| Age | Commit message (Collapse) | Author |
|---|
|
T8099: strongswan: 6.0.6 + Post quantum options
|
|
Drop third party binary grc for showing the log output in fancy colors.
Solely rely on what journalctl brings to the table.
|
|
|
|
T8971: upgrade from bgpq3 package to bgpq4
|
|
Add symlink from bgpq3 to bgpq4 to keep backwards compatible behavior.
|
|
As salt has been marked deprecated via T8056 and is thus deprecated in VyOS 1.5
and VyOS 1.4 it is time to remove it from the rolling release.
|
|
is set
When a user account was provisioned with only `plaintext-password` (e.g.
via cloud-init), the password recovery tool failed to persist the new
password across reboots. On the next boot, VyOS would re-apply the
`plaintext-password` from config.boot, silently overwriting the recovered
encrypted password.
|
|
When strongSwan package is not available on `packages.vyos.net`,
it causes the Debain 5.9.8 package version to be used, which fails the tests.
|
|
Move from the out-of-tree to an in-tree variant of the OpenVPN DCO module. As
this was not available in the previous used LTS 6.6 Kernel it now is available
while we upgrade to Linux 6.18.
|
|
Fix install location for validate-value which must be in $(VYOS_LIBEXEC_DIR)
instead of $(VYOS_LIBEXEC_DIR)/validators.
Co-authored-by: John Estabrook <jestabro@vyos.io>
|
|
* 'current' of github.com:vyos/vyos-utils: (65 commits)
T8269: add option to silence output of individual validators
T8306: update package version
vyos-op-run: T8306: add error messages for system exceptions
vyos-op-run: T8306: improve execution logic logging
vyos-op-run: T8301: improve the security of UID check and setuid logic
T8110: "list_interfaces --bondable" must not return VLAN subinterfaces
vyos-op-run: T7901: skip permission checks if the user is root
vyos-op-run: T8005: sanitize environment variables to prevent malicious variable injection
T7878: conflict check updated to use mergify
T7878: conflict check updated to use mergify
T7899: virtual-ethernet interfaces support broadcasts
Debian: T7899: bump dh compat version
T7758: add missing case to allow repeated option --type
T7758: allow repeated option --type in list_interfaces
vyos-op-run: T7745: add a command permission checking mechanism
op-mode: T7583: add a new operational command runner
T7644: mirror workflow refactoring rollout
T7579: fix of the run trigger for CLA
T7579: added workflow for CLA
validators: T6622: Radix-aware numeric validation
...
|
|
T8380: Add sbsigntool for ARM64 debian control for vyos-1x
|
|
T8449: Merge vyos-user-utils package into vyos-1x
|
|
vyos-netlinkd: T8047: replacement of netplugd
|
|
|
|
dependencies
|
|
|
|
into user-utils
* 'current' of https://github.com/vyos/vyos-user-utils: (24 commits)
T7644: mirror workflow refactoring rollout
T7579: fix of the run trigger for CLA
T7579: added workflow for CLA
T7334: pr mirror trigger workflow added with label creation permission for default github token
T7373: remove irqtop to avoid the overhead of having a Ruby runtims (30+ MB) in the image for a single, rarely-used program
T7330: mirror workflows added
T6804: Add ipmitool to user utils
T6763: Delete Jenkins file
T6674: Action add trigger workflow to rebuild package
T5984: Add user util numactl
T5222: Remove haproxy from user-utils as it added to vyos-1x
T5632: Add user-util jq to parse JSON files from sh
T5028: Add exfat-fuse package
T5028: Add package exfatprogs
T4841: Add fancontrol user-utils package
T4426: add arpwatch to the image
user-pkgs: T4023: Add user pkg grepcidr and sorting the pkgs
Add dnsdist to the image
Include haproxy in the image
Import dependencies from the former vyos-utils package list.
...
|
|
Fix typos and mistakes in the commands and comments
No functional changes
|
|
Implementing a daemon that listens for netlink messages in Python was discussed
for many years. This is a proof-of-concept implementation how we can listen for
netlink messages and process them in Python.
Python 3.10 minimum is required due to the use of case statements which mimics
C-style switch/case instructions.
Add example:
set interfaces ethernet eth1 vif 21 address dhcp
set interfaces ethernet eth1 vif 21 address dhcpv6
commit
If network cable is unplugged:
vyos-netlinkd[12681]: RTM_NEWLINK -> eth3.10, state=DOWN, mac=00:50:56:b3:9d:8e
vyos-netlinkd[12681]: Stopping dhclient@eth3.10.service...
vyos-netlinkd[12681]: Stopping dhcp6c@eth3.10.service...
If cable is plugged back in:
vyos-netlinkd[12681]: RTM_NEWLINK -> eth3.10, state=DOWN, mac=00:50:56:b3:9d:8e
vyos-netlinkd[12681]: RTM_NEWLINK -> eth3.10, state=UP, mac=00:50:56:b3:9d:8e
vyos-netlinkd[12681]: Restarting dhclient@eth3.10.service...
vyos-netlinkd[12681]: Restarting dhcp6c@eth3.10.service...
|
|
Install TACACS dependencies for vyos-1x package for both platforms.
|
|
geoip: T8326: Resolve permission issue on database paths
|
|
Restore required sudo on geoip op-mode
Ensures group/permission set on geoip nftables config
|
|
|
|
|
|
|
|
Previously we have had an implicit dependency on python3-systemd by
salt-minion. As several code paths rely on python3-systemd we need to add an
explicit dependency.
|
|
Kernel command-line change detection and automatic system reboot via
kexec during initial deployment
|
|
Configuration files for config tests gathered from lab installations, customers
or our own networks were placed in multiple directories - all related to
the same thing.
