| Age | Commit message (Collapse) | Author |
|---|
|
|
|
In case when there is no local/remote prefix configured in a tunnel settings,
a protocol configured for such tunnel is ignored.
The correct way to generate the configuration is to set the prefix
to `dynamic` if it was not set. The correct config for the described case is:
```
local_ts = dynamic[gre/]
remote_ts = dynamic[gre/]
```
|
|
T7649: Fix use hyphens instead of underscores for kernel options
|
|
The ConfigTree for operation mode uses hyphens instaed of
underscores.
Fix kernel options during image upgrade.
|
|
|
|
T7649: Add missed system kernel options for image installer
|
|
Running pylint --errors-only ...
************* Module interfaces
src/op_mode/interfaces.py:42:54: E1101: Instance of '_IO' has no 'fileno' member (no-member)
************* Module show_techsupport_report
src/op_mode/show_techsupport_report.py:62:50: E1101: Instance of '_IO' has no 'fileno' member (no-member)
|
|
T7489: Fix output state of ipsec passthrough child
|
|
Add missed system kernel options to the image_installer do not
lose configured kernel options per an image upgrade.
|
|
Show state of passthrough tunnels as always up.
Passthrough children of connection have PASS mode but have no
sa and are not shown in vici list_sas.
Fix by passing mode from vici list_connections to _get_child_sa_state
and always return 'up' for child with PASS mode.
|
|
|
|
|
|
|
|
|
|
Remove duplicate function definition vyos.utils.file.chown which was also
provided by vyos.utils.permission.chown.
|
|
************* Module storage
src/op_mode/storage.py:32:11: E0602: Undefined variable '_get_system_storage' (undefined-variable)
src/op_mode/storage.py:52:11: E0602: Undefined variable 'output' (undefined-variable)
|
|
************* Module pki
src/op_mode/pki.py:459:8: E1128: Assigning result of a function call, where
the function returns None (assignment-from-none)
|
|
|
|
As the python netifaces module is written in C - we can not inspect any import
line as the linter does not see it. Disable the warnings here.
|
|
|
|
Fix errors introduced by refactoring for modprobe/rmmod jool module.
|
|
T7625: load-balancing: prune limit key if not configured
|
|
|
|
|
|
|
|
|
|
|
|
ipsec: T7545: Fix show vpn debug peer
|
|
|
|
T7499: update config merge tools
|
|
|
|
Fix re for searching of peers in /etc/swanctl/swanctl.conf
```
search = rf'^[\s]*(peer_{peer}_(tunnel_[\d]+|vti)).*'
```
Changed to
```
search = rf'^[\s]*({peer}-(tunnel-[\d]+|vti))[\s]*{{'
```
Added message
```
print(f'\n### {command} ###')
```
so that output is not empty when `/usr/sbin/ipsec statusall`
shows nothing
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Fix for service monitoring prometheus stops unconfigured services.
Check if the service is in active state before stop it.
|
|
Refactor the blocking code in config handlers (endpoints /configure,
/config-file) to run in a threadpool; this allows defining the handler
as async. Consequently, the handler itself runs in the main thread,
avoiding the need for thread registration for libvyosconfig function
calls.
|
|
T7591: remove copyright years from source files
|
|
T7587: Fix uuidgen warning if DMI doesn't have product_serial or it empty
|
|
* Adding support for hex, octal and binary integers (decimal-only floats)
* Defaults retain current parameter and parsing behaviour
* Any radix option overrides default assumption of "--decimal"
* Radix options are inclusive together
* As number_of_string is used for parameters, param parsing is overridden
to always allow un-prefixed decimals, for convenience.
|
|
The legal team says years are not necessary so we can go ahead with it, since
it will simplify backporting.
Automatically removed using: git ls-files | grep -v libvyosconfig | xargs sed -i -E \
's/^# Copyright (19|20)[0-9]{2}(-[0-9]{4})? VyOS maintainers.*/# Copyright VyOS maintainers and contributors <maintainers@vyos.io>/g'
In addition we will error-out during "make" if someone re-adds a legacy
copyright notice
|
|
* For VRF create/delete:
* Simple dquoting, as before, was parsed away by the shell
* Just escaping the double quotes could cause issues with the shell mangling
VRF names (however unlikely)
* Wrapping original quotes in shell-escaped single quotes is a quick & easy
way to guard against both improper shell parsing and string names being
taken as nft keywords.
* Firewall configuration:
* Firewall "interface name" rules support VRF ifnames and used them unquoted,
fixed for nft_rule template tags (parse_rule)
* Went through and quoted all iif/oifname usage by zones and interface
groups. VRF ifnames weren't available for all cases, but there is
no harm in completeness.
* For this, also created a simple quoted_join template filter to replace
any use of |join(',')
* PBR calls nft but doesn't mind the "vni" name - table IDs used instead
I may have missed some niche nft use-cases that would be exposed to this problem.
|
|
Write the health-status on the very first run of the script,
without waiting for any change in status, to show the current
state to the show command. In show command use the same api
to get the now timestamp as used in state change timestamp.
|
|
* T7424: Refactor and extend resource usage verification on commit for VPP CLI
T7424: Fix ruff errors
* T7424: Implement check for smoke tests runtime; reduce resource requirements for test environments
T7424: Fix errors in calculating the skipped and reserved CPU cores; Adjust default main heap size value.
* T7424: Refactor the CPU checks logic; Add total CPU usage check
T7424: Fix CPU reserve and skip cores calculations; Add total CPU usage check
T7424: Refactor smoketests to reflect new logic
* T7424: Refactor the CPU and memory checks logic
---------
Co-authored-by: oniko94 <onikolaiev94@outlook.com>
|
|
T7570: add missing list of scripts to be committed, needed for configdep
|
|
pki: T7574: add optional force argument to renew certbot-issued certificates
|
|
pki: T7573: fix TypeError when HAProxy is not in use
|
