OPNSense/core af9c810src/opnsense/scripts/firmware update.sh

firmware: doesn't work either; time to call it a day
DeltaFile
+0-8src/opnsense/scripts/firmware/update.sh
+0-81 files

OPNSense/core 0fd0daesrc/opnsense/scripts/firmware update.sh

firmware: typo

(cherry picked from commit eef31ec6c064abd68ce5e641af989b3e62006d4d)
DeltaFile
+1-1src/opnsense/scripts/firmware/update.sh
+1-11 files

OPNSense/core eef31ecsrc/opnsense/scripts/firmware update.sh

firmware: typo
DeltaFile
+1-1src/opnsense/scripts/firmware/update.sh
+1-11 files

OPNSense/core 12fa856src/opnsense/scripts/firmware update.sh

firmware: park this code here instead as it should work better
DeltaFile
+8-0src/opnsense/scripts/firmware/update.sh
+8-01 files

OPNSense/core c0e2db4. plist, src/etc/rc.syshook.d/update 20-isc-dhcp-plugin.sh

firmware: ok no safety net then

>>> Invoking update script 'isc-dhcp-plugin.sh'
Installing legacy ISC-DHCP plugin for compatibility...
Strict TLS 1.3 and CRL checking is enabled.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
process with pid 7698 still holds the lock
process with pid 7698 still holds the lock
process with pid 7698 still holds the lock
process with pid 7698 still holds the lock
process with pid 7698 still holds the lock
process with pid 7698 still holds the lock
pkg: Cannot get an advisory lock on a database, it is locked by another process
process with pid 7698 still holds the lock
process with pid 7698 still holds the lock
process with pid 7698 still holds the lock
process with pid 7698 still holds the lock

    [3 lines not shown]
DeltaFile
+0-33src/etc/rc.syshook.d/update/20-isc-dhcp-plugin.sh
+0-1plist
+0-342 files

OPNSense/core d6790ec. plist, src/etc/rc.syshook.d/update 20-isc-dhcp-plugin.sh

firmware: on the development side run the isc-dhcp plugin hook too

Since we removed the code make sure the update goes ok since the
imminent reboot can have a bad effect on recovery.
DeltaFile
+33-0src/etc/rc.syshook.d/update/20-isc-dhcp-plugin.sh
+1-0plist
+34-02 files

OPNSense/core 3011417src/opnsense/service/templates/OPNsense/Syslog syslog-ng.conf.in

system: sort to retain order in Syslog source definitions

The files are numbered but the glob will throw the files into
the array like it finds them on the disk.

(cherry picked from commit adc5b7a482d075c11f57e56c033c964506af80a0)
DeltaFile
+1-1src/opnsense/service/templates/OPNsense/Syslog/syslog-ng.conf.in
+1-11 files

OPNSense/core adc5b7asrc/opnsense/service/templates/OPNsense/Syslog syslog-ng.conf.in

system: sort to retain order in Syslog source definitions

The files are numbered but the glob will throw the files into
the array like it finds them on the disk.
DeltaFile
+1-1src/opnsense/service/templates/OPNsense/Syslog/syslog-ng.conf.in
+1-11 files

OPNSense/core 9136078. plist, src/opnsense/service/templates/OPNsense/Syslog/local dhcpd.conf

isc-dhcp: syslog definitions and reshuffling
DeltaFile
+0-6src/opnsense/service/templates/OPNsense/Syslog/local/dhcpd.conf
+0-2src/opnsense/service/templates/OPNsense/Syslog/sources/001-local.conf
+1-1plist
+1-0src/opnsense/service/templates/OPNsense/Syslog/sources/005-unbound.conf
+2-94 files

OPNSense/core dc43ba9src/etc/rc.syshook.d/upgrade 20-isc-dhcp-plugin.sh

firmware: if the file marker for the plugin is found don't do it again (to avoid errors)
DeltaFile
+6-3src/etc/rc.syshook.d/upgrade/20-isc-dhcp-plugin.sh
+6-31 files

OPNSense/core 99c8109src/etc/inc filter.lib.inc, src/opnsense/mvc/app/models/OPNsense/Base/Menu MenuSystem.php

isc-dhcp: move definition and defang menu and rules #9155
DeltaFile
+0-45src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+0-7src/opnsense/mvc/app/models/OPNsense/Core/Menu/Menu.xml
+6-0src/opnsense/mvc/app/models/OPNsense/Base/Menu/MenuSystem.php
+1-1src/etc/inc/filter.lib.inc
+7-534 files

