Skip to content

Releases: l0crian1/nVyR

Release list

nVyR 0.1.1

nVyR 0.1.1 Latest
Latest

Choose a tag to compare

View all tags
@l0crian1 l0crian1 released this 01 Nov 01:21
0.1.1
0ebdce3

nVyR 0.1.1

This release fixes container compatibility issues, adds explicit DHCPv4 socket selection, and resolves operational command completion errors.

Containers

  • Restored Podman’s default capabilities instead of dropping them implicitly.
  • Removed the implicit NoNewPrivileges restriction. Users can choose additional restrictions through container configuration.
  • Added support for absolute host paths in volume mounts, including paths outside /config/containers.
  • Added volume ownership configuration for applications that require specific user and group IDs.

These fixes improve compatibility with images such as ntopng that perform ownership changes or switch users during startup.

DHCPv4

Added explicit socket selection globally and within VRFs:

set service dhcp-server socket-type raw|udp
set vrf name <name> service dhcp-server socket-type raw|udp
  • raw: The default. Supports direct client broadcasts and relayed requests targeting the selected address on the receiving interface.
  • udp: Supports routed relay requests, including those addressed to a dummy or loopback interface. Does not receive direct client broadcasts.

show dhcp-server listeners now displays the applied socket type.

Upgrade note: Upgrading preserves raw as the default. Deployments using a relay that targets a dummy or loopback address should explicitly configure udp. Include the interface used to reach the relay among the listeners so Kea can send replies.

CLI and operational output

  • Fixed BGP and DHCP completion errors when the corresponding configuration sections are absent.
  • Added selectable privacy-masking modes to operational output, with interface displays as the first consumer.

Documentation and testing

Updated command documentation, DHCP acceptance coverage, smoketests, and operational checks. Validated direct-client DHCP and relayed DHCP exchanges to a dummy address using native Kea.

Assets 4
Loading

nVyR 0.1.0

nVyR 0.1.0

Choose a tag to compare

View all tags
@l0crian1 l0crian1 released this 31 Oct 10:28
0.1.0
b691a14

nVyR 0.1.0 — Initial Release

Introducing nVyR, pronounced Never: a Debian-based router operating system built around a structured CLI, candidate configuration, and modern Linux networking.

This first release brings IPv4/IPv6 routing, advanced nftables firewalling, network services, and container management together in one configuration system.

Configuration and management

  • Candidate configuration with validation, comparison, commit, rollback, and revision history.
  • Commit-confirm for remote changes, including confirmation after reconnecting.
  • Delayed commits, scheduled commit cancellation, and configuration import/export.
  • Tab completion, contextual help, anchored commands, and suggestions for mistyped values.
  • Four user roles: dev-admin, sys-admin, net-admin, and read-only.
  • Disposable container-based CLI sessions for non-developer roles.
  • Image-based installation and upgrades, persistent configuration, and multiple selectable boot images.

Networking and routing

  • Ethernet, loopback, dummy, virtual Ethernet pairs, and VLAN subinterfaces.
  • Bridges with VLAN filtering and spanning tree.
  • VRFs, interface link groups, and per-interface IPv4/IPv6 settings.
  • Static IPv4/IPv6 addressing and DHCPv4 clients.
  • IPv4/IPv6 static routing and unicast BGP.
  • Routing policies using access lists, prefix lists, route maps, community lists, and AS-path lists.

Firewall and NAT

  • IPv4, IPv6, and family-neutral inet rules.
  • Stateful filtering, zone-based policies, and ingress filtering.
  • Named groups, nested group inclusion, concatenated match-groups, and maps with default results.
  • GeoIP, domain-based, and dynamically learned address groups.
  • Flowtable offload, counters, rate limits, connection limits, and quotas.
  • Source validation, explicit connection-tracking helpers, and named connection timeout policies.
  • Packet and connection marks, DSCP, TTL/hop-limit, and TCP MSS modification.
  • IPv4 source NAT, destination NAT, masquerading, and port translation.
  • An optional early-boot fail-safe firewall.
  • Packet tracing with saved captures and readable explanations of the packet’s path.

Maps and match-groups allow large policies to use keyed lookups instead of long sequences of individual rules.

Services and containers

  • Kea DHCPv4/DHCPv6 servers with shared networks, reservations, inherited options, and per-VRF instances.
  • DHCP high availability in active-active and active-passive modes.
  • DNS resolver configuration and operational DNS lookups.
  • Chrony NTP client/server support, including NTS upstreams.
  • Podman containers, pods, managed networks, and persistent volumes.
  • Container capabilities, devices, resource limits, host networking, and VRF-attached networks.
  • Section-specific logging, firewall log groups, and log rotation.
  • Operational commands for interfaces, routing, firewall state, DHCP leases, containers, services, users, and system diagnostics.

Platform and validation

The release targets amd64, using Debian 13 (trixie) and Linux 6.18.59, with BIOS and UEFI installation support.

Acceptance, smoketest, and functional testing has passed across virtual and physical systems. Hardware testing has included Intel, Realtek, and Mellanox Ethernet adapters, including USB Ethernet and 10 GbE devices.

The test suites cover configuration translation, live protocol and packet behavior, and saving and restoring configuration across reboot.

Getting started

Boot the ISO and log in with:

  • Username: nvyr
  • Password: nvyr

Run install image to install to disk and create your administrator account. Secure Boot must be disabled for this unsigned image.

License

nVyR’s original code and documentation are licensed under the MIT License. Third-party components retain their respective licenses.

Copyright © 2026 L0crian and nVyR contributors.

Loading