Age | Commit message (Collapse) | Author |
|
pki: T7249: fix shebang to support CLI backend
|
|
T7252: Allow vpptun and vpptap for constraint validator
|
|
* bgp: T7157: Allow using route-maps for VRF route leaking in BGP
Added the possibility of using route-map in route leaking.
* Improve the constraint error message
---------
Co-authored-by: Daniil Baturin <daniil@baturin.org>
|
|
oniko94/feature/T6353-add-password-complexity-validation
T6353: Add password complexity validation for system login user
|
|
Fixes an error:
interpreter/vyatta-cfg-run: line 162: `vyatta_config_commit-confirm': not a valid identifier
Which prevented to renew the certificates. This will only fix renewing of the
certificates. Nothing changed in how daemons will be restarted if a certificate
is updated.
|
|
|
|
|
|
console-server: T7217: generate Dropbear SSH keys if they do not exist
|
|
|
|
It fixes cases whey we want to use VPP kernel interfaces for OSPF
But VPP kernel interface is not exists on this step
set vpp interfaces loopback lo0 kernel-interface 'vpptun0'
set protocols ospf interface vpptun0 area '0'
Incorrect path /sys/class/net/vpptun0: no such file or directory
|
|
T7247: removed pr number input for target repo mirror workflow call
|
|
T5400: initialize OPAM environment where it's really needed
|
|
smoketest: T7248: ensure there is no Yacc/Bison error in wide-dhcpv6-client
|
|
|
|
T7050 revealed an issue in the CI system where VyOS CLI was rendering a
configuration for wide-dhcpv6-client that was not working due to a missing
patch of the wide-dhcpv6-client source code.
This can be prevented by checking the daemon logs after startup for any config
linguistic (Yacc/Bison) issues.
|
|
|
|
Instead of trying to fix - what we call - "Schroedingers build environment"
in the outside world calling this package build, we should rather fix the
Makefile/build system..
|
|
T7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn table
|
|
ipsec: T7242: Add a check for encryption algorithms that do not work with VPP
|
|
|
|
T7219: Add check for remote and group command to verify
|
|
T7092: Add Container Registry Mirror
|
|
|
|
|
|
Co-authored-by: Daniil Baturin <daniil@baturin.org>
|
|
T5400: clean up directory as needed before local build of libvyosconfig
|
|
|
|
syslog: T7229: advanced format should not have IPv6 addresses in [] brackets
|
|
|
|
Otherwise rsyslog will report an error:
omfwd: could not get addrinfo for hostname '[2001:db8::2]':'514': System error
|
|
|
|
|
|
ipsec: T7225: fix IKE DiffieHellmanGroup and ExtendedAuthEnabled in iOS profile
|
|
Commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators")
added a bug when working with DiffieHellmanGroup, it started becoming a boolead
and no longer referencing the DH groups itself.
This has been fixed.
|
|
If this is unset, loading the iOS VPN profile will error out on the device
giving:
Profile Installation Failed
configuration is invalid:
Missing identity
My first assumption was an empty string in LocalIdentifier for IKE, but turned
out only adding this flag solved it.
This was made optional in commit e97d86e ("T6617: T6618: vpn ipsec
remote-access: fix profile generators") but got reverted now.
|
|
ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError
|
|
T4406: Add public API endpoint to display information
|
|
Calling "generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name
VYOS-NET profile VYOS" in op-mode causes
File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code
{% if authentication.client_mode.startswith("eap") %}
^^^^^^^^^^^^^^^^^^^^^^^^^
jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode'
|
|
|
|
T5400: Move libvyosconfig build out of the Docker image
|
|
syslog: T6989: fix typos and add option to disable MARK
|
|
libvyosconfig is both a build and a run dependency of vyos-1x.
Satisfying the build dependency within the Docker image requires
coordination of updates to vyos-build/libvyosconfig/vyos-1x on any
changes to the library; simplify this process by moving the build to a
step of the vyos-1x Makefile.
|
|
GitHub: T5400: evaluate OPAM environment before package build
|
|
|
|
New CLI command
set system syslog marker disable
|
|
|
|
Revert "wireguard: T4930: remove pylint W0611: unused import"
|
|
This reverts commit bb70ea569f4548b103c54bbb7c393221a6da0a23.
|
|
T6948: Keep DHCP server leases in sync with hostd records
|
|
T7204: Container add capability MKNOD
|