summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-10-29pki: T7953: systemd certbot.service must not use PrivateTmpChristian Breunig
PrivateTmp needs to be disabled, otherwise we can not load the current VyOS configuration to reconfigure the service automatically when certbot runs.
2025-10-29pki: T7953: implement certbot_renew() function to have everything at one placeChristian Breunig
2025-10-29dhcpv6: T7967: fix migration script for automatic SLAAC selectionChristian Breunig
Commit f08a5700e7 ("dhcpv6: T7646: restore missing default route after upgrade") introduced a regression affecting both non-VIF and VIF interfaces. The addressing mode check in the migration logic was incorrect for both cases. For non-VIF interfaces, the migration was skipped entirely due to a missing configuration test. For VIF (VLAN) interfaces, the existing test always evaluated to true, since it incorrectly assumed that DHCPv6 was configured even when a static address was present. Smoketests have been extended to cover for these cases.
2025-10-29Merge pull request #4812 from c-po/pki-certbot-fixesChristian Breunig
pki: T7953: refactor internal dependency generation
2025-10-29Merge pull request #4810 from bl0way/T7896-frr-profileChristian Breunig
T7896: Add frr profile selection
2025-10-29frr: T7896: Configure frr profile with 'system frr profile' commandbl0way
Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-10-28dhcp-server: T3936: fix indent typoJohn Estabrook
2025-10-28dhcp-server: T3936: Added support for DHCP Option 82 (#4665)cblackburn-igl
* dhcp-server: T3936: Added support for DHCP Option 82 This commit adds support in both the CLI and the underlying code for DHCP Option 82 to be used to filter/route DHCP address assignments. The primary use case for this is to support enterprise switches which can "tag" DHCP requests with physical real world informaiton such as which switch first saw the request and which port it originated from (known in this context as remote-id and circuit-id). Once client-classes have been defined they can be assigned to subnets or ranges so that only certain addresses get assigned to specific requests. There is also a corresponding documentation update which pairs with this code change. (cherry picked from commit 326b5e713cb363a2b9f69e2204c4ee2ccd9939bb) * Update src/conf_mode/service_dhcp-server.py Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com> * Update src/conf_mode/service_dhcp-server.py Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com> * Update interface-definitions/include/dhcp/dhcp-server-common-config.xml.i Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com> --------- Co-authored-by: Daniil Baturin <daniil@baturin.org> Co-authored-by: Nataliia S. <81954790+natali-rs1985@users.noreply.github.com>
2025-10-28Merge pull request #4796 from natali-rs1985/T7938Daniil Baturin
T7938: VPP: Rewrite sFlow implementation
2025-10-26pki: T7953: reword inline commentsChristian Breunig
2025-10-26pki: T7953: certbot_request() should return NoneChristian Breunig
2025-10-26pki: T7953: use dict_set_nested() over manually assembly of dict dataChristian Breunig
2025-10-26vyos.defaults: T7953: globally define openconnect systemd service nameChristian Breunig
2025-10-25T7957: filter stderr when deleting container imagesChristian Breunig
The call to rc_cmd('podman inspect ...') determines whether a container image scheduled for deletion has any ancestor containers still using it. Previously, if the podman command wrote output to stderr, rc_cmd() would return that error message alongside or instead of the ancestor container ID. This caused subsequent podman calls to fail, as the error string was incorrectly treated as a valid command argument. This change ensures only valid ancestor IDs are returned. This is a fix for commit a99ca6d11b5 ("op-mode: T7403: add option for forcefully remove a container image")
2025-10-24syslog: T4251: Fix TLS enablement logic for syslogOleksandr Kuchmystyi
2025-10-22Merge pull request #4622 from MattKobayashi/T3680Viacheslav Hletenko
T3680: protocols: add dhclient hooks for dhcp-interface static routes
2025-10-22Merge pull request #4804 from c-po/frr-initChristian Breunig
frr: T7664: properly set log configuration during daemon startup
2025-10-21Merge pull request #4792 from sarthurdev/kea_configChristian Breunig
kea: T7925: Improve error handling, validate IPv6 PD prefix length
2025-10-21T5811: Make static dhcp-interface routes robustKyrylo Yatsenko
Solves the problem that vyos-configs in FRRender caches configuation and DHCP changes are ignored. * Add src/helpers/vyos-request-configd-update.py that requests vyos-configd to update FRR configuration. * Make dhclient hooks use it instead of calling protocols_static.py * Make FRRender cache not only configuration but also DHCP gateways so that is any of them changes, FRR configuration is updated
2025-10-21T3680: protocols: add dhclient hooks for dhcp-interface static routesMatthew Kobayashi
2025-10-21T7938: VPP: Rewrite sFlow implementationNataliia Solomko
Execute commands for vpp sflow with API calls. Use values for polling interval and sampling rate from 'system sflow'. Add op-mode command
2025-10-21Merge pull request #4802 from jestabro/log-frrender-stdoutDaniil Baturin
T7946: log redirected stdout from FRRender
2025-10-21Merge pull request #4783 from hedrok/T5942-failover-dhcp-gatewayDaniil Baturin
T5942: Make failover support dhcp-interface
2025-10-21Merge pull request #4795 from natali-rs1985/T7930Daniil Baturin
T7930: VPP: Changing NAT44 settings resets `forwarding_enabled` to False
2025-10-21T7929: VPP: nat44: validate that only self-twice-nat external address is in ↵Nataliia Solomko
translation pool
2025-10-20frr: T7664: properly set log configuration during daemon startupChristian Breunig
Related to commits: * fca49413f - frrender: T7664: do not log unique-id in syslog messages * c4c339fb5 - frrender: T7664: reduce log level to notifications during normal operation * 7ff824f44 - frrender: T7664: add "log timestamp precision 3" global option
2025-10-20T7946: log redirected stdout from FRRenderJohn Estabrook
After T7855, logging of stdout from FRRender was dropped. Explicity log redirected stdout in vyos-configd/commitd; restore parity of logging between the two daemons.
