summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-10-02Merge pull request #4769 from c-po/pki-acme-listen-addressJohn Estabrook
pki: T7885: check_port_availability() can't be used during system boot
2025-10-02container: T7863: Add user-defined MAC option for containers (#4762)l0crian1
2025-10-02pki: T7885: add openconnect to the list of used_by servicesChristian Breunig
2025-10-02pki: T7885: "renew certbot force" now supports setting up ACME from scratchChristian Breunig
Assume someone deleted the certbot_config folder, "renew certbot force" alone will not work as there are no configuration files left to know what to renew. Re-run CLI PKI helper to initially request certificates via ACME again. This "should" (famous last words) never be the case - but sometimes the universe has a bad time.
2025-10-02pki: T7885: check_port_availability() can't be used during system bootChristian Breunig
A call to check_port_availability() will always fail during system boot when listen_address is set and the address is not yet assigned to an interface. This happens b/c PKI subsystem is called prior to any inteface - e.g. ethernet - and thus the OS will always be unable to bind() a socket() to a non existing IP address.
2025-10-02Merge pull request #4739 from roedie/T7852Daniil Baturin
T7852: Switch to yescrypt password encryption
2025-10-02Merge pull request #4761 from natali-rs1985/T7884Daniil Baturin
T7884: VPP: dependency issue when set interface address and NAT44 address translation interface in one commit
2025-10-02Merge pull request #4764 from alexandr-san4ez/T7895-currentDaniil Baturin
vyos-dhcp: T7895: rename "DHCP Server" column to "Lease Time"
2025-10-02T7884: VPP: dependency issue when set interface address and NAT44 address ↵Nataliia Solomko
translation interface in one commit Moved dependencies for NAT to be executed after interfaces_ethernet, and all settings for the interface (including interface address) have already been applied
2025-10-02op-mode: T7868: fix op-cmd "reset ip arp table" is not workingawolfnet
2025-10-01Merge pull request #4734 from alexandr-san4ez/T4251-currentJohn Estabrook
syslog: T4251: Add TLS support to syslog
2025-10-01vyos-dhcp: T7895: rename "DHCP Server" column to "Lease Time"vanitypurpose
(cherry picked from commit e7c8867b75f6855e93792ddd255bf0ad2b2464b1)
2025-09-30Merge pull request #4763 from c-po/config-boot-motdChristian Breunig
boot-config-loader: T7889: Inform user during login of config-load issues
2025-09-30boot-config-loader: T7889: Inform user during login of config-load issuesChristian Breunig
As T7885 turns out to be a config load related bug the user will only be informed when entering conf mode that something is off. vyos@vyos:~$ configure WARNING: There was a config error on boot: saving the configuration now could overwrite data. You may want to check and reload the boot config More information is displayed on tty0 of the router - but not everyone has access to tty0. This change is about copying the message displayed on tty0 to the MOTD system.
2025-09-30syslog: T4251: Add TLS support to syslogOleksandr Kuchmystyi
Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes. This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.
2025-09-30Merge pull request #4744 from sarthurdev/kea-vrfDaniil Baturin
kea: T7854: Use helper for Kea VRF systemd units
2025-09-29Merge pull request #4754 from natali-rs1985/T7815Viacheslav Hletenko
T7815: VPP: NAT44 rules with port requires protocol specification and vice versa
2025-09-26bgp: T7760: improfe verify() logic on default VRF removalChristian Breunig
After commit 85fe32f0e ("bgp: T7760: remove per vrf instance system-as node") BGP isntances running in a VRF will no longer have a system-as node set. This results in "set vrf name <name> protocols bgp" becomeing a valid CLI path. When reading in the config dict - we now might see {'protocols': {'bgp': {}} as a valid entry. We do need to account for this empty dictionary.
