| Age | Commit message (Collapse) | Author |
|---|
|
There is currently no use for us for unique transaction ids emitted by
FRR to syslog.
|
|
There is no need for informational logging which adds quiet some noise to
syslog. Informational logging can be enabled when FRR debug swtitch is
set.
|
|
|
|
FRR operates multiple daemons - use proper syslog facility.
|
|
When deleting the daemon configuration, use the deleted dict element to properly
inform FRR config render of absence of the configuration items. Nothing needs
to be rendered.
|
|
When deleting the daemon configuration, use the deleted dict element to properly
inform FRR config render of absence of the configuration items. Nothing needs
to be rendered.
|
|
|
|
vyos.ifconfig: T7919: call "ip addr flush" only if interface exists
|
|
Flushing all interface addresses on an interface that does not exists
will throw a Python PermissionError. Add safe-guard to only flush interfaces
still available.
|
|
image: T5455: Add migration of SSH `known_hosts` files during upgrade
|
|
|
|
Restrictions on writing an empty config file in T7709 lead to a
misleading log entry on first boot, in the absence of a baseline
archived config file; explicitly create.
|
|
before trying to use it for host identity generation
|
|
T7903: set airbag enable to default log=False
|
|
pki: T7885: check_port_availability() can't be used during system boot
|
|
The default setting for airbag enable redirects sys.stderr by way of a
singleton class. Though this construction is not unreasonable, it has
been implicated in recent bugs, and is disabled pending a full anaylsis.
|
|
This complements commit ae74a511e (pki: T7885: support full ACME setup via
renew certbot force). If /config/auth/letsencrypt is missing, ACME certificate
data can't be merged into the VyOS configuration, preventing interface (e.g.,
ethernet) setup during boot.
This change ensures basic IP connectivity is established, allowing remote
management instead of leaving the system entirely inaccessible.
This is not what we will expect but if a user deletes /config/auth/letsencrypt -
this is what will happen.
|
|
* kea: T7823: DHCP-server lease cannot be cleared
* Update smoketest/scripts/cli/test_service_dhcp-server.py
Co-authored-by: Christian Breunig <christian@breunig.cc>
---------
Co-authored-by: Christian Breunig <christian@breunig.cc>
|
|
T7852: Switch to yescrypt password encryption
|
|
op-mode: T7871: add support for op mode command argument constraints
|
|
Ensures rendered FRR config passes sanity checks before applying.
Prevents issues like T7089 where bad template syntax broke routing.
Improves robustness and minimizes risk of config-induced outages.
|
|
|
|
During upgrade, the script now checks if any `known_hosts` files exist.
If so, it prompts the user to save these SSH fingerprints, and upon
confirmation, copies the files to the new image persistence directory.
|
|
T7709: Add file sync and atomic write to config save script
|
|
T7862: VPP: Enable support of ixgbevf driver for DPDK
|
|
l2tpv3: T7721: fix show l2tpv3 interface information
|
|
|
|
Take advantage of the helper script in the vyconf context.
|
|
Config save is provided by the helper script in both CLI and
configsession (hence also in the http api).
Use utilities write_file_sync and write_file_atomic, in accordance with
permissions and location:
If the target is in /opt/vyatta/etc/config or /config, use
write_file_sync; if, moreover, the caller has permissions, use
write_file_atomic. Otherwise, fall back to util write_file.
|
|
write_file_sync does an explicit fsync of file and directory on write.
write_file_atomic calls write_file_sync on a temp file and uses
os.rename to provide an 'atomic' write.
|
|
T7850: make op_mode_config_dict edit level aware
|
|
|
|
|
|
|
|
|
|
T7737: add vyconf-aware analogue of configfs
|
|
Accidentally slipped in 2 whitespace corrections
|
|
nose: T7825: Use nose2 for unit tests
|
|
|
|
T7805: VPP remove unused 'default-hugepage-size' from memory section and restrict page sizes in xml
|
|
T7787: add deprecation warning for ssh-dss keys
|
|
Fixed issue with podman and systemd sync when restarting
containers with 'podman restart' command.
- Placed podman storage directory in vyos/defaults.py
- Replaced repeated declarations with vyos.defaults.directories['podman_storage']
|
|
restrict page sizes in xml
|
|
|
|
|
|
Add methods to request auxiliary changes to the config file during a
commit. Used only for non-actionable updates, for example removing a
plaintext password and adding the encrypted password.
|
|
Provide env vars of config session for injection into the commitd
environment. This information is needed for certain config-mode scripts,
namely those that reference the module vyos.utils.auth.
|
|
|
|
|
|
T7796: PPPoE-server add mapping in vpp if vpp-cp is enabled
|
