| Age | Commit message (Collapse) | Author |
|---|
|
T7897: VPP: fix rx-mode interrupt for XDP driver with workers
|
|
T7890: VPP fix verify_dev_driver
|
|
The verify_dev_driver must return bool value, but it a device
does not have PCI address (for example veth interface)
it returns Traceback
Fix this
|
|
T7750: VPP: CGNAT commit failure with vpptunX interface
|
|
dhcp-server: T7723: add DHCP Option 26 (interface MTU)
|
|
Allow using bond interfaces in CGNAT. Improve interface cleanup to rely
on VPP API queries, as VPP config changes may modify interface indexes
|
|
Change vyos.template.get_dhcp_router to use '*.lease' file instead
of '.leases' file - in 'leases' there can be several last leases
and current one may not be the first one in file. '*.lease' file
contains current lease.
|
|
Remove no-syscall-lock from CLI and enable this option if interrupt/adaptive mode is enabled and workers are configured.
Also forbid interrupt mode for ixgbevf driver
|
|
There is currently no use for us for unique transaction ids emitted by
FRR to syslog.
|
|
There is no need for informational logging which adds quiet some noise to
syslog. Informational logging can be enabled when FRR debug swtitch is
set.
|
|
|
|
FRR operates multiple daemons - use proper syslog facility.
|
|
When deleting the daemon configuration, use the deleted dict element to properly
inform FRR config render of absence of the configuration items. Nothing needs
to be rendered.
|
|
When deleting the daemon configuration, use the deleted dict element to properly
inform FRR config render of absence of the configuration items. Nothing needs
to be rendered.
|
|
|
|
|
|
vyos.ifconfig: T7919: call "ip addr flush" only if interface exists
|
|
Flushing all interface addresses on an interface that does not exists
will throw a Python PermissionError. Add safe-guard to only flush interfaces
still available.
|
|
image: T5455: Add migration of SSH `known_hosts` files during upgrade
|
|
|
|
Restrictions on writing an empty config file in T7709 lead to a
misleading log entry on first boot, in the absence of a baseline
archived config file; explicitly create.
|
|
before trying to use it for host identity generation
|
|
T7903: set airbag enable to default log=False
|
|
pki: T7885: check_port_availability() can't be used during system boot
|
|
The default setting for airbag enable redirects sys.stderr by way of a
singleton class. Though this construction is not unreasonable, it has
been implicated in recent bugs, and is disabled pending a full anaylsis.
|
|
This complements commit ae74a511e (pki: T7885: support full ACME setup via
renew certbot force). If /config/auth/letsencrypt is missing, ACME certificate
data can't be merged into the VyOS configuration, preventing interface (e.g.,
ethernet) setup during boot.
This change ensures basic IP connectivity is established, allowing remote
management instead of leaving the system entirely inaccessible.
This is not what we will expect but if a user deletes /config/auth/letsencrypt -
this is what will happen.
|
|
* kea: T7823: DHCP-server lease cannot be cleared
* Update smoketest/scripts/cli/test_service_dhcp-server.py
Co-authored-by: Christian Breunig <christian@breunig.cc>
---------
Co-authored-by: Christian Breunig <christian@breunig.cc>
|
|
T7852: Switch to yescrypt password encryption
|
|
op-mode: T7871: add support for op mode command argument constraints
|
|
Ensures rendered FRR config passes sanity checks before applying.
Prevents issues like T7089 where bad template syntax broke routing.
Improves robustness and minimizes risk of config-induced outages.
|
|
|
|
During upgrade, the script now checks if any `known_hosts` files exist.
If so, it prompts the user to save these SSH fingerprints, and upon
confirmation, copies the files to the new image persistence directory.
|
|
T7709: Add file sync and atomic write to config save script
|
|
T7862: VPP: Enable support of ixgbevf driver for DPDK
|
|
l2tpv3: T7721: fix show l2tpv3 interface information
|
|
|
|
Take advantage of the helper script in the vyconf context.
|
|
Config save is provided by the helper script in both CLI and
configsession (hence also in the http api).
Use utilities write_file_sync and write_file_atomic, in accordance with
permissions and location:
If the target is in /opt/vyatta/etc/config or /config, use
write_file_sync; if, moreover, the caller has permissions, use
write_file_atomic. Otherwise, fall back to util write_file.
|
|
write_file_sync does an explicit fsync of file and directory on write.
write_file_atomic calls write_file_sync on a temp file and uses
os.rename to provide an 'atomic' write.
|
|
T7850: make op_mode_config_dict edit level aware
|
|
|
|
|
|
|
|
|
|
T7737: add vyconf-aware analogue of configfs
|
|
Accidentally slipped in 2 whitespace corrections
|
|
nose: T7825: Use nose2 for unit tests
|
|
|
|
T7805: VPP remove unused 'default-hugepage-size' from memory section and restrict page sizes in xml
|
|
T7787: add deprecation warning for ssh-dss keys
|
