Summary
Display in CLI and logs that pre/post-hooks have been runned successfully/failed during commits.
Use case
I have this setup:
vyos@vyos:~$ ls -la /config/scripts/commit/post-hooks.d/ total 12 drwxr-sr-x 2 vyos vyattacfg 4096 Nov 6 11:55 . drwxr-sr-x 3 vyos vyattacfg 4096 Nov 6 09:21 .. -rwxr-xr-x 1 vyos vyattacfg 593 Nov 6 09:22 cve-2026-98432
However when doing a commit in VyOS there is no visible information that these pre/post-hooks scripts have actually been runned.
This is whats currently being displayed in CLI:
vyos@vyos:~$ conf [edit] vyos@vyos# set container name ntp disable [edit] vyos@vyos# commit [edit] vyos@vyos# del container name ntp disable [edit] vyos@vyos# commit [edit] vyos@vyos# save [edit] vyos@vyos# exit exit
Also nothing is seen in sh log:
Nov 06 12:23:08 vyos-configd[790]: Received message: {"type": "init"}
Nov 06 12:23:08 vyos-configd[790]: config session pid is 5557
Nov 06 12:23:08 vyos-configd[790]: config session sudo_user is vyos
Nov 06 12:23:08 vyos-configd[790]: commit_scripts: ['container']
Nov 06 12:23:08 vyos-configd[790]: Received message: {"type": "node", "last": true, "data": "/usr/libexec/vyos/conf_mode/container.py"}
Nov 06 12:23:09 systemd[1]: Reloading.
Nov 06 12:23:09 systemd[1]: Starting VyOS Container ntp...
Nov 06 12:23:09 podman[6286]: time="2026-11-06T12:23:09+01:00" level=warning msg="The input device is not a TTY. The --tty and --interactive flags might not work properly"
Nov 06 12:23:09 podman[6286]: Your kernel does not support swap limit capabilities or the cgroup is not mounted. Memory limited without swap.
Nov 06 12:23:09 podman[6286]: 394f6fd636242a74ea42c3110d13c4c252d109bbfc735d89ea37454d1510e5ec
Nov 06 12:23:09 systemd[1]: Started VyOS Container ntp.
Nov 06 12:23:09 vyos-configd[790]: [container]
Nov 06 12:23:09 vyos-configd[790]: scripts_called: ['container']
Nov 06 12:23:09 ntp[6320]: 2026-11-06T11:23:09Z chronyd version 4.9 starting (+CMDMON +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND +NTS +SECHASH +IPV6 -DEBUG)
Nov 06 12:23:09 ntp[6320]: 2026-11-06T11:23:09Z Disabled control of system clock
Nov 06 12:23:09 watchfrr[1873]: [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
Nov 06 12:23:09 watchfrr[1873]: [VTVCM-Y2NW3] Configuration Read in Took: 00:00:00
Nov 06 12:23:09 watchfrr[1873]: [WFP93-1D146] configuration write completed with exit code 0
Nov 06 12:23:09 vyos-configd[790]: Sending reply: SUCCESS with output
Nov 06 12:23:10 systemd[1]: opt-vyatta-config-tmp-new_config_5557.mount: Deactivated successfully.
Nov 06 12:23:11 commit[6482]: Successful change to active configuration by user vyos on /dev/pts/0
Nov 06 12:23:13 ntp[6320]: 2026-11-06T11:23:13Z Selected source 10.99.0.100
Nov 06 12:23:19 systemd[1]: opt-vyatta-config-tmp-new_config_5557.mount: Deactivated successfully.Would have been handy if something like this would have been displayed in CLI and log:
Post-hook script: /config/scripts/commit/post-hooks.d/cve-2026-98432: SUCCESS
Additional information
Would be handy with some visibility on whats going on. Also makes it easier to spot if something unexpected happens. Such as if a post-hooks script doesnt run at as expected as reported in https://vyos.dev/T9583 .