2025-09-26migrator: T7760: remove debug print statementChristian Breunig
2025-09-25Merge pull request #4745 from jestabro/catch-frr-exceptionViacheslav Hletenko
T7855: redirect stdout and catch exceptions on frr render
2025-09-25T7815: VPP: NAT44 rules with port requires protocol specification and vice versaNataliia Solomko
2025-09-25Merge pull request #4753 from jestabro/config-save-sync-atomicDaniil Baturin
T7709: Add file sync and atomic write to config save script
2025-09-25Merge pull request #4669 from sarthurdev/tpm_fixesDaniil Baturin
tpm: T7713: T7717: Multiple TPM fixes
2025-09-25Merge pull request #4756 from natali-rs1985/T7862Viacheslav Hletenko
T7862: VPP: Enable support of ixgbevf driver for DPDK
2025-09-25T7862: VPP: Enable support of ixgbevf driver for DPDKNataliia Solomko
2025-09-24T7709: use write_file_sync/atomic in vyos-save-config.py scriptJohn Estabrook
Config save is provided by the helper script in both CLI and configsession (hence also in the http api). Use utilities write_file_sync and write_file_atomic, in accordance with permissions and location: If the target is in /opt/vyatta/etc/config or /config, use write_file_sync; if, moreover, the caller has permissions, use write_file_atomic. Otherwise, fall back to util write_file.
2025-09-24T7861: System options CPU vendor_id bug for some platformsViacheslav
Some platforms do not have `vendor_id` for the CPU information This causes of `KeyError: 'vendor_id'` errors while commiting system option kernel memory settings. Fix this.
2025-09-24Merge pull request #4737 from jestabro/edit-level-op-mode-dictViacheslav Hletenko
T7850: make op_mode_config_dict edit level aware
2025-09-23T7855: vyos-commitd redirect stdout and catch exceptions on frr renderJohn Estabrook
2025-09-23T7855: vyos-configd redirect stdout and catch exceptions on frr renderJohn Estabrook
2025-09-23tpm: T7726: Test TPM key or prompt recovery keysarthurdev
2025-09-23tpm: T7726: Prompt before overwriting existing TPM keysarthurdev
2025-09-23tpm: T7726: Prompt user before clearing TPM keysarthurdev
2025-09-23tpm: T7726: Copy encrypted volume when adding system imagessarthurdev
2025-09-23tpm: T4919: Use vyos module function for running image, single-line importssarthurdev
2025-09-23tpm: T7735: Only require key/recovery if unmappedsarthurdev
2025-09-23tpm: T7713: Restore original config mounts when decryptingsarthurdev
2025-09-23tpm: T7717: Preserve group on config and archivessarthurdev
2025-09-23tpm: T7720: Handle encrypt failure and gracefully abortsarthurdev
2025-09-23tpm: T7727: Prompt to overwrite an existing backupsarthurdev
Move encrypted volume check before key input Unmount any conflicting config bind mounts
2025-09-23kea: T7854: Use helper for Kea VRF systemd unitssarthurdev
2025-09-23Merge pull request #4684 from c-po/bgp-vrf-system-asDaniil Baturin
bgp: T7760: remove per vrf instance system-as node
2025-09-23Merge pull request #4743 from sarthurdev/kea3.0Christian Breunig
kea: T7281: Fix Kea 3.0 service failures
2025-09-23T7850: add nosetest for util list_stripJohn Estabrook
2025-09-23kea: T7281: Preserve systemd unit environment in VRF execsarthurdev
2025-09-23kea: T7281: Set folder permissions to expected 0750sarthurdev
2025-09-23kea: T7821: Update paths for Kea v2.7.9 security changessarthurdev
2025-09-22kea: T7281: Use correct Kea unit filessarthurdev
2025-09-22image: T7818: avoid error when skipping config migrationChristian Breunig
Fix "No such file or directory" error triggered during image upgrade when user opts not to migrate config. GRUB cmdline migration incorrectly attempts to access non-existent config in new image path.
2025-09-22image: T7818: re-use global path definitions from vyos.defaultsChristian Breunig
Reduce amount of duplicate file/folder strings.
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-31 16:04:28 +0000