From 14f41f6241ebc22bf1ec4dbae4743de722f818e6 Mon Sep 17 00:00:00 2001 From: Lucy Agamaite Date: Tue, 7 Jan 2025 12:35:36 -0500 Subject: [PATCH 1/8] Release 82.2025.0107-011 --- content/nvidia-air/Whats-New.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/content/nvidia-air/Whats-New.md b/content/nvidia-air/Whats-New.md index d9f8ab8ea2..7a4728e71e 100644 --- a/content/nvidia-air/Whats-New.md +++ b/content/nvidia-air/Whats-New.md @@ -7,11 +7,18 @@ product: NVIDIA Air Check out the latest updates to {{}}. -## December 2024 +## January 2025 + +### 82.2025.0107-011 +- Fixed an issue where demo marketplace search showed incorrect results +- Fixed an issue where image details showing as updated despite the image update request failed + +## December 2024 + ### 82.2024.1219-011 - Added SN5610 system to manager - + ### 82.2024.1212-011 - Added the ability to launch NetQ after you create a simulation - Added the ability to search for simulations by UUID From 98da2a87cd7b9d60aca599fc89031887bb37656a Mon Sep 17 00:00:00 2001 From: cumulusAnia Date: Thu, 9 Jan 2025 09:30:16 -0800 Subject: [PATCH 2/8] updates --- .../Monitoring-and-Troubleshooting/Open-Telemetry-Export.md | 4 ++-- content/cumulus-linux-512/Whats-New/_index.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md b/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md index 052c614dda..4267ac3e82 100644 --- a/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md +++ b/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md @@ -33,7 +33,7 @@ cumulus@switch:~$ nv config apply ``` {{< tabs "TabID35 ">}} -{{< tab "Ingress and Egress Buffer Traffic Class and Switch Priority ">}} +{{< tab "Traffic Class and Switch Priority ">}} You can enable additional interface statistic collection per interface for specific ingress buffer traffic classes (0 through 15) and egress buffer priority groups (0 through 7). When you enable these settings, the switch exports `interface_pg` and `interface_tc` counters for the defined priority groups and traffic classes: @@ -66,7 +66,7 @@ cumulus@switch:~$ nv config apply ``` {{< /tab >}} -{{< tab "Interface and Switch Buffer Watermark ">}} +{{< tab "Buffer">}} ``` cumulus@switch:~$ nv set system telemetry buffer-stats export state enable diff --git a/content/cumulus-linux-512/Whats-New/_index.md b/content/cumulus-linux-512/Whats-New/_index.md index 35c187afcf..80448fa1f4 100644 --- a/content/cumulus-linux-512/Whats-New/_index.md +++ b/content/cumulus-linux-512/Whats-New/_index.md @@ -26,7 +26,7 @@ This document supports the Cumulus Linux 5.12 release, and lists new platforms, - {{}} - {{}} - {{}} -- {{}} and additional {{}} (PHY BER counters, and buffer watermark counters). +- {{}} and additional {{}} (PHY BER and buffer pool counters). - Support different sample rate for OTLP exporter destinations - Create a single CLI service check for OTLP exporters - NVUE From 921927baf9ae196c8fa0d488c849c172828405b2 Mon Sep 17 00:00:00 2001 From: cumulusAnia Date: Thu, 9 Jan 2025 09:38:40 -0800 Subject: [PATCH 3/8] updates --- .../Open-Telemetry-Export.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md b/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md index 4267ac3e82..83b4279f39 100644 --- a/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md +++ b/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md @@ -458,10 +458,10 @@ The following interface statistics are collected and exported when you configure | Name | Description | |------ | ----------- | -| `nvswitch_interface_time_since_last_clear` | The time passed since the last counters clear event in msec. | -| `nvswitch_interface_phy_received_bits` | The total amount of traffic (bits) received. | +| `nvswitch_interface_time_since_last_clear` | Time passed since the last counters clear event in msec. | +| `nvswitch_interface_phy_received_bits` | Total amount of traffic (bits) received. | | `nvswitch_interface_phy_symbol_errors` | Error bits not corrected by the FEC correction algorithm or when FEC is not