summaryrefslogtreecommitdiff
path: root/debian
AgeCommit message (Collapse)Author
2021-05-15conntrack: T3535: add keepalived notifications for node transitionsChristian Poessinger
2021-05-14conntrack: T3535: migrate codebase from vyatta-conntrack-syncChristian Poessinger
2021-05-02radius: T3510: authenticated users must use /sbin/radius_shell as shellChristian Poessinger
2021-04-24wireguard: T1802: generate QR code for clients on CLIChristian Poessinger
generate wireguard mobile-config wg0 server wg.vyos.net address 1.2.2.2/24 WireGuard client configuration for interface: wg0 [Interface] PrivateKey = AEXrZ4b3xFVLg1lql3hy/93+d43q3+3vPdSMUGI6/Fo= Address = 1.2.2.2/24 [Peer] PublicKey = h1HkYlSuHdJN6Qv4Hz4bBzjGg5WUty+U1L7DJsZy1iE= Endpoint = wg.vyos.net:41751 AllowedIPs = 0.0.0.0/0, ::/0 The servers public key and port are automatically extracter from the running config.
2021-04-15Debian: add missing FRR dependenciesChristian Poessinger
As all routing protocol definitions have been moved from the soon deprecated vyatta-cfg-quagga package to vyos-1x, we also need to take care about all the dependencies. Add missing frr-rpki-rtrlib and frr-snmp dependency and enforce a FRR version of at least 7.5 which holds all the features we currently support.
2021-04-13Debian: T2216: add missing podman dependencyChristian Poessinger
2021-04-04T3457: output the "monitor log" command in a colorful wayChristian Poessinger
Add a new CLI command "monitor log colored" to run the log file monitoring through grc (https://github.com/garabik/grc).
2021-04-03Debian: T2108: add minisign dependencyChristian Poessinger
2021-03-26http api: T3412: use FastAPI as web framework; support application/jsonJohn Estabrook
Replace the Flask micro-framework with FastAPI, in order to support extensions to the API and OpenAPI 3.* generation. This change will remain backwards compatible with previous versions. Notably, the multipart forms version of requests remain supported; in addition application/json requests are now natively supported.
2021-03-11Debian: T3356: move python3-paramiko from Build-Depends to DependsChristian Poessinger
The vyos-1x has no build time dependency on python3-paramiko but rather a runtime dependency on python3-paramiko. Missplaced dependency caused vyos-1x builds to fail as dependency is not met, introduced by commit 5b414a2ab1 ("config: T3356: Replace curl wrapper with (mostly) native remote file transfer functions").
2021-03-11config: T3356: Replace curl wrapper with (mostly) native remote file ↵erkin
transfer functions
2021-02-24Debian: bump package version to 1.4dev0Christian Poessinger
2021-02-06Debian: only build XDP for amd64 architectureChristian Poessinger
2021-01-23nptv6: T2518: Initial support for nat66 (NPT)jack9603301
2021-01-20Debian: add openvpn user via postinstallChristian Poessinger
Migrated from vyatta-cfg-system.
2021-01-20Debian: add radius_user and radius_priv_user via postinstallChristian Poessinger
2021-01-10Debian: vyos-1x depends on python3-spinx for "make docs"Christian Poessinger
2021-01-07Debian: add build-dependency on python3-jinja2Christian Poessinger
2021-01-07Debian: add python3-psutil build dependencyChristian Poessinger
vyos.util depends partially on python3-psutil, and some smoketests executed via "make test" include vyos.util, thus ensure the package is available.
2020-12-28webproxy: T563: use new bash blacklist updaterChristian Poessinger
2020-12-28webproxy: T563: squidguard: support default rulesetChristian Poessinger
2020-12-28webproxy: T563: op-mode: initial command supportChristian Poessinger
2020-12-28webproxy: T563: migrate from old Perl code to XML and get_config_dict()Christian Poessinger
Basic proxy functionality is working but the squidguard smoketest still fails as this is yet not implemented.
2020-12-28ddns: T757: add missing dependencyChristian Poessinger
2020-12-19xdp: T2666: switch to example code provided by xdp-tutorialChristian Poessinger
2020-12-17Debian: xdp: T2666: add build dependenciesChristian Poessinger
2020-12-17xdp: T2666: initial XDP (generic mode) forwarding supportChristian Poessinger
The CLI command 'set interfaces ethernet <interface> offload-options xdp" enables the XDP generic mode on the given interface. vyos@vyos:~$ show interfaces ethernet eth1 eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 xdpgeneric/id:151 qdisc mq state DOWN group default qlen 1000 link/ether 00:50:56:bf:ef:aa brd ff:ff:ff:ff:ff:ff inet6 fe80::250:56ff:febf:efaa/64 scope link tentative valid_lft forever preferred_lft forever Description: fooa XDP code is thankfully copied from [1], thank you for this nice tutorial. NOTE: this is an experimental feature which might break your forwarding/filtering. [1]: https://medium.com/swlh/building-a-xdp-express-data-path-based-peering-router-20db4995da66
2020-12-14netplug: T3130: use Debian upstream versionChristian Poessinger
2020-11-23Debian: move wireguard-modules dependency to vyos-buildChristian Poessinger
The dependency on the WireGuard modules actually depend on the runnning Kernel. While already working on 5.9 support which has a buildin version of WireGuard, this also eases ARM development.
