summaryrefslogtreecommitdiff
path: root/python
AgeCommit message (Collapse)Author
2025-10-14T7750: VPP: CGNAT commit failure with vpptunX interfaceNataliia Solomko
Allow using bond interfaces in CGNAT. Improve interface cleanup to rely on VPP API queries, as VPP config changes may modify interface indexes
2025-10-07T7800: VPP: Bonding interface fails when change vpp configurationNataliia Solomko
2025-10-03T7907: archive config file on first boot to avoid misleading log entryJohn Estabrook
Restrictions on writing an empty config file in T7709 lead to a misleading log entry on first boot, in the absence of a baseline archived config file; explicitly create.
2025-10-03vyos.utils.network: T7898: check if system UUID is availableDaniil Baturin
before trying to use it for host identity generation
2025-10-03Merge pull request #4771 from jestabro/airbag-enable-log-falseChristian Breunig
T7903: set airbag enable to default log=False
2025-10-02Merge pull request #4769 from c-po/pki-acme-listen-addressJohn Estabrook
pki: T7885: check_port_availability() can't be used during system boot
2025-10-02T7903: set airbag enable to default log=FalseJohn Estabrook
The default setting for airbag enable redirects sys.stderr by way of a singleton class. Though this construction is not unreasonable, it has been implicated in recent bugs, and is disabled pending a full anaylsis.
2025-10-02config: T7885: show user Warning() instead of hard error on ACME cert issueChristian Breunig
This complements commit ae74a511e (pki: T7885: support full ACME setup via renew certbot force). If /config/auth/letsencrypt is missing, ACME certificate data can't be merged into the VyOS configuration, preventing interface (e.g., ethernet) setup during boot. This change ensures basic IP connectivity is established, allowing remote management instead of leaving the system entirely inaccessible. This is not what we will expect but if a user deletes /config/auth/letsencrypt - this is what will happen.
2025-10-02kea: T7823: DHCP-server lease cannot be clearedcanoziia
* kea: T7823: DHCP-server lease cannot be cleared * Update smoketest/scripts/cli/test_service_dhcp-server.py Co-authored-by: Christian Breunig <christian@breunig.cc> --------- Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-10-02Merge pull request #4739 from roedie/T7852Daniil Baturin
T7852: Switch to yescrypt password encryption
2025-10-02Merge pull request #4758 from dmbaturin/T7871-op-mode-constraintsDaniil Baturin
op-mode: T7871: add support for op mode command argument constraints
2025-09-27frr: T7875: add pre-apply validation using frr-reload --testChristian Breunig
Ensures rendered FRR config passes sanity checks before applying. Prevents issues like T7089 where bad template syntax broke routing. Improves robustness and minimizes risk of config-induced outages.
2025-09-26op-mode: T7871: add support for op mode command argument constraintsDaniil Baturin
2025-09-25Merge pull request #4753 from jestabro/config-save-sync-atomicDaniil Baturin
T7709: Add file sync and atomic write to config save script
2025-09-25Merge pull request #4756 from natali-rs1985/T7862Viacheslav Hletenko
T7862: VPP: Enable support of ixgbevf driver for DPDK
2025-09-25Merge pull request #4746 from awolfnet/currentDaniil Baturin
l2tpv3: T7721: fix show l2tpv3 interface information
2025-09-25T7862: VPP: Enable support of ixgbevf driver for DPDKNataliia Solomko
2025-09-24T7709: use standard script vyos-save-config.py for vyconfJohn Estabrook
Take advantage of the helper script in the vyconf context.
2025-09-24T7709: use write_file_sync/atomic in vyos-save-config.py scriptJohn Estabrook
Config save is provided by the helper script in both CLI and configsession (hence also in the http api). Use utilities write_file_sync and write_file_atomic, in accordance with permissions and location: If the target is in /opt/vyatta/etc/config or /config, use write_file_sync; if, moreover, the caller has permissions, use write_file_atomic. Otherwise, fall back to util write_file.
2025-09-24T7709: add utils write_file_sync and write_file_atomicJohn Estabrook
write_file_sync does an explicit fsync of file and directory on write. write_file_atomic calls write_file_sync on a temp file and uses os.rename to provide an 'atomic' write.