active. | -| `nvswitch_interface_phy_effective_errors` | The number of errors after FEC is applied. | +| `nvswitch_interface_phy_effective_errors` | Number of errors after FEC is applied. | | `nvswitch_interface_phy_raw_errors_lane0` | Error bits identified on lane 0. When FEC is enabled, this induction corresponds to corrected errors. | | `nvswitch_interface_phy_raw_errors_lane1` | Error bits identified on lane 1. When FEC is enabled, this induction corresponds to corrected errors. | | `nvswitch_interface_phy_raw_errors_lane2` | Error bits that were identified on lane 2. When FEC is enabled, this induction corresponds to corrected errors. | @@ -483,7 +483,7 @@ The following interface statistics are collected and exported when you configure The following interface statistics are collected and exported when you configure the `nv set system telemetry buffer-stats export state enable` command: -| Name | Description | +|
Name | Description | |------ | ----------- | | `nvswitch_interface_shared_buffer_port_pg_curr_occupancy` | Current buffer occupancy. | | `nvswitch_interface_shared_buffer_port_pg_watermark` | Maximum buffer occupancy. | From f9bdd8ff3169c190743c51cbe2cf64adb15a330f Mon Sep 17 00:00:00 2001 From: cumulusAnia Date: Thu, 9 Jan 2025 09:53:04 -0800 Subject: [PATCH 4/8] updates --- .../Installation-Management/Adding-and-Updating-Packages.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/content/cumulus-linux-512/Installation-Management/Adding-and-Updating-Packages.md b/content/cumulus-linux-512/Installation-Management/Adding-and-Updating-Packages.md index c6ce39c89c..e27ceb7ddc 100644 --- a/content/cumulus-linux-512/Installation-Management/Adding-and-Updating-Packages.md +++ b/content/cumulus-linux-512/Installation-Management/Adding-and-Updating-Packages.md @@ -222,7 +222,8 @@ Cumulus Linux provides commands to: {{< tabs "TabID218 ">}} {{< tab "NVUE Commands ">}} -To fetch a repository key from a remote location, run the `nv action fetch system packages key ` command. By default, Cumulus Linux saves the key in the directory based on the scope value you provide; `global` or `repository`. The default scope is `global`, where the key is saved in the `/etc/apt/trusted.gpg.d` directory. If you set the scope to `repository`, the key is saved in the `/etc/apt/keyrings` directory. +- To fetch and save a key globally, run the `nv action fetch system packages key ` command. Cumulus Linux fetches the key and saves it globally in the `/etc/apt/trusted.gpg.d/` directory. This is the default. +- To fetch and save a key for a specific repository, run the `nv action fetch system packages key scope repository` command. Cumulus Linux fetches the key and saves it in the `/etc/apt/keyrings/` directory. The following example fetches the repository key `http://deb.opera.com/archive.key` and saves it in the `/etc/apt/trusted.gpg.d` directory: From 45fd16241bff31824093a03ea0c2052e116af900 Mon Sep 17 00:00:00 2001 From: rachel-netq Date: Thu, 9 Jan 2025 13:43:52 -0500 Subject: [PATCH 5/8] air copyedits --- content/nvidia-air/Whats-New.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/nvidia-air/Whats-New.md b/content/nvidia-air/Whats-New.md index 7a4728e71e..dec4cf50f3 100644 --- a/content/nvidia-air/Whats-New.md +++ b/content/nvidia-air/Whats-New.md @@ -10,8 +10,8 @@ Check out the latest updates to {{}}. -{{%/notice%}} - You can upgrade Cumulus Linux in one of two ways: - Install a new Cumulus Linux image with either {{}} or [ONIE](## "Open Network Install Environment"). - Upgrade only the changed packages using {{}}. @@ -15,7 +11,7 @@ You can upgrade Cumulus Linux in one of two ways: Cumulus Linux provides ISSU to upgrade an active switch with minimal disruption to the network. See {{}}. {{%notice note%}} -- To upgrade to Cumulus Linux 5.12 from Cumulus Linux 4.x or 3.x, you must install a disk image of the new release. You *cannot* upgrade packages with package upgrade. +- To upgrade to Cumulus Linux 5.12 from Cumulus Linux 4.4 or earlier, you must install a disk image of the new release. You *cannot* upgrade packages with package upgrade. - Upgrading an MLAG pair requires additional steps. If you are using MLAG to dual connect two Cumulus Linux switches in your environment, follow the steps in [Upgrade Switches in an MLAG Pair](#upgrade-switches-in-an-mlag-pair) below to ensure a smooth upgrade. {{%/notice%}} @@ -277,25 +273,25 @@ To upgrade the switch with ONIE: Run **package upgrade** if you are upgrading from one Cumulus Linux 5.x release to a later 5.x release, and if you use third-party applications (package upgrade does not replace or remove third-party applications, unlike the Cumulus Linux image install). -*Package upgrade* always updates to the latest available release in the Cumulus Linux repository. For example, if you are currently running Cumulus Linux 5.0.0 and perform a package upgrade, the packages upgrade to the latest releases in the latest 5.x release. +*Package upgrade* always updates to the latest available release in the Cumulus Linux repository. For example, if you are currently running Cumulus Linux 5.0.0 and perform a package upgrade, the packages upgrade to the latest 5.x release. When you use package upgrade to upgrade the switch, configuration data stays in place during the upgrade. If the new release updates a previously changed configuration file, the upgrade process prompts you to either specify the version you want to use or evaluate the differences. {{%notice note%}} -- You cannot upgrade the switch to a new release train. For example, you **cannot** upgrade the switch from 4.x to 5.x. +- You cannot upgrade the switch to a new release train. For example, you **cannot** use package upgrade to upgrade the switch from 4.x to 5.x. - Package upgrade only supports the current version plus two. For example, you can upgrade from Cumulus Linux 5.6 to 5.8 with package upgrade only if you installed the 5.6 binary image. - The package upgrade command might restart or stop services as part of the upgrade process. - The package upgrade command might disrupt core services by changing core service dependency packages. - After you upgrade, account UIDs and GIDs created by packages might be different on different switches, depending on the configuration and package installation history. -- Cumulus Linux does not support the `sudo -E apt-get dist-upgrade` command. Be sure to use `sudo -E apt-get upgrade` when upgrading packages. +- Cumulus Linux does not support the Linux `sudo -E apt-get dist-upgrade` command. Be sure to use `sudo -E apt-get upgrade` when upgrading packages. - To upgrade from Cumulus Linux 5.11 to Cumulus Linux 5.12, you need 0.8GB of free disk space. Before you upgrade, run the NVUE `nv show system disk usage` command or the Linux `sudo df -h` command to show how much disk space you are currently using on the switch. {{%/notice%}} - + To upgrade the switch with package upgrade: {{< tabs "TabID253 ">}} @@ -575,29 +571,13 @@ NVIDIA has not tested running different versions of Cumulus Linux on MLAG peer s {{< /tab >}} {{< /tabs >}} -## Roll Back a Cumulus Linux Installation - -Even the most well planned and tested upgrades can result in unforeseen problems and sometimes the best solution is to roll back to the previous state. These main strategies require detailed planning and execution: - -- Flatten and rebuild. If the OS becomes unusable, you can use orchestration tools to reinstall the previous OS release from scratch and then rebuild the configuration automatically. -- Restore to a previous state using a backup configuration captured before the upgrade. - -The method you employ is specific to your deployment strategy. Providing detailed steps for each scenario is outside the scope of this document. - ## Third Party Packages If you install any third party applications on a Cumulus Linux switch, configuration data is typically installed in the `/etc` directory, but it is not guaranteed. It is your responsibility to understand the behavior and configuration file information of any third party packages installed on the switch. -After