Skip to content

Releases: kernelkit/infix

Infix v24.02.0-rc1

01 Mar 16:55
@github-actions github-actions
v24.02.0-rc1
1f29bfa
Compare
Choose a tag to compare
Infix v24.02.0-rc1 Pre-release
Pre-release

Note: the root account is disabled in official builds. Only the
admin user can log in to the system. This can be changed, but only
in developer builds: make menuconfig -> System configuration ->
[*]Enable root login with password

YANG Status

Infix devices support downloading all YANG models over NETCONF, including
models with submodules. As a rule, standard models are used as long as
they map to underlying Linux concepts and services. All exceptions are
listed in Infix specific models, detailing deviations and augmentations.

Currently supported models:

  • ieee802-ethernet-interface:

    • Toggle port speed & duplex auto-negotiation on/off
    • Set port speed and duplex when auto-negotiation is off
    • Query port speed/duplex and auto-negotiation status (operational)
    • Frame counters:
    YANG Linux / Ethtool
    out-frames FramesTransmittedOK
    out-multicast-frames MulticastFramesXmittedOK
    out-broadcast-frames BroadcastFramesXmittedOK
    in-total-octets FramesReceivedOK
    + FrameCheckSequenceErrors
    + FramesLostDueToIntMACRcvError
    + AlignmentErrors
    + etherStatsOversizePkts
    + etherStatsJabbers
    in-frames FramesReceivedOK
    in-multicast-frames MulticastFramesReceivedOK
    in-broadcast-frames BroadcastFramesReceivedOK
    in-error-undersize-frames undersize_pkts
    in-error-fcs-frames FrameCheckSequenceErrors
    in-good-octets OctetsReceivedOK
    out-good-octets OctetsTransmittedOK

  • ietf-hardware:

    • Populates standard hardware model from corresponding data in device EEPROMs
    • augments:
      • Initial support for USB ports
      • Vital Product Data (VPD) from device EEPROMs (ONIE structure)
    • infix-hardware: Deviations and augments

  • ietf-system:

    • augments:
      • Message of the Day (MotD) banner, shown after SSH or console login.
        Please note: the legacy motd has been replaced with motd-banner os
        of v24.02. Use CLI text-editor to modify the latter
      • User login shell, default: /bin/false (no SSH or console login)
      • State information for remotely querying firmware version information
    • deviations:
      • timezone-name, using IANA timezones instead of plain string
      • UTC offset, only support per-hour offsets with tzdata
      • Usernames, clarifying Linux restrictions
      • Unsupported features marked as deviations, e.g. RADIUS
    • infix-system-software: firmware upgrade with install-bundle RPC

  • ietf-interfaces:

    • deviation to allow read-write if:phys-address for custom MAC address
    • ietf-ip: augments
      • IPv4LL similar to standardized IPv6LL
    • ietf-ip: deviations (not-supported) added for IPv4 and IPv6:
      • /if:interfaces/if:interface/ip:ipv4/ip:address/ip:subnet/ip:netmask
      • /if:interfaces/if:interface/ip:ipv6/ip:address/ip:status
      • /if:interfaces/if:interface/ip:ipv4/ip:neighbor
      • /if:interfaces/if:interface/ip:ipv6/ip:neighbor
    • ietf-routing: Base model for routing
    • ietf-ipv4-unicast-routing: Static unicast routing, incl. operational
      data, i.e., setting static IPv4 routes and reading IPv4 routing table
    • ietf-ipv6-unicast-routing: Static unicast routing, incl. operational
      data, i.e., setting static IPv6 routes and reading IPv6 routing table
    • ietf-ospf: Limited support for OSPFv2, with additional support for
      injecting default route, and route redistribution. Underlying routing
      engine in use is Frr. Includes operational status + data (routes).
      See infix-routing model for detailed list of deviations
    • infix-ethernet-interface: deviations for ieee802-ethernet-interface
    • infix-routing: Limit ietf-routing to one instance default per
      routing protocol, also details unsupported features (deviations) to both
      ietf-routing and ietf-ospf models, as well as augments made to support
      injecting default route in OSPFv2
    • infix-if-bridge: Linux bridge interfaces with native VLAN support
    • infix-if-type: deviation for interface types, limiting number to
      supported types only. New identities are derived from default IANA
      interface types, ensuring compatibility with other standard models, e.g.,
      ieee802-ethernet-interface.yang
    • infix-if-veth: Linux VETH pairs
    • infix-if-vlan: Linux VLAN interfaces, e.g. eth0.10

  • infix-containers: Support for Docker containers, incl. operational data
    to query status and remotely stop/start containers

  • infix-dhcp-client: DHCPv4 client, including supported options

  • Configurable services:

Changes

  • New hardware support: NanoPi R2S from FriendlyELEC, a simple two-port router
  • Static routing support, now also for IPv6
  • Dynamic routing support with OSPFv2, limited (see infix-routing.yang for
    deviations), but still usable in most relevant use-cases. If you are using
    this and are interested in more features, please let us know!
    • Multiple area support, including different area types
    • Route redistribution
    • Default route injection
    • Full integration with Bidirectional Forward Detection (BFD)
    • Operational status, including but not limited to:
      • OSPF Router ID
      • Neighbor status
      • OSPF routing table
      • Interface type, incl. passive status
    • For more information, see doc/networking.md
  • Support for disabling USB ports in startup-config (no auto-mount yet!)
  • Initial support for Docker containers, see documentation for details:
    • Custom Infix model, see infix-containers.yang for details
    • Add image URL/location and volumes/mounts/interfaces to configuration,
      the system ensures the image is downloaded and container created in the
      background before launching it. If now networking is available the job
      is queued and retried every time a new network route is learned
    • Status and actions (stop/start/restart) available in operational datastore
    • Possible to move physical switch ports inside container, see docs
    • Possible to bundle OCI archives in Infix image, as well as storing any
      file content in factory-config to override container image defaults
  • IEEE Ethernet interface:
    • Support for setting port speed/duplex or auto-negotiating
    • New per-port counters, augments to IEEE model added in infix-ethernet.yang:
      in-good-octets, out-good-octets
  • Many updates to DHCPv4 client YANG model:
    • new options, see infix-dhcp-client.yang for details:
      • Default options: subnet, router, dns+domain, hostname, broadcast, ntpsrv
      • Set NTP servers, require NTP client in ie...
Read more
Assets 10
Loading

Infix v23.11.0

30 Nov 13:34
@github-actions github-actions
v23.11.0
769b7c2
Compare
Choose a tag to compare
Infix v23.11.0

Note: this is the first release where the root account is disabled in default builds. Only the admin user,
generated from factory-config, can log in to the system. This can be changed only in developer builds:
make menuconfig -> System configuration -> [*]Enable root login with password

YANG Status

  • ieee802-ethernet-interface: Currently supported (read-only) features:

    • Status of auto-negotiation, and if enabled.
    • Current speed and duplex
    • Frame counters:
    YANG Linux / Ethtool
    out-frames FramesTransmittedOK
    out-multicast-frames MulticastFramesXmittedOK
    out-broadcast-frames BroadcastFramesXmittedOK
    in-total-octets FramesReceivedOK
    + FrameCheckSequenceErrors
    + FramesLostDueToIntMACRcvError
    + AlignmentErrors
    + etherStatsOversizePkts
    + etherStatsJabbers
    in-frames FramesReceivedOK
    in-multicast-frames MulticastFramesReceivedOK
    in-broadcast-frames BroadcastFramesReceivedOK
    in-error-undersize-frames undersize_pkts
    in-error-fcs-frames FrameCheckSequenceErrors

  • ietf-system:

    • augments:
      • MotD (Message of the Day)
      • User login shell, default: /bin/false (no SSH or console login)
      • State information for remotely querying firmware version information
    • deviations:
      • timezone-name, using IANA timezones instead of plain string
      • UTC offset, only support per-hour offsets with tzdata
      • Usernames, clarifying Linux restrictions
      • Unsupported features marked as deviations, e.g. RADIUS
    • infix-system-software: firmware upgrade with install-bundle RPC

  • ietf-interfaces:

    • deviation to allow read-write if:phys-address for custom MAC address
    • ietf-ip: augments
      • IPv4LL similar to standardized IPv6LL
    • ietf-ip: deviations (not-supported) added for IPv4 and IPv6:
      • /if:interfaces/if:interface/ip:ipv4/ip:address/ip:subnet/ip:netmask
      • /if:interfaces/if:interface/ip:ipv6/ip:address/ip:status
      • /if:interfaces/if:interface/ip:ipv4/ip:neighbor
      • /if:interfaces/if:interface/ip:ipv6/ip:neighbor
    • ietf-routing: Base model for routing
    • ietf-ipv4-unicast-routing: Static unicast routing, incl. operational
      data, i.e., setting static IPv4 routes and reading IPv4 routing table
    • infix-ethernet-interface: deviations for ieee802-ethernet-interface
    • infix-routing: Limit ietf-routing to one instance default per
      routing protocol, also details unsupported features (deviations)
    • infix-if-bridge: Linux bridge interfaces with native VLAN support
    • infix-if-type: deviation for interface types, limiting number
      to supported types only. New identities are derived from default
      IANA interface types, ensuring compatibility with other standard
      models, e.g., ieee802-ethernet-interface.yang
    • infix-if-veth: Linux VETH pairs
    • infix-if-vlan: Linux VLAN interfaces, e.g. eth0.10

  • Configurable services:

Changes

  • The CLI built-in command password generate has been changed to use the
    secure mode of the pwgen tool, and 13 chars for increased entropy
  • The qemu.sh -c command, available in developer builds and the release zip,
    can now be used to modify the RAM size and enable VPD emulation
  • Add support for overriding generated factory defaults in derivatives
    using a /etc/confdrc.lcocal file -- incl. updated branding docs.
  • Add support for detecting factory reset condition from a bootloader
  • Ensure /var is also cleared (properly) during factory reset
  • Add support for port auto-negotiation status in operational datastore
  • Add CLI support for showing veth pairs in show interfaces
  • Speedups to CLI detailed view of a single interface
  • Updated documentation of VLAN interfaces and VLAN filtering bridge
  • Updated documentation for how to customize services in Hybrid Mode
  • In RMA mode (runlevel 9), the system no longer has any login services
  • Disable root login in all NETCONF builds, only admin available
  • Add support for VPD data in ONIE EEPROM format
  • Add iito, the intelligent input/output daemon for LED control
  • Add port autoneg and speed/duplex status to operational data
  • Upgrade Linux to v6.5.11, with kkit extensions
  • Add support for static IPv4 routing using [email protected] and
    [email protected], one default instance only
  • Add support for partitioning and self-provisioning of new devices
  • Add support for reading admin user's default password from VPD. Devices
    that do not have a VPD can set a password hash in the device tree
  • Add support for upgrading software bundles (images) from the CLI.
    Supported remote servers: ftp, tftp, and http/https.
  • Traversing the CLI configure context has been simplified by collapsing all
    YANG containers that only contain a single list element. Example:
    edit interfaces interface eth0 becomes edit interface eth0
  • Add CLI support for creating configuration backups and transferring files
    to/from remote servers: tftp, ftp, http/https (download only). Issue #155
  • Add _netconf-ssh._tcp record to mDNS-SD

