1.5-rolling-202501260007
·
8 commits
to current
since this release
vyos-1x
- T6671: defer config dependency if scheduled in priority queue
- T6678: added darker ruff linting workflow
- T6681: Add option for SLAAC to support suppress Interval Advertisement in RA Packets
- T6647: firewall. Introduce patch for accepting invalid ARP and DHCP
- T4974: add proper dependency on openvpn-dco
- opmode: T6694: move wake-on-lan to "execute wake-on-lan"
- T6674: workflow: Add trigger to rebuild repo package
- container: T6702: re-add missing UNIX API socket
- T6698: firewall: add matcher for vlan type.
- T6678: ruff lint workflow added (removed darker)
- op_mode: T6181: A feature for checking ports
- T6693: wireless: Enable WiFi-6 (802.11ax) for 2.4GHz AccessPoints
- T6679: add group option for nat66
- T6701: Added ability to disable the container DNS plugin
- op-mode: T6694: Move some op-mode commands to the "execute" family
- T6674: Use reusable workflow for trigger package build
- pppoe-server: T6685: Add options to accept any and blank service names
- T6711: Fix restart vrrp missed comma between services
- openfabric: T6652: Add support for OpenFabric protocol
- T6703: Adds option to configure AMD pstate driver
- op-mode: T6694: Add op-mode command "execute ssh"
- policy: T6676: Invalid route-map caused bgpd to crash
- T6674: Rebuild package action use secrets inherit
- T6674: Actions use pull_request_target to trigger build package
- T6674: Actions fix variable for trigger build reuse repo
- GitHub: T6494: add TPM tests to ISO integration workflow
- op-mode: T6682: Fix for show vpn ike sa peer that always shows all SAs
- op-mode: T6715: manually changing time/date is not synced into hardware clock
- bond: T6709: add EAPoL support
- T861: op-mode: initial parts for UEFI secure boot CLI
- T6716: don't automatically set ethernet offload
- T6723: firewall: extend op-mode commands
- syslog: T5367: add format option to include timezone in message
- wireless: T6709: fix missing wpa_supplicant configuration
- http-api: T6326: return full warning/error output through api
- op-mode: T4833: Include wireguard peer name in interface summary report
- lldp: T6727: add missing input validation for interface names
- ethtool: T6729: drop text based feature parsing in favour of JSON
- bridge: T6675: VXLAN Interface configuration lost due to improper bridge detachment
- syslog: T6719: fix the behavior of "syslog global preserve-fqdn"
- validators: T6739: fix ipaddrcheck argument quoting
- validators: T6738: Revert "validators: T6739: fix ipaddrcheck argument quoting"
- validators: T6739: correctly quote ipaddrcheck arguments to avoid ipaddrcheck syntax errors when values include whitespace
- T6749: fix PR commenting permission issue with integration test workflow
- T6687: add fqdn support to nat rules.
- policy: T6751: add missing completion helpers for community-list
- validators: T6743: use native ipaddrcheck validator options for ranges
- T6757: Openconnect: fix template for correct config parsing while configuring source address for radius authentication.
- vyos.configtree: T6742: add bindings for create_node and is_leaf/set_leaf
- cli: T6752: add a wrapper for the show command
- T6761: Add timeout for OSPF smoketest fail
- T6763: Delete Jenkins file
- T6760: firewall: add packet modifications existing in policy route to regular firewall ruleset.
