summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-04-18syslog: T7367: use generic systemd syslog.service over rsyslog.serviceChristian Breunig
2025-04-18syslog: T7367: ensure rsyslog is registered as default systemd syslog serviceChristian Breunig
Systemd states: The default syslog implementation should make syslog.service a symlink to itself, so that this socket activates the right actual syslog service.
2025-04-17Merge pull request #4453 from c-po/kernel-cmdline-T7327Christian Breunig
grub: T7327: honor "system option kernel" settings during image upgrade
2025-04-16firewall: T7358: add offload option to global state policyl0crian1
Since the jump to the global state chain is inserted before all rules, it wasn't possible to use offload with the global state policies This commit adds a new chain for offloaded traffic in the forward chain and jumps to that chain. Please enter the commit message for your changes. Lines starting
2025-04-15grub: T7327: honor "system option kernel" settings during image upgradeChristian Breunig
When performing an image upgrade and Linux Kernel command-line option that should be passed via GRUB to the Linux Kernel are missing on the first boot. This is because when generating the GRUB command-line via the op-mode scripts the CLI nodes defining the options are not honored. This commit re-implements the code-path in op-mode which generates the strings passed via GRUB to the Linux Kernel command-line. NOTE: If (for a yet unknown reason) a Kernel command-line option string changes during a major - or minor - upgrade of the Linux Kernel, we will need to adapt that logic and possibly call a helper from within the NEW updated image rootfs. Thus we can ship future information back into the past like the "Grays Sports Almanac" from Back to the Future Part II.
2025-04-15Merge pull request #4412 from sarthurdev/kea_2.6Daniil Baturin
kea: T7281: Add ping-check, use built-in option for classless static routes
2025-04-15Merge pull request #4214 from dmbaturin/T6919-good-bye-fastnetmonDaniil Baturin
ids: T7241: remove Fastnetmon from the base system
2025-04-15Merge pull request #4449 from c-po/netplug-T7353Daniil Baturin
T7353: T7360: netplug: behavior change 1.3.8 -> 1.4 when interface with DHCP address looses carrier
2025-04-15T7364: Fixing no error when config is set to a peer group directlyLandry JUGE
2025-04-14netplug: T7360: DHCPv6 address is not cleared when interface goes oper-downChristian Breunig
When an interface goes down - e.g. cable unplugged - the DHCPv6 assigned IPv6 address is not removed from said interface. We should provide the same behavior as with IPv4. IPv6 address should be removed and dhcpv6 client restarted once the interface goes operational up again.
2025-04-14netplug: T7353: bugfix DHCP client not stopped when interface goes downChristian Breunig
The initial rewrite of vyos-netplug-dhcp-client by me tried to outsmart the DHCP client implementation by re-using vyos.ifconfig.Interface(). This added a regression where an interface loosing it's carrier no longer deconfigured it's IP address. This was a change in behavior form VyOS 1.3. In addition a bug is fixed as when a VLANs interface parent looses it's carrier we now also stop the DHCP client process. This script is now back to simply starting/stopping the DHCP client process.
2025-04-14Merge pull request #4440 from sarthurdev/fqdn_cacheSimon
firewall: T7333: Use separate cache keys per inet family
2025-04-14T7364: Fixing Route reflector client check not working for peer-groupHanarion
2025-04-14Merge pull request #4450 from c-po/ansi-bold-T7356Viacheslav Hletenko
vyos-router: T7356: unset ANSI bold control character during boot
2025-04-14Merge pull request #4451 from jestabro/check-image-name-reuseDaniil Baturin
T7359: confirm image name is available before proceeding with image installation
2025-04-14ids: T7241: remove Fastnetmon from the base systemDaniil Baturin
It will eventually be moved to an addon
2025-04-14kea: T7281: No longer uses control agent for HAsarthurdev
2025-04-14kea: T7281: Remove `ping-check` from Kea migratorsarthurdev
2025-04-13T7359: confirm image name is available before acceptingJohn Estabrook
An attempt to reuse the name of an existing installed image should prompt the user to re-enter a name, rather than allowing the installation to fail.
2025-04-13vyos-router: T7356: unset ANSI bold control character during bootChristian Breunig
With the Debian Upgrade from buster to bookworm during the 1.3 -> 1.4 cycle we inherited a non nice looking ANSI bold setting on the terminal. The ANSI bold control character is reset "\033[0m" in this commit.
2025-04-13netplug: T7353: define proper systemd serviceChristian Breunig
Netplug daemon is started last after all interfaces got initialized to properly monitor them for up/down events
2025-04-13T7353: honor service startup order for vyos-grub-updateChristian Breunig
vyos-grub-update service must have been started prior reaching systemd vyos.target.
2025-04-13T7355: cleanup unused Python3 importsChristian Breunig
Some unused import statements sneaked into the codebase. This is about cleaning them up
2025-04-11Merge pull request #4443 from c-po/netplug-T7346Christian Breunig
netplug: T7346: only call interface helpers if interface is not removed
2025-04-10netplug: T7346: only call interface helpers if interface is not removedChristian Breunig
When an interface is removed from the system also netplug is triggered. It makes no sense to call vyos.ifconfig.Interface() and update it's configuration when the interface was just recently removed. This would in fact re-add an interface temporarily in it's worst case.
