summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
13 dayswireguard: T7246: verify Base64 encoded 32byte boundary on keysChristian Breunig
Not 31 bytes or 33 bytes, but exactly 32. This matters, because 32 does not divide evenly by .75, so there's a padding character and the penultimate character does not include the whole base64 alphabet. Extend the base64 validator with an optional argument to define the length to match of the decrypted Base64 encoded string. Source: https://lists.zx2c4.com/pipermail/wireguard/2020-December/006222.html
2025-03-17Merge pull request #4401 from dmbaturin/T7217-generate-dropbear-keysChristian Breunig
console-server: T7217: generate Dropbear SSH keys if they do not exist
2025-03-17console-server: T7217: generate Dropbear SSH keys if they do not existDaniil Baturin
2025-03-16Merge pull request #4395 from kumvijaya/currentChristian Breunig
T7247: removed pr number input for target repo mirror workflow call
2025-03-16Merge pull request #4393 from c-po/T5400-fix-schroedingers-envChristian Breunig
T5400: initialize OPAM environment where it's really needed
2025-03-16Merge pull request #4394 from c-po/dhcp6c-smoketest-T7248Daniil Baturin
smoketest: T7248: ensure there is no Yacc/Bison error in wide-dhcpv6-client
2025-03-16T7247: removed pr number input for target repo mirror workflow callkumvijaya
2025-03-15smoketest: T7248: ensure there is no Yacc/Bison error in wide-dhcpv6-clientChristian Breunig
T7050 revealed an issue in the CI system where VyOS CLI was rendering a configuration for wide-dhcpv6-client that was not working due to a missing patch of the wide-dhcpv6-client source code. This can be prevented by checking the daemon logs after startup for any config linguistic (Yacc/Bison) issues.
2025-03-15smoketest: T7248: use python f'ormat string in test_dhcpv6_client_optionsChristian Breunig
2025-03-15T5400: initialize OPAM environment where it's really neededChristian Breunig
Instead of trying to fix - what we call - "Schroedingers build environment" in the outside world calling this package build, we should rather fix the Makefile/build system..
2025-03-14Merge pull request #4385 from markh0338/show-bgp-vpn-rdChristian Breunig
T7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn table
2025-03-13Merge pull request #4389 from natali-rs1985/T7242Daniil Baturin
ipsec: T7242: Add a check for encryption algorithms that do not work with VPP
2025-03-13ipsec: T7242: Add check for encryption algorithms that do not work with VPPNataliia Solomko
2025-03-11Merge pull request #4383 from oniko94/fix/T7219-fix-vxlan-verifyViacheslav Hletenko
T7219: Add check for remote and group command to verify
2025-03-11Merge pull request #4321 from sskaje/T7092Daniil Baturin
T7092: Add Container Registry Mirror
2025-03-11T7219: Add check for remote and group command to verifyoniko94
2025-03-11T7092: Change validators: regex to host-name|address + port + pathsskaje
2025-03-11T7092: Update interface-definitions/container.xml.insskaje
Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-03-11Merge pull request #4388 from jestabro/cleanup-libvyosconfig-buildViacheslav Hletenko
T5400: clean up directory as needed before local build of libvyosconfig
2025-03-10T5400: clean up directory as needed before local build of libvyosconfigJohn Estabrook
2025-03-10Merge pull request #4386 from c-po/syslog-T7229Daniil Baturin
syslog: T7229: advanced format should not have IPv6 addresses in [] brackets
2025-03-08smoketest: T7229: add syslog test to verify source-address for remoteChristian Breunig
2025-03-08syslog: T7229: advanced format should not have IPv6 addresses in [] bracketsChristian Breunig
Otherwise rsyslog will report an error: omfwd: could not get addrinfo for hostname '[2001:db8::2]':'514': System error
2025-03-08T7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn tableMark Hayes
2025-03-07login: T6712: add newline after motd warning messageChristian Breunig
2025-03-07Merge pull request #4382 from c-po/ipsec-ios-profile-fixesChristian Breunig
ipsec: T7225: fix IKE DiffieHellmanGroup and ExtendedAuthEnabled in iOS profile
2025-03-06ipsec: T7225: fix dynamic generation of IKE DiffieHellmanGroup in iOS profileChristian Breunig
Commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") added a bug when working with DiffieHellmanGroup, it started becoming a boolead and no longer referencing the DH groups itself. This has been fixed.
