| Age | Commit message (Collapse) | Author |
|---|
|
T7805: VPP remove unused 'default-hugepage-size' from memory section and restrict page sizes in xml
|
|
T7787: add deprecation warning for ssh-dss keys
|
|
Fixed issue with podman and systemd sync when restarting
containers with 'podman restart' command.
- Placed podman storage directory in vyos/defaults.py
- Replaced repeated declarations with vyos.defaults.directories['podman_storage']
|
|
restrict page sizes in xml
|
|
|
|
|
|
Add methods to request auxiliary changes to the config file during a
commit. Used only for non-actionable updates, for example removing a
plaintext password and adding the encrypted password.
|
|
Provide env vars of config session for injection into the commitd
environment. This information is needed for certain config-mode scripts,
namely those that reference the module vyos.utils.auth.
|
|
|
|
|
|
T7796: PPPoE-server add mapping in vpp if vpp-cp is enabled
|
|
wlb: T114: Add firewall group support for WAN load balancer
|
|
OpenSSH in Debian Trixie has removed support for ssh-dss (DSA) keys, which will
prevent users with such keys from logging in after upgrade. To avoid lockouts,
add a loud deprecation warning when users log in using a DSA key. This warning
advises affected users to replace their keys with a supported algorithm (e.g.,
ed25519 or RSA) before the upgrade.
Deprecation warning will be displayed during "commit" but also as MOTD to inform
on this issue during every login.
DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will
be removed in VyOS 1.6. Please update affected keys to a supported
algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication
failures after the upgrade. The following hostkey-algorithms are in
use: ssh-dss, ssh-dss-cert-v01@openssh.com
|
|
|
|
We have to re-enable L3 mode for an interface after removing
the interface from a bridge.
From the VPP API
@param enable - Enable beige mode if not 0, else set to L3 mode
|
|
|
|
T7783: T7786: VPP clarify error messages for CPU requirements
|
|
|
|
* Change nft to iptables in system_flow-accounting.py as ipt_NETFLOW
is iptales plugin
* Remove specific and non-relevant pmacct options
* Add ipt_NETFLOW options
* Move 'interfaces' to 'netflow' tree
* Support more flexible 'source-address' and 'source-interface' for
each server instead of one source
* Add migration script
* Update op mode command 'show flow-accounting'
* Update op mode command 'restart flow-accounting'
|
|
ethernet: T7813: remove VLAN interfaces first on deletion
|
|
vyos.ifconfig: T7814: suppress unnecessary syslog noise from missing nftables rules
|
|
container: T7186: Add macvlan network type for containers
|
|
op-mode: T5992: show dhcpv6 leases with (mostly) the same fields as dhcp leases
|
|
|
|
nftables rules
When tearing down interfaces without VRF bindings, nftables may attempt to
remove non-existent rules. This results in repetitive error messages in syslog,
e.g.:
Sep 13 10:27:59 python3[90301]: DEBUG/IFCONFIG returned (err):
Sep 13 10:27:59 Error[90301]: Could not process rule: No such file or directory
Sep 13 10:27:59 python3[90301]: delete element inet vrf_zones ct_iface_map { "eth1.1337" }
Sep 13 10:27:59 python3[90301]:
Such output is noise and provides no operational value. The rule removal logic
has been adjusted to silently ignore errors when the interface or rule is
already absent, ensuring nftables cleanup proceeds when needed while keeping
syslogs clean and meaningful.
|
|
When an Ethernet interface is deleted from the configuration, its associated
VLAN subinterfaces must be removed first. This ordering allows VLAN interfaces
to gracefully release any active DHCP or DHCPv6 leases before the parent
interface disappears, ensuring proper cleanup and avoiding potential lease
retention issues.
|
|
|
|
|
|
|
|
|
|
|
|
- Moved gen_mac function outside of 'for network' loop
- Cached result of get_host_identity() to prevent multiple calls
- Other minor improvements per Copilot suggestions
|
|
Modified:
- interface-definitions/container.xml.in:
- Add macvlan network type
- Add gateway option
- python/vyos/utils/network.py:
- Add gen_mac function to generate mac address
- smoketest/scripts/cli/test_container.py:
- Add test for container network types
- src/conf_mode/container.py:
- Add support for macvlan network type
- Add gateway option
|
|
The utility write_file_atomic does not correctly update the file in the
bind mount directory /config. Revert for investigation.
This reverts commit c140f827f3117609908a3a18034027d3d78149ac.
|
|
T7670: VPP: Rely on all types of memory to verify memory resources
|
|
- Added dict_set_nested helper to set a value in a nested dictionary
- Modified get_interface_vrf to accept string or dict as argument
- Simplified logic using new helper functions
|
|
VPP can use 2M hugepages and 1G hugepages at the same time
|
|
|
|
|
|
|
|
T7678: Move "vpp settings host-resources" to "system option resource-limits"
|
|
kea: T6211: add VRF support for KEA dhcp server
|
|
T7718: expose validate_tree* methods and add validate-config script
|
|
|
|
|
|
|
|
T7716: VPP: Change defaults and add a warning about maximum routes count for current configuration
|
|
current configuration
|
|
It will be configured in section "system option host-resources"
|
|
|
