| Age | Commit message (Collapse) | Author |
|---|
|
mandatory
in the op mode cache generator
|
|
|
|
to distinguish them from fixed parts of the command
and allow rendering commands using a template processor
|
|
************* Module vyos.utils.misc
python/vyos/utils/misc.py:51:46: E0602: Undefined variable 'node' (undefined-variable)
|
|
|
|
Function makedir defined two times inside the same file.
|
|
Remove duplicate function definition vyos.utils.file.chown which was also
provided by vyos.utils.permission.chown.
|
|
************* Module vyos.ifconfig.control
python/vyos/ifconfig/control.py:53:22: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:59:47: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:63:43: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:91:28: E1101: Instance of 'Control' has no 'ifname' member (no-member)
python/vyos/ifconfig/control.py:186:35: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:188:37: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:193:35: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:195:37: E1101: Instance of 'Control' has no 'config' member (no-member)
|
|
As the python netifaces module is written in C - we can not inspect any import
line as the linter does not see it. Disable the warnings here.
|
|
Use deque instead of list to limit the size of collected stderr
messages in airbag.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
As we now await the call to commit-confirm, do not run
commit-confirm-notify from a subshell.
|
|
|
|
|
|
T7591: remove copyright years from source files
|
|
T7589: Add no-split-gso and ack-filter for CAKE
|
|
dmbaturin/T7580-op-cache-generator-standalone-virtual
build: T7580: add support for standalone and virtual tag nodes to the op mode cache generator
|
|
|
|
vrf: T7544: Ensure correct quoting for VRF ifnames in nftables
|
|
The legal team says years are not necessary so we can go ahead with it, since
it will simplify backporting.
Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \
's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors <maintainers@vyos.io>/g'
In addition we will error-out during "make" if someone re-adds a legacy
copyright notice
|
|
to ensure that the JSON cache is usable for command lookup
|
|
* For VRF create/delete:
* Simple dquoting, as before, was parsed away by the shell
* Just escaping the double quotes could cause issues with the shell mangling
VRF names (however unlikely)
* Wrapping original quotes in shell-escaped single quotes is a quick & easy
way to guard against both improper shell parsing and string names being
taken as nft keywords.
* Firewall configuration:
* Firewall "interface name" rules support VRF ifnames and used them unquoted,
fixed for nft_rule template tags (parse_rule)
* Went through and quoted all iif/oifname usage by zones and interface
groups. VRF ifnames weren't available for all cases, but there is
no harm in completeness.
* For this, also created a simple quoted_join template filter to replace
any use of |join(',')
* PBR calls nft but doesn't mind the "vni" name - table IDs used instead
I may have missed some niche nft use-cases that would be exposed to this problem.
|
|
mode cache generator
|
|
T7561: simplify op-mode-definitions XML cache generation
|
|
pki: T7574: add optional force argument to renew certbot-issued certificates
|
|
Certbot renewal command in op-mode "renew certbot" only works if any of the
certificates is up for renewal. There is no CLI option to forcefully renew a
certificate. This is about adding a force option to the CLI and with this
addition move the entire certbot renew handling to new-style op-mode commands.
vyos@vyos:~$ renew certbot force
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /config/auth/letsencrypt/renewal/vyos.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Renewing an existing certificate for vyos.io
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations, all renewals succeeded:
/config/auth/letsencrypt/live/vyos/fullchain.pem (success)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Hook 'post-hook' ran with output:
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
|
|
|
|
|
|
|
|
|
|
|
|
The original implementation of the op-mode XML cache generation resulted
in a structure that was difficult to use, for example, in documentation
generation. The source of complication is that, unlike the XML of
interface-definitions, path names are not unique: the same path may
occur as both a regular node and as a tag node. Here we simplify the
underlying structure by enriching path names with type information, thus
disambiguating paths. An interface to the cache is provided by explicit
generator and lookup functions.
|
|
T7554: fix wireguard fwmark parsing
|
|
firewall: T6951: Add a configuration command for ethertypes that bridge firewalls should always accept
|
|
|
|
firewalls should always accept
|
|
T7488: add utility for automatic rollback of section on apply stage error
|
