summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2025-07-30serial: T7484: treat unavailable serial console devices as non-fatalChristian Breunig
Instead of failing or starting agetty on an invalid device, we now check whether the specified serial console device is a valid TTY. If it's not, we display a warning to the user and skip starting the agetty process.
2025-07-30serial: T7484: remove redundant call to "systemctl daemon-reload"Christian Breunig
A subsequent call to restart_login_consoles() will always call "systemctl daemon-reload" and thus we can spare one call.
2025-07-30T7668: Fix image update due to None kernel optionsViacheslav
If we do not have the system options kernel the update fails Change order for variables `k_cpu_opts` and `k_memory_opts` If we do not have kernel_options set empty dictionary as NoneType object has no attribue `get` ``` >>> kernel_options=None >>> kernel_options.get('cpu', {}) Traceback (most recent call last): File "<stdin>", line 1, in <module> AttributeError: 'NoneType' object has no attribute 'get' >>> >>> >>> kernel_options={} >>> kernel_options.get('cpu', {}) {} >>> ```
2025-07-29op-mode: T7403: add option for forcefully remove a container imageChristian Breunig
If you have multiple images (tags) loaded for a container which point to the exact same hash - you can only forcefully delete them. vyos@vyos:~$ delete container image 70dc5806 Error: unable to delete image "70dc5806" by ID with more than one tag ([registry.io/foo/bar:v1.0 registry.io/foo/bar:v1.0.1]): please force removal In additon an image that is still beeing used can not be removed from the system as this would cause infinite container restarts. vyos@vyos:~$ delete container image all force Cannot delete image "d205499ae8bb" because it is currently being used by container "3b290f90e83d"!
2025-07-29op-mode: T7403: print STDOUT when adding a container imageChristian Breunig
2025-07-29T7651: use pid not ppid if not specifiedJohn Estabrook
The reset_section.py script is used in a limited case for both (1) recovery from an apply error in a config mode script and (2) recovery by a service crash in a failure handler service. In the latter case, the default pid must be os.getpid, not os.getppid, so as not to be called by pid 1.
2025-07-29Merge pull request #4627 from sarthurdev/T7628Daniil Baturin
T7628: Fix non-TPM backed config encryption
2025-07-28Merge pull request #4626 from dmbaturin/T7662-C62x-QATViacheslav Hletenko
qat: T7662: add PCI ID range for Intel C62x virtual function devices
2025-07-28qat: T7662: add PCI ID range for Intel C62x virtual function devicesDaniil Baturin
2025-07-28ipsec: T7593: Add dynamic prefix for local and remote traffic selectorsOleksandr Kuchmystyi
In case when there is no local/remote prefix configured in a tunnel settings, a protocol configured for such tunnel is ignored. The correct way to generate the configuration is to set the prefix to `dynamic` if it was not set. The correct config for the described case is: ``` local_ts = dynamic[gre/] remote_ts = dynamic[gre/] ```
2025-07-25Merge pull request #4623 from sever-sever/T7649-hyphenChristian Breunig
T7649: Fix use hyphens instead of underscores for kernel options
2025-07-25T7649: Fix use hyphens instead of underscores for kernel optionsViacheslav
The ConfigTree for operation mode uses hyphens instaed of underscores. Fix kernel options during image upgrade.
2025-07-24T7175: Added VPP optionKyle McClammy
2025-07-24Merge pull request #4619 from vyos/T7649Daniil Baturin
T7649: Add missed system kernel options for image installer
2025-07-24pylint: T7648: disable some linter-checks hit by GitHub action pipelineChristian Breunig
Running pylint --errors-only ... ************* Module interfaces src/op_mode/interfaces.py:42:54: E1101: Instance of '_IO' has no 'fileno' member (no-member) ************* Module show_techsupport_report src/op_mode/show_techsupport_report.py:62:50: E1101: Instance of '_IO' has no 'fileno' member (no-member)
2025-07-24Merge pull request #4616 from hedrok/T7489-fix-output-ipsec-passthroughDaniil Baturin
T7489: Fix output state of ipsec passthrough child
2025-07-24T7649: Add missed system kernel options for image installerViacheslav
Add missed system kernel options to the image_installer do not lose configured kernel options per an image upgrade.
2025-07-23T7489: Fix output state of ipsec passthrough childKyrylo Yatsenko
Show state of passthrough tunnels as always up. Passthrough children of connection have PASS mode but have no sa and are not shown in vici list_sas. Fix by passing mode from vici list_connections to _get_child_sa_state and always return 'up' for child with PASS mode.
