Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-01-31 | T4966: Delay UDEV execution, avoid rename deadlock | RageLtMan | |
UDEV will rename interfaces from whatever the kernel called them to eX before converting them to ethX during init. In current VyOS, the second renaming operation can run into a lock on the adapter preventing altering its name. As a result, the adapter will remain in the eX configuration, preventing proper execution of subsequent scripts and configuration stanzas. The initial renaming step has to remain as it is needed to work around other issues, which leaves the somewhat hacky approach of delaying the second renaming step slightly in an effort to let the device lock holders settle, releasing it for rename to ethX. This is accomplished by a kernel commandline paramter (3s), which can be tweaked to reduce impact or wait longer as needed on different devices - udev.exec_delay=3 | |||
2023-01-31 | Revert "Resolve resource deadlock for udev iface shuffle" | Christian Poessinger | |
This reverts commit 8e6d765be123be9d937970ee96b7d6d0b5053ed5. This breaks existing configurations: https://forum.vyos.io/t/yesterday-and-todays-build-causes-network-interface-getting-corrupted-vyos-1-4-rolling-202301280924-amd64-iso | |||
2023-01-29 | Merge pull request #299 from sempervictus/bug/interface_renaming_can_lock_udevd | Christian Breunig | |
T4966: Resolve resource deadlock for udev iface shuffle | |||
2023-01-29 | Resolve resource deadlock for udev iface shuffle | RageLtMan | |
UDEV contains a default rule triggered early-on which renames all NICs by their index to eX, systemd-udevd subsequently renames the eX interface to ethX. Systemd-udevd can fail to rename the iface if it still has resource locks from the prior renaming which then fails to apply all manner of configurations resulting in a booted zombie which cannot handle L3 traffic. Fix the concern by removing 62-temporary-interface-rename.rules from /etc/udev/rules.d during the cleanup hook executed in data/live-build-config/hooks/live/82-cleanup-udev-rules.chroot. Testing: Boot-tested in OpenStack under identical infrastructure-as-code states. Verified DHCP-assigned routes, execution of cloud-init, and configuration stanzas injected through cloud-init applied to the FW and system. | |||
2023-01-27 | T4961: update commit refs for vyos1x-config and libvyosconfig | John Estabrook | |
Fix/improve error reporting for configtree.copy | |||
2023-01-24 | Kernel: T4928: update Linux Kernel to v6.1.8 | Christian Breunig | |
2023-01-24 | Merge pull request #298 from sever-sever/T4941 | Christian Breunig | |
T4941: Update accel-ppp version due to IPoE issues with kernel 6 | |||
2023-01-24 | T4941: Update accel-ppp version due to IPoE issues with kernel 6 | Viacheslav Hletenko | |
Update 'accel-ppp' where bug fix with incompatibility IPoE vlan_mon driver with Linux kernel 6.1.x | |||
2023-01-21 | GitHub: update PullRequest template | Christian Breunig | |
2023-01-18 | Jenkins: strongSwan: T1888: install libcurl4-openssl-dev | Christian Breunig | |
2023-01-18 | Revert "strongSwan: T1888: install libcurl4-openssl-dev build dependency" | Christian Breunig | |
This reverts commit 05d0c7359ee1e3084e25ba294c6492031d893423. | |||
2023-01-18 | strongSwan: T1888: install libcurl4-openssl-dev build dependency | Christian Breunig | |
ocserv docker container depends on libcurl4-gnutls-dev which automatically uninstalls libcurl4-openssl-dev from the container. This commit re-adds the dependency. | |||
2023-01-18 | Jenkins: run RAID-1 test before smoketest to save CPU | Christian Breunig | |
2023-01-18 | Kernel: T4928: update Linux Kernel to v6.1.7 | Christian Breunig | |
2023-01-18 | Merge pull request #293 from aapostoliuk/T4551-sagitta | Christian Breunig | |
strongSwan: T4551: Added soft lifetime calculation | |||
2023-01-17 | strongSwan: T4551: Added soft lifetime calculation | aapostoliuk | |
