summaryrefslogtreecommitdiff
path: root/data/templates
AgeCommit message (Collapse)Author
2026-03-18Merge pull request #5053 from alexk37/fix-ipsec-ra-local-portDaniil Baturin
T8386: fix locat_ts rendering in remote_access.j2
2026-03-17T8386: fix locat_ts rendering in remote_access.j2Alex Kudentsov
2026-03-16T8389: fix md5 password in isisd/fabricd templatesAlex Kudentsov
2026-03-15T8385: fix config key name in chap-secrets.config_dict.j2Alex Kudentsov
2026-03-14T8383: fix extra space in nftables ipv6 output chainAlex Kudentsov
2026-03-06vpp: T8354: Move 'ignore-kernel-routes' option out of resource-allocation ↵Nataliia Solomko
section
2026-03-04isis: T6978: add IS-IS SRv6 node-msd configurationJonathan Voss
Co-Authored-by: Christian Breunig <christian@breunig.cc>
2026-03-04T8136: IPSEC PPK SupportGiga Murphy
2026-03-02Merge pull request #5016 from c-po/ospf-authViacheslav Hletenko
ospf: T7679: fix plaintext authentication on specific interface
2026-02-26ospf: T7679: add "null" authentication optionChristian Breunig
2026-02-26ospf: 7679: add missing "ip ospf authentication" information in FRRChristian Breunig
2026-02-25T8120: Fix grub for ARM use consistent string comparison operatorViacheslav Hletenko
Replace single '=' with '==' in GRUB shell conditionals for string comparisons
2026-02-24Merge pull request #4915 from sever-sever/T8120Christian Breunig
T8120: Add support AMA console for ARM devices
2026-02-24T8302: This PR adds Router Advertisement (RA) base-interface support for ↵Miaosen Wang
IPv6 wildcard prefix derivation and includes validation and smoketests. Included changes: - Add `base-interface` under: - `service router-advert interface <lan-if> prefix ::/64 base-interface <wan-if>` - Render `Base6Interface <wan-if>;` in `radvd.conf` when configured. - Add validation guard: - `base-interface` is only allowed with wildcard prefix `::/64`. - Extend smoketests: - Positive case: `::/64` + `base-interface` commits and renders correctly. - Negative case: non-`::/64` prefix with `base-interface` fails commit.
2026-02-19vpp: T8261: Refactor resource settings into 'resource-allocation' sectionNataliia Solomko
2026-02-18Merge pull request #4961 from jvoss/srv6_encapsulationChristian Breunig
srv6: T6977: add srv6 encapsulation source-address
2026-02-18vpp: T8274: Remove dpdk-options section for num-* parametersOleksandr Kuchmystyi
Remove `dpdk-options` under `set vpp settings interface <ethN>` and move its child options to the interface level: - `num-rx-desc` - `num-rx-queues` - `num-tx-desc` - `num-tx-queues` Also remove `set vpp settings interface <ethN> dpdk-options promisc`.
2026-02-18Apply suggestion from @CopilotChristian Breunig
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-18T8120: Add AMA support AMA console for ARM devicesViacheslav Hletenko
2026-02-17Merge pull request #4996 from c-po/syslog-cleanupChristian Breunig
syslog: T8272: remove dead code from previous "file" logging support
2026-02-17syslog: T8272: remove dead code from previous "file" logging supportChristian Breunig
Commit 395e3cb72 ("syslog: T6989: remove 'file' logging destination") removed CLI support for custom file based logging targets. The code about logrotate was not removed and just stayed "dead". Dead code is removed by this commit.
2026-02-17Merge pull request #4993 from natali-rs1985/T8268Viacheslav Hletenko
vpp: T8268: Unify CPU settings into a single 'cpu-cores' node under 'resource-allocation'
2026-02-17vpp: T8268: Unify CPU settings into a single 'cpu-cores' node under ↵Nataliia Solomko
'resource-allocation' Replace legacy VPP CPU settings (main-core, skip-cores, workers, corelist-workers) with a single resource-allocation cpu-cores option. CPU assignment is now handled automatically: two cores are reserved for the system, the VPP main thread is placed on the first available core, and the remaining allocated cores are used as workers. This simplifies configuration and ensures consistent CPU allocation.
2026-02-16Merge pull request #4989 from c-po/lcd-mtc-s16209xDaniil Baturin
lcd: T8213: add support for MTC S16209x
2026-02-15srv6: T6977: add srv6 encapsulation source-addressJonathan Voss
2026-02-15vpp: T8258: Move `poll-sleep-usec` out of `unix` sectionOleksandr Kuchmystyi
Instead of `vpp settings unix poll-sleep-usec` use `vpp settings poll-sleep-usec`.
