Age | Commit message (Collapse) | Author |
|
Added stp.py to create output for spanning-tree info
Modified op-mode-definitions\show-bridge.xml.in to add these commands:
show bridge spanning-tree
show bridge spanning-tree detail
show bridge <interface> spanning-tree
show bridge <interface> spanning-tree detail
|
|
Created stp.py to create output for spanning-tree info
Modified show-bridge.xml.in to add:
show bridge spanning-tree
show bridge spanning-tree detail
show bridge <interface> spanning-tree
show bridge <interface> spanning-tree detail
|
|
T7246: update hash for strip version on config load
|
|
|
|
T7278: Remove cracklib hack from postconfig script template
|
|
firewall: T5493: Implement remote-group
|
|
|
|
|
|
T861: rename Secure Boot MOK (Machine Owner Key) file
|
|
T7138: Fix show qos
|
|
wireguard: T7246: verify Base64 encoded 32byte boundary on keys
|
|
Not 31 bytes or 33 bytes, but exactly 32. This matters, because 32 does not
divide evenly by .75, so there's a padding character and the penultimate
character does not include the whole base64 alphabet.
Extend the base64 validator with an optional argument to define the length
to match of the decrypted Base64 encoded string.
Source: https://lists.zx2c4.com/pipermail/wireguard/2020-December/006222.html
|
|
T7246: update libvyosconfig hash and add nosetest
|
|
|
|
T7246: do not pass unneeded version string to parser
|
|
Previously the parser would ignore lines beginning with '//', however
this is unnecessarily restrictive. Pass only config information to
parser, as the version string is saved separately for reconstruction on
render.
|
|
T7121: Set up communication vyconfd to vyos-commitd
|
|
pki: T7249: fix shebang to support CLI backend
|
|
|
|
T7252: Allow vpptun and vpptap for constraint validator
|
|
* bgp: T7157: Allow using route-maps for VRF route leaking in BGP
Added the possibility of using route-map in route leaking.
* Improve the constraint error message
---------
Co-authored-by: Daniil Baturin <daniil@baturin.org>
|
|
oniko94/feature/T6353-add-password-complexity-validation
T6353: Add password complexity validation for system login user
|
|
Fixes an error:
interpreter/vyatta-cfg-run: line 162: `vyatta_config_commit-confirm': not a valid identifier
Which prevented to renew the certificates. This will only fix renewing of the
certificates. Nothing changed in how daemons will be restarted if a certificate
is updated.
|
|
|
|
|
|
console-server: T7217: generate Dropbear SSH keys if they do not exist
|
|
|
|
This change corrects a behavior witnessed in T7138. If a policy name had a `-` in it, the command would fail, returning nothing.
|
|
It fixes cases whey we want to use VPP kernel interfaces for OSPF
But VPP kernel interface is not exists on this step
set vpp interfaces loopback lo0 kernel-interface 'vpptun0'
set protocols ospf interface vpptun0 area '0'
Incorrect path /sys/class/net/vpptun0: no such file or directory
|
|
|
|
vyos-commitd exchanges messages with vyconfd, to replace the shim
redirection of legacy commands to vyos-configd.
|
|
The vyconfd configuration file contains socket name, canonical
directories, and file names shared with vyos-commitd.
|
|
|
|
The internal cache is used as a faster replacement to parsing the active
and proposed configs on initialization of a commit session.
|
|
Add protobuf dependencies for communication vyconfd <-> vyos-commitd,
and tomli runtime dependency for vyos-commitd load of vyconfd.conf.
|
|
|
|
|
|
|
|
T7247: removed pr number input for target repo mirror workflow call
|
|
|
|
T5400: initialize OPAM environment where it's really needed
|
|
smoketest: T7248: ensure there is no Yacc/Bison error in wide-dhcpv6-client
|
|
|
|
T7050 revealed an issue in the CI system where VyOS CLI was rendering a
configuration for wide-dhcpv6-client that was not working due to a missing
patch of the wide-dhcpv6-client source code.
This can be prevented by checking the daemon logs after startup for any config
linguistic (Yacc/Bison) issues.
|
|
|
|
Instead of trying to fix - what we call - "Schroedingers build environment"
in the outside world calling this package build, we should rather fix the
Makefile/build system..
|
|
T7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn table
|
|
ipsec: T7242: Add a check for encryption algorithms that do not work with VPP
|
|
|
|
T7219: Add check for remote and group command to verify
|