1581 Commits

Author SHA1 Message Date
Daniil Baturin
1488e906e2
Merge pull request #494 from sever-sever/T6014-eq
T6014: Bump keepalived version to v2.2.8
1.3.6
2024-02-06 13:10:16 +00:00
Viacheslav Hletenko
2b417a1d09 T6014: Bump keepalived version to v2.2.8 2024-02-05 09:53:13 +00:00
Christian Breunig
7ca43c83bc
Merge pull request #492 from c-po/kernel-5.4
Kernel: T3318: update Linux Kernel to v5.4.268
2024-02-01 21:42:37 +01:00
Christian Breunig
de011bfd4e Kernel: T3318: update Linux Kernel to v5.4.268 2024-02-01 20:47:49 +01:00
Daniil Baturin
8073d93558
Merge pull request #274 from initramfs/equuleus-dhcp6c-fix
backport: wide-dhcpv6: T4760: fix support for multiple dhcp6c instances
2023-12-21 16:10:00 +00:00
Christian Breunig
9484081781
Merge pull request #471 from vyos/mergify/bp/equuleus/pr-469
initramfs: T5824: Added `openssl.cnf` to initramfs (backport #469)
2023-12-14 17:41:34 +01:00
zsdc
17e4d89a04 initramfs: T5824: Added openssl.cnf to initramfs
Without `openssl.cnf` software that uses `libssl` (for example busybox) has
issues with connections to some HTTPS servers.

(cherry picked from commit 5765d670099dfc2bb4758264a84a36fdd9cba5d4)
2023-12-14 16:22:36 +00:00
Daniil Baturin
d5f3d5002f
Merge pull request #461 from c-po/t3318-kernel-5.4.261
Kernel: T3318: update Linux Kernel to v5.4.261
1.3.5
2023-11-25 09:35:10 +00:00
Christian Breunig
e419de9785 Kernel: T3318: update Linux Kernel to v5.4.261 2023-11-24 11:47:24 +01:00
Christian Breunig
e526ec20c5
Merge pull request #458 from aapostoliuk/T5402-equuleus
keepalived: T5402: Added patch with arp_ignore to 1 on IPv6 VMACs
2023-11-23 20:24:21 +01:00
aapostoliuk
fd886320f8 keepalived: T5402: Added patch with arp_ignore to 1 on IPv6 VMACs
Added patch with commit '9ca8688' to keepalived package.
Setting arp_ignore to 1 ensures that the VMAC interface
does not respond to ARP requests for IPv4 addresses not
configured on the VMAC.
Backported from 1.5.
2023-11-23 13:27:11 +02:00
Christian Breunig
7b385117de
Merge pull request #440 from aapostoliuk/T5684-equuleus
systemd: T5684: Incrised DefaultLimitMEMLOCK to 8M
2023-10-25 20:39:52 +02:00
aapostoliuk
0d837d85c5 systemd: T5684: Incrised DefaultLimitMEMLOCK to 8M
This fix increases DefaultLimitMEMLOCK from 64K to 8M.
Some services cannot run, when memlock eq 64K
This bug was fixed in the next kernel release
9dcc38e281
2023-10-25 17:33:47 +03:00
Daniil Baturin
0dc534f9d9
Merge pull request #437 from c-po/equuleus
systemd: T5354: always disable sshguard.service
2023-10-18 21:47:52 +01:00
Christian Breunig
714be49620 systemd: T5354: always disable sshguard.service 2023-10-18 07:37:29 +02:00
Daniil Baturin
986c77ac08
Merge pull request #431 from dmbaturin/T5624-delete-debian-version
T5624: add a hook for deleting /etc/debian_version
1.3.4
2023-09-29 15:16:04 +01:00
Daniil Baturin
c13949a63e T5624: add a hook for deleting /etc/debian_version 2023-09-29 14:59:46 +01:00
Christian Breunig
108255f13c
Merge pull request #422 from c-po/equuleus
Revert "openvpn: T5272: upgrade package to Debian version 2.6.3-2"
2023-09-26 06:29:46 +02:00
Christian Breunig
bda63d4ac2 Revert "openvpn: T5272: upgrade package to Debian version 2.6.3-2"
This reverts commit 6383f8ae2716635d87c685df764aabcc608381e3.
2023-09-25 20:08:23 +02:00
Christian Breunig
ef9062c458
Merge pull request #399 from c-po/equuleus
Revert "frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802"
2023-09-10 20:35:21 +02:00
Christian Breunig
23dad9a777 Revert "frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802"
This reverts commit 13a5fa10d8c8632d08cf48a445c7d5925d3d42c4.

Patch merged upstream
2023-09-10 18:46:06 +02:00
Daniil Baturin
46f5655f47
Merge pull request #398 from c-po/equuleus
frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802
2023-09-10 15:15:08 +01:00
Christian Breunig
13a5fa10d8 frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802
Before this path we used session reset method, which is discouraged by rfc7606.
Handle this as rfc requires.