2026-02-14lcd: T8213: add support for MTC S16209xJadyn Emma Jäger
Implementation has been tested using a virtual serial pipe as I (Christian Breunig) did not find my hardware LCD display. You can easily do this via: $ sudo socat -d -d PTY,link=/dev/ttyS99,raw,echo=0 PTY,link=/tmp/serial,raw,echo=0 $ sudo cat /tmp/serial You will get a lot of control characters, but real information like the OS Kernel version will scroll through. Co-authored-by: Christian Breunig <christian@breunig.cc>
2026-02-13vpp: T8262: Refactor IPsec settings to use only 'ipsec-acceleration' flagNataliia Solomko
2026-02-13vpp: T8255: Changed logging level variable nameOleksandr Kuchmystyi
This commit changes logging settings naming: - before: `set vpp settings logging default-log-level <alert>` - after: `set vpp settings logging default-level <alert>`
2026-02-09T7756: Fix rsyslog configuration generationAdam Schultz
1.) Fix both syslog and logrotate writing /etc/logrotate.d/vyos-rsyslog - system_syslog.py generates /etc/logrotate.d/vyos-rsyslog-user for user file logrotate - system_logs.py generates /etc/logrotate.d/vyos-rsyslog using configured rotation parameters 2.) Fix /run/rsyslog/rsyslog.conf ignoring configured size for /var/log/messages - system_syslog.py retrieves "system logs" config to set rotation limits - default rotation size is now based on configuration defaults 3.) prifilt strings for rsyslog are modified to use override syntax (e.g. ";facility.none") when all is combined with other facilities to honor per facility user intent Smoke test changes: Commonize configuration of syslog facilities Check that prifilt is sane based on configured facilities (i.e. overides only present when required) Test wildcard (all) only, specific facility only, and wildcard + specific facility
2026-02-05Merge pull request #4949 from sarthurdev/geoip_refactorDaniil Baturin
geoip: T7926: T8049: Refactor geoip code and add MaxMind support
2026-01-30Merge pull request #4955 from natali-rs1985/T8202Viacheslav Hletenko
vpp: T8202: Remove XDP driver and options from CLI and config
2026-01-28vpp: T8202: Remove XDP driver and options from CLI and configNataliia Solomko
- Migration script removes 'driver' and 'xdp-options' nodes. - XDP logic is commented out in config verification and CLI tests, preserving code for future use. - The rest of XDP-related code remains untouched
2026-01-27T6734: Nginx disable software version reportingViacheslav Hletenko
2026-01-22Merge pull request #4942 from natali-rs1985/T8125Daniil Baturin
vpp: T8125: Enable ip4-dhcp-client-detect feature if interface address is configured as DHCP
2026-01-21Merge pull request #4921 from hedrok/T7664-update-smoketest-scriptChristian Breunig
T7664: support FRR 10.5
2026-01-21vpp: T8125: Enable ip4-dhcp-client-detect feature if interface address is ↵Nataliia Solomko
configured as DHCP DHCP address cannot be assigned on VPP interfaces without enabling the 'ip4-dhcp-client-detect' feature
2026-01-21geoip: T7926: Refactor geoip handlingsarthurdev
* Move core logic to separate vyos.geoip module * Use a sqlite database for storing and querying address ranges by country * Remove downloaded geoip ranges once loaded into sqlite db * No longer rebuild geoip sets on each commit unless necessary * Allows for extensibility using other geoip data vendors
2026-01-17Merge pull request #4852 from scj643/ssh-fido2-optionsChristian Breunig
ssh: T7483: Add fido2 PubkeyAuthOptions
2026-01-15Merge pull request #4843 from Firefishy/T7101Daniil Baturin
T7101: Add hardware watchdog support via systemd
2026-01-15ssh: T7483: Add fido2 PubkeyAuthOptionsChloe Surett
2026-01-14T7101: Add support for hardware watchdog support via systemdGrant Slater
2026-01-12openvpn: T7633: Add support for 'data-ciphers-fallback' in site-to-site tunnelsOleksandr Kuchmystyi
- Introduced new CLI option 'data-ciphers-fallback' for OpenVPN interfaces (used as fallback cipher in site-to-site mode) - Adjust migration 1‑to‑2 to skip migrating 'cipher' for site‑to‑site interfaces
2026-01-11Merge pull request #4938 from hedrok/T8158-fix-lsp-timersChristian Breunig
isis: T8158: fix lsp-timers
2026-01-09Merge pull request #4912 from hedrok/T8046-add-link-params-cliViacheslav Hletenko
T8046: traffic-engineering: support link-params
2026-01-09isis: T8158: fix lsp-timersKyrylo Yatsenko
There are three configuration values in VyOS isis XML: * lsp-gen-interval * lsp-refresh-interval * max-lsp-lifetime In FRR they have the following restrictions in yang model: * refresh-interval, default 900 * maximum-lifetime >= refresh-interval + 300 (350-65535), default 1200 * generation-interval < refresh-interval (1..120), default 30 When setting these values in separate steps we can get error e.g.: libyang: Must condition ". >= ../refresh-interval + 300" not satisfied. even when all restrictions are satisfied. To fix the issue: 1. Write default values in our XML. 2. Check these restrictions in protocol_isis.py 3. Use FRR command `lsp-timers` that sets all these values in one go
2026-01-09T8046: traffic-engineering: support link-paramsKyrylo Yatsenko
Add 'traffic-engineering' commands under 'protocols'. set protocols traffic-engineering admin-group ADMINGROUP bit-position 1 set protocols traffic-engineering interface INTERFACE admin-group ADMINGROUP set protocols traffic-engineering interface INTERFACE max-bandwidth 1280 set protocols traffic-engineering interface INTERFACE max-reservable-bandwidth 1280 Also add set protocols isis traffic-engineering export
2026-01-05Merge pull request #4618 from giga1699/T7635Viacheslav Hletenko
T7635: OpenConnect Certificate Authentication
2026-01-01router-advert: T8140: add captive portal support (RFC 8910)Marius Lindvall
Add support for captive portal identification in IPv6 router adverts as defined in RFC 8910. The value is a quoted URL pointing to an RFC 8908-compliant API endpoint.
2025-12-30T8133: BGP add local-rib feature for BMPViacheslav Hletenko
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-04 22:18:13 +0000