We have had config-tests, configs and config.no-load. This commit re-arranges
all the files and places a proper README for the users.
|
|
This enhances diagnostic capabilities by providing hardware topology
visuals within support archives.
|
|
For integration with CLI completion and shell internal functions, use
vyconf_cli_compat for replacing needed calls of cli-shell-api.
|
|
To allow call VPP api without sudo
- Get op-mode commands without sudo
- Use API call in smoke-tests
|
|
|
|
to prevent malicious variable injection
|
|
CRON is not used for certbot as pki starts the certbot timer.
|
|
Compatibility levels before 10 are deprecated
|
|
Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes.
This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.
|
|
Check that write_file_sync reaches disk, by using util vmtouch to evict
cache.
|
|
|
|
kea: T7821: Update Kea to 3.0
|
|
|
|
* Change nft to iptables in system_flow-accounting.py as ipt_NETFLOW
is iptales plugin
* Remove specific and non-relevant pmacct options
* Add ipt_NETFLOW options
* Move 'interfaces' to 'netflow' tree
* Support more flexible 'source-address' and 'source-interface' for
each server instead of one source
* Add migration script
* Update op mode command 'show flow-accounting'
* Update op mode command 'restart flow-accounting'
|
|
|
|
anywhere
Fix this build warning by placing the vyos_net_name script in it's own udev
folder to not accidently be copied to a wrong location.
|
|
Commit content of 562c21cb8 was lost in translation while integrating
the libvyosconfig code as mono repo. This restores the behavior.
|
|
* https://github.com/vyos/libvyosconfig: (107 commits)
T7728: T7734: update commit hash for dynamically generate proposed config
T7728: add package build target for convenience
T7718: update commit hashes for validate_tree_filter
T7718: add binding for validate_tree_filter
T7688: update commit hash for correct management of delete paths
T7644: mirror workflow refactoring rollout
T7637: T7605: update commit hashes for typo and escape backslash
T7579: fix of the run trigger for CLA
T7499: update hashes for add destructive merge
T7499: set permissions on session directory
T7499: bindings for (non-)destructive configtree merge
T7579: added workflow for CLA
T7374: bump vyconf commit id for build.sh
T7374: install vyconf_cli and add links for associated vy_* commands
T7445: added open prs conflict check caller workflow
T7450: fix dependency for use of PCRE2 instead of PCRE
T7363: update hash for vyconf aware initialization of Config
T7450: update commit hashes for Use PCRE2 instead of PCRE
T7334: pr mirror trigger workflow added with label creation permission for default github token
T7321: update commit hashes for replace configsession legacy operations
...
|
|
This extends commit 53d8ed6cc01e ("Debian: T7762: adjust vyos-1x package version
to not mention 1.5 in any way") with a counter that counts the number of commits
since the beginning to become HEAD. It kind of mimics "git describe --tags"
where commits after the last Git tag are counted.
Why do we need it? It's better for sorting multiple revisions of the vyos-1x
package, as we are unable to sort using a commit ID which was the commit before
one or another.
Packages are now named e.g.:
vyos-1x_999.0-12876-gb1b4545cb_amd64.deb
vyos-1x-aws_999.0-12876-gb1b4545cb_all.deb
vyos-1x-dbgsym_999.0-12876-gb1b4545cb_amd64.deb
vyos-1x-smoketest_999.0-12876-gb1b4545cb_all.deb
vyos-1x-vmware_999.0-12876-gb1b4545cb_all.deb
Meaning it is the 12876th commit since repo start and the commit ID used
for the build is b1b4545cb.
|
|
We've always used 999 as a kind of special super development version. Right now
when a vyos-1x package is build from the current branch it's named like:
vyos-1x_1.5dev0-3578-g2f1d1d343_all.deb
marking the 3578th commit after tag 1.5dev0 was created ad some random point in
time. The current Git repo commit id is 2f1d1d343.
To clearly unbind this from the 1.4, 1.5 and rolling development branch the
naming scheme of the package should be changed to:
vyos-1x_999.0-g5c03a86c0_amd64.deb
marking it a development package build from Git (g) from commit 5c03a86c0
-rw-r--r-- 1 vyos vyos 11922 Aug 28 17:06 vyos-1x_999.0_amd64.buildinfo
-rw-r--r-- 1 vyos vyos 2820 Aug 28 17:06 vyos-1x_999.0_amd64.changes
-rw-r--r-- 1 vyos vyos 2129880 Aug 28 17:06 vyos-1x_999.0-g5c03a86c0_amd64.deb
-rw-r--r-- 1 vyos vyos 5020 Aug 28 17:06 vyos-1x-aws_999.0-g5c03a86c0_all.deb
-rw-r--r-- 1 vyos vyos 2680 Aug 28 17:06 vyos-1x-dbgsym_999.0-g5c03a86c0_amd64.deb
-rw-r--r-- 1 vyos vyos 236228 Aug 28 17:06 vyos-1x-smoketest_999.0-g5c03a86c0_all.deb
-rw-r--r-- 1 vyos vyos 3216 Aug 28 17:06 vyos-1x-vmware_999.0-g5c03a86c0_all.deb
|
|
It has all old/current features plus several features that work
without patches (full compatibility).
Also, it includes developing compatibility for the PPPoE server and VPP
|
|
Add the dependency `vpp-crypto-engines` required for IPsec over VPP.
Without this, VPP cannot handle IPsec SAs
```
vpp[1901]: linux-cp/ipsec: ipsec sa add cce6bfeb failure(err: -9) 10.0.0.1 -> 10.0.0.2
vpp[1901]: ipsec_sa_add_and_lock:548: No crypto engine support for sha-256-128
```
|