Fixes

  • Fix #111: fix auto-inference of dynamic interface types (bridge, veth)
  • Fix #125: improved feedback on invalid input in configure context
  • Fix #198: drop bridge default PVID setting, for VLAN filtering bridge.
    All bridge ports must have explicit VLAN assignment (security)
  • Fix #215: impossible to enable NTP client, regression from v23.06.0
  • Fix regression in CLI show factory-config command
  • Fix missing version in /etc/os-release variable PRETTY_NAME
  • Fix failure to start podman in GNS3 (missing Ext4 filesystem feature)
  • Fix initial terminal size probing in CLI when logging in from console port
  • Fix CLI show running-config, use proper JSON format like other files
  • Fix caching of libyang module references in confd. Loading other plugins to
    sysrepo-plugind modifies these references, which may can cause corruption
  • Fix missing v in VERSION, VERSION_ID, and IMAGE_VERSION in
    /etc/os-release and other generated files for release builds.
Assets 6
Loading

Infix v23.11.0-rc3

30 Nov 11:10
@github-actions github-actions
v23.11.0-rc3
769b7c2
Compare
Choose a tag to compare
Infix v23.11.0-rc3 Pre-release
Pre-release

Note: this is the first release where the root account is disabled in default builds. Only the admin user, generated from factory-config, can log in to the system. This can be changed only in developer builds: make menuconfig -> System configuration -> [*]Enable root login with password

YANG Status

  • ieee802-ethernet-interface: Currently supported (read-only) features:

    • Status of auto-negotiation, and if enabled.
    • Current speed and duplex
    • Frame counters:
    YANG Linux / Ethtool
    out-frames FramesTransmittedOK
    out-multicast-frames MulticastFramesXmittedOK
    out-broadcast-frames BroadcastFramesXmittedOK
    in-total-octets FramesReceivedOK
    + FrameCheckSequenceErrors
    + FramesLostDueToIntMACRcvError
    + AlignmentErrors
    + etherStatsOversizePkts
    + etherStatsJabbers
    in-frames FramesReceivedOK
    in-multicast-frames MulticastFramesReceivedOK
    in-broadcast-frames BroadcastFramesReceivedOK
    in-error-undersize-frames undersize_pkts
    in-error-fcs-frames FrameCheckSequenceErrors

  • ietf-system:

    • augments:
      • MotD (Message of the Day)
      • User login shell, default: /bin/false (no SSH or console login)
      • State information for remotely querying firmware version information
    • deviations:
      • timezone-name, using IANA timezones instead of plain string
      • UTC offset, only support per-hour offsets with tzdata
      • Usernames, clarifying Linux restrictions
      • Unsupported features marked as deviations, e.g. RADIUS
    • infix-system-software: firmware upgrade with install-bundle RPC

  • ietf-interfaces:

    • deviation to allow read-write if:phys-address for custom MAC address
    • ietf-ip: augments
      • IPv4LL similar to standardized IPv6LL
    • ietf-ip: deviations (not-supported) added for IPv4 and IPv6:
      • /if:interfaces/if:interface/ip:ipv4/ip:address/ip:subnet/ip:netmask
      • /if:interfaces/if:interface/ip:ipv6/ip:address/ip:status
      • /if:interfaces/if:interface/ip:ipv4/ip:neighbor
      • /if:interfaces/if:interface/ip:ipv6/ip:neighbor
    • ietf-routing: Base model for routing
    • ietf-ipv4-unicast-routing: Static unicast routing, incl. operational
      data, i.e., setting static IPv4 routes and reading IPv4 routing table
    • infix-ethernet-interface: deviations for ieee802-ethernet-interface
    • infix-routing: Limit ietf-routing to one instance default per
      routing protocol, also details unsupported features (deviations)
    • infix-if-bridge: Linux bridge interfaces with native VLAN support
    • infix-if-type: deviation for interface types, limiting number
      to supported types only. New identities are derived from default
      IANA interface types, ensuring compatibility with other standard
      models, e.g., ieee802-ethernet-interface.yang
    • infix-if-veth: Linux VETH pairs
    • infix-if-vlan: Linux VLAN interfaces, e.g. eth0.10

  • Configurable services:

Changes

  • The CLI built-in command password generate has been changed to use the
    secure mode of the pwgen tool, and 13 chars for increased entropy
  • The qemu.sh -c command, available in developer builds and the release zip,
    can now be used to modify the RAM size and enable VPD emulation
  • Add support for overriding generated factory defaults in derivatives
    using a /etc/confdrc.lcocal file -- incl. updated branding docs.
  • Add support for detecting factory reset condition from a bootloader
  • Ensure /var is also cleared (properly) during factory reset
  • Add support for port auto-negotiation status in operational datastore
  • Add CLI support for showing veth pairs in show interfaces
  • Speedups to CLI detailed view of a single interface
  • Updated documentation of VLAN interfaces and VLAN filtering bridge
  • Updated documentation for how to customize services in Hybrid Mode
  • In RMA mode (runlevel 9), the system no longer has any login services
  • Disable root login in all NETCONF builds, only admin available
  • Add support for VPD data in ONIE EEPROM format
  • Add iito, the intelligent input/output daemon for LED control
  • Add port autoneg and speed/duplex status to operational data
  • Upgrade Linux to v6.5.11, with kkit extensions
  • Add support for static IPv4 routing using [email protected] and
    [email protected], one default instance only
  • Add support for partitioning and self-provisioning of new devices
  • Add support for reading admin user's default password from VPD. Devices
    that do not have a VPD can set a password hash in the device tree
  • Add support for upgrading software bundles (images) from the CLI.
    Supported remote servers: ftp, tftp, and http/https.
  • Traversing the CLI configure context has been simplified by collapsing all
    YANG containers that only contain a single list element. Example:
    edit interfaces interface eth0 becomes edit interface eth0
  • Add CLI support for creating configuration backups and transferring files
    to/from remote servers: tftp, ftp, http/https (download only). Issue #155
  • Add _netconf-ssh._tcp record to mDNS-SD

Fixes

  • Fix #111: fix auto-inference of dynamic interface types (bridge, veth)
  • Fix #125: improved feedback on invalid input in configure context
  • Fix #198: drop bridge default PVID setting, for VLAN filtering bridge.
    All bridge ports must have explicit VLAN assignment (security)
  • Fix #215: impossible to enable NTP client, regression from v23.06.0
  • Fix regression in CLI show factory-config command
  • Fix missing version in /etc/os-release variable PRETTY_NAME
  • Fix failure to start podman in GNS3 (missing Ext4 filesystem feature)
  • Fix initial terminal size probing in CLI when logging in from console port
  • Fix CLI show running-config, use proper JSON format like other files
  • Fix caching of libyang module references in confd. Loading other plugins to
    sysrepo-plugind modifies these references, which may can cause corruption
  • Fix missing v in VERSION, VERSION_ID, and IMAGE_VERSION in
    /etc/os-release and other generated files for release builds.
Assets 6
Loading

Infix v23.11.0-rc2

30 Nov 07:36
@github-actions github-actions
v23.11.0-rc2
2428bf9
Compare
Choose a tag to compare
Infix v23.11.0-rc2 Pre-release
Pre-release

Note: this is the first release where the root account is disabled in
default builds. Only the admin user, generated from factory-config, can
log in to the system. This can be changed only in developer builds: make menuconfig -> System configuration -> [*]Enable root login with password

YANG Status

  • ieee802-ethernet-interface: Currently supported (read-only) features:

    • Status of auto-negotiation, and if enabled.
    • Current speed and duplex
    • Frame counters:
    YANG Linux / Ethtool
    out-frames FramesTransmittedOK
    out-multicast-frames MulticastFramesXmittedOK
    out-broadcast-frames BroadcastFramesXmittedOK
    in-total-octets FramesReceivedOK
    + FrameCheckSequenceErrors
    + FramesLostDueToIntMACRcvError
    + AlignmentErrors
    + etherStatsOversizePkts
    + etherStatsJabbers
    in-frames FramesReceivedOK
    in-multicast-frames MulticastFramesReceivedOK
    in-broadcast-frames BroadcastFramesReceivedOK
    in-error-undersize-frames undersize_pkts
    in-error-fcs-frames FrameCheckSequenceErrors

  • ietf-system:

    • augments:
      • MotD (Message of the Day)
      • User login shell, default: /bin/false (no SSH or console login)
      • State information for remotely querying firmware version information
    • deviations:
      • timezone-name, using IANA timezones instead of plain string
      • UTC offset, only support per-hour offsets with tzdata
      • Usernames, clarifying Linux restrictions
      • Unsupported features marked as deviations, e.g. RADIUS
    • infix-system-software: firmware upgrade with install-bundle RPC

  • ietf-interfaces:

    • deviation to allow read-write if:phys-address for custom MAC address
    • ietf-ip: augments
      • IPv4LL similar to standardized IPv6LL
    • ietf-ip: deviations (not-supported) added for IPv4 and IPv6:
      • /if:interfaces/if:interface/ip:ipv4/ip:address/ip:subnet/ip:netmask
      • /if:interfaces/if:interface/ip:ipv6/ip:address/ip:status
      • /if:interfaces/if:interface/ip:ipv4/ip:neighbor
      • /if:interfaces/if:interface/ip:ipv6/ip:neighbor
    • ietf-routing: Base model for routing
    • ietf-ipv4-unicast-routing: Static unicast routing, incl. operational
      data, i.e., setting static IPv4 routes and reading IPv4 routing table
    • infix-ethernet-interface: deviations for ieee802-ethernet-interface
    • infix-routing: Limit ietf-routing to one instance default per
      routing protocol, also details unsupported features (deviations)
    • infix-if-bridge: Linux bridge interfaces with native VLAN support
    • infix-if-type: deviation for interface types, limiting number
      to supported types only. New identities are derived from default
      IANA interface types, ensuring compatibility with other standard
      models, e.g., ieee802-ethernet-interface.yang
    • infix-if-veth: Linux VETH pairs
    • infix-if-vlan: Linux VLAN interfaces, e.g. eth0.10