- T973: add basic node_exporter implementation
- T6755: Change vyos mirror URL for smoketest
- ipsec: T6101: Add validation for proposal option used in IKE group
- http-api: T6736: move REST API to a node distinct from GraphQL API
- Debian: T973: add missing dependency on node-exporter package
- op-mode: T6753: Fix json output for mtr / monitor traceroute
- static: T4283: fix missing f'ormat string
- T6759: add support for italian keymap
- GitHub: T6494: add parallel step to run interface based smoketests
- pki: T6481: auto import ACME certificate chain into CLI
- cli: T6740: add a converter from set commands to config
- smoketest: T4576: add guard timeout for systemd in log level tests
- vyos.configtree: T4318: Allow set tag flag to true or false
- config-mgmt: T5976: add option for commit-confirm to use 'soft' rollback
- haproxy: T6745: Rename reverse-proxy to haproxy
- pki: T6766: Add support for ECDSA private keys
- T6712: Add nonproduction banner (backport #4148)
- T973: add basic frr_exporter implementation
- pki: T4914: Rewrite the PKI op mode in the new style
- T6784: enabled repo-sync wokrflow only for current and equuleus
- T6791: Extend fair-queue hash-interval
- T4583: Rewrite VRRP op-mode to vyos.opmode format
- T6812: Fix smoketest iproute2 check
- login: T6712: honor 80x25 terminal size for nonproduction banner message
- op_mode: T6808: Console server op mode commands throw errors when console server is not configured
- system_login: T6807: allow a trailing slash character in system login
- T6764: Fix unhandled exception on ethtool output parsing for Xen NICs
- dhcp_server: T6852: Add op mode command "show dhcpv6 server statistics"
- T6695: Machine-readable operational mode support for traceroute
- dhcp_server: T6031: fix daemon load error when static-route options are present
- T6802: Fix QoS Policy Round-Robin with Default Configuration
- T3501: Allow using more than one tuned profile
- syslog: T6858: bugfix remote syslog using TCP
- T6861: op-mode: ignore error code 255 if this UEFI doesn't support secure boot
- T6861: op-mode: add 0 into errno expect list
- babel: T6866: IPv6 distribute-lists in access-list6 format have names not numbers
- conntrack: T6878: stop the conntrack logger daemon correctly
- dhcp-server: T6876: increase retries that Kea makes to open a socket
- T6801: QoS: Policy rate-control is broken by default
- T6795: QoS: Fix duplicate entries in class match filters
- T6884: adds mtu option for container networks
- T6490: Allow creation of wireguard interfaces without requiring peers
- T6790: QoS: Improve CAKE Policy
- avahi: T6908: add option to define max-cache entries
- dhcp: T6692: Fix range options not present when is used
- T264: IPsec add base64 encoded secret-type feature
- ipoe_server: T6872: Add the ability to configure LUA scripts and username
- T6906: IPoE-server add start-session option
- multicast: T6920: static multicast routing throws TypeError
- pki: T6809: Support system install of CA certificates
- op_mode: T6909: Move "show monitoring" and "show zebra" to "show monitoring frr"
- op_mode: T6770: Fix op command "show bridge vni"
- config-mgmt: T6925: return from verify function on config object None
- sudo: T6926: remove spam messages to syslog
- T6630: ntp: fix timestamp nested under ptp
- T6917: fix RPS ethernet settings for CPUs with more than 32 cores
- T6923: Add debian-security-mirror for package-smoketests
- vyconf: T6718: add keyword default for change in libvyosconfig binding
- T6940: updated codeowners with user list to support sync
- T6927: adds option to set container name server
- pki: T6368: Add ability for acme to listen on IPv6 addresses
- T6863: Fix default distance for PPPoE
- T6927: adds option to set container name server
- T6718: use the vyconf daemon for validation of set commands
- op_mode: T6860: Display the EULA in "run show license"
- T6940: added pr mirror sync caller workflows (revised)
- ipoe_server: T6628: Add option to assign static IP address to end users with local auth
- static: T4214: Allow several dhcp-interfaces to the same static rote
- tacacs: T6613: dynamically build exclude_users list to avoid TACACS traffic
- frr: upgrade to 10.2 and migrate protocols to unified FRRender class
- service-dns-dynamic: T6950: fix migration script logic for missing addresses
- T6799: QoS: Improve Priority-Queue Policy
- T6918: Accept invalid PPPoE Session in stateful bridge firewall.