OPNSense/core 729833csrc/opnsense/scripts/dhcp get_leases6.py prefixes.php, src/opnsense/service/conf/actions.d actions_dhcpd.conf

isc-dhcp: more easy files for #9155
DeltaFile
+0-171src/opnsense/scripts/dhcp/get_leases6.py
+0-138src/opnsense/scripts/dhcp/prefixes.php
+0-117src/opnsense/scripts/dhcp/cleanup_leases4.php
+0-108src/opnsense/scripts/dhcp/cleanup_leases6.php
+0-53src/opnsense/scripts/dhcp/get_leases.py
+0-50src/opnsense/service/conf/actions.d/actions_dhcpd.conf
+0-6374 files not shown
+1-73610 files

OPNSense/core fd0c70d. plist, src/opnsense/scripts/dhcp unbound_watcher.py dnsmasq_watcher.py

isc-dhcp: move two scripts to their callers #9155
DeltaFile
+0-250src/opnsense/scripts/dhcp/unbound_watcher.py
+250-0src/opnsense/scripts/unbound/unbound_watcher.py
+0-134src/opnsense/scripts/dhcp/dnsmasq_watcher.py
+134-0src/opnsense/scripts/dnsmasq/dnsmasq_watcher.py
+2-2plist
+1-1src/opnsense/scripts/unbound/start.sh
+387-3871 files not shown
+388-3887 files

OPNSense/core 23589f1src/etc/inc/plugins.inc.d dhcpd.inc, src/opnsense/mvc/app/controllers/OPNsense/DHCPv6/Api LeasesController.php

isc-dhcp: remove main files for #9155

It will probably take more time to remove the loose ends but this
is the working bulk state for the pluginification.
DeltaFile
+0-1,319src/etc/inc/plugins.inc.d/dhcpd.inc
+0-1,218src/www/services_dhcp.php
+0-901src/www/services_dhcpv6.php
+0-509src/www/services_dhcp_edit.php
+0-273src/www/services_dhcpv6_edit.php
+0-272src/opnsense/mvc/app/controllers/OPNsense/DHCPv6/Api/LeasesController.php
+0-4,49211 files not shown
+0-5,29617 files

OPNSense/core 4469cf2. plist, src/etc/rc.syshook.d/upgrade 20-isc-dhcp-plugin.sh

isc-dhcp: very simple migration script #9155

We're going to need this for 99% of the cases in existing installs
so instead of checking for something just install it and ask the
user to let it go if unneeded.
DeltaFile
+28-0src/etc/rc.syshook.d/upgrade/20-isc-dhcp-plugin.sh
+1-0plist
+29-02 files

OPNSense/core 8b9e00csrc/etc config.xml.sample

interfaces: make Dnsmasq the default IPv6 provider (#9595)

* Services: Dnsmasq DNS & DHCP: Add default IPv6 configuration to config.xml.sample

An additional DHCP range constructs RA from the WAN prefix. LAN requires track interface for this to work.
ra-stateless will set the O and A bit, allowing clients to use SLAAC and optionally receive other options via DHCPv6.
Clients will not request a DHCPv6 address which is more inline with most client implementations, as SLAAC is the common supported choice.
The RDNSS option will be offered via eaf7630.

* Fix typo in constructor, an IPv6 address (GUA or ULA) must exist on the interface

* Add DHCPv6 range and change mode to allow client to have SLAAC and IA_NA at same time

* system: adjust dhcpv6 range with isc default

---------

Co-authored-by: Franco Fichtner <franco at opnsense.org>
DeltaFile
+10-0src/etc/config.xml.sample
+10-01 files

OPNSense/core 6d8f1a4src/etc config.xml.sample

system: adjust dhcpv6 range with isc default
DeltaFile
+2-2src/etc/config.xml.sample
+2-21 files

OPNSense/core bb02292. LICENSE, src/etc/inc interfaces.inc

interfaces: bump copyrights
DeltaFile
+2-2LICENSE
+1-1src/etc/inc/interfaces.inc
+3-32 files

OPNSense/core 12e3d0bsrc/etc/inc interfaces.inc, src/www interfaces.php

interface: multi-dhcp6c support and custom PD association #7647

This splits off rtsold and dhcp6c into separate processes
which frees us from the restrictions of faked iterative IDs
for PD associations.  For NA we simply default to 0 now.

