| Age | Commit message (Collapse) | Author |
|---|
|
T8099: strongswan: 6.0.6 + Post quantum options
|
|
Drop third party binary grc for showing the log output in fancy colors.
Solely rely on what journalctl brings to the table.
|
|
|
|
T8971: upgrade from bgpq3 package to bgpq4
|
|
Add symlink from bgpq3 to bgpq4 to keep backwards compatible behavior.
|
|
As salt has been marked deprecated via T8056 and is thus deprecated in VyOS 1.5
and VyOS 1.4 it is time to remove it from the rolling release.
|
|
is set
When a user account was provisioned with only `plaintext-password` (e.g.
via cloud-init), the password recovery tool failed to persist the new
password across reboots. On the next boot, VyOS would re-apply the
`plaintext-password` from config.boot, silently overwriting the recovered
encrypted password.
|
|
When strongSwan package is not available on `packages.vyos.net`,
it causes the Debain 5.9.8 package version to be used, which fails the tests.
|
|
Move from the out-of-tree to an in-tree variant of the OpenVPN DCO module. As
this was not available in the previous used LTS 6.6 Kernel it now is available
while we upgrade to Linux 6.18.
|
|
* 'current' of github.com:vyos/vyos-utils: (65 commits)
T8269: add option to silence output of individual validators
T8306: update package version
vyos-op-run: T8306: add error messages for system exceptions
vyos-op-run: T8306: improve execution logic logging
vyos-op-run: T8301: improve the security of UID check and setuid logic
T8110: "list_interfaces --bondable" must not return VLAN subinterfaces
vyos-op-run: T7901: skip permission checks if the user is root
vyos-op-run: T8005: sanitize environment variables to prevent malicious variable injection
T7878: conflict check updated to use mergify
T7878: conflict check updated to use mergify
T7899: virtual-ethernet interfaces support broadcasts
Debian: T7899: bump dh compat version
T7758: add missing case to allow repeated option --type
T7758: allow repeated option --type in list_interfaces
vyos-op-run: T7745: add a command permission checking mechanism
op-mode: T7583: add a new operational command runner
T7644: mirror workflow refactoring rollout
T7579: fix of the run trigger for CLA
T7579: added workflow for CLA
validators: T6622: Radix-aware numeric validation
...
|
|
T8380: Add sbsigntool for ARM64 debian control for vyos-1x
|
|
T8449: Merge vyos-user-utils package into vyos-1x
|
|
|
|
dependencies
|
|
|
|
into user-utils
* 'current' of https://github.com/vyos/vyos-user-utils: (24 commits)
T7644: mirror workflow refactoring rollout
T7579: fix of the run trigger for CLA
T7579: added workflow for CLA
T7334: pr mirror trigger workflow added with label creation permission for default github token
T7373: remove irqtop to avoid the overhead of having a Ruby runtims (30+ MB) in the image for a single, rarely-used program
T7330: mirror workflows added
T6804: Add ipmitool to user utils
T6763: Delete Jenkins file
T6674: Action add trigger workflow to rebuild package
T5984: Add user util numactl
T5222: Remove haproxy from user-utils as it added to vyos-1x
T5632: Add user-util jq to parse JSON files from sh
T5028: Add exfat-fuse package
T5028: Add package exfatprogs
T4841: Add fancontrol user-utils package
T4426: add arpwatch to the image
user-pkgs: T4023: Add user pkg grepcidr and sorting the pkgs
Add dnsdist to the image
Include haproxy in the image
Import dependencies from the former vyos-utils package list.
...
|
|
Implementing a daemon that listens for netlink messages in Python was discussed
for many years. This is a proof-of-concept implementation how we can listen for
netlink messages and process them in Python.
Python 3.10 minimum is required due to the use of case statements which mimics
C-style switch/case instructions.
Add example:
set interfaces ethernet eth1 vif 21 address dhcp
set interfaces ethernet eth1 vif 21 address dhcpv6
commit
If network cable is unplugged:
vyos-netlinkd[12681]: RTM_NEWLINK -> eth3.10, state=DOWN, mac=00:50:56:b3:9d:8e
vyos-netlinkd[12681]: Stopping dhclient@eth3.10.service...
vyos-netlinkd[12681]: Stopping dhcp6c@eth3.10.service...
