summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-09-29Merge pull request #4754 from natali-rs1985/T7815Viacheslav Hletenko
T7815: VPP: NAT44 rules with port requires protocol specification and vice versa
2025-09-26bgp: T7760: improfe verify() logic on default VRF removalChristian Breunig
After commit 85fe32f0e ("bgp: T7760: remove per vrf instance system-as node") BGP isntances running in a VRF will no longer have a system-as node set. This results in "set vrf name <name> protocols bgp" becomeing a valid CLI path. When reading in the config dict - we now might see {'protocols': {'bgp': {}} as a valid entry. We do need to account for this empty dictionary.
2025-09-26migrator: T7760: remove debug print statementChristian Breunig
2025-09-26image: T5455: Add migration of SSH `known_hosts` files during image upgradeOleksandr Kuchmystyi
During upgrade, the script now checks if any `known_hosts` files exist. If so, it prompts the user to save these SSH fingerprints, and upon confirmation, copies the files to the new image persistence directory.
2025-09-25Merge pull request #4745 from jestabro/catch-frr-exceptionViacheslav Hletenko
T7855: redirect stdout and catch exceptions on frr render
2025-09-25T7815: VPP: NAT44 rules with port requires protocol specification and vice versaNataliia Solomko
2025-09-25Merge pull request #4753 from jestabro/config-save-sync-atomicDaniil Baturin
T7709: Add file sync and atomic write to config save script
2025-09-25Merge pull request #4669 from sarthurdev/tpm_fixesDaniil Baturin
tpm: T7713: T7717: Multiple TPM fixes
2025-09-25Merge pull request #4756 from natali-rs1985/T7862Viacheslav Hletenko
T7862: VPP: Enable support of ixgbevf driver for DPDK
2025-09-25T7862: VPP: Enable support of ixgbevf driver for DPDKNataliia Solomko
2025-09-24T7709: use write_file_sync/atomic in vyos-save-config.py scriptJohn Estabrook
Config save is provided by the helper script in both CLI and configsession (hence also in the http api). Use utilities write_file_sync and write_file_atomic, in accordance with permissions and location: If the target is in /opt/vyatta/etc/config or /config, use write_file_sync; if, moreover, the caller has permissions, use write_file_atomic. Otherwise, fall back to util write_file.
2025-09-24T7861: System options CPU vendor_id bug for some platformsViacheslav
Some platforms do not have `vendor_id` for the CPU information This causes of `KeyError: 'vendor_id'` errors while commiting system option kernel memory settings. Fix this.
2025-09-24Merge pull request #4737 from jestabro/edit-level-op-mode-dictViacheslav Hletenko
T7850: make op_mode_config_dict edit level aware
2025-09-23T7855: vyos-commitd redirect stdout and catch exceptions on frr renderJohn Estabrook
2025-09-23T7855: vyos-configd redirect stdout and catch exceptions on frr renderJohn Estabrook
2025-09-23tpm: T7726: Test TPM key or prompt recovery keysarthurdev
2025-09-23tpm: T7726: Prompt before overwriting existing TPM keysarthurdev
2025-09-23tpm: T7726: Prompt user before clearing TPM keysarthurdev
2025-09-23tpm: T7726: Copy encrypted volume when adding system imagessarthurdev
2025-09-23tpm: T4919: Use vyos module function for running image, single-line importssarthurdev
2025-09-23tpm: T7735: Only require key/recovery if unmappedsarthurdev
2025-09-23tpm: T7713: Restore original config mounts when decryptingsarthurdev
2025-09-23tpm: T7717: Preserve group on config and archivessarthurdev
2025-09-23tpm: T7720: Handle encrypt failure and gracefully abortsarthurdev
2025-09-23tpm: T7727: Prompt to overwrite an existing backupsarthurdev
Move encrypted volume check before key input Unmount any conflicting config bind mounts
2025-09-23kea: T7854: Use helper for Kea VRF systemd unitssarthurdev
2025-09-23Merge pull request #4684 from c-po/bgp-vrf-system-asDaniil Baturin
bgp: T7760: remove per vrf instance system-as node
2025-09-23Merge pull request #4743 from sarthurdev/kea3.0Christian Breunig
kea: T7281: Fix Kea 3.0 service failures
2025-09-23T7850: add nosetest for util list_stripJohn Estabrook
2025-09-23kea: T7281: Preserve systemd unit environment in VRF execsarthurdev
2025-09-23kea: T7281: Set folder permissions to expected 0750sarthurdev
2025-09-23kea: T7821: Update paths for Kea v2.7.9 security changessarthurdev
2025-09-22kea: T7281: Use correct Kea unit filessarthurdev
2025-09-22image: T7818: avoid error when skipping config migrationChristian Breunig
Fix "No such file or directory" error triggered during image upgrade when user opts not to migrate config. GRUB cmdline migration incorrectly attempts to access non-existent config in new image path.