- T6874: [QoS] Add class filter by ether
- op_mode: T6767: Check latest image version in VRF context for "add system image latest vrf "
- T6934: Add preshared key for zabbix-agent monitoring service
- frrender: T6746: runtime improvements
- T5791: Modify ddclient smoketest for reliability
- T6953: merges node and frr exporter under prometheus section
- pppoe: T6930: Remove unnecessary code
- op-mode: T6971: "monitor log" should have no output color at all
- babel: T6746: define fixed testcase order
- ifconfig: T6972: smoketests fail as IP address is not removed in time
- dhcpv6-server: T5992: Fix op-mode Kea DHCP lease output
- T6936: PPPoE-server add option combined to interface
- T6013: Add support for configuring TrustedUserCAKeys for ssh service
- smoketest: T6746: T5791: additional fixes/logic hardening
- T6976: mirror workflows updated to use reusable workflows
- T6944: adds option to enable switchdev mode on ethernet interface
- xml: T5738: re-use XML building blocks for interfaces as much as possible
- skel: T6979: disable iproute2 colors by default
- udev: T6985: Fix udev rule to also register ttyACM serial devices
- geoip: T6986: add missing cron installation path
- op_mode: T6956: Fix for "generate tech-support archive" if /config contains directories
- xml: T5738: De-duplicate 'openssh' tagNode
- T6983: treat vyos-domain-resolver as a real service
- frr: T6746: additional improvements after 10.2 upgrade
- GitHub: adjust PR template to our current needs/workflow
- T6896: OpenVPN change CRL revoke without restart
- T6949: adds blackbox exporter
- frrender: T6991: do not loose DHCP default route when no static route is defined
- srv6: T6984: add locator format configuration
- telegraf: T6477: adjusting "metric_name_label" indentation in config template
- T6994: Add textfile collector config option
- T5791: ddclient: Adjust process handling
- GitHub: T7007: add build/manifest.json to build artifacts
- T7016: force delete only dynamic IPv4 address from interface
- T6841: firewall: improve config parsing for ZBF when using VRFs and interfaces attached to VRFs
- ddclient: T5791: Keep ddclient.service in foreground
- configd: T6747: use one long-lived instance of FRRender
- packaging: T7020: hard pin libpam-radius-auth and add an explicit dependency on libnss-mapuser
- utils: T6975: Add 'vrf' and 'netns' arguments to functions in 'vyos.utils.process'
- smoketest: T7023: add tac_plus container to live validate login
- vyos.ifconfig: T7018: drop 'iftype' class attribute
- T6998: dhcp: fix depracted utcfromtimestamp usage
- smoketest: T6841: fix config tests which validate migration scripts
- interfaces: T7016: Simplify logic for force deleting dynamic IPv4 address from interface
- vrf: T7024: instance name "up" and "down" are reserved and should not be used
- xml: T7029: allow wildcard in include directive
- smoketest: T7033: nat source group test should use an existing interface
- xml: T5738: Reuse predefined regex constraint
- haproxy: T5222: Enable backend completion in service ruleset
- xml: T5738: reuse existing alpha-numeric-hyphen-underscore building block
- ddclient: T5791: Relocate process params to ExecStart
- Debian: T7023: download smoketest container images only once
- T7042: drop use of inspect module in favor of ast for source analysis
- nhrp: T2326: NHRP migration to FRR
- kea: T7041: Check lease hostname string is not empty
- T7038: T7039: fix broken RADIUS IPv6 source address and add smoketests
- nhrp: T2326: Fixed network-id migration
- remote: T7048: merge git environment with the os environment
- dhcp: T5840: Merge systemd service overrides for kea-ctrl-agent
- nhrp: T2326: Fixed opmode command help strings
- T681: Fix QoS DSCP filter
- telegraf: T7017: Telegraf should log at least info to a configured logging output
- dhcp: T7052: Refactor kea dhcp op-mode functions to vyos.kea
- T7046: add wrappers for reference tree utilities
- T6895: Merge the hsflowd-based sFlow and uacctd-based sFlow
- T7064: added pr mirror related workflows to current
- T7065: pr mirror to trigger only when the pullrequest is merged
- ntp: T6911: fix migration script to not allow empty "service ntp" CLI node
- smoketest: T6911: fix wrong router-id in loaded config validation
- T6641: Add vyos-network-event-logger Service
- T4930: Allow WireGuard peers via DNS hostname
- T6342: extend schema to handle documentation in xml
vyos-build
- T6307: Add dependency procps to build vyos-1x
- build: T3664: modify the module-level template path instead of setting an environment variable
- T6311: Docker add dependency asciidoc-base for nftables
- build: T3664: fix architecture mix-in loading
