| Age | Commit message (Collapse) | Author |
|---|
|
T3680: protocols: add dhclient hooks for dhcp-interface static routes
|
|
kea: T7925: Improve error handling, validate IPv6 PD prefix length
|
|
Solves the problem that vyos-configs in FRRender caches configuation and
DHCP changes are ignored.
* Add src/helpers/vyos-request-configd-update.py that requests vyos-configd
to update FRR configuration.
* Make dhclient hooks use it instead of calling protocols_static.py
* Make FRRender cache not only configuration but also DHCP gateways so
that is any of them changes, FRR configuration is updated
|
|
T5942: Make failover support dhcp-interface
|
|
T7930: VPP: Changing NAT44 settings resets `forwarding_enabled` to False
|
|
Enable/disable NAT forwarding in vpp_nat.py script to prevent it's reset
|
|
While debugging and resolving the underlying VRF assignment issue in T7929,
this code path was refactored for clarity. Previously, the check_dhcp() helper
function relied on the parent scope’s vrf variable. Although this worked
correctly, it was not clean or explicit. The function now takes and uses its
own vrf argument, improving readability and maintainability.
|
|
This update refactors the code path to eliminate unnecessary nesting when
processing interfaces using PPPoE or DHCP that are bound to a VRF.
Previously, the configuration dictionary was only populated if a static route
was defined under the corresponding VRF node. This behavior was incorrect, as
interfaces tied to a VRF can receive dynamic routes - such as a default route
via DHCP - without having any static routing configuration. A typical use case
is a VRF dedicated to out-of-band management.
|
|
|
|
|
|
T7897: VPP: fix rx-mode interrupt for XDP driver with workers
|
|
T7890: VPP fix verify_dev_driver
|
|
The verify_dev_driver must return bool value, but it a device
does not have PCI address (for example veth interface)
it returns Traceback
Fix this
|
|
T7750: VPP: CGNAT commit failure with vpptunX interface
|
|
dhcp-server: T7723: add DHCP Option 26 (interface MTU)
|
|
Allow using bond interfaces in CGNAT. Improve interface cleanup to rely
on VPP API queries, as VPP config changes may modify interface indexes
|
|
Change vyos.template.get_dhcp_router to use '*.lease' file instead
of '.leases' file - in 'leases' there can be several last leases
and current one may not be the first one in file. '*.lease' file
contains current lease.
|
|
Remove no-syscall-lock from CLI and enable this option if interrupt/adaptive mode is enabled and workers are configured.
Also forbid interrupt mode for ixgbevf driver
|
|
There is currently no use for us for unique transaction ids emitted by
FRR to syslog.
|
|
There is no need for informational logging which adds quiet some noise to
syslog. Informational logging can be enabled when FRR debug swtitch is
set.
|
|
|
|
FRR operates multiple daemons - use proper syslog facility.
|
|
When deleting the daemon configuration, use the deleted dict element to properly
inform FRR config render of absence of the configuration items. Nothing needs
to be rendered.
|
|
When deleting the daemon configuration, use the deleted dict element to properly
inform FRR config render of absence of the configuration items. Nothing needs
to be rendered.
|
|
|
|
|
|
vyos.ifconfig: T7919: call "ip addr flush" only if interface exists
|
|
Flushing all interface addresses on an interface that does not exists
will throw a Python PermissionError. Add safe-guard to only flush interfaces
still available.
|
|
image: T5455: Add migration of SSH `known_hosts` files during upgrade
|
|
|
|
Restrictions on writing an empty config file in T7709 lead to a
misleading log entry on first boot, in the absence of a baseline
archived config file; explicitly create.
|
|
before trying to use it for host identity generation
|
|
T7903: set airbag enable to default log=False
|
|
pki: T7885: check_port_availability() can't be used during system boot
|
|
The default setting for airbag enable redirects sys.stderr by way of a
singleton class. Though this construction is not unreasonable, it has
been implicated in recent bugs, and is disabled pending a full anaylsis.
|
|
This complements commit ae74a511e (pki: T7885: support full ACME setup via
renew certbot force). If /config/auth/letsencrypt is missing, ACME certificate
data can't be merged into the VyOS configuration, preventing interface (e.g.,
ethernet) setup during boot.
This change ensures basic IP connectivity is established, allowing remote
management instead of leaving the system entirely inaccessible.
This is not what we will expect but if a user deletes /config/auth/letsencrypt -
this is what will happen.
|
|
* kea: T7823: DHCP-server lease cannot be cleared
* Update smoketest/scripts/cli/test_service_dhcp-server.py
Co-authored-by: Christian Breunig <christian@breunig.cc>
---------
Co-authored-by: Christian Breunig <christian@breunig.cc>
|
|
T7852: Switch to yescrypt password encryption
|
|
op-mode: T7871: add support for op mode command argument constraints
|
|
Ensures rendered FRR config passes sanity checks before applying.
Prevents issues like T7089 where bad template syntax broke routing.
Improves robustness and minimizes risk of config-induced outages.
|
|
|
|
During upgrade, the script now checks if any `known_hosts` files exist.
If so, it prompts the user to save these SSH fingerprints, and upon
confirmation, copies the files to the new image persistence directory.
|
|
T7709: Add file sync and atomic write to config save script
|
|
T7862: VPP: Enable support of ixgbevf driver for DPDK
|
|
l2tpv3: T7721: fix show l2tpv3 interface information
|
|
|
|
Take advantage of the helper script in the vyconf context.
|
|
Config save is provided by the helper script in both CLI and
configsession (hence also in the http api).
Use utilities write_file_sync and write_file_atomic, in accordance with
permissions and location:
If the target is in /opt/vyatta/etc/config or /config, use
write_file_sync; if, moreover, the caller has permissions, use
write_file_atomic. Otherwise, fall back to util write_file.
|
|
write_file_sync does an explicit fsync of file and directory on write.
write_file_atomic calls write_file_sync on a temp file and uses
os.rename to provide an 'atomic' write.
|
|
T7850: make op_mode_config_dict edit level aware
|
