| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 12 days | T8344: Preserve symlinks when copying config to/from TPM encrypted volume | Nataliia Solomko | |
| shutil.copytree() defaults to symlinks=False, so it recurses into symlinked directories and recreates them as real directories instead of preserving the symlink. cloud-init creates /opt/vyatta/etc/config/cloud/instance as a symlink to instances/i-<id>. Enabling/disabling config encryption copied this tree with copytree() and silently turned that symlink into a real directory, causing cloud-init to fail on later runs with: IsADirectoryError: [Errno 21] Is a directory: '.../cloud/instance' Pass symlinks=True to preserve symlinks during the copy. | |||
| 2026-01-06 | Merge pull request #4935 from giga1699/T8146 | Daniil Baturin | |
| T8146: Confirm the key when config encryption is configured without TPM | |||
| 2026-01-03 | T8146: Encryption without TPM confirm key | Giga Murphy | |
| 2026-01-03 | T8145: LUKS Encryption Passphrase Observable | Giga Murphy | |
| 2025-09-23 | tpm: T7726: Test TPM key or prompt recovery key | sarthurdev | |
| 2025-09-23 | tpm: T7726: Prompt before overwriting existing TPM key | sarthurdev | |
| 2025-09-23 | tpm: T7726: Prompt user before clearing TPM key | sarthurdev | |
| 2025-09-23 | tpm: T4919: Use vyos module function for running image, single-line imports | sarthurdev | |
| 2025-09-23 | tpm: T7735: Only require key/recovery if unmapped | sarthurdev | |
| 2025-09-23 | tpm: T7713: Restore original config mounts when decrypting | sarthurdev | |
| 2025-09-23 | tpm: T7717: Preserve group on config and archives | sarthurdev | |
| 2025-09-23 | tpm: T7720: Handle encrypt failure and gracefully abort | sarthurdev | |
| 2025-09-23 | tpm: T7727: Prompt to overwrite an existing backup | sarthurdev | |
| Move encrypted volume check before key input Unmount any conflicting config bind mounts | |||
| 2025-09-19 | T7836: use /opt/vyatta/etc/config as source of truth in tpm encryption | John Estabrook | |
| The mount point /opt/vyatta/etc/config is considered the source of truth whereas /config is simply a bind mount of convenience. As the latter is no longer defined at boot, all operations should use the former. | |||
| 2025-07-15 | tpm: T7628: Fix non-TPM backed encryption | sarthurdev | |
| 2025-07-15 | tpm: T4919: Not supported on live-ISO | sarthurdev | |
| 2025-06-28 | T7591: remove copyright years from source files | Christian Breunig | |
| The legal team says years are not necessary so we can go ahead with it, since it will simplify backporting. Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \ 's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors <maintainers@vyos.io>/g' In addition we will error-out during "make" if someone re-adds a legacy copyright notice | |||
| 2024-06-29 | T6534: fix incorrect imports in vyos-config-encrypt.py | Bonus | |
| 2024-04-03 | T6199: drop unused Python imports | Christian Breunig | |
| found using "git ls-files *.py | xargs pylint | grep W0611" | |||
| 2024-03-07 | config: T4919: Add support for encrypted config file with TPM | sarthurdev | |
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) |
| summaryrefslogtreecommitdiff |