- build-script: T3664: Added more options to the image format
- build: T3664: use explicit defaults argument in the dict merging function
- build: T3664: include build flavor name in the version file
- build: T3664: include the architecture field in version data
- build: T6330: fix indention of autogenerated release.pref.chroot
- build-script: T3664: Added flavor name to a target file name
- T3420: Remove service upnp
- build-script: T3664: Add flavor and architecture to image name (rework)
- T6333 non-free-firmware to trixie
- hooks: T6346: set default boot target to multi-user.target
- T6356: normalize '.., ntp, server' path syntax in config.boot.default
- build-script: T3664: Allowed all options in both config file and comm…
- Kernel: T5887: update Linux Kernel to v6.6.31
- frr: T6250: T6283: revert local patches merged upstream
- T6386: added caller workflows and codeowners
- docker: T6388: use OCaml 4.14.2 for package builds
- kernel: T6395: Enabled VFIO_NOIOMMU support
- T6399: codeowners correction
- T6404: update vyos1x-config commit reference
- T6406: enables container cpu limits
- T6406: enables CONFIG_CFS_BANDWIDTH for cpu cgroup limits
- build: T6414: rename the "iso" flavor to "generic"
- T6415: Add repo-sync
- build: T6446: include support URL in the version data file
- migration: T6006: move config.boot.default to vyos-1x
- waagent: T6475: Added waagent build instructions
- waagent: T6475: Fixed waagent build script permissions
- waagent: T6475: Disabled waagent build for ARM64
- T6484: Smoketest: Increase KVM memory limit
- docker: arm: T6474: Initial support for dynamic arch toml loading
- Kernel: T5887: update Linux Kernel to v6.6.34
- Kernel: T5887: update Linux Kernel to v6.6.35
- T6508: pr workflows updated for branch and target
- T6506: Add a linting rule for checking executable bits on scripts
- Docker: T6510: add missing build dependencies for vyos-configd tests
- T6507: remove references to vyos-world package
- T6527: remove legacy packages
- Kernel: T5887: update Linux Kernel to v6.6.36
- T6546: unused import check permission update
- snmp: T6290: add custom package build
- Kernel: T5887: update Linux Kernel to v6.6.37
- container: T5867: pin specific podman version
- ddclient: T5797: switch to Debian SALSA repository
- Kernel: T5887: update Linux Kernel to v6.6.39
- T6584: Revert "T6293: add Mediatek MT7921 to defconfig"
- hostapd: T6597: update hostapd version
- frr: T6600: apply pending upstream patch for ospfd ldp-sync
- Kernel: T5887: update Linux Kernel to v6.6.41
- podman: T6598: add custom podman build for version 4.9.5
- Revert "frr: T6600: apply pending upstream patch for ospfd ldp-sync"
- podman: T6598: add search PATH for Go
- Kernel: T5887: update Linux Kernel to v6.6.42
- T6231: Mellanox OFED
- build: T6231: include out-of-tree Mellanox driver in image
- podman: T6598: add libgpgme11 runtime dependency
- Kernel: T5887: update Linux Kernel to v6.6.43
- T6386: Fix typo in file name
- ddclient: T5792: Use Debian build from Trixie
- podman: T6598: add fuse-overlayfs runtime dependency
- Kernel: T5887: update Linux Kernel to v6.6.45
- Kernel: T5887: update Linux Kernel to v6.6.47
- build: T6666: singular image_format in flavor files
- T6231: update OFED version and fix build script
- linux-kernel: T6485: build modules for thunderbolt and thunderbolt-net
- build: T6653: add build/manifest.json file
- T6674: Add build-scrips for packages without Jenkins
- Kernel: T5887: update Linux Kernel to v6.6.49
- T6674: Add workflow to rebuild packages
- T1416: T861: T3664: T3664: T2640: various cleanup commits
- T6674: Add keys gpg_key_id and package_branch to rebuild packages
- T6674: build-kernel: Get kernel version from the defatults
- T6703: add support for amd pstate driver
- T6674: Fix build package netfilter dependencies
- T861: add UEFI Secure Boot support
- T6684: new Debian package repo snapshot logic
- Kernel: T861: use find over ls when probing for Kernel signing public keys
- test: T4919: Fix QEMU TPM test
- build: T6653: fix a manifest generation error when using --reuse-iso
- build: T3664: improve support for custom build hooks
- build: T3664: add an option to specify artifact extensions
- ethtool: T6729: upgrade to 6.10 to make use of more --json options
- T861: sign all Kernel modules with an ephemeral key
- build: T6738: add build_type field to version data instead of the very limited and unused lts_build
- build-image: T6742: update vyos1x-config for childless non-leaf node rendering fixes
- T861: Fix kernel suffix for package build by actions
- T861: Fix mellanox build by actions
- docker: T6742: libvyosconfig update for childless node rendering
- T6755: Change default vyos mirror URL
