summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2024-12-02Merge pull request #4212 from c-po/T6926-sudoDaniil Baturin
sudo: T6926: remove spam messages to syslog
2024-12-02config-mgmt: T6925: return from verify function on config object None (#4213)John Estabrook
2024-12-01sudo: T6926: remove spam messages to syslogChristian Breunig
Right now every command that's executed via op-mode/conf-mode is logged with a session entry/exit and command execution into syslog. sudo[1082396]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/bin/mv /tmp/config.boot.1082388 /opt/vyatta/etc/config/archive/config.boot sudo[1082396]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002) sudo[1082396]: pam_unix(sudo:session): session closed for user root sudo[1082399]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/sbin/logrotate -f -s /opt/vyatta/etc/config/archive/lr.state /opt/vyatta/etc/config/archive/lr.conf sudo[1082399]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002) sudo[1082399]: pam_unix(sudo:session): session closed for user root This heavily bloats remote logging services - remove the log entries
2024-12-01Merge pull request #4209 from natali-rs1985/T6770Christian Breunig
op_mode: T6770: Fix op command "show bridge vni"
2024-11-29Merge pull request #4204 from sarthurdev/T6809Simon
2024-11-28multicast: T6920: static multicast routing throws TypeError (#4210)Nataliia S.
2024-11-27op_mode: T6770: Fix op command "show bridge vni"Nataliia Solomko
2024-11-26Merge pull request #4196 from natali-rs1985/T6872Christian Breunig
ipoe_server: T6872: Add the ability to configure LUA scripts and username
2024-11-25Merge pull request #4203 from sarthurdev/T6692Simon
dhcp: T6692: Fix range options not present when `exclude` is used
2024-11-22pki: T6809: Support system install of CA certificatessarthurdev
2024-11-21pki: T3642: Minimize `node_changed` codesarthurdev
2024-11-21dhcp: T6692: Fix range options not present when `exclude` is usedsarthurdev
Add smoketest to verify range options are present with `exclude`
2024-11-21ipoe_server: T6872: Add the ability to configure LUA scripts and usernameNataliia Solomko
2024-11-21Merge pull request #4202 from jestabro/drop-legacy-show-configuration-filesDaniil Baturin
op-mode: T6900: remove uninformative 'show configuration files'
2024-11-21T6806: Rework QoS Policy for HFSC Shaper (#4181)Roman Khramshin
- Removed default `m1` and `m2` values from interface definitions - Adjusted filter priorities for shapers - Fixed SFQ qdisc and HFSC class creation to fully support `m1`, `d`, and `m2` parameters - Added validation logic similar to VyOS 1.3 to improve error handling and user experience
2024-11-21T6796: QoS: match filter by interface(iif) (#4188)Roman Khramshin
2024-11-20op-mode: T6900: remove uninformative 'show configuration files'John Estabrook
The legacy node and behavior under 'show configuration files' is not useful as is; remove node and drop script to allow for a useful repurpose in the future.
2024-11-20Merge pull request #4197 from jestabro/multipart-msg-outputDaniil Baturin
configd: T6899: use multipart message instead of extra exchange
2024-11-20T6790: QoS: Improve CAKE Policy (#4173)Roman Khramshin
- Fixed handling of flow isolation parameters. - Corrected support for `nat` and `nonat` in flow isolation. - Extended RTT values to cover the full range supported by `tc`. - Make migration script 2-to-3 qos
2024-11-19T6490: Allow creation of wireguard interfaces without requiring peers (#4194)sskaje
* T6490: Allow creation of wireguard interfaces without requiring peers
2024-11-19configd: T6899: use multipart message instead of extra exchangeJohn Estabrook
2024-11-18T6884: adds mtu option for container networksNicolas Vollmar
2024-11-15Merge pull request #4191 from HollyGurza/T6801Christian Breunig
T6801: QoS: Policy rate-control is broken by default
2024-11-15T6878: Stop conntrack logging servicekhramshinr
2024-11-14T6801: QoS: Policy rate-control is broken by defaultkhramshinr
- Fixed unhandled exception for policy rate-control without params
2024-11-08Merge pull request #4179 from natali-rs1985/T3501-currentDaniil Baturin
T3501: Allow using more than one tuned profile
2024-11-07Merge pull request #4151 from natali-rs1985/T6695Daniil Baturin
T6695: Machine-readable operational mode support for traceroute
2024-11-07T3501: Allow using more than one tuned profileNataliia Solomko
2024-10-24Merge pull request #4155 from HollyGurza/T4583Christian Breunig
T4583: Rewrite VRRP op-mode to vyos.opmode format
2024-10-21Merge branch 'current' into T6695Nataliia S.