If cable is plugged back in:
vyos-netlinkd[12681]: RTM_NEWLINK -> eth3.10, state=DOWN, mac=00:50:56:b3:9d:8e
vyos-netlinkd[12681]: RTM_NEWLINK -> eth3.10, state=UP, mac=00:50:56:b3:9d:8e
vyos-netlinkd[12681]: Restarting dhclient@eth3.10.service...
vyos-netlinkd[12681]: Restarting dhcp6c@eth3.10.service...
|
|
Install TACACS dependencies for vyos-1x package for both platforms.
|
|
Previously we have had an implicit dependency on python3-systemd by
salt-minion. As several code paths rely on python3-systemd we need to add an
explicit dependency.
|
|
Kernel command-line change detection and automatic system reboot via
kexec during initial deployment
|
|
This enhances diagnostic capabilities by providing hardware topology
visuals within support archives.
|
|
Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes.
This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.
|
|
Check that write_file_sync reaches disk, by using util vmtouch to evict
cache.
|
|
|
|
kea: T7821: Update Kea to 3.0
|
|
|
|
* Change nft to iptables in system_flow-accounting.py as ipt_NETFLOW
is iptales plugin
* Remove specific and non-relevant pmacct options
* Add ipt_NETFLOW options
* Move 'interfaces' to 'netflow' tree
* Support more flexible 'source-address' and 'source-interface' for
each server instead of one source
* Add migration script
* Update op mode command 'show flow-accounting'
* Update op mode command 'restart flow-accounting'
|
|
|
|
* https://github.com/vyos/libvyosconfig: (107 commits)
T7728: T7734: update commit hash for dynamically generate proposed config
T7728: add package build target for convenience
T7718: update commit hashes for validate_tree_filter
T7718: add binding for validate_tree_filter
T7688: update commit hash for correct management of delete paths
T7644: mirror workflow refactoring rollout
T7637: T7605: update commit hashes for typo and escape backslash
T7579: fix of the run trigger for CLA
T7499: update hashes for add destructive merge
T7499: set permissions on session directory
T7499: bindings for (non-)destructive configtree merge
T7579: added workflow for CLA
T7374: bump vyconf commit id for build.sh
T7374: install vyconf_cli and add links for associated vy_* commands
T7445: added open prs conflict check caller workflow
T7450: fix dependency for use of PCRE2 instead of PCRE
T7363: update hash for vyconf aware initialization of Config
T7450: update commit hashes for Use PCRE2 instead of PCRE
T7334: pr mirror trigger workflow added with label creation permission for default github token
T7321: update commit hashes for replace configsession legacy operations
...
|
|
It has all old/current features plus several features that work
without patches (full compatibility).
Also, it includes developing compatibility for the PPPoE server and VPP
|
|
Add the dependency `vpp-crypto-engines` required for IPsec over VPP.
Without this, VPP cannot handle IPsec SAs
```
vpp[1901]: linux-cp/ipsec: ipsec sa add cce6bfeb failure(err: -9) 10.0.0.1 -> 10.0.0.2
vpp[1901]: ipsec_sa_add_and_lock:548: No crypto engine support for sha-256-128
```
|
|
Since AWS Gateway Load Balancer is specific to the AWS platform, its CLI and
binary dependencies don’t need to be included in generic images.
This commit removes the AWS GLB CLI definitions from all images and introduces
a new vyos-1x-aws package to provide the necessary CLI configuration and binary
dependencies.
|
|
|
|
|
|
|
|
Despite the counterintuitive numbering, this is correct.
|
|
|
|
VyOS-1x requires mokutil always for `show version`
Debian provides mokutil for amd64, arm64, armhf
Signed-off-by: Date Huang <tjjh89017@hotmail.com>
|
|
advertisements (#4463)
|
|
to avoid the overhead of having a Ruby runtims (30+ MB) in the image
for a single, rarely-used program
|
|
ids: T7241: remove Fastnetmon from the base system
|
|
It will eventually be moved to an addon
|
|
|
|
to prevent APT from pulling that package from buster
|
|
T7121: Set up communication vyconfd to vyos-commitd
|
|
|
|
Add protobuf dependencies for communication vyconfd <-> vyos-commitd,
and tomli runtime dependency for vyos-commitd load of vyconfd.conf.
|
|
libvyosconfig is both a build and a run dependency of vyos-1x.
Satisfying the build dependency within the Docker image requires
coordination of updates to vyos-build/libvyosconfig/vyos-1x on any
changes to the library; simplify this process by moving the build to a
step of the vyos-1x Makefile.
|
|
|
|
|
