| Age | Commit message (Collapse) | Author |
|---|
|
(cherry picked from commit faa6453ec86ecebeff2e2a28dd01db2ee655a22c)
|
|
podman: T6598: add fuse-overlayfs runtime dependency (backport #729)
|
|
This is required as the dependency will add /etc/containers/policy.json
(cherry picked from commit 7508677091abf2b9c92d9c5c393fb73bb5128aa8)
|
|
Dependency already exists in vyos-1x for live-system, but it does not hurt to
also define the dependency here where it's needed by the filesystem layer.
(cherry picked from commit 3f84d701fcbc1a1c01eff13053f328483eac06ed)
|
|
As part of "T5792: Upgrade to ddclient 3.11.2" in commit 368b89ef056,
ddclient was built using build system from Debian Salsa and source code
from upstream GitHub.
This was subsequently modified in commit 7f7030d9281 to use both build
system and source code from Debian Salsa.
Now that Debian finally has ddclient 3.11.2 release, we can use the
release tag to build the package.
(cherry picked from commit df970a14e808b7520bf18052947e60f528bce378)
|
|
(cherry picked from commit 84c5d5a3db1a14da74258cb42af9490324553ae5)
|
|
(cherry picked from commit a7d0c7b854d913103195bb96f8959fe9603bfe2c)
|
|
(cherry picked from commit a9baaaba16124f847911eeceaff3dbf17f397aeb)
|
|
hostapd: T6597: update hostapd version (backport #702)
|
|
Using a discrete commit ID as there has not been a release in a longer time.
(cherry picked from commit 2a6e6878543f806f4c501ff5f9bd2bd03bfaa6f1)
|
|
This reverts commit dbf7e47a27537a9c298afd665244b7bc2b6cf5f6.
(cherry picked from commit faf191ed858373fab0f4add7edadd40e64f11f2e)
|
|
Commit 368b89ef05 ("ddclient: T5797: Upgrade to ddclient 3.11.2") bumped the
ddclient version by using the build system from Debian SALSA repo and the
upstream ddclient source code.
Debian now provides the same version from the SALSA repos.
(cherry picked from commit 7f7030d928199ef3a10e4a2e34761d982e123052)
|
|
snmp: T6290: add custom package build (backport #686)
|
|
(cherry picked from commit 56bc5a517c266fe15e9b331852826dfdd6f97b00)
|
|
(cherry picked from commit dd322145bec2902dd4f18064d6c6f18464b987f9)
|
|
(cherry picked from commit 41771586bd7cef98cd8151e9b36e3d045baa7622)
|
|
(cherry picked from commit 707c073f7ce5edab02d71f36c38f44bb39d8d6fa)
|
|
(cherry picked from commit b809886538eaad66b8756be8f5e758584f88e6a6)
|
|
VFIO No-IOMMU support is required for environments where IOMMU is not available
but we still want to use VFIO.
(cherry picked from commit db1bdb656bcb9206d8f50efce2aed415eb9be5cc)
|
|
frr: T6250: T6283: revert local patches merged upstream (backport #631)
|
|
This reverts commit 1b61973b9143aa8a04cc7c857ec567fa962e4e43.
Upstream Patch merged
(cherry picked from commit e7fad572baf472acd12d9b53e27365904072f485)
|
|
This reverts commit 38cae97177191ad6876a4ce7afb4f53b21bf746c.
Upstream patch merged
(cherry picked from commit 2d6b51e13a7b329d710f811b50c7a18544c96312)
|
|
(cherry picked from commit 20b42272c56e5cd006f7f5096fe90520f4b2da00)
|
|
(cherry picked from commit a90809e213bb10aa17223687fe8a965050959869)
|
|
(cherry picked from commit 425f78ff306d941f645adad763bbdfa68e6a41c2)
|
|
(cherry picked from commit 5dcb6b771106df130b4884867dc28bd685b64e40)
|
|
(cherry picked from commit 38cae97177191ad6876a4ce7afb4f53b21bf746c)
|
|
(cherry picked from commit 1b61973b9143aa8a04cc7c857ec567fa962e4e43)
|
|
FRR build tracks the rtrlib and libyang version, so only one place is needed to
build to sources.
(cherry picked from commit 6ff4b31c4a75583424edd0deb479d1dacc42d6b3)
|
|
(cherry picked from commit dbf7e47a27537a9c298afd665244b7bc2b6cf5f6)
|
|
(cherry picked from commit 5978fd1df855d163436e4e9108a32bc2d1157af4)
|
|
Generic driver for Hyper-V VMBus is required in Hyper-V environments for direct
access to network devices from userspace.
