summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-08-01Merge pull request #4639 from c-po/T7668-optimizeDaniil Baturin
T7668: bail out early in get_cli_kernel_options() if nothing is to do
2025-07-31op-mode: T7403: fix image deletion when a single image ID is providedChristian Breunig
Commit a99ca6d11 ("op-mode: T7403: add option for forcefully removing a container image") did not account for the case where a single image ID is passed as a string. This led to incorrect behavior during iteration. Without converting the string to a list, the code iterates over individual characters of the image ID rather than treating it as a single item. As a result, the system attempts to delete non-existent container images based on these characters.
2025-07-31Merge pull request #4638 from c-po/is-a-ttyViacheslav Hletenko
serial: T7484: treat unavailable serial console devices as non-fatal
2025-07-31Merge pull request #4590 from c-po/container-image-removeDaniil Baturin
op-mode: T7403: add an option to forcefully remove a container image
2025-07-31Merge pull request #4630 from jestabro/fix-vpp-failure-handlerDaniil Baturin
T7651: VPP use pid not ppid as default in vpp-failure-handler.service script
2025-07-31T7668: bail out early in get_cli_kernel_options() if nothing is to doChristian Breunig
If there is no Kernel option to pass, there is no need to run the code to completion. Bail out early.
2025-07-30serial: T7484: treat unavailable serial console devices as non-fatalChristian Breunig
Instead of failing or starting agetty on an invalid device, we now check whether the specified serial console device is a valid TTY. If it's not, we display a warning to the user and skip starting the agetty process.
2025-07-30serial: T7484: remove redundant call to "systemctl daemon-reload"Christian Breunig
A subsequent call to restart_login_consoles() will always call "systemctl daemon-reload" and thus we can spare one call.
2025-07-30T7668: Fix image update due to None kernel optionsViacheslav
If we do not have the system options kernel the update fails Change order for variables `k_cpu_opts` and `k_memory_opts` If we do not have kernel_options set empty dictionary as NoneType object has no attribue `get` ``` >>> kernel_options=None >>> kernel_options.get('cpu', {}) Traceback (most recent call last): File "<stdin>", line 1, in <module> AttributeError: 'NoneType' object has no attribute 'get' >>> >>> >>> kernel_options={} >>> kernel_options.get('cpu', {}) {} >>> ```
2025-07-29op-mode: T7403: add option for forcefully remove a container imageChristian Breunig
If you have multiple images (tags) loaded for a container which point to the exact same hash - you can only forcefully delete them. vyos@vyos:~$ delete container image 70dc5806 Error: unable to delete image "70dc5806" by ID with more than one tag ([registry.io/foo/bar:v1.0 registry.io/foo/bar:v1.0.1]): please force removal In additon an image that is still beeing used can not be removed from the system as this would cause infinite container restarts. vyos@vyos:~$ delete container image all force Cannot delete image "d205499ae8bb" because it is currently being used by container "3b290f90e83d"!
2025-07-29op-mode: T7403: print STDOUT when adding a container imageChristian Breunig
2025-07-29T7651: use pid not ppid if not specifiedJohn Estabrook
The reset_section.py script is used in a limited case for both (1) recovery from an apply error in a config mode script and (2) recovery by a service crash in a failure handler service. In the latter case, the default pid must be os.getpid, not os.getppid, so as not to be called by pid 1.
2025-07-29Merge pull request #4627 from sarthurdev/T7628Daniil Baturin
T7628: Fix non-TPM backed config encryption
2025-07-28Merge pull request #4626 from dmbaturin/T7662-C62x-QATViacheslav Hletenko
qat: T7662: add PCI ID range for Intel C62x virtual function devices
2025-07-28qat: T7662: add PCI ID range for Intel C62x virtual function devicesDaniil Baturin
2025-07-28ipsec: T7593: Add dynamic prefix for local and remote traffic selectorsOleksandr Kuchmystyi
In case when there is no local/remote prefix configured in a tunnel settings, a protocol configured for such tunnel is ignored. The correct way to generate the configuration is to set the prefix to `dynamic` if it was not set. The correct config for the described case is: ``` local_ts = dynamic[gre/] remote_ts = dynamic[gre/] ```
2025-07-25Merge pull request #4623 from sever-sever/T7649-hyphenChristian Breunig
T7649: Fix use hyphens instead of underscores for kernel options
2025-07-25T7649: Fix use hyphens instead of underscores for kernel optionsViacheslav
The ConfigTree for operation mode uses hyphens instaed of underscores. Fix kernel options during image upgrade.
