| Age | Commit message (Collapse) | Author |
|---|
|
Kernel command-line change detection and automatic system reboot via
kexec during initial deployment
|
|
Configuration files for config tests gathered from lab installations, customers
or our own networks were placed in multiple directories - all related to
the same thing.
We have had config-tests, configs and config.no-load. This commit re-arranges
all the files and places a proper README for the users.
|
|
This enhances diagnostic capabilities by providing hardware topology
visuals within support archives.
|
|
For integration with CLI completion and shell internal functions, use
vyconf_cli_compat for replacing needed calls of cli-shell-api.
|
|
To allow call VPP api without sudo
- Get op-mode commands without sudo
- Use API call in smoke-tests
|
|
|
|
CRON is not used for certbot as pki starts the certbot timer.
|
|
Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes.
This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.
|
|
Check that write_file_sync reaches disk, by using util vmtouch to evict
cache.
|
|
|
|
kea: T7821: Update Kea to 3.0
|
|
|
|
* Change nft to iptables in system_flow-accounting.py as ipt_NETFLOW
is iptales plugin
* Remove specific and non-relevant pmacct options
* Add ipt_NETFLOW options
* Move 'interfaces' to 'netflow' tree
* Support more flexible 'source-address' and 'source-interface' for
each server instead of one source
* Add migration script
* Update op mode command 'show flow-accounting'
* Update op mode command 'restart flow-accounting'
|
|
|
|
anywhere
Fix this build warning by placing the vyos_net_name script in it's own udev
folder to not accidently be copied to a wrong location.
|
|
Commit content of 562c21cb8 was lost in translation while integrating
the libvyosconfig code as mono repo. This restores the behavior.
|
|
* https://github.com/vyos/libvyosconfig: (107 commits)
T7728: T7734: update commit hash for dynamically generate proposed config
T7728: add package build target for convenience
T7718: update commit hashes for validate_tree_filter
T7718: add binding for validate_tree_filter
T7688: update commit hash for correct management of delete paths
T7644: mirror workflow refactoring rollout
T7637: T7605: update commit hashes for typo and escape backslash
T7579: fix of the run trigger for CLA
T7499: update hashes for add destructive merge
T7499: set permissions on session directory
T7499: bindings for (non-)destructive configtree merge
T7579: added workflow for CLA
T7374: bump vyconf commit id for build.sh
T7374: install vyconf_cli and add links for associated vy_* commands
T7445: added open prs conflict check caller workflow
T7450: fix dependency for use of PCRE2 instead of PCRE
T7363: update hash for vyconf aware initialization of Config
T7450: update commit hashes for Use PCRE2 instead of PCRE
T7334: pr mirror trigger workflow added with label creation permission for default github token
T7321: update commit hashes for replace configsession legacy operations
...
|
|
This extends commit 53d8ed6cc01e ("Debian: T7762: adjust vyos-1x package version
to not mention 1.5 in any way") with a counter that counts the number of commits
since the beginning to become HEAD. It kind of mimics "git describe --tags"
where commits after the last Git tag are counted.
Why do we need it? It's better for sorting multiple revisions of the vyos-1x
package, as we are unable to sort using a commit ID which was the commit before
one or another.
Packages are now named e.g.:
vyos-1x_999.0-12876-gb1b4545cb_amd64.deb
vyos-1x-aws_999.0-12876-gb1b4545cb_all.deb
vyos-1x-dbgsym_999.0-12876-gb1b4545cb_amd64.deb
vyos-1x-smoketest_999.0-12876-gb1b4545cb_all.deb
vyos-1x-vmware_999.0-12876-gb1b4545cb_all.deb
Meaning it is the 12876th commit since repo start and the commit ID used
for the build is b1b4545cb.
|
|
We've always used 999 as a kind of special super development version. Right now
when a vyos-1x package is build from the current branch it's named like:
vyos-1x_1.5dev0-3578-g2f1d1d343_all.deb
marking the 3578th commit after tag 1.5dev0 was created ad some random point in
time. The current Git repo commit id is 2f1d1d343.
