| Age | Commit message (Collapse) | Author |
|
ipsec: T8136: IPSEC PPK support
|
|
|
|
|
|
- Exclude .iso files from `/config` and `/home/*` to avoid large images
- Exclude previous debug-archived from new archives
- Include `/run` directory contents
- Add kernel modules information (`lsmod`)
- Add PCI details (`lspci -knnv`)
- Include full `/config` directory
- Add FRR memory usage (`vtysh "show memory"`)
- Add VPP info (`vppctl`)
- Add NUMA details (`numactl --hardware`, `numastat -cm`)
Full list of commands here: https://vyos.dev/T8215
|
|
|
|
vpp: T8324: Migrate loopback interface to 'interfaces vpp loopback'
|
|
ospf: T7679: fix plaintext authentication on specific interface
|
|
|
|
|
|
|
|
|
|
|
|
vpp: T8297: Fixed double enabling of VPP
|
|
When trying to configure the VPP interface using `set vpp settings interface eth0`
and `commit`, user first see a success. Upon repeating the configuration after
deleting and re-adding it, the commit fails with an error:
- `FileExistsError: Cannot open locked storage: /run/vpp/vpp_conf.json`
This indicates that another process is using the file or a previous operation did not
release the lock, preventing new changes from being written.
The commit adds context manager support and safe close to `JSONStorage`
and refactor VPP config handling.
|
|
IPv6 wildcard prefix derivation and includes validation and smoketests.
Included changes:
- Add `base-interface` under:
- `service router-advert interface <lan-if> prefix ::/64 base-interface <wan-if>`
- Render `Base6Interface <wan-if>;` in `radvd.conf` when configured.
- Add validation guard:
- `base-interface` is only allowed with wildcard prefix `::/64`.
- Extend smoketests:
- Positive case: `::/64` + `base-interface` commits and renders correctly.
- Negative case: non-`::/64` prefix with `base-interface` fails commit.
|
|
The igmpproxy service was started via a SysV init script, causing
systemd-sysv-generator to create a transient unit without restart policies.
When igmpproxy failed on first start, systemd did not retry, leading to
intermittent service availability.
This change replaces the auto‑generated unit with a native systemd service file
that defines proper restart settings.
|
|
|
|
srv6: T6977: add srv6 encapsulation source-address
|
|
Remove `dpdk-options` under `set vpp settings interface <ethN>`
and move its child options to the interface level:
- `num-rx-desc`
- `num-rx-queues`
- `num-tx-desc`
- `num-tx-queues`
Also remove `set vpp settings interface <ethN> dpdk-options promisc`.
|
|
vpp: T8268: Unify CPU settings into a single 'cpu-cores' node under 'resource-allocation'
|
|
'resource-allocation'
Replace legacy VPP CPU settings (main-core, skip-cores, workers, corelist-workers) with a single resource-allocation cpu-cores option.
CPU assignment is now handled automatically: two cores are reserved for the system, the VPP main thread is placed on the first available core, and the remaining allocated cores are used as workers.
This simplifies configuration and ensures consistent CPU allocation.
|
|
bgp: T7984: add CLI support for "neighbor <N> remote-as auto"
|
|
|
|
Instead of `vpp settings unix poll-sleep-usec`
use `vpp settings poll-sleep-usec`.
|
|
FRR implemented a new know to learn the peers remote ASN from the BGP OPEN
message from https://github.com/FRRouting/frr/pull/16345.
|
|
|
|
|
|
T7756: Fix rsyslog configuration generation
|
|
1.) Fix both syslog and logrotate writing /etc/logrotate.d/vyos-rsyslog
- system_syslog.py generates /etc/logrotate.d/vyos-rsyslog-user for user file
logrotate
- system_logs.py generates /etc/logrotate.d/vyos-rsyslog using configured
rotation parameters
2.) Fix /run/rsyslog/rsyslog.conf ignoring configured size for /var/log/messages
- system_syslog.py retrieves "system logs" config to set rotation limits
- default rotation size is now based on configuration defaults
3.) prifilt strings for rsyslog are modified to use override syntax
(e.g. ";facility.none") when all is combined with other facilities to honor
per facility user intent
Smoke test changes:
Commonize configuration of syslog facilities
Check that prifilt is sane based on configured facilities (i.e. overides only
present when required)
Test wildcard (all) only, specific facility only, and wildcard + specific facility
|
|
After removing the salt-minion upstream repo and building salt from source
in https://github.com/vyos/vyos-build/pull/1112 the binary ships its own
Python interpreter which must be accounted for in our smoketests.
|
|
|
|
interfaces: T7730: Add interrupt coalescing settings for Ethernet interfaces
|
|
vpp: T8207: Enable ip6-icmp-ra-punt feature on interfaces with DHCPv6 address configured
|
|
http-api: T7090: Implement background configure operations for REST API
|
|
address configured
|
|
|
|
- Migration script removes 'driver' and 'xdp-options' nodes.
- XDP logic is commented out in config verification and CLI tests, preserving code for future use.
- The rest of XDP-related code remains untouched
|
|
Large config commits (`service config-sync`) can block the REST API request
path and sometimes must be deferred (e.g., when changing `service https`).
This commit introduces an in-memory background operation manager
that queues (FIFO) full configure operations (commands + commit/commit-confirm)
as single jobs, tracks status/result, and exposes active operations
via `/retrieve/background-operations`.
|
|
pppoe-server: T8143: Set 'vpp-cp' option automatically if interface is in VPP
|
|
vpp: T8125: Enable ip4-dhcp-client-detect feature if interface address is configured as DHCP
|
|
vpp: T8143: Incorrect mapping in IPFIX for bond interfaces
|
|
This change introduces CLI support for configuring network interface
interrupt coalescing parameters via `netlink`.
Note: Not all NIC drivers support interrupt coalescing. On unsupported interfaces,
`netlink` returns an error and the VyOS commit will fail.
|
|
T7664: support FRR 10.5
|
|
configured as DHCP
DHCP address cannot be assigned on VPP interfaces without enabling the 'ip4-dhcp-client-detect' feature
|
|
|
|
ssh: T7483: Add fido2 PubkeyAuthOptions
|
|
|
|
T7101: Add hardware watchdog support via systemd
|
|
openvpn: T7633: Add support for `data-ciphers-fallback` in site-to-site tunnels
|
|
|