1559 Commits

Author SHA1 Message Date
Daniil Baturin
46f5655f47
Merge pull request #398 from c-po/equuleus
frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802
2023-09-10 15:15:08 +01:00
Christian Breunig
13a5fa10d8 frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802
Before this path we used session reset method, which is discouraged by rfc7606.
Handle this as rfc requires.

This addes the fix submitted as https://github.com/FRRouting/frr/pull/14381
upstream. Using VyOS patch until the above mentioned PR is merged.
2023-09-10 16:09:50 +02:00
Daniil Baturin
6e463ebc5a
Merge pull request #393 from sever-sever/T5524-eq
T5524: Add config directory for livecd
2023-09-05 11:21:31 +01:00
Viacheslav Hletenko
3efe30b236 T5524: Add config directory for livecd
Add the '/config' directory for live image boot
One of the reasons the DHCP-server uses lease from this directory T2958

(cherry picked from commit cb330a797ef8c56d68220afc44798bcf8f2e0a47)
2023-09-05 06:38:46 +00:00
Christian Breunig
4abb3f3be9 Kernel: T5186: T3318: fix QAT build system matching new file name schema 2023-08-31 08:16:23 +02:00
Christian Breunig
a5cac5b1bd Kernel: T3318: update Linux Kernel to v5.4.255 2023-08-31 08:01:54 +02:00
Christian Breunig
4db7aab54d Kernel: T5186: T3318: undefine NEED_ETH_HW_ADDR_SET for Intel ICE driver 2023-08-31 08:01:48 +02:00
Christian Breunig
0f189caa9d Kernel: T5186: T3318: update QAT URL 2023-08-31 08:01:43 +02:00
Christian Breunig
9055e67889
Merge pull request #384 from zdc/T5187-equuleus
build: T5187: Fixed Realtek r8152 compatibility with 5.4 kernels
2023-08-30 18:12:00 +02:00
zsdc
0073533968 build: T5187: Fixed Realtek r8152 compatibility with 5.4 kernels
There is no need to define `eth_hw_addr_set()` in sources anymore because it is
already backported into the 5.4.254 kernel:

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/include/linux/etherdevice.h?h=v5.4.254&id=24f34f67be24674c5c3ef922de70ab95a0d7ce16
2023-08-30 16:15:31 +03:00
Daniil Baturin
53131ce567
Merge pull request #380 from c-po/equuleus
Equuleus Updates
2023-08-24 16:05:06 +01:00
Christian Breunig
2cb9470089
Merge pull request #368 from cuongdt1994/backport
Kernel: T5310: add stmicro driver support (Equuleus)
2023-08-24 16:21:41 +02:00
Christian Breunig
9e7e8eadde Kernel: T5186: T3318: update Linux Kernel to v5.4.254 2023-08-24 16:19:38 +02:00
Apachez
eaed7095f2 T5468: Remove unused manpages to free up space
(cherry picked from commit f9946312dfdfb8163995cf7ddd0efb1e485fc977)
2023-08-24 16:18:49 +02:00
cuongdt1994
4cc02e6e2f Kernel: T5310: add stmicro driver support
I added also additional expansion card with 2 Intel i211 NIC’s.

I want to utilize all 4 NIC’s, but I have an issue because only NIC on expansion cards are properly detected.
2023-06-27 11:53:44 +07:00
Christian Breunig
42535513ff
openvpn: T5272: fix buildPackage signature
There is no option to build arm64 packages in equuleus
2023-06-26 21:18:53 +02:00
Christian Breunig
a8edbbeeef
Merge pull request #358 from c-po/t5272-openvpn-update
openvpn: T5272: upgrade package to Debian version 2.6.3-2 (equuleus)
2023-06-25 22:30:35 +02:00
Christian Breunig
47847fdf06
Merge pull request #351 from c-po/equuleus
Kernel: T5186: T3318: update Linux Kernel to v5.4.243
2023-06-24 16:27:47 +02:00
Christian Breunig
3351c169cf
Merge pull request #359 from cuongdt1994/equuleus
T5280: Update Expired keys (2023-06-08) for PowerDNS
2023-06-11 17:51:30 +02:00
cuongdt1994
2665b46709 T5280: Update Expired keys (2023-06-08) for PowerDNS
Packages in the versioned repositories are signed with PGP key-id 0xFD380FBB
2023-06-11 03:45:20 +07:00
Christian Breunig
6383f8ae27 openvpn: T5272: upgrade package to Debian version 2.6.3-2 2023-06-08 21:32:41 +02:00
Christian Breunig
7dc14608ef Kernel: T5186: T3318: update Linux Kernel to v5.4.243 2023-06-08 21:28:51 +02:00
Viacheslav Hletenko
bc64a3a722
Merge pull request #353 from zdc/T4737-equuleus
frr: T4737: Replaced patch for connected routes processing
1.3.3
2023-05-24 21:21:55 +03:00
zsdc
0c56ce9671 frr: T4737: Replaced patch for connected routes processing
An old patch breaks connected routes in a situation when more than one IP
address is presented on an interface and it switches state from down to up:

```
ip link set eth0 down
ip a add 192.0.2.50/24 dev eth0
ip a add 192.0.2.51/24 dev eth0
ip link set eth0 up
```

A new version includes more backports from frr upstream, which work well
regardless of an interface state.
2023-05-24 20:58:04 +03:00
Daniil Baturin
9b60bf0a5f
Merge pull request #350 from zdc/T5221-equuleus
FRR: Fixed BGP as-override behavior
2023-05-12 13:38:38 +01:00
zsdc
f0cf9ac8a9 FRR: T5221: Fixed BGP as-override behavior
Override peer's ASN even if original as-path contains other ASNs

This is a backport of 9bbdb4572d3bb255211fecf1c756452ab27e91c2 from
the main FRR repository
2023-05-12 14:24:49 +03:00
Christian Breunig
3ba073d0e1
Kernel: T5186: revert to 5.4.234 due to QoS issues 2023-05-11 18:53:25 +02:00
Christian Breunig
cc62b93ef9 T5186: Revert "Kernel: T3318: update Linux Kernel to v5.4.240"
This reverts commit e873e9385cb3a9ed94d7d5cf1c967aaec9b4f504.