2025-07-24T7175: Added VPP optionKyle McClammy
2025-07-24Merge pull request #4619 from vyos/T7649Daniil Baturin
T7649: Add missed system kernel options for image installer
2025-07-24pylint: T7648: disable some linter-checks hit by GitHub action pipelineChristian Breunig
Running pylint --errors-only ... ************* Module interfaces src/op_mode/interfaces.py:42:54: E1101: Instance of '_IO' has no 'fileno' member (no-member) ************* Module show_techsupport_report src/op_mode/show_techsupport_report.py:62:50: E1101: Instance of '_IO' has no 'fileno' member (no-member)
2025-07-24Merge pull request #4616 from hedrok/T7489-fix-output-ipsec-passthroughDaniil Baturin
T7489: Fix output state of ipsec passthrough child
2025-07-24T7649: Add missed system kernel options for image installerViacheslav
Add missed system kernel options to the image_installer do not lose configured kernel options per an image upgrade.
2025-07-23T7489: Fix output state of ipsec passthrough childKyrylo Yatsenko
Show state of passthrough tunnels as always up. Passthrough children of connection have PASS mode but have no sa and are not shown in vici list_sas. Fix by passing mode from vici list_connections to _get_child_sa_state and always return 'up' for child with PASS mode.
2025-07-21migration: T7648: fix Undefined variable 'config' in vrrp/1-to-2Christian Breunig
2025-07-21migration: T7648: fix Undefined variable 'af_path' in quagga/2-to-3Christian Breunig
2025-07-21migration: T7648: fix Undefined variable 'config' in interfaces/5-to-6Christian Breunig
2025-07-21migration: T7648: fix Undefined variable 'base' in interfaces/0-to-1Christian Breunig
2025-07-21vyos.utils: T7648: only provide one chown functionChristian Breunig
Remove duplicate function definition vyos.utils.file.chown which was also provided by vyos.utils.permission.chown.
2025-07-21op-mode: T7648: fix pylint errors in storage moduleChristian Breunig
************* Module storage src/op_mode/storage.py:32:11: E0602: Undefined variable '_get_system_storage' (undefined-variable) src/op_mode/storage.py:52:11: E0602: Undefined variable 'output' (undefined-variable)
2025-07-21op-mode: pki: T7648: fix pylint errorChristian Breunig
************* Module pki src/op_mode/pki.py:459:8: E1128: Assigning result of a function call, where the function returns None (assignment-from-none)
2025-07-21op-mode: T7648: add missing import statement in connect disconnect handlerChristian Breunig
2025-07-21T7648: when using netifaces set "pylint: disable = no-name-in-module"Christian Breunig
As the python netifaces module is written in C - we can not inspect any import line as the linter does not see it. Disable the warnings here.
2025-07-20T7645: formattingJohn Estabrook
2025-07-20T7645: fix missing import and incorrect check of is_node_changedJohn Estabrook
Fix errors introduced by refactoring for modprobe/rmmod jool module.
2025-07-16Merge pull request #4605 from MattKobayashi/T7625Viacheslav Hletenko
T7625: load-balancing: prune limit key if not configured
2025-07-15tpm: T4919: Add boot warning if TPM not presentsarthurdev
2025-07-15tpm: T7628: Fix non-TPM backed encryptionsarthurdev
2025-07-15tpm: T4919: Not supported on live-ISOsarthurdev
2025-07-14T7627: fix regression to allow load without arg to load default configJohn Estabrook
2025-07-14T7625: load-balancing: prune limit key if not configuredMatthew Kobayashi
2025-07-10Merge pull request #4582 from hedrok/T7545-fix-show-vpn-debug-peerDaniil Baturin
ipsec: T7545: Fix show vpn debug peer
2025-07-09wlb: T7622: fix the op mode "run show wan-load-balance" commandDaniil Baturin
2025-07-08Merge pull request #4574 from jestabro/merge-configJohn Estabrook
T7499: update config merge tools
2025-07-08ipsec: T7545: Fix show vpn debug peerKyrylo Yatsenko
Fix re for searching of peers in /etc/swanctl/swanctl.conf ``` search = rf'^[\s]*(peer_{peer}_(tunnel_[\d]+|vti)).*' ``` Changed to ``` search = rf'^[\s]*({peer}-(tunnel-[\d]+|vti))[\s]*{{' ``` Added message ``` print(f'\n### {command} ###') ``` so that output is not empty when `/usr/sbin/ipsec statusall` shows nothing
2025-07-08T7499: add utility to download/uncompress config file, for load/mergeJohn Estabrook
2025-07-08T7499: use direct request to vyconfd to avoid re-validatingJohn Estabrook
2025-07-08T7499: expose destructive merge in http-apiJohn Estabrook
2025-07-08T7499: add unittest for config tree merge functionJohn Estabrook
2025-07-08T7499: load from internal representation to avoid re-parsingJohn Estabrook