Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-03-11 | T5872: re-write exit hook to always regenerate config | Lucas Christian | |
2024-03-10 | T5872: further fixes to ipsec dhcp exit hook | Lucas Christian | |
2024-03-10 | T5872: fix ipsec dhclient exit hook | Lucas Christian | |
2024-03-10 | T5872: ipsec remote access VPN: support dhcp-interface. | Lucas Christian | |
2024-03-10 | Merge pull request #3113 from c-po/firewall-T6071 | Daniil Baturin | |
firewall: T6071: truncate rule description field to 255 characters | |||
2024-03-10 | firewall: T6071: truncate rule description field to 255 characters | Christian Breunig | |
2024-03-09 | Merge pull request #3106 from sarthurdev/T6102 | Daniil Baturin | |
dhcp: T6102: Fix clear DHCP lease op-mode | |||
2024-03-07 | Merge pull request #2966 from HollyGurza/T6020 | Daniil Baturin | |
vrrp: T6020: vrrp health-check script not applied correctly | |||
2024-03-07 | Merge pull request #1740 from sarthurdev/tpm_luks | Daniil Baturin | |
config: T4919: Add support for encrypted config with TPM | |||
2024-03-07 | config: T4919: Support copying encrypted volumes during install | sarthurdev | |
Re-implements https://github.com/vyos/vyatta-cfg-system/pull/194 | |||
2024-03-07 | config: T4919: mount/unmount encrypted config on VyOS start/stop | sarthurdev | |
Re-implements https://github.com/vyos/vyatta-cfg/pull/54 | |||
2024-03-07 | config: T4919: Add support for encrypted config file with TPM | sarthurdev | |
2024-03-06 | dhcp: T6102: Fix clear DHCP lease op-mode | sarthurdev | |
* Add `clear dhcpv6-server lease` * Standardize using vyos.opmode | |||
2024-03-06 | Merge pull request #3088 from nicolas-fort/T6075 | Daniil Baturin | |
T6075: firewall and NAT: check if interface-group exists when using them in firewall|nat rules. | |||
2024-03-06 | Merge pull request #3085 from Apachez-/T6096 | Christian Breunig | |
T6096: Config commits are not synced properly because 00vyos-sync is deleted by vyos-router | |||
2024-03-05 | Merge pull request #3089 from jestabro/allocate-under-lock | John Estabrook | |
http-api: T6069: fix allocation outside of thread lock | |||
2024-03-05 | T2447: add configurable kernel boot option 'disable-power-saving' | Christian Breunig | |
Lower available CPU C states to a minimum if this option set. This will set Kernel commandline options "intel_idle.max_cstate=0 processor.max_cstate=1". | |||
2024-03-05 | http-api: T6069: fix allocation outside of thread lock | John Estabrook | |
2024-03-05 | T6075: firewall and NAT: check if interface-group exists when using them in ↵ | Nicolas Fort | |
firewall|nat rules. | |||
2024-03-04 | T6096: Config commits are not synced properly because 00vyos-sync is deleted ↵ | Apachez | |
by vyos-router | |||
2024-03-04 | Merge pull request #3079 from sever-sever/T6084 | Daniil Baturin | |
T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug | |||
2024-03-04 | T6084: Add NHRP dependency for IPsec and fix NHRP empty config bug | Viacheslav Hletenko | |
If we have any `vpn ipsec` and `protocol nhrp` configuration we get the empty configuration file `/run/opennhrp/opennhrp.conf` after rebooting the system. Use config dependency instead of the old `resync_nhrp` function fixes this issue | |||
2024-03-03 | ospfv3: T6087: add support to redistribute IS-IS routes | Christian Breunig | |
2024-03-02 | ospf: T5717: sync code with ospfv3 implementation | Christian Breunig | |
2024-03-02 | ospfv3: T5717: allow metric and metric-type on redistributed routes | Christian Breunig | |
Example: vyos@vyos# set protocols ospfv3 redistribute bgp Possible completions: metric OSPF default metric metric-type OSPF metric type for default routes (default: 2) route-map Specify route-map name to use | |||
2024-03-01 | Merge pull request #3061 from sarthurdev/T6079_current | Christian Breunig | |
dhcp-server: T6079: Disable duplicate static-mappings on migration | |||
2024-03-01 | smoketest: T6079: probe for duplicate IP address static-mapping | Christian Breunig | |
2024-03-01 | vrrp: T6020: vrrp health-check script not applied correctly in keepalived.conf | khramshinr | |
Added health-check to sync-group in CLI Don't use instance health-check when instance in sync group member Disallow wrong healtch-check configurations New smoke test | |||
2024-02-29 | Merge pull request #2659 from jestabro/remove-trivial-redundancies | John Estabrook | |
configdep: T5839: remove trivially redundant config dependency calls | |||
