| Age | Commit message (Collapse) | Author |
|
|
|
T7688: minor fixes related to management of delete paths
|
|
T7685: load-balancing: fix rules with multiple ports
|
|
|
|
|
|
|
|
serial: T7484: treat unavailable serial console devices as non-fatal
|
|
Instead of failing or starting agetty on an invalid device, we now check
whether the specified serial console device is a valid TTY. If it's not, we
display a warning to the user and skip starting the agetty process.
|
|
A missing detail in the collapse function left children as a list of
tuples (node name, node type).
|
|
Use the correct pointer reference to append entries to the 'files' and
'children' fields when paths are shared across .xml files.
|
|
************* Module vyos.utils.misc
python/vyos/utils/misc.py:51:46: E0602: Undefined variable 'node' (undefined-variable)
|
|
|
|
Function makedir defined two times inside the same file.
|
|
Remove duplicate function definition vyos.utils.file.chown which was also
provided by vyos.utils.permission.chown.
|
|
************* Module vyos.ifconfig.control
python/vyos/ifconfig/control.py:53:22: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:59:47: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:63:43: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:91:28: E1101: Instance of 'Control' has no 'ifname' member (no-member)
python/vyos/ifconfig/control.py:186:35: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:188:37: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:193:35: E1101: Instance of 'Control' has no 'config' member (no-member)
python/vyos/ifconfig/control.py:195:37: E1101: Instance of 'Control' has no 'config' member (no-member)
|
|
As the python netifaces module is written in C - we can not inspect any import
line as the linter does not see it. Disable the warnings here.
|
|
Use deque instead of list to limit the size of collected stderr
messages in airbag.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
As we now await the call to commit-confirm, do not run
commit-confirm-notify from a subshell.
|
|
|
|
|
|
T7591: remove copyright years from source files
|
|
T7589: Add no-split-gso and ack-filter for CAKE
|
|
dmbaturin/T7580-op-cache-generator-standalone-virtual
build: T7580: add support for standalone and virtual tag nodes to the op mode cache generator
|
|
|
|
vrf: T7544: Ensure correct quoting for VRF ifnames in nftables
|
|
The legal team says years are not necessary so we can go ahead with it, since
it will simplify backporting.
Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \
's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors <maintainers@vyos.io>/g'
In addition we will error-out during "make" if someone re-adds a legacy
copyright notice
|
|
to ensure that the JSON cache is usable for command lookup
|
|
* For VRF create/delete:
* Simple dquoting, as before, was parsed away by the shell
* Just escaping the double quotes could cause issues with the shell mangling
VRF names (however unlikely)
* Wrapping original quotes in shell-escaped single quotes is a quick & easy
way to guard against both improper shell parsing and string names being
taken as nft keywords.
* Firewall configuration:
* Firewall "interface name" rules support VRF ifnames and used them unquoted,
fixed for nft_rule template tags (parse_rule)
* Went through and quoted all iif/oifname usage by zones and interface
groups. VRF ifnames weren't available for all cases, but there is
no harm in completeness.
* For this, also created a simple quoted_join template filter to replace
any use of |join(',')
* PBR calls nft but doesn't mind the "vni" name - table IDs used instead
I may have missed some niche nft use-cases that would be exposed to this problem.
|
|
mode cache generator
|
|
T7561: simplify op-mode-definitions XML cache generation
|
|
pki: T7574: add optional force argument to renew certbot-issued certificates
|
|
Certbot renewal command in op-mode "renew certbot" only works if any of the
certificates is up for renewal. There is no CLI option to forcefully renew a
certificate. This is about adding a force option to the CLI and with this
addition move the entire certbot renew handling to new-style op-mode commands.
vyos@vyos:~$ renew certbot force
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /config/auth/letsencrypt/renewal/vyos.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Renewing an existing certificate for vyos.io
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations, all renewals succeeded:
/config/auth/letsencrypt/live/vyos/fullchain.pem (success)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Hook 'post-hook' ran with output:
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
|
|
|
|
|
|
|
|
|