| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
backport: wide-dhcpv6: T4760: fix support for multiple dhcp6c instances
|
|
Kernel: T3318: update Linux Kernel to v5.4.261
|
|
|
|
Added patch with commit '9ca8688' to keepalived package.
Setting arp_ignore to 1 ensures that the VMAC interface
does not respond to ARP requests for IPv4 addresses not
configured on the VMAC.
Backported from 1.5.
|
|
This reverts commit 6383f8ae2716635d87c685df764aabcc608381e3.
|
|
CVE-2023-38802"
This reverts commit 13a5fa10d8c8632d08cf48a445c7d5925d3d42c4.
Patch merged upstream
|
|
CVE-2023-38802
Before this path we used session reset method, which is discouraged by rfc7606.
Handle this as rfc requires.
This addes the fix submitted as https://github.com/FRRouting/frr/pull/14381
upstream. Using VyOS patch until the above mentioned PR is merged.
|
|
|
|
|
|
|
|
There is no need to define `eth_hw_addr_set()` in sources anymore because it is
already backported into the 5.4.254 kernel:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/include/linux/etherdevice.h?h=v5.4.254&id=24f34f67be24674c5c3ef922de70ab95a0d7ce16
|
|
Kernel: T5310: add stmicro driver support (Equuleus)
|
|
I added also additional expansion card with 2 Intel i211 NIC’s.
I want to utilize all 4 NIC’s, but I have an issue because only NIC on expansion cards are properly detected.
|
|
There is no option to build arm64 packages in equuleus
|
|
|
|
|
|
An old patch breaks connected routes in a situation when more than one IP
address is presented on an interface and it switches state from down to up:
```
ip link set eth0 down
ip a add 192.0.2.50/24 dev eth0
ip a add 192.0.2.51/24 dev eth0
ip link set eth0 up
```
A new version includes more backports from frr upstream, which work well
regardless of an interface state.
|
|
Override peer's ASN even if original as-path contains other ASNs
This is a backport of 9bbdb4572d3bb255211fecf1c756452ab27e91c2 from
the main FRR repository
|
|
The Realtek r8152 driver is updated to 2.16.3
|
|
This commit adds a build task for an out-of-tree Intel ICE driver
for E810 Ethernet Controllers.
|
|
Commit 317ffe1 ("T4625: Update ocserv packet to 1.1.6-3") updated the version
used for ocserv on VyOS 1.3. This commit adds the missing dependencies
for the Docker container in order to build the ocserv packages.
|
|
|
|
This is backported commit for FRR 7.5.1
https://github.com/FRRouting/frr/commit/92980561382fc04380414a6e2f6ca6746c2fe5e9
|
|
This commit adds a patch to the WIDE DHCPv6 client forcing it to bind
to the last network interface specified on the command line, allowing
multiple concurrent instances of the daemon running without having a
single daemon receiving all the incoming DHCPv6 packets.
(cherry picked from commit da47ffa55c49fd4bee82233f6adad26fbcca1755)
|
|
(cherry picked from commit 3d983cb2feeb536a5cb23d22228d0ce6ee4d7ccc)
|
|
After the fixes for T4537/T4584, which added a custom hostap package,
wpa_supplicant no longer allows TLSv1.0 connections, which is required
for EAP-TLS with certain ISPs.
Previously, VyOS allowed TLSv1.0 via Debian's `allow-tlsv1.patch` patch.
This commit reintroduces that patch for the custom hostap package.
Signed-off-by: Andrew Gunnerson <chillermillerlong@hotmail.com>
(cherry picked from commit 54a2f0aa704db96707c8545b81b180934b5f8b9c)
|
|
(cherry picked from commit 94e844f44b76069b0897c2c7c5968853b4b1a368)
|
|
(cherry picked from commit 8443b98f54c9c8e2a936301b9dbcdcd96c4d543e)
|
|
(cherry picked from commit e008ba7de3428e3d7d1bd00d656da3946bf006c7)
|
|
|
|
|
|
Kernel: T3489: re-enable NUMA in kernel build
|
|
|
|
All throughout the history of vyos-build, NUMA has been disabled.
It WAS enabled back in Vyatta days, so something somewhere has
accidentally turned it off - and it's ALSO mentioned explicitly
in various pieces of documentation, so it's MEANT to be on!
Note for future researchers: CONFIG_INOTIFY_STACKFS=y is provided
by a patch, so patch the kernel BEFORE running make menuconfig, or
manually put it back. If not, it'll vanish and is a wanted part of
the build.
This is a backport of commit d5df496b9b9e for the 5.4 Kernel series.
|
|
This prevents error:
dpkg-source: error: expected [ +-] at start of line 16 of diff 'dropbear/debian/patches/0001-Enable-PAM-support.patch'
dpkg-source: info: applying 0001-Enable-PAM-support.patch
dpkg-source: info: the patch has fuzz which is not allowed, or is malformed
|
|
... because of build time dependencies
|
|
We do not have arm64 support in equuleus
|
|
Dropbear version shipped in Debian does not have PAM support enabled. For the
VyOS console server it would be nice to have the possibility to use RADIUS
authentication.
(cherry picked from commit 52f75193f3afe799017e17504d5785aa7817d455)
|
|
|
|
This fixes passing of wrong function arguments introduced in commit dc1fbb8
("keepalived: do not build arm64 package").
|
|
keepalived commit 8af889bc is known to work - pin builds to this version
until we decide for a newer release (2.2.5 or higher).
(cherry picked from commit f0cdd802c2a6a9bc12f5495d517837b4c6a1b494)
|
|
|
|
(cherry picked from commit e890cbd5099e296bc2a614d3b7871e1d577aa5f3)
|
|
|
|
Because of a strange bug with the Debian package
(https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=997981) we need to
have our own build of ocserv from the same source.
|
|
|
|
Enabled build of the SG module to make possible communication with RAID
adapters from Areca (https://www.areca.com.tw/).
(cherry picked from commit 6d77d03c3fcda288ed44b979338d38a58d8ae5f3)
|
|
|