2024-02-29 | Merge pull request #3056 from natali-rs1985/T5504-current | Christian Breunig | |
T5504: Keepalived VRRP ability to set more than one peer-address | |||
2024-02-29 | Merge pull request #3060 from c-po/banner | Daniil Baturin | |
banner: T6077: implement ASCII contest winner default logo | |||
2024-02-29 | vrrp: T6020: vrrp health-check script not applied correctly in keepalived.conf | khramshinr | |
Added health-check to sync-group in CLI Don't use instance health-check when instance in sync group member Disallow wrong healtch-check configurations New smoke test | |||
2024-02-29 | dhcp-server: T6079: Disable duplicate static-mappings on migration | sarthurdev | |
2024-02-28 | dhcp-server: T6079: Increment Kea migrator versions | sarthurdev | |
2024-02-28 | configdep: T5660: remove global redundancies under vyos-configd | John Estabrook | |
2024-02-28 | banner: T6077: implement ASCII contest winner default logo | Christian Breunig | |
Implement VyOS ASCII art contest winners logo as the default for our MOTD | |||
2024-02-28 | Merge pull request #3055 from sarthurdev/T6073 | Christian Breunig | |
vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is required | |||
2024-02-28 | T5504 Keepalived VRRP ability to set more than one peer-address | Nataliia Solomko | |
2024-02-27 | vrf: conntrack: T6073: Populate VRF zoning chains only while conntrack is ↵ | sarthurdev | |
required | |||
2024-02-27 | container: T6074: do not allow deleting images which have a container running | Christian Breunig | |
The current VyOS container image manipulation "delete container image" command allows force removal of container images - even if they still have a container running. Drop the --force option from the op-mode script. vyos@vyos:~$ delete container image 2636705a815a Error: image used by 6adb0175d47f.. image is in use by a container: consider listing external containers and force-removing image | |||
2024-02-24 | Merge pull request #3046 from c-po/container-T6060 | Christian Breunig | |
container: T6060: support removing all container images at once via op-mode | |||
2024-02-24 | container: T6060: support removing all container images at once via op-mode | Christian Breunig | |
cpo@LR1.wue3:~$ show container image REPOSITORY TAG IMAGE ID CREATED SIZE docker.io/library/busybox latest 3f57d9401f8d 5 weeks ago 4.5 MB docker.io/jacobalberty/unifi v7.5 f6df690d6c67 4 months ago 827 MB docker.io/jacobalberty/unifi v7.4 7838b75ef7b9 7 months ago 786 MB cpo@LR1.wue3:~$ delete container image Possible completions: 3f57d9401f8d Delete container image 7838b75ef7b9 all f6df690d6c67 cpo@LR1.wue3:~$ delete container image all cpo@LR1.wue3:~$ show container image REPOSITORY TAG IMAGE ID CREATED SIZE | |||
2024-02-24 | container: T5909: move registry login to op-mode | Christian Breunig | |
It does not make sense to perform the "podman login" command when setting up containers, as images are not automatically pulled in from the registry - due to issues with the default route during startup. The same issue manifests in "podman login" where we can not login to a registry unless there is a default route present. This commit changes the behavior that the container registry is part of the configuration, but it is only referenced during "add container image" and thus never during system boot. | |||
2024-02-19 | event-handler: T6048: handling exception when _PID is not found | gavol | |
2024-02-17 | bridge: T6043: do not call vxlan dependency if interface does not exist (yet) | Christian Breunig | |
In order to keep the proper priority list during system startup and on initial setup/commit for this feature the dependent VXLAN code should not be called, if the interface in question does not exist (yet). | |||
2024-02-17 | Merge pull request #3019 from c-po/login-T5972 | Christian Breunig | |
login: T5972: add possibility to disable individual local user accounts | |||
2024-02-16 | T3722: Fixed L-Time in 'show vpn ike sa' command | aapostoliuk | |
Fixed L-Time in 'show vpn ike sa' command | |||
2024-02-16 | login: T5972: add possibility to disable individual local user accounts | Christian Breunig | |
* set system login user <name> disable | |||
2024-02-16 | Merge pull request #3016 from c-po/nht | Christian Breunig | |
T6001: add option to disable next-hop-tracking resolve-via-default | |||
2024-02-16 | T6001: add option to disable next-hop-tracking resolve-via-default | Christian Breunig | |
* set system ip nht no-resolve-via-default * set system ipv6 nht no-resolve-via-default |