you upgrade using a full Cumulus Linux image install, you need to reinstall any third party packages or any Cumulus Linux add-on packages. +After you upgrade using a full Cumulus Linux image install, you need to reinstall any third party packages. ## Considerations - The `/etc/os-release` and `/etc/lsb-release` files update to the currently installed Cumulus Linux release when you upgrade the switch using either *package upgrade* or *Cumulus Linux image install*. For example, if you perform a package upgrade and the latest Cumulus Linux release on the repository is 5.9.1, these two files display the release as 5.9.1 after the upgrade. - The `/etc/image-release` file updates **only** when you run a Cumulus Linux image install. Therefore, if you run a Cumulus Linux image install of Cumulus Linux 5.9.0, followed by a package upgrade to 5.9.1, the `/etc/image-release` file continues to display Cumulus Linux 5.9.0, which is the originally installed base image. - -## Related Information - -- {{}} -- {{}} -- {{}} -- {{}} diff --git a/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md b/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md index 83b4279f39..32a964e638 100644 --- a/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md +++ b/content/cumulus-linux-512/Monitoring-and-Troubleshooting/Open-Telemetry-Export.md @@ -25,17 +25,29 @@ You can enable open telemetry for [interface statistics](#interface-statistics), ### Interface Statistics -When you enable open telemetry for interface statistics, the switch exports [counters](#interface-statistic-format) on all configured interfaces: +When you enable open telemetry for interface statistics, the switch exports [interface statistics](#interface-statistic-format) on all configured interfaces: ``` cumulus@switch:~$ nv set system telemetry interface-stats export state enabled cumulus@switch:~$ nv config apply ``` +You can adjust the interface statistics sample interval (in seconds). You can specify a value between 1 and 86400. The default value is 1. + +``` +cumulus@switch:~$ nv set system telemetry interface-stats sample-interval 100 +cumulus@switch:~$ nv config apply +``` + +You can enable these additional interface statistics: +- Traffic Class and Switch Priority metrics for ingress buffer traffic classes (0 through 15) and egress buffer priority groups (0 through 7) +- PHY BER for interface PHY metrics +- Buffer occupancy and watermark metrics + {{< tabs "TabID35 ">}} {{< tab "Traffic Class and Switch Priority ">}} -You can enable additional interface statistic collection per interface for specific ingress buffer traffic classes (0 through 15) and egress buffer priority groups (0 through 7). When you enable these settings, the switch exports `interface_pg` and `interface_tc` counters for the defined priority groups and traffic classes: +When you enable these settings, the switch exports `interface_pg` and `interface_tc` counters for the defined priority groups and traffic classes: ``` cumulus@switch:~$ nv set system telemetry interface-stats ingress-buffer priority-group 4 @@ -50,13 +62,6 @@ cumulus@switch:~$ nv set system telemetry interface-stats switch-priority 4 cumulus@switch:~$ nv config apply ``` -You can adjust the interface statistics sample interval (in seconds). You can specify a value between 1 and 86400. The default value is 1. - -``` -cumulus@switch:~$ nv set system telemetry interface-stats sample-interval 100 -cumulus@switch:~$ nv config apply -``` - {{< /tab >}} {{< tab "PHY BER">}} @@ -66,7 +71,7 @@ cumulus@switch:~$ nv config apply ``` {{< /tab >}} -{{< tab "Buffer">}} +{{< tab "Buffer Occupancy">}} ``` cumulus@switch:~$ nv set system telemetry buffer-stats export state enable @@ -479,11 +484,11 @@ The following interface statistics are collected and exported when you configure | `nvswitch_interface_raw-ber-lane7` | raw_ber-lane7 = raw_ber_coef_lane0*10^(raw_ber_magnitude) | {{< /tab >}} -{{< tab "Buffer">}} +{{< tab "Buffer Occupancy">}} The following interface statistics are collected and exported when you configure the `nv set system telemetry buffer-stats export state enable` command: -|