2025-04-10mtu_value: T7316:commit validation for interfaces when mtu configured <1200srividya0208
2025-04-10Merge pull request #4410 from sskaje/T7277Christian Breunig
dns: T7277: fix service/dns/forwarding/dhcp not parsed
2025-04-10Merge pull request #4435 from jestabro/commit-dry-runDaniil Baturin
T7302: add vyos-commitd support for commit dry-run
2025-04-10Merge pull request #4422 from l0crian1/T7254-add-stp-op-commandsChristian Breunig
T7254: op-mode: Add spanning-tree op-mode commands
2025-04-08firewall: T7333: Use separate cache keys per inet familysarthurdev
Cache keys were shared by IPv4/IPv6 resolution, causing script to try populate ipv6 sets with ipv4 addresses
2025-04-08T7302: implement commit dry-run for vyconfd/commitdJohn Estabrook
2025-04-08T7315: Change CLI fot VPP NAT (#25)Nataliia S.
New CLI ``` set vpp nat44 static rule 10 outside-interface 'eth0' set vpp nat44 static rule 10 inside-interface 'eth1' set vpp nat44 static rule 10 external address 192.168.122.10 set vpp nat44 static rule 10 external port 6545 # optional set vpp nat44 static rule 10 protocol tcp|udp|icmp|all # optional, defaults to "all" set vpp nat44 static rule 10 local address 100.64.0.10 set vpp nat44 static rule 10 local port 64010 # optional ```
2025-04-08Merge pull request #4427 from jestabro/commit-postDaniil Baturin
T7292: add Python module client library for vyconfd
2025-04-04T7314: firewal op-mode: implement better detail view of remote-groups and ↵Mark Hayes
group members
2025-04-03T7272: drop unneeded fieldsJohn Estabrook
2025-04-02T7290: Fix VPN IPsec log level processingViacheslav Hletenko
Fix the IPsec log level option processing set vpn ipsec log level '2' Render Jinja2 template to generate correct log for IPsec for the file /etc/strongswan.d/charon-systemd.conf
2025-04-01T7283: VPP add static NAT support (#24)Nataliia S.
* T7283: VPP add static NAT support Add static mapping NAT implementation ``` set vpp nat44 static rule 10 outbound-interface 'eth0' set vpp nat44 static rule 10 inbound-interface 'eth1' set vpp nat44 static rule 10 destination address 192.168.122.10 # optional, if not set outbound interface ip address is used set vpp nat44 static rule 10 destination port 6545 # optional set vpp nat44 static rule 10 protocol tcp|udp|icmp|all # optional, defaults to "all" set vpp nat44 static rule 10 translation address 100.64.0.10 set vpp nat44 static rule 10 translation port 64010 # optional ``` * Improve help strings (Daniil Baturin) --------- Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-04-01Merge pull request #4428 from dmbaturin/T7159-conditional-nonproduction-bannerChristian Breunig
login: T7159: limit the "not a production version" to dev builds
2025-04-01Merge pull request #4429 from dmbaturin/T7301-goodbye-gnupgChristian Breunig
installer: T7301: remove support for GnuPG signatures
2025-03-31installer: T7301: remove support for GnuPG signaturesDaniil Baturin
2025-03-31login: T7159: limit the "not a production version" to dev buildsDaniil Baturin
(as in, display it only if the build_type version data field is not "release")
2025-03-31Merge pull request #4424 from c-po/acme-race-T7299Christian Breunig
pki: T7299: race condition for acme requested certificates / CA chain
2025-03-30Update src/op_mode/stp.py l0crian1
Updated language of "VLANs are enabled/disabled" to "VLANs enabled/disabled" Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-03-30Update src/op_mode/stp.py l0crian1
Updated language of amRoot to " (This bridge is the root)" Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-03-30pki: T7299: race condition for acme requested certificates / CA chainChristian Breunig
When using the VyOS internal PKI subsystem to request a certificate using ACME, the issuer CA is not automatically imported in the PKI subsystem on the first run due to a race condition. Issue is fixed by adding all newly requested and granted ACME certificates to the list of ACME certificates "on disk" which are used to extract the issuing CA certificate.
2025-03-28T7294: preserve /config symlinks on image upgradeJohn Estabrook
The service certbot expects symbolic links for /config/auth/letsencrypt/live/<cert_name>/*.pem however, the default behavior of copytree copies the linked files during image upgrade. Set copytree argument to preserve symlinks.
2025-03-28T7254: op-mode: Add Spanning Tree op-mode commandsl0crian1
Created stp.py to create output for spanning-tree info Modified show-bridge.xml.in to add: show bridge spanning-tree show bridge spanning-tree detail show bridge <interface> spanning-tree show bridge <interface> spanning-tree detail
2025-03-28geoip: T5636: Add geoip for policy route/route6sskaje
2025-03-25Merge pull request #4413 from oniko94/fix/T7278-fix-cracklib-dep-buildJohn Estabrook
T7278: Remove cracklib hack from postconfig script template
2025-03-25Merge pull request #4326 from Embezzle/T5493Daniil Baturin
firewall: T5493: Implement remote-group
generated by cgit v1.2.3 (git 2.39.1) at 2026-07-17 11:08:24 +0000