Infix v23.08.0

Note: upcoming releases will lock the root user for system-only services. Instead an admin user will be the only default user with the CLI as its login shell. This user is already available, so please consider updating any guidelines or documentation you may have.

YANG Status

• ietf-system:
  • infix-system: MotD (Message of the Day) augment
  • infix-system: user login shell augment, default: /bin/false
  • infix-system-software: system-state/software augment for remotely querying firmware version information
  • infix-system-software: firmware upgrade with install-bundle RPC
  • infix-system: timezone-name deviation, replaced with IANA timezones
  • infix-system: username deviation, clarifying Linux restrictions
  • infix-system: deviations for unsupported features, e.g. RADIUS
• ietf-interfaces:
  • ietf-ip: augmented with IPv4LL similar to standardized IPv6LL
  • ietf-if-vlan-encapsulation: Linux VLAN interfaces, e.g. eth0.10
  • infix-if-bridge: Linux bridge interfaces with native VLAN support
  • infix-if-veth: Linux VETH pairs
  • infix-if-type: deviation for interface types, limiting number to supported types only. New identities are derived from default IANA interface types, ensuring compatibility with other standard models, e.g., ieee802-ethernet-interface.yang
• Configurable services:
  • ieee802-dot1ab-lldp: stripped down to an enabled setting
  • infix-services: support for enabling mDNS and SSDP discovery

Changes

• Bump Linux kernel: v5.19 to v6.1
• Updated board support for Microchip SparX-5i and Marvell CN9130 CRB
• New logo and significant updates to the documentation
• New NETCONF RPC factory-default to reset running-config
• Replaced limited BusyBox ping with iputils-ping
• Most system services are now disabled by default, support for enabling LLDP, mDNS-SD, and SSDP using NETCONF, enabled in factory-config
• Firmware upgrade framework, based on RAUC, added
  • Matching YANG model (see above) and an install-bundle RPC
  • Currently supported upgrade protocols: HTTP/HTTPS, FTP, SCP
• Initial support for interface operational status, in ietf-interfaces
• Add support for setting user login shell: bash, clish, false
• Default login shell for new users: false
• Massive updates and fixes to the CLI (klish):
  • Line editing now works as similar CLI:s from major vendors
  • Hotkey fixes: Ctrl-D and Ctrl-Z now work as expected
  • Prompt changed from JunOS style to be more similar to Bash
  • Online help commands, both in admin-exec and configure context, type help after entering the CLI to get started
  • Improved help for configure context using YANG descriptions
  • Support for reading and setting system "datetime" (RPC), an optional iso keyword can be used when reading time to see the format required when setting the time
  • Support for showing interfaces status, using above operational data
  • Support for showing bridge status: links, fdb, mdb, vlans
  • Support for showing log files, including tailing with follow
  • Support for password generate and password encrypt, highly useful from configure context when creating new users: use the do password encrypt type sha256 to generate the hash
  • Support show uptime, version, calling netcalc, ping, and tcpdump

Fixes

• Fix #57: unneccesary lldpd restarts on configuration change
• Ensure mDNS advertises the correct hostname after hostname change
• Fix regression in enabling IPv4 ZeroConf address
• Loopback interface now shows UP operstate instead of UNKNOWN
• Fix adding user without password, i.e., login using SSH keys only