Daniil Baturin
46f5655f47
Merge pull request #398 from c-po/equuleus
...
frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802
2023-09-10 15:15:08 +01:00
Christian Breunig
13a5fa10d8
frr: T5557: use treat-as-withdraw for tunnel encapsulation attribute CVE-2023-38802
...
Before this path we used session reset method, which is discouraged by rfc7606.
Handle this as rfc requires.
This addes the fix submitted as https://github.com/FRRouting/frr/pull/14381
upstream. Using VyOS patch until the above mentioned PR is merged.
2023-09-10 16:09:50 +02:00
Daniil Baturin
6e463ebc5a
Merge pull request #393 from sever-sever/T5524-eq
...
T5524: Add config directory for livecd
2023-09-05 11:21:31 +01:00
Viacheslav Hletenko
3efe30b236
T5524: Add config directory for livecd
...
Add the '/config' directory for live image boot
One of the reasons the DHCP-server uses lease from this directory T2958
(cherry picked from commit cb330a797ef8c56d68220afc44798bcf8f2e0a47)
2023-09-05 06:38:46 +00:00
Christian Breunig
4abb3f3be9
Kernel: T5186: T3318: fix QAT build system matching new file name schema
2023-08-31 08:16:23 +02:00
Christian Breunig
a5cac5b1bd
Kernel: T3318: update Linux Kernel to v5.4.255
2023-08-31 08:01:54 +02:00
Christian Breunig
4db7aab54d
Kernel: T5186: T3318: undefine NEED_ETH_HW_ADDR_SET for Intel ICE driver
2023-08-31 08:01:48 +02:00
Christian Breunig
0f189caa9d
Kernel: T5186: T3318: update QAT URL
2023-08-31 08:01:43 +02:00
Christian Breunig
9055e67889
Merge pull request #384 from zdc/T5187-equuleus
...
build: T5187: Fixed Realtek r8152 compatibility with 5.4 kernels
2023-08-30 18:12:00 +02:00
zsdc
0073533968
build: T5187: Fixed Realtek r8152 compatibility with 5.4 kernels
...
There is no need to define `eth_hw_addr_set()` in sources anymore because it is
already backported into the 5.4.254 kernel:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/include/linux/etherdevice.h?h=v5.4.254&id=24f34f67be24674c5c3ef922de70ab95a0d7ce16
2023-08-30 16:15:31 +03:00
Daniil Baturin
53131ce567
Merge pull request #380 from c-po/equuleus
...
Equuleus Updates
2023-08-24 16:05:06 +01:00
Christian Breunig
2cb9470089
Merge pull request #368 from cuongdt1994/backport
...
Kernel: T5310: add stmicro driver support (Equuleus)
2023-08-24 16:21:41 +02:00
Christian Breunig
9e7e8eadde
Kernel: T5186: T3318: update Linux Kernel to v5.4.254
2023-08-24 16:19:38 +02:00
Apachez
eaed7095f2
T5468: Remove unused manpages to free up space
...
(cherry picked from commit f9946312dfdfb8163995cf7ddd0efb1e485fc977)
2023-08-24 16:18:49 +02:00
cuongdt1994
4cc02e6e2f
Kernel: T5310: add stmicro driver support
...
I added also additional expansion card with 2 Intel i211 NIC’s.
I want to utilize all 4 NIC’s, but I have an issue because only NIC on expansion cards are properly detected.
2023-06-27 11:53:44 +07:00
Christian Breunig
42535513ff
openvpn: T5272: fix buildPackage signature
...
There is no option to build arm64 packages in equuleus
2023-06-26 21:18:53 +02:00
Christian Breunig
a8edbbeeef
Merge pull request #358 from c-po/t5272-openvpn-update
...
openvpn: T5272: upgrade package to Debian version 2.6.3-2 (equuleus)
2023-06-25 22:30:35 +02:00
Christian Breunig
47847fdf06
Merge pull request #351 from c-po/equuleus
...
Kernel: T5186: T3318: update Linux Kernel to v5.4.243
2023-06-24 16:27:47 +02:00
Christian Breunig
3351c169cf
Merge pull request #359 from cuongdt1994/equuleus
...
T5280: Update Expired keys (2023-06-08) for PowerDNS
2023-06-11 17:51:30 +02:00
cuongdt1994
2665b46709
T5280: Update Expired keys (2023-06-08) for PowerDNS
...
Packages in the versioned repositories are signed with PGP key-id 0xFD380FBB
2023-06-11 03:45:20 +07:00
Christian Breunig
6383f8ae27
openvpn: T5272: upgrade package to Debian version 2.6.3-2
2023-06-08 21:32:41 +02:00
Christian Breunig
7dc14608ef
Kernel: T5186: T3318: update Linux Kernel to v5.4.243
2023-06-08 21:28:51 +02:00
Viacheslav Hletenko
bc64a3a722
Merge pull request #353 from zdc/T4737-equuleus
...
frr: T4737: Replaced patch for connected routes processing
1.3.3
2023-05-24 21:21:55 +03:00
zsdc
0c56ce9671
frr: T4737: Replaced patch for connected routes processing
...
An old patch breaks connected routes in a situation when more than one IP
address is presented on an interface and it switches state from down to up:
```
ip link set eth0 down
ip a add 192.0.2.50/24 dev eth0
ip a add 192.0.2.51/24 dev eth0
ip link set eth0 up
```
A new version includes more backports from frr upstream, which work well
regardless of an interface state.
2023-05-24 20:58:04 +03:00
Daniil Baturin
9b60bf0a5f
Merge pull request #350 from zdc/T5221-equuleus
...
