summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-10-17kea: T7925: Improve error handling, validate IPv6 PD prefix lengthsarthurdev
2025-10-16Merge pull request #4781 from natali-rs1985/T7897Viacheslav Hletenko
T7897: VPP: fix rx-mode interrupt for XDP driver with workers
2025-10-16Merge pull request #4789 from sever-sever/T7890Viacheslav Hletenko
T7890: VPP fix verify_dev_driver
2025-10-16T7890: VPP fix verify_dev_driverViacheslav
The verify_dev_driver must return bool value, but it a device does not have PCI address (for example veth interface) it returns Traceback Fix this
2025-10-15Merge pull request #4780 from natali-rs1985/T7750Viacheslav Hletenko
T7750: VPP: CGNAT commit failure with vpptunX interface
2025-10-14Merge pull request #4790 from c-po/certbot-auto-renewDaniil Baturin
pki: T7908: certbot.timer must call CLI script to update certificates
2025-10-14T7750: VPP: CGNAT commit failure with vpptunX interfaceNataliia Solomko
Allow using bond interfaces in CGNAT. Improve interface cleanup to rely on VPP API queries, as VPP config changes may modify interface indexes
2025-10-14T5942: Make failover support dhcp-interfaceKyrylo Yatsenko
* Refactor XML a little: move common dhcp-interface properties to separate include file * Add failover support for dhcp-interface * Add test for DHCP in failover protocol
2025-10-14T7897: VPP: fix rx-mode interrupt for XDP driver with workersNataliia Solomko
Remove no-syscall-lock from CLI and enable this option if interrupt/adaptive mode is enabled and workers are configured. Also forbid interrupt mode for ixgbevf driver
2025-10-12dhcp6: T7882: Restart dhcp6c if PD is definedsarthurdev
2025-10-10Merge pull request #4772 from natali-rs1985/T7887Christian Breunig
T7887: system_option: Add validation for memory hugepage-count
2025-10-10pki: T7908: certbot.timer must call CLI script to update certificatesChristian Breunig
CRON is not used for certbot as pki starts the certbot timer.
2025-10-09Merge pull request #4678 from alexandr-san4ez/T5455-currentChristian Breunig
image: T5455: Add migration of SSH `known_hosts` files during upgrade
2025-10-08Merge pull request #4749 from hedrok/T7803-failover-vrfDaniil Baturin
T7803: Make failover route vrf-aware
2025-10-08T7803: Make failover route vrf-awareKyrylo Yatsenko
* Added 'protocol failover' to 'set vrf name': set vrf name red protocols failover route 10.11.0.110/32 next-hop 10.0.0.2 * Added vrf and interface to target: set ... next-hop 10.0.0.2 check target '10.120.0.21' vrf blue set ... next-hop 10.0.0.2 check target '10.120.0.21' interface eth1 Last two are needed when check VRF is not same as route VRF. In this case icmp can use any/both options, tcp requires `vrf` and arp requires `interface`
2025-10-07T7800: VPP: Bonding interface fails when change vpp configurationNataliia Solomko
2025-10-06Merge pull request #4777 from jestabro/fix-regression-image-installerChristian Breunig
T7818: remove uneeded calls of get_cli_kernel_options causing regression
2025-10-06T7899: virtual-ethernet interfaces support broadcastsChristian Breunig
The Linux Kernel treats virtual-ethernet interfaces like regular ethernet interfaces. As ethernet interfaces support broadcasts and we have a completion helper for broadcast interfaces, this must be extended for virtual-ethernet interfaces. vyos@vyos# ${vyos_completion_dir}/list_interfaces --broadcast eth0 eth0.10 eth0.201 eth1 eth2 eth3 veth101 veth102 veth201 veth202
2025-10-06Revert "bgp: T7760: deprecate per bgp vrf instance system-as node"John Estabrook
This reverts commit d871fe9c4c65de87232802ed54b263c9b2824391.
2025-10-06Revert "bgp: T7760: remove per vrf instance system-as node"John Estabrook
This reverts commit 85fe32f0e1a91a47fe4a6d4a5cdd6ac516dcc3b9.
2025-10-06Revert "migrator: T7760: remove debug print statement"John Estabrook
This reverts commit 3f8404ac78e1a31e8afcacc6ce8e7331130d2093.
2025-10-06Revert "bgp: T7760: improfe verify() logic on default VRF removal"John Estabrook
This reverts commit 7da3fcc9b7306f2e241716aa26b518540f3e3471.
2025-10-06T7818: remove unneeded calls of get_cli_kernel_options causing regressionJohn Estabrook
The call of get_cli_kernel_options is made conditional to resolve T7818; remove later addition of unconditional calls causing regression.