2025-10-20T7930: VPP: Changing NAT44 settings resets `forwarding_enabled` to FalseNataliia Solomko
Enable/disable NAT forwarding in vpp_nat.py script to prevent it's reset
2025-10-18T7941: fix DHCP client running in VRF with non-word charactersChristian Breunig
The previous implementation used awk with a regex to extract the VRF name from JSON data, relying on "(\w+)" to match the value. This broke for valid VRF names containing hyphens or other non-word characters. This update replaces the regex-based extraction with a jq query that reliably parses the JSON structure, ensuring correct behavior regardless of VRF name format. This also reduces parsing fragility by using a tool purpose-built for JSON processing.
2025-10-17kea: T7925: Improve error handling, validate IPv6 PD prefix lengthsarthurdev
2025-10-16Merge pull request #4781 from natali-rs1985/T7897Viacheslav Hletenko
T7897: VPP: fix rx-mode interrupt for XDP driver with workers
2025-10-16Merge pull request #4789 from sever-sever/T7890Viacheslav Hletenko
T7890: VPP fix verify_dev_driver
2025-10-16T7890: VPP fix verify_dev_driverViacheslav
The verify_dev_driver must return bool value, but it a device does not have PCI address (for example veth interface) it returns Traceback Fix this
2025-10-15Merge pull request #4780 from natali-rs1985/T7750Viacheslav Hletenko
T7750: VPP: CGNAT commit failure with vpptunX interface
2025-10-14Merge pull request #4790 from c-po/certbot-auto-renewDaniil Baturin
pki: T7908: certbot.timer must call CLI script to update certificates
2025-10-14T7750: VPP: CGNAT commit failure with vpptunX interfaceNataliia Solomko
Allow using bond interfaces in CGNAT. Improve interface cleanup to rely on VPP API queries, as VPP config changes may modify interface indexes
2025-10-14T5942: Make failover support dhcp-interfaceKyrylo Yatsenko
* Refactor XML a little: move common dhcp-interface properties to separate include file * Add failover support for dhcp-interface * Add test for DHCP in failover protocol
2025-10-14T7897: VPP: fix rx-mode interrupt for XDP driver with workersNataliia Solomko
Remove no-syscall-lock from CLI and enable this option if interrupt/adaptive mode is enabled and workers are configured. Also forbid interrupt mode for ixgbevf driver
2025-10-12dhcp6: T7882: Restart dhcp6c if PD is definedsarthurdev
2025-10-10Merge pull request #4772 from natali-rs1985/T7887Christian Breunig
T7887: system_option: Add validation for memory hugepage-count
2025-10-10pki: T7908: certbot.timer must call CLI script to update certificatesChristian Breunig
CRON is not used for certbot as pki starts the certbot timer.
2025-10-09Merge pull request #4678 from alexandr-san4ez/T5455-currentChristian Breunig
image: T5455: Add migration of SSH `known_hosts` files during upgrade
2025-10-08Merge pull request #4749 from hedrok/T7803-failover-vrfDaniil Baturin
T7803: Make failover route vrf-aware
2025-10-08T7803: Make failover route vrf-awareKyrylo Yatsenko
* Added 'protocol failover' to 'set vrf name': set vrf name red protocols failover route 10.11.0.110/32 next-hop 10.0.0.2 * Added vrf and interface to target: set ... next-hop 10.0.0.2 check target '10.120.0.21' vrf blue set ... next-hop 10.0.0.2 check target '10.120.0.21' interface eth1 Last two are needed when check VRF is not same as route VRF. In this case icmp can use any/both options, tcp requires `vrf` and arp requires `interface`
2025-10-07T7800: VPP: Bonding interface fails when change vpp configurationNataliia Solomko
2025-10-06Merge pull request #4777 from jestabro/fix-regression-image-installerChristian Breunig
T7818: remove uneeded calls of get_cli_kernel_options causing regression
2025-10-06Revert "bgp: T7760: deprecate per bgp vrf instance system-as node"John Estabrook
This reverts commit d871fe9c4c65de87232802ed54b263c9b2824391.
2025-10-06Revert "bgp: T7760: remove per vrf instance system-as node"John Estabrook
This reverts commit 85fe32f0e1a91a47fe4a6d4a5cdd6ac516dcc3b9.
2025-10-06Revert "migrator: T7760: remove debug print statement"John Estabrook
This reverts commit 3f8404ac78e1a31e8afcacc6ce8e7331130d2093.
2025-10-06Revert "bgp: T7760: improfe verify() logic on default VRF removal"John Estabrook
This reverts commit 7da3fcc9b7306f2e241716aa26b518540f3e3471.
generated by cgit v1.2.3 (git 2.39.1) at 2026-09-01 15:13:20 +0000