  • Configurable services:

Changes

  • The CLI built-in command password generate has been changed to use the
    secure mode of the pwgen tool, and 13 chars for increased entropy
  • The qemu.sh -c command, available in developer builds and the release zip,
    can now be used to modify the RAM size and enable VPD emulation
  • Add support for overriding generated factory defaults in derivatives
    using a /etc/confdrc.lcocal file -- incl. updated branding docs.
  • Add support for detecting factory reset condition from a bootloader
  • Ensure /var is also cleared (properly) during factory reset
  • Add support for port auto-negotiation status in operational datastore
  • Add CLI support for showing veth pairs in show interfaces
  • Speedups to CLI detailed view of a single interface
  • Updated documentation of VLAN interfaces and VLAN filtering bridge
  • Updated documentation for how to customize services in Hybrid Mode
  • In RMA mode (runlevel 9), the system no longer has any login services
  • Disable root login in all NETCONF builds, only admin available
  • Add support for VPD data in ONIE EEPROM format
  • Add iito, the intelligent input/output daemon for LED control
  • Add port autoneg and speed/duplex status to operational data
  • Upgrade Linux to v6.5.11, with kkit extensions
  • Add support for static IPv4 routing using [email protected] and
    [email protected], one default instance only
  • Add support for partitioning and self-provisioning of new devices
  • Add support for reading admin user's default password from VPD. Devices
    that do not have a VPD can set a password hash in the device tree
  • Add support for upgrading software bundles (images) from the CLI.
    Supported remote servers: ftp, tftp, and http/https.
  • Traversing the CLI configure context has been simplified by collapsing all
    YANG containers that only contain a single list element. Example:
    edit interfaces interface eth0 becomes edit interface eth0
  • Add CLI support for creating configuration backups and transferring files
    to/from remote servers: tftp, ftp, http/https (download only). Issue #155
  • Add _netconf-ssh._tcp record to mDNS-SD

Fixes

  • Fix #111: fix auto-inference of dynamic interface types (bridge, veth)
  • Fix #125: improved feedback on invalid input in configure context
  • Fix #198: drop bridge default PVID setting, for VLAN filtering bridge.
    All bridge ports must have explicit VLAN assignment (security)
  • Fix #215: impossible to enable NTP client, regression from v23.06.0
  • Fix regression in CLI show factory-config command
  • Fix missing version in /etc/os-release variable PRETTY_NAME
  • Fix failure to start podman in GNS3 (missing Ext4 filesystem feature)
  • Fix initial terminal size probing in CLI when logging in from console port
  • Fix CLI show running-config, use proper JSON format like other files
  • Fix caching of libyang module references in confd. Loading other plugins to
    sysrepo-plugind modifies these references, which may can cause corruption
  • Fix missing v in VERSION, VERSION_ID, and IMAGE_VERSION in
    /etc/os-release and other generated files for release builds.
Assets 6
Loading

Infix v23.11.0-rc1

28 Nov 13:02
@github-actions github-actions
v23.11.0-rc1
f61e8e4
Compare
Choose a tag to compare
Infix v23.11.0-rc1 Pre-release
Pre-release

Note: this is the first release where the root account is disabled in default builds.
Only the admin user, generated from factory-config, can log in to the system.
This can be changed only in developer builds:
make menuconfig -> System configuration -> [*]Enable root login with password

YANG Status

  • ieee802-ethernet-interface: Currently supported (read-only) features:

    • Status of auto-negotiation, and if enabled.
    • Current speed and duplex
    • Frame counters:
    YANG Linux / Ethtool
    out-frames FramesTransmittedOK
    out-multicast-frames MulticastFramesXmittedOK
    out-broadcast-frames BroadcastFramesXmittedOK
    in-total-octets FramesReceivedOK
    + FrameCheckSequenceErrors
    + FramesLostDueToIntMACRcvError
    + AlignmentErrors
    + etherStatsOversizePkts
    + etherStatsJabbers
    in-frames FramesReceivedOK
    in-multicast-frames MulticastFramesReceivedOK
    in-broadcast-frames BroadcastFramesReceivedOK
    in-error-undersize-frames undersize_pkts
    in-error-fcs-frames FrameCheckSequenceErrors

  • ietf-system:

    • augments:
      • MotD (Message of the Day)
      • User login shell, default: /bin/false (no SSH or console login)
      • State information for remotely querying firmware version information
    • deviations:
      • timezone-name, using IANA timezones instead of plain string
      • UTC offset, only support per-hour offsets with tzdata
      • Usernames, clarifying Linux restrictions
      • Unsupported features marked as deviations, e.g. RADIUS
    • infix-system-software: firmware upgrade with install-bundle RPC

  • ietf-interfaces:

    • deviation to allow read-write if:phys-address for custom MAC address
    • ietf-ip: augments
      • IPv4LL similar to standardized IPv6LL
    • ietf-ip: deviations (not-supported) added for IPv4 and IPv6:
      • /if:interfaces/if:interface/ip:ipv4/ip:address/ip:subnet/ip:netmask
      • /if:interfaces/if:interface/ip:ipv6/ip:address/ip:status
      • /if:interfaces/if:interface/ip:ipv4/ip:neighbor
      • /if:interfaces/if:interface/ip:ipv6/ip:neighbor
    • ietf-routing: Base model for routing
    • ietf-ipv4-unicast-routing: Static unicast routing, incl. operational data, i.e., setting static IPv4 routes and reading IPv4 routing table
    • infix-ethernet-interface: deviations for ieee802-ethernet-interface
    • infix-routing: Limit ietf-routing to one instance default per routing protocol, also details unsupported features (deviations)
    • infix-if-bridge: Linux bridge interfaces with native VLAN support
    • infix-if-type: deviation for interface types, limiting number to supported types only. New identities are derived from default IANA interface types, ensuring compatibility with other standard models, e.g., ieee802-ethernet-interface.yang
    • infix-if-veth: Linux VETH pairs
    • infix-if-vlan: Linux VLAN interfaces, e.g. eth0.10

  • Configurable services:

Changes

  • The CLI built-in command password generate has been changed to use the secure mode of the pwgen tool, and 13 chars for increased entropy

  • The qemu.sh -c command, available in developer builds and the release zip, can now be used to modify the RAM size and enable VPD emulation

  • Add support for overriding generated factory defaults in derivatives using a /etc/confdrc.lcocal file -- incl. updated branding docs.

  • Add support for detecting factory reset condition from a bootloader

  • Ensure /var is also cleared (properly) during factory reset

  • Add support for port auto-negotiation status in operational datastore

  • Add CLI support for showing veth pairs in show interfaces

  • Speedups to CLI detailed view of a single interface

  • Updated documentation of VLAN interfaces and VLAN filtering bridge

  • Updated documentation for how to customize services in Hybrid Mode

  • In RMA mode (runlevel 9), the system no longer has any login services

  • Disable root login in all NETCONF builds, only admin available

  • Add support for VPD data in ONIE EEPROM format

  • Add iito, the intelligent input/output daemon for LED control

  • Add port autoneg and speed/duplex status to operational data

  • Upgrade Linux to v6.5.11, with kkit extensions

  • Add support for static IPv4 routing using [email protected] and [email protected], one default instance only

  • Add support for partitioning and self-provisioning of new devices

  • Add support for reading admin user's default password from VPD. Devices that do not have a VPD can set a password hash in the device tree

  • Add support for upgrading software bundles (images) from the CLI. Supported remote servers: ftp, tftp, and http/https.

  • Traversing the CLI configure context has been simplified by collapsing all YANG containers that only contain a single list element.
    Example:

      edit interfaces interface eth0

    becomes

      edit interface eth0

  • Add CLI support for creating configuration backups and transferring files to/from remote servers: tftp, ftp, http/https (download only). Issue #155

Fixes

  • Fix #111: fix auto-inference of dynamic interface types (bridge, veth)
  • Fix #125: improved feedback on invalid input in configure context
  • Fix #198: drop bridge default PVID setting, for VLAN filtering bridge.
    All bridge ports must have explicit VLAN assignment (security)
  • Fix #215: impossible to enable NTP client, regression from v23.06.0
  • Fix regression in CLI show factory-config command
  • Fix missing version in /etc/os-release variable PRETTY_NAME
  • Fix failure to start podman in GNS3 (missing Ext4 filesystem feature)
  • Fix initial terminal size probing in CLI when logging in from console port
  • Fix CLI show running-config, use proper JSON format like other files
Assets 6
Loading

Infix v23.10.0

31 Oct 11:19
@github-actions github-actions
v23.10.0
85a1bfc
Compare
Choose a tag to compare
Infix v23.10.0

Note: upcoming releases will lock the root user for system-only services. Instead an admin user will be the only default user with the CLI as its login shell. This user is already available, so please consider updating any guidelines or documentation you may have.

YANG Status

  • ietf-system:
    • augments:
      • MotD (Message of the Day)
      • User login shell, default: /bin/false
      • State information for remotely querying firmware version information
    • deviations:
      • timezone-name, using IANA timezones instead of plain string
      • UTC offset, only support per-hour offsets with tzdata
      • Usernames, clarifying Linux restrictions
      • Unsupported features marked as deviations, e.g. RADIUS
    • infix-system-software: firmware upgrade with install-bundle RPC
  • ietf-interfaces:
    • deviation to allow read-write if:phys-address for custom MAC address
    • ietf-ip: augments
      • IPv4LL similar to standardized IPv6LL
    • ietf-ip: deviations (not-supported) added for IPv4 and IPv6:
      • /if:interfaces/if:interface/ip:ipv4/ip:address/ip:subnet/ip:netmask
      • /if:interfaces/if:interface/ip:ipv6/ip:address/ip:status
      • /if:interfaces/if:interface/ip:ipv4/ip:neighbor
      • /if:interfaces/if:interface/ip:ipv6/ip:neighbor
    • ietf-if-vlan-encapsulation: Removed in favor of a native model.
    • infix-if-bridge: Linux bridge interfaces with native VLAN support
    • infix-if-type: deviation for interface types, limiting number
      to supported types only. New identities are derived from default
      IANA interface types, ensuring compatibility with other standard
      models, e.g., ieee802-ethernet-interface.yang
    • infix-if-veth: Linux VETH pairs
    • infix-if-vlan: Linux VLAN interfaces, e.g. eth0.10 (New model!)
  • Configurable services:

Changes

  • Add support for setting/querying IPv4/IPv6 MTU, see #152 for details.