Name | Description | +| Name | Description | |------ | ----------- | | `nvswitch_interface_shared_buffer_port_pg_curr_occupancy` | Current buffer occupancy. | | `nvswitch_interface_shared_buffer_port_pg_watermark` | Maximum buffer occupancy. | diff --git a/content/cumulus-linux-512/Whats-New/_index.md b/content/cumulus-linux-512/Whats-New/_index.md index 80448fa1f4..6f4983552e 100644 --- a/content/cumulus-linux-512/Whats-New/_index.md +++ b/content/cumulus-linux-512/Whats-New/_index.md @@ -13,7 +13,7 @@ This document supports the Cumulus Linux 5.12 release, and lists new platforms, ### Platforms - NVIDIA SN5400 ITU-T G.82732 Class C compliant -- NVIDIA SN2201M includes an updated Parameter-Set IDentification (PSID) and INI. You cannot downgrade the switch to 5.11. +- NVIDIA SN2201M includes an updated Parameter-Set IDentification (PSID) and firmware. You cannot downgrade the switch to 5.11. ### New Features and Enhancements From c9c077126998a2a6c68437cd3757925cae3ff29f Mon Sep 17 00:00:00 2001 From: cumulusAnia Date: Thu, 9 Jan 2025 12:14:45 -0800 Subject: [PATCH 7/8] updates --- content/cumulus-linux-512/Whats-New/_index.md | 41 +++++++++++++------ 1 file changed, 29 insertions(+), 12 deletions(-) diff --git a/content/cumulus-linux-512/Whats-New/_index.md b/content/cumulus-linux-512/Whats-New/_index.md index 6f4983552e..3969f0bcc0 100644 --- a/content/cumulus-linux-512/Whats-New/_index.md +++ b/content/cumulus-linux-512/Whats-New/_index.md @@ -63,7 +63,14 @@ nv show system disk usage nv show system log nv show system log file nv show system log component - +nv show system packages +nv show system packages keys +nv show system packages keys +nv show system packages repository +nv show system packages repository +nv show system packages repository distribution +nv show system packages repository distribution +nv show system packages repository distribution pool ``` {{< /tab >}} @@ -72,6 +79,13 @@ nv show system log component ``` nv set qos roce mode lossless-single-ipool nv set system counter rates load-interval +nv set system packages repository distribution pool +nv set system packages repository insecure +nv set system packages repository key +nv set system packages repository source +nv set system packages use-vrf +nv set system telemetry buffer-stats export state +nv set system telemetry interface-stats class phy-stats state nv set vrf router bgp peer-group graceful-shutdown nv set vrf router bgp address-family advertise-origin nv set vrf router bgp address-family nhg-per-origin @@ -82,6 +96,13 @@ nv set vrf router bgp address-family nhg-per-origin ``` nv unset system counter rates load-interval +nv unset system packages repository distribution pool +nv unset system packages repository insecure +nv unset system packages repository key +nv unset system packages repository source +nv unset system packages use-vrf +nv unset system telemetry buffer-stats export state +nv unset system telemetry interface-stats class phy-stats state nv unset vrf router bgp peer-group graceful-shutdown nv unset vrf router bgp address-family advertise-origin nv unset vrf router bgp address-family nhg-per-origin @@ -98,8 +119,12 @@ nv action clear bridge domain mac-table dynamic interface mac-table dynamic mac vlan nv action clear bridge domain mac-table dynamic mac interface nv action clear bridge domain mac-table dynamic mac vlan +nv action delete system log component file ` +nv action delete system log file +nv action delete system packages key +nv action fetch system packages key +nv action fetch system packages key scope nv action lookup vrf router fib -nv action reset platform transceiver nv action ping system nv action ping system count nv action ping system interval @@ -110,22 +135,14 @@ nv action ping system source nv action ping system vrf nv action ping system l3protocol nv action ping system source-interface +nv action reset platform transceiver nv action traceroute interface