summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
3 daysT6946: add wrapper for show_commit_data and test functionJohn Estabrook
3 daysMerge pull request #4395 from kumvijaya/currentChristian Breunig
T7247: removed pr number input for target repo mirror workflow call
3 daysMerge pull request #4393 from c-po/T5400-fix-schroedingers-envChristian Breunig
T5400: initialize OPAM environment where it's really needed
3 daysMerge pull request #4394 from c-po/dhcp6c-smoketest-T7248Daniil Baturin
smoketest: T7248: ensure there is no Yacc/Bison error in wide-dhcpv6-client
3 daysT7247: removed pr number input for target repo mirror workflow callkumvijaya
4 dayssmoketest: T7248: ensure there is no Yacc/Bison error in wide-dhcpv6-clientChristian Breunig
T7050 revealed an issue in the CI system where VyOS CLI was rendering a configuration for wide-dhcpv6-client that was not working due to a missing patch of the wide-dhcpv6-client source code. This can be prevented by checking the daemon logs after startup for any config linguistic (Yacc/Bison) issues.
4 dayssmoketest: T7248: use python f'ormat string in test_dhcpv6_client_optionsChristian Breunig
4 daysT5400: initialize OPAM environment where it's really neededChristian Breunig
Instead of trying to fix - what we call - "Schroedingers build environment" in the outside world calling this package build, we should rather fix the Makefile/build system..
5 daysMerge pull request #4385 from markh0338/show-bgp-vpn-rdChristian Breunig
T7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn table
6 daysMerge pull request #4389 from natali-rs1985/T7242Daniil Baturin
ipsec: T7242: Add a check for encryption algorithms that do not work with VPP
6 daysipsec: T7242: Add check for encryption algorithms that do not work with VPPNataliia Solomko
8 daysMerge pull request #4383 from oniko94/fix/T7219-fix-vxlan-verifyViacheslav Hletenko
T7219: Add check for remote and group command to verify
8 daysMerge pull request #4321 from sskaje/T7092Daniil Baturin
T7092: Add Container Registry Mirror
8 daysT7219: Add check for remote and group command to verifyoniko94
8 daysT7092: Change validators: regex to host-name|address + port + pathsskaje
8 daysT7092: Update interface-definitions/container.xml.insskaje
Co-authored-by: Daniil Baturin <daniil@baturin.org>
8 daysMerge pull request #4388 from jestabro/cleanup-libvyosconfig-buildViacheslav Hletenko
T5400: clean up directory as needed before local build of libvyosconfig
9 daysT5400: clean up directory as needed before local build of libvyosconfigJohn Estabrook
9 daysMerge pull request #4386 from c-po/syslog-T7229Daniil Baturin
syslog: T7229: advanced format should not have IPv6 addresses in [] brackets
11 dayssmoketest: T7229: add syslog test to verify source-address for remoteChristian Breunig
11 dayssyslog: T7229: advanced format should not have IPv6 addresses in [] bracketsChristian Breunig
Otherwise rsyslog will report an error: omfwd: could not get addrinfo for hostname '[2001:db8::2]':'514': System error
11 daysT7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn tableMark Hayes
12 dayslogin: T6712: add newline after motd warning messageChristian Breunig
12 daysMerge pull request #4382 from c-po/ipsec-ios-profile-fixesChristian Breunig
ipsec: T7225: fix IKE DiffieHellmanGroup and ExtendedAuthEnabled in iOS profile
13 daysipsec: T7225: fix dynamic generation of IKE DiffieHellmanGroup in iOS profileChristian Breunig
Commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") added a bug when working with DiffieHellmanGroup, it started becoming a boolead and no longer referencing the DH groups itself. This has been fixed.
13 daysipsec: T7225: iOS18+ always requires ExtendedAuthEnabled to be setChristian Breunig
If this is unset, loading the iOS VPN profile will error out on the device giving: Profile Installation Failed configuration is invalid: Missing identity My first assumption was an empty string in LocalIdentifier for IKE, but turned out only adding this flag solved it. This was made optional in commit e97d86e ("T6617: T6618: vpn ipsec remote-access: fix profile generators") but got reverted now.