- T6754: Delete Jenkins build packages
- T6758: Add build package xen-guest-agent
- T973: Add build script for node_exporter package
- T6763: Delete Jenkins file
- Kernel: T5887: update Linux Kernel to v6.6.54
- T6754: Ignore everyhting under packages folder via .gitignore
- Testsuite: T6494: add new make target "test-interfaces"
- T6713: Update Realtek r8152 driver
- T3303: fix location of os-release file
- docker: T4318: libvyosconfig update for set_tag value
- T973: upgrade go version in dockerfile
- T6765: Fix build python3-vici package
- T973: add build script for frr_exporter package
- T861: T6713: Sign Realtek drivers
- build: T6231: remove Mellanox OFED drivers and tools until their license status is confirmed
- actions: T6771: Build docker image without Jenkins
- Kernel: T861: T6713: fix generation of realtek driver signature
- build: T6776: use the official Zabbix repo for zabbix-agent2
- T6713: Build Realtek driver change source repo
- T6771: Fix trigger build container state changes
- Kernel: T5887: update Linux Kernel to v6.6.58
- T6684: new Debian package repo snapshot logic
- T6813: Build tarballs for the packages
- Kernel: T5887: Revert update Linux Kernel to v6.6.58
- live: T5568: Fix live grub menu entries
- T6813: Add tarballs for the netfilter
- T6840: Build OpenVPN-otp use commit id instead of master
- T6844: use our own mirror of the salt repository
- T6813: Build tarballs for the packages in the linux-kernel dir
- build: T6855: make the custom APT entry and key syntax more flexible
- frr: T6854: build FRR with PCRE2 support for better performance
- T3501: Fix cli command in check-qemu-install
- image-tools: T6864: keep file necessary for compat add image
- Kernel: T5887: update Linux Kernel to v6.6.61
- T6879: Add build amazon-cloudwatch-agent
- scripts: T6877: add a script for merging multiple flavor files
- scripts: T6877: fix an error when the base flavor for merging has no packages field
- build: T6903: allow passing vyos-1x repo path in an environment variable
- build: T6904: allow development builds to have version strings
- T6674: add package build instructions for TACACS client libraries
- T6912: Fix build package script dependencies
- build: T6905: Add stream build type
- T6912: Fix build dependency use global dependency
- build-flavors: T6913: fix Xen guest agent package in the generic image
- build: T6922: add an option to specify bootloaders for the image
- build-flavors: T6915: clean up flavor definitions
- build: T6859: include EULA files in build type definitions
- build: T6923: use the Debian mirror for security updates if it's specified explicitly
- docker: T6929: fix sed pattern for change in Opam install.sh
- T6718: use the vyconf daemon for validation of set commands
- Kernel: T5887: update Linux Kernel to v6.6.64
- T6718: update libvyosconfig commit hash for fix to dlopen lib name
- flavors: T6942: remove VM guest agents from the generic flavor
- frr: T6746: upgrade package to 10.2
- Kernel: T5887: update Linux Kernel to v6.6.66
- T6960: package-build: Disable unnecessary builds for package
- T6958: Clear Babel config on babeld stop
- T6964: Add PHONY to make VPP smoketests
- T6674: move patches to "package/<package_name>" subfolder
- eula: T6859: reformat file to honor default UNIX 80x25 terminal width and length
- T6952: enable exFat in kernel config
- T6674: remove all references to Jenkins
- T6954: added PR mirror workflows
- T6949: Adds build for blackbox exporter deb package
- GitHub: adjust PR template to our current needs/workflow
- Testsuite: T861: inform smoketest about this environment
- Testsuite: T861: use proper base MAC address from RFC7042
- Kernel: T861: enable lockdown subsystem as UEFI secure boot dependency
- Testsuite: T6999: validate content of /etc/os-release in target system
- T7019: use VyOS release train in /etc/os-release codename over Debian release
- packages: T7026: Add a script for building VPP
- testsuite: T7031: add version to manifest if not explicitly set
- T7032: Add missing libpam-radius-auth build
- T7037: Add prebuild hook for the package-build
- T7026: Use prebuild hook to build vpp
- T7043: Add arguments for CPU and memory for the check-qemu-install
- T2326: opennhrp: Removed OpenNHRP package
- T7026: Use vpp patches during build as they not applied
- T7026: Extend vyos-1x build to include vyos-vpp
- T7043: increase smoketest memory to 8G for vpp
- T7026: build vpp source plus binaries instead of only binaries
- T6895: Build hsflowd with option PSAMPLE
- frr: T6746: add libc-ares-dev build dependency
- T7046: T6342: update libvyosconfig commit hash
- Testsuite: T7043: make build/manifest.json optional