| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
|
|
Instead of passing environment variables now pass proper CLI arguments.
|
|
|
|
journalctl captures all syslog priority levels; filtering happens at query time
via -p <level>. The existing monitor log command always shows all priorities.
A "monitor log filter <priority>" sub-command lets operators tail the journal
at a specific minimum severity without having to remember journalctl flags.
"journalctl -p <level>" shows messages at that level and above (i.e., lower
numeric severity values are always included — warning also shows err, crit,
alert, emerg).
|
|
|
|
Drop third party binary grc for showing the log output in fancy colors.
Solely rely on what journalctl brings to the table.
|
|
dhcp: T8941: Support filter and sorting combination on DHCPv4/v6 server lease entries in op mode
|
|
pki: T8165: Add ability to show certificate full chain in pem format
|
|
Add op-mode command having ability to show certificate
full chain in pem format as part of PKI configuration.
The certificates are ordered beginning with the end
entity (leaf) certificate, followed by any intermediate
certificates and finally the private key if requested.
This allows users to easily export a certificate along
with its CA hierarchy for use in external applications,
that require the full chain to be provided in a single
file.
One can now run the following commands:
```
show pki ca NAME pem full-chain
show pki certificate NAME pem full-chain
show pki certificate NAME private pem full-chain
```
|
|
Also add `hostname` as sort key for DHCPv6 leases,
and fix a typo in the completion help for DHCPv6 leases
sorting.
|
|
|
|
Add two enhancements to the `show conntrack table` op-mode command:
- Display per-flow packet and byte counters (original and reply
direction).
- Add VRF filter option `show conntrack table <ipv4|ipv6> vrf <vrf-name>`
that maps VRF name to its conntrack table ID and
passes `--orig-zone` to the underlying conntrack call.
|
|
Add op-mode command having ability to show private
key in pem format as part of PKI configuration.
This is needed for users who want to render the
certificate and its private key.
|
|
FRR (#4994)
* sr-te: T6750: Adding Segment Routing Traffic Engineering portion of FRR
---------
Co-authored-by: Cheeze_It <none@none.com>
Co-authored-by: Christian Breunig <christian@breunig.cc>
|
|
Problem: The completion helper for `show isis neighbor` showed `system-id` as a literal keyword suggestion,
leading users to type exactly `system-id` instead of an actual neighbor name. Doing so returned
`Invalid system id system-id`. In reality, FRR accepts any real system-id (e.g. vyos01)
and returns correct per-neighbor details — the issue was purely in the completion hint misguiding the user.
Fix: Replaced the static `system-id` placeholder in the completion helper with a dynamic script that queries
`vtysh -c "show isis hostname"` and offers real neighbor names as tab-completion suggestions.
|
|
T8445: T8335: Extend config activation system
|
|
configuration mode
|
|
op-mode: T8483: fix /show_sensors.py: No such file or directory
|
|
Without establishing consistency for those scripts that include a help
message for 'set', one will still see that of system-image.xml.in:
"Install a new system"
Replace with a general message.
|
|
|
|
After rewriting the op-mode handlind code and introducing virtualTagNodes for
op-mode, also all <command> statements will be executed by a runner. Executing
"bash -c ''" code within that runner lacks the proper environment.
This can be verified by adding "env" into the bash -c '' executions string.
Solve this issue by moving the hypervisor detection code to show_sensors.py.
|
|
Add a new operational command to compare configuration between
nodes participating in config synchronization.
New command:
- `show configuration secondary sync [commands] [running|candidate|saved] [config-node-path]`.
This allows operators to view configuration differences across secondary peer
before applying or syncing changes.
Supports:
- displaying using raw diff and 'commands' format;
- optional section filtering (subtree comparison);
- selectable config source (running, candidate, saved).
|
|
Fix typos and mistakes in the commands and comments
No functional changes
|
|
T8352: VPP add op-mode commands to show bonding interfaces
|
|
|
|
|
|
|
|
geoip: T5405: T6768: Add VRF support and `system name-server` check
|
|
|
|
|
|
|
|
geoip: T8326: Resolve permission issue on database paths
|
|
tech-support: T8215: Extend tech-support archive and report generation
|
|
Restore required sudo on geoip op-mode
Ensures group/permission set on geoip nftables config
|
|
isis: T6978: add IS-IS SRv6 node-msd configuration
|
|
T7513: vyos-1x: CGNAT Exclude Rule CLI support
|
|
Co-Authored-by: Christian Breunig <christian@breunig.cc>
|
|
|
|
- Exclude .iso files from `/config` and `/home/*` to avoid large images
- Exclude previous debug-archived from new archives
- Include `/run` directory contents
- Add kernel modules information (`lsmod`)
- Add PCI details (`lspci -knnv`)
- Include full `/config` directory
- Add FRR memory usage (`vtysh "show memory"`)
- Add VPP info (`vppctl`)
- Add NUMA details (`numactl --hardware`, `numastat -cm`)
Full list of commands here: https://vyos.dev/T8215
|
|
|
|
|
|
|
|
|
|
|
|
* Move core logic to separate vyos.geoip module
* Use a sqlite database for storing and querying address ranges by country
* Remove downloaded geoip ranges once loaded into sqlite db
* No longer rebuild geoip sets on each commit unless necessary
* Allows for extensibility using other geoip data vendors
|
|
vpp: T7203: Add op-mode to show bridge-domain
|
|
|
|
T8107: Fix help text for WWAN interface information
|
