5 Commits

Include renames

Author	SHA1	Message	Date
Christian Manivong	968d6583ba	feat!: fix templates with the caller's values replace run_device_action (0.2.0) ... fix_snmp set no community at all and opened the management zone's udp/161 to every source, with a rule named after an application; a second fix_snmp in the system mixin was shadowed and never ran (#5). install_lldpd, install_auc and install_coreutils_base64 were actions of their own. The driver implements napalm-device-types 4.13's templates instead: - configure_snmp_agent(settings): snmpd installed when missing; community, contact and location in UCI with one com2sec (com2sec6) per allowed source; the zone-resolving firewall step of the old fix, now limited to the sources (src_ip) and named Allow-SNMP; snmpd enabled, restarted and listening; - get_management_peer() from SSH_CONNECTION; - ensure_package(name) from the base package, over install_package. A community, contact or location that would break UCI is refused. BREAKING CHANGE: run_device_action is removed. Requires napalm-device-types 4.13. Closes #5. Part of #13.	2026-10-17 08:33:25 +02:00
Christian Manivong	388118cd1b	fix: never report "nothing pending" when the package index is gone, and load it on request ... OpenWrt keeps its package index in RAM. After a reboot `apk version` only warns that it cannot open its cached index and exits 0, and `opkg list-upgradable` prints nothing: both read as "no updates". netOrk keeps "pending since" per package (MVP 5), so the reader now raises instead: - apk: on apk's own warning ("opening from cache ... No such file"), or a failed exit status. - opkg: when /var/opkg-lists is empty. - refresh_available_updates(): apk update / opkg update, success from the exit status.	2026-10-06 00:20:09 +02:00
Christian Manivong	d45c082355	feat(system): report remote syslog, LuCI state and bridge STP ... get_system_config() already parsed the whole system section but returned only a slice of it, so netOrk had no IST side for three AP-profile fields and could not compare them at all — the fields were editable, stored and silently ineffective. Adds: * syslog_remote / syslog_ip / syslog_port / syslog_proto — read from the system section that was already being parsed. log_remote gates the others: OpenWrt ships nothing without it, so a leftover log_ip must not read as an active target. * luci_enabled — from the uhttpd init script rather than its listener config, so the answer stays "is the web UI served" and re-enabling restores whatever was configured before. * bridge_stp — None when there is no br-ap at all, which is a different statement from "bridge without STP" and has to stay distinguishable. netOrk #164	2026-08-29 22:41:36 +07:00
Christian Manivong	a8637461bb	refactor(warnings): report raw signal only, no severity/presentation ... get_device_warnings() now returns only {code, meta} — severity, title, message, and action are resolved centrally by netork's WARNING_CATALOG (netork/core/device_warnings.py), not by the driver. Keeps this driver independent of netork and avoids per-vendor drift in how the same warning code is presented.	2026-07-20 09:48:20 +02:00
Christian ManivongandClaude Sonnet 4.6	bea41b32a1	fix: fix_snmp firewall rule uses ss + correct zone name on OpenWrt ... Two bugs prevented the firewall step from working: 1. `netstat` was used to detect the SSH peer IP — not installed on OpenWrt by default, so raw_conn was empty and the entire firewall step was silently skipped. 2. Even if detection had worked, `src='*'` is wrong when zones have `input='REJECT'`. The rule only takes effect before the zone policy if `src` is the exact zone name. Fix: switch to `ss` (always present), strip any IPv6-mapped prefix, then walk `uci show firewall` to find the zone whose network interface shares the same /24 as the peer IP. Use that zone name as `src`. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-16 16:44:55 +02:00