2025-03-06ipsec: T7225: iOS18+ always requires ExtendedAuthEnabled to be setChristian Breunig
If this is unset, loading the iOS VPN profile will error out on the device giving: Profile Installation Failed configuration is invalid: Missing identity My first assumption was an empty string in LocalIdentifier for IKE, but turned out only adding this flag solved it. This was made optional in commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") but got reverted now.
2025-03-06Merge pull request #4381 from c-po/ipsec-opmode-profileChristian Breunig
ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError
2025-03-06Merge pull request #4380 from oniko94/feature/T4406-vyos-info-api-endpointChristian Breunig
T4406: Add public API endpoint to display information
2025-03-06ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedErrorChristian Breunig
Calling "generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name VYOS-NET profile VYOS" in op-mode causes File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code {% if authentication.client_mode.startswith("eap") %} ^^^^^^^^^^^^^^^^^^^^^^^^^ jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode'
2025-03-06T4406: Add public API endpoint to display informationoniko94
2025-03-05Merge pull request #4378 from jestabro/libvyosconfig-buildJohn Estabrook
T5400: Move libvyosconfig build out of the Docker image
2025-03-04Merge pull request #4377 from vyos/syslog-typos-T6989Christian Breunig
syslog: T6989: fix typos and add option to disable MARK
2025-03-04T5400: add local build of libvyosconfig to MakefileJohn Estabrook
libvyosconfig is both a build and a run dependency of vyos-1x. Satisfying the build dependency within the Docker image requires coordination of updates to vyos-build/libvyosconfig/vyos-1x on any changes to the library; simplify this process by moving the build to a step of the vyos-1x Makefile.
2025-03-04Merge pull request #4379 from vyos/c-po-patch-1Christian Breunig
GitHub: T5400: evaluate OPAM environment before package build
2025-03-04GitHub: T5400: evaluate OPAM environment before package buildChristian Breunig
2025-03-04syslog: T6989: add option do disable "MARK"syslog-typos-T6989Christian Breunig
New CLI command set system syslog marker disable
2025-03-04syslog: T6989: fix validator range to match completion helperChristian Breunig
2025-03-02Merge pull request #4376 from jameskr97/currentDaniil Baturin
Revert "wireguard: T4930: remove pylint W0611: unused import"
2025-03-01Revert "wireguard: T4930: remove pylint W0611: unused import"James Roberts
This reverts commit bb70ea569f4548b103c54bbb7c393221a6da0a23.
2025-02-27Merge pull request #4237 from indrajitr/hostd-updateViacheslav Hletenko
T6948: Keep DHCP server leases in sync with hostd records
2025-02-27Merge pull request #4374 from sever-sever/T7204Daniil Baturin
T7204: Container add capability MKNOD
2025-02-27Merge pull request #4369 from natali-rs1985/T7166Daniil Baturin
wireguard: T7166: Call vxlan dependency if interface exist
2025-02-27wireguard: T7166: Call vxlan dependency if interface existNataliia Solomko
2025-02-27Merge pull request #4371 from talmakion/bugfix/T7116/remove-obsolete-communityChristian Breunig
policy: T7116: Remove unsupported use of BGP community "internet"
2025-02-27Merge pull request #4372 from aapostoliuk/T7118-circinusChristian Breunig
T7118: Added the ability to redistribute NHRP routes to other protocols
2025-02-27T7204: Container add capability MKNODViacheslav Hletenko
2025-02-27Merge pull request #4373 from aapostoliuk/T7158-circinusChristian Breunig
policy: T7158: Added match source-vrf to route-map
2025-02-26wlb: T7196: Migrate interface wildcards to nftables formatSimon
* wlb: T7196: Migrate interface wildcards to nftables format * wlb: T7196: Fix exclude/interface verify check * wlb: T7196: Extra sanity check on ipv4 address function
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-02 19:44:58 +0000