summaryrefslogtreecommitdiff
path: root/op-mode-definitions
AgeCommit message (Collapse)Author
2025-06-25op-mode: T7560: add support for virtual tag nodesDaniil Baturin
for cases when commands need both fixed and variable arguments
2025-06-23pki: T7574: add optional force argument to renew certbot-issued certificatesChristian Breunig
Certbot renewal command in op-mode "renew certbot" only works if any of the certificates is up for renewal. There is no CLI option to forcefully renew a certificate. This is about adding a force option to the CLI and with this addition move the entire certbot renew handling to new-style op-mode commands. vyos@vyos:~$ renew certbot force - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Processing /config/auth/letsencrypt/renewal/vyos.conf - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Renewing an existing certificate for vyos.io - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Congratulations, all renewals succeeded: /config/auth/letsencrypt/live/vyos/fullchain.pem (success) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Hook 'post-hook' ran with output: Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done.
2025-06-19Merge pull request #4557 from dmbaturin/T7541-make-every-op-mode-path-uniqueDaniil Baturin
op-mode: T7541: convert duplicate nodes and tag nodes to standalone tag nodes
2025-06-19Merge pull request #4556 from dmbaturin/T7543-clear-interface-countersDaniil Baturin
op-mode: T7543: move "clear interfaces <type> [name] counters" to "clear interfaces counters [type] [name]"
2025-06-17container: T7473: fix show/monitor container log failed when log-driver is ↵opswill
journald
2025-06-12Merge pull request #4497 from yzguy/T7432Daniil Baturin
T7432: RPKI VRF Support
2025-06-12op-mode: T7541: convert duplicate nodes and tag nodes to standalone tag nodesDaniil Baturin
where it is possible without changing the command syntax
2025-06-11op-mode: T7543: move "clear interfaces <type> [name] counters" to "clear ↵Daniil Baturin
interfaces counters [type] [name]"
2025-06-11Merge pull request #4553 from dmbaturin/T7540-reset-connectionViacheslav Hletenko
op-mode: T7540: move "clear interface connection" to "reset connection"
2025-06-11op-mode: T7540: move "clear interface connection" to "reset connection"Daniil Baturin
2025-06-10Merge pull request #4550 from ↵Daniil Baturin
dmbaturin/T7527-eliminate-embedded-op-mode-shell-snippets op-mode: T7527: move assorted embedded shel snippets to script files
2025-06-10op-mode: T7527: move assorted embedded shel snippets to script filesDaniil Baturin
2025-06-09op-mode: T7538: remove the obsolete "show login level" commandDaniil Baturin
2025-06-03Merge pull request #4538 from c-po/op-mode-bgpDaniil Baturin
op-mode: T7509: add "detail" and "wide" modifier for BGP advertised-routes|received-routes
2025-06-03Merge pull request #4512 from dmbaturin/T7459-no-direct-sudo-in-op-modeJohn Estabrook
op-mode: T7459: eliminate direct use of sudo in op mode commands
2025-06-02op-mode: T7509: refactor "show bgp" XML definitions to re-usable code blocksChristian Breunig
2025-06-01op-mode: T7509: add "detail" and "wide" modifier for received-routesChristian Breunig
show ip bgp neighbors <ip> received-routes [detail [wide]|wide] show bgp neighbors <ip> received-routes [detail [wide]|wide] show bgp ipv4 neighbors <ip> received-routes [detail [wide]|wide] show bgp ipv6 neighbors <ip> received-routes [detail [wide]|wide] show bgp vrf <name> neighbors <ip> received-routes [detail [wide]|wide] show bgp vrf <name> ipv4 neighbors <ip> received-routes [detail [wide]|wide] show bgp vrf <name> ipv6 neighbors <ip> received-routes [detail [wide]|wide]
2025-06-01op-mode: T7509: add "detail" and "wide" modifier for advertised-routesChristian Breunig
show ip bgp neighbors <ip> advertised-routes [detail [wide]|wide] show bgp neighbors <ip> advertised-routes [detail [wide]|wide] show bgp ipv4 neighbors <ip> advertised-routes [detail [wide]|wide] show bgp ipv6 neighbors <ip> advertised-routes [detail [wide]|wide] show bgp vrf <name> neighbors <ip> advertised-routes [detail [wide]|wide] show bgp vrf <name> ipv4 neighbors <ip> advertised-routes [detail [wide]|wide] show bgp vrf <name> ipv6 neighbors <ip> advertised-routes [detail [wide]|wide]
2025-05-27T7432: RPKI VRF SupportAdam Smith
2025-05-27Merge pull request #4496 from l0crian1/add-root-bpdu-guardDaniil Baturin
Bridge: T7430: Add BPDU Guard and Root Guard support
2025-05-20opennhrp: T7462: Removed unused opennhrp files and configurationsaapostoliuk
Removed unused opennhrp files and configurations
2025-05-16op-mode: T7459: eliminate direct use of sudo in op mode commandsDaniil Baturin
2025-05-06Merge pull request #4447 from l0crian1/t7268-show-interfaces-kernelDaniil Baturin
interfaces: T7268: Add op-mode command for show all interfaces on system
2025-05-06Merge pull request #4480 from c-po/T7122-pkiDaniil Baturin
T7122: pki: unable to switch from custom cert to ACME when HAProxy service is running with 'redirect-http-to-https' option
2025-05-05Bridge: T7430: Add BPDU Guard and Root Guard supportl0crian1
This will add support for BPDU Guard and Root Guard to the bridge interface. Verification will come from: show log spanning-tree
2025-05-04op-mode: T7122: add "show|monitor log haproxy" commandsChristian Breunig
2025-05-01Merge pull request #4472 from sever-sever/T7396Daniil Baturin
T7396: Return the old script to generate tech-support archive
2025-04-30T7396: Return the old script to generate tech-support archiveViacheslav Hletenko
Return the old script to 'generate tech-support archive' command. The machine-readable format is good, but useless for analysis. There are no logs and other necessary information. Add op-mode command for machine-readable format: ``` generate tech-support machine-readable-archive ```
2025-04-25session: T6696: 'clear session' to 'reset session'Ryan Zuwala
Rename config node from clear-session to reset-session
2025-04-22T7282: op-mode: update firewall completion paths to include all group typesMark Hayes
2025-04-20interfaces: t7268: Add op-mode command for show all interfaces on systeml0crian1
Fixed XML formatting.
