image-tools: T5883: preserve file owner in /config on add system update

T5880: verify_source_interface() should not allow dynamic interfaces like ppp, l2tp, ipoe or sst...

login: T5875: restore home directory permissions only when needed

T3476: Add option latest to add system image

Interfaces matching the following regex (ppp|pppoe|sstpc|l2tp|ipoe)[0-9]+ can
not be used as sou...

A tunnel interface can not properly be sourced from a pppoe0 interface when
such interface is no...

This improves commit 3c990f49e ("login: T5875: restore home directory
permissions when re-adding...

T5474: establish common file name pattern for XML conf mode commands

We will use _ as CLI level divider. The XML definition filename and also
the Python helper shoul...

dhcp: T3316: Adjust kea lease files' location and permissions

T5870: ipsec remote access VPN: add x509 ("pubkey") authentication.

Add option `latest` for op-mode command `add system image`
If the update check is configured we ...

This extends commit 1a84c4d0e ("ipsec: T1210: add smoketest for remote-access
(road-warrior) use...

ipsec: T1210: add smoketest for remote-access (road-warrior) users

login: T5875: restore home directory permissions when re-adding user account

Documentation pdate for https://github.com/vyos/vyos-1x/pull/2718

system: T5877: Shorten system domain-search config path

Python unittest framework treads the comments as test names during execution:

Example:
test_acc...

T5688: Fixed ip pool migration scripts for l2tp, sstp, pppoe

In addition to testing for shortening the domain-search path, add and
improve tests for other re...

Shorten and simplify `system domain-search` config path from:
```
set system domain-search domai...

After deleting a user account and working with a newly added account, we see
that after rebootin...

tacacs: T141: Wrap string in double quotes to allow expansion

Allowing `_kea` to be a member of `vyattacfg` group allows
kea-dhcp{4,6}-server to have access t...

vyos.template: T5869: first_host_address() does not honor RFC4291 section 2.6.1

nat: T5681: relax wording on non existing interface Warning message

smoketest: T5867: extend container tests for IPv4 and IPv6 networks

Fixed migration 'subnet' option in l2tp, sstp, pppoe.
'subnet' option can contain several values.

Remove the word "error" from a Warning only message to not irritate the user.

We have had duplicated test cases in test_jinja_filters.py and test_template.py,
They have been ...

The subnet router anycast address is predefined. Its format is as follows:

| ...

Move the kea lease file to a separate directory `/config/dhcp` that `kea`
process can write to s...

ddclient: T5852: add missing priority

Running ddclient on a VLAN interface will fail during reboot as there is no
discrete priority to...

This option will completely drop `system login` section from the configuration.

container: T5867: upgrade podman to 4.7.2 (Debian Trixie)

container: T5867: disable healthchecks due to upstream issue

op-mode: T5866: Add command to restart IPv6 RA daemon

conmon 402de34b31388b5a2e1c <error>: Unable to send container stderr message to parent Broken pi...

vyos@vyos:~$ restart router-advert

cc_vyos: T5862: Fixed network configuration

- added extra check for maximum supported MTU to avoid exceeding it during
configuration
- remov...

T5801: Rewritten L2TP to get_config_dict

T5842: Rewritten PPTP to get_config_dict

dhcp: T3316: Support hostname, DUID and MAC address in reservation

Conntrack timeout

ocserv: add http-security-headers documentation

dhcp-server: update docs for op-mode command <show dhcp server leases>

Github: update current branch

Rewritten PPTP to get_config_dict
Fixed 'dynamic-author' commands. These commands did not create...

T5859: Fixed format of pool range in the accel-ppp config

firewall: T5834: Rename 'enable-default-log' to 'default-log'

Sometimes we need to add extra files, like configurations. This role allows to
copy them into th...

Fixed format of ipv4 pool range from 'x.x.x.x-x.x.x.y'
to 'x.x.x.x-y'

This file is a left over from previous refactoring and no longer
referenced anywhere in the inte...

`include/firewall/rule-log-options.xml.i` is now more aptly renamed to
`include/firewall/log-opt...

One can now do `set policy route foo default-log` which will add log
to the policy route chain.

Rename chain level defaults log option from `enable-default-log` to
`default-log` for consistency.

ddclient: T5144: Warn against configuration with broken IP lookup service

We always enable HTTPS in ddclient configuration, however
`http://checkip.dyndns.org` is HTTP on...

updating network name to reflect new limitation from 11 to 9

Add configuration commands and brief example of firewall Flowtables. …

Add system update-check example

ddclient: T5144: Migrate web-options url to stricter format

Add an example of online checking for updates
```
set system update-check auto-check
set system ...

ethernet: T5566: disable energy efficient ethernet (EEE) for interfaces

VyOS is a routing (packet pushing) platform, thus supporting EEE which
potentially causes issues...

snmp: T5855: migrate "set service lldp snmp enable" to "set service lldp snmp"

snmp: T5855: migrate "set service lldp snmp enable" to "set service lldp snmp"

Legacy ddclient allowed arbitrary URLs in web-options, but the new
has stricter validations. App...

configdict: T5837: add support to return added nodes when calling node_changed()

snmp: 5856: fix service removal error

When deleting SNMP from CLI the 'delete' key was not honored in the config
dictionary, leading t...

In the past, node_changed() suggested it would also return nodes that got added
(function commen...

node_changed() will return a list of changed keys under "path". We are not
always interested wha...