| Age | Commit message (Collapse) | Author |
|---|
|
|
|
Assume someone deleted the certbot_config folder, "renew certbot force" alone
will not work as there are no configuration files left to know what to renew.
Re-run CLI PKI helper to initially request certificates via ACME again. This
"should" (famous last words) never be the case - but sometimes the universe has
a bad time.
|
|
A call to check_port_availability() will always fail during system boot when
listen_address is set and the address is not yet assigned to an interface.
This happens b/c PKI subsystem is called prior to any inteface - e.g. ethernet -
and thus the OS will always be unable to bind() a socket() to a non existing IP
address.
|
|
T7884: VPP: dependency issue when set interface address and NAT44 address translation interface in one commit
|
|
vyos-dhcp: T7895: rename "DHCP Server" column to "Lease Time"
|
|
translation interface in one commit
Moved dependencies for NAT to be executed after interfaces_ethernet, and
all settings for the interface (including interface address) have
already been applied
|
|
|
|
syslog: T4251: Add TLS support to syslog
|
|
(cherry picked from commit e7c8867b75f6855e93792ddd255bf0ad2b2464b1)
|
|
boot-config-loader: T7889: Inform user during login of config-load issues
|
|
As T7885 turns out to be a config load related bug the user will only be
informed when entering conf mode that something is off.
vyos@vyos:~$ configure
WARNING: There was a config error on boot: saving the configuration now could overwrite data.
You may want to check and reload the boot config
More information is displayed on tty0 of the router - but not everyone has
access to tty0. This change is about copying the message displayed on tty0 to
the MOTD system.
|
|
Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes.
This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.
|
|
kea: T7854: Use helper for Kea VRF systemd units
|
|
T7815: VPP: NAT44 rules with port requires protocol specification and vice versa
|
|
After commit 85fe32f0e ("bgp: T7760: remove per vrf instance system-as node")
BGP isntances running in a VRF will no longer have a system-as node set. This
results in "set vrf name <name> protocols bgp" becomeing a valid CLI path.
When reading in the config dict - we now might see {'protocols': {'bgp': {}}
as a valid entry. We do need to account for this empty dictionary.
|
|
|
|
T7855: redirect stdout and catch exceptions on frr render
|
|
|
|
T7709: Add file sync and atomic write to config save script
|
|
tpm: T7713: T7717: Multiple TPM fixes
|
|
T7862: VPP: Enable support of ixgbevf driver for DPDK
|
|
|
|
Config save is provided by the helper script in both CLI and
configsession (hence also in the http api).
Use utilities write_file_sync and write_file_atomic, in accordance with
permissions and location:
If the target is in /opt/vyatta/etc/config or /config, use
write_file_sync; if, moreover, the caller has permissions, use
write_file_atomic. Otherwise, fall back to util write_file.
|
|
Some platforms do not have `vendor_id` for the CPU information
This causes of `KeyError: 'vendor_id'` errors while commiting
system option kernel memory settings.
Fix this.
|
|
T7850: make op_mode_config_dict edit level aware
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Move encrypted volume check before key input
Unmount any conflicting config bind mounts
|
|
|
|
bgp: T7760: remove per vrf instance system-as node
|
|
kea: T7281: Fix Kea 3.0 service failures
|
|
|
|
|
|
|
|
|
|
|
|
Fix "No such file or directory" error triggered during image upgrade when user
opts not to migrate config.
GRUB cmdline migration incorrectly attempts to access non-existent config in
new image path.
|
|
Reduce amount of duplicate file/folder strings.
|
|
firewall: T7475: Add an option to disable conntrack for individual firewall chaisn
|
|
T7737: add vyconf-aware analogue of configfs
|
|
The list calculation of in-use but deprecated SSH hostkey algorithms was wrong.
This was implemented in commit 6deda171e ("ssh: T7839: add deprecation warning
for DSA hostkey-algorithm usage"). It always returned the content of the list
of deprecated algorithms, but not the list of deprecated algorithms actually -
in use - by the configuration. This has been corrected.
Before:
DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will
be removed in VyOS 1.6. Please update affected keys to a supported
algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication
failures after the upgrade. The following hostkey-algorithms are in
use: ssh-dss, ssh-dss-cert-v01@openssh.com
After:
DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will
be removed in VyOS 1.6. Please update affected keys to a supported
algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication
failures after the upgrade. The following hostkey-algorithms are in
use: ssh-dss
The generation of the MOTD was not affected!
|
