summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-04-24Merge pull request #4414 from markh0338/op-fw-dyn-grpsDaniil Baturin
T7282: op-mode: show firewall group filtering and tab completion update
2025-04-24Merge pull request #4442 from srividya0208/T7316Daniil Baturin
T7316: Add MTU validation for interfaces with MTU less then 1200
2025-04-23Merge pull request #4465 from MattKobayashi/T6253Christian Breunig
dhclient: T6253: Respect `no-default-route`
2025-04-23Merge pull request #4460 from c-po/systemd-syslogViacheslav Hletenko
syslog: T7367: ensure rsyslog is registered as default systemd syslog service
2025-04-23Merge pull request #4461 from c-po/slaac-removalViacheslav Hletenko
interface: T7375: cleanup SLAAC assigned address and default route after removing SLAAC CLI configuration
2025-04-22Merge pull request #4419 from sskaje/T5636Daniil Baturin
geoip: T5636: Add geoip for policy route/route6
2025-04-22T6773: RFC-2136 support for Kea DHCP4 server (#4153)Alex Bukharov
2025-04-22sysctl: T7379: always disable IPv6 autoconf and accept_ra during startupChristian Breunig
2025-04-22T7282: op-mode: update firewall.py for proper group filteringMark Hayes
2025-04-22dhclient: T6253: Respect `no-default-route`Matthew Kobayashi
2025-04-18syslog: T7367: use generic systemd syslog.service over rsyslog.serviceChristian Breunig
2025-04-18syslog: T7367: ensure rsyslog is registered as default systemd syslog serviceChristian Breunig
Systemd states: The default syslog implementation should make syslog.service a symlink to itself, so that this socket activates the right actual syslog service.
2025-04-17Merge pull request #4453 from c-po/kernel-cmdline-T7327Christian Breunig
grub: T7327: honor "system option kernel" settings during image upgrade
2025-04-15grub: T7327: honor "system option kernel" settings during image upgradeChristian Breunig
When performing an image upgrade and Linux Kernel command-line option that should be passed via GRUB to the Linux Kernel are missing on the first boot. This is because when generating the GRUB command-line via the op-mode scripts the CLI nodes defining the options are not honored. This commit re-implements the code-path in op-mode which generates the strings passed via GRUB to the Linux Kernel command-line. NOTE: If (for a yet unknown reason) a Kernel command-line option string changes during a major - or minor - upgrade of the Linux Kernel, we will need to adapt that logic and possibly call a helper from within the NEW updated image rootfs. Thus we can ship future information back into the past like the "Grays Sports Almanac" from Back to the Future Part II.
2025-04-15Merge pull request #4412 from sarthurdev/kea_2.6Daniil Baturin
kea: T7281: Add ping-check, use built-in option for classless static routes
2025-04-15Merge pull request #4214 from dmbaturin/T6919-good-bye-fastnetmonDaniil Baturin
ids: T7241: remove Fastnetmon from the base system
2025-04-15Merge pull request #4449 from c-po/netplug-T7353Daniil Baturin
T7353: T7360: netplug: behavior change 1.3.8 -> 1.4 when interface with DHCP address looses carrier
2025-04-14netplug: T7360: DHCPv6 address is not cleared when interface goes oper-downChristian Breunig
When an interface goes down - e.g. cable unplugged - the DHCPv6 assigned IPv6 address is not removed from said interface. We should provide the same behavior as with IPv4. IPv6 address should be removed and dhcpv6 client restarted once the interface goes operational up again.
2025-04-14netplug: T7353: bugfix DHCP client not stopped when interface goes downChristian Breunig
The initial rewrite of vyos-netplug-dhcp-client by me tried to outsmart the DHCP client implementation by re-using vyos.ifconfig.Interface(). This added a regression where an interface loosing it's carrier no longer deconfigured it's IP address. This was a change in behavior form VyOS 1.3. In addition a bug is fixed as when a VLANs interface parent looses it's carrier we now also stop the DHCP client process. This script is now back to simply starting/stopping the DHCP client process.
2025-04-14Merge pull request #4440 from sarthurdev/fqdn_cacheSimon
firewall: T7333: Use separate cache keys per inet family
2025-04-14Merge pull request #4450 from c-po/ansi-bold-T7356Viacheslav Hletenko
vyos-router: T7356: unset ANSI bold control character during boot
2025-04-14Merge pull request #4451 from jestabro/check-image-name-reuseDaniil Baturin
T7359: confirm image name is available before proceeding with image installation
2025-04-14ids: T7241: remove Fastnetmon from the base systemDaniil Baturin
It will eventually be moved to an addon
2025-04-14kea: T7281: No longer uses control agent for HAsarthurdev
2025-04-14kea: T7281: Remove `ping-check` from Kea migratorsarthurdev
2025-04-13T7359: confirm image name is available before acceptingJohn Estabrook
An attempt to reuse the name of an existing installed image should prompt the user to re-enter a name, rather than allowing the installation to fail.