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.
DeltaFile
+24-60src/etc/inc/interfaces.inc
+58-4src/www/interfaces.php
+82-642 files

OPNSense/core 78198c0src/etc/inc interfaces.inc, src/www interfaces.php

interface: multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

This splits off rtsold and dhcp6c into separate processes but
we need to change the daemon's print a bit to avoid complaining
about "other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

Remove the $id bootstrapping now that every service has its
own configuration and "0" cannot overlap and add some options
relavant to #7647.  The assoc-id principle and some other options
are now implemented.
DeltaFile
+24-60src/etc/inc/interfaces.inc
+43-1src/www/interfaces.php
+67-612 files

OPNSense/core 6caba09src/etc/inc interfaces.inc, src/www interfaces.php

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

Remove the $id bootstrapping now that every service has its
own configuration and "0" cannot overlap and add some options
relavant to #7647.  The assoc-id principle and some other options
are now implemented.

rtsold still needs to be split to allow for HUP reload of

    [2 lines not shown]
DeltaFile
+19-55src/etc/inc/interfaces.inc
+43-1src/www/interfaces.php
+62-562 files

OPNSense/core d5d07a6src/etc/inc interfaces.inc, src/www interfaces.php

interfaces: dhcp6c rapid-commit, request-dns and refactoring #7647

Although the code shifts around this doesn't change the outcome
of the file similar to what was started with 3e810bd4be.
DeltaFile
+53-46src/etc/inc/interfaces.inc
+57-29src/www/interfaces.php
+110-752 files

OPNSense/core d4e0109src/etc/inc interfaces.inc, src/www interfaces.php

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

Remove the $id bootstrapping now that every service has its
own configuration and "0" cannot overlap and add some options
relavant to #7647.  The assoc-id principle and some other options
are now implemented.

rtsold still needs to be split to allow for HUP reload of

    [2 lines not shown]
DeltaFile
+53-84src/etc/inc/interfaces.inc
+46-2src/www/interfaces.php
+99-862 files

OPNSense/core e17eb00src/etc/inc interfaces.inc, src/www interfaces.php

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

Remove the $id bootstrapping now that every service has its
own configuration and "0" cannot overlap and add some options
relavant to #7647.

rtsold still needs to be split to allow for HUP reload of
a single interface instead of forcing a restart of all
DHCPv6 WAN clients at the same time.
DeltaFile
+39-66src/etc/inc/interfaces.inc
+43-2src/www/interfaces.php
+82-682 files

OPNSense/core e790033src/etc/inc interfaces.inc console.inc, src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig config.xml

interfaces: introduce idassoc6 mode #9155

We're adding a bit of technical debt here for the simple reason
to decouple the track6 mode from automatic radvd and dhcpv6 runs.

Specifically avoid the "dhcpd6track6allowoverride" flag in this
mode but keep the data the same otherwise for interoperability.
DeltaFile
+140-57src/www/interfaces.php
+4-2src/etc/inc/interfaces.inc
+2-2src/opnsense/scripts/shell/setaddr.php
+3-0src/opnsense/scripts/shell/banner.php
+1-1src/etc/inc/console.inc
+1-1src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig/config.xml
+151-631 files not shown
+152-647 files

OPNSense/core 8d0da12src/etc/inc/plugins.inc.d radvd.inc

radvd: typo in previous
DeltaFile
+1-1src/etc/inc/plugins.inc.d/radvd.inc
+1-11 files

OPNSense/core e174540src/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: Add Base6Interface constructor (#9615)

DeltaFile
+14-4src/etc/inc/plugins.inc.d/radvd.inc
+11-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+10-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+1-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+36-44 files

OPNSense/core ac82437src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml, src/opnsense/mvc/app/models/OPNsense/Radvd Radvd.php

Tighten scope via validation, Base6Interface shall not be the same as interface.
DeltaFile
+11-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+1-1src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+12-12 files

OPNSense/core e28c113src/etc config.xml.sample

system: adjust dhcpv6 range with isc default
DeltaFile
+2-2src/etc/config.xml.sample
+2-21 files

OPNSense/core c5ce6b6src/etc config.xml.sample, src/etc/inc interfaces.inc

interfaces: introduce idassoc6 mode #9155

We're adding a bit of technical debt here for the simple reason
to decouple the track6 mode from automatic radvd and dhcpv6 runs.

Specifically avoid the "dhcpd6track6allowoverride" flag in this
mode but keep the data the same otherwise for interoperability.
DeltaFile
+140-57src/www/interfaces.php
+4-2src/etc/inc/interfaces.inc
+2-2src/opnsense/scripts/shell/setaddr.php
+3-0src/opnsense/scripts/shell/banner.php
+1-1src/etc/config.xml.sample
+1-1src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig/config.xml
+151-631 files not shown
+152-647 files