diff --git a/doc/ChangeLog.md b/doc/ChangeLog.md index 794c897d..59890241 100644 --- a/doc/ChangeLog.md +++ b/doc/ChangeLog.md @@ -4,6 +4,93 @@ Change Log All notable changes to the project are documented in this file. +[v23.08.0][] - 2023-08-31 +------------------------- + +> **Note:** upcoming releases will lock the `root` user for system-only +> services. Instead an `admin` user will be the only default user with +> the CLI as its login shell. This user is already available, so please +> consider updating any guidelines or documentation you may have. + +### YANG Status + + - [ietf-system][]: + - [infix-system][]: MotD (Message of the Day) augment + - [infix-system][]: user login shell augment, default: `/bin/false` + - [infix-system-software][]: system-state/software augment for + remotely querying firmware version information + - [infix-system-software][]: firmware upgrade with `install-bundle` RPC + - [infix-system][]: timezone-name deviation, replaced with IANA timezones + - [infix-system][]: username deviation, clarifying Linux restrictions + - [infix-system][]: deviations for unsupported features, e.g. RADIUS + - [ietf-interfaces][]: + - [ietf-ip][]: augmented with IPv4LL similar to standardized IPv6LL + - [ietf-if-vlan-encapsulation][]: Linux VLAN interfaces, e.g. `eth0.10` + - [infix-if-bridge][]: Linux bridge interfaces with native VLAN support + - [infix-if-veth][]: Linux VETH pairs + - [infix-if-type][]: deviation for interface types, limiting number + to supported types only. New identities are derived from default + IANA interface types, ensuring compatibility with other standard + models, e.g., `ieee802-ethernet-interface.yang` + - Configurable services: + - [ieee802-dot1ab-lldp][]: stripped down to an `enabled` setting + - [infix-services][]: support for enabling mDNS and SSDP discovery + +[br2023.02.2]: https://git.busybox.net/buildroot/tag/?h=2023.02.2 +[ieee802-dot1ab-lldp]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/ieee802-dot1ab-lldp%402022-03-15.yang +[ietf-system]: https://www.rfc-editor.org/rfc/rfc7317.html +[ietf-interfaces]: https://www.rfc-editor.org/rfc/rfc7223.html +[ietf-ip]: https://www.rfc-editor.org/rfc/rfc8344.html +[ietf-if-vlan-encapsulation]: https://www.ietf.org/id/draft-ietf-netmod-sub-intf-vlan-model-08.html +[infix-if-bridge]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-if-bridge%402023-08-21.yang +[infix-if-veth]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-if-veth%402023-06-05.yang +[infix-if-type]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-if-type%402023-08-21.yang +[infix-services]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-services%402023-08-22.yang +[infix-system]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-system%402023-08-15.yang +[infix-system-software]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-system-software%402023-06-27.yang + +### Changes + + - Bump Linux kernel: v5.19 to v6.1 + - Updated board support for Microchip SparX-5i and Marvell CN9130 CRB + - New logo and significant updates to the documentation + - New NETCONF RPC `factory-default` to reset `running-config` + - Replaced limited BusyBox ping with iputils-ping + - Most system services are now disabled by default, support for enabling + LLDP, mDNS-SD, and SSDP using NETCONF, enabled in `factory-config` + - Firmware upgrade framework, based on [RAUC](https://rauc.io/), added + - Matching YANG model (see above) and an `install-bundle` RPC + - Currently supported upgrade protocols: HTTP/HTTPS, FTP, SCP + - Initial support for interface operational status, in ietf-interfaces + - Add support for setting user login shell: `bash`, `clish`, `false` + - Default login shell for new users: `false` + - Massive updates and fixes to the CLI (klish): + - Line editing now works as similar CLI:s from major vendors + - Hotkey fixes: Ctrl-D and Ctrl-Z now work as expected + - Prompt changed from JunOS style to be more similar to Bash + - Online help commands, both in admin-exec and configure context, + type `help` after entering the CLI to get started + - Improved help for configure context using YANG descriptions + - Support for reading and setting system "datetime" (RPC), an + optional `iso` keyword can be used when reading time to see the + format required when setting the time + - Support for showing interfaces status, using above operational data + - Support for showing bridge status: links, fdb, mdb, vlans + - Support for showing log files, including tailing with `follow` + - Support for `password generate` and `password encrypt`, highly + useful from configure context when creating new users: use the + `do password encrypt type sha256` to generate the hash + - Support show uptime, version, calling `netcalc`, ping, and tcpdump + +### Fixes + + - Fix #57: unneccesary lldpd restarts on configuration change + - Ensure mDNS advertises the correct hostname after hostname change + - Fix regression in enabling IPv4 ZeroConf address + - Loopback interface now shows `UP` operstate instead of `UNKNOWN` + - Fix adding user without password, i.e., login using SSH keys only + + [v23.06.0][] - 2023-06-23 ------------------------- @@ -52,7 +139,8 @@ Supported YANG models in addition to those used by sysrepo and netopeer: - N/A [buildroot]: https://buildroot.org/ -[UNRELEASED]: https://github.com/kernelkit/infix/compare/v23.06.0...HEAD +[UNRELEASED]: https://github.com/kernelkit/infix/compare/v23.08.0...HEAD +[v23.08.0]: https://github.com/kernelkit/infix/compare/v23.06.0...v23.08.0 [v23.06.0]: https://github.com/kernelkit/infix/compare/BASE...v23.06.0 [sysrepo]: https://www.sysrepo.org/ [netopeer2]: https://github.com/CESNET/netopeer2