13 daysMerge pull request #4381 from c-po/ipsec-opmode-profileChristian Breunig
ipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedError
13 daysMerge pull request #4380 from oniko94/feature/T4406-vyos-info-api-endpointChristian Breunig
T4406: Add public API endpoint to display information
13 daysipsec: T7225: "generate ipsec profile ios-remote-access" throws UndefinedErrorChristian Breunig
Calling "generate ipsec profile ios-remote-access rw remote ipsec.vyos.net name VYOS-NET profile VYOS" in op-mode causes File "/usr/share/vyos/templates/ipsec/ios_profile.j2", line 58, in top-level template code {% if authentication.client_mode.startswith("eap") %} ^^^^^^^^^^^^^^^^^^^^^^^^^ jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'client_mode'
13 daysT4406: Add public API endpoint to display informationoniko94
2025-03-05Merge pull request #4378 from jestabro/libvyosconfig-buildJohn Estabrook
T5400: Move libvyosconfig build out of the Docker image
2025-03-04Merge pull request #4377 from vyos/syslog-typos-T6989Christian Breunig
syslog: T6989: fix typos and add option to disable MARK
2025-03-04T5400: add local build of libvyosconfig to MakefileJohn Estabrook
libvyosconfig is both a build and a run dependency of vyos-1x. Satisfying the build dependency within the Docker image requires coordination of updates to vyos-build/libvyosconfig/vyos-1x on any changes to the library; simplify this process by moving the build to a step of the vyos-1x Makefile.
2025-03-04Merge pull request #4379 from vyos/c-po-patch-1Christian Breunig
GitHub: T5400: evaluate OPAM environment before package build
2025-03-04GitHub: T5400: evaluate OPAM environment before package buildChristian Breunig
2025-03-04syslog: T6989: add option do disable "MARK"syslog-typos-T6989Christian Breunig
New CLI command set system syslog marker disable
2025-03-04syslog: T6989: fix validator range to match completion helperChristian Breunig
2025-03-02Merge pull request #4376 from jameskr97/currentDaniil Baturin
Revert "wireguard: T4930: remove pylint W0611: unused import"
2025-03-01Revert "wireguard: T4930: remove pylint W0611: unused import"James Roberts
This reverts commit bb70ea569f4548b103c54bbb7c393221a6da0a23.
2025-02-27Merge pull request #4237 from indrajitr/hostd-updateViacheslav Hletenko
T6948: Keep DHCP server leases in sync with hostd records
2025-02-27Merge pull request #4374 from sever-sever/T7204Daniil Baturin
T7204: Container add capability MKNOD
2025-02-27Merge pull request #4369 from natali-rs1985/T7166Daniil Baturin
wireguard: T7166: Call vxlan dependency if interface exist
2025-02-27wireguard: T7166: Call vxlan dependency if interface existNataliia Solomko
2025-02-27Merge pull request #4371 from talmakion/bugfix/T7116/remove-obsolete-communityChristian Breunig
policy: T7116: Remove unsupported use of BGP community "internet"
2025-02-27Merge pull request #4372 from aapostoliuk/T7118-circinusChristian Breunig
T7118: Added the ability to redistribute NHRP routes to other protocols
2025-02-27T7204: Container add capability MKNODViacheslav Hletenko
2025-02-27Merge pull request #4373 from aapostoliuk/T7158-circinusChristian Breunig
policy: T7158: Added match source-vrf to route-map
2025-02-26wlb: T7196: Migrate interface wildcards to nftables formatSimon
* wlb: T7196: Migrate interface wildcards to nftables format * wlb: T7196: Fix exclude/interface verify check * wlb: T7196: Extra sanity check on ipv4 address function
2025-02-26policy: T7158: Added match source-vrf to route-mapaapostoliuk
Added match source-vrf to route-map
2025-02-26T7118: Added the ability to redistribute NHRP routes to other protocolsaapostoliuk
Added the ability to redistribute NHRP routes to: OSPF BGP Babel RIP IS-IS