(cherry picked from commit 999ccad3f8ed35b18eff4cdf6baba6b1b3e87af0)
|
|
(cherry picked from commit fbe43ddcc2ee4a132a135bca688c533a4e9fab15)
|
|
The ixgbe driver did not support the 1000BASE-BX standard so for example FS.com
SFP-GE-BX 1310/1490nm 10km transceiver received an unsupported module error even
with allow_unsupported_sfp enabled.
To solve this problem I created a patch that was accepted by Linux upstream
(https://github.com/torvalds/linux/commit/1b43e0d20f2d007ec4c124b0deaa848ff8d61f4a)
so starting from kernel 6.9 the ixgbe driver will have 1000BASE-BX support,
however VyOS uses the out of tree driver so it is necessary to backport the patch.
(cherry picked from commit a44647f0982f2a6b7a78af80f82e1c650ab0b11e)
|
|
(cherry picked from commit 28c08a784ebdddfe56d8d33b4f28b147ad0a5265)
|
|
(cherry picked from commit 4417986365472fd9055b12309ba49d88272db04c)
|
|
Fix CVE-2023-48795: (terrapin attack)
The SSH transport protocol with certain OpenSSH extensions allows remote
attackers to bypass integrity checks such that some packets are omitted (from
the extension negotiation message), and a client and server may consequently
end up with a connection for which some security features have been downgraded
or disabled, aka a Terrapin attack.
(cherry picked from commit b17befe2e4e914f3f604bcfa1843f75519d46a4d)
|
|
Bump the `hsflowd` version to `v2.0.55-1`
Fixed and extended PCAP capabilities for not hardware/bridge
interfaces (like GRE tunnel interface).
It fixes crashes the daemon if you use tunnel interfaces
```
hsflowd[9160]: PCAP: tun0 has no supported datalink encapsulaton
hsflowd[9160]: Received signal 11
hsflowd[9160]: SIGSEGV, faulty address is (nil)
```
The correct commit fix in https://github.com/sflow/host-sflow/commit/62346aa67240ced0fb16b6725f16d8fa40eaea60
Updated version starts the hsflowd without issues
(cherry picked from commit eb05b77bac542dca906b25f647117c7566380cf2)
|
|
is undefined
This extends an else path with the logic from commit ea7d59a4b ("ixgbe: T6155:
always enable allow_unsupported_sfp for all NICs by default")
(cherry picked from commit 70ac747b2889757e35ac2a90fd77cda9d4b97ebd)
|
|
In-tree vs. Out-Of-Tree drivers differ in the way how unsupported transceivers
are defined (uint vs array of int) for the Kernel module parameters.
This results in:
kernel: ixgbe 0000:5e:00.0: failed to initialize because an unsupported SFP+ module type was detected.
kernel: ixgbe 0000:5e:00.0: Reload the driver after installing a supported module.
kernel: ixgbe 0000:5e:00.0: removed PHC on eth6
This patch always enables unsupported SFP+ modules as wo do anyway from
the userspace but only for the first port.
(cherry picked from commit ea7d59a4bf64a854be04ccf7566e1cf95d4e09a8)
|
|
radvd: T6118: add custom build support with recent source version
|
|
Packages got backported from current, but we need to select the proper pipeline
version from sagitta branch.
|
|
(cherry picked from commit ed79a9fa939fdba80eb004a79989153d51eeea88)
|
|
(cherry picked from commit 016809208da4d5500734f275d544463d8122bbd1)
|
|
(cherry picked from commit d93cb288d7d6bb16afad0df727f012837123a47e)
|
|
This reverts commit 60d16e494958bfe4a43048ee3a7f63fd57600875.
We already use iproute2 6.7 from Debian Bookworm Backports
(cherry picked from commit c56d76986f9efa05c4348401e7cdd05073aed2e7)
|
|
(cherry picked from commit fb31cf3412437f417870c28e9aaba66dc9144aff)
|
|
(cherry picked from commit 60d16e494958bfe4a43048ee3a7f63fd57600875)
|
|
(cherry picked from commit 1ba64f600c3578f7d63d1fc242f2088bf86e3605)
|
|
(cherry picked from commit f56b09145f9faeed061fb42f484acca226bfd914)
|