FRR: Fixed BGP as-override behavior
2023-05-12 13:38:38 +01:00
zsdc
f0cf9ac8a9
FRR: T5221: Fixed BGP as-override behavior
...
Override peer's ASN even if original as-path contains other ASNs
This is a backport of 9bbdb4572d3bb255211fecf1c756452ab27e91c2 from
the main FRR repository
2023-05-12 14:24:49 +03:00
Christian Breunig
3ba073d0e1
Kernel: T5186: revert to 5.4.234 due to QoS issues
2023-05-11 18:53:25 +02:00
Christian Breunig
cc62b93ef9
T5186: Revert "Kernel: T3318: update Linux Kernel to v5.4.240"
...
This reverts commit e873e9385cb3a9ed94d7d5cf1c967aaec9b4f504.
Newer kernel versions break QoS b/c of incompatible tc change.
2023-05-10 18:37:26 +02:00
Daniil Baturin
8e5e747687
Merge pull request #343 from zdc/T5187-equuleus
...
r8152: T5187: Updated Realtek r8152 driver
2023-04-27 16:06:33 +01:00
zsdc
56c5dfe8c6
r8152: T5187: Updated Realtek r8152 driver
...
The Realtek r8152 driver is updated to 2.16.3
2023-04-27 17:19:12 +03:00
Daniil Baturin
97ed73bf35
Merge pull request #341 from zdc/T5182-equuleus
...
ice: T5182: Included Intel ICE driver to the system
2023-04-26 14:26:12 +01:00
zsdc
beb077829b
ice: T5182: Included Intel ICE driver to the system
...
Intel ICE driver for E810 Ethernet Controllers is included in the
list of requirements for images and initramfs.
2023-04-26 13:44:48 +03:00
Christian Breunig
012a23fbaa
Merge pull request #340 from zdc/T5182-equuleus
...
ice: T5182: added build task for Intel ICE driver
2023-04-26 09:00:36 +02:00
zsdc
8f78333e6d
ice: T5182: added build for Intel ICE driver
...
This commit adds a build task for an out-of-tree Intel ICE driver
for E810 Ethernet Controllers.
2023-04-26 01:49:54 +03:00
Christian Breunig
bd9b3b3f6e
Merge pull request #339 from zdc/T5180-equuleus
...
initramfs-tools: T5180: Updated initramfs tools to v0.140
2023-04-25 23:04:28 +02:00
zsdc
93663b974f
initramfs-tools: T5180: Updated initramfs tools to v0.140
...
The new version contains important changes in firmware path selection.
This is required for proper driver integrations.
2023-04-25 22:39:09 +03:00
Christian Breunig
e873e9385c
Kernel: T3318: update Linux Kernel to v5.4.240
2023-04-12 21:18:44 +02:00
Christian Breunig
42cabbe839
Merge pull request #330 from c-po/equuleus
...
T425: add amazon-cloudwatch-agent to AWS image (equuleus)
2023-04-02 16:30:18 +02:00
Christian Breunig
bafb293ccb
Kernel: T3318: update Linux Kernel to v5.4.239
2023-04-01 15:55:37 +02:00
Christian Breunig
8980a52045
T425: add amazon-cloudwatch-agent to AWS image
2023-03-31 13:31:32 +02:00
Christian Breunig
c46bdae0a6
Merge pull request #323 from c-po/equuleus
...
systemd: T5111: always disable pppd-dns.service
2023-03-29 21:39:47 +02:00
Christian Breunig
d961dd7e1f
systemd: T5111: always disable pppd-dns.service
...
An update to the Debian ppp package remove the needed
/etc/ppp/ip-down.d/0000usepeerdns file. As DNS resolution is handled by
vyos-hostsd we can disable this service entirely.
2023-03-25 11:18:11 +01:00
Daniil Baturin
3ffe9a2689
Merge pull request #318 from c-po/t4625-ocserv-update
...
Docker: T4625: add missing build dependencies
1.3.3-epa1
2023-03-02 16:13:31 +00:00
Christian Breunig
253a3c4416
Docker: T4625: add missing build dependencies
...
Commit 317ffe1 ("T4625: Update ocserv packet to 1.1.6-3") updated the version
used for ocserv on VyOS 1.3. This commit adds the missing dependencies
for the Docker container in order to build the ocserv packages.
2023-03-02 17:08:56 +01:00
Christian Breunig
1dedfa4414
Merge pull request #317 from c-po/equuleus-updates
...
T3318: T5003: Docker and Kernel updates for equuleus
2023-03-02 06:54:41 +01:00
Christian Poessinger
39035427cf
Kernel: T3318: update Linux Kernel to v5.4.233
2023-03-01 22:24:39 +01:00
Christian Poessinger
06a908594f
T5003: backport changes from master to support latest Docker version on CI hosts
...
The newer Docker versions seem to be a bit more picky when using tools
like goso. The container will no longer start if the gosu binary has the setuid
root bit set.
This change adjusts the container to continue working on recent Docker
versions.
2023-03-01 22:22:35 +01:00
Christian Breunig
598e9f5821
Merge pull request #316 from sever-sever/T4625
...
T4625: Update ocserv packet to 1.1.6-3
2023-02-28 18:53:14 +01:00
Viacheslav Hletenko
317ffe13ad
T4625: Update ocserv packet to 1.1.6-3
2023-02-28 17:32:03 +00:00
Christian Breunig
c4521c495a
Merge pull request #305 from c-po/equuleus
...
T5001: Replace links to the phabricator site
2023-02-12 21:31:38 +01:00