1883 Commits

Author SHA1 Message Date
RageLtMan
f24c7ca09f T4966: Delay UDEV execution, avoid rename deadlock
UDEV will rename interfaces from whatever the kernel called them
to eX before converting them to ethX during init. In current VyOS,
the second renaming operation can run into a lock on the adapter
preventing altering its name. As a result, the adapter will remain
in the eX configuration, preventing proper execution of subsequent
scripts and configuration stanzas.

The initial renaming step has to remain as it is needed to work
around other issues, which leaves the somewhat hacky approach of
delaying the second renaming step slightly in an effort to let the
device lock holders settle, releasing it for rename to ethX. This
is accomplished by a kernel commandline paramter (3s), which can be
tweaked to reduce impact or wait longer as needed on different
devices - udev.exec_delay=3
2023-01-31 13:13:55 -05:00
Christian Poessinger
09ec7740dc Revert "Resolve resource deadlock for udev iface shuffle"
This reverts commit 8e6d765be123be9d937970ee96b7d6d0b5053ed5.

This breaks existing configurations:
https://forum.vyos.io/t/yesterday-and-todays-build-causes-network-interface-getting-corrupted-vyos-1-4-rolling-202301280924-amd64-iso
2023-01-31 07:33:40 +01:00
Christian Breunig
96bda1834e
Merge pull request #299 from sempervictus/bug/interface_renaming_can_lock_udevd
T4966: Resolve resource deadlock for udev iface shuffle
2023-01-29 20:16:52 +01:00
RageLtMan
8e6d765be1 Resolve resource deadlock for udev iface shuffle
UDEV contains a default rule triggered early-on which renames all
NICs by their index to eX, systemd-udevd subsequently renames the
eX interface to ethX. Systemd-udevd can fail to rename the iface
if it still has resource locks from the prior renaming which then
fails to apply all manner of configurations resulting in a booted
zombie which cannot handle L3 traffic.

Fix the concern by removing 62-temporary-interface-rename.rules
from /etc/udev/rules.d during the cleanup hook executed in
data/live-build-config/hooks/live/82-cleanup-udev-rules.chroot.

Testing:
  Boot-tested in OpenStack under identical infrastructure-as-code
states. Verified DHCP-assigned routes, execution of cloud-init,
and configuration stanzas injected through cloud-init applied to
the FW and system.
2023-01-29 13:35:01 -05:00
John Estabrook
7d85b571ba T4961: update commit refs for vyos1x-config and libvyosconfig
Fix/improve error reporting for configtree.copy
2023-01-27 13:11:46 -06:00
Christian Breunig
d5ea780295
Kernel: T4928: update Linux Kernel to v6.1.8 2023-01-24 18:25:28 +01:00
Christian Breunig
a44db520e2
Merge pull request #298 from sever-sever/T4941
T4941: Update accel-ppp version due to IPoE issues with kernel 6
2023-01-24 18:24:38 +01:00
Viacheslav Hletenko
27026d1f15 T4941: Update accel-ppp version due to IPoE issues with kernel 6
Update 'accel-ppp' where bug fix with incompatibility IPoE
vlan_mon driver with Linux kernel 6.1.x
2023-01-24 13:50:21 +00:00
Christian Breunig
ac73adf9c1 GitHub: update PullRequest template 2023-01-21 20:03:05 +01:00
Christian Breunig
35c958cbde Jenkins: strongSwan: T1888: install libcurl4-openssl-dev 2023-01-18 20:54:56 +01:00
Christian Breunig
efa8fa1bb5 Revert "strongSwan: T1888: install libcurl4-openssl-dev build dependency"
This reverts commit 05d0c7359ee1e3084e25ba294c6492031d893423.
2023-01-18 20:54:07 +01:00
Christian Breunig
05d0c7359e strongSwan: T1888: install libcurl4-openssl-dev build dependency
ocserv docker container depends on libcurl4-gnutls-dev which automatically
uninstalls libcurl4-openssl-dev from the container. This commit re-adds the
dependency.
2023-01-18 20:53:11 +01:00
Christian Breunig
5dec87d1b9 Jenkins: run RAID-1 test before smoketest to save CPU 2023-01-18 20:53:11 +01:00
Christian Breunig
98df6df947
Kernel: T4928: update Linux Kernel to v6.1.7 2023-01-18 20:44:30 +01:00
Christian Breunig
93ce678e25
Merge pull request #293 from aapostoliuk/T4551-sagitta
strongSwan: T4551: Added soft lifetime calculation
2023-01-18 13:26:12 +01:00
aapostoliuk
f80ff8fb67 strongSwan: T4551: Added soft lifetime calculation
Depending on the configured hard lifetime the default soft lifetime
might not make sense and could even cause rekeying to get disabled.
To avoid that, derive the soft lifetime from the hard lifetime so it's
10% higher than the soft lifetime.
a2b1e06f07
2023-01-17 14:20:32 +02:00
Christian Breunig
a7ab213d74
Kernel: T4928: update Linux Kernel to v6.1.6 2023-01-15 09:13:56 +01:00
Christian Breunig
f2137d4e84 ocserv: T4937: adjust Jenkins build pipeline to current branch 2023-01-15 09:04:05 +01:00
Christian Breunig
114ddba591 Docker: T4937: add build dependencies for ocserv 2023-01-15 08:17:41 +01:00
Christian Breunig
159f0c61ad ocserv: T4937: upgrade package to version 1.1.6 2023-01-15 08:17:41 +01:00
Christian Breunig
12bfac4565
Merge pull request #292 from c-po/t3008-chrony
ntp: T3008: move from ntpd to chrony
2023-01-15 07:59:17 +01:00
Christian Breunig
e516e4c297 ntp: T3008: move from ntpd to chrony 2023-01-14 14:26:53 +01:00
Christian Breunig
68ef4ba6a3 Kernel: T4928: update ethtool to version 6.1 2023-01-12 19:48:02 +01:00
Christian Breunig
48d7734e88 Kernel: T4928: fix path on remote url 2023-01-11 18:59:50 +01:00
Christian Breunig
9dd97c1873 Kernel: T4928: update linux-firmware to 20221214 2023-01-11 18:53:40 +01:00
Christian Breunig
2a754a85f9 Kernel: T4928: update Linux Kernel to v6.1.4 2023-01-11 18:52:27 +01:00
Christian Breunig
1e59005e76 qat: T4929: update Intel QAT drivers to 4.20.0-00001 2023-01-11 18:51:46 +01:00
Christian Poessinger
426579c34b Revert "systemd: T4593: disable strongswan service by default"
This reverts commit 0351b37359517dab1a18379d180a01fd5271802e.
2023-01-09 16:36:20 +01:00
Christian Poessinger
e62acee962 Kernel: T4691: enable CONFIG_BLK_DEV_DM option
This enables Device Mapper support for either RAID targets or encrypted
partitions.
2023-01-03 07:03:10 +00:00
Christian Poessinger
dcdf45c216
Kernel: T4691: update Linux Kernel to v5.15.86 2023-01-01 09:01:13 +01:00
Christian Poessinger
1c73207450 iproute2: T4284: update package for better tc JSON support
vyos-1x QoS implementation comes with smoketests that heavily use the JSON
output of tc. There had been some bugs in the JSON formatting until version
version 6.1 of iproute2 [1, 2].