2025-04-20t7268: Add op-mode command for show all interfaces on systeml0crian1
Created op-mode script per request Commands added: show interfaces kernel show interfaces kernel detail show interfaces kernel json show interfaces kernel <interface> show interfaces kernel <interface> detail show interfaces kernel <interface> json
2025-04-18firewall: T7370: Add conntrack log commands (#4459)l0crian1
* firewall: T7370: Add conntrack log commands Added the following commands: show log conntrack show log conntrack event new show log conntrack event update show log conntrack event destroy * firewall: T7370: Add conntrack log commands Added the following commands: show log conntrack show log conntrack event new show log conntrack event update show log conntrack event destroy * firewall: T7370: Add conntrack log commands Added the following commands: show log conntrack show log conntrack event new show log conntrack event update show log conntrack event destroy * Fix capitalization --------- Co-authored-by: l0crian1 <ryan.claridge13@gmail.com> Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-04-18Merge pull request #4458 from l0crian1/t7369-allow-state-policy-log-opDaniil Baturin
firewall: T7369: Match global state policies in show firewall
2025-04-17Merge pull request #4453 from c-po/kernel-cmdline-T7327Christian Breunig
grub: T7327: honor "system option kernel" settings during image upgrade
2025-04-17firewall: T7369: Match global state policies in show firewalll0crian1
Global state policies were not matched when typing "show firewall"
2025-04-16firewall: T7369: Match global state policies in show firewalll0crian1
Global state policies were not matched when typing "show firewall"
2025-04-15op-mode: T7327: drop superfluous "sudo" for "show system image"Christian Breunig
2025-04-15Merge pull request #4214 from dmbaturin/T6919-good-bye-fastnetmonDaniil Baturin
ids: T7241: remove Fastnetmon from the base system
2025-04-14ids: T7241: remove Fastnetmon from the base systemDaniil Baturin
It will eventually be moved to an addon
2025-04-12interfaces: T7268: Add op-mode command for show all interfaces on systeml0crian1
This creates a command to show all interfaces on the system in both human readable and JSON format. This includes non-VyOS interfaces like those created by containers. Syntax: show interfaces kernel show interfaces kernel json show interfaces kernel <interface> show interfaces kernel <interface> json
2025-03-28t7254: op-mode: Add spanning-tree op-mode commands:l0crian1
Added stp.py to create output for spanning-tree info Modified op-mode-definitions\show-bridge.xml.in to add these commands: show bridge spanning-tree show bridge spanning-tree detail show bridge <interface> spanning-tree show bridge <interface> spanning-tree detail
2025-03-21Merge pull request #4397 from c-po/T861-secure-boot-certsChristian Breunig
T861: rename Secure Boot MOK (Machine Owner Key) file
2025-03-16T861: rename Secure Boot MOK (Machine Owner Key) fileChristian Breunig
2025-03-08T7227: show bgp: add filtering by rd and prefix option for ipv4/6 vpn tableMark Hayes
2025-02-22haproxy: T7187: Fix typo in op-mode XML filesarthurdev
2025-02-13wlb: T4470: Support WLB op-mode commandssarthurdev
2025-01-24Merge pull request #4200 from sskaje/T4930-1Daniil Baturin
T4930: Allow WireGuard peers via DNS hostname
2025-01-24Merge pull request #4216 from HollyGurza/T6641Daniil Baturin
T6641: Add vyos-network-event-logger Service
2025-01-21T6641: Add vyos-network-event-logger Servicekhramshinr
The service parses and logs network events for improved monitoring and diagnostics. Supported event types include: - `RTM_NEWROUTE`, `RTM_DELROUTE` - `RTM_NEWLINK`, `RTM_DELLINK` - `RTM_NEWADDR`, `RTM_DELADDR` - `RTM_NEWNEIGH`, `RTM_DELNEIGH`, `RTM_GETNEIGH` - `RTM_NEWRULE`, `RTM_DELRULE` Added operational mode commands for filtered log retrieval: - `show log network-event <event-type> <interface>`: Retrieve logs filtered by event type and interface. - `show interfaces <type> <name> event-log <event-type>`: Display interface-specific logs filtered by event type.