2025-10-06Merge pull request #4770 from c-po/wlb-sudoDaniil Baturin
wlb: T7902: remove explicit calls to sudo
2025-10-06T7887: system_option: Add validation for memory hugepage-countNataliia Solomko
Move smoke test for hugepages to test_vpp.py
2025-10-02Merge pull request #4769 from c-po/pki-acme-listen-addressJohn Estabrook
pki: T7885: check_port_availability() can't be used during system boot
2025-10-02wlb: T7902: remove explicit calls to sudoChristian Breunig
Configuration mode scripts are executed under the context of vyos-configd or vyos-commitd and thus do not need an explicit call to sudo. Permission handling is done outside.
2025-10-02container: T7863: Add user-defined MAC option for containers (#4762)l0crian1
2025-10-02pki: T7885: add openconnect to the list of used_by servicesChristian Breunig
2025-10-02pki: T7885: "renew certbot force" now supports setting up ACME from scratchChristian Breunig
Assume someone deleted the certbot_config folder, "renew certbot force" alone will not work as there are no configuration files left to know what to renew. Re-run CLI PKI helper to initially request certificates via ACME again. This "should" (famous last words) never be the case - but sometimes the universe has a bad time.
2025-10-02pki: T7885: check_port_availability() can't be used during system bootChristian Breunig
A call to check_port_availability() will always fail during system boot when listen_address is set and the address is not yet assigned to an interface. This happens b/c PKI subsystem is called prior to any inteface - e.g. ethernet - and thus the OS will always be unable to bind() a socket() to a non existing IP address.
2025-10-02Merge pull request #4739 from roedie/T7852Daniil Baturin
T7852: Switch to yescrypt password encryption
2025-10-02Merge pull request #4761 from natali-rs1985/T7884Daniil Baturin
T7884: VPP: dependency issue when set interface address and NAT44 address translation interface in one commit
2025-10-02Merge pull request #4764 from alexandr-san4ez/T7895-currentDaniil Baturin
vyos-dhcp: T7895: rename "DHCP Server" column to "Lease Time"
2025-10-02T7884: VPP: dependency issue when set interface address and NAT44 address ↵Nataliia Solomko
translation interface in one commit Moved dependencies for NAT to be executed after interfaces_ethernet, and all settings for the interface (including interface address) have already been applied
2025-10-02op-mode: T7868: fix op-cmd "reset ip arp table" is not workingawolfnet
2025-10-01Merge pull request #4734 from alexandr-san4ez/T4251-currentJohn Estabrook
syslog: T4251: Add TLS support to syslog
2025-10-01vyos-dhcp: T7895: rename "DHCP Server" column to "Lease Time"vanitypurpose
(cherry picked from commit e7c8867b75f6855e93792ddd255bf0ad2b2464b1)
2025-09-30Merge pull request #4763 from c-po/config-boot-motdChristian Breunig
boot-config-loader: T7889: Inform user during login of config-load issues
2025-09-30boot-config-loader: T7889: Inform user during login of config-load issuesChristian Breunig
As T7885 turns out to be a config load related bug the user will only be informed when entering conf mode that something is off. vyos@vyos:~$ configure WARNING: There was a config error on boot: saving the configuration now could overwrite data. You may want to check and reload the boot config More information is displayed on tty0 of the router - but not everyone has access to tty0. This change is about copying the message displayed on tty0 to the MOTD system.
2025-09-30syslog: T4251: Add TLS support to syslogOleksandr Kuchmystyi
Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes. This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.
2025-09-30Merge pull request #4744 from sarthurdev/kea-vrfDaniil Baturin
kea: T7854: Use helper for Kea VRF systemd units
2025-09-29Merge pull request #4754 from natali-rs1985/T7815Viacheslav Hletenko
T7815: VPP: NAT44 rules with port requires protocol specification and vice versa
2025-09-26bgp: T7760: improfe verify() logic on default VRF removalChristian Breunig
After commit 85fe32f0e ("bgp: T7760: remove per vrf instance system-as node") BGP isntances running in a VRF will no longer have a system-as node set. This results in "set vrf name <name> protocols bgp" becomeing a valid CLI path. When reading in the config dict - we now might see {'protocols': {'bgp': {}} as a valid entry. We do need to account for this empty dictionary.
2025-09-26migrator: T7760: remove debug print statementChristian Breunig
2025-09-26image: T5455: Add migration of SSH `known_hosts` files during image upgradeOleksandr Kuchmystyi
During upgrade, the script now checks if any `known_hosts` files exist. If so, it prompts the user to save these SSH fingerprints, and upon confirmation, copies the files to the new image persistence directory.
2025-09-25Merge pull request #4745 from jestabro/catch-frr-exceptionViacheslav Hletenko
T7855: redirect stdout and catch exceptions on frr render
2025-09-25T7815: VPP: NAT44 rules with port requires protocol specification and vice versaNataliia Solomko
2025-09-25Merge pull request #4753 from jestabro/config-save-sync-atomicDaniil Baturin
T7709: Add file sync and atomic write to config save script
2025-09-25Merge pull request #4669 from sarthurdev/tpm_fixesDaniil Baturin
tpm: T7713: T7717: Multiple TPM fixes
generated by cgit v1.2.3 (git 2.39.1) at 2026-07-16 19:16:05 +0000