| Age | Commit message (Collapse) | Author |
|---|
|
T7286: Add CLI option to disable LDP establish packets
|
|
T7291: disabled codeowners review
|
|
T7294: preserve /config symlinks on image upgrade
|
|
If a router has not formed an LDP neighbor adjacency yet, it
answers all received LDP Hello packets from non-neighbors with
new Hello packets.
This leads to flooding LDP packets to all routers for each LDP
incoming packet.
Add configuration option to disable this behavior
```
set protocols mpls ldp interface eth0 disable-establish-hello
```
|
|
The service certbot expects symbolic links for
/config/auth/letsencrypt/live/<cert_name>/*.pem
however, the default behavior of copytree copies the linked files during
image upgrade. Set copytree argument to preserve symlinks.
|
|
fixup: T7295: add an explicit dependency on tzdata > 2025 to prevent APT from pulling that package from buster
|
|
to prevent APT from pulling that package from buster
|
|
|
|
T7246: update hash for strip version on config load
|
|
|
|
T7278: Remove cracklib hack from postconfig script template
|
|
firewall: T5493: Implement remote-group
|
|
|
|
|
|
T861: rename Secure Boot MOK (Machine Owner Key) file
|
|
T7138: Fix show qos
|
|
wireguard: T7246: verify Base64 encoded 32byte boundary on keys
|
|
Not 31 bytes or 33 bytes, but exactly 32. This matters, because 32 does not
divide evenly by .75, so there's a padding character and the penultimate
character does not include the whole base64 alphabet.
Extend the base64 validator with an optional argument to define the length
to match of the decrypted Base64 encoded string.
Source: https://lists.zx2c4.com/pipermail/wireguard/2020-December/006222.html
|
|
T7246: update libvyosconfig hash and add nosetest
|
|
|
|
T7246: do not pass unneeded version string to parser
|
|
Previously the parser would ignore lines beginning with '//', however
this is unnecessarily restrictive. Pass only config information to
parser, as the version string is saved separately for reconstruction on
render.
|
|
T7121: Set up communication vyconfd to vyos-commitd
|
|
pki: T7249: fix shebang to support CLI backend
|
|
|
|
T7252: Allow vpptun and vpptap for constraint validator
|
|
* bgp: T7157: Allow using route-maps for VRF route leaking in BGP
Added the possibility of using route-map in route leaking.
* Improve the constraint error message
---------
Co-authored-by: Daniil Baturin <daniil@baturin.org>
|
|
oniko94/feature/T6353-add-password-complexity-validation
T6353: Add password complexity validation for system login user
|
|
Fixes an error:
interpreter/vyatta-cfg-run: line 162: `vyatta_config_commit-confirm': not a valid identifier
Which prevented to renew the certificates. This will only fix renewing of the
certificates. Nothing changed in how daemons will be restarted if a certificate
is updated.
|
|
|
|
|
|
console-server: T7217: generate Dropbear SSH keys if they do not exist
|
|
|
|
This change corrects a behavior witnessed in T7138. If a policy name had a `-` in it, the command would fail, returning nothing.
|
|
It fixes cases whey we want to use VPP kernel interfaces for OSPF
But VPP kernel interface is not exists on this step
set vpp interfaces loopback lo0 kernel-interface 'vpptun0'
set protocols ospf interface vpptun0 area '0'
Incorrect path /sys/class/net/vpptun0: no such file or directory
|
|
|
|
vyos-commitd exchanges messages with vyconfd, to replace the shim
redirection of legacy commands to vyos-configd.
|
|
The vyconfd configuration file contains socket name, canonical
directories, and file names shared with vyos-commitd.
|
|
|
|
The internal cache is used as a faster replacement to parsing the active
and proposed configs on initialization of a commit session.
|
|
Add protobuf dependencies for communication vyconfd <-> vyos-commitd,
and tomli runtime dependency for vyos-commitd load of vyconfd.conf.
|
|
|
|
|
|
|
|
T7247: removed pr number input for target repo mirror workflow call
|
|
|
|
T5400: initialize OPAM environment where it's really needed
|
|
smoketest: T7248: ensure there is no Yacc/Bison error in wide-dhcpv6-client
|
|
|
|
T7050 revealed an issue in the CI system where VyOS CLI was rendering a
configuration for wide-dhcpv6-client that was not working due to a missing
patch of the wide-dhcpv6-client source code.
This can be prevented by checking the daemon logs after startup for any config
linguistic (Yacc/Bison) issues.
|
