updates to vyos-build/libvyosconfig/vyos-1x on any changes to the library; simplify this process by moving the build to a step of the vyos-1x Makefile.
10 daysMerge pull request #4379 from vyos/c-po-patch-1Christian Breunig
GitHub: T5400: evaluate OPAM environment before package build
10 daysGitHub: T5400: evaluate OPAM environment before package buildChristian Breunig
10 dayssyslog: T6989: add option do disable "MARK"syslog-typos-T6989Christian Breunig
New CLI command set system syslog marker disable
10 dayssyslog: T6989: fix validator range to match completion helperChristian Breunig
12 daysMerge pull request #4376 from jameskr97/currentDaniil Baturin
Revert "wireguard: T4930: remove pylint W0611: unused import"
13 daysRevert "wireguard: T4930: remove pylint W0611: unused import"James Roberts
This reverts commit bb70ea569f4548b103c54bbb7c393221a6da0a23.
2025-02-27Merge pull request #4237 from indrajitr/hostd-updateViacheslav Hletenko
T6948: Keep DHCP server leases in sync with hostd records
2025-02-27Merge pull request #4374 from sever-sever/T7204Daniil Baturin
T7204: Container add capability MKNOD
2025-02-27Merge pull request #4369 from natali-rs1985/T7166Daniil Baturin
wireguard: T7166: Call vxlan dependency if interface exist
2025-02-27wireguard: T7166: Call vxlan dependency if interface existNataliia Solomko
2025-02-27Merge pull request #4371 from talmakion/bugfix/T7116/remove-obsolete-communityChristian Breunig
policy: T7116: Remove unsupported use of BGP community "internet"
2025-02-27Merge pull request #4372 from aapostoliuk/T7118-circinusChristian Breunig
T7118: Added the ability to redistribute NHRP routes to other protocols
2025-02-27T7204: Container add capability MKNODViacheslav Hletenko
2025-02-27Merge pull request #4373 from aapostoliuk/T7158-circinusChristian Breunig
policy: T7158: Added match source-vrf to route-map
2025-02-26wlb: T7196: Migrate interface wildcards to nftables formatSimon
* wlb: T7196: Migrate interface wildcards to nftables format * wlb: T7196: Fix exclude/interface verify check * wlb: T7196: Extra sanity check on ipv4 address function
2025-02-26policy: T7158: Added match source-vrf to route-mapaapostoliuk
Added match source-vrf to route-map
2025-02-26T7118: Added the ability to redistribute NHRP routes to other protocolsaapostoliuk
Added the ability to redistribute NHRP routes to: OSPF BGP Babel RIP IS-IS
2025-02-26policy: T7116: migrate legacy use of "internet" as a well-known community nameAndrew Topp
This has been split into a separate commit in case this is overkill for the fix. 1.2 and 1.3 installs predate the change to FRR that removed support, but "internet" is already broken on 1.4.
2025-02-26policy: T7116: remove completions & constraints for unsupported community ↵Andrew Topp
"internet"
2025-02-26Merge pull request #4368 from vyos/c-po-patch-1Christian Breunig
GitHub: T6707: define smoketest ISO retention-days to 2
2025-02-26GitHub: T6707: only do package integration tests on main repositoryc-po-patch-1Christian Breunig
2025-02-26GitHub: T6707: define smoketest ISO retention-days to 2Christian Breunig
2025-02-25snmp: T7180: Fixed verification of engineid in snmpv3 (#4366)aapostoliuk
* snmp: T7180: Fixed verification of engineid in snmpv3 EngineID must be configured if snmpv3 user is configured. Fixed engineid help string.
2025-02-25Merge pull request #4365 from c-po/lldp-t7165Daniil Baturin
lldp: T7165: add support to enable only rx/tx on specific interfaces
2025-02-25Merge pull request #4364 from natali-rs1985/T7171Daniil Baturin
T7171: Add dstport option to GENEVE tunnels
2025-02-25T7171: Add dstport option to GENEVE tunnelsNataliia Solomko
2025-02-24lldp: T7165: add support to enable only rx or tx on specific interfaceChristian Breunig
LLDP is a stateless protocol which does not necessitate sending to receive advertisements. There are multiple scenarios such as provider peering links in which it is advantageous to receive LLDP but not disclose internal information to the provider. Add new CLI command: * set service lldp interface <name> mode [disable|rx-tx|rx|tx] The default is unchanged and will be rx-tx. Furthermore if an interface has an explicit LLDP disable configured under "set service lldp interface <name> disable" this will be migrated to "set service lldp interface <name> mode disable"
2025-02-24Merge pull request #4360 from sever-sever/T7190Christian Breunig
T7190: Add haproxy default timeout options configurable
2025-02-24Merge pull request #4362 from c-po/bond-T7191Daniil Baturin
bond: T7191: fix error message when member interface is used multiple times
2025-02-24Merge pull request #4363 from c-po/bridge-T7192Daniil Baturin
bridge: T7192: do not allow a member interface to be used multiple times
2025-02-24T7190: Add haproxy default timeout options configurableViacheslav Hletenko
Add the ability to configurate default timeout and frontend client timeout ``` set load-balancing haproxy service web timeout client '600' set load-balancing haproxy timeout check '4' set load-balancing haproxy timeout client '600' set load-balancing haproxy timeout connect '12' set load-balancing haproxy timeout server '120' ```
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-14 21:06:15 +0000