BSD Commit Log Search

firewall: pluginify filter_core_get_default_nat_outbound_networks()

With this we can collect all networks eligible for outbound/source
NAT.  The issue, however, is two-fold:

1. On the one hand we need all the internal networks to NAT.
2. On the other hand we need all the external interfaces to NAT over.

The first part is relatively easy, but the second part overloads
the function output.  It would probably be nicer to return a rule
structure, but that would imply moving the rules generation around
a bit, likely inside $fw and then we still have to offer it to
MVC and fix the legacy page to use the same data feed.

[scudo] Remove dead code and other small cleanups. (#210454)

Some dead code from the error info refactor is still around, so delete
that. Also cleanup spelling and spacing.

Modified the tests to use TestOnly functions so it's clear what is
actually used.

www/gatus: Add newsyslog.conf(5) file for log rotation

* To implement log rotation, daemon(8) is configured to accept the
  SIGHUP signal in order to reopen the log file, and the PID of the
  daemon(8) process is recorded in its own PID file so that
  newsyslog(8) can rotate the log.
* Change `-t "${desc}"` to `-t "${name}: ${desc}"` to be more
  descriptive.

PR:             296710
Reported by:    yds at Necessitu.de

Merge branch 'main' into users/arsenm/runtime-libcalls/composable-predicates

Fix circular import

Cloud sync tests coverage

Near-full cloud sync plugin test coverage

Use `DumpableModel` as base for `NormalizedQuestions`

`ruff`

`plugins/cloud` mypy

Wrap all `Secret` defaults in `Secret`

`ruff`

`ruff`

WIP

Protect from `expose_secrets` ambiguity

Deterministic `load_modules` order

Change `model_dump` to have `by_alias=True` and `warnings=False` by default

[𝘀𝗽𝗿] changes introduced through rebase

Created using spr 1.3.7

[skip ci]

review feedback

Created using spr 1.3.7

review feedback

Created using spr 1.3.7

RuntimeLibcalls: Rename RuntimeLibcallPredicate to RuntimeLibcallAvailability (#210648)

Rename to avoid confusing partial name collisions in future changes.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>

[𝘀𝗽𝗿] changes introduced through rebase

Created using spr 1.3.7

[skip ci]

review feedback

Created using spr 1.3.7

[𝘀𝗽𝗿] changes introduced through rebase

Created using spr 1.3.7

[skip ci]

review feedback

Created using spr 1.3.7

[𝘀𝗽𝗿] changes introduced through rebase

Created using spr 1.3.7

[skip ci]

review feedback

Created using spr 1.3.7

AMDGPU: Migrate more tests to amdgpu triples (#210113)

These were missed in previous conversions for whatever reason.
Some are new tests added after I did the bulk migration, some
are special cases.

zstream: add "drop records" chain module

This patch adds a module to remove records from a stream according to a
user-specified record-type mask. For example:

```
zstream_chain_t drop_writes {
    ...
    serial_drop_record_types(DROP_WRITE_EMBEDDED | DROP_WRITE),
    ...
}
```

This is a trivial module, but there are a couple of reasons to use it
instead of just ignoring records you don't care about:

- It makes filtering a declarable API contract. Past the filter point,
  you do not need to double-check record types beyond those you're
  actually interested in.

    [21 lines not shown]

net-mgmt/icingaweb2: Update to 2.14.0