2025-09-22image: T7818: re-use global path definitions from vyos.defaultsChristian Breunig
Reduce amount of duplicate file/folder strings.
2025-09-22Merge pull request #4698 from l0crian1/fw-disable-conntrackDaniil Baturin
firewall: T7475: Add an option to disable conntrack for individual firewall chaisn
2025-09-22Merge pull request #4711 from jestabro/interstitial-setDaniil Baturin
T7737: add vyconf-aware analogue of configfs
2025-09-20T7852: Switch to yescypt for password encryptionroedie
Accidentally slipped in 2 whitespace corrections
2025-09-20ssh: T7839: fix warning on deprecated algorithms during commitChristian Breunig
The list calculation of in-use but deprecated SSH hostkey algorithms was wrong. This was implemented in commit 6deda171e ("ssh: T7839: add deprecation warning for DSA hostkey-algorithm usage"). It always returned the content of the list of deprecated algorithms, but not the list of deprecated algorithms actually - in use - by the configuration. This has been corrected. Before: DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will be removed in VyOS 1.6. Please update affected keys to a supported algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication failures after the upgrade. The following hostkey-algorithms are in use: ssh-dss, ssh-dss-cert-v01@openssh.com After: DEPRECATION WARNING: Support for SSH-DSA keys is deprecated and will be removed in VyOS 1.6. Please update affected keys to a supported algorithm (e.g., RSA, ECDSA or ED25519) to avoid authentication failures after the upgrade. The following hostkey-algorithms are in use: ssh-dss The generation of the MOTD was not affected!
2025-09-19T7836: use /opt/vyatta/etc/config as source of truth in tpm encryptionJohn Estabrook
The mount point /opt/vyatta/etc/config is considered the source of truth whereas /config is simply a bind mount of convenience. As the latter is no longer defined at boot, all operations should use the former.
2025-09-19T7836: move bind mount of /config to vyos-1xJohn Estabrook
We are removing the bind mount construction from the initrd components in live-boot, as: (1) it is not needed before initialization in the vyos-router script (2) does not correctly update inodes on libc rename (3) fails on the livecd (cf. /var/log/live/boot.log)
2025-09-18Merge pull request #4723 from sarthurdev/kea3.0Viacheslav Hletenko
kea: T7821: Update Kea to 3.0
2025-09-18Merge pull request #4692 from l0crian1/fw-pre-def-fixSimon
op-mode: T6857: Fix default action for prerouting hook
2025-09-18Merge pull request #4724 from l0crian1/fix-container-branchChristian Breunig
container: T7681: fix multiple name servers
2025-09-18op-mode: T7746: Fix 'show interfaces' description wrapping (#4725)Christian Breunig
- Fixed incorrect wrapping of 'show interfaces' description
2025-09-18Merge pull request #4731 from c-po/openssh-T7787Daniil Baturin
T7787: add deprecation warning for ssh-dss keys
2025-09-18container: T6673: Fix restart of containers with podman (#4691)l0crian1
Fixed issue with podman and systemd sync when restarting containers with 'podman restart' command. - Placed podman storage directory in vyos/defaults.py - Replaced repeated declarations with vyos.defaults.directories['podman_storage']
2025-09-18T7737: inject env vars provided by vyconfd sessionJohn Estabrook
2025-09-18Merge pull request #4722 from natali-rs1985/T7796Daniil Baturin
T7796: PPPoE-server add mapping in vpp if vpp-cp is enabled
2025-09-18Merge pull request #4708 from sarthurdev/T114Daniil Baturin
wlb: T114: Add firewall group support for WAN load balancer
generated by cgit v1.2.3 (git 2.39.1) at 2026-08-30 23:17:53 +0000