  • Add support for Fail Secure Mode: if loading startup-config fails, e.g. YANG model validation failure after upgrade, the system now falls back to load failure-config instead of just crashing. This config, along with factory-config, is generated on every boot to match the active image's YANG models. In case neither config can be loaded, or even bootstrapping YANG models fail, the system will go into an RMA state -- Return to Manufacturer, clearly signaled on the console and, on devices that support it, angry LED signaling. See #154 for more.

  • Add support for generating GNS3 appliance file for NETCONF Aarch64.

  • Add support for UTC offset (+/- HH:00) in ietf-system, PR #174

  • Add support for ietf-factory-default RPC, PR #175

  • Add support for performing factory reset (using #175 RPC) from CLI

  • Replace ietf-if-vlan-encapsulation YANG model with the native infix-if-vlan model. This fits better with Linux VLAN interfaces and simplifies the syntax greatly. For details, see PR #179

      admin@example:/config/interfaces/interface/eth0.10/> set vlan id 10 lower-layer-if eth0

  • The following new NETCONF interface operational counters have been added:

YANG Linux / Ethtool
out-frames FramesTransmittedOK
out-multicast-frames MulticastFramesXmittedOK
out-broadcast-frames BroadcastFramesXmittedOK
in-total-frames FramesReceivedOK
+ FrameCheckSequenceErrors
+ FramesLostDueToIntMACRcvError
+ AlignmentErrors
+ etherStatsOversizePkts
+ etherStatsJabbers
in-frames FramesReceivedOK
in-multicast-frames MulticastFramesReceivedOK
in-broadcast-frames BroadcastFramesReceivedOK
in-error-undersize-frames undersize_pkts
in-error-fcs-frames FrameCheckSequenceErrors
  • Greatly improved branding support using make menuconfig. All the identifying strings, including firmware image, is in /etc/os-release, will be used in CLI show system-information, the WebUI About dialog, and any prominent areas when booting up (on console), logging in to CLI and WebUI.
  • IGMP/MLD snooping is now disabled by default on new bridges. Support for multicast filtering bridges expected no later than v24.01.
  • The SSDP responder, device discovery in Windows, has been removed in favor of Windows 10 (build 1709) native support for mDNS-SD. Details in #166
  • A GreenPAK programmer has been added, not enabled by default. This is a popular programmable little chip from Renesas. Worth a look!
  • The confd script gen-interfaces can now generate bridges and stand-alone interfaces with IPv6 (SLAAC) for factory-config et al.
  • Drop x86_64_minimal_defconfig, previously used for regression tests only
  • Documentation updates of how IPv4/IPv6 addresses are shown in NETCONF operational data, as well as the built-in CLI, see #163 for details.

Fixes

  • Fix #106: confd: drop deviation ietf-system:timezone-utc-offset
  • Fix #151: Operational status broken in v23.09
  • Fix #159: Hacky generation of /etc/resolv.conf at boot
  • Fix #162: VLAN interface without encapsulation is accepted by YANG model
Assets 6
Loading

Latest Build

11 Jan 17:13
@troglobit troglobit
latest
52023e9
Compare
Choose a tag to compare
Latest Build Pre-release
Pre-release

This is the latest/nightly/daily build of Infix, not the latest release.
Releases are always versioned, e.g., infix-aarch64-23.2.0.tar.gz

Note: the latest tag is set somewhere in history and has no connection to the
artifacts here. It is just a placeholder to create a fixed reference for anyone who
want to test the latest build from main or batch jobs on test systems. See the file
/etc/os-release, or the CLI command show version, for the actual GIT gHASH.

Assets 6
Loading

Infix v23.09.0

02 Oct 10:02
@github-actions github-actions
v23.09.0
a91f8d0
Compare
Choose a tag to compare
Infix v23.09.0

Note: upcoming releases will lock the root user for system-only
services. Instead an admin user will be the only default user with
the CLI as its login shell. This user is already available, so please
consider updating any guidelines or documentation you may have.