1: https://lore.kernel.org/netdev/3ac544c09842410fb863b332917a03ad@poessinger.com/
2: https://lore.kernel.org/netdev/f4806731521546b0bb7011b8c570b52b@poessinger.com/
3: https://lore.kernel.org/netdev/e1fa5169db254301bc3b5b766c2df76a@poessinger.com/
2023-01-01 08:24:24 +01:00
Christian Poessinger
46aa056544 podman: T4899: systemd services not being installed correctly 2022-12-30 08:47:29 +01:00
Christian Poessinger
6d26b89892 podman: T4901: update to v4.3.1 2022-12-30 08:46:57 +01:00
Christian Poessinger
0351b37359 systemd: T4593: disable strongswan service by default 2022-12-27 18:36:38 +01:00
Christian Poessinger
0e37be6768 strongSwan: T4593: upgrade package to 5.9.8 2022-12-27 16:34:52 +01:00
Christian Poessinger
ba3b760224 Docker: T4593: add strongSwan build dependency libtss2-dev 2022-12-26 11:07:42 +01:00
Christian Poessinger
635971761f
Kernel: T4691: update Linux Kernel to v5.15.85 2022-12-22 08:23:08 +01:00
Christian Poessinger
f906cf9a7b
Kernel: T4691: update Linux Kernel to v5.15.84 2022-12-20 15:55:56 +01:00
Christian Poessinger
17ba667401
GitHub: use private access token for review assignment 2022-12-17 11:18:46 +01:00
Christian Poessinger
1d268c92e7
Merge pull request #264 from initramfs/current-kitty-terminfo
vyos-utils: T4683: add kitty-terminfo package to build
2022-12-17 08:54:28 +01:00
Christian Poessinger
870c0c099b
GitHub: fix team reviewer assignment
Unfortunately we always used the wrong syntax.

According to https://github.com/shufo/auto-assign-reviewer-by-files
we should use: `  - team: baz`
2022-12-17 08:53:19 +01:00
Christian Poessinger
793c4e292e
Kernel: T4691: update Linux Kernel to v5.15.83 2022-12-17 08:10:19 +01:00
Christian Poessinger
f56f9f9d7b T4792: fix generated DEB package path location 2022-12-11 08:48:18 +01:00
Christian Poessinger
307cccaece T4792: add CI/CD pipeline for sstp-client 2022-12-11 07:48:54 +01:00
Christian Poessinger
9c2e0486c7 Docker: T4792: add buiold dependencies for sstp-client 2022-12-11 07:43:43 +01:00
Christian Poessinger
0451933c38
Kernel: T4691: update Linux Kernel to v5.15.82 2022-12-08 13:05:01 +01:00
Christian Poessinger
0f1eaa32bd
Kernel: T4691: update Linux Kernel to v5.15.81 2022-12-02 19:59:47 +01:00
Yuriy Andamasov
89689796fe
Update reviewers.yml 2022-11-27 02:59:44 +01:00
Christian Poessinger
abb10c40a5
Kernel: T4691: update Linux Kernel to v5.15.80 2022-11-26 19:59:58 +01:00
Christian Poessinger
062c19c58d
Merge pull request #287 from sever-sever/T4841
T4841: Disable by default fancontrol.service
2022-11-26 14:47:37 +01:00