nv action traceroute interface packet_len nv action traceroute interface hop-count nv action traceroute interface source-address nv action traceroute interface protocol -nv action delete system log component file ` -nv action delete system log file -nv action upload system log file nv action upload system log component file -``` - -{{< /tab >}} -{{< tab "nv config ">}} - -``` - +nv action upload system log file ``` {{< /tab >}} From e3a4615a154d6c2fc5fd4f956b56a2e633b9d124 Mon Sep 17 00:00:00 2001 From: cumulusAnia Date: Thu, 9 Jan 2025 13:03:53 -0800 Subject: [PATCH 8/8] updates --- .../Adding-and-Updating-Packages.md | 44 ++++++++++--------- 1 file changed, 24 insertions(+), 20 deletions(-) diff --git a/content/cumulus-linux-512/Installation-Management/Adding-and-Updating-Packages.md b/content/cumulus-linux-512/Installation-Management/Adding-and-Updating-Packages.md index e3e023c778..cf96de9114 100644 --- a/content/cumulus-linux-512/Installation-Management/Adding-and-Updating-Packages.md +++ b/content/cumulus-linux-512/Installation-Management/Adding-and-Updating-Packages.md @@ -160,14 +160,14 @@ In some cases, installing a new package also upgrades additional existing packag ## Configure Additional Repositories -As shipped, Cumulus Linux searches the Cumulus Linux repository for available packages. You can add additional repositories to search by adding them to the list of sources that Cumulus Linux consults. +As shipped, Cumulus Linux searches the Cumulus Linux repository for available packages. You can configure additional repositories to search by adding them to the list of sources that Cumulus Linux consults. {{%notice note%}} - NVIDIA adds features or makes bug fixes to certain packages; do not replace these packages with versions from other repositories. - NVIDIA does not test and Cumulus Linux Technical Support does not support packages that are not part of the Cumulus Linux repository. {{%/notice%}} -To add an additional repository: +To configure an additional repository: - Provide the repository location, distribution, and pool. - Either set the repository to trusted or provide the secure key. - Enable repository source to add source files from the repository (optional). @@ -176,7 +176,7 @@ To add an additional repository: {{< tabs "TabID176 ">}} {{< tab "NVUE Commands ">}} -The following example adds the repository located at `http://test.myrepo.com` with distribution `mydist` and pool `mypool`, enables source files from the repository, and sets the repository to trusted. The example also sets the VRF to `default`. +The following example configures the repository located at `http://test.myrepo.com` with distribution `mydist` and pool `mypool`, enables source files from the repository, and sets the repository to trusted. The example also sets the VRF to `default`. ``` cumulus@switch:~$ nv set system packages use-vrf default @@ -185,7 +185,7 @@ cumulus@switch:~$ nv set system packages repository http://test.myrepo.com sourc cumulus@switch:~$ nv set system packages repository http://test.myrepo.com insecure enabled ``` -The following example adds the repository located at `http://test.myrepo.com` with distribution `mydist` and pool `mypool`, enables source files from the repository, and provides the secure key `thekey.asc`. +The following example configures the repository located at `http://test.myrepo.com` with distribution `mydist` and pool `mypool`, enables source files from the repository, and provides the secure key `thekey.asc`. ``` cumulus@switch:~$ nv set system packages repository http://test.myrepo.com distribution mydist pool mypool @@ -196,15 +196,15 @@ cumulus@switch:~$ nv set system packages repository http://test.myrepo.com key t {{< /tab >}} {{< tab "Linux Command ">}} -Edit the `/etc/apt/sources.list` file and add the repository. +Edit the `/etc/apt/sources.list` file to configure the repository. -The following example adds the repository located at `http://test.myrepo.com` with distribution `mydist` and pool `mypool`, enables source