2024-10-19Merge pull request #4165 from natali-rs1985/T4914-currentChristian Breunig
pki: T4914: Rewrite the PKI op mode in the new style
2024-10-18pki: T4914: reformat file by linter rulesNataliia Solomko
2024-10-18pki: T4914: Rewrite the PKI op mode in the new styleNataliia Solomko
2024-10-17T4583: Rewrite VRRP op-mode to vyos.opmode formatkhramshinr
2024-10-17T973: add basic frr_exporter implementation (#4150)Robert Göhler
2024-10-11T6695: normalize formattingNataliia Solomko
2024-10-11T6695: Machine-readable operational mode support for tracerouteNataliia Solomko
2024-10-11T6712: Add nonproduction banner (#4149)mergify[bot]
(cherry picked from commit 3abe7c72c95c3d9b825db08b092c555786e9fbcf) Co-authored-by: Viacheslav Hletenko <v.gletenko@vyos.io>
2024-10-09haproxy: T6745: Rename `reverse-proxy` to `haproxy`sarthurdev
2024-10-08Merge pull request #4128 from jestabro/commit-confirm-soft-rollbackJohn Estabrook
config-mgmt: T5976: add option for commit-confirm to use 'soft' rollback
2024-10-07config-mgmt: T5976: move commit-confirm revert action to subnodeJohn Estabrook
2024-10-07Merge pull request #4124 from dmbaturin/T6740-set-to-config-converterJohn Estabrook
cli: T6740: add a converter from set commands to config
2024-10-07cli: T6740: set_tag on created paths and add parse step for orderingJohn Estabrook
Signed-off-by: Daniil Baturin <daniil@baturin.org>
2024-10-07Merge pull request #3938 from talmakion/feature/T6430-local-pbrChristian Breunig
pbr: T6430: Local IP rules targeting VRFs by name as well as route table IDs
2024-10-07pbr: T6430: Local IP rules routing into VRFs by nameAndrew Topp
* This is the `policy local-route*` part of T6430, manipulating ip rules, another PR covers firewall-backed `policy route*` for similar functionality * Local PBR (policy local-route*) can only target table IDs up to 200 and the previous PR to extend the range was rejected * PBR with this PR can now also target VRFs directly by name, working around targeting problems for VRF table IDs outside the overlapping 100-200 range * Validation ensures rules can't target both a table ID and a VRF name (internally they are handled the same) * Relocated TestPolicyRoute.verify_rules() into VyOSUnitTestSHIM.TestCase, extended to allow lookups in other address families (IPv6 in the new tests). verify_rules() is used by original pbr and new lpbr smoketests in this PR.
2024-10-07Merge pull request #4118 from c-po/acme-ca-certDaniil Baturin
pki: T6481: auto import ACME certificate chain into CLI
2024-10-06pki: T6481: auto import ACME certificate chain into CLIChristian Breunig
When using an ACME based certificate with VyOS we provide the necessary PEM files opaque in the background when using the internal tools. This however will not properly work with the CA chain portion, as the system is based on the "pki certificate <name> acme" CLI node of a certificate but CA chains reside under "pki ca". This adds support for importing the PEM data of a CA chain issued via ACME into the "pki ca AUTOCHAIN_<name> certificate" subsystem so it can be queried by other daemons. Importing the chain only happens, when the chain was not already added manually by the user. ACME certificate chains that are automatically added to the CLI are all prefixed using AUTOCHAIN_certname so they can be consumed by any daemon. This also adds a safeguard when the intermediate CA changes, the referenced name on the CLI stays consitent for any pending daemon updates.
2024-10-06Merge pull request #4131 from c-po/static-error-msgChristian Breunig
static: T4283: fix missing f'ormat string
2024-10-05op-mode: T6753: Fix json output for mtr / monitor traceroute (#4122)Nataliia S.
2024-10-05static: T4283: fix missing f'ormat stringChristian Breunig
This fixes the error message: Can not use both blackhole and reject for prefix "{prefix}"! Added in commit bb78f3a9ad28 ("static: T4283: support "reject" routes - emit an ICMP unreachable when matched")
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-29 14:06:13 +0000