To clearly unbind this from the 1.4, 1.5 and rolling development branch the
naming scheme of the package should be changed to:
vyos-1x_999.0-g5c03a86c0_amd64.deb
marking it a development package build from Git (g) from commit 5c03a86c0
-rw-r--r-- 1 vyos vyos 11922 Aug 28 17:06 vyos-1x_999.0_amd64.buildinfo
-rw-r--r-- 1 vyos vyos 2820 Aug 28 17:06 vyos-1x_999.0_amd64.changes
-rw-r--r-- 1 vyos vyos 2129880 Aug 28 17:06 vyos-1x_999.0-g5c03a86c0_amd64.deb
-rw-r--r-- 1 vyos vyos 5020 Aug 28 17:06 vyos-1x-aws_999.0-g5c03a86c0_all.deb
-rw-r--r-- 1 vyos vyos 2680 Aug 28 17:06 vyos-1x-dbgsym_999.0-g5c03a86c0_amd64.deb
-rw-r--r-- 1 vyos vyos 236228 Aug 28 17:06 vyos-1x-smoketest_999.0-g5c03a86c0_all.deb
-rw-r--r-- 1 vyos vyos 3216 Aug 28 17:06 vyos-1x-vmware_999.0-g5c03a86c0_all.deb
|
|
It has all old/current features plus several features that work
without patches (full compatibility).
Also, it includes developing compatibility for the PPPoE server and VPP
|
|
Add the dependency `vpp-crypto-engines` required for IPsec over VPP.
Without this, VPP cannot handle IPsec SAs
```
vpp[1901]: linux-cp/ipsec: ipsec sa add cce6bfeb failure(err: -9) 10.0.0.1 -> 10.0.0.2
vpp[1901]: ipsec_sa_add_and_lock:548: No crypto engine support for sha-256-128
```
|
|
debian: T7653: Extend and clarify the debian/copyright file
|
|
Since AWS Gateway Load Balancer is specific to the AWS platform, its CLI and
binary dependencies don’t need to be included in generic images.
This commit removes the AWS GLB CLI definitions from all images and introduces
a new vyos-1x-aws package to provide the necessary CLI configuration and binary
dependencies.
|
|
|
|
|
|
|
|
To allow clean up of cache data on Python module exit, set permissions
on directory.
|
|
The legal team says years are not necessary so we can go ahead with it, since
it will simplify backporting.
Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \
's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors <maintainers@vyos.io>/g'
In addition we will error-out during "make" if someone re-adds a legacy
copyright notice
|
|
|
|
|
|
|
|
Despite the counterintuitive numbering, this is correct.
|
|
Removed unused opennhrp files and configurations
|
|
pam_nologin
When using reboot in, reboot at, or shutdown in, non-root users are prevented
from logging in via SSH or console starting 5 minutes before the scheduled
shutdown or reboot time.
This behavior is intended by pam_nologin.so, which is included in the SSH and
login PAM stack (default on Debian). While expected, it may be inconvenient
and could be reconsidered.
|
|
VyOS-1x requires mokutil always for `show version`
Debian provides mokutil for amd64, arm64, armhf
Signed-off-by: Date Huang <tjjh89017@hotmail.com>
|
|
advertisements (#4463)
|
|
Systemd states:
The default syslog implementation should make syslog.service a symlink to
itself, so that this socket activates the right actual syslog service.
|
|
ids: T7241: remove Fastnetmon from the base system
|
|
It will eventually be moved to an addon
|
|
|
|
to prevent APT from pulling that package from buster
|
|
|
|
T7121: Set up communication vyconfd to vyos-commitd
|
|
|
|
|
|
Add protobuf dependencies for communication vyconfd <-> vyos-commitd,
and tomli runtime dependency for vyos-commitd load of vyconfd.conf.
|
|
|
|
libvyosconfig is both a build and a run dependency of vyos-1x.
Satisfying the build dependency within the Docker image requires
coordination of updates to vyos-build/libvyosconfig/vyos-1x on any
changes to the library; simplify this process by moving the build to a
step of the vyos-1x Makefile.
|
|
|
|
|
