| Age | Commit message (Collapse) | Author |
|
ipsec: T8136: IPSEC PPK support
|
|
|
|
|
|
- Exclude .iso files from `/config` and `/home/*` to avoid large images
- Exclude previous debug-archived from new archives
- Include `/run` directory contents
- Add kernel modules information (`lsmod`)
- Add PCI details (`lspci -knnv`)
- Include full `/config` directory
- Add FRR memory usage (`vtysh "show memory"`)
- Add VPP info (`vppctl`)
- Add NUMA details (`numactl --hardware`, `numastat -cm`)
Full list of commands here: https://vyos.dev/T8215
|
|
Disabled "point-to-multipoint" mode for GRE interfaces, along with related "mode" node.
This mode relies on the 'teib' feature, which is not implemented yet.
|
|
|
|
vpp: T8324: Migrate loopback interface to 'interfaces vpp loopback'
|
|
ospf: T7679: fix plaintext authentication on specific interface
|
|
|
|
vpp: T8314: Migrate ipip interface to 'interfaces vpp ipip'
|
|
|
|
vrf: T8320: only allow alpha numerical characters, - and _ as VRF name
|
|
vpp: T8296: Move vxlan interface from vpp section to 'interfaces vpp vxlan'
|
|
|
|
This prevents the Kernel to error out. VRF names are limited within the Linux
kernal as any other network interface name. See net/core/dev.c:dev_valid_name()!
vyos@vyos# set vrf name MGM>T table 1000
vyos@vyos# commit
[ vrf ]
Traceback (most recent call last):
File "/usr/libexec/vyos/services/vyos-configd", line 157, in run_script
script.apply(c)
File "/usr/libexec/vyos/conf_mode/vrf.py", line 317, in apply
vrf_if.add_addr('127.0.0.1/8')
File "/usr/lib/python3/dist-packages/vyos/ifconfig/interface.py", line 1294, in add_addr
elif not is_intf_addr_assigned(self.ifname, addr, netns=netns):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/vyos/utils/network.py", line 444, in is_intf_addr_assigned
json_out = json.loads(out)
^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/json/__init__.py", line 346, in loads
return _default_decoder.decode(s)
^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/json/decoder.py", line 337, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/json/decoder.py", line 355, in raw_decode
raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)
[[vrf]] failed
Commit failed
|
|
|
|
|
|
T8279: recover config data provided by legacy image upgrade tools
|
|
|
|
(target version 6)
|
|
When upgrading from systems using the legacy image upgrade tools
(1.3.x), config data is copied to a now non-standard path. Add check on
first boot into target image to recover source image config data.
|
|
|
|
vpp: T8297: Fixed double enabling of VPP
|
|
When trying to configure the VPP interface using `set vpp settings interface eth0`
and `commit`, user first see a success. Upon repeating the configuration after
deleting and re-adding it, the commit fails with an error:
- `FileExistsError: Cannot open locked storage: /run/vpp/vpp_conf.json`
This indicates that another process is using the file or a previous operation did not
release the lock, preventing new changes from being written.
The commit adds context manager support and safe close to `JSONStorage`
and refactor VPP config handling.
|
|
T8120: Add support AMA console for ARM devices
|
|
|
|
|
|
IPv6 wildcard prefix derivation and includes validation and smoketests.
Included changes:
- Add `base-interface` under:
- `service router-advert interface <lan-if> prefix ::/64 base-interface <wan-if>`
- Render `Base6Interface <wan-if>;` in `radvd.conf` when configured.
- Add validation guard:
- `base-interface` is only allowed with wildcard prefix `::/64`.
- Extend smoketests:
- Positive case: `::/64` + `base-interface` commits and renders correctly.
- Negative case: non-`::/64` prefix with `base-interface` fails commit.
|
|
|
|
The igmpproxy service was started via a SysV init script, causing
systemd-sysv-generator to create a transient unit without restart policies.
When igmpproxy failed on first start, systemd did not retry, leading to
intermittent service availability.
This change replaces the auto‑generated unit with a native systemd service file
that defines proper restart settings.
|
|
|
|
|
|
Co-authored-by: Christian Breunig <christian@breunig.cc>
|
|
Remove `dpdk-options` under `set vpp settings interface <ethN>`
and move its child options to the interface level:
- `num-rx-desc`
- `num-rx-queues`
- `num-tx-desc`
- `num-tx-queues`
Also remove `set vpp settings interface <ethN> dpdk-options promisc`.
|
|
|
|
commands
Add `set vpp settings interfaces-rx-mode <polling|interrupt|adaptive>`
to configure RX mode for all interfaces. Raise error if any interface
does not support the selected mode.
Also remove per-interface rx-mode commands:
- `set vpp settings interface <name> rx-mode`
- `set vpp kernel-interfaces <name> rx-mode`
|
|
syslog: T8272: remove dead code from previous "file" logging support
|
|
T8257: image install search previous needs to consider legacy bind mount
|
|
Commit 395e3cb72 ("syslog: T6989: remove 'file' logging destination") removed
CLI support for custom file based logging targets. The code about logrotate
was not removed and just stayed "dead".
Dead code is removed by this commit.
|
|
'resource-allocation'
Replace legacy VPP CPU settings (main-core, skip-cores, workers, corelist-workers) with a single resource-allocation cpu-cores option.
CPU assignment is now handled automatically: two cores are reserved for the system, the VPP main thread is placed on the first available core, and the remaining allocated cores are used as workers.
This simplifies configuration and ensures consistent CPU allocation.
|
|
Instead of `vpp settings unix poll-sleep-usec`
use `vpp settings poll-sleep-usec`.
|
|
|
|
|
|
This commit changes logging settings naming:
- before: `set vpp settings logging default-log-level <alert>`
- after: `set vpp settings logging default-level <alert>`
|
|
For those images created with the legacy bind mount, the resident
config.boot at {mounted_image}/opt/vyatta/etc/config is the baseline,
not the saved config (which is then restored at boot). Image install
needs to search the legacy path at {mounted_image}/config as well as the
normalized path.
|
|
vpp: T7811: Add rebind_gve_driver function for correct gve device handling
|
|
http-api: T8235: Use asyncio lock to prevent deadlock in config-file handler
|
|
|
|
vpp: T8250: Rewrite the CLI for ACL tcp-flags
|
|
update-check: T7945: Improve reliability during early boot and error handling
|