Depending on the configured hard lifetime the default soft lifetime might not make sense and could even cause rekeying to get disabled. To avoid that, derive the soft lifetime from the hard lifetime so it's 10% higher than the soft lifetime. https://github.com/strongswan/strongswan/commit/a2b1e06f07569e8d3f08a37b68a206164b67fbe3 | |||
2023-01-15 | Kernel: T4928: update Linux Kernel to v6.1.6 | Christian Breunig | |
2023-01-15 | ocserv: T4937: adjust Jenkins build pipeline to current branch | Christian Breunig | |
2023-01-15 | Docker: T4937: add build dependencies for ocserv | Christian Breunig | |
2023-01-15 | ocserv: T4937: upgrade package to version 1.1.6 | Christian Breunig | |
2023-01-15 | Merge pull request #292 from c-po/t3008-chrony | Christian Breunig | |
ntp: T3008: move from ntpd to chrony | |||
2023-01-14 | ntp: T3008: move from ntpd to chrony | Christian Breunig | |
2023-01-12 | Kernel: T4928: update ethtool to version 6.1 | Christian Breunig | |
2023-01-11 | Kernel: T4928: fix path on remote url | Christian Breunig | |
2023-01-11 | Kernel: T4928: update linux-firmware to 20221214 | Christian Breunig | |
2023-01-11 | Kernel: T4928: update Linux Kernel to v6.1.4 | Christian Breunig | |
2023-01-11 | qat: T4929: update Intel QAT drivers to 4.20.0-00001 | Christian Breunig | |
2023-01-09 | Revert "systemd: T4593: disable strongswan service by default" | Christian Poessinger | |
This reverts commit 0351b37359517dab1a18379d180a01fd5271802e. | |||
2023-01-03 | Kernel: T4691: enable CONFIG_BLK_DEV_DM option | Christian Poessinger | |
This enables Device Mapper support for either RAID targets or encrypted partitions. | |||
2023-01-01 | Kernel: T4691: update Linux Kernel to v5.15.86 | Christian Poessinger | |
2023-01-01 | iproute2: T4284: update package for better tc JSON support | Christian Poessinger | |
vyos-1x QoS implementation comes with smoketests that heavily use the JSON output of tc. There had been some bugs in the JSON formatting until version version 6.1 of iproute2 [1, 2]. 1: https://lore.kernel.org/netdev/3ac544c09842410fb863b332917a03ad@poessinger.com/ 2: https://lore.kernel.org/netdev/f4806731521546b0bb7011b8c570b52b@poessinger.com/ 3: https://lore.kernel.org/netdev/e1fa5169db254301bc3b5b766c2df76a@poessinger.com/ | |||
2022-12-30 | podman: T4899: systemd services not being installed correctly | Christian Poessinger | |
2022-12-30 | podman: T4901: update to v4.3.1 | Christian Poessinger | |
2022-12-27 | systemd: T4593: disable strongswan service by default | Christian Poessinger | |
2022-12-27 | strongSwan: T4593: upgrade package to 5.9.8 | Christian Poessinger | |
2022-12-26 | Docker: T4593: add strongSwan build dependency libtss2-dev | Christian Poessinger | |
2022-12-22 | Kernel: T4691: update Linux Kernel to v5.15.85 | Christian Poessinger | |
2022-12-20 | Kernel: T4691: update Linux Kernel to v5.15.84 | Christian Poessinger | |
2022-12-17 | GitHub: use private access token for review assignment | Christian Poessinger | |
2022-12-17 | Merge pull request #264 from initramfs/current-kitty-terminfo | Christian Poessinger | |
vyos-utils: T4683: add kitty-terminfo package to build | |||
2022-12-17 | GitHub: fix team reviewer assignment | Christian Poessinger | |
Unfortunately we always used the wrong syntax. According to https://github.com/shufo/auto-assign-reviewer-by-files we should use: ` - team: baz` | |||
2022-12-17 | Kernel: T4691: update Linux Kernel to v5.15.83 | Christian Poessinger | |
2022-12-11 | T4792: fix generated DEB package path location | Christian Poessinger | |
2022-12-11 | T4792: add CI/CD pipeline for sstp-client | Christian Poessinger | |
2022-12-11 | Docker: T4792: add buiold dependencies for sstp-client | Christian Poessinger | |
2022-12-08 | Kernel: T4691: update Linux Kernel to v5.15.82 | Christian Poessinger | |
2022-12-02 | Kernel: T4691: update Linux Kernel to v5.15.81 | Christian Poessinger | |
2022-11-27 | Update reviewers.yml | Yuriy Andamasov | |
2022-11-26 | Kernel: T4691: update Linux Kernel to v5.15.80 | Christian Poessinger | |
2022-11-26 | Merge pull request #287 from sever-sever/T4841 | Christian Poessinger | |
T4841: Disable by default fancontrol.service |