summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2026-05-06Merge pull request #5159 from c-po/kernel-6.18Christian Breunig
T8147: Update Linux Kernel to 6.18
2026-05-04dhcp-relay: T7879: verify listen and upstream interfaces existNataliia Solomko
2026-05-04dhcp-relay: T8760: Remove redundant deprecation warning for legacy interface ↵Nataliia Solomko
option
2026-05-02Debian: T8147: remove out-of-tree OpenVPN DCO module - incl. in Kernel 6.18Christian Breunig
Move from the out-of-tree to an in-tree variant of the OpenVPN DCO module. As this was not available in the previous used LTS 6.6 Kernel it now is available while we upgrade to Linux 6.18.
2026-04-30Merge pull request #5152 from alexandr-san4ez/T8280-currentChristian Breunig
migration: T8280: Fix auth file read for interfaces on first boot of new image
2026-04-30T6750: sr-te: Adding initial Segment Routing Traffic Engineering portion of ↵Cheeze-It
FRR (#4994) * sr-te: T6750: Adding Segment Routing Traffic Engineering portion of FRR --------- Co-authored-by: Cheeze_It <none@none.com> Co-authored-by: Christian Breunig <christian@breunig.cc>
2026-04-30Merge pull request #5140 from josephillips85/currentViacheslav Hletenko
T8539: Unable to traceroute using hostname and ipv6 source address
2026-04-28Merge pull request #5146 from c-po/serialChristian Breunig
utils: T8541: add write-config-file-value helper
2026-04-28migration: T8280: Fix auth file read for interfaces on first boot of new imageOleksandr Kuchmystyi
During first boot after installing a new VyOS image, migrations are executed before the filesystem is fully initialized. At this point `/config` is not yet bind-mounted, causing auth files (certificates, keys, credentials) for OpenVPN, WireGuard and Ethernet EAPoL interfaces under `/config/auth` to be inaccessible even though they exist under the underlying `/opt/vyatta/etc/config/auth` path which is available at all boot stages. Add fallback logic to `read_auth_file()` to retry the file lookup under `/opt/vyatta/etc/config/auth` when the file is not found under `/config/auth`.
2026-04-27T8293: Add ability to set timeout for high-availability health-checkNataliia Solomko
Setting a timeout allows VRRP health-check scripts to run longer than the set interval. Without timeout, keepalived considers the script as failed after interval seconds. With timeout set higher than interval, the script has more time to complete before being marked as failed and transitioning VRRP to FAULT state.
2026-04-26utils: T8541: add write-config-file-value helperChristian Breunig
Introduce src/helpers/write-config-file-value.py to patch a saved config.boot from scripts by writing a quoted CLI path with an optional value (omit --value to create a valueless node). Extend vyos.utils.config.write_saved_value() to safely update saved configs: create missing parent nodes before tagging (ConfigTree.set_tag requires nodes to exist) and then write the requested value/valueless leaf back to disk. Remove the legacy serial console activation script which is now replaced by the helper-based approach. The helper is run once during ISO Image assembly and will inject the approprate serial console defintiions into config.boot.default.
