summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2024-12-16vrf: T6747: ensure VNIs are unique on the systemChristian Breunig
2024-12-16frr: T6747: make daemon definitions re-usable for both conf-mode and smoketestsChristian Breunig
2024-12-16T6934: Add preshared key for zabbix-agent monitoring servicekhramshinr
- Allow configure preshared key for zabbix-agent - Added op mode command for generatre random psk secret - Removed duplicate xml definition for psk settings Configure authentication mode: ``` # set service monitoring zabbix-agent authentication mode Possible completions: pre-shared-secret Use a pre-shared secret key ``` Configure PSK Settings: ``` # set service monitoring zabbix-agent authentication psk Possible completions: id ID for authentication secret pre-shared secret key ``` Generate Random PSK: ``` $ generate psk random Possible completions: <Enter> Execute the current command size Key size in bytes ```
2024-12-15tacacs: T6613: dynamically build exclude_users list to avoid TACACS trafficChristian Breunig
There is no need to send local base OS accounts like root or daemon to the tacacs server. This will only make the CLI experience sluggish. Build up a dynamic list of user accounts to exclude from TACACS lookup.
2024-12-13Merge pull request #4176 from jestabro/vyconf-minimalJohn Estabrook
T6718: use the vyconf daemon for validation of set commands
2024-12-11op_mode: T6767: Check latest image version in VRF context for "add system ↵Nataliia Solomko
image latest vrf <name>"
2024-12-10T6927: add name server validationNicolas Vollmar
2024-12-10vyconf: T6718: set log-fileJohn Estabrook
2024-12-10vyconf: T6718: start vyconfd from vyos-routerJohn Estabrook
Start vyconfd after migration.
2024-12-10vyconf: T6718: add boot configsJohn Estabrook
Add current config and failsafe for vyconfd to load on startup.
2024-12-08T6927: adds option to set container name serverNicolas Vollmar
2024-12-02Merge pull request #4212 from c-po/T6926-sudoDaniil Baturin
sudo: T6926: remove spam messages to syslog
2024-12-02config-mgmt: T6925: return from verify function on config object None (#4213)John Estabrook
2024-12-01sudo: T6926: remove spam messages to syslogChristian Breunig
Right now every command that's executed via op-mode/conf-mode is logged with a session entry/exit and command execution into syslog. sudo[1082396]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/bin/mv /tmp/config.boot.1082388 /opt/vyatta/etc/config/archive/config.boot sudo[1082396]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002) sudo[1082396]: pam_unix(sudo:session): session closed for user root sudo[1082399]: vyos : TTY=pts/1 ; PWD=/home/vyos ; USER=root ; COMMAND=/usr/sbin/logrotate -f -s /opt/vyatta/etc/config/archive/lr.state /opt/vyatta/etc/config/archive/lr.conf sudo[1082399]: pam_unix(sudo:session): session opened for user root(uid=0) by vyos(uid=1002) sudo[1082399]: pam_unix(sudo:session): session closed for user root This heavily bloats remote logging services - remove the log entries
2024-12-01Merge pull request #4209 from natali-rs1985/T6770Christian Breunig
op_mode: T6770: Fix op command "show bridge vni"
2024-11-29Merge pull request #4204 from sarthurdev/T6809Simon
2024-11-28multicast: T6920: static multicast routing throws TypeError (#4210)Nataliia S.
