Age | Commit message (Collapse) | Author | |
---|---|---|---|
2025-03-18 | pki: T7249: fix shebang to support CLI backend | Christian Breunig | |
Fixes an error: interpreter/vyatta-cfg-run: line 162: `vyatta_config_commit-confirm': not a valid identifier Which prevented to renew the certificates. This will only fix renewing of the certificates. Nothing changed in how daemons will be restarted if a certificate is updated. | |||
2025-03-18 | T6353: Change cli_commit to return the command output | oniko94 | |
2025-03-18 | T6353: Add password strength check and user warning | oniko94 | |
2025-03-17 | Merge pull request #4401 from dmbaturin/T7217-generate-dropbear-keys | Christian Breunig | |
console-server: T7217: generate Dropbear SSH keys if they do not exist | |||
2025-03-17 | console-server: T7217: generate Dropbear SSH keys if they do not exist | Daniil Baturin | |
2025-03-17 | T7138: Fix show qos | l0crian1 | |
This change corrects a behavior witnessed in T7138. If a policy name had a `-` in it, the command would fail, returning nothing. | |||
2025-03-17 | T7252: Allow vpptun and vpptap for constraint validator | Viacheslav Hletenko | |
It fixes cases whey we want to use VPP kernel interfaces for OSPF But VPP kernel interface is not exists on this step set vpp interfaces loopback lo0 kernel-interface 'vpptun0' set protocols ospf interface vpptun0 area '0' Incorrect path /sys/class/net/vpptun0: no such file or directory | |||
2025-03-16 | T7121: add test_commit wrapper and test script | John Estabrook | |
2025-03-16 | T7121: add vyos-commitd service as emergent replacement for vyos-configd | John Estabrook | |
vyos-commitd exchanges messages with vyconfd, to replace the shim redirection of legacy commands to vyos-configd. | |||
2025-03-16 | T7121: add defaults entry for vyconfd.conf | John Estabrook | |
The vyconfd configuration file contains socket name, canonical directories, and file names shared with vyos-commitd. | |||
2025-03-16 | T7121: generate Python protobuf files at build | John Estabrook | |
2025-03-16 | T7121: add Config init from internal cache | John Estabrook | |
The internal cache is used as a faster replacement to parsing the active and proposed configs on initialization of a commit session. | |||
2025-03-16 | T7121: add protobuf and tomli dependencies | John Estabrook | |
Add protobuf dependencies for communication vyconfd <-> vyos-commitd, and tomli runtime dependency for vyos-commitd load of vyconfd.conf. | |||
2025-03-16 | T7121: use dunder equal instead of string rep comparison, where possible | John Estabrook | |
2025-03-16 | T7121: add configtree read/write to internal representation | John Estabrook | |
2025-03-16 | T6946: add wrapper for show_commit_data and test function | John Estabrook | |
2025-03-16 | Merge pull request #4395 from kumvijaya/current | Christian Breunig | |
T7247: removed pr number input for target repo mirror workflow call | |||
2025-03-16 | T861: rename Secure Boot MOK (Machine Owner Key) file | Christian Breunig | |
2025-03-16 | Merge pull request #4393 from c-po/T5400-fix-schroedingers-env | Christian Breunig | |
T5400: initialize OPAM environment where it's really needed | |||
2025-03-16 | Merge pull request #4394 from c-po/dhcp6c-smoketest-T7248 | Daniil Baturin | |
smoketest: T7248: ensure there is no Yacc/Bison error in wide-dhcpv6-client | |||
2025-03-16 | T7247: removed pr number input for target repo mirror workflow call | kumvijaya | |
2025-03-15 | smoketest: T7248: ensure there is no Yacc/Bison error in wide-dhcpv6-client | Christian Breunig | |
T7050 revealed an issue in the CI system where VyOS CLI was rendering a configuration for wide-dhcpv6-client that was not working due to a missing patch of the wide-dhcpv6-client source code. This can be prevented by checking the daemon logs after startup for any config linguistic (Yacc/Bison) issues. | |||
2025-03-15 | smoketest: T7248: use python f'ormat string in test_dhcpv6_client_options | Christian Breunig | |
2025-03-15 | T5400: initialize OPAM environment where it's really needed | Christian Breunig | |
Instead of trying to fix - what we call - "Schroedingers build environment" in the outside world calling this package build, we should rather fix the Makefile/build system.. | |||
2025-03-14 | Merge pull request #4385 from markh0338/show-bgp-vpn-rd | Christian Breunig | |
T7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn table | |||
2025-03-13 | Merge pull request #4389 from natali-rs1985/T7242 | Daniil Baturin | |