2025-04-13vyos-router: T7356: unset ANSI bold control character during bootChristian Breunig
With the Debian Upgrade from buster to bookworm during the 1.3 -> 1.4 cycle we inherited a non nice looking ANSI bold setting on the terminal. The ANSI bold control character is reset "\033[0m" in this commit.
2025-04-13netplug: T7353: define proper systemd serviceChristian Breunig
Netplug daemon is started last after all interfaces got initialized to properly monitor them for up/down events
2025-04-13T7353: honor service startup order for vyos-grub-updateChristian Breunig
vyos-grub-update service must have been started prior reaching systemd vyos.target.
2025-04-13T7355: cleanup unused Python3 importsChristian Breunig
Some unused import statements sneaked into the codebase. This is about cleaning them up
2025-04-11Merge pull request #4443 from c-po/netplug-T7346Christian Breunig
netplug: T7346: only call interface helpers if interface is not removed
2025-04-10netplug: T7346: only call interface helpers if interface is not removedChristian Breunig
When an interface is removed from the system also netplug is triggered. It makes no sense to call vyos.ifconfig.Interface() and update it's configuration when the interface was just recently removed. This would in fact re-add an interface temporarily in it's worst case.
2025-04-10mtu_value: T7316:commit validation for interfaces when mtu configured <1200srividya0208
2025-04-10Merge pull request #4410 from sskaje/T7277Christian Breunig
dns: T7277: fix service/dns/forwarding/dhcp not parsed
2025-04-10Merge pull request #4435 from jestabro/commit-dry-runDaniil Baturin
T7302: add vyos-commitd support for commit dry-run
2025-04-10Merge pull request #4422 from l0crian1/T7254-add-stp-op-commandsChristian Breunig
T7254: op-mode: Add spanning-tree op-mode commands
2025-04-08firewall: T7333: Use separate cache keys per inet familysarthurdev
Cache keys were shared by IPv4/IPv6 resolution, causing script to try populate ipv6 sets with ipv4 addresses
2025-04-08T7302: implement commit dry-run for vyconfd/commitdJohn Estabrook
2025-04-08Merge pull request #4427 from jestabro/commit-postDaniil Baturin
T7292: add Python module client library for vyconfd
2025-04-04T7314: firewal op-mode: implement better detail view of remote-groups and ↵Mark Hayes
group members
2025-04-03T7272: drop unneeded fieldsJohn Estabrook
2025-04-02T7290: Fix VPN IPsec log level processingViacheslav Hletenko
Fix the IPsec log level option processing set vpn ipsec log level '2' Render Jinja2 template to generate correct log for IPsec for the file /etc/strongswan.d/charon-systemd.conf
2025-04-01Merge pull request #4428 from dmbaturin/T7159-conditional-nonproduction-bannerChristian Breunig
login: T7159: limit the "not a production version" to dev builds
2025-04-01Merge pull request #4429 from dmbaturin/T7301-goodbye-gnupgChristian Breunig
installer: T7301: remove support for GnuPG signatures
2025-03-31installer: T7301: remove support for GnuPG signaturesDaniil Baturin
2025-03-31login: T7159: limit the "not a production version" to dev buildsDaniil Baturin
(as in, display it only if the build_type version data field is not "release")
2025-03-31Merge pull request #4424 from c-po/acme-race-T7299Christian Breunig
pki: T7299: race condition for acme requested certificates / CA chain
2025-03-30Update src/op_mode/stp.py l0crian1
Updated language of "VLANs are enabled/disabled" to "VLANs enabled/disabled" Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-03-30Update src/op_mode/stp.py l0crian1
Updated language of amRoot to " (This bridge is the root)" Co-authored-by: Christian Breunig <christian@breunig.cc>
2025-03-30pki: T7299: race condition for acme requested certificates / CA chainChristian Breunig
When using the VyOS internal PKI subsystem to request a certificate using ACME, the issuer CA is not automatically imported in the PKI subsystem on the first run due to a race condition. Issue is fixed by adding all newly requested and granted ACME certificates to the list of ACME certificates "on disk" which are used to extract the issuing CA certificate.
generated by cgit v1.2.3 (git 2.39.1) at 2026-01-27 05:40:30 +0000