2024-11-27op_mode: T6770: Fix op command "show bridge vni"Nataliia Solomko
2024-11-26Merge pull request #4196 from natali-rs1985/T6872Christian Breunig
ipoe_server: T6872: Add the ability to configure LUA scripts and username
2024-11-25Merge pull request #4203 from sarthurdev/T6692Simon
dhcp: T6692: Fix range options not present when `exclude` is used
2024-11-22pki: T6809: Support system install of CA certificatessarthurdev
2024-11-21pki: T3642: Minimize `node_changed` codesarthurdev
2024-11-21dhcp: T6692: Fix range options not present when `exclude` is usedsarthurdev
Add smoketest to verify range options are present with `exclude`
2024-11-21ipoe_server: T6872: Add the ability to configure LUA scripts and usernameNataliia Solomko
2024-11-21Merge pull request #4202 from jestabro/drop-legacy-show-configuration-filesDaniil Baturin
op-mode: T6900: remove uninformative 'show configuration files'
2024-11-21T6806: Rework QoS Policy for HFSC Shaper (#4181)Roman Khramshin
- Removed default `m1` and `m2` values from interface definitions - Adjusted filter priorities for shapers - Fixed SFQ qdisc and HFSC class creation to fully support `m1`, `d`, and `m2` parameters - Added validation logic similar to VyOS 1.3 to improve error handling and user experience
2024-11-21T6796: QoS: match filter by interface(iif) (#4188)Roman Khramshin
2024-11-20op-mode: T6900: remove uninformative 'show configuration files'John Estabrook
The legacy node and behavior under 'show configuration files' is not useful as is; remove node and drop script to allow for a useful repurpose in the future.
2024-11-20Merge pull request #4197 from jestabro/multipart-msg-outputDaniil Baturin
configd: T6899: use multipart message instead of extra exchange
2024-11-20T6790: QoS: Improve CAKE Policy (#4173)Roman Khramshin
- Fixed handling of flow isolation parameters. - Corrected support for `nat` and `nonat` in flow isolation. - Extended RTT values to cover the full range supported by `tc`. - Make migration script 2-to-3 qos
2024-11-19T6490: Allow creation of wireguard interfaces without requiring peers (#4194)sskaje
* T6490: Allow creation of wireguard interfaces without requiring peers
2024-11-19configd: T6899: use multipart message instead of extra exchangeJohn Estabrook
2024-11-18T6884: adds mtu option for container networksNicolas Vollmar
2024-11-15Merge pull request #4191 from HollyGurza/T6801Christian Breunig
T6801: QoS: Policy rate-control is broken by default
2024-11-15T6878: Stop conntrack logging servicekhramshinr
2024-11-14T6801: QoS: Policy rate-control is broken by defaultkhramshinr
- Fixed unhandled exception for policy rate-control without params
2024-11-08Merge pull request #4179 from natali-rs1985/T3501-currentDaniil Baturin
T3501: Allow using more than one tuned profile
2024-11-07Merge pull request #4151 from natali-rs1985/T6695Daniil Baturin
T6695: Machine-readable operational mode support for traceroute
2024-11-07T3501: Allow using more than one tuned profileNataliia Solomko
2024-10-24Merge pull request #4155 from HollyGurza/T4583Christian Breunig
T4583: Rewrite VRRP op-mode to vyos.opmode format
2024-10-21Merge branch 'current' into T6695Nataliia S.
2024-10-19Merge pull request #4165 from natali-rs1985/T4914-currentChristian Breunig
pki: T4914: Rewrite the PKI op mode in the new style
2024-10-18pki: T4914: reformat file by linter rulesNataliia Solomko
2024-10-18pki: T4914: Rewrite the PKI op mode in the new styleNataliia Solomko
2024-10-17T4583: Rewrite VRRP op-mode to vyos.opmode formatkhramshinr
2024-10-17T973: add basic frr_exporter implementation (#4150)Robert Göhler
2024-10-11T6695: normalize formattingNataliia Solomko
2024-10-11T6695: Machine-readable operational mode support for tracerouteNataliia Solomko
2024-10-11T6712: Add nonproduction banner (#4149)mergify[bot]
(cherry picked from commit 3abe7c72c95c3d9b825db08b092c555786e9fbcf) Co-authored-by: Viacheslav Hletenko <v.gletenko@vyos.io>
2024-10-09haproxy: T6745: Rename `reverse-proxy` to `haproxy`sarthurdev