Newer kernel versions break QoS b/c of incompatible tc change.
2023-05-10 18:37:26 +02:00
Daniil Baturin
8e5e747687
Merge pull request #343 from zdc/T5187-equuleus
r8152: T5187: Updated Realtek r8152 driver
2023-04-27 16:06:33 +01:00
zsdc
56c5dfe8c6 r8152: T5187: Updated Realtek r8152 driver
The Realtek r8152 driver is updated to 2.16.3
2023-04-27 17:19:12 +03:00
Daniil Baturin
97ed73bf35
Merge pull request #341 from zdc/T5182-equuleus
ice: T5182: Included Intel ICE driver to the system
2023-04-26 14:26:12 +01:00
zsdc
beb077829b ice: T5182: Included Intel ICE driver to the system
Intel ICE driver for E810 Ethernet Controllers is included in the
list of requirements for images and initramfs.
2023-04-26 13:44:48 +03:00
Christian Breunig
012a23fbaa
Merge pull request #340 from zdc/T5182-equuleus
ice: T5182: added build task for Intel ICE driver
2023-04-26 09:00:36 +02:00
zsdc
8f78333e6d ice: T5182: added build for Intel ICE driver
This commit adds a build task for an out-of-tree Intel ICE driver
for E810 Ethernet Controllers.
2023-04-26 01:49:54 +03:00
Christian Breunig
bd9b3b3f6e
Merge pull request #339 from zdc/T5180-equuleus
initramfs-tools: T5180: Updated initramfs tools to v0.140
2023-04-25 23:04:28 +02:00
zsdc
93663b974f initramfs-tools: T5180: Updated initramfs tools to v0.140
The new version contains important changes in firmware path selection.
This is required for proper driver integrations.
2023-04-25 22:39:09 +03:00
Christian Breunig
e873e9385c
Kernel: T3318: update Linux Kernel to v5.4.240 2023-04-12 21:18:44 +02:00
Christian Breunig
42cabbe839
Merge pull request #330 from c-po/equuleus
T425: add amazon-cloudwatch-agent to AWS image (equuleus)
2023-04-02 16:30:18 +02:00
Christian Breunig
bafb293ccb
Kernel: T3318: update Linux Kernel to v5.4.239 2023-04-01 15:55:37 +02:00
Christian Breunig
8980a52045 T425: add amazon-cloudwatch-agent to AWS image 2023-03-31 13:31:32 +02:00
Christian Breunig
c46bdae0a6
Merge pull request #323 from c-po/equuleus
systemd: T5111: always disable pppd-dns.service
2023-03-29 21:39:47 +02:00
Christian Breunig
d961dd7e1f systemd: T5111: always disable pppd-dns.service
An update to the Debian ppp package remove the needed
/etc/ppp/ip-down.d/0000usepeerdns file. As DNS resolution is handled by
vyos-hostsd we can disable this service entirely.
2023-03-25 11:18:11 +01:00
Daniil Baturin
3ffe9a2689
Merge pull request #318 from c-po/t4625-ocserv-update
Docker: T4625: add missing build dependencies
1.3.3-epa1
2023-03-02 16:13:31 +00:00
Christian Breunig
253a3c4416 Docker: T4625: add missing build dependencies
Commit 317ffe1 ("T4625: Update ocserv packet to 1.1.6-3") updated the version
used for ocserv on VyOS 1.3. This commit adds the missing dependencies
for the Docker container in order to build the ocserv packages.
2023-03-02 17:08:56 +01:00
Christian Breunig
1dedfa4414
Merge pull request #317 from c-po/equuleus-updates
T3318: T5003: Docker and Kernel updates for equuleus
2023-03-02 06:54:41 +01:00
Christian Poessinger
39035427cf Kernel: T3318: update Linux Kernel to v5.4.233 2023-03-01 22:24:39 +01:00
Christian Poessinger
06a908594f T5003: backport changes from master to support latest Docker version on CI hosts
The newer Docker versions seem to be a bit more picky when using tools
like goso. The container will no longer start if the gosu binary has the setuid
root bit set.

This change adjusts the container to continue working on recent Docker
versions.
2023-03-01 22:22:35 +01:00
Christian Breunig
598e9f5821
Merge pull request #316 from sever-sever/T4625
T4625: Update ocserv packet to 1.1.6-3
2023-02-28 18:53:14 +01:00
Viacheslav Hletenko
317ffe13ad T4625: Update ocserv packet to 1.1.6-3 2023-02-28 17:32:03 +00:00
Christian Breunig
c4521c495a
Merge pull request #305 from c-po/equuleus
T5001: Replace links to the phabricator site
2023-02-12 21:31:38 +01:00