2025-09-24Merge pull request #4737 from jestabro/edit-level-op-mode-dictViacheslav Hletenko
T7850: make op_mode_config_dict edit level aware
2025-09-24l2tpv3: T7721: fix show l2tpv3 interface informationHaiyang
2025-09-23T7850: make op_mode_config_dict edit level awareJohn Estabrook
2025-09-23T7850: add util list_strip to remove initial or final sub-listJohn Estabrook
2025-09-23kea: T7821: Update paths for Kea v2.7.9 security changessarthurdev
2025-09-22Merge pull request #4711 from jestabro/interstitial-setDaniil Baturin
T7737: add vyconf-aware analogue of configfs
2025-09-20T7852: Switch to yescypt for password encryptionroedie
Accidentally slipped in 2 whitespace corrections
2025-09-18Merge pull request #4728 from sarthurdev/T7825Simon
nose: T7825: Use nose2 for unit tests
2025-09-18nose: T7825: Use nose2 for unit testssarthurdev
2025-09-18Merge pull request #4729 from natali-rs1985/T7805Daniil Baturin
T7805: VPP remove unused 'default-hugepage-size' from memory section and restrict page sizes in xml
2025-09-18Merge pull request #4731 from c-po/openssh-T7787Daniil Baturin
T7787: add deprecation warning for ssh-dss keys
2025-09-18container: T6673: Fix restart of containers with podman (#4691)l0crian1
Fixed issue with podman and systemd sync when restarting containers with 'podman restart' command. - Placed podman storage directory in vyos/defaults.py - Replaced repeated declarations with vyos.defaults.directories['podman_storage']
2025-09-18T7805: VPP remove unused 'default-hugepage-size' from memory section and ↵Nataliia Solomko
restrict page sizes in xml
2025-09-18T7737: use vyconf aware add/delete_cli_node if enabledJohn Estabrook
2025-09-18T7737: add vyconf aware versions of add/delete_cli_nodeJohn Estabrook
2025-09-18T7737: add auxiliary set/delete functionsJohn Estabrook
Add methods to request auxiliary changes to the config file during a commit. Used only for non-actionable updates, for example removing a plaintext password and adding the encrypted password.
2025-09-18T7737: update init data as needed for vyos-commitd environmentJohn Estabrook
Provide env vars of config session for injection into the commitd environment. This information is needed for certain config-mode scripts, namely those that reference the module vyos.utils.auth.
2025-09-18T7737: use standardized env var for config session pidJohn Estabrook
2025-09-18T7737: add generated protobuf filesJohn Estabrook
2025-09-18Merge pull request #4722 from natali-rs1985/T7796Daniil Baturin
T7796: PPPoE-server add mapping in vpp if vpp-cp is enabled
2025-09-18Merge pull request #4708 from sarthurdev/T114Daniil Baturin
wlb: T114: Add firewall group support for WAN load balancer
2025-09-17ssh: T7839: add deprecation warning for DSA hostkey-algorithm usageChristian Breunig
OpenSSH in Debian Trixie has removed support for ssh-dss (DSA) keys, which will prevent users with such keys from logging in after upgrade. To avoid lockouts, add a loud deprecation warning when users log in using a DSA key. This warning advises affected users to replace their keys with a supported algorithm (e.g., ed25519 or RSA) before the upgrade. Deprecation warning will be displayed during "commit" but also as MOTD to inform on this issue during every login. DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will be removed in VyOS 1.6. Please update affected keys to a supported algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication failures after the upgrade. The following hostkey-algorithms are in use: ssh-dss, ssh-dss-cert-v01@openssh.com
2025-09-17T7796: PPPoE-server add mapping in vpp if vpp-cp is enabledNataliia Solomko
2025-09-17T7785: VPP enable L3 mode after removing interface from a bridgeViacheslav
We have to re-enable L3 mode for an interface after removing the interface from a bridge. From the VPP API @param enable - Enable beige mode if not 0, else set to L3 mode
2025-09-16T7806: VPP do not allow skip-cores to be configured without main-coreNataliia Solomko
2025-09-16Merge pull request #4696 from natali-rs1985/T7783Daniil Baturin
T7783: T7786: VPP clarify error messages for CPU requirements
2025-09-16T7783: T7786: VPP clarify error messages for CPU requirementsNataliia Solomko
2025-09-16T75: migrate from pmacct to ipt_NETFLOWKyrylo Yatsenko
* Change nft to iptables in system_flow-accounting.py as ipt_NETFLOW is iptales plugin * Remove specific and non-relevant pmacct options * Add ipt_NETFLOW options * Move 'interfaces' to 'netflow' tree * Support more flexible 'source-address' and 'source-interface' for each server instead of one source * Add migration script * Update op mode command 'show flow-accounting' * Update op mode command 'restart flow-accounting'
2025-09-15Merge pull request #4715 from c-po/ethernet-if-removalViacheslav Hletenko
ethernet: T7813: remove VLAN interfaces first on deletion
2025-09-15Merge pull request #4716 from c-po/T7814-clean-loggingDaniil Baturin
vyos.ifconfig: T7814: suppress unnecessary syslog noise from missing nftables rules
generated by cgit v1.2.3 (git 2.39.1) at 2026-07-15 23:39:19 +0000