2020-11-14options: keyboard: T3038: use proper XML <defaultValue> over hardcoded ↵Christian Poessinger
Python value We should not use hardcoded Python values whenever possible. vyos.xml provides an abstraction of the XML CLI definitions providing default values from the CLI specified via the <defaultValue> node. This increases consistency among all XML/Python wrappers. Additional small fixes in this commit (besides the bad practice incorporating unrelated changes into the same commit) contain: - Keyboard layout shout be explicitly set for /dev/console - Added missing Debian dependency on console-data - When looking for a key in a dict, we do not need to specify dict.keys()
2020-11-06system: T3048: add dynamic performance tuning daemonChristian Poessinger
Add new CLI command "set system options performance <latency | throughput>"
2020-11-01test: vyos.validate: add unittestsChristian Poessinger
2020-10-30Debian: add OpenSSL dependency, inherited by OpenVPNChristian Poessinger
2020-10-26smoketest: T3003: extend framework to load arbitrary config fileJohn Estabrook
2020-09-26Debian: adding vyos-configd made this package architecture specificChristian Poessinger
There is a shim which is compiled by GCC per target architecture.
2020-09-13Revert "Debian: T2843: drop wireguard-modules dependency with kernel 5.8"Christian Poessinger
This reverts commit bd076f694a763991a0b0d3a7bb0fa5d194d56d7c.
2020-08-31configd: T2582: add shim as config daemon clientJohn Estabrook
2020-08-31configd: T2582: add config daemon and supporting filesJohn Estabrook
2020-08-30Debian: T2843: drop wireguard-modules dependency with kernel 5.8Christian Poessinger
2020-08-30WireGuard: T2842: switch to binary package from buster-backportsChristian Poessinger
2020-08-27Debian: set proper changelog versionChristian Poessinger
2020-08-27Merge branch 'master' of github.com:vyos/vyos-smoketest into ↵Christian Poessinger
vyos-smoketest-integration (T2832) * 'master' of github.com:vyos/vyos-smoketest: (153 commits) pppoe-server: test some more values lcd: adjust to cli changes lcd: adapt test to new CLI design pppoe-server: initial smoketest with local and radius auth pppoe: validate dhcpv6 client will be started wireless: validate hostapd/wpa_supplicant is running pppoe: sync to new dhcpv6-pd cli anyconnect: T2812: add basic testing ethernet: check interface disable state router-advert: check 'infinity' option in script logic ssh: config file is now volatile (moved to /run) ipv6: link-local: test address assignment on interfaces router-advert: add initial test mdns-repeater: add basic test pseudo-ethernet: extend smoketests with VIFs l2tpv3: add initial interface test wireless: use library function for loading kernel modules ethernet: test "ip" subtree of interface for e.g. ARP settings pppoe: use assertEqual() service: bcast-relay: add initial tests ...
2020-08-20Debian: alphabetically sort (build-)dependenciesChristian Poessinger
2020-08-20lcd: T2564: remove lcdproc-extra-drivers packageChristian Poessinger
2020-08-18anyconnect: T2036: add anyconnect VPN supportEshenko Dmitriy
2020-08-10tcptraceroute: T2723: Fix the problem that tcptraceroute6 cannot be executedjack9603301
2020-07-18ndptool: T2706: Support NDP protocol monitoringjack9603301
It supports NDP protocol monitoring. The submission supports the following features: - Support the monitoring of specified port or all ports - Supports monitoring of specific message types - Support sending specific NDP message
2020-07-04Merge pull request #487 from DmitriyEshenko/1x-impl-fnmDaniil Baturin
ids: T2659: Implement fastnetmon support
2020-07-03ids: T2659: Implement fastnetmon supportDmitriyEshenko
2020-06-28T2638: FRR: New framework for configuring FRRRunar Borge
This commit adds the python module vyos.frr that support reading and modifying the frr cofiguration. Functions get_configuration() : Collects the configuration from FRR and returns it as a string reload_configuration() : uses frr-reload.py to activate a new configuration. The configuration applied will overwrite the current configuration. mark_configuration() : Does syntax check/validation and add "end" tags to the configuration The marked configuration will be returned as a string A syntax fault will render an Exception execute() : Execute a command inside vtysh configure() : Executes a command in vtysh config mode replace_section() / _replace_section() : Adds the ability to replace a section of frr code remove_section() : Removes the specified configuration block from the config For now this supports replacing complete config sub-blocks of configuration and selecting the daemon to replace inside. This should work for most daemons, but static routing will still be an issue because this is not a separate sub-config mode