YANG Status

  • ietf-system:
  • ietf-interfaces:
    • infix-interfaces: deviation for if:phys-address to allow read-write
    • ietf-ip: augmented with IPv4LL similar to standardized IPv6LL
    • infix-ip: deviations (not-supported) added for IPv4 and IPv6:
      • /if:interfaces/if:interface/ip:ipv4/ip:address/ip:subnet/ip:netmask
      • /if:interfaces/if:interface/ip:ipv6/ip:address/ip:status
      • /if:interfaces/if:interface/ip:ipv4/ip:mtu
      • /if:interfaces/if:interface/ip:ipv6/ip:mtu
      • /if:interfaces/if:interface/ip:ipv4/ip:neighbor
      • /if:interfaces/if:interface/ip:ipv6/ip:neighbor
    • ietf-if-vlan-encapsulation: Linux VLAN interfaces, e.g. eth0.10
    • infix-if-bridge: Linux bridge interfaces with native VLAN support
    • infix-if-veth: Linux VETH pairs
    • infix-if-type: deviation for interface types, limiting number
      to supported types only. New identities are derived from default
      IANA interface types, ensuring compatibility with other standard
      models, e.g., ieee802-ethernet-interface.yang
  • Configurable services:

Changes

  • The following new NETCONF interface operational status have been added:
    • admin-status
    • IP address origin (dhcp, static, link-layer, random, other)
    • bridge
    • parent-interface
    • basic statistics (in_octets, out_octets)
  • Support for custom interface phys-address (MAC address)
  • The CLI admin-exec command show interfaces now fully uses NETCONF
    operational data to display both available interfaces and all of their
    IP addresses. Displaying an individual interface will show more info.
  • The CLI admin-exec command password encrypt now default to SHA512

Fixes

  • Fix #136: IPv6 autoconf create-global-addresses true does not bite
  • Fix #138: Not possible to have static IP and DHCP at the same time
  • Minor fixes and updates to documentation (faulty links, references)
  • The sync-fork.yml workflow has finally been fixed.

Issues

Known issues with serious impact.

  • Issue #151: Operational status broken
Assets 6
Loading

Infix v23.08.0

31 Aug 12:50
@github-actions github-actions
v23.08.0
8b4f10c
Compare
Choose a tag to compare
Infix v23.08.0

Note: upcoming releases will lock the root user for system-only services. Instead an admin user will be the only default user with the CLI as its login shell. This user is already available, so please consider updating any guidelines or documentation you may have.

YANG Status

Changes

  • Bump Linux kernel: v5.19 to v6.1
  • Updated board support for Microchip SparX-5i and Marvell CN9130 CRB
  • New logo and significant updates to the documentation
  • New NETCONF RPC factory-default to reset running-config
  • Replaced limited BusyBox ping with iputils-ping
  • Most system services are now disabled by default, support for enabling LLDP, mDNS-SD, and SSDP using NETCONF, enabled in factory-config
  • Firmware upgrade framework, based on RAUC, added
    • Matching YANG model (see above) and an install-bundle RPC
    • Currently supported upgrade protocols: HTTP/HTTPS, FTP, SCP
  • Initial support for interface operational status, in ietf-interfaces
  • Add support for setting user login shell: bash, clish, false
  • Default login shell for new users: false
  • Massive updates and fixes to the CLI (klish):
    • Line editing now works as similar CLI:s from major vendors
    • Hotkey fixes: Ctrl-D and Ctrl-Z now work as expected
    • Prompt changed from JunOS style to be more similar to Bash
    • Online help commands, both in admin-exec and configure context, type help after entering the CLI to get started
    • Improved help for configure context using YANG descriptions
    • Support for reading and setting system "datetime" (RPC), an optional iso keyword can be used when reading time to see the format required when setting the time
    • Support for showing interfaces status, using above operational data
    • Support for showing bridge status: links, fdb, mdb, vlans
    • Support for showing log files, including tailing with follow
    • Support for password generate and password encrypt, highly useful from configure context when creating new users: use the do password encrypt type sha256 to generate the hash
    • Support show uptime, version, calling netcalc, ping, and tcpdump

Fixes

  • Fix #57: unneccesary lldpd restarts on configuration change
  • Ensure mDNS advertises the correct hostname after hostname change
  • Fix regression in enabling IPv4 ZeroConf address
  • Loopback interface now shows UP operstate instead of UNKNOWN
  • Fix adding user without password, i.e., login using SSH keys only
Assets 6
Loading

Infix v23.06.0

23 Jun 13:24
@github-actions github-actions
v23.06.0
2057f3d
Compare
Choose a tag to compare
Infix v23.06.0

Midsummer release. The first official Infix release, based on Buildroot 2023.02.2,
with NETCONF support using sysrepo and netopeer2.

Supported YANG models in addition to those used by sysrepo and netopeer:

  • ietf-system
    • Everything except radius authentication and timezone-utc-offset
    • Augmented with MotD (Message of the Day), Infix YANG model
  • ietf-interfaces
    • ietf-ip augmented with IPv4LL similar to standardized IPv6LL
    • ietf-if-vlan-encapsulation, Linux VLAN interfaces, e.g. eth0.10
    • Linux bridge interfaces with native VLAN support, Infix YANG model
    • Linux VETH pairs, Infix YANG model

DISCLAIMER: Infix YANG models for Linux, as well as Infix itself, is still in development.
New revisions are expected which may not be backwards compatible. When upgrading
to a new release, test on a GNS3 staging environment, or start over from a factory reset.

Changes

  • Bump sysrepo to v2.2.73
    • Backport support for initializing factory-default data store with default config data also for sysrepo internal modules.
    • Add support for sysrepocfg -Cfactory -d running, for testing
  • Bump netopeer2 to v2.1.62
  • Bump libyang to v2.1.80
  • Add klish, a CLI for sysrepo
  • Add podman for container support, backported from upstream Buildroot
  • Add conmon for container support, backported from upstream Buildroot
  • Backport cni-plugins support for host-local and static plugins

Fixes

  • N/A
Assets 6
Loading