2026-04-24Merge pull request #5130 from natali-rs1985/T8460Viacheslav Hletenko
vpp: T8460: Use isolated cpus for VPP cpu-cores
2026-04-24Merge pull request #5129 from inetman28/fix-acl-subinterfacesViacheslav Hletenko
VPP: T8495: fix issue with assigning acl on sub interfaces
2026-04-24Merge pull request #5137 from c-po/sr-sysctl-fixViacheslav Hletenko
T8534: refactor sysctl_(read|write) to accept key parts
2026-04-22traceroute: T8539: fix invalid hostnameJose Phillips
2026-04-21traceroute: T8539: fix source-address AF lookupJose Phillips
2026-04-21Merge pull request #5136 from c-po/vyos-utils-mergeViacheslav Hletenko
T8532: merge unrelated histories of vyos-utils and vyos-1x repo
2026-04-21vpp: T8460: Use isolated cpus for VPP cpu-coresNataliia Solomko
VPP CPU core assignment now uses kernel-isolated CPUs (from /sys/devices/system/cpu/isolated) with explicit corelist-workers instead of computing offsets from available cores with skip-cores/workers. Added validation that enough CPUs are actually isolated before VPP starts, and that isolate-cpus config only references existing CPU IDs. Moved smoketest for kernel option 'isolate-cpus' to test_vpp.py
2026-04-21Merge pull request #5100 from sarthurdev/T8446Daniil Baturin
firewall: T8446: Prevent chain with offload rule on local zone
2026-04-21Merge branch 'current' into vyos-utils-mergeDaniil Baturin
2026-04-21traceroute: T8539: fix IPv6 hostname resolutionJose Phillips
2026-04-21T8534: refactor sysctl_(read|write) to accept key partsChristian Breunig
Interface names can contain dots (e.g. VLAN subinterfaces like eth0.10), which conflicts with sysctl's dot-separated key syntax. Change sysctl_read() and sysctl_write() to take key components as a list and normalize each component by replacing . with / before invoking sysctl. This fixes sysctl lookups/updates for VLAN subinterfaces. Extend the SR-TE smoketest to cover a VLAN subinterface. Previous error raising this issue: vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/10/seg6_enabled: No such file or directory vyos-configd: sysctl: cannot stat /proc/sys/net/ipv6/conf/eth0/201/seg6_enabled: No such file or directory
2026-04-20Merge pull request #5096 from jestabro/extend-activation-systemJohn Estabrook
T8445: T8335: Extend config activation system
2026-04-20VPP: T8495: Apply suggestions from code reviewRuslan Volodin
2026-04-20VPP: T8495: fix issue with assigning acl on sub interfacesRuslan Volodin
2026-04-19T8532: update URL and bump version of OCaml toolsChristian Breunig
2026-04-19Merge branch 'current' of github.com:vyos/vyos-utils into vyos-utils-mergeChristian Breunig
* 'current' of github.com:vyos/vyos-utils: (65 commits) T8269: add option to silence output of individual validators T8306: update package version vyos-op-run: T8306: add error messages for system exceptions vyos-op-run: T8306: improve execution logic logging vyos-op-run: T8301: improve the security of UID check and setuid logic T8110: "list_interfaces --bondable" must not return VLAN subinterfaces vyos-op-run: T7901: skip permission checks if the user is root vyos-op-run: T8005: sanitize environment variables to prevent malicious variable injection T7878: conflict check updated to use mergify T7878: conflict check updated to use mergify T7899: virtual-ethernet interfaces support broadcasts Debian: T7899: bump dh compat version T7758: add missing case to allow repeated option --type T7758: allow repeated option --type in list_interfaces vyos-op-run: T7745: add a command permission checking mechanism op-mode: T7583: add a new operational command runner T7644: mirror workflow refactoring rollout T7579: fix of the run trigger for CLA T7579: added workflow for CLA validators: T6622: Radix-aware numeric validation ...
2026-04-17Merge pull request #5122 from c-po/op-mode-sensorsViacheslav Hletenko
op-mode: T8483: fix /show_sensors.py: No such file or directory
2026-04-16Merge pull request #5133 from c-po/serial-console-for-loopChristian Breunig
serial: T8375: call update_serial_console() only once for default tty
2026-04-16op-mode: T8483: remove hypervisor checks from sensors detectionChristian Breunig
Maintainers agreed to remove the CPU-flag-based hypervisor check, as it is arbitrary and can produce incorrect behavior. Sensors can be passed through to virtual machines, so running in a VM should not be treated differently. If no sensors are detected - whether on a hypervisor VM or on bare metal - the command now reports: "No sensors found".