This addes the fix submitted as https://github.com/FRRouting/frr/pull/14381
upstream. Using VyOS patch until the above mentioned PR is merged.
2023-09-10 16:09:50 +02:00
Daniil Baturin
6e463ebc5a
Merge pull request #393 from sever-sever/T5524-eq
T5524: Add config directory for livecd
2023-09-05 11:21:31 +01:00
Viacheslav Hletenko
3efe30b236 T5524: Add config directory for livecd
Add the '/config' directory for live image boot
One of the reasons the DHCP-server uses lease from this directory T2958

(cherry picked from commit cb330a797ef8c56d68220afc44798bcf8f2e0a47)
2023-09-05 06:38:46 +00:00
Christian Breunig
4abb3f3be9 Kernel: T5186: T3318: fix QAT build system matching new file name schema 2023-08-31 08:16:23 +02:00
Christian Breunig
a5cac5b1bd Kernel: T3318: update Linux Kernel to v5.4.255 2023-08-31 08:01:54 +02:00
Christian Breunig
4db7aab54d Kernel: T5186: T3318: undefine NEED_ETH_HW_ADDR_SET for Intel ICE driver 2023-08-31 08:01:48 +02:00
Christian Breunig
0f189caa9d Kernel: T5186: T3318: update QAT URL 2023-08-31 08:01:43 +02:00
Christian Breunig
9055e67889
Merge pull request #384 from zdc/T5187-equuleus
build: T5187: Fixed Realtek r8152 compatibility with 5.4 kernels
2023-08-30 18:12:00 +02:00
zsdc
0073533968 build: T5187: Fixed Realtek r8152 compatibility with 5.4 kernels
There is no need to define `eth_hw_addr_set()` in sources anymore because it is
already backported into the 5.4.254 kernel:

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/include/linux/etherdevice.h?h=v5.4.254&id=24f34f67be24674c5c3ef922de70ab95a0d7ce16
2023-08-30 16:15:31 +03:00
Daniil Baturin
53131ce567
Merge pull request #380 from c-po/equuleus
Equuleus Updates
2023-08-24 16:05:06 +01:00
Christian Breunig
2cb9470089
Merge pull request #368 from cuongdt1994/backport
Kernel: T5310: add stmicro driver support (Equuleus)
2023-08-24 16:21:41 +02:00
Christian Breunig
9e7e8eadde Kernel: T5186: T3318: update Linux Kernel to v5.4.254 2023-08-24 16:19:38 +02:00
Apachez
eaed7095f2 T5468: Remove unused manpages to free up space
(cherry picked from commit f9946312dfdfb8163995cf7ddd0efb1e485fc977)
2023-08-24 16:18:49 +02:00
cuongdt1994
4cc02e6e2f Kernel: T5310: add stmicro driver support
I added also additional expansion card with 2 Intel i211 NIC’s.

I want to utilize all 4 NIC’s, but I have an issue because only NIC on expansion cards are properly detected.
2023-06-27 11:53:44 +07:00
Christian Breunig
42535513ff
openvpn: T5272: fix buildPackage signature
There is no option to build arm64 packages in equuleus
2023-06-26 21:18:53 +02:00
Christian Breunig
a8edbbeeef
Merge pull request #358 from c-po/t5272-openvpn-update
openvpn: T5272: upgrade package to Debian version 2.6.3-2 (equuleus)
2023-06-25 22:30:35 +02:00
Christian Breunig
47847fdf06
Merge pull request #351 from c-po/equuleus
Kernel: T5186: T3318: update Linux Kernel to v5.4.243
2023-06-24 16:27:47 +02:00
Christian Breunig
3351c169cf
Merge pull request #359 from cuongdt1994/equuleus
T5280: Update Expired keys (2023-06-08) for PowerDNS
2023-06-11 17:51:30 +02:00
cuongdt1994
2665b46709 T5280: Update Expired keys (2023-06-08) for PowerDNS
Packages in the versioned repositories are signed with PGP key-id 0xFD380FBB
2023-06-11 03:45:20 +07:00
Christian Breunig
6383f8ae27 openvpn: T5272: upgrade package to Debian version 2.6.3-2 2023-06-08 21:32:41 +02:00
Christian Breunig
7dc14608ef Kernel: T5186: T3318: update Linux Kernel to v5.4.243 2023-06-08 21:28:51 +02:00
Viacheslav Hletenko
bc64a3a722
Merge pull request #353 from zdc/T4737-equuleus
frr: T4737: Replaced patch for connected routes processing
1.3.3
2023-05-24 21:21:55 +03:00
zsdc
0c56ce9671 frr: T4737: Replaced patch for connected routes processing
An old patch breaks connected routes in a situation when more than one IP
address is presented on an interface and it switches state from down to up:

```
ip link set eth0 down
ip a add 192.0.2.50/24 dev eth0
ip a add 192.0.2.51/24 dev eth0
ip link set eth0 up
```

A new version includes more backports from frr upstream, which work well
regardless of an interface state.
2023-05-24 20:58:04 +03:00
Daniil Baturin
9b60bf0a5f
Merge pull request #350 from zdc/T5221-equuleus
FRR: Fixed BGP as-override behavior
2023-05-12 13:38:38 +01:00
zsdc
f0cf9ac8a9 FRR: T5221: Fixed BGP as-override behavior
Override peer's ASN even if original as-path contains other ASNs

This is a backport of 9bbdb4572d3bb255211fecf1c756452ab27e91c2 from
the main FRR repository
2023-05-12 14:24:49 +03:00
Christian Breunig
3ba073d0e1
Kernel: T5186: revert to 5.4.234 due to QoS issues 2023-05-11 18:53:25 +02:00
Christian Breunig
cc62b93ef9 T5186: Revert "Kernel: T3318: update Linux Kernel to v5.4.240"
This reverts commit e873e9385cb3a9ed94d7d5cf1c967aaec9b4f504.

Newer kernel versions break QoS b/c of incompatible tc change.
2023-05-10 18:37:26 +02:00
Daniil Baturin
8e5e747687
Merge pull request #343 from zdc/T5187-equuleus
r8152: T5187: Updated Realtek r8152 driver
2023-04-27 16:06:33 +01:00