2025-07-21migration: T7648: fix Undefined variable 'config' in vrrp/1-to-2Christian Breunig
2025-07-21migration: T7648: fix Undefined variable 'af_path' in quagga/2-to-3Christian Breunig
2025-07-21migration: T7648: fix Undefined variable 'config' in interfaces/5-to-6Christian Breunig
2025-07-21migration: T7648: fix Undefined variable 'base' in interfaces/0-to-1Christian Breunig
2025-07-21vyos.utils: T7648: only provide one chown functionChristian Breunig
Remove duplicate function definition vyos.utils.file.chown which was also provided by vyos.utils.permission.chown.
2025-07-21op-mode: T7648: fix pylint errors in storage moduleChristian Breunig
************* Module storage src/op_mode/storage.py:32:11: E0602: Undefined variable '_get_system_storage' (undefined-variable) src/op_mode/storage.py:52:11: E0602: Undefined variable 'output' (undefined-variable)
2025-07-21op-mode: pki: T7648: fix pylint errorChristian Breunig
************* Module pki src/op_mode/pki.py:459:8: E1128: Assigning result of a function call, where the function returns None (assignment-from-none)
2025-07-21op-mode: T7648: add missing import statement in connect disconnect handlerChristian Breunig
2025-07-21T7648: when using netifaces set "pylint: disable = no-name-in-module"Christian Breunig
As the python netifaces module is written in C - we can not inspect any import line as the linter does not see it. Disable the warnings here.
2025-07-20T7645: formattingJohn Estabrook
2025-07-20T7645: fix missing import and incorrect check of is_node_changedJohn Estabrook
Fix errors introduced by refactoring for modprobe/rmmod jool module.
2025-07-16Merge pull request #4605 from MattKobayashi/T7625Viacheslav Hletenko
T7625: load-balancing: prune limit key if not configured
2025-07-15tpm: T4919: Add boot warning if TPM not presentsarthurdev
2025-07-15tpm: T7628: Fix non-TPM backed encryptionsarthurdev
2025-07-15tpm: T4919: Not supported on live-ISOsarthurdev
2025-07-14T7627: fix regression to allow load without arg to load default configJohn Estabrook
2025-07-14T7625: load-balancing: prune limit key if not configuredMatthew Kobayashi
2025-07-10Merge pull request #4582 from hedrok/T7545-fix-show-vpn-debug-peerDaniil Baturin
ipsec: T7545: Fix show vpn debug peer
2025-07-09wlb: T7622: fix the op mode "run show wan-load-balance" commandDaniil Baturin
2025-07-08Merge pull request #4574 from jestabro/merge-configJohn Estabrook
T7499: update config merge tools
2025-07-08T7607: Remove "set vpp settings host-resources nr_hugepages <N>" setting (#43)Nataliia S.
2025-07-08ipsec: T7545: Fix show vpn debug peerKyrylo Yatsenko
Fix re for searching of peers in /etc/swanctl/swanctl.conf ``` search = rf'^[\s]*(peer_{peer}_(tunnel_[\d]+|vti)).*' ``` Changed to ``` search = rf'^[\s]*({peer}-(tunnel-[\d]+|vti))[\s]*{{' ``` Added message ``` print(f'\n### {command} ###') ``` so that output is not empty when `/usr/sbin/ipsec statusall` shows nothing
2025-07-08T7499: add utility to download/uncompress config file, for load/mergeJohn Estabrook
2025-07-08T7499: use direct request to vyconfd to avoid re-validatingJohn Estabrook
2025-07-08T7499: expose destructive merge in http-apiJohn Estabrook
2025-07-08T7499: add unittest for config tree merge functionJohn Estabrook
2025-07-08T7499: load from internal representation to avoid re-parsingJohn Estabrook
2025-07-08T7499: update vyos-merge-config.py script to use tree merge functionJohn Estabrook
2025-07-07T7528: Fix service monitoring prometheus stops servicesViacheslav
Fix for service monitoring prometheus stops unconfigured services. Check if the service is in active state before stop it.
2025-07-03T7588: move blocking function to threadpool to allow asyncJohn Estabrook
Refactor the blocking code in config handlers (endpoints /configure, /config-file) to run in a threadpool; this allows defining the handler as async. Consequently, the handler itself runs in the main thread, avoiding the need for thread registration for libvyosconfig function calls.
2025-07-03Merge pull request #4585 from c-po/copyright-noticeDaniil Baturin
T7591: remove copyright years from source files
2025-07-01Merge pull request #4583 from nobidev/features/fix-uuidgen-qemuDaniil Baturin
T7587: Fix uuidgen warning if DMI doesn't have product_serial or it empty