2026-04-16op-mode: T8483: fix whitespace format issues for show_sensors.pyChristian Breunig
2026-04-16Merge pull request #5132 from natali-rs1985/T8505Daniil Baturin
vpp: T8505: Switch PPPoE bindings retrieval from CLI parsing to API call
2026-04-16Merge pull request #5113 from srnoth/T8211-multiport-serial-symlinksDaniil Baturin
serial: T8211: fix symlink collisions for multi-port USB serial adapters
2026-04-16vpp: T8505: Switch PPPoE bindings retrieval from CLI parsing to API callNataliia Solomko
2026-04-15T8445: set activation hint during install imageJohn Estabrook
2026-04-15T8445: update ethernet offload support activation scriptJohn Estabrook
Use refined activation tools for correct behavior on first installed boot.
2026-04-15T8335: use activation script for installation of config path hintJohn Estabrook
This is necessary for images produced from a raw_image build (qcow2), which no longer make use of the image_installer script.
2026-04-15T8445: add activation script to indicate first installed bootJohn Estabrook
Add script to leave hint of first installed boot (as, say, distinguished from first live boot, or subsequent); this is useful as pre/post conditions and self-modification of activation scripts.
2026-04-15T8445: add example activation scriptJohn Estabrook
2026-04-15T8445: add activation op-mode scriptJohn Estabrook
2026-04-15T8445: catch script runner error in vyos-routerJohn Estabrook
2026-04-15T8445: add revised boot activation script runnerJohn Estabrook
2026-04-15serial: T8375: call update_serial_console() only once for default ttyChristian Breunig
When there are multiple serial consoles defined; but either none or the last used the 'kernel' CLI option to disply Kernel messages, the GRUB code was called multiple times. By moving the call to the GRUB helpers outside the for loop we gain a single execution of the code path, not that it matters performance wise - but messing with the bootloader should be reduced to a minimum.
2026-04-14Merge pull request #5092 from c-po/kernel-serial-activationChristian Breunig
serial: T8375: use boot activation script to define a serial console on the CLI
2026-04-13Merge pull request #5081 from alexandr-san4ez/T7784-currentJohn Estabrook
config-sync: T7784: Add command to diff configuration with secondary node
2026-04-13Merge pull request #5121 from c-po/netlinkd-high-cpuViacheslav Hletenko
vyos-netlinkd: T8486: fix high-cpu utilisation due to excessive CLI calls
2026-04-12op-mode: T8483: fix /show_sensors.py: No such file or directoryChristian Breunig
After rewriting the op-mode handlind code and introducing virtualTagNodes for op-mode, also all <command> statements will be executed by a runner. Executing "bash -c ''" code within that runner lacks the proper environment. This can be verified by adding "env" into the bash -c '' executions string. Solve this issue by moving the hypervisor detection code to show_sensors.py.
2026-04-12vyos-netlinkd: T8486: fix high-cpu utilisation due to excessive CLI callsChristian Breunig
strace: Process 16362 attached [pid 16362] execve("/bin/cli-shell-api", ["/bin/cli-shell-api", "--show-active-only", "showConfig", "interfaces"], ...) = 0 [pid 16362] +++ exited with 0 +++ --- SIGCHLD ... strace: Process 16363 attached [pid 16363] execve("/bin/cli-shell-api", ["/bin/cli-shell-api", "--show-active-only", "showConfig", "interfaces"], ...) = 0 [pid 16363] +++ exited with 0 +++ --- SIGCHLD ... This would appear to be due to vyos-netlinkd calling op_mode_config_dict() more than is necessary: it can be called only when it may be applicable (this patch). Co-Authored-by: John Estabrook <jestabro@vyos.io>
2026-04-10Merge pull request #5108 from sever-sever/T8448Christian Breunig
T8448: add an option to enable SNMP traps in VRRP
2026-04-10Merge pull request #5118 from sever-sever/T8459Christian Breunig
T8459: Fix cron GeoIP update remove unexpected force option
generated by cgit v1.2.3 (git 2.39.1) at 2026-07-15 12:44:57 +0000