ipsec: T7242: Add a check for encryption algorithms that do not work with VPP | |||
2025-03-13 | ipsec: T7242: Add check for encryption algorithms that do not work with VPP | Nataliia Solomko | |
2025-03-11 | Merge pull request #4383 from oniko94/fix/T7219-fix-vxlan-verify | Viacheslav Hletenko | |
T7219: Add check for remote and group command to verify | |||
2025-03-11 | Merge pull request #4321 from sskaje/T7092 | Daniil Baturin | |
T7092: Add Container Registry Mirror | |||
2025-03-11 | T7219: Add check for remote and group command to verify | oniko94 | |
2025-03-11 | T7092: Change validators: regex to host-name|address + port + path | sskaje | |
2025-03-11 | T7092: Update interface-definitions/container.xml.in | sskaje | |
Co-authored-by: Daniil Baturin <daniil@baturin.org> | |||
2025-03-11 | Merge pull request #4388 from jestabro/cleanup-libvyosconfig-build | Viacheslav Hletenko | |
T5400: clean up directory as needed before local build of libvyosconfig | |||
2025-03-10 | T5400: clean up directory as needed before local build of libvyosconfig | John Estabrook | |
2025-03-10 | Merge pull request #4386 from c-po/syslog-T7229 | Daniil Baturin | |
syslog: T7229: advanced format should not have IPv6 addresses in [] brackets | |||
2025-03-08 | smoketest: T7229: add syslog test to verify source-address for remote | Christian Breunig | |
2025-03-08 | syslog: T7229: advanced format should not have IPv6 addresses in [] brackets | Christian Breunig | |
Otherwise rsyslog will report an error: omfwd: could not get addrinfo for hostname '[2001:db8::2]':'514': System error | |||
2025-03-08 | T7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn table | Mark Hayes | |
2025-03-07 | login: T6712: add newline after motd warning message | Christian Breunig | |
2025-03-07 | Merge pull request #4382 from c-po/ipsec-ios-profile-fixes | Christian Breunig | |
ipsec: T7225: fix IKE DiffieHellmanGroup and ExtendedAuthEnabled in iOS profile | |||
2025-03-06 | ipsec: T7225: fix dynamic generation of IKE DiffieHellmanGroup in iOS profile | Christian Breunig | |
Commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") added a bug when working with DiffieHellmanGroup, it started becoming a boolead and no longer referencing the DH groups itself. This has been fixed. | |||
2025-03-06 | ipsec: T7225: iOS18+ always requires ExtendedAuthEnabled to be set | Christian Breunig | |
If this is unset, loading the iOS VPN profile will error out on the device giving: Profile Installation Failed configuration is invalid: Missing identity My first assumption was an empty string in LocalIdentifier for IKE, but turned out only adding this flag solved it. This was made optional in commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") but got reverted now. | |||
2025-03-06 | Merge pull request #4381 from c-po/ipsec-opmode-profile | Christian Breunig | |
ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError | |||
2025-03-06 | Merge pull request #4380 from oniko94/feature/T4406-vyos-info-api-endpoint | Christian Breunig | |
T4406: Add public API endpoint to display information | |||
2025-03-06 | ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError | Christian Breunig | |
Calling "generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name VYOS-NET profile VYOS" in op-mode causes File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code {% if authentication.client_mode.startswith("eap") %} ^^^^^^^^^^^^^^^^^^^^^^^^^ jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode' | |||
2025-03-06 | T4406: Add public API endpoint to display information | oniko94 | |
2025-03-05 | Merge pull request #4378 from jestabro/libvyosconfig-build | John Estabrook | |
T5400: Move libvyosconfig build out of the Docker image | |||
2025-03-04 | Merge pull request #4377 from vyos/syslog-typos-T6989 | Christian Breunig | |
syslog: T6989: fix typos and add option to disable MARK | |||
2025-03-04 | T5400: add local build of libvyosconfig to Makefile | John Estabrook | |
libvyosconfig is both a build and a run dependency of vyos-1x. Satisfying the build dependency within the Docker image requires coordination of updates to vyos-build/libvyosconfig/vyos-1x on any changes to the library; simplify this process by moving the build to a step of the vyos-1x Makefile. | |||
2025-03-04 | Merge pull request #4379 from vyos/c-po-patch-1 | Christian Breunig | |
GitHub: T5400: evaluate OPAM environment before package build |