files from the repository, and sets the repository to trusted. The example also sets the VRF to `default`. +The following example configures the repository located at `http://test.myrepo.com` with distribution `mydist` and pool `mypool`, enables source files from the repository, and sets the repository to trusted. The example also sets the VRF to `default`. ``` debdeb-src http://test.myrepo.com mydist mypool ``` -The following example adds the repository located at `http://test.myrepo.com` with distribution `mydist` and pool `mypool`, enables source files from the repository, and provides the secure key `thekey.asc`. +The following example configures the repository located at `http://test.myrepo.com` with distribution `mydist` and pool `mypool`, enables source files from the repository, and provides the secure key `thekey.asc`. ``` deb-src [signed-by=/etc/apt/keyrings/thekey.asc] http://test.myrepo.com mydist mypool @@ -216,13 +216,13 @@ deb-src [signed-by=/etc/apt/keyrings/thekey.asc] http://test.myrepo.com mydist m ### Manage Repository Keys Cumulus Linux provides commands to: -- Fetch a repository key from a remote location and save it on the switch. +- Fetch a repository key and save it on the switch. - Delete a repository key. {{< tabs "TabID218 ">}} {{< tab "NVUE Commands ">}} -- To fetch and save a key globally, run the `nv action fetch system packages key ` command. Cumulus Linux fetches the key and saves it globally in the `/etc/apt/trusted.gpg.d/` directory. This is the default. +- To fetch and save a key globally, run the `nv action fetch system packages key ` command. Cumulus Linux fetches the key and saves it globally in the `/etc/apt/trusted.gpg.d/` directory. This is the default setting. - To fetch and save a key for a specific repository, run the `nv action fetch system packages key scope repository` command. Cumulus Linux fetches the key and saves it in the `/etc/apt/keyrings/` directory. The following example fetches the repository key `http://deb.opera.com/archive.key` and saves it in the `/etc/apt/trusted.gpg.d` directory: @@ -281,19 +281,27 @@ cumulus@switch:~$ sudo rm /etc/apt/keyrings/name.key To show the list of repositories and their details: ``` -cumulus@switch:~$ nv show system packages repository https://apps3.cumulusnetworks.com/repos/deb/ - operational applied --------------- ----------------------- ------- -insecure enabled enabled -source enabled enabled -[distribution] CumulusLinux-d12 CumulusLinux-d12 -[distribution] CumulusLinux-d12-latest CumulusLinux-d12-latest +cumulus@switch:~$ nv show system packages repository +Repository Insecure Source Distribution Pool +-------------------------------------------- -------- ------- ----------------------- ----------- +https://apps3.cumulusnetworks.com/repos/deb/ enabled enabled CumulusLinux-d12 netq-latest + CumulusLinux-d12-latest netq + upstream +https://apt.cumulusnetworks.com/repo CumulusLinux-d12-latest cumulus + netq + upstream ``` To show the details for a specific repository: ``` cumulus@switch:~$ nv show system packages repository https://apt.cumulusnetworks.com/repo + operational applied +-------------- ----------------------- ------- +insecure enabled enabled +source enabled enabled +[distribution] CumulusLinux-d12 CumulusLinux-d12 +[distribution] CumulusLinux-d12-latest CumulusLinux-d12-latest ``` To show the list of distributions for a repository: @@ -378,13 +386,9 @@ To show the list of keys: cumulus@switch:~$ nv show system packages keys Key ID Path Scope ---------------------------------------------- --------------------------------------------------------------------- ------ - debian-archive-bookworm-automatic.asc /etc/apt/trusted.gpg.d/debian-archive-bookworm-automatic.asc global - debian-archive-bookworm-security-automatic.asc /etc/apt/trusted.gpg.d/debian-archive-bookworm-security-automatic.asc global - debian-archive-bookworm-stable.asc /etc/apt/trusted.gpg.d/debian-archive-bookworm-stable.asc global - sample-test-key.asc /etc/apt/keyrings/sample-test-key.asc repository ```